last executing test programs: 1m17.188572784s ago: executing program 2 (id=966): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x88}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 1m16.162548977s ago: executing program 2 (id=969): pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400), &(0x7f0000000480)={&(0x7f0000000440)={[0x7]}, 0x8}) 1m15.376582578s ago: executing program 2 (id=970): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000003100)=ANY=[@ANYRESHEX, @ANYRES16]) add_key$user(0x0, &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) iopl(0x3) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x40000000000001, 0x0, 0x1, 0x0) syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x112, &(0x7f0000000280)={0x0, 0x408c, 0x100, 0x8, 0x40}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_LINKAT={0x27, 0x1d, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x3400, 0x1}) io_uring_enter(r1, 0x47f6, 0xb277, 0x0, 0x0, 0x0) 1m15.119939135s ago: executing program 2 (id=974): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000000)={0x80000001, 0x1, {0x0, 0x0, 0x7, 0x1, 0x7035}}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001b00)=""/102392, 0x18ff8) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000280)}, 0x10) socket$kcm(0x1e, 0x4, 0x0) r1 = socket$kcm(0x1e, 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x101d0) sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x1458}, 0x48800) r2 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) 1m14.3578799s ago: executing program 2 (id=976): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg$sock(r0, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000019c0)}, {0x0}], 0x2}}], 0x1, 0x200050c0) 1m13.328033306s ago: executing program 2 (id=984): r0 = syz_io_uring_setup(0x4460, &(0x7f0000000000)={0x0, 0x7ee7, 0x40, 0x2, 0x1ab}, &(0x7f0000000080), &(0x7f00000000c0)) sync() io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000100)=[0x6, 0x1000], 0x2) 1m1.501410197s ago: executing program 1 (id=1054): ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0xffff0000, 0x0, 0xf000, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xddccb000, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x81, 0x0, 0x44, 0xe, 0x0, 0x3}, {0x10b002, 0x2000, 0xc, 0xfd, 0x80, 0x0, 0x3}, {0x1000, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x1a, 0xa8}, {0x10000, 0xd000, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0xfc, 0x86, 0xfe}, {0xeeee8000, 0x80a0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x4}, {0xd000, 0x80a0000, 0x0, 0x82, 0x0, 0x10, 0x4, 0xe}, {0x6000}, {0x1, 0xfffe}, 0x60050031, 0x0, 0x0, 0x10, 0x1, 0x0, 0x900, [0x0, 0x0, 0x10000, 0x3]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002"], 0x7c}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xf7f54000, 0x0, 0xf000, 0x0, 0x7d, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xddccb000, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x81, 0x0, 0x44, 0xe, 0x0, 0x3}, {0x10b002, 0x2000, 0xc, 0xfd, 0x80, 0x0, 0x3}, {0x1000, 0x80a0000, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x1a, 0xa8}, {0x10000, 0xffff1000, 0x0, 0x0, 0x8, 0x8f, 0x0, 0x0, 0x0, 0xfc, 0x86, 0xfe}, {0x1, 0x80a0000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x80, 0x0, 0x4}, {0xd000, 0x80a0000, 0x0, 0x82, 0x0, 0x10, 0x4, 0xe}, {0x6000}, {0x1, 0xfffe}, 0x40040000, 0x0, 0x0, 0x10, 0x1, 0x4800, 0x900, [0x0, 0x0, 0x10000, 0xfff]}) ioctl$KVM_SET_MSRS(r2, 0x4140aecd, &(0x7f0000000100)) 1m0.564407306s ago: executing program 1 (id=1060): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) close(r2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r3}, &(0x7f0000000500), &(0x7f0000000540)=r2}, 0x20) close(r1) 1m0.110364993s ago: executing program 1 (id=1064): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events.local\x00', 0x275a, 0x0) ftruncate(r2, 0x2000009) sendfile(r0, r2, 0x0, 0x7ffff004) 59.601091926s ago: executing program 1 (id=1065): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000200)={@void, @void, @eth={@multicast, @local, @val={@val={0x88a8, 0x0, 0x1, 0x4}, {0x8100, 0x2, 0x0, 0x1}}, {@mpls_mc={0x8847, {[], @ipv4=@tcp={{0x5, 0x4, 0x1, 0x5, 0x28, 0x68, 0x0, 0x7, 0x6, 0x0, @rand_addr=0x64010100, @multicast2}, {{0x4e23, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x8, 0x0, 0x2}}}}}}}}, 0x3e) 58.441283534s ago: executing program 1 (id=1069): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000000080), &(0x7f00000000c0)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 58.269602476s ago: executing program 32 (id=984): r0 = syz_io_uring_setup(0x4460, &(0x7f0000000000)={0x0, 0x7ee7, 0x40, 0x2, 0x1ab}, &(0x7f0000000080), &(0x7f00000000c0)) sync() io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000100)=[0x6, 0x1000], 0x2) 58.103350826s ago: executing program 1 (id=1074): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x3) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000a40)='./file0\x00') clock_gettime(0x0, &(0x7f00000005c0)={0x0, 0x0}) recvmmsg$unix(r2, &(0x7f0000000580)=[{{&(0x7f0000000440), 0x6e, &(0x7f00000004c0)=[{&(0x7f00000003c0)=""/1, 0x1}], 0x1, &(0x7f0000000540)}}], 0x1, 0x0, &(0x7f0000000600)={r6, r7+10000000}) sync() syz_open_dev$tty1(0xc, 0x4, 0x1) rename(&(0x7f0000000000)='./file0\x00', 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000380)='asymmetric\x00', &(0x7f0000000500)=@keyring) connect$unix(r2, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) 42.429280784s ago: executing program 33 (id=1074): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x3) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000a40)='./file0\x00') clock_gettime(0x0, &(0x7f00000005c0)={0x0, 0x0}) recvmmsg$unix(r2, &(0x7f0000000580)=[{{&(0x7f0000000440), 0x6e, &(0x7f00000004c0)=[{&(0x7f00000003c0)=""/1, 0x1}], 0x1, &(0x7f0000000540)}}], 0x1, 0x0, &(0x7f0000000600)={r6, r7+10000000}) sync() syz_open_dev$tty1(0xc, 0x4, 0x1) rename(&(0x7f0000000000)='./file0\x00', 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000380)='asymmetric\x00', &(0x7f0000000500)=@keyring) connect$unix(r2, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) 8.673235719s ago: executing program 0 (id=1260): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001b80)={{0x12, 0x1, 0x0, 0xd5, 0x7, 0xdf, 0x8, 0x10c4, 0x8244, 0xdc00, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) syz_usb_control_io$printer(r0, &(0x7f0000000000)={0x14, 0x0, 0x0}, &(0x7f0000000440)={0x34, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x19, 0x2}, 0x0}) 6.691788566s ago: executing program 3 (id=1270): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a32000000001400048008000140000000000800024000000000140000001100"], 0x88}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x7}, @NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x7, 0x2c, 0x67, 0x0, 0xf, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101}, @payload_conn={{{0x18, 0x0, 0x1, 0x0, 0x1, 0x6, 0x1, 0x2, 0x1, 0x0, 0x2, 0x8, 0x1, 0x0, 0xc, 0x4, 0x50000000, 0x4e24, 0x4e21}}}}}}}, 0x0) 5.880248165s ago: executing program 0 (id=1272): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r1, 0x5, 0x3, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="00ff00", 'bond0\x00'}}, 0x1e) sendmmsg(r8, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r10, 0x21eae}}, 0x20}}, 0x0) 5.85644197s ago: executing program 3 (id=1273): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r0}, 0x18) r1 = syz_open_dev$media(0x0, 0x2c29, 0x28004) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0x7c80, 0x0) 5.448633694s ago: executing program 3 (id=1276): creat(&(0x7f0000000540)='./file0\x00', 0x0) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') semop(0x0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}, {0x1, 0x5b7a, 0x800}], 0x2) semop(0x0, &(0x7f0000000300)=[{0x1, 0xbbdd, 0x1000}], 0x1) openat$ttynull(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$TIOCSTI(r0, 0x5412, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7d) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000200)=0x8001100) 5.253154507s ago: executing program 0 (id=1277): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 5.234844328s ago: executing program 6 (id=1278): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x12, r1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r3 = fcntl$dupfd(r2, 0x406, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 4.411257614s ago: executing program 4 (id=1279): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) move_pages(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000000), 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x9, 0x4) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) 4.284611767s ago: executing program 3 (id=1280): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) mmap$usbmon(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x13, 0xffffffffffffffff, 0x81) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) 4.114715906s ago: executing program 6 (id=1282): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder1\x00', 0x0, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f00000002c0)) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) io_uring_setup(0x66ec, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2}) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f00000021c0)='maps\x00') creat(&(0x7f0000000100)='./bus\x00', 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.swap.events\x00', 0x275a, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYRES16=r0], 0x0) 3.549452164s ago: executing program 0 (id=1283): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x1, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000e80)={0x2c, &(0x7f0000000c40)={0x0, 0x17, 0x4, "258815e0"}, 0x0, 0x0, 0x0, 0x0}) 3.421825541s ago: executing program 3 (id=1284): r0 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x44080) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000040)="363c8f3fca5d66571e583e7c88a8", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x88a8, r3, 0x1, 0x0, 0x6, @remote}, 0x14) 3.327204325s ago: executing program 5 (id=1286): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r0}, 0x18) r1 = syz_open_dev$media(0x0, 0x2c29, 0x28004) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0x7c80, 0x0) 3.243322431s ago: executing program 3 (id=1287): connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x5) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r2, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a8681ed391da1a71d8d", 0x63}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f1a0f9fff9e440b4", "881aae83544dfa6412f91b9057e3f415", "9dca43b6", "9ecb592c6ee49fbd"}, 0x28) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x7}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0x5, 0x0, 0xfffffc}]}, 0x10) 3.242084539s ago: executing program 4 (id=1288): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r1, 0x5, 0x3, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="00ff00", 'bond0\x00'}}, 0x1e) sendmmsg(r8, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r10, 0x21eae}}, 0x20}}, 0x0) 3.124504776s ago: executing program 5 (id=1289): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000118110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r2}, 0x10) r3 = socket(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r4, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)=r5}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r6, &(0x7f0000000400)="e8", &(0x7f0000000480)=@tcp6=r3, 0x1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0x5, 0xd50, 0x0, &(0x7f0000000000)="6121eed4cd50bb2b01e841acde1a", 0x0, 0x2a1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 2.90517326s ago: executing program 5 (id=1290): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) syz_io_uring_setup(0x12de, &(0x7f0000000300)={0x0, 0x2000, 0x10100}, &(0x7f0000000100), &(0x7f0000000180)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) 2.055359982s ago: executing program 4 (id=1291): socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sendfile(r1, r0, &(0x7f00000000c0)=0x8b, 0x100000500) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x400000000000000, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 1.711901234s ago: executing program 6 (id=1292): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x12, r1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r3 = fcntl$dupfd(r2, 0x406, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 1.456382114s ago: executing program 6 (id=1293): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a8681ed391da1a71d8d", 0x63}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f1a0f9fff9e440b4", "881aae83544dfa6412f91b9057e3f415", "9dca43b6", "9ecb592c6ee49fbd"}, 0x28) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) 1.070022432s ago: executing program 5 (id=1294): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) mmap$usbmon(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x13, 0xffffffffffffffff, 0x81) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) 672.931222ms ago: executing program 4 (id=1295): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000800)={0x0, {0xfffffff9, 0x0, 0x8, 0x3, 0x3, 0xbb}}) write$uinput_user_dev(r0, &(0x7f0000000240)={'syz0\x00', {0x9, 0x1, 0x2, 0x3}, 0x2, [0x5, 0x5, 0x81, 0x8, 0x4, 0x1000, 0x50000, 0x1, 0x10001, 0xffffa103, 0x3, 0x6, 0x6, 0x6, 0x7, 0x3, 0x6, 0x0, 0x40, 0x5, 0x1cac, 0x3eb, 0xb8f, 0x3, 0x400, 0x40, 0x6, 0x0, 0xfffffffa, 0xdc, 0xffffffff, 0xa1bc, 0x0, 0x7, 0x6, 0x6, 0x3, 0x1, 0x0, 0x0, 0x2, 0x400, 0x7a08, 0x200, 0x3, 0x6, 0x7ff, 0x7e, 0x4, 0x7, 0xe, 0x9, 0x5, 0xa, 0x3, 0x2, 0xf7, 0xfff, 0x71, 0x5, 0x1ac0, 0x4f, 0x6, 0x8], [0x5, 0x3ff, 0x6, 0xea, 0x3, 0x0, 0xca, 0x1c5936c5, 0x2a, 0xfffffff8, 0x4, 0x1, 0x7, 0x6, 0xa, 0x4, 0x2, 0x4, 0x5, 0x2, 0x0, 0x6, 0x0, 0x1, 0x9, 0x6, 0x5e5893ee, 0xfffffff7, 0x9, 0x10000, 0x3, 0x8001, 0x2e6d, 0x7ff, 0x1, 0x1000, 0x877, 0x9, 0x8, 0x8, 0x80000000, 0xfff, 0x5, 0x7, 0x8, 0x5, 0x75da, 0x2, 0x5, 0xe8, 0x3, 0x9, 0x5, 0x7, 0xb99c, 0x2, 0x1, 0x4, 0x4, 0x1, 0x1, 0x9, 0x2, 0xc406], [0x80000001, 0x2, 0x9, 0x9, 0x0, 0xb9, 0x897, 0x100005, 0x3, 0x4, 0x2, 0x5, 0x3, 0x9, 0x9, 0x7, 0x9, 0x61, 0x9, 0x5, 0x9, 0x8, 0x2, 0x6, 0x8001, 0x4, 0xc, 0x80000000, 0x7fffffff, 0x5, 0x1, 0x6, 0x8, 0x3, 0x2, 0x5, 0x5, 0x60, 0x1, 0x24, 0x9, 0x2000000, 0x4, 0xff, 0x7, 0x3eef6cc9, 0x2, 0x7, 0x7, 0x8bd, 0x9, 0xfffffff9, 0x80000001, 0x5, 0xffffff1d, 0x6, 0x0, 0xa, 0xfff, 0xfff, 0x1, 0x1, 0x19ee, 0xfffffff9], [0x0, 0x10, 0x101, 0x2, 0x4, 0x9c500, 0xef, 0x8, 0xc61, 0x7, 0xd, 0x358, 0xd567, 0x1d5, 0xc8b, 0x658, 0xcbfd, 0x101, 0x6, 0x0, 0x20000b, 0x5, 0x6, 0x3, 0xfffffff8, 0xb26, 0x3ff, 0x6, 0x9, 0x0, 0x1, 0xf412, 0x2, 0x2, 0x2000002, 0x3, 0x3, 0x9, 0x4, 0x5, 0x3, 0x3, 0xfffffff3, 0x8000, 0x6, 0x6, 0xffff, 0x80, 0xf, 0xfff, 0xfff, 0xffff, 0xfffffffe, 0x2, 0xb975, 0x1, 0x5e1, 0xa, 0xffff58ee, 0x2, 0x2530, 0x4, 0x26da282, 0xc]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b000000000000"], 0x48) socket(0x25, 0x5, 0x0) setresuid(0x0, 0x0, 0xffffffffffffffff) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x100) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000000)={0x4, 0xfffffffffffffffd, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x1, 0x0, 0x8, 0xfffffffffffffffe, 0x0, 0x2, 0x7}, 0x0, 0x0) 617.850055ms ago: executing program 0 (id=1296): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="5000000010000304000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="05a00200000000002800128009000100766c616e00000000180002800c000200540a00001d000000060001000000", @ANYRES32=r2], 0x50}, 0x1, 0xba01}, 0x20) 507.284314ms ago: executing program 6 (id=1297): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000041c0)=@base={0x2, 0x4, 0x9, 0x9}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 356.462024ms ago: executing program 5 (id=1298): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x44080) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000040)="363c8f3fca5d66571e583e7c88a8", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x88a8, r3, 0x1, 0x0, 0x6, @remote}, 0x14) 189.220318ms ago: executing program 4 (id=1299): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) 141.612054ms ago: executing program 0 (id=1300): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x21, 0x0, 0x0) mkdir(&(0x7f0000000040)='./control\x00', 0x0) setfsuid(0xee00) setresuid(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000800)={0x0, {0xfffffff9, 0x0, 0x8, 0x3, 0x3, 0xbb}}) write$uinput_user_dev(r2, &(0x7f0000000240)={'syz0\x00', {0x9, 0x1, 0x2, 0x6}, 0x0, [0x5, 0x5, 0x1000081, 0x7, 0x4, 0x1000, 0x50000, 0x1, 0x10001, 0xffffa103, 0x3, 0x6, 0x9, 0x6, 0x7, 0x3, 0x6, 0x0, 0x40, 0x2, 0x1cac, 0x3eb, 0xb8f, 0x3, 0x6f02, 0x40, 0x6, 0x0, 0xfffffffa, 0xdc, 0xffffffff, 0xa1bc, 0x200, 0x7, 0x6, 0x6, 0x8, 0x1, 0x0, 0x0, 0x2, 0x400, 0x7a08, 0x203, 0x3, 0x101, 0x7ff, 0x7f, 0x1c, 0x7, 0xe, 0x9, 0x5, 0xa, 0x3, 0x2, 0xf7, 0xfff, 0x171, 0x5, 0x1ac0, 0x4f, 0x6, 0x8], [0x5, 0x3ff, 0x6, 0xea, 0x3, 0x0, 0xca, 0x1c5936c5, 0x9, 0xfffffff8, 0x4, 0x1, 0x7, 0x6, 0xa, 0x4, 0x2, 0x4, 0x5, 0x2, 0x0, 0x6, 0x0, 0x1, 0x9, 0x6, 0x5e5893ea, 0xfffffff7, 0x9, 0x10000, 0x3, 0x8001, 0x2e6d, 0x7ff, 0x1, 0x1000, 0x877, 0x9, 0x8, 0x8, 0x80000000, 0xfff, 0x5, 0x7, 0x8, 0x5, 0x75da, 0x2, 0x5, 0xe8, 0x3, 0x9, 0x5, 0x7, 0xb99c, 0x2, 0x1, 0x20000004, 0x4, 0x1, 0x1, 0x9, 0x2, 0xc406], [0x80000003, 0x6, 0x9, 0x9, 0x200, 0xb9, 0x897, 0x6, 0x3, 0x4, 0x2, 0x5, 0x3, 0x9, 0x9, 0x7, 0x8, 0x61, 0x9, 0x5, 0x9, 0x8, 0x2, 0x6, 0x8001, 0x4, 0xc, 0x80000000, 0x7fffffff, 0x1, 0x1, 0x6, 0x8, 0x3, 0x6, 0x5, 0x3, 0x2, 0x0, 0x24, 0x9, 0x2000000, 0x4, 0xff, 0x7, 0x3eef6cc9, 0x1, 0x40007, 0x7, 0x8bd, 0x9, 0xfffffff9, 0x80000001, 0x5, 0xffffff1d, 0x6, 0x0, 0xa, 0xfff, 0xfff, 0x1, 0x1, 0x19ee, 0xffffdff9], [0x0, 0x10, 0x101, 0x2, 0x4, 0x9c500, 0xef, 0x8, 0xc61, 0x9, 0xd, 0x358, 0xd567, 0x1d5, 0xc8b, 0x658, 0xcbfd, 0x101, 0x6, 0x5, 0xb, 0x5, 0xa, 0x3, 0x75d6, 0xb26, 0x3ff, 0x6, 0x9, 0x0, 0x1, 0xf412, 0x2, 0x2, 0x2000002, 0x3, 0x3, 0x9, 0x3, 0x5, 0xfffffffc, 0x3, 0xfffffff3, 0x8000, 0x6, 0x6, 0xffff, 0x80, 0xf, 0xfff, 0xfff, 0xffff, 0xfffffffe, 0x80, 0xb975, 0x5, 0x5e1, 0xa, 0xffff58ee, 0x2, 0x2530, 0x4, 0x26da282, 0xc]}, 0x45c) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) socket(0x10, 