last executing test programs: 9m14.847852992s ago: executing program 32 (id=173): unshare(0x2c060000) unshare(0x24020400) r0 = landlock_create_ruleset(&(0x7f0000002080)={0xd404}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') 9m2.173297221s ago: executing program 33 (id=291): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x7) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000001c0)={0x1}) 8m57.091896667s ago: executing program 34 (id=330): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005412000060ec970001"], 0xfdef) 8m44.11839532s ago: executing program 35 (id=412): mkdir(&(0x7f00000022c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='/'], 0x2) mount$fuse(0x20000000, &(0x7f0000000180)='./file0\x00', 0x0, 0x36fe8a, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 8m41.254106667s ago: executing program 36 (id=438): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r1, &(0x7f0000000040)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r0, r2, 0x7, 0x0) tee(r0, r2, 0x60000000000, 0x0) 8m29.664701258s ago: executing program 37 (id=515): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380), 0x101302, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="3751f02b82f73ccfc7c431617753f5732f765c975ebce8947e5388c4ff26fa3893119fd147a1576d9456136ab5f15493d175754e4b666e989869d01d418adc376ca22d8077c1b54bea92b5977a41d70ebcc4735ce6c012a5fe5ab7fef98e864216699a235d615ded3292397894b34a794bc14a2edfdc6978c0c97bcb02de69264d", 0x81}], 0x1) close(r0) 8m20.306381746s ago: executing program 38 (id=593): openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$poke(0x5, r0, &(0x7f0000000080), 0x0) 8m20.273774294s ago: executing program 39 (id=596): r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x4, 0x200) r1 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r2 = memfd_create(&(0x7f0000001ac0)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xefE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf\x00b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xd1\xa7@\xa1_B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7<\x7f\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xb0\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcd\x90\x95\xdd\x8a\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1d0x0}) sendto$packet(r0, &(0x7f0000000180)='7', 0x2, 0x0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="bf73a9e561c5"}, 0x14) 5m47.392123296s ago: executing program 49 (id=1732): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x28, r3, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x5}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4480}, 0x20000000) 5m5.907510186s ago: executing program 50 (id=2081): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) close(r3) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, &(0x7f0000000000)={r2}) 4m43.985285672s ago: executing program 51 (id=2263): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0x3}) 4m37.310213325s ago: executing program 52 (id=2330): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x800000008ec0, 0xa) 4m17.960402195s ago: executing program 53 (id=2456): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="980000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00190000000000004c001280110001006272696467655f736c6176650000000034000580050019"], 0x98}}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x6044040}, 0x0) 4m9.418208091s ago: executing program 54 (id=2522): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000002280)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x14}, @ipv4=@generic={{0x6, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0xb, 0x6c, 0x0, @rand_addr=0x64010120, @broadcast, {[@timestamp_addr={0x44, 0x4, 0xf, 0x1, 0x1}]}}, "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"}}, 0xfce) 3m44.655728686s ago: executing program 55 (id=2687): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c00)={0x14, 0x17, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x10}}, 0x14}}, 0x0) close(0x3) 3m18.779442181s ago: executing program 56 (id=2934): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001b40)=""/147, 0x93}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/105, 0x69}, {&(0x7f0000000240)=""/161, 0xa1}, {&(0x7f0000000340)=""/84, 0x54}], 0x5}, 0x4}, {{0x0, 0x0, 0x0}, 0xfffffffe}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f0000000440)=""/163, 0xa3}, {&(0x7f00000016c0)=""/215, 0xd7}, {&(0x7f00000017c0)=""/106, 0x6a}, {&(0x7f0000003c40)=""/4099, 0x1003}, {&(0x7f0000001840)=""/105, 0x69}], 0x6}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x5}], 0x5, 0x2040, 0x0) 2m43.275390521s ago: executing program 57 (id=3258): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x82080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[], 0xa4}}, 0x0) syz_io_uring_setup(0x2fdf, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0xfffffffd, 0x1fa}, &(0x7f0000000140), &(0x7f0000000040)) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4140aecd, &(0x7f0000000180)) 2m17.825335148s ago: executing program 2 (id=3436): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000008000000050000000500000013"], 0x48) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000180)={0x0, @time={0x0, 0x7}, 0x0, {}, 0x40}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x16f, @tick=0x3}) 2m17.246428163s ago: executing program 2 (id=3441): r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x211}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="3407f0"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x13, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 2m16.990309789s ago: executing program 2 (id=3443): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6=r1}]}}}]}, 0x38}, 0x1, 0xba01}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 2m16.776187478s ago: executing program 2 (id=3445): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mkdir(&(0x7f00000022c0)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0xaaba8d, 0x0) mount$fuse(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x8afa89, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 2m16.655403414s ago: executing program 2 (id=3447): r0 = io_uring_setup(0x664c, &(0x7f0000000580)={0x0, 0x8e6b, 0x1880, 0x8000002}) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x1a000}, 0x1, 0x0, 0x0, 0x20000045}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m14.646920277s ago: executing program 9 (id=3461): syz_usb_connect(0x1, 0x3d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000000c0)={"6957608d766cfff5c3a665bd121a2d89", 0x0, 0x0, {0x4, 0x40000a}, {0x7, 0xc00000}, 0x5, [0x3, 0x3, 0x9, 0x6, 0x0, 0x400, 0xffffffffffff0001, 0x2, 0x8, 0x7, 0x80000000, 0xc, 0x10, 0x5, 0xfffffffffffffffb, 0xf146]}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xa0000000}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 2m12.796133402s ago: executing program 9 (id=3472): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mremap(&(0x7f0000186000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00000ad000/0x3000)=nil) syz_clone3(&(0x7f0000000200)={0x2800000, 0x0, 0x0, 0x0, {0x1b}, 0x0, 0x0, 0x0, 0x0}, 0x58) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 2m12.472911296s ago: executing program 9 (id=3475): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) statfs(&(0x7f0000000080)='./file0\x00', 0x0) read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2058) write$FUSE_LSEEK(r0, &(0x7f00000021c0)={0x18, 0x0, r1, {0x7}}, 0x18) umount2(0x0, 0xb) 2m11.355767681s ago: executing program 9 (id=3485): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f00000000c0)=r2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) socket$unix(0x1, 0x0, 0x0) sendto$unix(r0, &(0x7f0000000100)="fa", 0x1, 0x805, 0x0, 0x0) 2m11.044121328s ago: executing program 9 (id=3488): io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000140)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @local, @loopback}}}}, 0xfdef) 2m10.616182726s ago: executing program 58 (id=3488): io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000140)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @local, @loopback}}}}, 0xfdef) 2m1.50342082s ago: executing program 59 (id=3447): r0 = io_uring_setup(0x664c, &(0x7f0000000580)={0x0, 0x8e6b, 0x1880, 0x8000002}) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x1a000}, 0x1, 0x0, 0x0, 0x20000045}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m55.606218961s ago: executing program 3 (id=3575): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004"], 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000d00)=ANY=[], 0x40c}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xaece, 0x0) preadv(r2, &(0x7f0000000180), 0x5f, 0x0, 0x0) 1m55.282304596s ago: executing program 3 (id=3579): r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23, @remote}, 0x10) sendmmsg(r1, &(0x7f000000ac00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003840)=[{0x10, 0x10d, 0x4}], 0x10}}], 0x2, 0x24000054) 1m54.271726468s ago: executing program 3 (id=3592): syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0xa000, 0x0) r0 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x100, 0x0, 0x335}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0x9, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x6, 0x1}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 1m53.89208945s ago: executing program 3 (id=3597): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000021c0)='./file0/../file0/../file0/../file0\x00', 0x0) 1m52.848098566s ago: executing program 3 (id=3605): syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)={0x2000000b}) poll(&(0x7f0000000080)=[{r1, 0x600}], 0x1, 0x10) 1m52.560072307s ago: executing program 3 (id=3608): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x14d002, 0x0) r1 = socket(0x18, 0x0, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r1, r0, 0x0, 0x80006) 1m52.157352177s ago: executing program 60 (id=3608): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x14d002, 0x0) r1 = socket(0x18, 0x0, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r1, r0, 0x0, 0x80006) 1m27.106083099s ago: executing program 1 (id=3817): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x901) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000600), 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000000)={{0x80}, 'port0\x00', 0x2, 0x61001}) ioctl$SNDCTL_SEQ_PANIC(r1, 0x5111) dup3(r0, r1, 0x0) 1m26.924358902s ago: executing program 1 (id=3819): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9) r1 = socket$inet6(0xa, 0x80002, 0x88) sendmmsg$inet(r1, &(0x7f0000000b00)=[{{&(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000000)="c1", 0xfcf6}], 0x1}}], 0x1, 0x0) 1m25.388568173s ago: executing program 1 (id=3829): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000006, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x3e4}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000002100)={{&(0x7f0000000000/0x3000)=nil, 0x3000}, 0x6}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), 0xffffffffffffffff) 1m25.082057554s ago: executing program 1 (id=3831): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380), 0x2000401, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00') r2 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r2, r1, 0x0, 0x8000000d) 1m24.865063154s ago: executing program 1 (id=3833): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r3}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x2000000, {0x0, 0x0, 0x0, r3, 0x192}}, 0x20}}, 0x0) 1m24.587297226s ago: executing program 1 (id=3836): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000004000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 1m24.143156166s ago: executing program 61 (id=3836): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000004000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 1m2.743362582s ago: executing program 4 (id=3980): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000003d) fcntl$setsig(r0, 0xa, 0x21) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x4000, 0x0) creat(&(0x7f0000002240)='./file1\x00', 0x804000000000040) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1m2.112058997s ago: executing program 4 (id=3984): sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x20002001}, 