last executing test programs: 12.12593375s ago: executing program 0 (id=652): prlimit64(0x0, 0xe, 0x0, 0x0) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) gettid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r2, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r1}, 0x20) recvmmsg(r1, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/52, 0x34}], 0x1}, 0xe}], 0x2, 0x0, 0x0) shutdown(r1, 0x1) 11.188950448s ago: executing program 0 (id=654): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x2) socket$inet6(0xa, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000200)={0x1, 0x0, 0x2, 0x3, 0x5f, &(0x7f00000009c0)}) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x20000180) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r4 = syz_open_dev$media(&(0x7f0000000080), 0x10001, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x101301) socket$xdp(0x2c, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x300, 0xff, 0xfffffffffffff0af, 0xffffffffffffffff, 0x0, 0x10000, 0x103, 0x3}, 0x0, &(0x7f00000002c0)={0x3fe, 0xcd7f, 0x3, 0x7, 0x9, 0x45ff, 0xd68d, 0x40000000000}, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x80000800, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_open_procfs(0x0, &(0x7f0000000840)='comm\x00') writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)='15', 0x2}], 0x8) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) timer_create(0x7, 0x0, &(0x7f0000001b40)=0x0) timer_settime(r6, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) 8.801791222s ago: executing program 2 (id=657): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan0\x00'}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x48810) 8.615184577s ago: executing program 2 (id=659): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f00000002c0)=ANY=[], 0x0, 0x0}) 8.49465487s ago: executing program 0 (id=660): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) openat$ttyS3(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x13, 0x0, 0x0, 0x0, 0x1ff5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'wlan1\x00', &(0x7f0000000180)=@ethtool_stats}) read$msr(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94) write$FUSE_BMAP(r0, &(0x7f0000000100)={0x61}, 0x18) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB='b *:'], 0x9) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x40040, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, r4, 0x2000004, 0x80010, 0xffffffffffffffff, 0x0) 7.554803027s ago: executing program 3 (id=662): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x48, r1, 0x7, 0xffffffff, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x1c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, "00000010"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x20}, @ETHTOOL_A_BITSET_MASK={0x8, 0x5, "7180bbda"}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 6.976249318s ago: executing program 3 (id=664): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, &(0x7f0000001180)=ANY=[@ANYBLOB='quota,usrquota_inode_hardlimit=7']) chdir(&(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x8000, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', 0x0) 6.126838954s ago: executing program 1 (id=666): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[], 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20010e"], 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000140), 0x1, 0x929402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000000)={0x1, 0x8, 0x0, 0x0}) 6.125099424s ago: executing program 3 (id=667): openat$sysfs(0xffffff9c, &(0x7f00000003c0)='/sys/power/pm_trace_dev_match', 0x20800, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_emit_ethernet(0x1e, &(0x7f0000000180)={@local, @broadcast, @void, {@can={0xc, {{0x0, 0x1, 0x1}, 0x8, 0x1, 0x0, 0x0, "dea68e14fe0356d7"}}}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) read$FUSE(r1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000080)=0x80000003) r3 = dup2(r2, r2) read$FUSE(r3, &(0x7f00000063c0)={0x2020}, 0x2020) syz_usb_connect(0x1, 0x2d, 0x0, 0x0) 6.004772066s ago: executing program 0 (id=668): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x2) socket$inet6(0xa, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000200)={0x1, 0x0, 0x2, 0x3, 0x5f, &(0x7f00000009c0)}) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x20000180) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r4 = syz_open_dev$media(&(0x7f0000000080), 0x10001, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x101301) socket$xdp(0x2c, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x300, 0xff, 0xfffffffffffff0af, 0xffffffffffffffff, 0x0, 0x10000, 0x103, 0x3}, 0x0, &(0x7f00000002c0)={0x3fe, 0xcd7f, 0x3, 0x7, 0x9, 0x45ff, 0xd68d, 0x40000000000}, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x80000800, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_open_procfs(0x0, &(0x7f0000000840)='comm\x00') writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)='15', 0x2}], 0x8) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) timer_create(0x7, 0x0, &(0x7f0000001b40)=0x0) timer_settime(r6, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) 3.282285678s ago: executing program 2 (id=669): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, 0x0, 0xb0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000001100)='./file0\x00') utimensat(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) 2.969779004s ago: executing program 1 (id=670): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$null(0xffffffffffffffff, 0x0, 0x10, 0x103) sched_setscheduler(0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00'}, 0x90) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, 0x0) 2.947566984s ago: executing program 2 (id=671): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = semget$private(0x0, 0x207, 0x0) semctl$GETALL(r4, 0x0, 0xd, 0xfffffffffffffffe) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, r5, 0x1, 0x70bd2c}, 0x14}, 0x1, 0x0, 0x0, 0x20000801}, 0x4) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071004000000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x60, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'virt_wifi0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syz_tun\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x63, 0x11, 0x22}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) 2.921380135s ago: executing program 0 (id=672): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c5602117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000000224e0000", 0x58}], 0x1) 1.830375026s ago: executing program 2 (id=673): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) io_setup(0x6, &(0x7f00000000c0)=0x0) io_getevents(r0, 0x257, 0x1, &(0x7f0000000240)=[{}], 0x0) io_submit(r0, 0x0, &(0x7f0000000280)) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x72, 0x11cfa, 0x0, 0x8000007, 0x3, 0x4, 0x1, 0x0, 0x5}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, &(0x7f0000000140)={0x800100, 0xffffffff, 0x2, 0xe1db, 0x1101, 0xff}) close(r3) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)={0x3c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end_cf_ack={{}, {0xa}, @device_a, @device_b}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x44800) 1.825729226s ago: executing program 1 (id=674): openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) gettid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r2, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r1}, 0x20) recvmmsg(r1, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/52, 0x34}], 0x1}, 0xe}], 0x2, 0x0, 0x0) shutdown(r1, 0x1) 1.762440477s ago: executing program 3 (id=675): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, &(0x7f0000001180)=ANY=[@ANYBLOB='quota,usrquota_inode_hardlimit=7']) chdir(&(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x8000, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', 0x0) 1.624233779s ago: executing program 3 (id=676): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0) msync(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210106, @local, {[@ssrr={0x89, 0x3, 0xe9}, @generic={0x7, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x20, 0x8000}}}}}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000004c00)=""/102392, 0x18ff8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xa4}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit={0x95, 0x0, 0x700}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x70) r2 = syz_open_dev$video(0x0, 0x200, 0x2000) r3 = eventfd(0xbd7b) io_submit(0x0, 0x6, &(0x7f0000000700)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x6, 0x7, r1, &(0x7f0000000200)="0cdeab6ec848ddf96b42488db1947bb8fe14669fedac45b83b6151c85f04718df487ecd33d2f2998fb084f599824001feb051a8587c4cef9c77d6d659985", 0x3e, 0x8000000000000000, 0x0, 0x1}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x7, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x65d5, 0x0, 0x0, r1}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x7, 0x1, 0xffffffffffffffff, &(0x7f0000000380)="6a2e746098935fb6527f3d62ed852e42a73d63d9c5929817b512fc96c0c5c249fc4bde4b354208895c86e690f32a0cf27e01850d6a68787794148d84fc685b4b7e71d5eee6e5aa2e2cde39b7ef8c2ca13c51148e717f28b4d280b956a0059a853c14d7c02b24d66d59ebf798bd0235898c467fed99038087ad5de90e1f144428278fa76c9acb52c2ac6a6d8a5b4d6f08449f7e19daf6b2ac30f525abaff332fb26739e3acaaba8e6286e133482c5a2055f736453ed7d7bff07982f9c43", 0xbd, 0x8, 0x0, 0x1}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x8, 0x4, r2, &(0x7f0000000540)="ee352ae1f741ebd616a1e1cd0335415269c56891a20482502a9d5744a7c1d463cc2fdee29565b6d8721b0786f1a847b4ebc7c7f78438a71660e012d235fa3cad92e18635d3ae05c5fc5e5dd4a1890619b55ed98f231e2ce23ae0b409b9fe8db53259c434e165f756d631896326c04b010f3ded346021c5069ea3e27bc1ce1b2f158e7b75ad531ba747ea5e58101945fba3cc8bcc441a0ebc04c5811a958b6f63a0a9771fb02e4dc1c2259c3a77e792b11fffa6c44e731033fea4", 0xba, 0xffffffff, 0x0, 0x3, r3}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000900)="731e0258d75ca24d7ea0680f045e3b8c035f46837419b83afafba9c7506b02541034b47bcce8ed4a74a5169d1d85f612d55cfee9f97912e3518aab3b5c8a343e306ffe823b71b841600e0c8af30d31af5f7007451d4de34bfe7e61403449f9d5d8c6b0ebf60490a68bde62d871e023c9587c68a9eb64df15bd44c1517e6809f4e062a6c0037f3fd5ba081f6d6ecaa85d9b8f9cb287279d67f380328cd11538e813a385a1717f6de7edda75903f77be984d8404eba6256fdc3a0febe00d08143ae8586b5ab242613fc058753f620a19c104b4cddd4305edf309b851e3922c33d004a926a41e2afe69ed3bf044d60883726b098c26f7cf0063166e8f1312be402b7e1fe151bac7dcd2829ffc8e83c1354e205243e275c06b15f3a120cb5e469251ec6d788133a915f80df3ff039af5a9fa43455e95720ed3c4611586e3a152c7497b9ac4908bfefc620defe2efe31d5f970b604de117a02891b37c16927b9b55e69a2638feca56f5faacdf9034752e85a668ba4de6bfa50a55a2ea3c377afbe63d7fb655f8cc0991c14f9df9cb0b7cf6be263926daa2687796acec9183942f15aa6dd87cd012a9eda4069763ae4ea03168fea11efb4ec49b142ed738cea159bdba3c1a10d02fc0332be1ff900676987777db92d08b0ae1902201e5f5b0b7499dcbe1045a922cb71521f1adeb181a5f6f490cbe553a040e055ec81abdc33c1d89d3701aeefb66d019b2ce4d11980598b58565415d4dd96f4b76a07bb661d144c38301e36f5af5ea07daa265b26886e5f5a40529ea7763c32e08de3d49348e11938747b846ac022aec830a2cf43505574622b3dca610704c1aa9e37c89bc28aeced2b50db8253dbaeea7321c8c1af1b6275845e0a9ad178390eff556a6e0a0778296da1d3519ceadf07efbb98759bd710dbc997ea04f72deece34cfad955553fbb272d24bc624c5baad8a5b8768490c5de751a741e9a1ef6f4eb2268d797f747760a2faf8d1500de6b27f391b0aaaec4231636a4c3fb350ed5f070a2510e6f7f8c57d98152d30b4ab74a2a2153647a5fa6395a7db6e1bac91f09a2243abc2e524883ec925fc7ba71f5f2383daafd3bfbb6d75774069420d5ad54c1ba2e1ea119d29dded19c10903aae0ccf15bb196ceb06c838cec1b360e3de1092f4494594bab6fa4d2cce08a2612d1b44cf82203c1284fe91d3df3d7b038d03f2993f07f44583c442942e60d84d1e9c49e00a0d7d5dfdee25f8ef2ee5a8d0e14852e7eb61830714c6be62dd562c7b9ee3f55941d64972c6db39b2a728a2715294819d29ac84ba89575e0e2b4d6e41fad22eeabd73b5d7c6877b05d40375ec5d54bc4bf120e5ab799c5273e9f113f1a0cbb39c4cc57deedec47c954dbb0a340d112fc82aa69402a2cc8c9d8f05c6d0248e6a6e5d8b663db291005cf43c83e06336bca4e79390091412d74ec98aa76e25a105d2895d60ba47250b8dae8b568624ca710b4c56f9b5f2f16845355454018f5452c1a4b71890ad30ae5ca7f1205daff1c4c672620ab6e8cc9261ed6b7605d0be7e0c63a40403c2b8a367d217a7bff5350192be3ec6e5f4197fcf450e94b55b51033244a0a9cbe8069fe207d024c3be180041dc5141e1fed19553e519ec837247fbbb6ed056280d3db035c5a184355adc2d2ae8536ad0b97e21e5b4d214267c7e89b7a280f2a76d66fd6f7f77681824765bea136b41878cd440a0438ff11c1e79e0d73da7483ef15a46008a6c8202e7f671943cc44813c9fbf99663faac882fc79989859bb4509b216cdb0f6ef2a91c1f67bfc39c478d6bd74e62a94fe65b861bac4035ad7205248830716cc07f93908e789dcad0d36aeaf6b2218e8df67d79b67a1cb910790feb96b4647a442a457232a561302344706a2f838168f1a86a88d1442940d20943116583741bb78a7fa7f4f83a3bb5ed87f054186a22440c9af832e0fecdb9f49d3c681f13ef1bbce877167f22d35e7347a9b9a2af72427e3092d4d419aec8580919cd9249b3c9f7fd156690404f288650753a0cb9d727cea079295e4e66fad768628d5d5f61b75f171816be91abe803b7e901955e47cc96056104816868706830ad85c46e86eb5fd3647160cb38c0af5c04afbc2356b7e820e6dd50b36a86370eef02aea1be066cfe1db164c2360a563ea7fa2f98297dafec7c4b09243378730d15e7dd22661e3c43af42679e601b59eca276fb1a627fb11f5e432ac56347bfb22f668bffdc98c2048ea97fa5c24e131cdb7734446941154fd3dca002ec9761f7026a8b78bdebd10ca044752cbcd1db