0x3, 0x0) 79.84514ms ago: executing program 5 (id=1301): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000003100)=ANY=[@ANYRESHEX, @ANYRES16]) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x40000000000001, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x112, &(0x7f0000000280)={0x0, 0x408c, 0x100, 0x8, 0x40}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_LINKAT={0x27, 0x1d, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x3400, 0x1}) io_uring_enter(r1, 0x47f6, 0xb277, 0x0, 0x0, 0x0) 0s ago: executing program 6 (id=1302): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r3}, 0x8) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000700)=@sack_info={0x0, 0x2, 0x6}, &(0x7f0000000740)=0xc) kernel console output (not intermixed with test programs): slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.578830][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.609904][ T5846] hsr_slave_0: entered promiscuous mode [ 102.616824][ T5846] hsr_slave_1: entered promiscuous mode [ 102.623265][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 102.631389][ T5846] Cannot create hsr debugfs directory [ 102.683145][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.690733][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.717578][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.787571][ T5840] hsr_slave_0: entered promiscuous mode [ 102.794463][ T5840] hsr_slave_1: entered promiscuous mode [ 102.801252][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 102.808897][ T5840] Cannot create hsr debugfs directory [ 102.987313][ T5841] hsr_slave_0: entered promiscuous mode [ 102.993976][ T5841] hsr_slave_1: entered promiscuous mode [ 103.001069][ T5841] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 103.009290][ T5841] Cannot create hsr debugfs directory [ 103.212384][ T5856] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 103.273274][ T5856] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 103.318955][ T5856] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 103.376932][ T5856] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 103.416642][ T5854] Bluetooth: hci1: command tx timeout [ 103.531147][ T5846] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 103.544326][ T5846] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 103.573405][ T5846] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 103.576468][ T5854] Bluetooth: hci3: command tx timeout [ 103.589743][ T5846] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 103.656278][ T5854] Bluetooth: hci4: command tx timeout [ 103.661975][ T5854] Bluetooth: hci0: command tx timeout [ 103.667610][ T5160] Bluetooth: hci2: command tx timeout [ 103.702370][ T5851] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 103.741740][ T5851] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 103.771520][ T5851] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 103.799158][ T5851] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 103.858131][ T5840] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 103.884170][ T5840] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 103.920100][ T5840] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 103.934110][ T5840] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 104.004067][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.040861][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.103307][ T5841] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 104.124087][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.141326][ T5841] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 104.152719][ T5841] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 104.168189][ T5841] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 104.201778][ T5856] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.225272][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.232670][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.255019][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.262229][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.299423][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.306688][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.324907][ T2945] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.332230][ T2945] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.544042][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.607413][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.645016][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.702677][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.710297][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.775347][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.799786][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.807152][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.857566][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.864931][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.894673][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.902120][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.932564][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.000018][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.044991][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.110596][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.117842][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.150211][ T2945] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.157493][ T2945] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.180476][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.284864][ T5846] veth0_vlan: entered promiscuous mode [ 105.371945][ T5846] veth1_vlan: entered promiscuous mode [ 105.460172][ T5856] veth0_vlan: entered promiscuous mode [ 105.499514][ T5854] Bluetooth: hci1: command tx timeout [ 105.564423][ T5846] veth0_macvtap: entered promiscuous mode [ 105.583015][ T5856] veth1_vlan: entered promiscuous mode [ 105.604659][ T5846] veth1_macvtap: entered promiscuous mode [ 105.663305][ T5854] Bluetooth: hci3: command tx timeout [ 105.715442][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.739272][ T5854] Bluetooth: hci0: command tx timeout [ 105.744794][ T5854] Bluetooth: hci2: command tx timeout [ 105.751075][ T5847] Bluetooth: hci4: command tx timeout [ 105.774157][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.822360][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.842017][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.859241][ T5856] veth0_macvtap: entered promiscuous mode [ 105.870135][ T5856] veth1_macvtap: entered promiscuous mode [ 105.896176][ T5846] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.905188][ T5846] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.914635][ T5846] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.926213][ T5846] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.014514][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.038799][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.070408][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.149041][ T5856] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.158305][ T5856] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.172390][ T5856] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.181721][ T5856] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.220564][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.231001][ T5851] veth0_vlan: entered promiscuous mode [ 106.251443][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.351171][ T5840] veth0_vlan: entered promiscuous mode [ 106.367270][ T5851] veth1_vlan: entered promiscuous mode [ 106.427899][ T5840] veth1_vlan: entered promiscuous mode [ 106.439288][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.448499][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.559853][ T1111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.579507][ T5851] veth0_macvtap: entered promiscuous mode [ 106.593505][ T1111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.614926][ T5846] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 106.637767][ T5851] veth1_macvtap: entered promiscuous mode [ 106.718383][ T1111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.740220][ T5840] veth0_macvtap: entered promiscuous mode [ 106.762026][ T1111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.763713][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.820066][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.832055][ T5840] veth1_macvtap: entered promiscuous mode [ 106.856832][ T5851] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.869681][ T5851] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.880720][ T5851] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.894537][ T5851] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.009389][ T5841] veth0_vlan: entered promiscuous mode [ 107.385297][ T5965] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 107.660902][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.729672][ T5854] Bluetooth: hci1: command tx timeout [ 107.830251][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.907489][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 108.197293][ T5854] Bluetooth: hci3: command tx timeout [ 108.203710][ T5854] Bluetooth: hci2: command tx timeout [ 108.224261][ T5854] Bluetooth: hci4: command tx timeout [ 108.244217][ T5854] Bluetooth: hci0: command tx timeout [ 108.418789][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 109.340296][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 110.073080][ T5840] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.097025][ T5840] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.115996][ T5840] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.125031][ T5840] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.155503][ T5841] veth1_vlan: entered promiscuous mode [ 110.387059][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.110157][ T5854] Bluetooth: hci4: command 0x0405 tx timeout [ 111.135748][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.296175][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 111.472395][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.482266][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.710333][ T5841] veth0_macvtap: entered promiscuous mode [ 111.718138][ T2969] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.726491][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 111.761556][ T2969] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.813170][ T5841] veth1_macvtap: entered promiscuous mode [ 111.982153][ T5982] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 111.988949][ T5982] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 112.047292][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.055396][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.108886][ T5982] vhci_hcd vhci_hcd.0: Device attached [ 112.177784][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.268833][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.311975][ T5941] vhci_hcd: vhci_device speed not set [ 112.312086][ T5841] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.329196][ T5841] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.342577][ T5841] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.352137][ T5841] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.382751][ T5987] netlink: 'syz.3.9': attribute type 4 has an invalid length. [ 112.396478][ T980] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 112.413154][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 112.422640][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 112.431912][ T5941] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 112.434928][ T5988] netlink: 'syz.3.9': attribute type 4 has an invalid length. [ 112.491052][ T5989] 9pnet_fd: Insufficient options for proto=fd [ 112.653887][ T980] usb 3-1: config 0 has no interfaces? [ 112.668689][ T980] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 112.692755][ T980] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.747938][ T980] usb 3-1: config 0 descriptor?? [ 112.946071][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 113.012864][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.046687][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 113.121019][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.163390][ T9] usb 3-1: USB disconnect, device number 2 [ 113.196600][ T5941] vhci_hcd: vhci_device speed not set [ 113.208260][ T5983] vhci_hcd: connection reset by peer [ 113.347139][ T5854] Bluetooth: hci4: command 0x0405 tx timeout [ 113.535978][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 113.676832][ T1111] vhci_hcd: stop threads [ 113.778437][ T1111] vhci_hcd: release socket [ 113.862341][ T1111] vhci_hcd: disconnect device [ 114.055651][ T5941] usb 37-1: device descriptor read/64, error -71 [ 114.265735][ T5941] vhci_hcd: vhci_device speed not set [ 114.314176][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.393606][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.667119][ T980] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 114.746217][ T43] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 115.065982][ T980] usb 3-1: Using ep0 maxpacket: 16 [ 115.112808][ T980] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 115.124669][ T980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.887638][ T6014] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 115.907416][ T43] usb 1-1: Using ep0 maxpacket: 8 [ 115.983078][ T980] usb 3-1: Product: syz [ 116.013258][ T6004] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 116.035196][ T980] usb 3-1: Manufacturer: syz [ 116.040164][ T980] usb 3-1: SerialNumber: syz [ 116.092323][ T980] r8152-cfgselector 3-1: Unknown version 0x0000 [ 116.325641][ T980] r8152-cfgselector 3-1: config 0 descriptor?? [ 117.056960][ T6022] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 117.889072][ T980] r8152-cfgselector 3-1: can't set config #0, error -71 [ 118.024627][ T6031] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 118.973922][ T980] r8152-cfgselector 3-1: USB disconnect, device number 3 [ 119.263229][ T6035] netlink: 'syz.2.17': attribute type 4 has an invalid length. [ 119.309720][ T43] usb 1-1: unable to get BOS descriptor or descriptor too short [ 119.332059][ T43] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 119.340233][ T6036] netlink: 'syz.2.17': attribute type 4 has an invalid length. [ 119.385823][ T43] usb 1-1: can't read configurations, error -71 [ 119.409270][ T6037] 9pnet_fd: Insufficient options for proto=fd [ 120.686746][ T6044] Zero length message leads to an empty skb [ 121.492788][ T6042] comedi comedi2: reset error (fatal) [ 121.841537][ T6048] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.884750][ T6048] batadv_slave_0: entered promiscuous mode [ 121.917736][ T6064] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 122.014535][ T6049] wg1: entered promiscuous mode [ 122.099216][ T6049] wg1: entered allmulticast mode [ 122.252384][ T6069] netlink: 8 bytes leftover after parsing attributes in process `syz.4.25'. [ 126.715053][ T6089] process 'syz.1.30' launched './file0' with NULL argv: empty string added [ 130.905794][ T5932] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 131.208059][ T5932] usb 1-1: Using ep0 maxpacket: 16 [ 131.224481][ T5932] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 131.266627][ T5932] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 11 [ 131.276406][ T5932] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 131.285877][ T5932] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.819028][ T6109] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 133.220515][ T6121] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 134.398139][ T5932] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 135.458070][ T24] usb 1-1: USB disconnect, device number 4 [ 135.524164][ T6132] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nullb0": -EINTR [ 136.475942][ T5932] usb 2-1: Using ep0 maxpacket: 16 [ 136.671107][ T5932] usb 2-1: device descriptor read/all, error -71 [ 139.680917][ T6170] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR [ 140.229526][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 140.245719][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 146.049398][ T6225] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 148.076554][ T43] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 148.358447][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 148.394392][ T43] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 148.423655][ T43] usb 5-1: config 0 has no interface number 0 [ 148.446313][ T43] usb 5-1: config 0 interface 12 has no altsetting 0 [ 148.500603][ T43] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=70.40 [ 148.522428][ T43] usb 5-1: New USB device strings: Mfr=231, Product=2, SerialNumber=3 [ 148.556020][ T43] usb 5-1: Product: syz [ 148.565966][ T43] usb 5-1: Manufacturer: syz [ 148.570638][ T43] usb 5-1: SerialNumber: syz [ 148.623268][ T43] usb 5-1: config 0 descriptor?? [ 148.844224][ T6238] Bluetooth: MGMT ver 1.23 [ 149.829422][ T43] f81534 5-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 149.868481][ T43] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 149.889245][ T43] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 149.913712][ T43] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 149.953147][ T43] usb 5-1: USB disconnect, device number 2 [ 150.056861][ T6246] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.67'. [ 150.959917][ T6254] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 152.175680][ T5932] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 152.345746][ T5932] usb 2-1: Using ep0 maxpacket: 8 [ 153.622690][ T6268] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.633171][ T6268] batadv_slave_0: entered promiscuous mode [ 156.416031][ T5932] usb 2-1: unable to get BOS descriptor or descriptor too short [ 156.425824][ T5932] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 156.434469][ T5932] usb 2-1: can't read configurations, error -71 [ 156.939099][ T6297] netlink: 