0x20004000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000480)={0xa, 0x1, 0x7}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="03000000000000007b01"]) 1m1.784143451s ago: executing program 4 (id=3987): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0x202, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) sendto$inet6(r0, &(0x7f0000000800)="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", 0x5ad, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x0, @mcast2}, 0x1c) recvmmsg(r0, &(0x7f0000001340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 1m1.598555608s ago: executing program 4 (id=3990): creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000103c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x54010669, 0x0, 0x10, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x20000}}, 0x50) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) 1m0.551838296s ago: executing program 4 (id=3998): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x1c, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) sendto$inet6(r1, 0x0, 0x0, 0x20000003, &(0x7f0000b63fe4)={0xa, 0x2, 0xf5}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 1m0.063995217s ago: executing program 4 (id=4003): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r1, &(0x7f0000005000)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000190c0)=""/4095, 0xfff}], 0x1}, 0x8001}], 0x1, 0x10000, 0x0) 59.65951271s ago: executing program 62 (id=4003): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r1, &(0x7f0000005000)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000190c0)=""/4095, 0xfff}], 0x1}, 0x8001}], 0x1, 0x10000, 0x0) 54.383654619s ago: executing program 7 (id=4048): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000dc0)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="20140600"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000000c0)={0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="000c0100000001"], 0x0, 0x0, 0x0, 0x0, 0x0}) 51.180066001s ago: executing program 7 (id=4064): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000001d00)=""/10, 0xa}, {&(0x7f0000001e40)=""/66, 0x42}], 0x2}, 0xc}], 0x1, 0x10000, 0x0) sendto$l2tp(r1, &(0x7f0000000540)="a5f8493d7eeca465875b3a6ba5e6876aa7f6a34f8d5c08e922b5363e21f2e7dfefea18f415dd27fa3d3fc1f84f6a8dec36700b9830faae949d6b544a577f5030329bad117543983ba029fe5b84f6", 0x4e, 0x4000, 0x0, 0x0) 50.900059993s ago: executing program 7 (id=4067): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 50.677903809s ago: executing program 7 (id=4068): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2058) write$FUSE_INIT(r1, &(0x7f0000002200)={0x50, 0x0, r2, {0x7, 0x27, 0x0, 0x1dd880}}, 0x50) read$FUSE(r0, &(0x7f0000005080)={0x2020}, 0x204d) 49.704122314s ago: executing program 7 (id=4073): syz_open_dev$evdev(0x0, 0x0, 0x800) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 49.148057647s ago: executing program 7 (id=4076): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="ad060000", 0x4) sendmsg$alg(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c00)="fe", 0x1}], 0x1, &(0x7f0000000980)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x2000) recvmmsg(r1, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)=""/113, 0x71}], 0x1}}], 0x2, 0x0, 0x0) 48.776228139s ago: executing program 63 (id=4076): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="ad060000", 0x4) sendmsg$alg(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c00)="fe", 0x1}], 0x1, &(0x7f0000000980)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x2000) recvmmsg(r1, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)=""/113, 0x71}], 0x1}}], 0x2, 0x0, 0x0) 42.0683834s ago: executing program 5 (id=4120): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) read(r0, &(0x7f0000001240)=""/4096, 0x1000) 41.880899245s ago: executing program 5 (id=4123): socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) 41.672831303s ago: executing program 5 (id=4126): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 41.478410785s ago: executing program 5 (id=4129): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0xfc5e) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x29, 0x3, 0x84004, 0x0, 0x0, 0x429, 0x1}}, 0x50) 41.240966494s ago: executing program 5 (id=4132): pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r1, &(0x7f0000000340), 0x2000011a) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000250000032cbd7000fddbdf259e000000541d643fdf644abcf210723219208df537268a5afc05f9bb8901e5133a72dd452025d8be5884bbdc7224a26632768ef1586022453c8db878b2dc4aa04fae2ecc0a6ced2286ff7e891a65499e91872f7b493638b32497ba470170bb9509f80150fa271a8f3d7fecebd620d6b56b"], 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x20004080) splice(r1, 0x0, r0, 0x0, 0x4ff9c, 0x0) 40.82767349s ago: executing program 5 (id=4135): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd26, 0x25dfdbfb, {0x2, 0x1f, 0xb8, 0xcb, r2}, [@IFA_ADDRESS={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1c}}, @IFA_LOCAL={0x8, 0x2, @private=0xa010101}, @IFA_RT_PRIORITY={0x8, 0x9, 0x6}, @IFA_ADDRESS={0x8, 0x1, @multicast2}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_RT_PRIORITY={0x8, 0x9, 0x103}]}, 0x48}, 0x1, 0x0, 0x0, 0x811}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x0) 40.447812257s ago: executing program 64 (id=4135): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd26, 0x25dfdbfb, {0x2, 0x1f, 0xb8, 0xcb, r2}, [@IFA_ADDRESS={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1c}}, @IFA_LOCAL={0x8, 0x2, @private=0xa010101}, @IFA_RT_PRIORITY={0x8, 0x9, 0x6}, @IFA_ADDRESS={0x8, 0x1, @multicast2}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_RT_PRIORITY={0x8, 0x9, 0x103}]}, 0x48}, 0x1, 0x0, 0x0, 0x811}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x0) 38.968090419s ago: executing program 0 (id=4149): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000080)={0xa04c, 0x1, 0x1, 0x9, 0xd, "5381c17300001000"}) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x952f, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 38.82691974s ago: executing program 0 (id=4150): r0 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000dc0)=ANY=[@ANYBLOB="12011001000000202505a8a4720b1c25030109021f000101ff8008090400fd010701010109050102"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x62, @lang_id={0x0, 0x3, 0x804}}}, 0x0) syz_usb_control_io(r0, &(0x7f00000015c0)={0x2c, 0x0, &(0x7f0000001480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40b}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003d00)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003a00)={0x20, 0x0, 0x4, {0x2, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r1, 0x0, 0x0) 36.708128872s ago: executing program 0 (id=4160): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x0, "a05c7b5d00008023e9c5bcf5ff7700"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) io_setup(0xbc, &(0x7f0000000280)=0x0) io_submit(r3, 0x1, &(0x7f0000000b80)=[&(0x7f0000000380)={0x503, 0x0, 0x0, 0x5, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, r2}]) 36.572228613s ago: executing program 0 (id=4161): r0 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000140)={r3, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000000)={r4}) 36.485476246s ago: executing program 0 (id=4162): mkdir(&(0x7f00000022c0)='./file0\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='/'], 0x2) mount$fuse(0x20000000, &(0x7f0000000180)='./file0\x00', 0x0, 0x36fe8a, 0x0) mount$fuse(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x8afa89, 0x0) 36.291419693s ago: executing program 0 (id=4163): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r1, 0x100000000) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000140)=ANY=[@ANYRES8]) 31.986917478s ago: executing program 9 (id=4077): r0 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000240)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x70000, 0x0, {}, {0x5, 0x0, 0x29, 0x7, 0x8, 0x2, "080276b0"}, 0x7f, 0x1, {0x0}, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) 24.645896277s ago: executing program 2 (id=4136): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000ac0)="f78d9ca38fef48f3be520300000006d4e791313dde2bd7a68b4460b8c9df04d46b3f3bc8a21f477744d9f52240e640a668fb225417d64e6e13043860e72b4bda6b1538ca50faddf6125eacff0942ea8bfb5e6d67edebbc2af0d157db23bd30f5a6325619e128e391e6d57d51d5270d081e344ed90d2c641d0e2c1bdc002ffc3d449090aa2f15856be14e67ff752abe3e1b13870d2140361e2e85825a07aab566b9cbc6a1cd0aa895608df9001a4a8a168c9f1a1733e352c872a0de90892b217a11e77f5b475ad4110356b764699384b5129ade10ba1e10ea86d55947aaa376cf", 0xe0}], 0x1, 0x0, 0x0, 0x4810}], 0x1, 0xc001) recvmmsg(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000000280)=""/30, 0x1e}, {&(0x7f00000013c0)=""/194, 0xc2}], 0x2}, 0x8000}], 0x1, 0x40000002, 0x0) 22.439783942s ago: executing program 8 (id=4210): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000040000000500000008000c00a80a000014000800767863616e3100000000000000000000050012001000000008000b0004000000080009"], 0x50}, 0x1, 0x0, 0x0, 0x40081}, 0x0) 21.716993316s ago: executing program 8 (id=4211): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = eventfd2(0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r2, 0x2, &(0x7f00000000c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xfffd, r0, 0x0, 0x0, 0x0, 0x0, 0x3, r1}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) io_cancel(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffffffffffff, 0x0, 0x0, 0xe5d, 0x0, 0x2}, 0x0) 21.48409739s ago: executing program 8 (id=4213): pipe(&(0x7f00000000c0)) syz_io_uring_setup(0x3bd8, &(0x7f0000000080)={0x0, 0x0, 0x13100, 0x0, 0x2}, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0xffff, 0x4) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000000c0)={"6957400000eaffff0800", 0x0, 0x0, {0x7, 0x2}, {0x8, 0xc00000}, 0x5, [0x3, 0x9, 0x7ff, 0x6, 0x0, 0x10000400, 0x9, 0x2, 0x8, 0x6, 0x6, 0x8000082, 0x10, 0xbd, 0x7, 0x80008006]}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 21.289108879s ago: executing program 8 (id=4214): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r0 = syz_open_procfs(0x0, &(0x7f0000000880)='mountinfo\x00') ppoll(&(0x7f0000000840)=[{r0, 0x8000}], 0x1, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 21.206759813s ago: executing program 65 (id=4163): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r1, 0x100000000) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000140)=ANY=[@ANYRES8]) 21.029118551s ago: executing program 8 (id=4216): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000940)="0d0ad7c36d6617110e31b2000000000000222cfb7c37ce1148f448455bc37f5f70c92774dcb201629979039d7c8970b207e5bdf9ab8eed9ace110469c51f4f211dd9fad81591", 0x46, 0x6d91fb6102d8910c, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom(r0, 0x0, 0x45, 0x10120, 0x0, 0x0) 19.979964534s ago: executing program 8 (id=4217): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000140)=ANY=[], 0x8) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 19.697079244s ago: executing program 66 (id=4217): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000140)=ANY=[], 0x8) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 11.172960635s ago: executing program 6 (id=4224): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @multicast, 'vlan1\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x1, @multicast, 'vlan1\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x0, @random="7c9ab5135269", 'erspan0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x0, @random="7c9ab5135269", 'erspan0\x00'}}, 0x1e) 9.799532136s ago: executing program 6 (id=4225): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x6c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x68}}, 0x0) 8.217546218s ago: executing program 6 (id=4227): r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000900)="2600000022004701050007008980e8ff02006d20002b1f00c0e9f7094a51f10101033500b088", 0x26) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000007c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f00000001c0)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote}, 0x20000000) 5.252195094s ago: executing program 6 (id=4228): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x0, 0x12, 