1d55e8b44cfec325b020acc781989c7034acfbe2c6f678cb3164693e2c55c66ee68fa5ae5568431c4b3cc9d823d9ecef2177571649a092a02e21579b467cb87f40d6ab2e80b429cec7bb9373f3e5532c490918a1dfd07fe7c3d67bbc1c8c2ddfcb81e15ca26ef66dbb681c48033155b3ecbd88e49c2f6b90551d62465ebaaa52670242d8aa87726ed11a602ccf9c8fe8bd9ab4e581c5daec43fd14073806d456f08d10e86373d32ce87da669074328b1c3a4a569ae109196d463d7351c90750000e1558720b1573a5abd9019a446a8594a46e8778687e4829916d0d76789ab5a88ae28fdeff98921f2cc28320441769faf3d475343b35bea316e3b9c649f3324cdce50cd34c8a44657274d85abda2fd7ffa6865a200c7d56b53e994a91526b075b2b5f1c7054edf544e7df85f73dced65a7d4409289993898f7de22b09471e5c5a50fbd97f3b49fc29006680dc1985fc90a55a2049373fa975bcb3ceafa9d3db1c9e2183c424dd1adff6b67a89d680ca1c34a0f54cbd2adfe4d1e83e1b61a49c5ca6603756dfae9b222af27bf52612b46b34958c8c737f6f8438aaa17bf822e05ef7a66dbca9937b666d5c626e33dd3db97eea704a1bd2eb45fe3b3814ef47df9bc53a04b17ba696f8d8e4409e8df9a5ae85a5c40d0c112a9fcc1e5c5165f5055df9020ccd3d6f056976678342edc0ba498b5ccabbf566883fa330ea680f97b547a96de07dc16248667c7860cfdd134139b4ab73345204e8f69a8febe6c6331b7976a1a1bda0be9db5f9695eadd8111e36c1b65ff90916f184ed6685474650ebb1d2b1897369afe35c6b1ee517a0a9155ec5dc73976b0d559d6e75933dadf4a352795aa71f0d5cefca228335664b1a08881880e7793cef0e7e4834e3cf5044675ac1e2f55e90da761caeaa0c180751c514b4bdaad8e880dcbd7ac639f8aea5538a17631540b642462b18ab9e87cf246be97798863e3c905751e22979ef9b12a9bf9ada8dde40898d5361473e696aa3339d24a9d7331c0bfcb45a1f42fa48df60a8f15e4f4b807ae245fff8edf8e14eb29f12df84d1a82ab3037d7e9f8a1744b1475a73c03d8f224e05e50d382e91c15b59ed131cf00e5736ab3eb294f044de13238f3bcc248b8c5fa587b333318f1f7e6262ed2828a22257b385d1d0e858339acc5fbfa658822b09beac206bc6bee5ff29f925f53cce54e051980782844bc476e3af92103b3bb2657debf3206d6d85f449d9d47ab39d63122d636c1488d2527533e834f13c663233f55ece2c219e269ee49ecb0a8ff11969f4fed9b3533664ab160f8d3ce522e4a9dc24fba2527eaa36f9e537ac4c7f5fb802dfe75b485aab400a0afa5daa1b566f4d075cb34f70662edd5f90274b091f6e5f3ca062a00d07ffdafe5cffb6e1b72e27a6d614690dfc4b943d7debc3caf0ff1bf0a174e51bc1aca9467f9b2d6523902060e0ecd26754fd2f32cabddc107a674d401e222775715c2094f1c49797a54f0f907e5121eaea8c99c85349d835b62b2bc4e3059827947d78646ebb6597a88bce1b0914bea9137d2529297b9cbf0b6aadef97897a5d732da996d9a2b69f17ba5dc9f8d65f978dfe2a8f22c6634023a8ff0cd6dae7a088fe6beb7a921a723a190c96c219ed99f08937e9472efb5358b7215ce31672718ad87096273e743ed475d512e3f153fc4cc370f28324a7f278821752b738504721fdb0538c56b9a96f2adb85144ea6626234598af2739a9929d5b882eb2c0394d7c0f0bf55eeb7267f3c1c0948b96af2d31cb397a934e836be75a8eddfcec20e618763f752bea106111b17c78e28440a87aa2442ccbed8bdbd747349d9cf88e51114980ac0a9fe659ecec9947f878ccaa90e80ca6b25e1a3935aaa2ed37999014a927df8189fca5218fc2b24b1dbe6e6da349057e940638f4aab094dba932b035b5bd799ea670abe0d1050ba27c51a3bb8cd1abdb3c9b10ed5c3f9105ee91b3dabb08e665b4652f09fc92fb23f0869071feb605913a2343dcaee9fdd67ab722034bde8f690a0b1265c166442c7a9d55871b3d1968b640dc81f260ddc94683d18732f720303be5f5957f66d0b7324a5d53c6bd684cd40f41dbb9c8e479a9c20f9d8951c8d7c2edacccd1f3387ae0ccb2a33bc5fbbcae5e0d08f733af6bc9cf0cf9de92b41d48e57cce09b99a48f324c6d455a6c9ba49f3e01be13fafe22d682ef4b91b41ea076d92e2d0a7ccffc293fee14ee7328310bb21ed3fd0a69f7209593ca830ddcca210799d1bb0180433c87964ddfcffbe3dc6aba5234eccc9897f6a793847b10f317a687206a0ce93a8dfb80018b8da257c67784265b516edc4e3b8c98d9610c824a60575ee553786280d305ca4578e1b0347c091ccb8d13b7d830fe84974fcf14793adcc99809a8f12655859d59e611722c5fbc900905fbcc420749851b4aab39420324837df006b3f4ffca179ebf94ca67fe8302570244e55ac52ed3a7575016e8b22e37c7335061873611820f7f63bb77813284ef7c179d217e5502a35286f93f23b44664851ee810993c920edbae657b81cf4ff7ee50dce0796d6bf5adf8f25e48ad2b99990f4cc839e423a41ba6923a100303e68d68fc00bd16af04aec916e931315af0075222611268af7e1bb611b258c60e7aa8e14e064be81db0d722b985e27cd569fb7af4dca17d51b7c748cecbd563fc93b4e5b8c2730c949a954d4c552b1552efefd1f56819e49a19a4cc3163edf4b2081426f2fc821d97473d91817a87950548ef3fee9ebe0a3315ee391078088588d2e5c43c1d2ab0e075f2d0787ceb6dcce0c32cc1e67ec0169fd8fd74eb51d9e77c8e4fefce32ab7aa5041bdb1c579e4c3209424c4f61e41934016af34b257c1dd6a59bfcd4a76acf6a060f036c9edd48e83143c17379ef08d43adeeb060743db54411a8626280c6c0511df6dc5d5d9c5bc02627582b5b5d9417a7b39e67c044ab9e133ab6dc2117a3f3198d46c07dd23376d3b74c72af0d20ec079aff6b9c1a594e7c4ee1231af52dbbfef45687f3862a71e38139a7491438a4b7cc2f887a18fd0681d5177ccec0e06d667bfa7f9026e7963b00ef8b187fa08c2c759fe73fe135c58e6f18afce468a8f56eee39fcbfafb38857637992cffd6743216dec34d9caf21588d6e545518eaf25e150b60029f094bb1f52389e2b3b6e184997ef0011c81e4e9f7bfc72169a78ac5a48d542afbe3af4f0cfc3d3fcf0f387b44f5826746ada45c11b7c4ee67b690415e42d28ee15267f96c2515945c3b57c783c63292ee64ee4fe85c8bcff0a53807321ee2b8ac0cc5af40f86f140aa2b99db466c49d730c800e8bc3bb1895d30929164eb14b3cb7e0a43bae27f4421faa3ed10569e8bcc9f4e0b5df21c2d942595bab8d2ab00262ab3d0d5874ec3bd2d8a256ac638ce3050f8fb188d08df86f0833dda0ba5b33a29dfb5e68a5cef902aad68a1cfabfde9fbe15fb1cb0e60", 0xffc, 0x7, 0x0, 0x1, r0}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x8, 0x4, r0, &(0x7f0000001900)="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", 0x600, 0x9, 0x0, 0x2}]) 1.60239474s ago: executing program 1 (id=677): socket(0x11, 0x800000003, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcm3724\x00', [0x4f37, 0x7, 0x10002, 0x4, 0x5, 0xcc7, 0x8, 0x7, 0xa, 0x5, 0x2, 0x1, 0x1, 0x1, 0x6, 0x101, 0x0, 0x2, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x1000, 0x7ff, 0xe69, 0x3d, 0x8, 0xc, 0x0, 0xfffffff8]}) 1.56360865s ago: executing program 2 (id=678): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[], 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20010e"], 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000140), 0x1, 0x929402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000000)={0x1, 0x8, 0x0, 0x0}) 1.166394298s ago: executing program 1 (id=679): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, 0x0, 0xb0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000001100)='./file0\x00') utimensat(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) 529.32478ms ago: executing program 3 (id=680): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x2) socket$inet6(0xa, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000200)={0x1, 0x0, 0x2, 0x3, 0x5f, &(0x7f00000009c0)}) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x20000180) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r4 = syz_open_dev$media(&(0x7f0000000080), 0x10001, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x101301) socket$xdp(0x2c, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x300, 0xff, 0xfffffffffffff0af, 0xffffffffffffffff, 0x0, 0x10000, 0x103, 0x3}, 0x0, &(0x7f00000002c0)={0x3fe, 0xcd7f, 0x3, 0x7, 0x9, 0x45ff, 0xd68d, 0x40000000000}, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x80000800, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_open_procfs(0x0, &(0x7f0000000840)='comm\x00') writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)='15', 0x2}], 0x8) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) timer_create(0x7, 0x0, &(0x7f0000001b40)=0x0) timer_settime(r6, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) 483.744351ms ago: executing program 1 (id=681): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x7, 0x2, 0x1, "5ee9f7e6accae6951fc3796de8ecd392a635ea32360379ec280ffde5ef6765ba", 0x43564548}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0), 0x2441, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r1, 0x4004510d, &(0x7f0000000400)=0xb8e7) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') lseek(r3, 0x1000000, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) init_module(&(0x7f0000000580)=ANY=[@ANYRES8=r3], 0x78, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e23}, @IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x48}}, 0x48000) r5 = fsopen(&(0x7f0000000180)='binder\x00', 0x1) ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f0000000240)={0xb8b, 0x89, 0xa57, 0x9, 0x2, 0x4}) bind$nfc_llcp(r4, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) r6 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x10000, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) r8 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io(r8, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000780)=ANY=[@ANYBLOB='\x00\x00.'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 0 (id=682): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$null(0xffffffffffffffff, 0x0, 0x10, 0x103) sched_setscheduler(0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00'}, 0x90) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.50' (ED25519) to the list of known hosts. syzkaller login: [ 80.558441][ T5778] cgroup: Unknown subsys name 'net' [ 80.694621][ T5778] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.473496][ T5778] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.181938][ T5803] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.191500][ T5797] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.196192][ T5803] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.207192][ T5799] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.207800][ T5803] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.222170][ T5799] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.224433][ T5803] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.229531][ T5797] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.245137][ T5803] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.245202][ T5799] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.252361][ T5803] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.261995][ T5797] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.275751][ T5806] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 84.275854][ T5797] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.284352][ T5799] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.292796][ T5797] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.299384][ T5799] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 84.307456][ T5806] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.315192][ T5799] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.326625][ T5797] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 84.335031][ T5806] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.342455][ T5797] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.352463][ T5799] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 84.367647][ T5799] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.875274][ T5790] chnl_net:caif_netlink_parms(): no params data found [ 84.954129][ T5795] chnl_net:caif_netlink_parms(): no params data found [ 84.985856][ T5791] chnl_net:caif_netlink_parms(): no params data found [ 85.049072][ T5789] chnl_net:caif_netlink_parms(): no params data found [ 85.084138][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.091448][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.099023][ T5790] bridge_slave_0: entered allmulticast mode [ 85.106205][ T5790] bridge_slave_0: entered promiscuous mode [ 85.130028][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.137506][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.144693][ T5790] bridge_slave_1: entered allmulticast mode [ 85.152118][ T5790] bridge_slave_1: entered promiscuous mode [ 85.264225][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.278147][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.303890][ T5795] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.311210][ T5795] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.318505][ T5795] bridge_slave_0: entered allmulticast mode [ 85.325592][ T5795] bridge_slave_0: entered promiscuous mode [ 85.348801][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.356146][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.363312][ T5791] bridge_slave_0: entered allmulticast mode [ 85.370662][ T5791] bridge_slave_0: entered promiscuous mode [ 85.378953][ T5795] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.386347][ T5795] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.393513][ T5795] bridge_slave_1: entered allmulticast mode [ 85.400655][ T5795] bridge_slave_1: entered promiscuous mode [ 85.424849][ T5790] team0: Port device team_slave_0 added [ 85.447898][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.455032][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.463159][ T5791] bridge_slave_1: entered allmulticast mode [ 85.470615][ T5791] bridge_slave_1: entered promiscuous mode [ 85.502753][ T5790] team0: Port device team_slave_1 added [ 85.557566][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.564705][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.572231][ T5789] bridge_slave_0: entered allmulticast mode [ 85.580755][ T5789] bridge_slave_0: entered promiscuous mode [ 85.590248][ T5791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.602762][ T5791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.614346][ T5795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.626995][ T5795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.654966][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.662052][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.689724][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.702458][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.710180][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.717589][ T5789] bridge_slave_1: entered allmulticast mode [ 85.724568][ T5789] bridge_slave_1: entered promiscuous mode [ 85.757283][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.764260][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.790791][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.864253][ T5791] team0: Port device team_slave_0 added [ 85.873263][ T5791] team0: Port device team_slave_1 added [ 85.881623][ T5795] team0: Port device team_slave_0 added [ 85.902170][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.914531][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.938535][ T5795] team0: Port device team_slave_1 added [ 85.978598][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.985641][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.015861][ T5791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.045844][ T5790] hsr_slave_0: entered promiscuous mode [ 86.052378][ T5790] hsr_slave_1: entered promiscuous mode [ 86.073396][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.080492][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.106461][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.150362][ T5789] team0: Port device team_slave_0 added [ 86.159875][ T5789] team0: Port device team_slave_1 added [ 86.191382][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.198466][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.225051][ T5795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.254352][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.261414][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.287572][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.300879][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.307951][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.334007][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.346684][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.353668][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.380003][ T5795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.396519][ T5799] Bluetooth: hci3: command tx timeout [ 86.406059][ T50] Bluetooth: hci2: command tx timeout [ 86.411791][ T5799] Bluetooth: hci0: command tx timeout [ 86.468278][ T5791] hsr_slave_0: entered promiscuous mode [ 86.474774][ T5791] hsr_slave_1: entered promiscuous mode [ 86.480794][ T5799] Bluetooth: hci1: command tx timeout [ 86.488298][ T5791] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.496564][ T5791] Cannot create hsr debugfs directory [ 86.535018][ T5795] hsr_slave_0: entered promiscuous mode [ 86.541955][ T5795] hsr_slave_1: entered promiscuous mode [ 86.548334][ T5795] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.556139][ T5795] Cannot create hsr debugfs directory [ 86.622829][ T5789] hsr_slave_0: entered promiscuous mode [ 86.629408][ T5789] hsr_slave_1: entered promiscuous mode [ 86.639344][ T5789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.647293][ T5789] Cannot create hsr debugfs directory [ 86.997965][ T5790] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.014197][ T5790] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.025935][ T5790] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.042497][ T5790] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.110035][ T5789] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.130365][ T5789] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.140696][ T5789] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.153355][ T5789] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.246844][ T5795] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.263627][ T5795] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.302457][ T5795] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.313468][ T5795] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.371797][ T5791] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.383400][ T5791] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.409467][ T5791] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.419923][ T5791] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.484583][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.541560][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.554557][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.595766][ T1068] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.603136][ T1068] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.634733][ T1068] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.641923][ T1068] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.679947][ T5795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.701146][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.739838][ T5795] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.748776][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.755963][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.787406][ T2961] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.794627][ T2961] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.806524][ T2961] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.813654][ T2961] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.842534][ T1138] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.849730][ T1138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.874810][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.959563][ T5791] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.002974][ T1138] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.010188][ T1138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.100224][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.107437][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.381250][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.434046][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.476081][ T5799] Bluetooth: hci0: command tx timeout [ 88.477796][ T50] Bluetooth: hci2: command tx timeout [ 88.481587][ T5799] Bluetooth: hci3: command tx timeout [ 88.556858][ T5799] Bluetooth: hci1: command tx timeout [ 88.573832][ T5790] veth0_vlan: entered promiscuous mode [ 88.616194][ T5790] veth1_vlan: entered promiscuous mode [ 88.667399][ T5795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.687501][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.703982][ T5790] veth0_macvtap: entered promiscuous mode [ 88.718031][ T5790] veth1_macvtap: entered promiscuous mode [ 88.731353][ T5789] veth0_vlan: entered promiscuous mode [ 88.757166][ T5789] veth1_vlan: entered promiscuous mode [ 88.775971][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.817927][ T5791] veth0_vlan: entered promiscuous mode [ 88.832379][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.857361][ T5791] veth1_vlan: entered promiscuous mode [ 88.869728][ T5790] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.880417][ T5790] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.889284][ T5790] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.898933][ T5790] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.983202][ T5789] veth0_macvtap: entered promiscuous mode [ 89.004717][ T5795] veth0_vlan: entered promiscuous mode [ 89.023804][ T5789] veth1_macvtap: entered promiscuous mode [ 89.078477][ T5791] veth0_macvtap: entered promiscuous mode [ 89.090083][ T5795] veth1_vlan: entered promiscuous mode [ 89.102525][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.106478][ T5791] veth1_macvtap: entered promiscuous mode [ 89.127873][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.129241][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.146818][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.160376][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.219323][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.230135][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.230141][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.232018][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.256148][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.273043][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.284261][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.294660][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.305418][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.321085][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.331068][ T5789] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.340066][ T5789] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.349372][ T5789] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.358889][ T5789] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.381695][ T5795] veth0_macvtap: entered promiscuous mode [ 89.390224][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.401294][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.411236][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.422458][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.434667][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.473625][ T5795] veth1_macvtap: entered promiscuous mode [ 89.494891][ T5791] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.503805][ T5791] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.515053][ T5791] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.524979][ T5791] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.564653][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.577723][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.590227][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.610019][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.621899][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.639268][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.653583][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.698571][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.711916][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.722326][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.733432][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.743458][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.754310][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.767321][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.819875][ T5795] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.829876][ T5795] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.839472][ T5795] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.848854][ T5795] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.992381][ T1138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.013631][ T1138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.118575][ T1138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.131822][ T1138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.236747][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.267860][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.306739][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.323007][ T2956] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.345900][ T2956] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.490130][ T3531] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.510481][ T3531] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.555793][ T5799] Bluetooth: hci2: command tx timeout [ 90.561334][ T5806] Bluetooth: hci0: command tx timeout [ 90.566839][ T50] Bluetooth: hci3: command tx timeout [ 90.587197][ T3531] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.629169][ T3531] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.636695][ T5799] Bluetooth: hci1: command tx timeout [ 91.054098][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 91.156393][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 91.258940][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 92.030297][ T9] cfg80211: failed to load regulatory.db [ 92.282908][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 92.780061][ T5799] Bluetooth: hci2: command tx timeout [ 92.790553][ T5799] Bluetooth: hci3: command tx timeout [ 92.791252][ T50] Bluetooth: hci1: command tx timeout [ 92.816743][ T5806] Bluetooth: hci0: command tx timeout [ 92.838701][ T5900] syz.1.5[5900]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 93.000063][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 93.102030][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 93.102443][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 93.118842][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 94.306170][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.435965][ T5915] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 95.656677][ T5931] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10'. [ 99.516665][ T5939] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 99.758299][ T5939] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 99.808193][ T5939] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 99.822998][ T5939] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 99.865081][ T5939] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 99.924680][ T5939] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 100.020812][ T5939] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 100.028892][ T5939] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 100.143078][ T5939] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 100.199831][ T5939] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 100.224405][ T5939] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 100.250592][ T5939] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 100.959549][ T5806] Bluetooth: hci1: command 0x0c1a tx timeout [ 101.835646][ T5806] Bluetooth: hci0: command 0x0c1a tx timeout [ 102.075745][ T5806] Bluetooth: hci2: command 0x0c1a tx timeout [ 102.242000][ T5806] Bluetooth: hci3: command 0x0c1a tx timeout [ 102.583582][ T5994] (null): rxe_set_mtu: Set mtu to 1024 [ 102.769508][ T5994] infiniband syz2: set active [ 102.775157][ T5994] infiniband syz2: added syz_tun [ 102.894236][ T5994] RDS/IB: syz2: added [ 102.898876][ T5994] smc: adding ib device syz2 with port count 1 [ 102.905164][ T5994] smc: ib device syz2 port 1 has pnetid [ 103.467627][ T5806] Bluetooth: hci1: command 0x0c1a tx timeout [ 103.526658][ T6000] Zero length message leads to an empty skb [ 103.712943][ T6003] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551609) [ 103.724351][ T6003] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 103.928369][ T5806] Bluetooth: hci0: command 0x0c1a tx timeout [ 104.216950][ T5806] Bluetooth: hci2: command 0x0c1a tx timeout [ 104.326222][ T5806] Bluetooth: hci3: command 0x0c1a tx timeout [ 104.775983][ T6009] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551609) [ 104.786747][ T6009] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 105.516127][ T5806] Bluetooth: hci1: command 0x0c1a tx timeout [ 105.996167][ T5806] Bluetooth: hci0: command 0x0c1a tx timeout [ 106.235556][ T5806] Bluetooth: hci2: command 0x0c1a tx timeout [ 106.395633][ T5806] Bluetooth: hci3: command 0x0c1a tx timeout [ 108.445110][ T6040] syz2: rxe_newlink: already configured on syz_tun [ 109.728620][ T6053] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 112.631771][ T6064] Invalid ELF header magic: != ELF [ 113.400799][ T6073] netlink: 8 bytes leftover after parsing attributes in process `syz.1.43'. [ 113.445995][ T965] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 113.478944][ T6073] netlink: 8 bytes leftover after parsing attributes in process `syz.1.43'. [ 113.605809][ T965] usb 4-1: device descriptor read/64, error -71 [ 113.667001][ T6073] netlink: 8 bytes leftover after parsing attributes in process `syz.1.43'. [ 113.677271][ T6073] netlink: 8 bytes leftover after parsing attributes in process `syz.1.43'. [ 113.681143][ T6076] netlink: 40 bytes leftover after parsing attributes in process `syz.1.43'. [ 113.896156][ T965] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 114.065792][ T965] usb 4-1: device descriptor read/64, error -71 [ 114.069284][ T6079] input: syz0 as /devices/virtual/input/input5 [ 114.237571][ T965] usb usb4-port1: attempt power cycle [ 114.865781][ T965] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 114.900085][ T965] usb 4-1: device descriptor read/8, error -71 [ 115.178653][ T965] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 115.251120][ T965] usb 4-1: device descriptor read/8, error -71 [ 115.397418][ T965] usb usb4-port1: unable to enumerate USB device [ 115.745119][ T6097] (null): rxe_set_mtu: Set mtu to 1024 [ 115.752101][ T6097] rdma_rxe: rxe_newlink: failed to add syz_tun [ 116.415816][ T5904] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 116.563434][ T6117] tmpfs: Unknown parameter 'usrquota_inode_har' [ 116.625760][ T5904] usb 3-1: Using ep0 maxpacket: 32 [ 116.634343][ T5904] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 116.657027][ T5904] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 116.676929][ T5904] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 116.688846][ T5904] usb 3-1: Product: syz [ 116.693048][ T5904] usb 3-1: Manufacturer: syz [ 116.754221][ T5904] usb 3-1: SerialNumber: syz [ 117.140647][ T5904] usb 3-1: config 0 descriptor?? [ 117.268741][ T6100] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 117.289939][ T5904] hub 3-1:0.0: bad descriptor, ignoring hub [ 117.350167][ T5904] hub: probe of 3-1:0.0 failed with error -5 [ 118.064929][ T6125] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.247512][ T6125] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.494277][ T6125] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.618247][ T5881] usb 3-1: USB disconnect, device number 2 [ 119.866906][ T6145] (null): rxe_set_mtu: Set mtu to 1024 [ 119.872732][ T6145] rdma_rxe: rxe_newlink: failed to add syz_tun [ 120.230958][ T6125] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.962995][ T6125] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.059016][ T6125] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.155670][ T6125] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.208551][ T6125] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.455573][ T785] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 122.516198][ T785] usb 3-1: Using ep0 maxpacket: 8 [ 122.561849][ T785] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 122.740086][ T785] usb 3-1: config 179 has no interface number 0 [ 122.769583][ T785] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 122.857955][ T785] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 122.924163][ T785] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 102, changing to 10 [ 123.135368][ T785] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 24624, setting to 1024 [ 123.300318][ T785] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 123.538225][ T785] usb 3-1: config 179 interface 65 has no altsetting 0 [ 123.624431][ T6189] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 124.106401][ T6193] (null): rxe_set_mtu: Set mtu to 1024 [ 124.112279][ T6193] rdma_rxe: rxe_newlink: failed to add syz_tun [ 124.520800][ T785] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 124.530340][ T785] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.698705][ T785] usb 3-1: can't set config #179, error -71 [ 124.710794][ T785] usb 3-1: USB disconnect, device number 3 [ 129.996441][ T6243] nvme_fabrics: unknown parameter or missing value 'C' in ctrl creation request [ 130.735676][ T5950] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 130.935620][ T5950] usb 3-1: Using ep0 maxpacket: 8 [ 130.947656][ T5950] usb 3-1: config 0 has an invalid descriptor of length 150, skipping remainder of the config [ 130.958853][ T5950] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 130.981650][ T5950] usb 3-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 131.022725][ T5950] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.069666][ T5950] usb 3-1: Product: syz [ 131.074140][ T5950] usb 3-1: Manufacturer: syz [ 131.079267][ T5950] usb 3-1: SerialNumber: syz [ 131.094258][ T5950] usb 3-1: config 0 descriptor?? [ 131.117499][ T5950] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 132.288682][ T6283] netlink: 4 bytes leftover after parsing attributes in process `syz.3.88'. [ 132.817606][ T785] usb 3-1: USB disconnect, device number 4 [ 132.978482][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.985683][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.162946][ T6373] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551609) [ 139.173598][ T6373] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 141.749577][ T6390] netlink: 8 bytes leftover after parsing attributes in process `syz.3.113'. [ 141.791958][ T6393] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 143.705922][ T6407] netlink: 'syz.3.120': attribute type 3 has an invalid length. [ 143.956924][ T6407] netlink: 830 bytes leftover after parsing attributes in process `syz.3.120'. [ 144.008574][ T6407] bond_slave_0: entered promiscuous mode [ 144.014086][ T6415] trusted_key: encrypted_key: insufficient parameters specified [ 144.014593][ T6407] bond_slave_1: entered promiscuous mode [ 144.915183][ T6422] input: syz0 as /devices/virtual/input/input6 [ 145.214098][ T6427] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 145.455641][ T5864] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 145.637693][ T5864] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.659255][ T5864] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.725835][ T6435] netlink: 8 bytes leftover after parsing attributes in process `syz.1.126'. [ 145.741207][ T5864] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 146.365609][ T5864] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.388650][ T5864] usb 4-1: config 0 descriptor?? [ 147.206870][ T5864] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 147.234857][ T5864] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 147.265264][ T5864] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 147.286305][ T5864] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 147.297877][ T5864] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 147.305959][ T5864] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 147.320499][ T5864] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 147.388364][ T6447] trusted_key: encrypted_key: insufficient parameters specified [ 147.831114][ T5864] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 147.924546][ T5864] cp2112 0003:10C4:EA90.0001: Part Number: 0x00 Device Version: 0x00 [ 147.991863][ T5864] cp2112 0003:10C4:EA90.0001: error requesting SMBus config [ 148.015386][ T5864] cp2112: probe of 0003:10C4:EA90.0001 failed with error -32 [ 148.635042][ T5864] usb 4-1: USB disconnect, device number 6 [ 148.980006][ T6458] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 149.055653][ T5950] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 149.816048][ T6469] netlink: 8 bytes leftover after parsing attributes in process `syz.0.137'. [ 150.302739][ T5950] usb 2-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice=b7.de [ 150.315581][ T5950] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.323621][ T5950] usb 2-1: Product: syz [ 150.328222][ T5950] usb 2-1: Manufacturer: syz [ 150.333009][ T5950] usb 2-1: SerialNumber: syz [ 150.343775][ T5950] usb 2-1: config 0 descriptor?? [ 150.354776][ T5950] ttusb_dec_send_command: command bulk message failed: error -22 [ 150.363217][ T5950] ttusb-dec: probe of 2-1:0.0 failed with error -22 [ 150.980855][ T6453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.013888][ T6453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.062503][ T5950] usb 2-1: USB disconnect, device number 2 [ 151.565856][ T5843] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 151.627199][ T6483] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551609) [ 151.637771][ T6483] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 151.897188][ T5843] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 151.908329][ T5843] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 151.928685][ T5843] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 151.938139][ T5843] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.958409][ T5843] usb 3-1: Product: syz [ 151.962960][ T5843] usb 3-1: Manufacturer: syz [ 151.971100][ T5843] usb 3-1: SerialNumber: syz [ 153.129052][ T6495] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 153.501146][ T6502] netlink: 68 bytes leftover after parsing attributes in process `syz.2.141'. [ 156.718051][ T6524] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551609) [ 156.728634][ T6524] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 157.171611][ T5843] usb 3-1: 0:2 : does not exist [ 157.586576][ T6527] netlink: 40 bytes leftover after parsing attributes in process `syz.1.155'. [ 158.141972][ T5950] usb 3-1: USB disconnect, device number 5 [ 158.308987][ T6529] tipc: Started in network mode [ 158.314198][ T6529] tipc: Node identity e6d848ff9e49, cluster identity 4711 [ 158.349965][ T6529] tipc: Enabled bearer , priority 0 [ 158.358611][ T6529] syzkaller0: entered promiscuous mode [ 158.364194][ T6529] syzkaller0: entered allmulticast mode [ 158.439580][ T6529] tipc: Resetting bearer [ 158.450760][ T6528] tipc: Resetting bearer [ 158.593680][ T6528] tipc: Disabling bearer [ 160.190715][ T6555] syz2: rxe_newlink: already configured on syz_tun [ 162.109810][ T6573] netlink: 4 bytes leftover after parsing attributes in process `syz.2.166'. [ 162.121704][ T6573] netlink: 4 bytes leftover after parsing attributes in process `syz.2.166'. [ 163.030059][ T6572] netlink: 40 bytes leftover after parsing attributes in process `syz.1.165'. [ 163.888257][ T6576] input: syz0 as /devices/virtual/input/input7 [ 165.129739][ T6589] syz2: rxe_newlink: already configured on syz_tun [ 166.161609][ T6599] Invalid ELF header magic: != ELF [ 167.256104][ T6607] netlink: 40 bytes leftover after parsing attributes in process `syz.0.176'. [ 167.663914][ T6615] trusted_key: syz.1.177 sent an empty control message without MSG_MORE. [ 169.198302][ T6624] (null): rxe_set_mtu: Set mtu to 1024 [ 169.206698][ T6624] rdma_rxe: rxe_newlink: failed to add syz_tun [ 172.076524][ T6647] netlink: 8 bytes leftover after parsing attributes in process `syz.0.186'. [ 172.134382][ T6647] netlink: 