8 bytes leftover after parsing attributes in process `syz.0.79'. [ 160.281146][ T6301] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 161.076732][ T5932] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 161.965834][ T5932] usb 2-1: Using ep0 maxpacket: 32 [ 162.020008][ T5932] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 162.035744][ T5932] usb 2-1: config 0 has no interface number 0 [ 162.072224][ T5932] usb 2-1: config 0 interface 12 has no altsetting 0 [ 162.109202][ T5932] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=70.40 [ 162.158136][ T6319] netlink: 'syz.0.84': attribute type 4 has an invalid length. [ 162.190744][ T5932] usb 2-1: New USB device strings: Mfr=231, Product=2, SerialNumber=3 [ 162.231597][ T6320] netlink: 'syz.0.84': attribute type 4 has an invalid length. [ 162.249654][ T5932] usb 2-1: Product: syz [ 162.253933][ T5932] usb 2-1: Manufacturer: syz [ 162.289545][ T5932] usb 2-1: SerialNumber: syz [ 162.322504][ T5932] usb 2-1: config 0 descriptor?? [ 164.757346][ T5932] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 164.764998][ T5932] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 165.505032][ T5932] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 165.512898][ T5932] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 165.598882][ T5932] usb 2-1: USB disconnect, device number 6 [ 166.008879][ T6335] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 167.205758][ T5924] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 167.375914][ T5924] usb 3-1: Using ep0 maxpacket: 16 [ 167.528027][ T5924] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 168.348010][ T6344] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 168.352070][ T5924] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 168.373892][ T5924] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 168.436728][ T5924] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 168.454988][ T5924] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 168.467356][ T5924] usb 3-1: config 1 interface 0 has no altsetting 0 [ 168.474064][ T5924] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 168.488763][ T5924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.516948][ T5924] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 169.247364][ T5924] scsi host1: usb-storage 3-1:1.0 [ 169.670589][ T9] usb 3-1: USB disconnect, device number 4 [ 170.915693][ T6367] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 172.150224][ T980] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 174.615405][ T24] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 184.347097][ T6418] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 185.736986][ T6429] netlink: 24 bytes leftover after parsing attributes in process `syz.2.113'. [ 185.969403][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 186.135885][ T5910] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 186.178201][ T6435] wg1: entered promiscuous mode [ 186.183224][ T6435] wg1: entered allmulticast mode [ 186.459333][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 187.056954][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 187.089683][ T9] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 187.105617][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.147953][ T9] usb 1-1: config 0 descriptor?? [ 187.195750][ T5910] usb 4-1: Using ep0 maxpacket: 32 [ 187.235414][ T5910] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 187.255789][ T5910] usb 4-1: config 0 has no interface number 0 [ 187.456922][ T5910] usb 4-1: config 0 interface 12 has no altsetting 0 [ 187.815882][ T5910] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=70.40 [ 187.834598][ T9] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 187.855855][ T5910] usb 4-1: New USB device strings: Mfr=231, Product=2, SerialNumber=3 [ 187.901580][ T5910] usb 4-1: Product: syz [ 187.922068][ T5910] usb 4-1: Manufacturer: syz [ 187.937340][ T5910] usb 4-1: SerialNumber: syz [ 187.975342][ T5910] usb 4-1: config 0 descriptor?? [ 188.103936][ T43] usb 1-1: USB disconnect, device number 6 [ 189.558255][ T5910] f81534 4-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 189.672191][ T5910] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 189.691306][ T5910] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 189.708747][ T5910] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 189.755833][ T5910] usb 4-1: USB disconnect, device number 2 [ 189.791200][ T6450] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 190.490610][ T6457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.119'. [ 193.219854][ T6473] fuse: Bad value for 'rootmode' [ 193.668666][ T6472] wg1: entered promiscuous mode [ 193.673649][ T6472] wg1: entered allmulticast mode [ 195.256325][ T6486] nbd2: detected capacity change from 0 to 1024 [ 195.476055][ T6489] nbd2: detected capacity change from 1024 to 467840 [ 195.570937][ T5850] block nbd2: Send control failed (result -89) [ 195.713781][ T5850] block nbd2: Request send failed, requeueing [ 195.723838][ T5160] block nbd2: Receive control failed (result -32) [ 195.734679][ T11] block nbd2: Dead connection, failed to find a fallback [ 195.742417][ T11] block nbd2: shutting down sockets [ 195.752684][ T11] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 195.762575][ T11] Buffer I/O error on dev nbd2, logical block 0, async page read [ 195.889555][ T5850] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 196.509048][ T5850] Buffer I/O error on dev nbd2, logical block 0, async page read [ 196.557273][ T5850] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 196.570182][ T5850] Buffer I/O error on dev nbd2, logical block 0, async page read [ 196.588096][ T5850] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 196.613164][ T5850] Buffer I/O error on dev nbd2, logical block 0, async page read [ 196.649932][ T5850] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 196.663322][ T5850] Buffer I/O error on dev nbd2, logical block 0, async page read [ 196.723269][ T5850] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 196.765708][ T5850] Buffer I/O error on dev nbd2, logical block 0, async page read [ 196.789088][ T5850] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 196.871460][ T5850] Buffer I/O error on dev nbd2, logical block 0, async page read [ 196.910672][ T5850] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 197.001310][ T5850] Buffer I/O error on dev nbd2, logical block 0, async page read [ 197.054153][ T5850] ldm_validate_partition_table(): Disk read failed. [ 197.362680][ T6510] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 197.505796][ T5160] Bluetooth: hci4: command 0x0405 tx timeout [ 197.935815][ T5850] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 197.944967][ T5850] Buffer I/O error on dev nbd2, logical block 0, async page read [ 197.954437][ T5850] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 198.073242][ T6508] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.132'. [ 198.131123][ T5850] Buffer I/O error on dev nbd2, logical block 0, async page read [ 198.189238][ T5850] Dev nbd2: unable to read RDB block 0 [ 198.234145][ T5850] nbd2: unable to read partition table [ 198.284132][ T5210] ldm_validate_partition_table(): Disk read failed. [ 198.424413][ T5210] Dev nbd2: unable to read RDB block 0 [ 198.459970][ T5210] nbd2: unable to read partition table [ 198.475425][ T5850] ldm_validate_partition_table(): Disk read failed. [ 198.518026][ T5850] Dev nbd2: unable to read RDB block 0 [ 198.552992][ T5850] nbd2: unable to read partition table [ 198.853090][ T5924] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 199.575620][ T5160] Bluetooth: hci4: command 0x0405 tx timeout [ 199.665973][ T5924] usb 1-1: Using ep0 maxpacket: 32 [ 199.738105][ T5924] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 199.792018][ T5924] usb 1-1: config 0 has no interface number 0 [ 199.800252][ T5924] usb 1-1: config 0 interface 12 has no altsetting 0 [ 199.823658][ T5924] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=70.40 [ 199.835203][ T5924] usb 1-1: New USB device strings: Mfr=231, Product=2, SerialNumber=3 [ 199.855132][ T5924] usb 1-1: Product: syz [ 199.878596][ T5924] usb 1-1: Manufacturer: syz [ 199.889018][ T5924] usb 1-1: SerialNumber: syz [ 199.916165][ T5924] usb 1-1: config 0 descriptor?? [ 201.262464][ T6531] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR [ 201.661341][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 202.219936][ T5924] f81534 1-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 202.234000][ T5924] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 202.435950][ T5924] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 202.850606][ T5924] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 202.899518][ T5924] usb 1-1: USB disconnect, device number 7 [ 204.455133][ T6570] ======================================================= [ 204.455133][ T6570] WARNING: The mand mount option has been deprecated and [ 204.455133][ T6570] and is ignored by this kernel. Remove the mand [ 204.455133][ T6570] option from the mount to silence this warning. [ 204.455133][ T6570] ======================================================= [ 205.767420][ T6572] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.146'. [ 209.592327][ T6609] wg1: entered promiscuous mode [ 209.597393][ T6609] wg1: entered allmulticast mode [ 210.655796][ T24] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 210.853288][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 211.040311][ T24] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 211.049308][ T24] usb 4-1: config 0 has no interface number 0 [ 211.055452][ T24] usb 4-1: config 0 interface 12 has no altsetting 0 [ 211.072578][ T24] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=70.40 [ 211.082227][ T24] usb 4-1: New USB device strings: Mfr=231, Product=2, SerialNumber=3 [ 211.753000][ T6618] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 211.770673][ T24] usb 4-1: Product: syz [ 211.817328][ T24] usb 4-1: Manufacturer: syz [ 211.834482][ T24] usb 4-1: SerialNumber: syz [ 212.011067][ T5931] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 212.180664][ T24] usb 4-1: config 0 descriptor?? [ 215.425589][ T5931] usb 3-1: Using ep0 maxpacket: 16 [ 215.456256][ T5931] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 215.509343][ T24] usb 4-1: can't set config #0, error -71 [ 215.522561][ T24] usb 4-1: USB disconnect, device number 3 [ 215.861053][ T5931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.875376][ T5931] usb 3-1: Product: syz [ 215.880051][ T5931] usb 3-1: Manufacturer: syz [ 215.884803][ T5931] usb 3-1: SerialNumber: syz [ 215.976170][ T5931] usb 3-1: config 0 descriptor?? [ 216.009468][ T5931] usb 3-1: can't set config #0, error -71 [ 216.029600][ T5931] usb 3-1: USB disconnect, device number 6 [ 217.170463][ T6650] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.162'. [ 220.915619][ T24] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 221.179428][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 221.205676][ T24] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 221.238746][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.277473][ T24] usb 5-1: config 0 descriptor?? [ 221.474358][ T6689] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.483699][ T6689] batadv_slave_0: entered promiscuous mode [ 221.580494][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 221.641036][ T43] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 221.699988][ T980] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 221.868551][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 221.882791][ T24] pwc: recv_control_msg error -32 req 02 val 2700 [ 221.898767][ T24] pwc: recv_control_msg error -32 req 02 val 2c00 [ 221.906855][ T24] pwc: recv_control_msg error -32 req 04 val 1000 [ 221.914665][ T24] pwc: recv_control_msg error -32 req 04 val 1300 [ 221.926627][ T24] pwc: recv_control_msg error -32 req 04 val 1400 [ 221.934391][ T24] pwc: recv_control_msg error -32 req 02 val 2000 [ 221.942440][ T24] pwc: recv_control_msg error -32 req 02 val 2100 [ 221.955304][ T24] pwc: recv_control_msg error -32 req 04 val 1500 [ 221.963737][ T24] pwc: recv_control_msg error -32 req 02 val 2500 [ 221.973511][ T24] pwc: recv_control_msg error -32 req 02 val 2400 [ 221.985469][ T24] pwc: recv_control_msg error -32 req 02 val 2600 [ 222.012938][ T24] pwc: recv_control_msg error -32 req 02 val 2900 [ 222.028340][ T980] usb 3-1: Using ep0 maxpacket: 16 [ 222.036702][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 222.049578][ T980] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 222.065924][ T24] pwc: recv_control_msg error -71 req 02 val 2800 [ 222.076002][ T43] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 222.088986][ T980] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 222.099829][ T24] pwc: recv_control_msg error -71 req 04 val 1100 [ 222.106698][ T43] usb 4-1: config 0 has no interface number 0 [ 222.118354][ T24] pwc: recv_control_msg error -71 req 04 val 1200 [ 222.125889][ T43] usb 4-1: config 0 interface 12 has no altsetting 0 [ 222.132887][ T980] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 222.177124][ T24] pwc: Registered as video103. [ 222.199049][ T43] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=70.40 [ 222.209478][ T43] usb 4-1: New USB device strings: Mfr=231, Product=2, SerialNumber=3 [ 222.219869][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input5 [ 222.231038][ T43] usb 4-1: Product: syz [ 222.235662][ T43] usb 4-1: Manufacturer: syz [ 222.241124][ T980] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 222.253717][ T980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.261994][ T43] usb 4-1: SerialNumber: syz [ 222.267149][ T980] usb 3-1: Product: syz [ 222.271659][ T980] usb 3-1: Manufacturer: syz [ 222.296569][ T43] usb 4-1: config 0 descriptor?? [ 222.325681][ T980] usb 3-1: SerialNumber: syz [ 222.333674][ T24] usb 5-1: USB disconnect, device number 3 [ 222.703618][ T6696] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 223.476541][ T980] usb 3-1: 0:2 : does not exist [ 223.934746][ T980] usb 3-1: 1:0: cannot get min/max values for control 4 (id 1) [ 224.566819][ T5849] Bluetooth: hci1: command 0x0406 tx timeout [ 224.573215][ T5849] Bluetooth: hci3: command 0x0406 tx timeout [ 224.582637][ T5849] Bluetooth: hci0: command 0x0406 tx timeout [ 224.589012][ T5855] Bluetooth: hci2: command 0x0406 tx timeout [ 224.595280][ T5849] Bluetooth: hci4: command 0x0405 tx timeout [ 225.030524][ T43] f81534 4-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 225.062681][ T43] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 225.088716][ T43] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 225.102512][ T43] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 225.123097][ T980] usb 3-1: USB disconnect, device number 7 [ 225.324274][ T43] usb 4-1: USB disconnect, device number 4 [ 227.684149][ T6726] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.179'. [ 231.406909][ T5924] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 232.675756][ T5924] usb 2-1: Using ep0 maxpacket: 16 [ 232.728959][ T6758] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR [ 233.317391][ T5924] usb 2-1: device descriptor read/all, error -71 [ 237.245612][ T6789] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR [ 238.015815][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 238.133266][ T6792] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR [ 238.425764][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 238.459488][ T9] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 238.468879][ T9] usb 4-1: config 0 has no interface number 0 [ 238.475361][ T9] usb 4-1: config 0 interface 12 has no altsetting 0 [ 238.534101][ T9] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=70.40 [ 238.552832][ T9] usb 4-1: New USB device strings: Mfr=231, Product=2, SerialNumber=3 [ 238.567677][ T9] usb 4-1: Product: syz [ 240.667641][ T9] usb 4-1: Manufacturer: syz [ 240.672493][ T9] usb 4-1: SerialNumber: syz [ 241.357270][ T43] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 241.649701][ T9] usb 4-1: config 0 descriptor?? [ 241.655543][ T9] usb 4-1: can't set config #0, error -71 [ 241.663604][ T9] usb 4-1: USB disconnect, device number 5 [ 242.705655][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 242.745217][ T43] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 242.888606][ T43] usb 2-1: config 0 has no interface number 0 [ 242.910402][ T43] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 242.925999][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.013692][ T43] usb 2-1: Product: syz [ 243.017366][ T6823] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.200'. [ 243.025702][ T43] usb 2-1: Manufacturer: syz [ 243.033508][ T43] usb 2-1: SerialNumber: syz [ 243.605811][ T43] usb 2-1: config 0 descriptor?? [ 243.635813][ T43] usb 2-1: can't set config #0, error -71 [ 243.686754][ T43] usb 2-1: USB disconnect, device number 9 [ 246.246807][ T6848] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 247.336196][ T6855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.207'. [ 248.543023][ T980] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 249.128265][ T980] usb 2-1: Using ep0 maxpacket: 8 [ 249.735592][ T6861] comedi comedi2: reset error (fatal) [ 251.477435][ T980] usb 2-1: device descriptor read/all, error -71 [ 251.522119][ T6865] netlink: 12 bytes leftover after parsing attributes in process `syz.1.214'. [ 251.610687][ T5160] block nbd0: Receive control failed (result -32) [ 251.716069][ T5924] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 252.594220][ T6874] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 252.735664][ T5910] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 252.775605][ T5924] usb 5-1: Using ep0 maxpacket: 16 [ 252.785453][ T5924] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 252.796244][ T5924] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 252.991223][ T5924] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 253.001724][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.035714][ T5910] usb 1-1: Using ep0 maxpacket: 32 [ 253.052564][ T5910] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 253.151157][ T5924] usb 5-1: Product: syz [ 253.773148][ T5910] usb 1-1: config 0 has no interface number 0 [ 253.785686][ T5924] usb 5-1: Manufacturer: syz [ 253.805614][ T5924] usb 5-1: SerialNumber: syz [ 253.912425][ T5910] usb 1-1: config 0 interface 184 has no altsetting 0 [ 253.927245][ T5910] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 253.951322][ T5910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.965808][ T5910] usb 1-1: Product: syz [ 253.970166][ T5910] usb 1-1: Manufacturer: syz [ 253.974871][ T5910] usb 1-1: SerialNumber: syz [ 254.003077][ T5910] usb 1-1: config 0 descriptor?? [ 254.033607][ T5910] smsc75xx v1.0.0 [ 254.623260][ T5924] usb 5-1: 0:2 : does not exist [ 255.240588][ T5924] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 256.058193][ T5924] usb 5-1: USB disconnect, device number 4 [ 256.115455][ T5910] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 256.207112][ T5910] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 256.278771][ T5910] usb 1-1: USB disconnect, device number 8 [ 257.395370][ T6899] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.221'. [ 257.426164][ T6431] udevd[6431]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 259.009990][ T6911] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 262.145684][ T5932] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 263.125798][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 264.160292][ T6940] comedi comedi2: reset error (fatal) [ 266.076094][ T6010] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 268.920939][ T6010] usb 2-1: Using ep0 maxpacket: 16 [ 269.081143][ T6010] usb 2-1: device descriptor read/all, error -71 [ 269.284525][ T6965] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.236'. [ 270.296456][ T6972] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 270.455878][ T5932] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 270.705616][ T5932] usb 4-1: Using ep0 maxpacket: 32 [ 270.718308][ T5932] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 270.749643][ T5932] usb 4-1: config 0 has no interface number 0 [ 270.998050][ T5932] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 271.760059][ T5932] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.774792][ T5932] usb 4-1: Product: syz [ 271.782845][ T5932] usb 4-1: Manufacturer: syz [ 271.796580][ T5932] usb 4-1: SerialNumber: syz [ 271.816669][ T5932] usb 4-1: config 0 descriptor?? [ 271.854847][ T5932] smsc95xx v2.0.0 [ 272.345878][ T5910] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 272.468065][ T6994] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 272.608246][ T5932] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 272.621446][ T5910] usb 1-1: Using ep0 maxpacket: 8 [ 272.741632][ T5932] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 273.266686][ T5910] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 273.275093][ T6997] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 273.405831][ T5910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.416657][ T5910] usb 1-1: Product: syz [ 273.432435][ T5910] usb 1-1: Manufacturer: syz [ 273.469033][ T5910] usb 1-1: SerialNumber: syz [ 273.507107][ T5910] usb 1-1: config 0 descriptor?? [ 273.730664][ T5932] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 273.772495][ T5932] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 273.829173][ T5910] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 273.859297][ T5932] usb 4-1: USB disconnect, device number 6 [ 273.933787][ T7003] netlink: 68 bytes leftover after parsing attributes in process `syz.1.245'. [ 277.794163][ T5910] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 277.830048][ T5910] usb 1-1: USB disconnect, device number 10 [ 278.340599][ T7030] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.251'. [ 279.886285][ T7040] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 284.495761][ T7062] comedi comedi2: reset error (fatal) [ 285.625622][ T5910] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 285.710508][ T7070] netlink: 12 bytes leftover after parsing attributes in process `syz.4.259'. [ 285.795594][ T5910] usb 3-1: Using ep0 maxpacket: 32 [ 285.811090][ T5910] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 285.826641][ T5910] usb 3-1: config 0 has no interface number 0 [ 285.836232][ T7070] nbd1: detected capacity change from 0 to 8388608 [ 285.843430][ T5910] usb 3-1: config 0 interface 12 has no altsetting 0 [ 285.863494][ T5910] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=70.40 [ 285.871763][ T6431] block nbd1: Send control failed (result -32) [ 285.873312][ T5160] block nbd1: Receive control failed (result -32) [ 285.899142][ T5910] usb 3-1: New USB device strings: Mfr=231, Product=2, SerialNumber=3 [ 285.908154][ T5910] usb 3-1: Product: syz [ 285.912433][ T5910] usb 3-1: Manufacturer: syz [ 285.917603][ T5910] usb 3-1: SerialNumber: syz [ 285.935193][ T5910] usb 3-1: config 0 descriptor?? [ 285.942929][ T6431] block nbd1: Request send failed, requeueing [ 285.957484][ T11] block nbd1: Dead connection, failed to find a fallback [ 285.966078][ T11] block nbd1: shutting down sockets [ 285.971370][ T11] blk_print_req_error: 40 callbacks suppressed [ 285.971393][ T11] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 285.987760][ T11] buffer_io_error: 39 callbacks suppressed [ 285.987778][ T11] Buffer I/O error on dev nbd1, logical block 0, async page read [ 286.001929][ T6431] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 286.012271][ T6431] Buffer I/O error on dev nbd1, logical block 0, async page read [ 286.024622][ T6431] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 286.034388][ T6431] Buffer I/O error on dev nbd1, logical block 0, async page read [ 286.043798][ T6431] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 286.055437][ T6431] Buffer I/O error on dev nbd1, logical block 0, async page read [ 286.063765][ T6431] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 286.073349][ T6431] Buffer I/O error on dev nbd1, logical block 0, async page read [ 286.081969][ T6431] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 286.092757][ T6431] Buffer I/O error on dev nbd1, logical block 0, async page read [ 286.104118][ T6431] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 286.113794][ T6431] Buffer I/O error on dev nbd1, logical block 0, async page read [ 286.122021][ T6431] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 286.254463][ T6431] Buffer I/O error on dev nbd1, logical block 0, async page read [ 286.275943][ T6431] ldm_validate_partition_table(): Disk read failed. [ 286.302648][ T6431] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 286.313650][ T6431] Buffer I/O error on dev nbd1, logical block 0, async page read [ 286.323938][ T6431] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 286.373686][ T6431] Buffer I/O error on dev nbd1, logical block 0, async page read [ 286.444062][ T6431] Dev nbd1: unable to read RDB block 0 [ 286.494949][ T6431] nbd1: unable to read partition table [ 286.551805][ T6431] ldm_validate_partition_table(): Disk read failed. [ 286.593509][ T6431] Dev nbd1: unable to read RDB block 0 [ 287.086506][ T6431] nbd1: unable to read partition table [ 287.468462][ T5910] f81534 3-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 287.478587][ T7089] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.262'. [ 287.495878][ T5910] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 287.538568][ T5910] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 287.561714][ T5910] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 287.599590][ T5910] usb 3-1: USB disconnect, device number 8 [ 287.755705][ T6010] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 287.948184][ T6010] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.971999][ T6010] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 287.992999][ T6010] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.027397][ T6010] usb 5-1: config 0 descriptor?? [ 288.085684][ T6010] pwc: Askey VC010 type 2 USB webcam detected. [ 288.096389][ T5941] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 288.441010][ T5941] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 288.455125][ T5941] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 288.467290][ T5941] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.489164][ T5941] usb 4-1: config 0 descriptor?? [ 288.519639][ T6010] pwc: recv_control_msg error -32 req 02 val 2b00 [ 288.535024][ T5941] pwc: Askey VC010 type 2 USB webcam detected. [ 288.580384][ T6010] pwc: recv_control_msg error -32 req 02 val 2700 [ 288.662121][ T6010] pwc: recv_control_msg error -32 req 02 val 2c00 [ 288.717281][ T6010] pwc: recv_control_msg error -32 req 04 val 1000 [ 288.732250][ T7102] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 288.737223][ T6010] pwc: recv_control_msg error -32 req 04 val 1300 [ 288.756331][ T6010] pwc: recv_control_msg error -32 req 04 val 1400 [ 288.770639][ T6010] pwc: recv_control_msg error -32 req 02 val 2000 [ 288.782711][ T6010] pwc: recv_control_msg error -32 req 02 val 2100 [ 288.790890][ T6010] pwc: recv_control_msg error -32 req 04 val 1500 [ 288.799643][ T6010] pwc: recv_control_msg error -32 req 02 val 2500 [ 288.811226][ T6010] pwc: recv_control_msg error -32 req 02 val 2400 [ 288.826071][ T6010] pwc: recv_control_msg error -32 req 02 val 2600 [ 288.948519][ T5941] pwc: recv_control_msg error -32 req 02 val 2b00 [ 288.970896][ T5941] pwc: recv_control_msg error -32 req 02 val 2700 [ 289.012633][ T5941] pwc: recv_control_msg error -32 req 02 val 2c00 [ 289.037012][ T6010] pwc: recv_control_msg error -71 req 02 val 2800 [ 289.048463][ T5941] pwc: recv_control_msg error -32 req 04 val 1000 [ 289.065759][ T6010] pwc: recv_control_msg error -71 req 04 val 1100 [ 289.086926][ T5941] pwc: recv_control_msg error -32 req 04 val 1300 [ 289.113488][ T6010] pwc: recv_control_msg error -71 req 04 val 1200 [ 289.121794][ T5941] pwc: recv_control_msg error -32 req 04 val 1400 [ 289.140580][ T6010] pwc: Registered as video103. [ 289.154332][ T5941] pwc: recv_control_msg error -32 req 02 val 2000 [ 289.189208][ T6010] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input6 [ 289.200408][ T5941] pwc: recv_control_msg error -32 req 02 val 2100 [ 289.222242][ T5941] pwc: recv_control_msg error -32 req 04 val 1500 [ 289.241307][ T5941] pwc: recv_control_msg error -32 req 02 val 2500 [ 289.259123][ T6010] usb 5-1: USB disconnect, device number 5 [ 289.279329][ T5941] pwc: recv_control_msg error -32 req 02 val 2400 [ 289.301166][ T5941] pwc: recv_control_msg error -32 req 02 val 2600 [ 289.532767][ T5941] pwc: recv_control_msg error -71 req 02 val 2800 [ 289.550079][ T5941] pwc: recv_control_msg error -71 req 04 val 1100 [ 289.580073][ T5941] pwc: recv_control_msg error -71 req 04 val 1200 [ 289.613082][ T5941] pwc: Registered as video103. [ 289.633631][ T5941] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input7 [ 289.716207][ T5941] usb 4-1: USB disconnect, device number 7 [ 291.577837][ T30] audit: type=1326 audit(1755281909.790:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7135 comm="syz.4.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f6538ebe9 code=0x7ffc0000 [ 291.640803][ T30] audit: type=1326 audit(1755281909.790:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7135 comm="syz.4.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f6538ebe9 code=0x7ffc0000 [ 291.682254][ T30] audit: type=1326 audit(1755281909.800:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7135 comm="syz.4.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5f6538ebe9 code=0x7ffc0000 [ 291.752244][ T30] audit: type=1326 audit(1755281909.800:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7135 comm="syz.4.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f6538ebe9 code=0x7ffc0000 [ 291.823950][ T30] audit: type=1326 audit(1755281909.800:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7135 comm="syz.4.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f6538ebe9 code=0x7ffc0000 [ 291.915955][ T6010] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 292.107308][ T30] audit: type=1326 audit(1755281909.800:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7135 comm="syz.4.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f5f6538ebe9 code=0x7ffc0000 [ 292.135256][ T30] audit: type=1326 audit(1755281909.800:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7135 comm="syz.4.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f6538ebe9 code=0x7ffc0000 [ 292.168793][ T30] audit: type=1326 audit(1755281909.800:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7135 comm="syz.4.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f5f6538ebe9 code=0x7ffc0000 [ 292.197578][ T30] audit: type=1326 audit(1755281909.800:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7135 comm="syz.4.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f6538ebe9 code=0x7ffc0000 [ 292.228498][ T30] audit: type=1326 audit(1755281909.800:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7135 comm="syz.4.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f5f6538ebe9 code=0x7ffc0000 [ 292.296659][ T6010] usb 1-1: Using ep0 maxpacket: 16 [ 293.019621][ T7150] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 293.092447][ T6010] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 293.120624][ T6010] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 293.169850][ T6010] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 293.203372][ T6010] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.226795][ T6010] usb 1-1: Product: syz [ 293.231168][ T6010] usb 1-1: Manufacturer: syz [ 293.255841][ T6010] usb 1-1: SerialNumber: syz [ 293.271957][ T6010] usb 1-1: config 0 descriptor?? [ 293.299667][ T6010] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 293.345574][ T6010] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 293.537352][ T7159] netlink: 36 bytes leftover after parsing attributes in process `syz.4.287'. [ 293.585228][ T7158] netlink: 36 bytes leftover after parsing attributes in process `syz.4.287'. [ 293.927713][ T6010] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 294.502857][ T6010] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 294.825924][ T5931] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 295.075812][ T6010] em28xx 1-1:0.0: AC97 command still being executed: not handled properly! [ 295.107130][ T6010] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 295.235244][ T5931] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 295.273358][ T6010] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 295.297341][ T6010] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 295.321698][ T6010] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 295.425868][ T6010] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 295.435639][ T5931] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 295.436500][ T6010] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 295.468054][ T6010] usb 1-1: USB disconnect, device number 11 [ 295.475922][ T5931] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 295.498946][ T5931] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 295.563779][ T5931] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 295.583151][ T5931] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.642300][ T5931] usb 5-1: config 0 descriptor?? [ 296.086687][ T5931] plantronics 0003:047F:FFFF.0001: ignoring exceeding usage max [ 296.720577][ T5931] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 296.970411][ T5931] usb 5-1: USB disconnect, device number 6 [ 297.160755][ T7197] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 297.813801][ T7200] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 297.938209][ T7195] fido_id[7195]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 298.252024][ T7210] befs: (nullb0): invalid magic header [ 303.315246][ T7234] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.324302][ T7234] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.331614][ T7234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.295857][ T7250] syz.3.316 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 307.274509][ T7266] sctp: failed to load transform for md5: -2 [ 308.800044][ T1111] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 310.835836][ T6010] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 311.145588][ T6010] usb 1-1: Using ep0 maxpacket: 16 [ 311.177017][ T6010] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 311.188753][ T6010] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.211815][ T6010] usb 1-1: Product: syz [ 311.219821][ T6010] usb 1-1: Manufacturer: syz [ 311.224587][ T6010] usb 1-1: SerialNumber: syz [ 311.280175][ T6010] usb 1-1: config 0 descriptor?? [ 311.319866][ T6010] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 311.365366][ T6010] usb 1-1: Detected FT-X [ 311.528725][ T6010] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 311.754737][ T6010] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 311.790948][ T6010] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 311.838400][ T6010] usb 1-1: USB disconnect, device number 12 [ 312.247780][ T6010] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 312.339125][ T6010] ftdi_sio 1-1:0.0: device disconnected [ 313.671030][ T7326] befs: (nullb0): invalid magic header [ 315.586681][ T7345] netlink: 24 bytes leftover after parsing attributes in process `syz.1.343'. [ 315.960246][ T7339] sctp: failed to load transform for md5: -2 [ 318.992875][ T7372] netlink: 24 bytes leftover after parsing attributes in process `syz.2.352'. [ 320.012517][ T7376] random: crng reseeded on system resumption [ 321.407495][ T7394] netlink: 56 bytes leftover after parsing attributes in process `syz.4.360'. [ 321.545789][ T7400] netlink: 24 bytes leftover after parsing attributes in process `syz.4.363'. [ 321.605712][ T5932] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 321.786526][ T5932] usb 4-1: Using ep0 maxpacket: 32 [ 321.953369][ T51] Bluetooth: hci4: unknown advertising packet type: 0x70 [ 321.953558][ T51] Bluetooth: hci4: Dropping invalid advertising data [ 321.969684][ T51] Bluetooth: hci4: Malformed LE Event: 0x02 [ 322.190561][ T5932] usb 4-1: unable to get BOS descriptor or descriptor too short [ 322.190674][ T5932] usb 4-1: no configurations [ 322.190691][ T5932] usb 4-1: can't read configurations, error -22 [ 323.082569][ T7417] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 324.696319][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 325.350820][ T5941] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 325.539056][ T5941] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 325.571540][ T5941] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 325.639672][ T5941] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 325.664280][ T5941] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.706570][ T5941] usb 5-1: config 0 descriptor?? [ 327.086058][ T5941] kovaplus 0003:1E7D:2D50.