0x43, "c39805f9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 2.59258176s ago: executing program 6 (id=4229): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000004e00)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000cc0)="0dda2dfa03009ffadfa4bfb48c76fb296526ae98655ee4c429d1f245af4d9bcc0b787eb0619e69f27ab98c3754b47c0b61fc44d54945aa0179444eb7dc9896323860681482162133639a70419a59ff053a577147beab2b5318a2ab9bb40c8df5765c4c457031c51576a5ca09001ca155b77f84f606527ed1bec0f2a2360b64a994ff8093d117f2416c96feae49c6004a160eca8fde90ae6b3f84034e5b4ca407340854bb990e633d7da77e6ba03037018e170a95c12cd279045fc4fcca1db99298be8b7f4265cadc2175add2c98f1a21479d27d64b97ebf1c778303900a9169ee3ed3ad30eb6a8c904afc4e8f88e1af0234b9c216d869ffc392b5c8967c229833c65db7bf5b76eb6e810f0e0d8", 0x10d}], 0x1, &(0x7f0000000200)=[@assoc={0x18, 0x117, 0x4, 0x104}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}], 0x1, 0x0) recvmsg$can_j1939(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/48, 0x30}, {&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000400)=""/50, 0x32}, {&(0x7f0000000880)=""/156, 0x9c}], 0x4}, 0x0) 0s ago: executing program 6 (id=4230): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9", 0x2, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f413, 0x0) kernel console output (not intermixed with test programs): T5893] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 512.272244][ T1160] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 512.299006][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 512.340054][ T1160] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 512.360960][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 512.388661][ T1160] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 512.404574][ T5893] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 512.414281][ T1160] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 512.414328][ T1160] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 512.414355][ T1160] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.417376][ T1160] usb 10-1: config 0 descriptor?? [ 512.519212][ T5893] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 512.555240][ T5893] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 512.574743][ T5893] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 512.583799][T19254] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 512.598856][T19254] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 512.619611][ T5893] usb 4-1: Manufacturer: syz [ 512.649704][ T5893] usb 4-1: config 0 descriptor?? [ 512.661638][ T1160] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 512.686513][T19275] netlink: 104 bytes leftover after parsing attributes in process `syz.7.3465'. [ 512.890753][ T1160] usb 10-1: USB disconnect, device number 30 [ 512.931331][ T1160] ldusb 10-1:0.55: LD USB Device #0 now disconnected [ 513.008826][ T5893] rc_core: IR keymap rc-hauppauge not found [ 513.014767][ T5893] Registered IR keymap rc-empty [ 513.055853][ T5893] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 513.099215][ T5893] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 513.143279][ T5893] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 513.185956][ T5893] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input46 [ 513.229833][ T5893] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 513.289365][ T5893] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 513.318431][ T5893] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 513.378680][ T5893] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 513.430009][ T5893] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 513.489057][ T5893] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 513.511590][ T5893] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 513.562638][ T5893] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 513.600322][ T5893] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 513.648656][ T5893] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 513.700066][ T5893] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 513.730065][ T5893] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 513.769986][ T5893] usb 4-1: USB disconnect, device number 15 [ 514.607911][T19345] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 515.278094][T19365] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3486'. [ 515.421202][ T2991] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.368466][ T2991] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.519073][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 516.531403][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 516.539882][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 516.553762][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 516.572523][ T5848] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 516.588722][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 516.693825][ T2991] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.843345][ T2991] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.192876][ T2991] bridge_slave_1: left allmulticast mode [ 517.208097][ T2991] bridge_slave_1: left promiscuous mode [ 517.216156][ T2991] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.258207][ T2991] bridge_slave_0: left allmulticast mode [ 517.276448][ T2991] bridge_slave_0: left promiscuous mode [ 517.303293][ T2991] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.329009][ T1160] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 517.384948][T19414] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 517.493054][ T1160] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 517.520794][ T1160] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 517.546813][ T1160] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 517.578856][ T1160] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 517.599811][ T1160] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.643890][ T1160] usb 9-1: config 0 descriptor?? [ 518.044419][ T2991] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 518.092165][ T1160] plantronics 0003:047F:FFFF.0023: No inputs registered, leaving [ 518.112991][ T1160] plantronics 0003:047F:FFFF.0023: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 518.130768][ T2991] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 518.177926][ T2991] bond0 (unregistering): Released all slaves [ 518.357296][T19400] chnl_net:caif_netlink_parms(): no params data found [ 518.728796][ T5144] Bluetooth: hci3: command tx timeout [ 518.747783][T19400] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.817343][T19400] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.867845][T19400] bridge_slave_0: entered allmulticast mode [ 518.896820][T19400] bridge_slave_0: entered promiscuous mode [ 518.931674][T19400] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.960031][T19400] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.995762][T19400] bridge_slave_1: entered allmulticast mode [ 519.015448][T19400] bridge_slave_1: entered promiscuous mode [ 519.052684][ T2991] hsr_slave_0: left promiscuous mode [ 519.083297][ T2991] hsr_slave_1: left promiscuous mode [ 519.097681][ T2991] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 519.123749][ T2991] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 519.149183][ T2991] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 519.213793][ T2991] veth1_macvtap: left promiscuous mode [ 519.228980][ T2991] veth0_macvtap: left promiscuous mode [ 519.238754][ T2991] veth1_vlan: left promiscuous mode [ 519.244852][ T2991] veth0_vlan: left promiscuous mode [ 520.092029][ T5834] usb 9-1: USB disconnect, device number 29 [ 520.508671][ T8293] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 520.530565][ T2991] team0 (unregistering): Port device team_slave_1 removed [ 520.624222][ T2991] team0 (unregistering): Port device team_slave_0 removed [ 520.680553][ T8293] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 520.706764][ T8293] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 520.736465][ T8293] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 520.762965][ T8293] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.793702][ T8293] usb 4-1: Product: syz [ 520.803592][ T5144] Bluetooth: hci3: command tx timeout [ 520.809827][ T8293] usb 4-1: Manufacturer: syz [ 520.842552][ T8293] usb 4-1: SerialNumber: syz [ 521.080092][ T8293] usb 4-1: 0:2 : does not exist [ 521.138887][ T8293] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 521.182623][ T8293] usb 4-1: USB disconnect, device number 16 [ 521.341431][T19504] input: syz1 as /devices/virtual/input/input47 [ 521.404301][ T5963] udevd[5963]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 522.276458][T19400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 522.357284][T19400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 522.444721][T19530] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3520'. [ 522.457550][T19530] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3520'. [ 522.555947][T19530] bond1: entered promiscuous mode [ 522.638739][T19530] bond1: entered allmulticast mode [ 522.708779][T19530] 8021q: adding VLAN 0 to HW filter on device bond1 [ 522.782831][T19400] team0: Port device team_slave_0 added [ 522.811714][T19400] team0: Port device team_slave_1 added [ 522.888827][ T5144] Bluetooth: hci3: command tx timeout [ 523.020827][T19400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 523.027901][T19400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 523.083659][T19548] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 523.112838][T19400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 523.168362][T19400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 523.194062][T19400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 523.293984][T19400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 523.660762][T19400] hsr_slave_0: entered promiscuous mode [ 523.689349][T19400] hsr_slave_1: entered promiscuous mode [ 523.699034][T19400] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 523.706620][T19400] Cannot create hsr debugfs directory [ 524.589272][ T5834] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 524.780181][ T5834] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 524.818641][ T5834] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 524.888902][ T5834] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 524.898008][ T5834] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 524.913619][ T5834] usb 9-1: SerialNumber: syz [ 524.969143][ T5144] Bluetooth: hci3: command tx timeout [ 525.136790][ T5834] usb 9-1: 0:2 : does not exist [ 525.210025][ T5834] usb 9-1: USB disconnect, device number 30 [ 525.617635][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 525.617654][ T29] audit: type=1326 audit(1737366918.067:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19598 comm="syz.7.3536" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5fb5185d29 code=0x0 [ 525.655724][ T5963] udevd[5963]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 525.687894][ T5848] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 525.703955][ T5848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 525.724157][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 525.743707][ T5848] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 525.752496][ T5848] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 525.760953][ T5848] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 526.171566][T19400] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 526.207795][T19400] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 526.225671][T19400] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 526.252254][T19400] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 526.347521][T19400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 526.364903][T19606] chnl_net:caif_netlink_parms(): no params data found [ 526.394896][T19400] 8021q: adding VLAN 0 to HW filter on device team0 [ 526.407217][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.414342][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 526.458001][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.465212][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 