8 bytes leftover after parsing attributes in process `syz.0.186'. [ 172.151927][ T6647] netlink: 8 bytes leftover after parsing attributes in process `syz.0.186'. [ 172.185107][ T6647] netlink: 8 bytes leftover after parsing attributes in process `syz.0.186'. [ 172.688821][ T6646] netlink: 40 bytes leftover after parsing attributes in process `syz.0.186'. [ 176.903458][ T6685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.196'. [ 176.924952][ T6685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.196'. [ 176.952201][ T6685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.196'. [ 176.965636][ T6685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.196'. [ 177.254894][ T6685] netlink: 40 bytes leftover after parsing attributes in process `syz.1.196'. [ 184.700210][ T6762] fuse: Bad value for 'fd' [ 190.150302][ T6799] fuse: Bad value for 'fd' [ 194.568577][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.609396][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.993477][ T6844] fuse: Bad value for 'fd' [ 203.435057][ T6905] 9pnet_fd: Insufficient options for proto=fd [ 207.911948][ T6940] 9pnet_fd: Insufficient options for proto=fd [ 213.686163][ T6971] 9pnet_fd: Insufficient options for proto=fd [ 214.067936][ T6983] netlink: 20 bytes leftover after parsing attributes in process `syz.1.270'. [ 214.146512][ T6983] geneve2: entered allmulticast mode [ 214.365820][ T5850] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 214.955660][ T5850] usb 3-1: device descriptor read/64, error -71 [ 215.235676][ T5850] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 216.312124][ T5850] usb 3-1: device descriptor read/64, error -71 [ 216.445783][ T5850] usb usb3-port1: attempt power cycle [ 217.635525][ T5850] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 217.859216][ T5850] usb 3-1: device not accepting address 8, error -71 [ 218.646259][ T7015] input: syz0 as /devices/virtual/input/input8 [ 219.393371][ T7028] syz.3.284 (7028): /proc/7027/oom_adj is deprecated, please use /proc/7027/oom_score_adj instead. [ 228.929998][ T7074] can0: slcan on ttyS3. [ 229.087848][ T7074] can0 (unregistered): slcan off ttyS3. [ 233.682578][ T7116] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 233.791099][ T2961] Bluetooth: hci4: Frame reassembly failed (-84) [ 234.308638][ T7121] fuse: Bad value for 'fd' [ 235.755784][ T5806] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 237.610679][ T7140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.312'. [ 237.678046][ T7140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.312'. [ 237.813192][ T7140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.312'. [ 237.815853][ T7141] netlink: 40 bytes leftover after parsing attributes in process `syz.1.312'. [ 237.975449][ T7140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.312'. [ 238.308103][ T7146] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551609) [ 238.379209][ T7146] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 239.421136][ T7156] fuse: Bad value for 'fd' [ 244.007819][ T7195] fuse: Bad value for 'fd' [ 244.772839][ T7198] netlink: 8 bytes leftover after parsing attributes in process `syz.1.328'. [ 244.834451][ T7198] netlink: 8 bytes leftover after parsing attributes in process `syz.1.328'. [ 244.855830][ T7198] netlink: 8 bytes leftover after parsing attributes in process `syz.1.328'. [ 244.870771][ T7198] netlink: 8 bytes leftover after parsing attributes in process `syz.1.328'. [ 245.087409][ T7199] netlink: 40 bytes leftover after parsing attributes in process `syz.1.328'. [ 253.824273][ T7252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.341'. [ 254.053209][ T7252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.341'. [ 254.147084][ T7252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.341'. [ 254.179793][ T7252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.341'. [ 254.299826][ T7247] netlink: 40 bytes leftover after parsing attributes in process `syz.2.341'. [ 254.872966][ T7260] netlink: 892 bytes leftover after parsing attributes in process `syz.1.345'. [ 254.972316][ T7264] netlink: 892 bytes leftover after parsing attributes in process `syz.1.345'. [ 255.840985][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.884413][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.780628][ T7293] netlink: 8 bytes leftover after parsing attributes in process `syz.3.352'. [ 259.025879][ T7299] netlink: 8 bytes leftover after parsing attributes in process `syz.3.352'. [ 259.496042][ T7299] netlink: 8 bytes leftover after parsing attributes in process `syz.3.352'. [ 259.506318][ T7290] netlink: 40 bytes leftover after parsing attributes in process `syz.3.352'. [ 259.515304][ T7299] netlink: 8 bytes leftover after parsing attributes in process `syz.3.352'. [ 263.707694][ T7337] Invalid ELF header magic: != ELF [ 264.095426][ T7344] netlink: 8 bytes leftover after parsing attributes in process `syz.3.366'. [ 264.125879][ T23] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 264.126218][ T7344] netlink: 8 bytes leftover after parsing attributes in process `syz.3.366'. [ 264.144618][ T7344] netlink: 8 bytes leftover after parsing attributes in process `syz.3.366'. [ 264.154343][ T7344] netlink: 8 bytes leftover after parsing attributes in process `syz.3.366'. [ 264.315975][ T23] usb 3-1: device descriptor read/64, error -71 [ 264.319729][ T7344] netlink: 40 bytes leftover after parsing attributes in process `syz.3.366'. [ 264.608380][ T23] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 264.825492][ T23] usb 3-1: device descriptor read/64, error -71 [ 264.947312][ T23] usb usb3-port1: attempt power cycle [ 265.426448][ T23] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 266.709039][ T23] usb 3-1: device descriptor read/8, error -71 [ 268.461031][ T7372] syz.1.375: attempt to access beyond end of device [ 268.461031][ T7372] nbd1: rw=0, sector=64, nr_sectors = 1 limit=0 [ 268.532802][ T7372] syz.1.375: attempt to access beyond end of device [ 268.532802][ T7372] nbd1: rw=0, sector=256, nr_sectors = 1 limit=0 [ 269.327670][ T7372] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 269.437158][ T7372] syz.1.375: attempt to access beyond end of device [ 269.437158][ T7372] nbd1: rw=0, sector=512, nr_sectors = 1 limit=0 [ 269.528522][ T7372] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 269.630379][ T7385] netlink: 8 bytes leftover after parsing attributes in process `syz.3.376'. [ 269.657333][ T7372] syz.1.375: attempt to access beyond end of device [ 269.657333][ T7372] nbd1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 269.806834][ T7372] syz.1.375: attempt to access beyond end of device [ 269.806834][ T7372] nbd1: rw=0, sector=512, nr_sectors = 2 limit=0 [ 269.823818][ T7385] netlink: 8 bytes leftover after parsing attributes in process `syz.3.376'. [ 269.883959][ T7372] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 269.894503][ T7385] netlink: 8 bytes leftover after parsing attributes in process `syz.3.376'. [ 269.900473][ T7372] syz.1.375: attempt to access beyond end of device [ 269.900473][ T7372] nbd1: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 269.916492][ T7372] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 269.988721][ T7385] netlink: 8 bytes leftover after parsing attributes in process `syz.3.376'. [ 270.079072][ T7387] netlink: 40 bytes leftover after parsing attributes in process `syz.3.376'. [ 270.095930][ T7372] syz.1.375: attempt to access beyond end of device [ 270.095930][ T7372] nbd1: rw=0, sector=64, nr_sectors = 4 limit=0 [ 270.178288][ T7372] syz.1.375: attempt to access beyond end of device [ 270.178288][ T7372] nbd1: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 270.243264][ T7372] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 270.285695][ T7372] syz.1.375: attempt to access beyond end of device [ 270.285695][ T7372] nbd1: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 270.331230][ T7372] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 270.346177][ T7372] syz.1.375: attempt to access beyond end of device [ 270.346177][ T7372] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 270.362687][ T7372] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 270.373019][ T7372] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 270.403473][ T7372] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 270.448692][ T7372] block nbd1: shutting down sockets [ 274.151119][ T5843] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 274.314211][ T7417] 9pnet_fd: Insufficient options for proto=fd [ 274.358037][ T5843] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.375393][ T5843] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.395576][ T5843] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 274.404657][ T5843] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.446454][ T5843] usb 3-1: config 0 descriptor?? [ 275.452685][ T5843] usbhid 3-1:0.0: can't add hid device: -32 [ 275.465598][ T5843] usbhid: probe of 3-1:0.0 failed with error -32 [ 275.491254][ T5843] usb 3-1: USB disconnect, device number 14 [ 277.326700][ T7447] Invalid ELF header magic: != ELF [ 277.955455][ T8] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 278.145462][ T8] usb 1-1: device descriptor read/64, error -71 [ 278.891627][ T8] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 279.105432][ T8] usb 1-1: device descriptor read/64, error -71 [ 279.235755][ T8] usb usb1-port1: attempt power cycle [ 279.263831][ T7455] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 279.288815][ T35] Bluetooth: hci4: Frame reassembly failed (-84) [ 279.369010][ T7457] 9pnet_fd: Insufficient options for proto=fd [ 280.425447][ T8] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 280.513307][ T8] usb 1-1: device descriptor read/8, error -71 [ 280.746507][ T5904] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 280.953263][ T5904] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.068782][ T5904] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.207838][ T5904] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 281.276579][ T50] Bluetooth: hci4: command 0x1003 tx timeout [ 281.287058][ T5806] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 281.445478][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.516115][ T5904] usb 3-1: config 0 descriptor?? [ 282.186621][ T7482] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551609) [ 282.197435][ T7482] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 282.392212][ T5904] usbhid 3-1:0.0: can't add hid device: -32 [ 282.399503][ T5904] usbhid: probe of 3-1:0.0 failed with error -32 [ 282.476655][ T5904] usb 3-1: USB disconnect, device number 15 [ 283.709902][ T7497] netlink: 8 bytes leftover after parsing attributes in process `syz.2.409'. [ 283.712611][ T7498] netlink: 40 bytes leftover after parsing attributes in process `syz.2.409'. [ 286.365525][ T5864] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 286.443041][ T7524] netlink: 8 bytes leftover after parsing attributes in process `syz.3.418'. [ 286.736172][ T7524] netlink: 8 bytes leftover after parsing attributes in process `syz.3.418'. [ 286.754073][ T7524] netlink: 8 bytes leftover after parsing attributes in process `syz.3.418'. [ 286.810063][ T7524] netlink: 8 bytes leftover after parsing attributes in process `syz.3.418'. [ 286.906851][ T7523] netlink: 40 bytes leftover after parsing attributes in process `syz.3.418'. [ 287.233037][ T5864] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.251869][ T5864] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.261787][ T5864] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 287.271459][ T5864] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.282717][ T5864] usb 1-1: config 0 descriptor?? [ 287.546356][ T5843] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 288.254429][ T5843] usb 4-1: config 0 has an invalid interface number: 76 but max is 0 [ 288.337888][ T5843] usb 4-1: config 0 has no interface number 0 [ 288.365917][ T5843] usb 4-1: config 0 interface 76 has no altsetting 0 [ 288.431602][ T5843] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=62.9a [ 288.440762][ T5843] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.578767][ T5843] usb 4-1: Product: syz [ 288.595547][ T5843] usb 4-1: Manufacturer: syz [ 288.600326][ T5843] usb 4-1: SerialNumber: syz [ 288.668003][ T5864] usbhid 1-1:0.0: can't add hid device: -32 [ 288.674113][ T5864] usbhid: probe of 1-1:0.0 failed with error -32 [ 288.702698][ T7539] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551609) [ 288.714730][ T5843] usb 4-1: config 0 descriptor?? [ 288.727904][ T5843] cp210x 4-1:0.76: cp210x converter detected [ 288.734434][ T5864] usb 1-1: USB disconnect, device number 6 [ 288.746380][ T7539] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 289.729881][ T5843] cp210x 4-1:0.76: failed to get vendor val 0x370b size 1: -71 [ 289.737610][ T5843] cp210x 4-1:0.76: querying part number failed [ 289.874353][ T5843] usb 4-1: cp210x converter now attached to ttyUSB0 [ 289.907726][ T5843] usb 4-1: USB disconnect, device number 7 [ 289.955041][ T5843] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 290.001181][ T5843] cp210x 4-1:0.76: device disconnected [ 297.263581][ T7610] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ0 [ 297.495600][ T27] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 297.690232][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.702005][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 297.716268][ T27] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 297.726049][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.754527][ T27] usb 2-1: config 0 descriptor?? [ 298.407486][ T27] usbhid 2-1:0.0: can't add hid device: -32 [ 298.420650][ T27] usbhid: probe of 2-1:0.0 failed with error -32 [ 298.456443][ T27] usb 2-1: USB disconnect, device number 3 [ 302.490236][ T5904] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 302.834765][ T5904] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.988414][ T5904] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.225490][ T5904] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 303.275424][ T5904] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.301215][ T5904] usb 4-1: config 0 descriptor?? [ 304.096553][ T5904] usbhid 4-1:0.0: can't add hid device: -32 [ 304.123247][ T5904] usbhid: probe of 4-1:0.0 failed with error -32 [ 304.152954][ T5904] usb 4-1: USB disconnect, device number 8 [ 315.992632][ T7730] netlink: 4 bytes leftover after parsing attributes in process `syz.0.482'. [ 316.610063][ T7726] team0: No ports can be present during mode change [ 317.390699][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.397100][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.495563][ T785] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 320.699580][ T785] usb 3-1: Using ep0 maxpacket: 8 [ 320.707305][ T785] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 320.740159][ T785] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 320.791177][ T785] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 320.835515][ T785] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 320.871914][ T785] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 320.899182][ T785] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.179671][ T785] usb 3-1: GET_CAPABILITIES returned 0 [ 321.186355][ T785] usbtmc 3-1:16.0: can't read capabilities [ 321.445101][ T785] usb 3-1: USB disconnect, device number 16 [ 322.610881][ T7781] (null): rxe_set_mtu: Set mtu to 256 [ 322.621447][ T7781] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 325.548421][ T7811] netlink: 8 bytes leftover after parsing attributes in process `syz.2.505'. [ 326.212715][ T7809] netlink: 40 bytes leftover after parsing attributes in process `syz.2.505'. [ 327.006008][ T7827] syz.3.510: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 327.030401][ T7827] CPU: 1 PID: 7827 Comm: syz.3.510 Not tainted syzkaller #0 [ 327.037772][ T7827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 327.047850][ T7827] Call Trace: [ 327.051138][ T7827] [ 327.054075][ T7827] dump_stack_lvl+0x16c/0x230 [ 327.058777][ T7827] ? show_regs_print_info+0x20/0x20 [ 327.063983][ T7827] ? load_image+0x3b0/0x3b0 [ 327.068495][ T7827] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 327.074922][ T7827] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 327.081426][ T7827] warn_alloc+0x210/0x300 [ 327.085785][ T7827] ? stack_trace_save+0x9c/0xe0 [ 327.090653][ T7827] ? zone_watermark_ok_safe+0x230/0x230 [ 327.096238][ T7827] ? kasan_set_track+0x5f/0x70 [ 327.101041][ T7827] ? kasan_set_track+0x4e/0x70 [ 327.105834][ T7827] ? __kasan_kmalloc+0x8f/0xa0 [ 327.110619][ T7827] ? xsk_init_queue+0xb0/0x110 [ 327.115393][ T7827] ? xsk_setsockopt+0x43c/0x6f0 [ 327.120264][ T7827] ? do_sock_setsockopt+0x175/0x1a0 [ 327.125480][ T7827] ? __x64_sys_setsockopt+0x184/0x200 [ 327.130879][ T7827] __vmalloc_node_range+0x126/0x1320 [ 327.136217][ T7827] ? free_vm_area+0x50/0x50 [ 327.140741][ T7827] vmalloc_user+0x74/0x80 [ 327.145082][ T7827] ? xskq_create+0xbf/0x170 [ 327.149591][ T7827] xskq_create+0xbf/0x170 [ 327.153927][ T7827] xsk_init_queue+0xb0/0x110 [ 327.158535][ T7827] xsk_setsockopt+0x43c/0x6f0 [ 327.163231][ T7827] ? xsk_poll+0x670/0x670 [ 327.167565][ T7827] ? __fget_files+0x28/0x4d0 [ 327.172176][ T7827] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 327.177748][ T7827] ? security_socket_setsockopt+0x7e/0xa0 [ 327.183467][ T7827] ? xsk_poll+0x670/0x670 [ 327.187801][ T7827] do_sock_setsockopt+0x175/0x1a0 [ 327.192856][ T7827] ? __fdget+0x180/0x210 [ 327.197121][ T7827] __x64_sys_setsockopt+0x184/0x200 [ 327.202332][ T7827] do_syscall_64+0x55/0xb0 [ 327.206760][ T7827] ? clear_bhb_loop+0x40/0x90 [ 327.211443][ T7827] ? clear_bhb_loop+0x40/0x90 [ 327.216135][ T7827] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 327.222065][ T7827] RIP: 0033:0x7f709058ec29 [ 327.226519][ T7827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 327.246135][ T7827] RSP: 002b:00007f7091470038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 327.254557][ T7827] RAX: ffffffffffffffda RBX: 00007f70907d6180 RCX: 00007f709058ec29 [ 327.262539][ T7827] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 327.270530][ T7827] RBP: 00007f7090611e41 R08: 0000000000000052 R09: 0000000000000000 [ 327.278507][ T7827] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 327.286478][ T7827] R13: 00007f70907d6218 R14: 00007f70907d6180 R15: 00007fff81ac9818 [ 327.294462][ T7827] [ 327.313095][ T7827] Mem-Info: [ 327.316543][ T7827] active_anon:8153 inactive_anon:0 isolated_anon:0 [ 327.316543][ T7827] active_file:10773 inactive_file:39973 isolated_file:0 [ 327.316543][ T7827] unevictable:773 dirty:87 writeback:0 [ 327.316543][ T7827] slab_reclaimable:10175 slab_unreclaimable:92874 [ 327.316543][ T7827] mapped:28843 shmem:4275 pagetables:568 [ 327.316543][ T7827] sec_pagetables:0 bounce:0 [ 327.316543][ T7827] kernel_misc_reclaimable:0 [ 327.316543][ T7827] free:1353934 free_pcp:7937 free_cma:0 [ 327.361769][ T7827] Node 0 active_anon:32612kB inactive_anon:0kB active_file:43092kB inactive_file:159688kB unevictable:1556kB isolated(anon):0kB isolated(file):0kB mapped:118072kB dirty:348kB writeback:0kB shmem:15564kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11352kB pagetables:2272kB sec_pagetables:0kB all_unreclaimable? no [ 327.399737][ T7827] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 327.432561][ T7827] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 327.464795][ T7827] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 327.545400][ T7827] Node 0 DMA32 free:1499588kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:32964kB inactive_anon:0kB active_file:43092kB inactive_file:158372kB unevictable:1556kB writepending:348kB present:3129332kB managed:2589600kB mlocked:20kB bounce:0kB free_pcp:14404kB local_pcp:7848kB free_cma:0kB [ 327.594757][ T7827] lowmem_reserve[]: 0 0 1 1 1 [ 327.628293][ T7827] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1316kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 327.690079][ T7827] lowmem_reserve[]: 0 0 0 0 0 [ 327.694972][ T7827] Node 1 Normal free:3900780kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:16992kB local_pcp:9824kB free_cma:0kB [ 327.768035][ T7827] lowmem_reserve[]: 0 0 0 0 0 [ 327.773287][ T7827] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 327.789880][ T7827] Node 0 DMA32: 1101*4kB (UME) 1584*8kB (UME) 971*16kB (UME) 621*32kB (UM) 369*64kB (UME) 91*128kB (UME) 19*256kB (UME) 12*512kB (UE) 8*1024kB (UM) 6*2048kB (UME) 337*4096kB (UM) = 1499588kB [ 327.820155][ T7827] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 327.893047][ T7827] Node 1 Normal: 229*4kB (UME) 57*8kB (UME) 41*16kB (UME) 100*32kB (UME) 26*64kB (UME) 7*128kB (UME) 1*256kB (M) 1*512kB (E) 1*1024kB (E) 2*2048kB (UE) 949*4096kB (M) = 3900780kB [ 327.931800][ T7827] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 327.942435][ T7827] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 327.953382][ T7827] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 327.963786][ T7827] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 327.973346][ T7827] 54221 total pagecache pages [ 328.023022][ T7827] 0 pages in swap cache [ 328.027334][ T7827] Free swap = 124996kB [ 328.031651][ T7827] Total swap = 124996kB [ 328.035986][ T7827] 2097051 pages RAM [ 328.039835][ T7827] 0 pages HighMem/MovableOnly [ 328.045238][ T7827] 416137 pages reserved [ 328.051974][ T7827] 0 pages cma reserved [ 329.224538][ T7849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.518'. [ 329.290380][ T7849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.518'. [ 329.317154][ T7849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.518'. [ 329.335511][ T7849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.518'. [ 329.763066][ T7847] netlink: 40 bytes leftover after parsing attributes in process `syz.1.518'. [ 338.796128][ T5904] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 338.824179][ T7950] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 338.831128][ T7950] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 338.840354][ T7950] vhci_hcd vhci_hcd.0: Device attached [ 339.009803][ T5904] usb 3-1: device descriptor read/64, error -71 [ 339.027855][ T7951] vhci_hcd: connection closed [ 339.073627][ T3531] vhci_hcd: stop threads [ 339.205498][ T785] usb 35-1: new high-speed USB device number 2 using vhci_hcd [ 340.148224][ T3531] vhci_hcd: release socket [ 340.152929][ T5904] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 340.163968][ T3531] vhci_hcd: disconnect device [ 340.575419][ T5904] usb 3-1: device descriptor read/64, error -71 [ 341.123817][ T5904] usb usb3-port1: attempt power cycle [ 341.575963][ T5904] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 341.876851][ T5904] usb 3-1: device descriptor read/8, error -71 [ 345.282845][ T5904] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 345.537561][ T785] vhci_hcd: vhci_device speed not set [ 345.924858][ T5904] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 345.944640][ T5904] usb 3-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 345.956133][ T5904] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 346.072008][ T5904] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 346.097560][ T5904] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 346.125407][ T5904] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 346.133467][ T5904] usb 3-1: Product: syz [ 346.175731][ T5904] usb 3-1: Manufacturer: syz [ 346.202222][ T5904] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 346.448852][ T8013] netlink: 8 bytes leftover after parsing attributes in process `syz.3.571'. [ 346.516433][ T8013] netlink: 8 bytes leftover after parsing attributes in process `syz.3.571'. [ 346.530096][ T8013] netlink: 8 bytes leftover after parsing attributes in process `syz.3.571'. [ 346.554364][ T8013] netlink: 8 bytes leftover after parsing attributes in process `syz.3.571'. [ 346.682006][ T8013] netlink: 40 bytes leftover after parsing attributes in process `syz.3.571'. [ 346.903183][ T5864] usb 3-1: USB disconnect, device number 21 [ 349.262359][ T8045] netlink: 8 bytes leftover after parsing attributes in process `syz.0.581'. [ 349.276806][ T8045] netlink: 8 bytes leftover after parsing attributes in process `syz.0.581'. [ 349.344877][ T8045] netlink: 8 bytes leftover after parsing attributes in process `syz.0.581'. [ 349.361842][ T8045] netlink: 8 bytes leftover after parsing attributes in process `syz.0.581'. [ 349.510326][ T8045] netlink: 40 bytes leftover after parsing attributes in process `syz.0.581'. [ 352.109241][ T8066] (null): rxe_set_mtu: Set mtu to 1024 [ 352.115645][ T8066] rdma_rxe: rxe_newlink: failed to add syz_tun [ 352.116567][ T785] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 352.407946][ T785] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 352.445700][ T785] usb 2-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 352.836125][ T8080] netlink: 8 bytes leftover after parsing attributes in process `syz.3.593'. [ 352.912839][ T785] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 352.958643][ T785] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 352.988955][ T8077] netlink: 40 bytes leftover after parsing attributes in process `syz.3.593'. [ 353.001503][ T785] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 353.012164][ T785] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 353.021093][ T785] usb 2-1: Product: syz [ 353.025737][ T785] usb 2-1: Manufacturer: syz [ 353.064685][ T785] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 353.334884][ T5843] usb 2-1: USB disconnect, device number 4 [ 353.613328][ T5850] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 353.632144][ T5850] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 353.775450][ T5864] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 353.967200][ T5864] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 353.978501][ T5864] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 353.989292][ T5864] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 353.998489][ T5864] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.008931][ T5864] usb 1-1: config 0 descriptor?? [ 355.167928][ T5864] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 