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.4-1/input0 [ 328.244775][ T7432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.308584][ T7432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.388133][ T5941] kovaplus 0003:1E7D:2D50.0002: couldn't init struct kovaplus_device [ 328.432533][ T5941] kovaplus 0003:1E7D:2D50.0002: couldn't install mouse [ 328.654729][ T5941] kovaplus 0003:1E7D:2D50.0002: probe with driver kovaplus failed with error -71 [ 328.725648][ T5910] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 328.794614][ T5941] usb 5-1: USB disconnect, device number 7 [ 328.907888][ T5910] usb 1-1: Using ep0 maxpacket: 16 [ 328.932923][ T5910] usb 1-1: unable to get BOS descriptor or descriptor too short [ 328.957154][ T5910] usb 1-1: config 3 has an invalid interface number: 2 but max is 0 [ 328.965242][ T5910] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 328.990801][ T5910] usb 1-1: config 3 has no interface number 0 [ 328.998634][ T5910] usb 1-1: config 3 interface 2 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 329.014162][ T5910] usb 1-1: config 3 interface 2 has no altsetting 0 [ 329.027916][ T5910] usb 1-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=16.0f [ 329.107085][ T7485] netlink: 8 bytes leftover after parsing attributes in process `syz.3.389'. [ 329.160869][ T5910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.180637][ T5910] usb 1-1: Product: syz [ 329.189929][ T5910] usb 1-1: Manufacturer: syz [ 329.217964][ T5910] usb 1-1: SerialNumber: syz [ 329.632551][ T5910] ims_pcu 1-1:3.2: probe with driver ims_pcu failed with error -22 [ 329.726102][ T5910] usb 1-1: USB disconnect, device number 13 [ 331.831759][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 331.831792][ T30] audit: type=1326 audit(1755281950.060:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7518 comm="syz.1.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f322998ebe9 code=0x7ffc0000 [ 332.365944][ T30] audit: type=1326 audit(1755281950.070:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7518 comm="syz.1.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f322998ebe9 code=0x7ffc0000 [ 332.395061][ T30] audit: type=1326 audit(1755281950.070:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7518 comm="syz.1.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f322998ebe9 code=0x7ffc0000 [ 332.422844][ T30] audit: type=1326 audit(1755281950.070:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7518 comm="syz.1.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f322998ebe9 code=0x7ffc0000 [ 332.454668][ T30] audit: type=1326 audit(1755281950.070:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7518 comm="syz.1.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f322998ebe9 code=0x7ffc0000 [ 332.713486][ T7524] Process accounting resumed [ 334.197795][ T7544] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 335.782915][ T5932] IPVS: starting estimator thread 0... [ 335.790070][ T7554] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 335.990989][ T7562] IPVS: using max 22 ests per chain, 52800 per kthread [ 339.983736][ T51] Bluetooth: hci2: unexpected event for opcode 0x0411 [ 344.059458][ T51] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 344.068176][ T51] Bluetooth: hci2: Injecting HCI hardware error event [ 344.077030][ T51] Bluetooth: hci2: hardware error 0x00 [ 344.832956][ T7643] binder: 7634:7643 ioctl c0306201 200000000240 returned -11 [ 346.257089][ T7640] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.266734][ T7640] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.897273][ T51] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 348.122640][ T7666] netlink: 148 bytes leftover after parsing attributes in process `syz.0.449'. [ 348.171787][ T7666] kernel profiling enabled (shift: 9) [ 348.462894][ T7640] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 348.846473][ T7640] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.867872][ T7640] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.901344][ T7640] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.947306][ T7640] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.246061][ T5941] kernel write not supported for file /360/attr/fscreate (pid: 5941 comm: kworker/1:5) [ 350.686476][ T7695] netlink: 112 bytes leftover after parsing attributes in process `syz.3.459'. [ 351.197205][ T30] audit: type=1326 audit(1755281969.430:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7700 comm="syz.3.461" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6c5538ebe9 code=0x0 [ 353.557830][ T5910] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 353.746089][ T5910] usb 5-1: Using ep0 maxpacket: 16 [ 353.780706][ T5910] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 353.825938][ T5910] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 353.894867][ T5910] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 353.911654][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.019250][ T7727] netlink: 4 bytes leftover after parsing attributes in process `syz.3.472'. [ 354.127495][ T7727] bridge_slave_1: left allmulticast mode [ 354.300109][ T7727] bridge_slave_1: left promiscuous mode [ 354.432221][ T7727] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.666319][ T5910] usb 5-1: Product: syz [ 354.670563][ T5910] usb 5-1: Manufacturer: syz [ 354.675203][ T5910] usb 5-1: SerialNumber: syz [ 354.692216][ T7727] bridge_slave_0: left allmulticast mode [ 354.720198][ T7727] bridge_slave_0: left promiscuous mode [ 354.745191][ T7727] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.904682][ T5910] usb 5-1: 0:2 : does not exist [ 355.910126][ T30] audit: type=1326 audit(1755281973.440:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7739 comm="syz.1.475" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f322998ebe9 code=0x0 [ 356.688022][ T5910] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 356.747024][ T5910] usb 5-1: USB disconnect, device number 8 [ 356.989655][ T6431] udevd[6431]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 358.874187][ T7776] netlink: 8 bytes leftover after parsing attributes in process `syz.1.489'. [ 358.883878][ T7779] netlink: 24 bytes leftover after parsing attributes in process `syz.2.488'. [ 360.936024][ T926] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 360.949120][ T7817] netlink: 24 bytes leftover after parsing attributes in process `syz.4.502'. [ 361.143022][ T926] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 361.157421][ T926] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 361.195257][ T926] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 361.265136][ T926] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 361.467200][ T926] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 361.902128][ T926] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 361.911451][ T926] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 361.924493][ T926] usb 4-1: Product: syz [ 361.931398][ T926] usb 4-1: Manufacturer: syz [ 362.012492][ T926] cdc_wdm 4-1:1.0: skipping garbage [ 362.023982][ T926] cdc_wdm 4-1:1.0: skipping garbage [ 362.151681][ T926] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 362.165134][ T926] cdc_wdm 4-1:1.0: Unknown control protocol [ 363.460917][ T43] usb 4-1: USB disconnect, device number 10 [ 366.242933][ T7888] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 366.887938][ T7893] warning: `syz.0.530' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 367.198691][ T5931] kernel read not supported for file /swradio0 (pid: 5931 comm: kworker/0:5) [ 367.948748][ T5931] IPVS: starting estimator thread 0... [ 368.035683][ T7906] IPVS: using max 32 ests per chain, 76800 per kthread [ 369.665735][ T5910] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 370.164119][ T5910] usb 2-1: Using ep0 maxpacket: 16 [ 370.182579][ T5910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 370.239032][ T7931] binder: BINDER_SET_CONTEXT_MGR already set [ 370.247054][ T7931] binder: 7929:7931 ioctl 4018620d 200000000040 returned -16 [ 370.277647][ T5910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 370.288053][ T5910] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 370.297186][ T5910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.330262][ T5910] usb 2-1: config 0 descriptor?? [ 370.466945][ T43] Process accounting resumed [ 370.873062][ T5910] savu 0003:1E7D:2D5A.0003: unknown main item tag 0x0 [ 370.988928][ T7941] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 371.580512][ T5910] savu 0003:1E7D:2D5A.0003: item fetching failed at offset 3/5 [ 371.638789][ T5910] savu 0003:1E7D:2D5A.0003: parse failed [ 371.649716][ T5910] savu 0003:1E7D:2D5A.0003: probe with driver savu failed with error -22 [ 371.778057][ T5910] usb 2-1: USB disconnect, device number 14 [ 372.925309][ T30] audit: type=1326 audit(1755281990.460:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7944 comm="syz.2.550" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb2a158ebe9 code=0x0 [ 372.932055][ T7950] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 372.995821][ T7950] qnx6: wrong signature (magic) in superblock #1. [ 373.002467][ T7950] qnx6: unable to read the first superblock [ 374.690682][ T5932] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 375.035822][ T5932] usb 2-1: Using ep0 maxpacket: 32 [ 375.063332][ T5932] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 375.103814][ T5932] usb 2-1: config 0 has no interface number 0 [ 375.135593][ T5932] usb 2-1: config 0 interface 184 has no altsetting 0 [ 375.179118][ T5932] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 375.205532][ T5932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.217605][ T5932] usb 2-1: Product: syz [ 375.234656][ T5932] usb 2-1: Manufacturer: syz [ 375.245551][ T5932] usb 2-1: SerialNumber: syz [ 375.263375][ T5932] usb 2-1: config 0 descriptor?? [ 375.276352][ T5932] smsc75xx v1.0.0 [ 376.490515][ T7982] netlink: 4 bytes leftover after parsing attributes in process `syz.4.564'. [ 376.688105][ T30] audit: type=1326 audit(1755281994.930:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7978 comm="syz.3.562" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6c5538ebe9 code=0x0 [ 377.260062][ T5932] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71 [ 377.271712][ T5932] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 377.282256][ T5932] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 377.325920][ T5932] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 377.345566][ T5932] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 377.365646][ T5932] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 377.384103][ T5932] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 377.571056][ T5932] usb 2-1: USB disconnect, device number 15 [ 377.770953][ T24] libceph: connect (1)[c::]:6789 error -101 [ 377.804243][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 378.137122][ T24] libceph: connect (1)[c::]:6789 error -101 [ 378.161972][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 378.433158][ T7992] ceph: No mds server is up or the cluster is laggy [ 378.865863][ T8011] input: syz0 as /devices/virtual/input/input12 [ 379.392809][ T8020] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 381.389160][ T8030] libceph: resolve '400' (ret=-3): failed [ 382.623386][ T8050] netlink: 'syz.4.584': attribute type 1 has an invalid length. [ 382.755773][ T8050] 8021q: adding VLAN 0 to HW filter on device bond1 [ 382.853637][ T8054] bond1: (slave dummy0): making interface the new active one [ 382.899883][ T8054] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 383.873589][ T51] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 386.062389][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 388.085954][ T8123] nbd2: detected capacity change from 0 to 1125899906842687 [ 388.366977][ T8126] block nbd0: NBD_DISCONNECT [ 388.522383][ T8126] block nbd0: Send disconnect failed -32 [ 388.662004][ T8126] block nbd0: shutting down sockets [ 390.335979][ T43] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 390.495571][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 390.515859][ T5941] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 390.524495][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.543138][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 390.565574][ T43] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 390.574693][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.590446][ T43] usb 5-1: config 0 descriptor?? [ 390.666020][ T51] block nbd2: Receive control failed (result -104) [ 390.688246][ T5941] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 390.700080][ T5941] usb 3-1: config 0 has no interface number 0 [ 390.719590][ T5941] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 390.729504][ T5941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.760937][ T5941] usb 3-1: Product: syz [ 390.765230][ T5941] usb 3-1: Manufacturer: syz [ 390.785901][ T5941] usb 3-1: SerialNumber: syz [ 390.794816][ T5941] usb 3-1: config 0 descriptor?? [ 391.146709][ T5941] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected [ 391.157548][ T5941] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81 [ 391.165687][ T5941] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1 [ 391.173649][ T5941] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2 [ 391.184612][ T43] savu 0003:1E7D:2D5A.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 392.021499][ T8168] tty tty26: ldisc open failed (-12), clearing slot 25 [ 392.221393][ T5941] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 392.605361][ T5941] usb 3-1: USB disconnect, device number 9 [ 392.611880][ T43] usb 5-1: USB disconnect, device number 9 [ 392.674877][ T5941] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 392.731282][ T5941] keyspan 3-1:0.133: device disconnected [ 392.912504][ T8171] fido_id[8171]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 398.086870][ T5931] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 398.275603][ T5931] usb 1-1: Using ep0 maxpacket: 32 [ 398.299312][ T5931] usb 1-1: unable to get BOS descriptor or descriptor too short [ 398.317431][ T5931] usb 1-1: no configurations [ 398.332994][ T5931] usb 1-1: can't read configurations, error -22 [ 398.758079][ T8236] tipc: Started in network mode [ 398.766170][ T8236] tipc: Node identity 4, cluster identity 4711 [ 398.776124][ T8236] tipc: Node number set to 4 [ 399.130443][ T8250] ptrace attach of "./syz-executor exec"[5851] was attempted by "./syz-executor exec"[8250] [ 400.436594][ T8264] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 400.625918][ T5941] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 400.751065][ T8276] netlink: 'syz.3.658': attribute type 10 has an invalid length. [ 400.816101][ T5941] usb 1-1: Using ep0 maxpacket: 32 [ 400.909071][ T5160] Bluetooth: hci0: unknown advertising packet type: 0x70 [ 400.909149][ T5160] Bluetooth: hci0: Dropping invalid advertising data [ 400.910290][ T5941] usb 1-1: unable to get BOS descriptor or descriptor too short [ 400.917990][ T5160] Bluetooth: hci0: Malformed LE Event: 0x02 [ 401.154223][ T5941] usb 1-1: no configurations [ 401.261983][ T5941] usb 1-1: can't read configurations, error -22 [ 401.382188][ T8276] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 401.495754][ T8281] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 402.776308][ T8309] bridge0: port 3(syz_tun) entered blocking state [ 402.783398][ T8309] bridge0: port 3(syz_tun) entered disabled state [ 402.834697][ T8309] syz_tun: entered allmulticast mode [ 402.858497][ T8309] syz_tun: entered promiscuous mode [ 402.872688][ T8309] bridge0: port 3(syz_tun) entered blocking state [ 402.879760][ T8309] bridge0: port 3(syz_tun) entered forwarding state [ 403.507857][ T8327] input: syz0 as /devices/virtual/input/input13 [ 404.081986][ T8331] input: syz0 as /devices/virtual/input/input14 [ 405.925950][ T8371] input: syz0 as /devices/virtual/input/input15 [ 407.363931][ T8399] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 408.436205][ T8410] input: syz0 as /devices/virtual/input/input16 [ 409.139118][ T8421] bridge0: port 3(syz_tun) entered blocking state [ 409.160052][ T8421] bridge0: port 3(syz_tun) entered disabled state [ 409.197660][ T8421] syz_tun: entered allmulticast mode [ 409.210309][ T8421] syz_tun: entered promiscuous mode [ 409.385880][ T8421] bridge0: port 3(syz_tun) entered blocking state [ 409.392634][ T8421] bridge0: port 3(syz_tun) entered forwarding state [ 410.117868][ T8427] batadv1: entered allmulticast mode [ 410.174749][ T8427] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 410.374945][ T8437] netlink: 32 bytes leftover after parsing attributes in process `syz.0.717'. [ 410.671983][ T8441] netlink: 32 bytes leftover after parsing attributes in process `syz.0.717'. [ 411.773010][ T8461] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 411.874705][ T8461] netlink: 4 bytes leftover after parsing attributes in process `syz.1.722'. [ 411.911431][ T8461] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 412.803428][ T8484] mmap: syz.1.730 (8484) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 414.056095][ T8464] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 414.057137][ T5160] Bluetooth: hci1: command 0x0406 tx timeout [ 414.752995][ T8464] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 414.777455][ T8464] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 414.795641][ T8464] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 414.802340][ T8464] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 414.822672][ T8464] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 414.829177][ T8464] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 416.095531][ T30] audit: type=1326 audit(1755282033.780:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8518 comm="syz.0.745" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5bf858ebe9 code=0x0 [ 416.165945][ T5160] Bluetooth: hci1: command 0x0406 tx timeout [ 416.859405][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 416.865661][ T5845] Bluetooth: hci4: command 0x0405 tx timeout [ 416.871777][ T5854] Bluetooth: hci3: command 0x0406 tx timeout [ 418.469904][ T8571] trusted_key: encrypted_key: insufficient parameters specified [ 418.955707][ T5160] Bluetooth: hci4: command 0x0405 tx timeout [ 418.962427][ T5854] Bluetooth: hci3: command 0x0406 tx timeout [ 419.298150][ T55] block nbd2: Possible stuck request ffff888025485240: control (read@0,1024B). Runtime 30 seconds [ 419.313813][ T55] block nbd2: Possible stuck request ffff888025485400: control (read@1024,1024B). Runtime 30 seconds [ 419.325639][ T55] block nbd2: Possible stuck request ffff8880254855c0: control (read@2048,1024B). Runtime 30 seconds [ 419.340281][ T55] block nbd2: Possible stuck request ffff888025485780: control (read@3072,1024B). Runtime 30 seconds [ 421.015811][ T5160] Bluetooth: hci4: command 0x0405 tx timeout [ 421.184854][ T8605] befs: (nullb0): invalid magic header [ 423.009594][ T8508] Set syz1 is full, maxelem 65536 reached [ 423.154880][ T5160] Bluetooth: hci4: command 0x0405 tx timeout [ 423.333709][ T7349] Bluetooth: hci5: Frame reassembly failed (-84) [ 423.361671][ T7349] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 425.035258][ T8644] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 426.046864][ T5845] Bluetooth: hci5: command 0x1003 tx timeout [ 426.054056][ T5160] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 426.075745][ T30] audit: type=1326 audit(1755282043.500:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8636 comm="syz.3.789" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6c5538ebe9 code=0x0 [ 429.060745][ T8687] vlan2: entered promiscuous mode [ 429.089685][ T8687] vlan2: entered allmulticast mode [ 429.105111][ T8687] hsr_slave_1: entered allmulticast mode [ 429.125156][ T8692] netlink: 4 bytes leftover after parsing attributes in process `syz.3.805'. [ 429.456091][ T8694] befs: (nullb0): invalid magic header [ 429.466667][ T8697] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 430.063647][ T8702] 8021q: adding VLAN 0 to HW filter on device bond1 [ 430.187333][ T8703] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 430.196625][ T2998] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 430.274510][ T8710] bond_slave_0: entered promiscuous mode [ 430.280853][ T8710] bond_slave_1: entered promiscuous mode [ 430.316253][ T2969] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 430.329654][ T8710] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 430.372637][ T8710] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 431.502666][ T8730] batman_adv: batadv0: Adding interface: dummy0 [ 431.532319][ T8730] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 431.684639][ T8730] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 431.708151][ T8731] befs: (nullb0): invalid magic header [ 432.467400][ T8750] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 434.645048][ T8777] bond1: option mode: unable to set because the bond device has slaves [ 435.935996][ T8800] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 435.977477][ T8800] netlink: 'syz.2.842': attribute type 10 has an invalid length. [ 436.013579][ T8800] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 436.036557][ T8800] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 436.745930][ T8774] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 436.786083][ T5854] Bluetooth: hci1: command 0x0406 tx timeout [ 436.857121][ T8778] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 437.447345][ T8818] bridge1: entered allmulticast mode [ 437.514997][ T8778] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 437.533424][ T8778] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 437.553235][ T8778] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 437.741709][ T8828] bond1: (slave dummy0): Releasing active interface [ 437.773146][ T8828] batman_adv: batadv0: Adding interface: dummy0 [ 437.814330][ T8828] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 437.866764][ T8828] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 437.871959][ T5941] IPVS: starting estimator thread 0... [ 437.876993][ T5854] Bluetooth: hci4: ACL packet too small [ 437.975799][ T8836] IPVS: using max 40 ests per chain, 96000 per kthread [ 438.140484][ T8838] netlink: 'syz.0.858': attribute type 10 has an invalid length. [ 438.173365][ T8838] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 439.575551][ T5854] Bluetooth: hci4: command 0x0405 tx timeout [ 439.582246][ T5854] Bluetooth: hci3: command 0x0406 tx timeout [ 441.155012][ T8894] netlink: 'syz.1.878': attribute type 10 has an invalid length. [ 441.169871][ T8894] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 441.390079][ T8899] befs: (nullb0): invalid magic header [ 441.803050][ T30] audit: type=1804 audit(1755282060.040:24): pid=8903 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.881" name="file0" dev="ramfs" ino=19497 res=1 errno=0 [ 441.965942][ T8907] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 441.972643][ T8907] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 441.980580][ T8907] vhci_hcd vhci_hcd.0: Device attached [ 442.135716][ T8870] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 442.545667][ T5854] Bluetooth: hci1: command 0x0406 tx timeout [ 443.139834][ T8908] vhci_hcd: connection closed [ 443.155613][ T136] vhci_hcd: stop threads [ 443.167236][ T8877] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 443.183745][ T136] vhci_hcd: release socket [ 443.196129][ T136] vhci_hcd: disconnect device [ 443.200630][ T8877] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 443.207063][ T24] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 443.214657][ T24] usb 41-1: enqueue for inactive port 0 [ 443.230875][ T8877] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 443.290339][ T8877] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 443.795820][ T24] vhci_hcd: vhci_device speed not set [ 445.190344][ T8938] netlink: 'syz.0.892': attribute type 10 has an invalid length. [ 445.256240][ T5854] Bluetooth: hci3: command 0x0406 tx timeout [ 445.335829][ T5854] Bluetooth: hci4: command 0x0405 tx timeout [ 445.395000][ T8949] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 445.401604][ T8949] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 445.409522][ T8949] vhci_hcd vhci_hcd.0: Device attached [ 445.694167][ T8952] vhci_hcd: connection closed [ 445.794156][ T8959] input: syz0 as /devices/virtual/input/input17 [ 445.807429][ T136] vhci_hcd: stop threads [ 445.920927][ T5932] usb 37-1: new high-speed USB device number 4 using vhci_hcd [ 445.935501][ T136] vhci_hcd: release socket [ 445.960224][ T136] vhci_hcd: disconnect device [ 447.495027][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 448.647636][ T8992] netlink: 'syz.1.909': attribute type 10 has an invalid length. [ 449.362821][ T55] block nbd2: Possible stuck request ffff888025485240: control (read@0,1024B). Runtime 60 seconds [ 449.374779][ T55] block nbd2: Possible stuck request ffff888025485400: control (read@1024,1024B). Runtime 60 seconds [ 449.396484][ T9000] input: syz0 as /devices/virtual/input/input18 [ 449.485805][ T55] block nbd2: Possible stuck request ffff8880254855c0: control (read@2048,1024B). Runtime 60 seconds [ 449.526311][ T55] block nbd2: Possible stuck request ffff888025485780: control (read@3072,1024B). Runtime 60 seconds [ 451.086095][ T5932] vhci_hcd: vhci_device speed not set [ 454.156050][ T24] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 454.785910][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 454.803890][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 454.835787][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 454.868062][ T24] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 454.885495][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.893574][ T24] usb 5-1: Product: syz [ 454.913592][ T24] usb 5-1: Manufacturer: syz [ 455.043999][ T9058] netlink: 24 bytes leftover after parsing attributes in process `syz.1.921'. [ 455.129876][ T24] usb 5-1: SerialNumber: syz [ 455.921116][ T24] usb 5-1: 0:2 : does not exist [ 455.939540][ T24] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 456.022014][ T24] usb 5-1: USB disconnect, device number 10 [ 456.118396][ T6431] udevd[6431]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 456.239492][ T9073] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 456.246105][ T9073] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 456.253826][ T9073] vhci_hcd vhci_hcd.0: Device attached [ 456.263253][ T9074] vhci_hcd: connection closed [ 456.267100][ T32] vhci_hcd: stop threads [ 456.460736][ T32] vhci_hcd: release socket [ 456.466389][ T32] vhci_hcd: disconnect device [ 456.525686][ T43] vhci_hcd: vhci_device speed not set [ 458.049585][ T9101] vlan2: entered promiscuous mode [ 458.055138][ T9101] vlan2: entered allmulticast mode [ 458.063032][ T9101] hsr_slave_1: entered allmulticast mode [ 461.495644][ T9112] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 461.506432][ T5854] Bluetooth: hci1: command 0x0406 tx timeout [ 461.831627][ T9132] Set syz1 is full, maxelem 65536 reached [ 462.365571][ T9112] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 462.371972][ T9112] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 462.381312][ T9112] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 462.599336][ T9144] batman_adv: batadv0: Adding interface: dummy0 [ 462.632877][ T9144] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.697821][ T9144] batman_adv: batadv0: Interface activated: dummy0 [ 462.723266][ T9148] batadv0: mtu less than device minimum [ 462.773824][ T9148] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 462.786273][ T9148] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 462.798310][ T9148] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 462.809642][ T9148] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 462.821048][ T9148] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 462.832435][ T9148] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 462.843724][ T9148] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 462.855143][ T9148] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 464.635769][ T5854] Bluetooth: hci3: command 0x0406 tx timeout [ 464.643682][ T5854] Bluetooth: hci4: command 0x0405 tx timeout [ 465.095642][ T9168] input: syz0 as /devices/virtual/input/input19 [ 466.695641][ T5845] Bluetooth: hci4: command 0x0405 tx timeout [ 467.173541][ T9104] net_ratelimit: 12 callbacks suppressed [ 467.173583][ T9104] Set syz1 is full, maxelem 65536 reached [ 467.592430][ T9203] overlayfs: conflicting lowerdir path [ 467.880534][ T9219] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 468.295716][ T5910] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 468.445624][ T5910] usb 4-1: Using ep0 maxpacket: 16 [ 468.452740][ T5910] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 468.464795][ T5910] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 468.477600][ T5910] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 468.487947][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.497082][ T5910] usb 4-1: Product: syz [ 468.501279][ T5910] usb 4-1: Manufacturer: syz [ 468.505988][ T5910] usb 4-1: SerialNumber: syz [ 468.723695][ T5910] usb 4-1: 0:2 : does not exist [ 468.759224][ T5910] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 468.776644][ T5845] Bluetooth: hci4: command 0x0405 tx timeout [ 468.869395][ T5910] usb 4-1: USB disconnect, device number 11 [ 469.154120][ T6431] udevd[6431]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 469.185249][ T30] audit: type=1326 audit(1755282087.420:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9263 comm="syz.1.998" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f322998ebe9 code=0x0 [ 471.004577][ T5845] Bluetooth: hci4: command 0x0405 tx timeout [ 471.575782][ T5845] Bluetooth: hci1: command 0x0406 tx timeout [ 471.578400][ T9284] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 472.441129][ T9284] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 472.448347][ T9284] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 472.455189][ T9284] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 473.570646][ T9346] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1021'. [ 473.598301][ T9346] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1021'. [ 473.788992][ T5160] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 473.810835][ T5160] Bluetooth: hci0: ACL packet too small [ 473.954838][ T9360] vxcan1: entered allmulticast mode [ 474.136799][ T9362] 8021q: adding VLAN 0 to HW filter on device bond1 [ 474.161059][ T9370] bond_slave_0: entered promiscuous mode [ 474.168836][ T9370] bond_slave_1: entered promiscuous mode [ 474.178494][ T9370] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 474.202852][ T9370] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 474.346933][ T5941] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 474.456095][ T5854] Bluetooth: hci3: command 0x0406 tx timeout [ 474.462795][ T5160] Bluetooth: hci4: command 0x0405 tx timeout [ 474.640558][ T5941] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 474.764116][ T5941] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.861156][ T5941] usb 5-1: Product: syz [ 474.940660][ T5941] usb 5-1: Manufacturer: syz [ 474.986473][ T5941] usb 5-1: SerialNumber: syz [ 475.041800][ T5941] usb 5-1: config 0 descriptor?? [ 475.481602][ T5941] usb 5-1: Firmware: major: 130, minor: 0, hardware type: ATUSB (0) [ 475.691972][ T5941] usb 5-1: no permanent extended address found, random address set [ 476.020902][ T5941] usb 5-1: USB disconnect, device number 11 [ 476.951997][ T9463] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 477.000347][ T9463] netlink: 'syz.3.1039': attribute type 10 has an invalid length. [ 477.019886][ T9463] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 477.888978][ T9495] sctp: [Deprecated]: syz.3.1048 (pid 9495) Use of struct sctp_assoc_value in delayed_ack socket option. [ 477.888978][ T9495] Use struct sctp_sack_info instead [ 478.035831][ T30] audit: type=1326 audit(1755282096.230:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9491 comm="syz.4.1047" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5f6538ebe9 code=0x0 [ 479.322498][ T9517] syz.0.1053 uses obsolete (PF_INET,SOCK_PACKET) [ 479.952223][ T55] block nbd2: Possible stuck request ffff888025485240: control (read@0,1024B). Runtime 90 seconds [ 479.981547][ T55] block nbd2: Possible stuck request ffff888025485400: control (read@1024,1024B). Runtime 90 seconds [ 479.999623][ T55] block nbd2: Possible stuck request ffff8880254855c0: control (read@2048,1024B). Runtime 90 seconds [ 480.010958][ T55] block nbd2: Possible stuck request ffff888025485780: control (read@3072,1024B). Runtime 90 seconds [ 480.679004][ T9552] input: syz0 as /devices/virtual/input/input20 [ 482.849808][ T9596] befs: (nullb0): invalid magic header [ 483.572008][ T30] audit: type=1326 audit(1755282101.690:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9592 comm="syz.4.1073" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5f6538ebe9 code=0x0 [ 484.174740][ T5160] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 484.184239][ T5160] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 484.196941][ T5160] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 484.216663][ T5160] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 484.224517][ T5160] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 484.412300][ T9650] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 484.418911][ T9650] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 484.451166][ T9650] vhci_hcd vhci_hcd.0: Device attached [ 484.572247][ T9651] vhci_hcd: connection closed [ 484.572595][ T32] vhci_hcd: stop threads [ 484.622877][ T32] vhci_hcd: release socket [ 484.634705][ T32] vhci_hcd: disconnect device [ 484.675567][ T9] usb 39-1: new high-speed USB device number 2 using vhci_hcd [ 484.683295][ T9] usb 39-1: enqueue for inactive port 0 [ 484.763357][ T9618] chnl_net:caif_netlink_parms(): no params data found [ 484.772104][ T9] vhci_hcd: vhci_device speed not set [ 485.121014][ T9618] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.133123][ T9618] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.143568][ T9618] bridge_slave_0: entered allmulticast mode [ 485.152560][ T9618] bridge_slave_0: entered promiscuous mode [ 485.166347][ T9618] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.173734][ T9618] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.181818][ T9618] bridge_slave_1: entered allmulticast mode [ 485.190547][ T9618] bridge_slave_1: entered promiscuous mode [ 485.253665][ T9618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 485.267116][ T9618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 485.296578][ T5917] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 485.337713][ T9618] team0: Port device team_slave_0 added [ 485.350189][ T9618] team0: Port device team_slave_1 added [ 485.400563][ T9618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 485.408698][ T9618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 