526.711546][T19606] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.729151][T19606] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.759166][T19606] bridge_slave_0: entered allmulticast mode [ 526.789314][T19606] bridge_slave_0: entered promiscuous mode [ 526.796815][T19606] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.822985][T19606] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.850734][T19606] bridge_slave_1: entered allmulticast mode [ 526.857816][T19606] bridge_slave_1: entered promiscuous mode [ 526.948473][T19606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 526.972311][T19606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 527.068360][T19606] team0: Port device team_slave_0 added [ 527.087899][T19606] team0: Port device team_slave_1 added [ 527.099008][ T5893] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 527.190210][T19606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 527.206479][T19606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 527.244670][T19606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 527.270805][T19639] kvm: apic: phys broadcast and lowest prio [ 527.283212][T19400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 527.298402][ T5893] usb 4-1: unable to get BOS descriptor or descriptor too short [ 527.310875][ T5893] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 527.320484][ T5893] usb 4-1: can't read configurations, error -71 [ 527.330120][T19606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 527.337078][T19606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 527.377940][T19606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 527.433420][T19606] hsr_slave_0: entered promiscuous mode [ 527.450301][T19606] hsr_slave_1: entered promiscuous mode [ 527.465213][T19606] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 527.473384][T19606] Cannot create hsr debugfs directory [ 527.580069][T19400] veth0_vlan: entered promiscuous mode [ 527.674914][T19400] veth1_vlan: entered promiscuous mode [ 527.777292][T19400] veth0_macvtap: entered promiscuous mode [ 527.788015][T19400] veth1_macvtap: entered promiscuous mode [ 527.840565][ T5144] Bluetooth: hci4: command tx timeout [ 527.885247][T19400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 527.909024][T19400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.925870][T19400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 527.939888][T19400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.951348][T19400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 527.962233][T19400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.974764][T19400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 527.985570][T19400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.997542][T19400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 528.016807][T19400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.037468][T19400] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 528.189596][T19400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.206217][T19400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.223748][T19400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.236522][T19400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.259950][T19400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.283384][T19400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.300394][T19400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.331504][T19400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.358452][T19400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 528.393590][T19400] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.418748][T19400] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.427717][T19400] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.438282][T19400] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.604311][T19400] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: ipvlan2 [ 528.625518][T19400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.657091][ T2991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 528.684790][ T2991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 528.756438][T19606] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 528.775859][T19606] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 528.796143][ T3576] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 528.796232][T19606] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 528.817359][ T3576] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 528.839833][T19606] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 529.011419][T19606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 529.038804][ T5834] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 529.057302][T19606] 8021q: adding VLAN 0 to HW filter on device team0 [ 529.089077][ T3576] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.096198][ T3576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 529.164949][ T2991] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.172152][ T2991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 529.209235][ T5834] usb 9-1: Using ep0 maxpacket: 16 [ 529.220685][ T5834] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 529.233711][ T5834] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 529.239337][T19606] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 529.244144][ T5834] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.267971][ T5834] usb 9-1: config 0 descriptor?? [ 529.309125][T19606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 529.390311][T19606] veth0_vlan: entered promiscuous mode [ 529.411162][T19606] veth1_vlan: entered promiscuous mode [ 529.472666][T19606] veth0_macvtap: entered promiscuous mode [ 529.492461][T19606] veth1_macvtap: entered promiscuous mode [ 529.536200][T19606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 529.555164][T19606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.575412][T19606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 529.588179][T19606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.614878][T19606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 529.636914][T19606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.648303][T19606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 529.663091][T19606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.673472][T19606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 529.684925][T19606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.695213][T19606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 529.705943][T19606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.717342][T19606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 529.732767][ T5834] mcp2221 0003:04D8:00DD.0024: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.8-1/input0 [ 529.767052][T19606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 529.787977][T19606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.798886][T19606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 529.810443][T19606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.835699][T19606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 529.859965][T19606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.877634][T19606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 529.902156][T19606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.919084][ T5144] Bluetooth: hci4: command tx timeout [ 529.925760][T19606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 529.925897][T19689] binder: 19688:19689 ioctl c0306201 200003c0 returned -14 [ 529.946351][T19606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.958484][T19606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 530.024993][T19606] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.045168][T19606] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.058107][T19606] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.081942][T19606] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.212629][ T5893] usb 9-1: USB disconnect, device number 31 [ 530.222663][T19606] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: ipvlan2 [ 530.237478][T19606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.294153][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 530.312491][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 530.381524][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 530.412772][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 530.433861][T19696] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 530.669107][T19703] input: syz0 as /devices/virtual/input/input48 [ 531.041544][T19717] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 531.089031][ T5834] IPVS: starting estimator thread 0... [ 531.189461][T19720] IPVS: using max 20 ests per chain, 48000 per kthread [ 531.592481][T19744] netlink: 'syz.8.3584': attribute type 29 has an invalid length. [ 531.631067][T19745] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3585'. [ 531.640254][T19744] netlink: 'syz.8.3584': attribute type 29 has an invalid length. [ 531.707256][T19744] netlink: 500 bytes leftover after parsing attributes in process `syz.8.3584'. [ 531.999138][ T5144] Bluetooth: hci4: command tx timeout [ 532.966365][T19811] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 532.973678][T19811] IPv6: NLM_F_CREATE should be set when creating new route [ 532.981001][T19811] IPv6: NLM_F_CREATE should be set when creating new route [ 533.129159][ T5893] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 533.302771][ T5893] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 533.337505][ T5893] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 533.403259][ T5893] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 533.422906][ T5893] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 533.448663][ T5893] usb 6-1: SerialNumber: syz [ 533.686694][ T5893] usb 6-1: 0:2 : does not exist [ 533.726538][ T5893] usb 6-1: USB disconnect, device number 16 [ 533.967341][ T5963] udevd[5963]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 534.085477][ T5144] Bluetooth: hci4: command tx timeout [ 534.393351][T19848] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(4) [ 534.399920][T19848] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 534.410393][T19848] vhci_hcd vhci_hcd.0: Device attached [ 534.459309][T19848] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(6) [ 534.465867][T19848] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 534.541159][T19848] vhci_hcd vhci_hcd.0: Device attached [ 534.585271][T19859] vhci_hcd vhci_hcd.0: pdev(7) rhport(2) sockfd(8) [ 534.591846][T19859] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 534.600865][ T5834] vhci_hcd: vhci_device speed not set [ 534.645020][ T194] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.678871][T19859] vhci_hcd vhci_hcd.0: Device attached [ 534.698761][ T5834] usb 47-1: new full-speed USB device number 2 using vhci_hcd [ 534.730950][T19848] vhci_hcd vhci_hcd.0: pdev(7) rhport(3) sockfd(11) [ 534.737615][T19848] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 534.857104][T19848] vhci_hcd vhci_hcd.0: Device attached [ 534.903869][T19865] vhci_hcd: connection closed [ 534.905039][T19850] vhci_hcd: connection reset by peer [ 534.915389][ T81] vhci_hcd: stop threads [ 534.919829][T19854] vhci_hcd: connection closed [ 534.920474][T19860] vhci_hcd: connection closed [ 534.925494][ T81] vhci_hcd: release socket [ 534.948849][ T81] vhci_hcd: disconnect device [ 534.979051][ T194] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.980708][ T81] vhci_hcd: stop threads [ 535.009256][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 535.022244][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 535.030647][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 535.055175][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 535.065023][ T5848] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 535.073559][ T81] vhci_hcd: release socket [ 535.073960][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 535.115530][ T81] vhci_hcd: disconnect device [ 535.121111][ T81] vhci_hcd: stop threads [ 535.125425][ T81] vhci_hcd: release socket [ 535.130231][ T81] vhci_hcd: disconnect device [ 535.139661][ T81] vhci_hcd: stop