355.338914][ T5864] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 355.349508][ T5864] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 355.357113][ T5864] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 355.364126][ T5864] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 355.372617][ T5864] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 355.379882][ T5864] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 355.415639][ T5864] cp2112 0003:10C4:EA90.0003: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 355.537019][ T5864] cp2112 0003:10C4:EA90.0003: error requesting version [ 355.614580][ T8117] netlink: 8 bytes leftover after parsing attributes in process `syz.2.603'. [ 355.634500][ T5864] cp2112: probe of 0003:10C4:EA90.0003 failed with error -32 [ 356.089332][ T8114] netlink: 40 bytes leftover after parsing attributes in process `syz.2.603'. [ 357.705380][ T5864] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 359.604529][ T5850] usb 1-1: USB disconnect, device number 7 [ 360.223848][ T5864] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 360.610500][ T5864] usb 4-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 360.626375][ T5864] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 360.635615][ T5864] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 360.706018][ T5864] usb 4-1: string descriptor 0 read error: -71 [ 360.718568][ T5864] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 360.730912][ T5864] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 360.920195][ T5864] usb 4-1: can't set config #1, error -71 [ 360.932269][ T8148] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551609) [ 360.942771][ T8148] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 361.010462][ T5864] usb 4-1: USB disconnect, device number 9 [ 362.305814][ T5850] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 362.542803][ T5850] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 362.554293][ T5850] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 362.567931][ T5850] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 362.605477][ T5850] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.637695][ T5850] usb 2-1: config 0 descriptor?? [ 363.053131][ T5850] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 363.183123][ T8178] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551609) [ 363.193632][ T8178] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 363.247955][ T5850] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 363.381939][ T5850] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 363.458997][ T5850] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 363.992938][ T5850] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 364.025902][ T5850] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 364.058214][ T5850] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 364.094417][ T8182] netlink: 8 bytes leftover after parsing attributes in process `syz.3.623'. [ 364.200748][ T5850] cp2112 0003:10C4:EA90.0004: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 364.299489][ T8182] netlink: 8 bytes leftover after parsing attributes in process `syz.3.623'. [ 364.300117][ T5850] cp2112 0003:10C4:EA90.0004: error requesting version [ 364.376142][ T5850] cp2112: probe of 0003:10C4:EA90.0004 failed with error -32 [ 364.566271][ T8182] netlink: 8 bytes leftover after parsing attributes in process `syz.3.623'. [ 364.661601][ T8182] netlink: 8 bytes leftover after parsing attributes in process `syz.3.623'. [ 364.835446][ T8182] netlink: 40 bytes leftover after parsing attributes in process `syz.3.623'. [ 365.215635][ T8196] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 365.927189][ T5864] usb 2-1: USB disconnect, device number 5 [ 366.669545][ T8212] netlink: 4 bytes leftover after parsing attributes in process `syz.1.630'. [ 367.915614][ T5806] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 368.107408][ T8217] netlink: 8 bytes leftover after parsing attributes in process `syz.1.630'. [ 368.122360][ T8217] netlink: 'syz.1.630': attribute type 5 has an invalid length. [ 368.130574][ T8217] netlink: 20 bytes leftover after parsing attributes in process `syz.1.630'. [ 368.176885][ T8217] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 368.253747][ T8217] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 368.259752][ T8227] Invalid ELF header magic: != ELF [ 368.290280][ T8217] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 368.304940][ T8217] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 368.320301][ T8217] geneve3: entered promiscuous mode [ 368.326110][ T8217] geneve3: entered allmulticast mode [ 368.571461][ T8] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 369.016337][ T8] usb 4-1: device descriptor read/64, error -71 [ 369.286104][ T8] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 369.375472][ T23] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 369.455462][ T8] usb 4-1: device descriptor read/64, error -71 [ 369.567704][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 369.578932][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 369.585791][ T8] usb usb4-port1: attempt power cycle [ 369.588963][ T23] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 369.603798][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.617680][ T23] usb 1-1: config 0 descriptor?? [ 372.533534][ T23] usbhid 1-1:0.0: can't add hid device: -71 [ 372.539861][ T23] usbhid: probe of 1-1:0.0 failed with error -71 [ 372.560284][ T23] usb 1-1: USB disconnect, device number 8 [ 372.565499][ T8] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 372.626974][ T8] usb 4-1: device descriptor read/8, error -71 [ 372.926367][ T8] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 372.956205][ T8] usb 4-1: device descriptor read/8, error -71 [ 372.995396][ T5904] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 373.055441][ T23] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 373.075838][ T8] usb usb4-port1: unable to enumerate USB device [ 373.176087][ T5904] usb 2-1: Using ep0 maxpacket: 8 [ 373.200027][ T5904] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 373.217190][ T5904] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 373.233322][ T5904] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 373.243658][ T5904] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 373.248284][ T23] usb 1-1: config 0 has an invalid interface number: 76 but max is 0 [ 373.262228][ T5904] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 373.271302][ T23] usb 1-1: config 0 has no interface number 0 [ 373.282082][ T23] usb 1-1: config 0 interface 76 has no altsetting 0 [ 373.283562][ T5904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.293618][ T23] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=62.9a [ 373.306521][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.314743][ T23] usb 1-1: Product: syz [ 373.319233][ T23] usb 1-1: Manufacturer: syz [ 373.338185][ T23] usb 1-1: SerialNumber: syz [ 373.353827][ T23] usb 1-1: config 0 descriptor?? [ 373.381479][ T23] cp210x 1-1:0.76: cp210x converter detected [ 374.812386][ T5904] usb 2-1: GET_CAPABILITIES returned 0 [ 375.015717][ T5904] usbtmc 2-1:16.0: can't read capabilities [ 375.181801][ T5904] usb 2-1: USB disconnect, device number 6 [ 375.234996][ T23] cp210x 1-1:0.76: failed to get vendor val 0x370b size 1: -71 [ 375.270981][ T23] cp210x 1-1:0.76: querying part number failed [ 375.302498][ T23] usb 1-1: cp210x converter now attached to ttyUSB0 [ 375.324053][ T23] usb 1-1: USB disconnect, device number 9 [ 375.363622][ T23] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 375.380869][ T23] cp210x 1-1:0.76: device disconnected [ 375.765632][ T5904] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 376.464791][ T5904] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.478243][ T5904] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 376.625427][ T5904] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 376.669577][ T8273] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551609) [ 376.680765][ T8273] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 376.697126][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.749186][ T5904] usb 3-1: config 0 descriptor?? [ 378.289921][ T5904] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 378.416653][ T5904] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 378.520255][ T5904] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 378.606117][ T5904] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 378.705041][ T5904] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 378.722171][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.728886][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.828855][ T5904] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 378.915128][ T5904] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 379.068782][ T5904] cp2112 0003:10C4:EA90.0005: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 379.272794][ T5904] cp2112 0003:10C4:EA90.0005: error requesting version [ 379.440063][ T5904] cp2112: probe of 0003:10C4:EA90.0005 failed with error -32 [ 379.903184][ T27] usb 3-1: USB disconnect, device number 22 [ 379.952442][ T8292] fido_id[8292]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 380.974969][ T8310] syz2: rxe_newlink: already configured on syz_tun [ 381.378363][ T5904] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 381.748627][ T5904] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 381.892679][ T5904] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 381.980318][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.017237][ T5904] usb 3-1: config 0 descriptor?? [ 382.039076][ T5904] pwc: Askey VC010 type 2 USB webcam detected. [ 382.652870][ T5904] pwc: recv_control_msg error -32 req 02 val 2b00 [ 382.666723][ T5904] pwc: recv_control_msg error -32 req 02 val 2700 [ 382.689645][ T5904] pwc: recv_control_msg error -32 req 02 val 2c00 [ 382.712441][ T5904] pwc: recv_control_msg error -32 req 04 val 1000 [ 382.719940][ T5904] pwc: recv_control_msg error -32 req 04 val 1300 [ 382.736574][ T5904] pwc: recv_control_msg error -32 req 04 val 1400 [ 382.755481][ T5904] pwc: recv_control_msg error -32 req 02 val 2000 [ 382.784925][ T5904] pwc: recv_control_msg error -32 req 02 val 2100 [ 382.793256][ T5904] pwc: recv_control_msg error -32 req 04 val 1500 [ 382.801065][ T5904] pwc: recv_control_msg error -32 req 02 val 2500 [ 382.808947][ T5904] pwc: recv_control_msg error -32 req 02 val 2400 [ 382.817396][ T5904] pwc: recv_control_msg error -32 req 02 val 2600 [ 383.025426][ T5863] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 383.036887][ T5904] pwc: recv_control_msg error -71 req 02 val 2800 [ 383.098371][ T5904] pwc: recv_control_msg error -71 req 04 val 1100 [ 383.188263][ T5904] pwc: recv_control_msg error -71 req 04 val 1200 [ 384.989677][ T5904] pwc: Registered as video103. [ 385.527591][ T5904] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input11 [ 385.559654][ T5904] usb 3-1: USB disconnect, device number 23 [ 385.601274][ T5863] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 385.674677][ T5863] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 385.735143][ T5863] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 385.754756][ T5863] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.829588][ T5863] usb 2-1: config 0 descriptor?? [ 385.856887][ T5863] usb 2-1: can't set config #0, error -71 [ 385.886441][ T5863] usb 2-1: USB disconnect, device number 7 [ 386.645165][ T8353] (null): rxe_set_mtu: Set mtu to 1024 [ 386.651061][ T8353] rdma_rxe: rxe_newlink: failed to add syz_tun [ 387.677206][ T5863] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 388.282579][ T5863] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 388.305397][ T5863] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 388.315242][ T5863] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 388.334492][ T5863] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.358592][ T5863] usb 3-1: config 0 descriptor?? [ 388.458999][ T8379] Invalid ELF header magic: != ELF [ 388.816395][ T785] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 388.894828][ T5863] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 388.902396][ T5863] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 388.913622][ T5863] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 388.923987][ T5863] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 388.933203][ T5863] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 388.942685][ T5863] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 388.951771][ T5863] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 389.074339][ T5863] cp2112 0003:10C4:EA90.0006: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 389.188539][ T5863] cp2112 0003:10C4:EA90.0006: error requesting version [ 389.245577][ T785] usb 2-1: device descriptor read/64, error -71 [ 389.287958][ T8383] ================================================================== [ 389.295680][ T5863] cp2112: probe of 0003:10C4:EA90.0006 failed with error -32 [ 389.296070][ T8383] BUG: KASAN: slab-use-after-free