485.438706][ T9618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 485.452147][ T9618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 485.462459][ T9618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 485.490548][ T9618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 485.496229][ T5917] usb 1-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 485.511880][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.521152][ T5917] usb 1-1: Product: syz [ 485.525960][ T5917] usb 1-1: Manufacturer: syz [ 485.530710][ T5917] usb 1-1: SerialNumber: syz [ 485.542389][ T5917] usb 1-1: config 0 descriptor?? [ 485.559480][ T5917] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 485.613141][ T9618] hsr_slave_0: entered promiscuous mode [ 485.627490][ T9618] hsr_slave_1: entered promiscuous mode [ 485.633623][ T9618] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 485.642272][ T9618] Cannot create hsr debugfs directory [ 485.759335][ T5917] usb 1-1: USB disconnect, device number 18 [ 486.318740][ T5160] Bluetooth: hci5: command tx timeout [ 486.610206][ T9618] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 486.724575][ T9618] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 486.771590][ T9618] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 486.815735][ T9618] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 487.314178][T10010] ptrace attach of "./syz-executor exec"[5840] was attempted by "./syz-executor exec"[10010] [ 488.131161][ T9618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 488.171711][ T9618] 8021q: adding VLAN 0 to HW filter on device team0 [ 488.187468][ T7349] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.194737][ T7349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 488.257367][ T7349] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.264644][ T7349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 488.376119][ T5160] Bluetooth: hci5: command tx timeout [ 490.465782][ T5160] Bluetooth: hci5: command tx timeout [ 490.615026][ T9618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 491.054265][ T9618] veth0_vlan: entered promiscuous mode [ 491.240722][ T9618] veth1_vlan: entered promiscuous mode [ 491.270575][ T9618] veth0_macvtap: entered promiscuous mode [ 491.292909][ T9618] veth1_macvtap: entered promiscuous mode [ 491.942481][ T9618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 492.035318][ T9618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 492.089239][ T9618] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.115743][ T9618] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.124523][ T9618] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.139765][ T9618] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.615693][ T5160] Bluetooth: hci5: command tx timeout [ 493.147091][ T7059] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.165265][ T7059] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.287368][ T2969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.295283][ T2969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.842472][T10142] random: crng reseeded on system resumption [ 494.591436][T10153] befs: (nullb0): invalid magic header [ 496.050154][T10158] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 496.081266][T10158] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 496.115856][T10158] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 496.126474][T10158] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 496.134769][T10158] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 496.141727][T10158] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 496.177695][T10158] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 496.874854][ T5160] Bluetooth: hci1: command 0x0406 tx timeout [ 497.619669][ T1111] Bluetooth: hci6: Frame reassembly failed (-84) [ 497.674174][ T1111] Bluetooth: hci6: Frame reassembly failed (-84) [ 498.136874][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 498.143344][ T5854] Bluetooth: hci4: command 0x0405 tx timeout [ 498.235616][ T5845] Bluetooth: hci5: command 0x0c1a tx timeout [ 499.069015][ T5846] bridge0: port 3(syz_tun) entered disabled state [ 499.093440][ T5846] syz_tun (unregistering): left allmulticast mode [ 499.102341][ T5846] syz_tun (unregistering): left promiscuous mode [ 499.110124][ T5846] bridge0: port 3(syz_tun) entered disabled state [ 499.226842][ T5854] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 499.239262][ T5854] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 499.248051][ T5854] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 499.258028][ T5854] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 499.276809][ T5854] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 499.510672][ T30] audit: type=1326 audit(1755282117.750:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10252 comm="syz.4.1129" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5f6538ebe9 code=0x0 [ 499.655580][ T5160] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 500.298011][ T5845] Bluetooth: hci4: command 0x0405 tx timeout [ 500.304692][ T5160] Bluetooth: hci5: command 0x0c1a tx timeout [ 500.866367][T10356] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1134'. [ 501.347610][ T5160] Bluetooth: hci2: command tx timeout [ 502.004779][T10324] syz.0.1133 (10324) used greatest stack depth: 18568 bytes left [ 502.266224][T10220] chnl_net:caif_netlink_parms(): no params data found [ 502.375774][ T5160] Bluetooth: hci5: command 0x0c1a tx timeout [ 502.425951][ T5160] Bluetooth: hci0: unexpected event for opcode 0x204e [ 503.299621][T10220] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.391825][T10220] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.405817][T10220] bridge_slave_0: entered allmulticast mode [ 503.415250][T10220] bridge_slave_0: entered promiscuous mode [ 503.429202][ T5160] Bluetooth: hci2: command tx timeout [ 503.456055][T10220] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.463362][T10220] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.474890][T10220] bridge_slave_1: entered allmulticast mode [ 503.484052][T10220] bridge_slave_1: entered promiscuous mode [ 504.724179][T10220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 505.072443][T10220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 505.827203][T10488] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1148'. [ 505.855776][ T5160] Bluetooth: hci2: command tx timeout [ 506.014883][T10220] team0: Port device team_slave_0 added [ 506.068190][T10220] team0: Port device team_slave_1 added [ 507.022819][T10220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 507.039440][T10220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 507.068498][T10220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 507.079968][ T5160] Bluetooth: hci5: unexpected event for opcode 0x0c03 [ 507.083276][T10220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 507.094109][T10220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 507.120823][T10220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 508.334675][ T5160] Bluetooth: hci2: command tx timeout [ 508.382369][T10549] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 509.060733][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 509.122354][ T5160] Bluetooth: hci0: link tx timeout [ 509.571084][T10220] hsr_slave_0: entered promiscuous mode [ 509.590467][T10220] hsr_slave_1: entered promiscuous mode [ 509.603344][T10220] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 509.632841][T10220] Cannot create hsr debugfs directory [ 510.010076][T10656] 8021q: adding VLAN 0 to HW filter on device bond2 [ 510.137066][ T55] block nbd2: Possible stuck request ffff888025485240: control (read@0,1024B). Runtime 120 seconds [ 510.148733][ T55] block nbd2: Possible stuck request ffff888025485400: control (read@1024,1024B). Runtime 120 seconds [ 510.160044][ T55] block nbd2: Possible stuck request ffff8880254855c0: control (read@2048,1024B). Runtime 120 seconds [ 510.171260][ T55] block nbd2: Possible stuck request ffff888025485780: control (read@3072,1024B). Runtime 120 seconds [ 510.433826][T10733] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 510.453505][T10611] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 510.466779][T10611] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 510.473102][T10611] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 510.488837][T10220] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 510.498553][T10611] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 510.504709][T10611] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 510.514339][T10611] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 510.525037][T10220] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 510.545450][T10611] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 510.567252][T10220] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 510.578003][T10611] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 510.592607][T10220] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 510.606310][T10611] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 510.661269][T10611] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 510.718994][T10611] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 511.815984][ T5845] Bluetooth: hci1: command 0x0406 tx timeout [ 512.309764][T10770] input: syz0 as /devices/virtual/input/input21 [ 512.356297][T10774] random: crng reseeded on system resumption [ 512.509354][T10220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 512.585817][ T5845] Bluetooth: hci4: command 0x0405 tx timeout [ 512.592414][ T5845] Bluetooth: hci3: command 0x0406 tx timeout [ 512.615650][ T5160] Bluetooth: hci2: command 0x0c1a tx timeout [ 512.621797][ T5160] Bluetooth: hci5: command 0x0c1a tx timeout [ 512.715131][T10220] 8021q: adding VLAN 0 to HW filter on device team0 [ 512.774620][ T7059] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.781915][ T7059] bridge0: port 1(bridge_slave_0) entered forwarding state [ 512.798186][ T7059] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.805500][ T7059] bridge0: port 2(bridge_slave_1) entered forwarding state [ 512.825066][T10774] syz.0.1174 (10774) used greatest stack depth: 17992 bytes left [ 514.387228][T10220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 514.620932][ T5160] Bluetooth: hci4: command 0x0405 tx timeout [ 514.698576][ T5160] Bluetooth: hci5: command 0x0c1a tx timeout [ 514.704988][ T5160] Bluetooth: hci2: command 0x0c1a tx timeout [ 514.718610][ T5160] Bluetooth: hci0: link tx timeout [ 515.942411][T10220] veth0_vlan: entered promiscuous mode [ 516.000625][T10220] veth1_vlan: entered promiscuous mode [ 516.065214][T10845] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 516.141919][T10220] veth0_macvtap: entered promiscuous mode [ 516.171429][T10220] veth1_macvtap: entered promiscuous mode [ 516.220370][T10220] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 516.244556][T10220] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 516.281127][T10220] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.304462][T10220] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.322272][T10830] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 516.332966][T10830] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 516.335684][T10220] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.349864][T10220] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.352736][T10830] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 516.404862][T10830] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 516.422823][T10830] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 516.447254][T10830] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 516.453402][T10830] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 516.481434][T10830] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 517.150461][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 517.173256][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 517.328091][ T1111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 517.372918][ T1111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 517.576600][ T5845] Bluetooth: hci1: command 0x0406 tx timeout [ 517.975978][ T5941] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 518.198998][ T5941] usb 1-1: Using ep0 maxpacket: 32 [ 518.254619][ T5941] usb 1-1: unable to get BOS descriptor or descriptor too short [ 518.263875][T10906] mac80211_hwsim hwsim15 wlan1: entered allmulticast mode [ 518.440874][ T5941] usb 1-1: no configurations [ 518.467908][ T5845] Bluetooth: hci5: command 0x0c1a tx timeout [ 518.474150][ T5160] Bluetooth: hci4: command 0x0405 tx timeout [ 518.480401][ T5854] Bluetooth: hci3: command 0x0406 tx timeout [ 518.520266][ T5941] usb 1-1: can't read configurations, error -22 [ 518.546121][ T5854] Bluetooth: hci2: command 0x0c1a tx timeout [ 519.381211][T10912] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 519.424093][T10912] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 519.496208][T10912] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 519.524220][T10912] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 519.535686][T10912] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 519.557630][T10912] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 520.519608][T10929] capability: warning: `syz.0.1202' uses 32-bit capabilities (legacy support in use) [ 520.535675][ T5845] Bluetooth: hci1: command 0x0406 tx timeout [ 521.791527][ T5845] Bluetooth: hci2: command 0x0c1a tx timeout [ 521.800414][ T5845] Bluetooth: hci5: command 0x0c1a tx timeout [ 521.820774][ T5160] Bluetooth: hci4: command 0x0405 tx timeout [ 521.827085][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 523.910143][ T5854] Bluetooth: hci2: command 0x0c1a tx timeout [ 524.156179][ T5932] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 524.657121][ T5932] usb 6-1: Using ep0 maxpacket: 32 [ 524.704704][ T5932] usb 6-1: unable to get BOS descriptor or descriptor too short [ 524.731901][ T5932] usb 6-1: no configurations [ 524.742416][ T5932] usb 6-1: can't read configurations, error -22 [ 524.803823][ T5854] Bluetooth: hci0: unexpected event for opcode 0x0419 [ 525.402584][T11002] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 525.409205][T11002] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 525.434313][T11002] vhci_hcd vhci_hcd.0: Device attached [ 525.562045][T11003] vhci_hcd: connection closed [ 525.565151][ T2969] vhci_hcd: stop threads [ 525.574471][ T2969] vhci_hcd: release socket [ 525.579368][ T2969] vhci_hcd: disconnect device [ 525.590370][T11013] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1222'. [ 525.606089][ T5931] vhci_hcd: vhci_device speed not set [ 525.818294][ T5160] Bluetooth: hci5: unexpected event for opcode 0x0413 [ 526.404305][T11013] hsr_slave_1 (unregistering): left promiscuous mode [ 528.216774][T11057] batman_adv: batadv0: Interface deactivated: dummy0 [ 528.241127][T11057] batman_adv: batadv0: Removing interface: dummy0 [ 528.598493][T11075] syz_tun: entered allmulticast mode [ 529.815821][ T5854] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 529.845972][ T5854] Bluetooth: hci5: Injecting HCI hardware error event [ 529.855781][ T5854] Bluetooth: hci5: hardware error 0x00 [ 530.130898][T11099] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 530.137586][T11099] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 530.230799][T11099] vhci_hcd vhci_hcd.0: Device attached [ 530.328607][T11100] vhci_hcd: connection closed [ 530.331467][ T13] vhci_hcd: stop threads [ 530.371714][ T13] vhci_hcd: release socket [ 530.385210][ T13] vhci_hcd: disconnect device [ 530.420220][ T9] vhci_hcd: vhci_device speed not set [ 530.897730][T11117] batman_adv: batadv0: Removing interface: dummy0 [ 531.145606][ T5932] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 531.255049][T11129] netlink: 'syz.4.1251': attribute type 10 has an invalid length. [ 531.317142][ T5932] usb 7-1: Using ep0 maxpacket: 32 [ 531.344673][ T5932] usb 7-1: unable to get BOS descriptor or descriptor too short [ 531.385635][ T5932] usb 7-1: config 7 has an invalid interface number: 128 but max is 0 [ 531.409544][T11136] netlink: 332 bytes leftover after parsing attributes in process `syz.5.1252'. [ 531.438604][ T5932] usb 7-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 531.472644][ T5932] usb 7-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 531.504140][ T5932] usb 7-1: config 7 has no interface number 0 [ 531.515544][ T5932] usb 7-1: config 7 interface 128 altsetting 2 has an endpoint descriptor with address 0x17, changing to 0x7 [ 531.562704][ T5932] usb 7-1: config 7 interface 128 altsetting 2 bulk endpoint 0x7 has invalid maxpacket 32 [ 531.628635][ T5932] usb 7-1: config 7 interface 128 altsetting 2 endpoint 0x87 has an invalid bInterval 209, changing to 11 [ 531.665607][ T5932] usb 7-1: config 7 interface 128 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 531.714626][ T5932] usb 7-1: config 7 interface 128 has no altsetting 0 [ 531.744063][ T5932] usb 7-1: New USB device found, idVendor=6033, idProduct=4108, bcdDevice=cc.13 [ 531.781317][ T5932] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.804039][ T5932] usb 7-1: Product: syz [ 531.813865][ T5932] usb 7-1: Manufacturer: syz [ 531.833548][ T5932] usb 7-1: SerialNumber: syz [ 531.872711][T11165] input: syz0 as /devices/virtual/input/input22 [ 531.881534][T11121] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 531.976623][ T5854] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 532.174427][ T5932] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 532.195659][ T5932] usb 7-1: MIDIStreaming interface descriptor not found [ 532.372952][ T5932] usb 7-1: USB disconnect, device number 2 [ 532.532518][ T9] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 532.538466][ T5860] udevd[5860]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:7.128/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 532.568121][ T5910] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 532.715806][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 532.743211][ T9] usb 