threads [ 535.153004][ T81] vhci_hcd: release socket [ 535.196812][ T81] vhci_hcd: disconnect device [ 535.295243][ T194] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.514448][ T194] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.644724][ T29] audit: type=1326 audit(1737366928.097:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19894 comm="syz.7.3623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fb5185d29 code=0x7fc00000 [ 535.802858][ T29] audit: type=1326 audit(1737366928.097:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19894 comm="syz.7.3623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5fb5185d29 code=0x7fc00000 [ 535.854974][ T29] audit: type=1326 audit(1737366928.097:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19894 comm="syz.7.3623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fb5185d29 code=0x7fc00000 [ 535.905199][ T29] audit: type=1326 audit(1737366928.097:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19894 comm="syz.7.3623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fb5185d29 code=0x7fc00000 [ 535.945574][ T194] bridge_slave_1: left allmulticast mode [ 535.952137][ T194] bridge_slave_1: left promiscuous mode [ 535.959482][ T194] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.993601][ T29] audit: type=1326 audit(1737366928.097:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19894 comm="syz.7.3623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fb5185d29 code=0x7fc00000 [ 536.015942][ C1] vkms_vblank_simulate: vblank timer overrun [ 536.057724][ T194] bridge_slave_0: left allmulticast mode [ 536.077274][ T194] bridge_slave_0: left promiscuous mode [ 536.094938][ T194] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.119820][ T29] audit: type=1326 audit(1737366928.097:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19894 comm="syz.7.3623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fb5185d29 code=0x7fc00000 [ 536.205550][ T29] audit: type=1326 audit(1737366928.107:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19894 comm="syz.7.3623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fb5185d29 code=0x7fc00000 [ 536.227998][ C1] vkms_vblank_simulate: vblank timer overrun [ 536.268351][ T29] audit: type=1326 audit(1737366928.107:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19894 comm="syz.7.3623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fb5185d29 code=0x7fc00000 [ 536.375291][ T29] audit: type=1326 audit(1737366928.107:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19894 comm="syz.7.3623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fb5185d29 code=0x7fc00000 [ 536.397652][ C1] vkms_vblank_simulate: vblank timer overrun [ 536.456470][T19929] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 536.488647][ T29] audit: type=1326 audit(1737366928.107:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19894 comm="syz.7.3623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fb5185d29 code=0x7fc00000 [ 537.126362][ T5848] Bluetooth: hci2: command tx timeout [ 537.132505][ T5893] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 537.309131][ T5893] usb 9-1: Using ep0 maxpacket: 16 [ 537.315704][ T5893] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 537.327929][ T5893] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 537.358995][ T5893] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 537.385460][ T5893] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.419706][ T5893] usb 9-1: config 0 descriptor?? [ 537.447181][ T194] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 537.461257][ T194] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 537.481976][ T194] bond0 (unregistering): Released all slaves [ 537.742196][T19880] chnl_net:caif_netlink_parms(): no params data found [ 537.840820][ T5893] HID 045e:07da: Invalid code 65791 type 1 [ 537.847457][T19965] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3637'. [ 537.881684][ T5893] input: HID 045e:07da as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:045E:07DA.0025/input/input49 [ 537.898676][ T5893] microsoft 0003:045E:07DA.0025: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0 [ 538.089891][T19965] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 538.097441][T19965] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 538.119791][T19965] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 538.136936][T19965] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 538.300960][T19978] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 538.478544][ T194] hsr_slave_0: left promiscuous mode [ 538.495527][ T194] hsr_slave_1: left promiscuous mode [ 538.583853][ T194] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 538.605503][ T194] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 538.633329][T19988] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 538.666601][ T5905] usb 9-1: USB disconnect, device number 32 [ 538.676656][ T194] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 538.704896][ T194] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 538.833903][ T194] veth1_macvtap: left promiscuous mode [ 538.857491][ T194] veth0_macvtap: left promiscuous mode [ 539.013804][T20001] kvm: Disabled LAPIC found during irq injection [ 539.198826][ T5848] Bluetooth: hci2: command tx timeout [ 539.589232][ T6977] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 539.779961][ T6977] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 539.812926][ T6977] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.831772][ T6977] usb 6-1: config 0 descriptor?? [ 539.848757][ T5834] vhci_hcd: vhci_device speed not set [ 539.850929][ T6977] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 540.116446][ T194] team0 (unregistering): Port device team_slave_1 removed [ 540.174618][ T194] team0 (unregistering): Port device team_slave_0 removed [ 540.249503][ T6977] cpia1 6-1:0.0: unexpected state after lo power cmd: 00 [ 540.840034][T19880] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.855940][T19880] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.873521][T19880] bridge_slave_0: entered allmulticast mode [ 540.905580][T19880] bridge_slave_0: entered promiscuous mode [ 540.915428][T19880] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.922897][T19880] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.968979][T19880] bridge_slave_1: entered allmulticast mode [ 540.999228][T19880] bridge_slave_1: entered promiscuous mode [ 541.057931][ T6977] gspca_cpia1: usb_control_msg 03, error -71 [ 541.078095][ T6977] cpia1 6-1:0.0: unexpected systemstate: 00 [ 541.116808][T19880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 541.129383][ T6977] usb 6-1: USB disconnect, device number 17 [ 541.161094][T19880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 541.264843][T19880] team0: Port device team_slave_0 added [ 541.280865][ T5848] Bluetooth: hci2: command tx timeout [ 541.301917][T19880] team0: Port device team_slave_1 added [ 541.319110][ T5893] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 541.361108][T19880] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 541.368112][T19880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 541.407473][T19880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 541.460393][T19880] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 541.467661][T19880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 541.504787][ T5893] usb 9-1: config index 0 descriptor too short (expected 45, got 36) [ 541.518658][ T5893] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 541.519077][T19880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 541.543140][ T5893] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 541.576412][ T5893] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 541.608851][ T5893] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 541.668760][ T5893] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 541.686293][T19880] hsr_slave_0: entered promiscuous mode [ 541.706692][T19880] hsr_slave_1: entered promiscuous mode [ 541.708103][ T5893] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.720799][T19880] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 541.733718][T19880] Cannot create hsr debugfs directory [ 541.768245][ T5893] usb 9-1: config 0 descriptor?? [ 541.779341][T20052] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 542.221404][ T5893] plantronics 0003:047F:FFFF.0026: unknown main item tag 0xd [ 542.255030][ T5893] plantronics 0003:047F:FFFF.0026: No inputs registered, leaving [ 542.269717][ T5893] plantronics 0003:047F:FFFF.0026: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 542.540947][ T6977] usb 9-1: USB disconnect, device number 33 [ 543.175592][T19880] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 543.261684][T19880] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 543.307356][T19880] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 543.336860][T19880] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 543.358720][ T5848] Bluetooth: hci2: command tx timeout [ 543.619532][T19880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 543.708749][T19880] 8021q: adding VLAN 0 to HW filter on device team0 [ 543.733899][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.741068][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 543.844383][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.851639][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 544.023113][T19880] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 544.136640][T19880] veth0_vlan: entered promiscuous mode [ 544.152292][T19880] veth1_vlan: entered promiscuous mode [ 544.225761][T19880] veth0_macvtap: entered promiscuous mode [ 544.235345][T19880] veth1_macvtap: entered promiscuous mode [ 544.254651][T19880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 544.254674][T19880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.254688][T19880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 544.254703][T19880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.254716][T19880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 544.254731][T19880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.254744][T19880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 544.254759][T19880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.254773][T19880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 544.254788][T19880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.256018][T19880] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 544.269678][T19880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 544.269701][T19880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.269716][T19880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 544.269732][T19880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.269747][T19880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 544.269763][T19880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.269789][T19880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 544.269804][T19880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.270581][T19880] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 544.273870][T19880] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.273902][T19880] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.273927][T19880] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.273951][T19880] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.510377][T19880] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: ipvlan2 [ 544.510432][T19880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.537159][ T3576] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 544.537181][ T3576] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 544.565567][T20173] loop6: detected capacity change from 0 to 524287999 [ 544.588294][ T52] loop: Write error at byte offset 1, length 4096. [ 544.588339][ T52] loop: Write error at byte offset 1, length 4096. [ 544.588783][ C0] blk_print_req_error: 20 callbacks suppressed [ 544.588799][ C0] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 2 prio class 0 [ 544.588846][ C0] buffer_io_error: 20 callbacks suppressed [ 544.588860][ C0] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 544.588962][ C0] Buffer I/O error