in read_report_descriptor+0xb2/0xf0 [ 389.311636][ T8383] Read of size 7 at addr ffff88803086bcd0 by task fido_id/8383 [ 389.319207][ T8383] [ 389.321547][ T8383] CPU: 0 PID: 8383 Comm: fido_id Not tainted syzkaller #0 [ 389.328680][ T8383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 389.338743][ T8383] Call Trace: [ 389.342026][ T8383] [ 389.344961][ T8383] dump_stack_lvl+0x16c/0x230 [ 389.349661][ T8383] ? read_lock_is_recursive+0x20/0x20 [ 389.355050][ T8383] ? show_regs_print_info+0x20/0x20 [ 389.360266][ T8383] ? load_image+0x3b0/0x3b0 [ 389.364778][ T8383] ? _raw_spin_lock_irqsave+0xb4/0xf0 [ 389.370162][ T8383] ? __virt_addr_valid+0x18c/0x540 [ 389.375305][ T8383] ? __virt_addr_valid+0x469/0x540 [ 389.380436][ T8383] print_report+0xac/0x220 [ 389.384868][ T8383] ? read_report_descriptor+0xb2/0xf0 [ 389.390249][ T8383] kasan_report+0x117/0x150 [ 389.394770][ T8383] ? read_report_descriptor+0xb2/0xf0 [ 389.400173][ T8383] kasan_check_range+0x288/0x290 [ 389.405131][ T8383] ? read_report_descriptor+0xb2/0xf0 [ 389.410530][ T8383] __asan_memcpy+0x29/0x70 [ 389.414969][ T8383] read_report_descriptor+0xb2/0xf0 [ 389.420196][ T8383] ? sysfs_kf_bin_open+0xd0/0xd0 [ 389.425164][ T8383] kernfs_fop_read_iter+0x42d/0x670 [ 389.430383][ T8383] vfs_read+0x431/0x920 [ 389.434553][ T8383] ? kernel_read+0x1e0/0x1e0 [ 389.439158][ T8383] ? do_sys_openat2+0x168/0x1c0 [ 389.444036][ T8383] ? __fdget_pos+0x2ba/0x330 [ 389.448638][ T8383] ksys_read+0x147/0x250 [ 389.452915][ T8383] ? vfs_write+0x940/0x940 [ 389.457351][ T8383] ? lockdep_hardirqs_on+0x98/0x150 [ 389.462571][ T8383] do_syscall_64+0x55/0xb0 [ 389.467003][ T8383] ? clear_bhb_loop+0x40/0x90 [ 389.471785][ T8383] ? clear_bhb_loop+0x40/0x90 [ 389.476469][ T8383] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 389.482378][ T8383] RIP: 0033:0x7fe2206a7407 [ 389.486801][ T8383] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 389.506425][ T8383] RSP: 002b:00007fffd84b4390 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 389.515093][ T8383] RAX: ffffffffffffffda RBX: 00007fe220d4a880 RCX: 00007fe2206a7407 [ 389.523084][ T8383] RDX: 0000000000001000 RSI: 00007fffd84b43e0 RDI: 0000000000000004 [ 389.531067][ T8383] RBP: 000055c3a430e730 R08: 0000000000000000 R09: 0000000000000000 [ 389.539045][ T8383] R10: 0000000000000000 R11: 0000000000000202 R12: 000055c3a430d930 [ 389.547205][ T8383] R13: 00007fffd84b43e0 R14: 0000000000000004 R15: 000055c3667f94d8 [ 389.555199][ T8383] [ 389.558228][ T8383] [ 389.560564][ T8383] Allocated by task 5863: [ 389.564901][ T8383] kasan_set_track+0x4e/0x70 [ 389.569510][ T8383] __kasan_kmalloc+0x8f/0xa0 [ 389.574113][ T8383] __kmalloc_node_track_caller+0xb2/0x230 [ 389.579848][ T8383] kmemdup+0x2b/0x70 [ 389.583752][ T8383] hid_open_report+0x1bf/0xec0 [ 389.588527][ T8383] cp2112_probe+0x166/0xc30 [ 389.593039][ T8383] hid_device_probe+0x293/0x5b0 [ 389.597907][ T8383] really_probe+0x25b/0xb40 [ 389.602420][ T8383] __driver_probe_device+0x18c/0x330 [ 389.607726][ T8383] driver_probe_device+0x4f/0x420 [ 389.612769][ T8383] __device_attach_driver+0x2ca/0x520 [ 389.618157][ T8383] bus_for_each_drv+0x24b/0x2d0 [ 389.623023][ T8383] __device_attach+0x2b5/0x400 [ 389.627797][ T8383] bus_probe_device+0x180/0x260 [ 389.632661][ T8383] device_add+0x85b/0xc20 [ 389.637097][ T8383] hid_add_device+0x38d/0x530 [ 389.641784][ T8383] usbhid_probe+0xe02/0x1220 [ 389.646397][ T8383] usb_probe_interface+0x5a4/0xb00 [ 389.651530][ T8383] really_probe+0x25b/0xb40 [ 389.656041][ T8383] __driver_probe_device+0x18c/0x330 [ 389.661340][ T8383] driver_probe_device+0x4f/0x420 [ 389.666404][ T8383] __device_attach_driver+0x2ca/0x520 [ 389.671787][ T8383] bus_for_each_drv+0x24b/0x2d0 [ 389.676641][ T8383] __device_attach+0x2b5/0x400 [ 389.681411][ T8383] bus_probe_device+0x180/0x260 [ 389.686266][ T8383] device_add+0x85b/0xc20 [ 389.690608][ T8383] usb_set_configuration+0x1a79/0x20c0 [ 389.696084][ T8383] usb_generic_driver_probe+0x8d/0x150 [ 389.701556][ T8383] usb_probe_device+0x13d/0x280 [ 389.706417][ T8383] really_probe+0x25b/0xb40 [ 389.710939][ T8383] __driver_probe_device+0x18c/0x330 [ 389.716255][ T8383] driver_probe_device+0x4f/0x420 [ 389.721290][ T8383] __device_attach_driver+0x2ca/0x520 [ 389.726746][ T8383] bus_for_each_drv+0x24b/0x2d0 [ 389.731602][ T8383] __device_attach+0x2b5/0x400 [ 389.736386][ T8383] bus_probe_device+0x180/0x260 [ 389.741256][ T8383] device_add+0x85b/0xc20 [ 389.745601][ T8383] usb_new_device+0xa31/0x1630 [ 389.750396][ T8383] hub_event+0x2962/0x49c0 [ 389.754825][ T8383] process_scheduled_works+0xa45/0x15b0 [ 389.760382][ T8383] worker_thread+0xa55/0xfc0 [ 389.765003][ T8383] kthread+0x2fa/0x390 [ 389.769082][ T8383] ret_from_fork+0x48/0x80 [ 389.773527][ T8383] ret_from_fork_asm+0x11/0x20 [ 389.778307][ T8383] [ 389.780710][ T8383] Freed by task 5863: [ 389.784705][ T8383] kasan_set_track+0x4e/0x70 [ 389.789304][ T8383] kasan_save_free_info+0x2e/0x50 [ 389.794339][ T8383] ____kasan_slab_free+0x126/0x1e0 [ 389.799470][ T8383] slab_free_freelist_hook+0x130/0x1b0 [ 389.805049][ T8383] __kmem_cache_free+0xba/0x1f0 [ 389.810003][ T8383] hid_close_report+0x605/0x6d0 [ 389.814863][ T8383] hid_device_probe+0x3da/0x5b0 [ 389.819727][ T8383] really_probe+0x25b/0xb40 [ 389.824234][ T8383] __driver_probe_device+0x18c/0x330 [ 389.829551][ T8383] driver_probe_device+0x4f/0x420 [ 389.834579][ T8383] __device_attach_driver+0x2ca/0x520 [ 389.839953][ T8383] bus_for_each_drv+0x24b/0x2d0 [ 389.844802][ T8383] __device_attach+0x2b5/0x400 [ 389.849565][ T8383] bus_probe_device+0x180/0x260 [ 389.854415][ T8383] device_add+0x85b/0xc20 [ 389.858757][ T8383] hid_add_device+0x38d/0x530 [ 389.863438][ T8383] usbhid_probe+0xe02/0x1220 [ 389.868078][ T8383] usb_probe_interface+0x5a4/0xb00 [ 389.873200][ T8383] really_probe+0x25b/0xb40 [ 389.877712][ T8383] __driver_probe_device+0x18c/0x330 [ 389.883006][ T8383] driver_probe_device+0x4f/0x420 [ 389.888035][ T8383] __device_attach_driver+0x2ca/0x520 [ 389.893410][ T8383] bus_for_each_drv+0x24b/0x2d0 [ 389.898268][ T8383] __device_attach+0x2b5/0x400 [ 389.903037][ T8383] bus_probe_device+0x180/0x260 [ 389.907888][ T8383] device_add+0x85b/0xc20 [ 389.912243][ T8383] usb_set_configuration+0x1a79/0x20c0 [ 389.917712][ T8383] usb_generic_driver_probe+0x8d/0x150 [ 389.923177][ T8383] usb_probe_device+0x13d/0x280 [ 389.928037][ T8383] really_probe+0x25b/0xb40 [ 389.932561][ T8383] __driver_probe_device+0x18c/0x330 [ 389.937851][ T8383] driver_probe_device+0x4f/0x420 [ 389.942877][ T8383] __device_attach_driver+0x2ca/0x520 [ 389.948251][ T8383] bus_for_each_drv+0x24b/0x2d0 [ 389.953105][ T8383] __device_attach+0x2b5/0x400 [ 389.957869][ T8383] bus_probe_device+0x180/0x260 [ 389.962723][ T8383] device_add+0x85b/0xc20 [ 389.967062][ T8383] usb_new_device+0xa31/0x1630 [ 389.971827][ T8383] hub_event+0x2962/0x49c0 [ 389.976241][ T8383] process_scheduled_works+0xa45/0x15b0 [ 389.981796][ T8383] worker_thread+0xa55/0xfc0 [ 389.986391][ T8383] kthread+0x2fa/0x390 [ 389.990467][ T8383] ret_from_fork+0x48/0x80 [ 389.994884][ T8383] ret_from_fork_asm+0x11/0x20 [ 389.999666][ T8383] [ 390.002055][ T8383] The buggy address belongs to the object at ffff88803086bcd0 [ 390.002055][ T8383] which belongs to the cache kmalloc-8 of size 8 [ 390.016022][ T8383] The buggy address is located 0 bytes inside of [ 390.016022][ T8383] freed 8-byte region [ffff88803086bcd0, ffff88803086bcd8) [ 390.029477][ T8383] [ 390.031823][ T8383] The buggy address belongs to the physical page: [ 390.038244][ T8383] page:ffffea0000c21ac0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3086b [ 390.048503][ T8383] ksm flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 390.056409][ T8383] page_type: 0xffffffff() [ 390.060764][ T8383] raw: 00fff00000000800 ffff888017841280 ffffea00015eedc0 dead000000000003 [ 390.069351][ T8383] raw: 0000000000000000 0000000000660066 00000001ffffffff 0000000000000000 [ 390.077953][ T8383] page dumped because: kasan: bad access detected [ 390.084369][ T8383] page_owner tracks the page as allocated [ 390.090086][ T8383] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 6808, tgid 6804 (syz.2.225), ts 192784577189, free_ts 192764533209 [ 390.108251][ T8383] post_alloc_hook+0x1cd/0x210 [ 390.113039][ T8383] get_page_from_freelist+0x195c/0x19f0 [ 390.118599][ T8383] __alloc_pages+0x1e3/0x460 [ 390.123196][ T8383] alloc_slab_page+0x5d/0x170 [ 390.127886][ T8383] new_slab+0x87/0x2e0 [ 390.131972][ T8383] ___slab_alloc+0xc6d/0x1300 [ 390.136670][ T8383] __kmem_cache_alloc_node+0x1a2/0x260 [ 390.142152][ T8383] __kmalloc_node_track_caller+0xa2/0x230 [ 390.147970][ T8383] kstrdup+0x3b/0x80 [ 390.151873][ T8383] __kernfs_new_node+0x9d/0x7e0 [ 390.156752][ T8383] kernfs_new_node+0x14c/0x260 [ 390.161523][ T8383] __kernfs_create_file+0x4b/0x2e0 [ 390.166663][ T8383] sysfs_add_file_mode_ns+0x238/0x300 [ 390.172047][ T8383] internal_create_group+0x428/0xd00 [ 390.177442][ T8383] sysfs_create_groups+0x59/0x120 [ 390.182495][ T8383] ib_setup_port_attrs+0x1401/0x2040 [ 390.187797][ T8383] page last free stack trace: [ 390.192479][ T8383] free_unref_page_prepare+0x7ce/0x8e0 [ 390.197956][ T8383] free_unref_page_list+0xbe/0x860 [ 390.203081][ T8383] release_pages+0x1fa0/0x2220 [ 390.207850][ T8383] tlb_flush_mmu+0x368/0x4f0 [ 390.212451][ T8383] tlb_finish_mmu+0xc3/0x1d0 [ 390.217051][ T8383] exit_mmap+0x3f0/0xb50 [ 390.221298][ T8383] __mmput+0x118/0x3c0 [ 390.225369][ T8383] exit_mm+0x1da/0x2c0 [ 390.229458][ T8383] do_exit+0x88e/0x23c0 [ 390.233624][ T8383] do_group_exit+0x21b/0x2d0 [ 390.238314][ T8383] get_signal+0x12fc/0x1400 [ 390.242828][ T8383] arch_do_signal_or_restart+0x96/0x780 [ 390.248492][ T8383] exit_to_user_mode_loop+0x70/0x110 [ 390.253806][ T8383] exit_to_user_mode_prepare+0xf6/0x180 [ 390.259383][ T8383] syscall_exit_to_user_mode+0x1a/0x50 [ 390.264883][ T8383] do_syscall_64+0x61/0xb0 [ 390.269309][ T8383] [ 390.271635][ T8383] Memory state around the buggy address: [ 390.277270][ T8383] ffff88803086bb80: fc fc 04 fc fc fc fc fa fc fc fc fc 04 fc fc fc [ 390.285332][ T8383] ffff88803086bc00: fc 00 fc fc fc fc 00 fc fc fc fc 00 fc fc fc fc [ 390.293409][ T8383] >ffff88803086bc80: fa fc fc fc fc fa fc fc fc fc fa fc fc fc fc fa [ 390.301474][ T8383] ^ [ 390.308153][ T8383] ffff88803086bd00: fc fc fc fc fa fc fc fc fc fa fc fc fc fc fa fc [ 390.316217][ T8383] ffff88803086bd80: fc fc fc fa fc fc fc fc 06 fc fc fc fc 00 fc fc [ 390.324282][ T8383] ================================================================== [ 390.570979][ T5864] usb 3-1: USB disconnect, device number 24 [ 390.603322][ T8383] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 390.610569][ T8383] CPU: 1 PID: 8383 Comm: fido_id Not tainted syzkaller #0 [ 390.617769][ T8383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 390.627862][ T8383] Call Trace: [ 390.631154][ T8383] [ 390.634096][ T8383] dump_stack_lvl+0x16c/0x230 [ 390.638812][ T8383] ? show_regs_print_info+0x20/0x20 [ 390.644040][ T8383] ? load_image+0x3b0/0x3b0 [ 390.648556][ T8383] panic+0x2c0/0x710 [ 390.652473][ T8383] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 390.658644][ T8383] ? bpf_jit_dump+0xd0/0xd0 [ 390.663186][ T8383] ? _raw_spin_unlock_irqrestore+0xfa/0x110 [ 390.669093][ T8383] ? _raw_spin_unlock+0x40/0x40 [ 390.673950][ T8383] ? read_report_descriptor+0xb2/0xf0 [ 390.679342][ T8383] check_panic_on_warn+0x84/0xa0 [ 390.684327][ T8383] ? read_report_descriptor+0xb2/0xf0 [ 390.689744][ T8383] end_report+0x6f/0x140 [ 390.694000][ T8383] kasan_report+0x128/0x150 [ 390.698511][ T8383] ? read_report_descriptor+0xb2/0xf0 [ 390.703925][ T8383] kasan_check_range+0x288/0x290 [ 390.708899][ T8383] ? read_report_descriptor+0xb2/0xf0 [ 390.714282][ T8383] __asan_memcpy+0x29/0x70 [ 390.718795][ T8383] read_report_descriptor+0xb2/0xf0 [ 390.724091][ T8383] ? sysfs_kf_bin_open+0xd0/0xd0 [ 390.729052][ T8383] kernfs_fop_read_iter+0x42d/0x670 [ 390.734262][ T8383] vfs_read+0x431/0x920 [ 390.738457][ T8383] ? kernel_read+0x1e0/0x1e0 [ 390.743495][ T8383] ? do_sys_openat2+0x168/0x1c0 [ 390.748349][ T8383] ? __fdget_pos+0x2ba/0x330 [ 390.752940][ T8383] ksys_read+0x147/0x250 [ 390.757183][ T8383] ? vfs_write+0x940/0x940 [ 390.761597][ T8383] ? lockdep_hardirqs_on+0x98/0x150 [ 390.766801][ T8383] do_syscall_64+0x55/0xb0 [ 390.771219][ T8383] ? clear_bhb_loop+0x40/0x90 [ 390.775891][ T8383] ? clear_bhb_loop+0x40/0x90 [ 390.780566][ T8383] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 390.786468][ T8383] RIP: 0033:0x7fe2206a7407 [ 390.790884][ T8383] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 390.810507][ T8383] RSP: 002b:00007fffd84b4390 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 390.818915][ T8383] RAX: ffffffffffffffda RBX: 00007fe220d4a880 RCX: 00007fe2206a7407 [ 390.826883][ T8383] RDX: 0000000000001000 RSI: 00007fffd84b43e0 RDI: 0000000000000004 [ 390.834849][ T8383] RBP: 000055c3a430e730 R08: 0000000000000000 R09: 0000000000000000 [ 390.842817][ T8383] R10: 0000000000000000 R11: 0000000000000202 R12: 000055c3a430d930 [ 390.850793][ T8383] R13: 00007fffd84b43e0 R14: 0000000000000004 R15: 000055c3667f94d8 [ 390.858772][ T8383] [ 390.862143][ T8383] Kernel Offset: disabled [ 390.866468][ T8383] Rebooting in 86400 seconds..