1-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 532.753443][ T5910] usb 5-1: Using ep0 maxpacket: 16 [ 532.778475][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.795638][ T9] usb 1-1: Product: syz [ 532.800083][ T9] usb 1-1: Manufacturer: syz [ 532.804821][ T9] usb 1-1: SerialNumber: syz [ 532.817338][ T5910] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 532.839955][ T9] usb 1-1: config 0 descriptor?? [ 532.852626][ T5910] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 532.892439][ T9] radio-usb-si4713 1-1:0.0: Si4713 development board discovered: (10C4:8244) [ 532.917650][ T5910] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 532.930482][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.947590][ T5910] usb 5-1: Product: syz [ 532.952260][ T5910] usb 5-1: Manufacturer: syz [ 533.182327][ T5910] usb 5-1: SerialNumber: syz [ 533.244617][T11247] kvm: apic: phys broadcast and lowest prio [ 533.406304][T11254] sctp: [Deprecated]: syz.5.1266 (pid 11254) Use of struct sctp_assoc_value in delayed_ack socket option. [ 533.406304][T11254] Use struct sctp_sack_info instead [ 533.650063][ T5910] usb 5-1: 0:2 : does not exist [ 533.845778][ T24] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 533.934759][ T5910] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 533.944615][ T9] radio-usb-si4713 1-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 533.962074][ T9] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 533.998612][ T24] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 534.001684][ T9] usb 1-1: USB disconnect, device number 21 [ 534.022887][ T5910] usb 5-1: USB disconnect, device number 12 [ 534.060671][ T24] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 534.114049][ T24] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 534.133012][ T5861] udevd[5861]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 534.149520][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.239490][T11282] input: syz0 as /devices/virtual/input/input23 [ 534.306135][T11242] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 534.606385][ T24] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 535.055833][ T24] usb 7-1: USB disconnect, device number 3 [ 535.199357][T11316] netlink: 'syz.0.1272': attribute type 10 has an invalid length. [ 535.278027][T11331] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 536.775461][T11350] netlink: 'syz.4.1279': attribute type 10 has an invalid length. [ 537.252985][T11350] team0: Port device dummy0 added [ 537.595506][ T24] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 537.646442][ T43] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 537.765917][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 537.784386][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 537.808277][T11388] netlink: 'syz.4.1288': attribute type 10 has an invalid length. [ 537.819158][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 537.836332][ T43] usb 7-1: Using ep0 maxpacket: 16 [ 537.849590][ T43] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 537.868497][ T24] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 537.883510][ T43] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 537.917366][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.950492][ T43] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 537.984700][ T24] usb 1-1: config 0 descriptor?? [ 538.010602][ T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.037250][ T24] hub 1-1:0.0: USB hub found [ 538.052408][ T43] usb 7-1: Product: syz [ 538.063933][ T43] usb 7-1: Manufacturer: syz [ 538.084563][ T43] usb 7-1: SerialNumber: syz [ 538.251962][ T24] hub 1-1:0.0: 1 port detected [ 538.518222][ T43] usb 7-1: 0:2 : does not exist [ 538.570277][ T43] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 538.704391][ T43] usb 7-1: USB disconnect, device number 4 [ 538.876102][ T24] hub 1-1:0.0: activate --> -90 [ 538.882402][ T6431] udevd[6431]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 539.487027][ T5910] usb 1-1: USB disconnect, device number 22 [ 539.497563][ T24] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 539.763488][ T24] usb 1-1-port1: connect-debounce failed [ 540.217552][ T55] block nbd2: Possible stuck request ffff888025485240: control (read@0,1024B). Runtime 150 seconds [ 540.228653][ T55] block nbd2: Possible stuck request ffff888025485400: control (read@1024,1024B). Runtime 150 seconds [ 540.240462][ T55] block nbd2: Possible stuck request ffff8880254855c0: control (read@2048,1024B). Runtime 150 seconds [ 540.251803][ T55] block nbd2: Possible stuck request ffff888025485780: control (read@3072,1024B). Runtime 150 seconds [ 540.423078][T11450] input: syz0 as /devices/virtual/input/input24 [ 540.476231][T11454] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1296'. [ 540.784946][T11467] netlink: 'syz.4.1299': attribute type 10 has an invalid length. [ 540.816335][T11467] [ 540.818781][T11467] ====================================================== [ 540.825845][T11467] WARNING: possible circular locking dependency detected [ 540.832994][T11467] 6.16.0-syzkaller #0 Not tainted [ 540.838056][T11467] ------------------------------------------------------ [ 540.845131][T11467] syz.4.1299/11467 is trying to acquire lock: [ 540.851229][T11467] ffff88805a708e00 (team->team_lock_key#5){+.+.}-{4:4}, at: team_device_event+0x182/0xa20 [ 540.861319][T11467] [ 540.861319][T11467] but task is already holding lock: [ 540.868712][T11467] ffff888023cecd30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink+0x388/0x41c0 [ 540.878421][T11467] [ 540.878421][T11467] which lock already depends on the new lock. [ 540.878421][T11467] [ 540.888830][T11467] [ 540.888830][T11467] the existing dependency chain (in reverse order) is: [ 540.897852][T11467] [ 540.897852][T11467] -> #1 (&dev_instance_lock_key#3){+.+.}-{4:4}: [ 540.906308][T11467] lock_acquire+0x120/0x360 [ 540.911350][T11467] __mutex_lock+0x182/0xe80 [ 540.916388][T11467] dev_set_mtu+0x10e/0x260 [ 540.921336][T11467] team_add_slave+0x8b8/0x2840 [ 540.926635][T11467] do_set_master+0x530/0x6d0 [ 540.931758][T11467] do_setlink+0xcf0/0x41c0 [ 540.936704][T11467] rtnl_newlink+0x160b/0x1c70 [ 540.941924][T11467] rtnetlink_rcv_msg+0x7cc/0xb70 [ 540.947392][T11467] netlink_rcv_skb+0x205/0x470 [ 540.952682][T11467] netlink_unicast+0x75c/0x8e0 [ 540.957980][T11467] netlink_sendmsg+0x805/0xb30 [ 540.963301][T11467] __sock_sendmsg+0x21c/0x270 [ 540.968511][T11467] ____sys_sendmsg+0x505/0x830 [ 540.973806][T11467] ___sys_sendmsg+0x21f/0x2a0 [ 540.979031][T11467] __x64_sys_sendmsg+0x19b/0x260 [ 540.984620][T11467] do_syscall_64+0xfa/0x3b0 [ 540.989651][T11467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.996120][T11467] [ 540.996120][T11467] -> #0 (team->team_lock_key#5){+.+.}-{4:4}: [ 541.004499][T11467] validate_chain+0xb9b/0x2140 [ 541.009800][T11467] __lock_acquire+0xab9/0xd20 [ 541.015017][T11467] lock_acquire+0x120/0x360 [ 541.020049][T11467] __mutex_lock+0x182/0xe80 [ 541.025082][T11467] team_device_event+0x182/0xa20 [ 541.030558][T11467] notifier_call_chain+0x1b3/0x3e0 [ 541.036211][T11467] __dev_notify_flags+0x18d/0x2e0 [ 541.041769][T11467] netif_change_flags+0xe8/0x1a0 [ 541.047234][T11467] do_setlink+0xc55/0x41c0 [ 541.052207][T11467] rtnl_newlink+0x160b/0x1c70 [ 541.057431][T11467] rtnetlink_rcv_msg+0x7cc/0xb70 [ 541.062937][T11467] netlink_rcv_skb+0x205/0x470 [ 541.068262][T11467] netlink_unicast+0x75c/0x8e0 [ 541.073556][T11467] netlink_sendmsg+0x805/0xb30 [ 541.078876][T11467] __sock_sendmsg+0x21c/0x270 [ 541.084095][T11467] ____sys_sendmsg+0x505/0x830 [ 541.089405][T11467] ___sys_sendmsg+0x21f/0x2a0 [ 541.094643][T11467] __x64_sys_sendmsg+0x19b/0x260 [ 541.100121][T11467] do_syscall_64+0xfa/0x3b0 [ 541.105160][T11467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.111615][T11467] [ 541.111615][T11467] other info that might help us debug this: [ 541.111615][T11467] [ 541.121848][T11467] Possible unsafe locking scenario: [ 541.121848][T11467] [ 541.129301][T11467] CPU0 CPU1 [ 541.134681][T11467] ---- ---- [ 541.140048][T11467] lock(&dev_instance_lock_key#3); [ 541.145271][T11467] lock(team->team_lock_key#5); [ 541.152759][T11467] lock(&dev_instance_lock_key#3); [ 541.160488][T11467] lock(team->team_lock_key#5); [ 541.165468][T11467] [ 541.165468][T11467] *** DEADLOCK *** [ 541.165468][T11467] [ 541.173624][T11467] 2 locks held by syz.4.1299/11467: [ 541.178823][T11467] #0: ffffffff8f509f08 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 541.187904][T11467] #1: ffff888023cecd30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink+0x388/0x41c0 [ 541.198034][T11467] [ 541.198034][T11467] stack backtrace: [ 541.203952][T11467] CPU: 1 UID: 0 PID: 11467 Comm: syz.4.1299 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 541.203972][T11467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 541.204046][T11467] Call Trace: [ 541.204075][T11467] [ 541.204089][T11467] dump_stack_lvl+0x189/0x250 [ 541.204122][T11467] ? __pfx_dump_stack_lvl+0x10/0x10 [ 541.204143][T11467] ? __pfx__printk+0x10/0x10 [ 541.204166][T11467] ? print_lock_name+0xde/0x100 [ 541.204186][T11467] print_circular_bug+0x2ee/0x310 [ 541.204209][T11467] check_noncircular+0x134/0x160 [ 541.204236][T11467] validate_chain+0xb9b/0x2140 [ 541.204257][T11467] ? __lock_acquire+0xab9/0xd20 [ 541.204277][T11467] __lock_acquire+0xab9/0xd20 [ 541.204293][T11467] ? team_device_event+0x182/0xa20 [ 541.204308][T11467] lock_acquire+0x120/0x360 [ 541.204321][T11467] ? team_device_event+0x182/0xa20 [ 541.204341][T11467] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 541.204371][T11467] __mutex_lock+0x182/0xe80 [ 541.204407][T11467] ? team_device_event+0x182/0xa20 [ 541.204424][T11467] ? __try_to_del_timer_sync+0x34a/0x3a0 [ 541.204448][T11467] ? team_device_event+0x182/0xa20 [ 541.204463][T11467] ? __pfx___mutex_lock+0x10/0x10 [ 541.204480][T11467] ? __timer_delete_sync+0x218/0x2d0 [ 541.204511][T11467] team_device_event+0x182/0xa20 [ 541.204528][T11467] notifier_call_chain+0x1b3/0x3e0 [ 541.204551][T11467] __dev_notify_flags+0x18d/0x2e0 [ 541.204577][T11467] ? __pfx___dev_notify_flags+0x10/0x10 [ 541.204599][T11467] ? __dev_change_flags+0x4cc/0x6d0 [ 541.204624][T11467] ? __pfx___dev_change_flags+0x10/0x10 [ 541.204647][T11467] ? __pfx_console_unlock+0x10/0x10 [ 541.204667][T11467] ? irq_work_queue+0xbc/0x140 [ 541.204694][T11467] netif_change_flags+0xe8/0x1a0 [ 541.204720][T11467] do_setlink+0xc55/0x41c0 [ 541.204751][T11467] ? __pfx_do_setlink+0x10/0x10 [ 541.204772][T11467] ? _printk+0xcf/0x120 [ 541.204791][T11467] ? __pfx____ratelimit+0x10/0x10 [ 541.204812][T11467] ? __lock_acquire+0xab9/0xd20 [ 541.204829][T11467] ? __mutex_trylock_common+0x153/0x260 [ 541.204850][T11467] ? __pfx___mutex_trylock_common+0x10/0x10 [ 541.204871][T11467] ? rcu_is_watching+0x15/0xb0 [ 541.204889][T11467] ? trace_contention_end+0x39/0x120 [ 541.204908][T11467] ? __mutex_lock+0x330/0xe80 [ 541.204929][T11467] ? rtnl_newlink+0x8db/0x1c70 [ 541.204948][T11467] ? rcu_is_watching+0x15/0xb0 [ 541.204965][T11467] ? __pfx___mutex_lock+0x10/0x10 [ 541.204997][T11467] ? ns_capable+0x8a/0xf0 [ 541.205014][T11467] ? rtnl_link_get_net_capable+0x16a/0x350 [ 541.205038][T11467] rtnl_newlink+0x160b/0x1c70 [ 541.205058][T11467] ? finish_task_switch+0x18b/0x950 [ 541.205087][T11467] ? __pfx_rtnl_newlink+0x10/0x10 [ 541.205110][T11467] ? rcu_is_watching+0x15/0xb0 [ 541.205125][T11467] ? trace_sched_exit_tp+0x38/0x120 [ 541.205147][T11467] ? __schedule+0x16c8/0x4c90 [ 541.205166][T11467] ? preempt_schedule+0xae/0xc0 [ 541.205180][T11467] ? __pfx_preempt_schedule+0x10/0x10 [ 541.205212][T11467] ? preempt_schedule_irq+0xb5/0x150 [ 541.205235][T11467] ? __pfx___schedule+0x10/0x10 [ 541.205257][T11467] ? __local_bh_enable_ip+0x13e/0x1c0 [ 541.205279][T11467] ? rcu_is_watching+0x15/0xb0 [ 541.205295][T11467] ? trace_irq_disable+0x37/0x110 [ 541.205319][T11467] ? preempt_schedule_irq+0xde/0x150 [ 541.205336][T11467] ? __lock_acquire+0xab9/0xd20 [ 541.205362][T11467] ? __pfx_rtnl_newlink+0x10/0x10 [ 541.205395][T11467] rtnetlink_rcv_msg+0x7cc/0xb70 [ 541.205424][T11467] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 541.205453][T11467] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 541.205477][T11467] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 541.205506][T11467] netlink_rcv_skb+0x205/0x470 [ 541.205529][T11467] ? rcu_is_watching+0x15/0xb0 [ 541.205545][T11467] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 541.205567][T11467] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 541.205594][T11467] ? netlink_deliver_tap+0x2e/0x1b0 [ 541.205619][T11467] netlink_unicast+0x75c/0x8e0 [ 541.205644][T11467] netlink_sendmsg+0x805/0xb30 [ 541.205666][T11467] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 541.205685][T11467] ? __pfx_netlink_sendmsg+0x10/0x10 [ 541.205711][T11467] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 541.205728][T11467] ? __pfx_netlink_sendmsg+0x10/0x10 [ 541.205751][T11467] __sock_sendmsg+0x21c/0x270 [ 541.205771][T11467] ____sys_sendmsg+0x505/0x830 [ 541.205799][T11467] ? __pfx_____sys_sendmsg+0x10/0x10 [ 541.205827][T11467] ? import_iovec+0x74/0xa0 [ 541.205855][T11467] ___sys_sendmsg+0x21f/0x2a0 [ 541.205880][T11467] ? __pfx____sys_sendmsg+0x10/0x10 [ 541.205918][T11467] ? __fget_files+0x2a/0x420 [ 541.205939][T11467] ? __fget_files+0x3a0/0x420 [ 541.205960][T11467] __x64_sys_sendmsg+0x19b/0x260 [ 541.205986][T11467] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 541.206021][T11467] do_syscall_64+0xfa/0x3b0 [ 541.206039][T11467] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.206055][T11467] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 541.206071][T11467] ? clear_bhb_loop+0x60/0xb0 [ 541.206089][T11467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.206105][T11467] RIP: 0033:0x7f5f6538ebe9 [ 541.206154][T11467] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 541.206172][T11467] RSP: 002b:00007f5f6614b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 541.206193][T11467] RAX: ffffffffffffffda RBX: 00007f5f655b5fa0 RCX: 00007f5f6538ebe9 [ 541.206205][T11467] RDX: 0000000000000040 RSI: 0000200000000600 RDI: 0000000000000003 [ 541.206221][T11467] RBP: 00007f5f65411e19 R08: 0000000000000000 R09: 0000000000000000 [ 541.206231][T11467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 541.206240][T11467] R13: 00007f5f655b6038 R14: 00007f5f655b5fa0 R15: 00007ffd5ada0318 [ 541.206259][T11467] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 542.077422][T11474] input: syz0 as /devices/virtual/input/input25 [ 543.768841][T11479] syz_tun (unregistering): left allmulticast mode [ 543.786457][ T9604] bridge0: port 3(syz_tun) entered disabled state [ 543.794831][ T9604] syz_tun (unregistering): left allmulticast mode [ 543.801603][ T9604] syz_tun (unregistering): left promiscuous mode [ 543.808224][ T9604] bridge0: port 3(syz_tun) entered disabled state [ 543.882850][ T7059] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.941512][ T7059] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.992197][ T7059] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.041611][ T7059] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.124818][ T7059] bridge_slave_1: left allmulticast mode [ 544.131780][ T7059] bridge_slave_1: left promiscuous mode [ 544.140778][ T7059] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.150819][ T7059] bridge_slave_0: left allmulticast mode [ 544.156824][ T7059] bridge_slave_0: left promiscuous mode [ 544.162553][ T7059] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.273621][ T7059] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 544.284383][ T7059] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 544.294652][ T7059] bond0 (unregistering): Released all slaves [ 544.530120][ T7059] hsr_slave_0: left promiscuous mode [ 544.536123][ T7059] hsr_slave_1: left promiscuous mode [ 544.542642][ T7059] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 544.555583][ T7059] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 544.563715][ T7059] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 544.571719][ T7059] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 544.584222][ T7059] veth1_macvtap: left promiscuous mode [ 544.590245][ T7059] veth0_macvtap: left promiscuous mode [ 544.595945][ T7059] veth1_vlan: left promiscuous mode [ 544.601305][ T7059] veth0_vlan: left promiscuous mode [ 544.781969][ T7059] team0 (unregistering): Port device team_slave_1 removed [ 544.800460][ T7059] team0 (unregistering): Port device team_slave_0 removed [ 545.252071][ T7059] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.297039][ T7059] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.373650][ T7059] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.457597][ T7059] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.599677][ T7059] bridge_slave_1: left allmulticast mode [ 545.606977][ T7059] bridge_slave_1: left promiscuous mode [ 545.613071][ T7059] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.623902][ T7059] bridge_slave_0: left allmulticast mode [ 545.630721][ T7059] bridge_slave_0: left promiscuous mode [ 545.639638][ T7059] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.765524][ T7059] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 545.778166][ T7059] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 545.787903][ T7059] bond0 (unregistering): Released all slaves [ 545.999120][ T7059] hsr_slave_0: left promiscuous mode [ 546.005043][ T7059] hsr_slave_1: left promiscuous mode [ 546.013263][ T7059] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 546.023644][ T7059] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 546.034024][ T7059] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 546.041806][ T7059] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 546.056536][ T7059] veth1_macvtap: left promiscuous mode [ 546.062137][ T7059] veth0_macvtap: left promiscuous mode [ 546.068476][ T7059] veth1_vlan: left promiscuous mode [ 546.073848][ T7059] veth0_vlan: left promiscuous mode [ 546.333238][ T7059] team0 (unregistering): Port device team_slave_1 removed [ 546.363785][ T7059] team0 (unregistering): Port device team_slave_0 removed