on dev loop6, logical block 1, lost async page write [ 544.596983][ T52] loop: Write error at byte offset 1, length 4096. [ 544.597072][ C0] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 544.597104][ C0] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 544.622824][ T2991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 544.622848][ T2991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 544.942737][T20185] loop6: detected capacity change from 0 to 16384 [ 545.002785][ T26] I/O error, dev loop6, sector 512 op 0x1:(WRITE) flags 0x8800 phys_seg 16 prio class 0 [ 545.491982][T20207] tls_set_device_offload: netdev not found [ 545.978689][ T8293] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 546.149357][ T8293] usb 5-1: Using ep0 maxpacket: 32 [ 546.171759][ T8293] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 546.193282][ T8293] usb 5-1: config 0 has no interface number 0 [ 546.235937][ T8293] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 546.256112][ T8293] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.276470][ T8293] usb 5-1: Product: syz [ 546.296668][ T8293] usb 5-1: Manufacturer: syz [ 546.307044][ T8293] usb 5-1: SerialNumber: syz [ 546.327697][ T8293] usb 5-1: config 0 descriptor?? [ 546.344003][ T8293] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 546.553359][ T8293] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 546.594055][ T8293] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 546.995542][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 547.008812][ T8293] usb 5-1: USB disconnect, device number 17 [ 547.019251][ T8293] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 547.076022][ T8293] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 547.107034][ T8293] quatech2 5-1:0.51: device disconnected [ 547.949252][T20279] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3709'. [ 550.154213][ T5834] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 550.348694][ T5834] usb 5-1: Using ep0 maxpacket: 32 [ 550.365960][ T5834] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 550.377548][ T5834] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 550.392423][ T5834] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 550.412319][ T5834] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.430279][ T5834] usb 5-1: config 0 descriptor?? [ 550.441877][ T5834] hub 5-1:0.0: USB hub found [ 550.644191][ T5834] hub 5-1:0.0: 1 port detected [ 551.259960][ T5834] hub 5-1:0.0: activate --> -90 [ 551.288458][T20358] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 551.667086][ T8293] usb 5-1: USB disconnect, device number 18 [ 551.830670][ T25] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 552.038425][ T25] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 552.058731][ T25] usb 9-1: config 0 interface 0 has no altsetting 0 [ 552.080307][ T25] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 552.098751][ T25] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.106815][ T25] usb 9-1: Product: syz [ 552.128711][ T25] usb 9-1: Manufacturer: syz [ 552.141824][ T25] usb 9-1: SerialNumber: syz [ 552.160739][ T25] usb 9-1: config 0 descriptor?? [ 552.211845][ T25] usb 9-1: selecting invalid altsetting 0 [ 552.378656][ T5834] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 552.432627][T15933] usb 9-1: USB disconnect, device number 34 [ 552.560027][ T5834] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 552.589642][ T5834] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.627877][ T5834] usb 2-1: Product: syz [ 552.633755][ T974] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 552.649421][ T5834] usb 2-1: Manufacturer: syz [ 552.664049][ T5834] usb 2-1: SerialNumber: syz [ 552.684982][ T5834] usb 2-1: config 0 descriptor?? [ 552.698356][ T5834] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 552.830150][ T974] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 552.858622][ T974] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 552.868443][ T974] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 552.927025][ T974] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 552.936519][ T974] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.957324][ T974] usb 6-1: config 0 descriptor?? [ 553.407273][ T974] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 553.426596][ T974] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 553.460394][ T974] plantronics 0003:047F:FFFF.0027: No inputs registered, leaving [ 553.490887][ T974] plantronics 0003:047F:FFFF.0027: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 553.715692][T15933] usb 6-1: USB disconnect, device number 18 [ 553.931689][ T5834] gspca_sunplus: reg_r err -71 [ 553.941762][ T5834] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 553.973973][ T5834] usb 2-1: USB disconnect, device number 23 [ 555.399854][ T5834] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 555.588741][ T5834] usb 2-1: Using ep0 maxpacket: 32 [ 555.601191][ T5834] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 555.613919][ T5834] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.626680][ T5834] usb 2-1: Product: syz [ 555.633871][ T5834] usb 2-1: Manufacturer: syz [ 555.640922][ T5834] usb 2-1: SerialNumber: syz [ 555.667177][ T5834] usb 2-1: config 0 descriptor?? [ 555.682990][ T5834] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 556.839204][T20579] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 556.914662][ T5834] gspca_stk1135: reg_w 0xd err -71 [ 556.927665][ T5834] gspca_stk1135: serial bus timeout: status=0x00 [ 556.955055][ T5834] gspca_stk1135: Sensor write failed [ 556.967080][ T5834] gspca_stk1135: serial bus timeout: status=0x00 [ 556.976277][ T5834] gspca_stk1135: Sensor write failed [ 556.997307][ T5834] gspca_stk1135: serial bus timeout: status=0x00 [ 557.023469][ T5834] gspca_stk1135: Sensor read failed [ 557.040254][ T5834] gspca_stk1135: serial bus timeout: status=0x00 [ 557.046638][ T5834] gspca_stk1135: Sensor read failed [ 557.077755][ T5834] gspca_stk1135: Detected sensor type unknown (0x0) [ 557.095142][ T5834] gspca_stk1135: serial bus timeout: status=0x00 [ 557.123563][ T5834] gspca_stk1135: Sensor read failed [ 557.142882][ T5834] gspca_stk1135: serial bus timeout: status=0x00 [ 557.163046][ T5834] gspca_stk1135: Sensor read failed [ 557.177379][ T5834] gspca_stk1135: serial bus timeout: status=0x00 [ 557.197315][ T5834] gspca_stk1135: Sensor write failed [ 557.220020][ T5834] gspca_stk1135: serial bus timeout: status=0x00 [ 557.245292][ T5834] gspca_stk1135: Sensor write failed [ 557.255816][ T5834] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71 [ 557.287919][ T5834] usb 2-1: USB disconnect, device number 24 [ 557.820042][ T5905] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 558.004816][ T5905] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 558.013261][ T5905] usb 6-1: config 0 has no interface number 0 [ 558.033513][ T5905] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 558.090970][ T5905] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 558.136970][ T5905] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 558.170334][ T5905] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64 [ 558.216905][ T5905] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 558.287526][ T5905] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 558.307198][ T5905] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.318342][ T5905] usb 6-1: config 0 descriptor?? [ 558.325579][T20609] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 558.339861][ T5905] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 558.874169][ T5905] usb 6-1: USB disconnect, device number 19 [ 558.884458][ T5905] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 559.128516][T20676] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3814'. [ 559.539717][T20693] veth0_to_hsr: entered promiscuous mode [ 559.771595][ T5834] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 559.968876][T20693] hsr_slave_0 (unregistering): left promiscuous mode [ 559.986711][ T5834] usb 9-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 560.007727][ T5834] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.047482][ T5834] usb 9-1: Product: syz [ 560.056188][ T5834] usb 9-1: Manufacturer: syz [ 560.073063][ T5834] usb 9-1: SerialNumber: syz [ 560.090325][ T5834] usb 9-1: config 0 descriptor?? [ 560.431051][T15933] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 560.578694][ T5834] usb 9-1: Firmware: major: 13, minor: 11, hardware type: UNKNOWN (88) [ 560.680272][T15933] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 560.703341][T15933] usb 5-1: config 0 has no interfaces? [ 560.737457][T15933] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 560.766768][T15933] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.778656][ T5834] usb 9-1: Read permanent extended address ec:74:80:5a:bc:49:aa:22 from device [ 560.808755][ T5834] usb 9-1: atusb_probe: initialization failed, error = -524 [ 560.816215][ T5834] atusb 9-1:0.0: probe with driver atusb failed with error -524 [ 560.825806][T15933] usb 5-1: config 0 descriptor?? [ 561.003599][ T5905] usb 9-1: USB disconnect, device number 35 [ 561.075001][ T8293] usb 5-1: USB disconnect, device number 19 [ 561.994424][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.181053][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.481720][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.719944][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.898732][ T25] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 562.945636][ T5144] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 562.960682][ T5144] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 562.968679][ T5144] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 562.977058][ T5144] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 562.985956][ T5144] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 562.994004][ T5144] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 563.044982][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.068703][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.080732][ T25] usb 9-1: Using ep0 maxpacket: 8 [ 563.088389][ T25] usb 9-1: config 0 has an invalid interface number: 186 but max is 0 [ 563.098609][ T25] usb 9-1: config 0 has no interface number 0 [ 563.104737][ T25] usb 9-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 563.121049][ T12] bridge_slave_1: left allmulticast mode [ 563.126720][ T12] bridge_slave_1: left promiscuous mode [ 563.158432][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.169176][ T25] usb 9-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 563.197197][ T12] bridge_slave_0: left allmulticast mode [ 563.209088][ T25] usb 9-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 563.228370][ T12] bridge_slave_0: left promiscuous mode [ 563.238878][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.248976][ T25] usb 9-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 563.280829][ T25] usb 9-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 563.291151][ T25] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.314681][ T25] usb 9-1: Product: syz [ 563.322580][ T25] usb 9-1: Manufacturer: syz [ 563.327215][ T25] usb 9-1: SerialNumber: syz [ 563.348319][ T25] usb 9-1: config 0 descriptor?? [ 563.573391][ T25] iowarrior 9-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 563.638929][T20796] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3851'. [ 563.789849][ T25] usb 9-1: USB disconnect, device number 36 [ 563.789923][ C1] iowarrior 9-1:0.186: iowarrior_callback - usb_submit_urb failed with result -19 [ 564.419198][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 564.452268][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 564.471098][ T12] bond0 (unregistering): Released all slaves [ 564.537680][T20796] netlink: 'syz.4.3851': attribute type 1 has an invalid length. [ 564.578851][T20796] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3851'. [ 564.613397][T20796] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.643751][T20796] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.826688][T20821] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 565.048938][ T5848] Bluetooth: hci2: command tx timeout [ 565.419917][T20839] netlink: 'syz.4.3863': attribute type 10 has an invalid length. [ 565.505954][T20839] syz_tun: entered promiscuous mode [ 565.575440][T20839] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 565.745682][ T12] hsr_slave_0: left promiscuous mode [ 565.794313][ T12] hsr_slave_1: left promiscuous mode [ 565.818998][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 565.858670][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 566.272266][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 566.290068][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 566.397036][ T12] veth1_macvtap: left promiscuous mode [ 566.473332][ T12] veth0_macvtap: left promiscuous mode [ 566.524297][ T12] veth1_vlan: left promiscuous mode [ 566.568909][ T12] veth0_vlan: left promiscuous mode [ 567.016337][ T5834] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 567.118829][ T5848] Bluetooth: hci2: command tx timeout [ 567.207526][ T5834] usb 5-1: Using ep0 maxpacket: 8 [ 567.226060][ T5834] usb 5-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 567.245776][ T5834] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 567.274374][ T5834] usb 5-1: Product: syz [ 567.283863][ T5834] usb 5-1: Manufacturer: syz [ 567.301615][ T5834] usb 5-1: SerialNumber: syz [ 567.315937][ T5834] usb 5-1: config 0 descriptor?? [ 567.341954][ T5834] gspca_main: sq905-2.14.0 probing 2770:9120 [ 568.410417][ T5834] gspca_sq905: bulk read fail (-22) len 0/4 [ 568.417624][ T5834] sq905 5-1:0.0: probe with driver sq905 failed with error -5 [ 568.474801][ T12] team0 (unregistering): Port device team_slave_1 removed [ 568.555248][ T12] team0 (unregistering): Port device team_slave_0 removed [ 568.618725][ T5905] usb 5-1: USB disconnect, device number 20 [ 569.198690][ T5848] Bluetooth: hci2: command tx timeout [ 569.845661][T20785] chnl_net:caif_netlink_parms(): no params data found [ 570.191703][T20785] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.215721][T20785] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.235770][T20785] bridge_slave_0: entered allmulticast mode [ 570.243186][T20785] bridge_slave_0: entered promiscuous mode [ 570.282428][T20785] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.311007][T20785] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.322893][ T974] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 570.350698][T20785] bridge_slave_1: entered allmulticast mode [ 570.370960][T20785] bridge_slave_1: entered promiscuous mode [ 570.460808][T20785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 570.497546][T20785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 570.508752][ T974] usb 9-1: Using ep0 maxpacket: 16 [ 570.520084][ T974] usb 9-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 570.545293][ T974] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 570.571386][ T974] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 570.591377][ T974] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 570.627984][ T974] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.653573][ T974] usb 9-1: Product: syz [ 570.657986][T20785] team0: Port device team_slave_0 added [ 570.661654][ T974] usb 9-1: Manufacturer: syz [ 570.685822][ T974] usb 9-1: SerialNumber: syz [ 570.693007][T20785] team0: Port device team_slave_1 added [ 570.750360][T20785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 570.787919][T20785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 570.820877][T20785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 570.854854][T20785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 570.876889][T20785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 570.878963][ T25] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 570.938591][T20785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 571.038986][ T8293] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 571.089413][T20785] hsr_slave_0: entered promiscuous mode [ 571.096225][T20785] hsr_slave_1: entered promiscuous mode [ 571.101534][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 571.111642][T20785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 571.129740][ T25] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 571.141697][ T974] usb 9-1: 0:2 : does not exist [ 571.150402][ T25] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 571.159530][T20785] Cannot create hsr debugfs directory [ 571.211165][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.225293][ T8293] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 571.238242][ T25] usb 5-1: Product: syz [ 571.243176][ T8293] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.255871][ T25] usb 5-1: Manufacturer: syz [ 571.261218][ T25] usb 5-1: SerialNumber: syz [ 571.267770][ T8293] usb 6-1: config 0 descriptor?? [ 571.283402][ T5848] Bluetooth: hci2: command tx timeout [ 571.298393][ T25] usb 5-1: config 0 descriptor?? [ 571.306451][ T8293] cp210x 6-1:0.0: cp210x converter detected [ 571.320755][T20935] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 571.335099][ T25] hub 5-1:0.0: bad descriptor, ignoring hub [ 571.348932][ T25] hub 5-1:0.0: probe with driver hub failed with error -5 [ 571.363410][ T25] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input52 [ 571.612838][T20935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 571.643136][T20935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 571.714584][ T8293] cp210x 6-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 571.740402][ T8293] usb 6-1: cp210x converter now attached to ttyUSB0 [ 571.881430][ T5834] usb 5-1: USB disconnect, device number 21 [ 571.881500][ C1] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 571.937181][ T25] usb 6-1: USB disconnect, device number 20 [ 571.964079][ T25] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 571.973582][ T974] usb 9-1: 1:0: failed to get current value for ch 0 (-22) [ 572.012127][ T25] cp210x 6-1:0.0: device disconnected [ 572.039763][ T974] usb 9-1: USB disconnect, device number 37 [ 572.286216][ T5963] udevd[5963]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 572.759355][T20991] syzkaller1: entered promiscuous mode [ 572.764967][T20991] syzkaller1: entered allmulticast mode [ 572.808733][ T25] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 572.903572][T20785] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 572.937496][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 572.937517][ T29] audit: type=1326 audit(1737366965.397:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20998 comm="syz.5.3904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2967385d29 code=0x7ffc0000 [ 572.966107][ C1] vkms_vblank_simulate: vblank timer overrun [ 572.981057][ T29] audit: type=1326 audit(1737366965.417:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20998 comm="syz.5.3904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f2967385d29 code=0x7ffc0000 [ 572.981614][T20785] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 573.004485][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 573.049101][ T29] audit: type=1326 audit(1737366965.417:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20998 comm="syz.5.3904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2967385d29 code=0x7ffc0000 [ 573.056785][ T25] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 573.090195][ T25] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 573.095452][T20785] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 573.105157][ T25] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 573.123702][ T29] audit: type=1326 audit(1737366965.417:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20998 comm="syz.5.3904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2967385d29 code=0x7ffc0000 [ 573.137324][ T25] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 573.161106][T20785] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 573.193115][ T25] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 573.206204][ T29] audit: type=1326 audit(1737366965.417:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20998 comm="syz.5.3904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f2967385d29 code=0x7ffc0000 [ 573.206248][ T29] audit: type=1326 audit(1737366965.417:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20998 comm="syz.5.3904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2967385d29 code=0x7ffc0000 [ 573.206360][ T29] audit: type=1326 audit(1737366965.417:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20998 comm="syz.5.3904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2967385d29 code=0x7ffc0000 [ 573.206402][ T29] audit: type=1326 audit(1737366965.417:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20998 comm="syz.5.3904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f2967385d29 code=0x7ffc0000 [ 573.206452][ T29] audit: type=1326 audit(1737366965.477:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20998 comm="syz.5.3904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2967385d29 code=0x7ffc0000 [ 573.206490][ T29] audit: type=1326 audit(1737366965.477:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20998 comm="syz.5.3904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2967385d29 code=0x7ffc0000 [ 573.228996][ C1] vkms_vblank_simulate: vblank timer overrun [ 573.296692][ C1] vkms_vblank_simulate: vblank timer overrun [ 573.328307][T20785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 573.479934][T20785] 8021q: adding VLAN 0 to HW filter on device team0 [ 573.510111][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.517251][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 573.540067][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.547224][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 573.597752][ T25] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 573.618075][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.688712][ T5888] usb 9-1: new full-speed USB device number 38 using dummy_hcd [ 573.709629][T20785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 573.794889][T20785] veth0_vlan: entered promiscuous mode [ 573.814227][T20785] veth1_vlan: entered promiscuous mode [ 573.855381][ T5888] usb 9-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 573.865494][ T5888] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.877529][ T25] usb 5-1: usb_control_msg returned -32 [ 573.888651][ T25] usbtmc 5-1:16.0: can't read capabilities [ 573.898820][ T5888] usb 9-1: config 0 descriptor?? [ 573.910544][T20785] veth0_macvtap: entered promiscuous mode [ 573.941274][T20785] veth1_macvtap: entered promiscuous mode [ 573.993809][T20785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 574.011354][T20785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.027386][T20785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 574.040879][T20785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.062284][T20785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 574.098584][T20785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.118577][T20785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 574.136739][T20785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.147336][T20785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 574.166669][T20785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.185179][T20785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 574.215350][T20785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 574.242985][T20785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.261693][T20785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 574.276734][T20785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.287725][T20785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 574.298466][T20785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.317223][T20785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 574.327911][T20785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.346719][T20785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 574.372276][T20785] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.388161][T20785] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.398468][T20785] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.416409][T20785] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.564465][T20785] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: ipvlan2 [ 574.575178][T20785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.586502][T21026] usbtmc 5-1:16.0: stb usb_control_msg returned -71 [ 574.593727][ T25] usb 5-1: USB disconnect, device number 22 [ 574.647292][ T194] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 574.691766][ T194] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 574.749934][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 574.765674][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 575.146907][ T5888] pegasus 9-1:0.0: can't reset MAC [ 575.156189][ T5888] pegasus 9-1:0.0: probe with driver pegasus failed with error -5 [ 575.187182][ T5888] usb 9-1: USB disconnect, device number 38 [ 577.058943][ T5893] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 577.240432][ T5893] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 577.272013][ T5893] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 577.307150][ T5893] usb 6-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00 [ 577.338711][ T5905] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 577.342004][ T5893] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.379368][ T5893] usb 6-1: config 0 descriptor?? [ 577.459273][ T974] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 577.508939][ T5905] usb 7-1: Using ep0 maxpacket: 8 [ 577.526042][ T5905] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 577.548677][ T5905] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 577.580069][ T5905] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 577.611838][ T5905] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 577.638675][ T5905] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 577.651237][ T974] usb 9-1: Using ep0 maxpacket: 8 [ 577.659024][ T5905] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.675031][ T974] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 577.718137][ T974] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 577.749927][ T974] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 577.789044][ T974] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 577.822622][ T5893] gembird 0003:11FF:3331.0028: unexpected long global item [ 577.836579][ T5893] gembird 0003:11FF:3331.0028: probe with driver gembird failed with error -22 [ 577.845941][ T974] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 577.864266][ T974] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.927634][ T5905] usb 7-1: usb_control_msg returned -32 [ 577.947616][ T5905] usbtmc 7-1:16.0: can't read capabilities [ 578.069816][ T5888] usb 6-1: USB disconnect, device number 21 [ 578.119844][ T974] usb 9-1: GET_CAPABILITIES returned 0 [ 578.138657][ T974] usbtmc 9-1:16.0: can't read capabilities [ 578.333824][ T5893] usb 9-1: USB disconnect, device number 39 [ 579.132573][T21179] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3141855248 (50269683968 ns) > initial count (13187551328 ns). Using initial count to start timer. [ 579.464667][T21188] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 580.001719][T21200] xt_TCPMSS: Only works on TCP SYN packets [ 580.075801][T21203] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 580.190236][ T1160] usb 7-1: USB disconnect, device number 5 [ 580.698754][ T1160] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 580.868856][ T1160] usb 7-1: Using ep0 maxpacket: 16 [ 580.883599][ T1160] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 580.913057][ T1160] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 580.972822][ T1160] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 581.016340][ T1160] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 581.049367][ T1160] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.087010][ T1160] usb 7-1: Product: syz [ 581.109170][ T1160] usb 7-1: Manufacturer: syz [ 581.132370][ T1160] usb 7-1: SerialNumber: syz [ 581.489417][ T5893] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 581.590147][ T1160] usb 7-1: 0:2 : does not exist [ 581.670672][ T5893] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 581.702583][ T5893] usb 5-1: config 0 has no interface number 0 [ 581.739229][ T5893] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 581.776030][ T5893] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 581.806182][ T5893] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 581.839428][ T5893] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64 [ 581.864441][ T5893] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 581.908991][ T5893] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 581.918069][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.941147][ T5893] usb 5-1: config 0 descriptor?? [ 581.949189][T21245] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 581.983163][ T5893] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 582.037200][T21269] input: syz1 as /devices/virtual/input/input53 [ 582.160646][T21273] netlink: 'syz.8.3963': attribute type 10 has an invalid length. [ 582.206889][T21273] macvlan0: entered allmulticast mode [ 582.214212][T21274] netlink: 'syz.8.3963': attribute type 10 has an invalid length. [ 582.242930][T21274] netlink: 2 bytes leftover after parsing attributes in process `syz.8.3963'. [ 582.300871][T21273] veth1_vlan: entered allmulticast mode [ 582.346519][T21273] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 582.399240][T21274] bond0: entered promiscuous mode [ 582.404835][T21274] bond_slave_0: entered promiscuous mode [ 582.454765][ T5893] usb 5-1: USB disconnect, device number 23 [ 582.460892][ C0] ldusb 5-1:0.55: usb_submit_urb failed (-19) [ 582.465575][ T1160] usb 7-1: 1:0: failed to get current value for ch 0 (-22) [ 582.478976][ T5893] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 582.508248][T21274] bond_slave_1: entered promiscuous mode [ 582.544950][ T1160] usb 7-1: USB disconnect, device number 6 [ 582.550610][T21274] macvlan0: entered promiscuous mode [ 582.566508][T21274] bridge0: port 3(bond0) entered blocking state [ 582.594638][T21274] bridge0: port 3(bond0) entered disabled state [ 582.606435][T21274] bond0: entered allmulticast mode [ 582.615202][T21274] bond_slave_0: entered allmulticast mode [ 582.624782][T21274] bond_slave_1: entered allmulticast mode [ 582.654946][T21274] bridge0: port 3(bond0) entered blocking state [ 582.661447][T21274] bridge0: port 3(bond0) entered forwarding state [ 582.761311][ T5963] udevd[5963]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 582.918118][T21295] netlink: 'syz.8.3968': attribute type 16 has an invalid length. [ 582.935972][T21295] netlink: 64138 bytes leftover after parsing attributes in process `syz.8.3968'. [ 583.245086][T21312] netlink: 'syz.7.3973': attribute type 10 has an invalid length. [ 583.338753][T21312] 8021q: adding VLAN 0 to HW filter on device team0 [ 583.390068][T21312] bond0: (slave team0): Enslaving as an active interface with an up link [ 583.710977][T21332] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 583.749735][T21332] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 583.815943][T21332] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 583.859415][T21332] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 583.877273][T21332] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 583.888434][T21332] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 583.908116][T21332] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 583.927483][T21332] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 583.950654][T21332] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 585.529259][T21434] binder: 21432:21434 unknown command 0 [ 585.535168][T21434] binder: 21432:21434 ioctl c0306201 20000140 returned -22 [ 585.761024][ T5848] Bluetooth: hci3: command 0x0c1a tx timeout [ 585.828686][ T29] audit: type=1326 audit(1737366978.287:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21443 comm="syz.6.3995" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe67af85d29 code=0x0 [ 585.919028][ T5848] Bluetooth: hci2: command 0x0c1a tx timeout [ 585.926624][ T5144] Bluetooth: hci4: command 0x0c1a tx timeout [ 586.083015][T20423] bond0: (slave syz_tun): Releasing backup interface [ 586.314593][ T81] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.466410][ T81] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.753579][ T81] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.949012][ T81] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.339285][ T81] bridge_slave_1: left allmulticast mode [ 587.344994][ T81] bridge_slave_1: left promiscuous mode [ 587.376541][ T81] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.409755][ T81] bridge_slave_0: left allmulticast mode [ 587.417732][ T81] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.459490][ T5848] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 587.470324][ T5848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 587.479087][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 587.487585][ T5848] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 587.495976][ T5848] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 587.503741][ T5848] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 587.841606][ T5848] Bluetooth: hci3: command 0x0c1a tx timeout [ 588.000954][ T5848] Bluetooth: hci2: command 0x0c1a tx timeout [ 588.685097][ T81] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 588.719760][ T81] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 588.763351][ T81] bond0 (unregistering): Released all slaves [ 589.318654][ T974] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 589.327450][T21563] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 589.508802][ T974] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 589.536713][ T974] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 589.560415][ T974] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 589.579658][ T974] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 589.588166][T21573] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4035'. [ 589.598006][ T974] usb 6-1: SerialNumber: syz [ 589.598986][ T5848] Bluetooth: hci4: command tx timeout [ 589.622072][T21568] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 589.623066][ T5893] IPVS: starting estimator thread 0... [ 589.788926][T21576] IPVS: using max 21 ests per chain, 50400 per kthread [ 589.801851][T21498] chnl_net:caif_netlink_parms(): no params data found [ 589.832019][ T974] usb 6-1: 0:2 : does not exist [ 589.889050][ T974] usb 6-1: USB disconnect, device number 22 [ 589.919878][ T5848] Bluetooth: hci3: command 0x0c1a tx timeout [ 589.956152][T21585] input: syz1 as /devices/virtual/input/input54 [ 589.967371][ T81] hsr_slave_0: left promiscuous mode [ 589.988110][ T81] hsr_slave_1: left promiscuous mode [ 590.072749][ T81] veth1_macvtap: left promiscuous mode [ 590.078988][ T5848] Bluetooth: hci2: command 0x0c1a tx timeout [ 590.116047][ T5963] udevd[5963]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 590.117042][ T81] veth0_macvtap: left promiscuous mode [ 590.188432][ T81] veth1_vlan: left promiscuous mode [ 590.201538][ T81] veth0_vlan: left promiscuous mode [ 590.409032][ T974] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 590.594149][ T974] usb 7-1: Using ep0 maxpacket: 8 [ 590.617484][ T974] usb 7-1: config 0 has an invalid interface number: 186 but max is 0 [ 590.632742][ T974] usb 7-1: config 0 has no interface number 0 [ 590.651178][ T974] usb 7-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 590.662665][ T974] usb 7-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 590.675971][ T974] usb 7-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 590.701265][ T974] usb 7-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 590.756659][ T974] usb 7-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 590.774836][ T974] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.783799][ T974] usb 7-1: Product: syz [ 590.788079][ T974] usb 7-1: Manufacturer: syz [ 590.802248][ T974] usb 7-1: SerialNumber: syz [ 590.813329][ T974] usb 7-1: config 0 descriptor?? [ 591.038026][ T974] iowarrior 7-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 591.242028][ T81] team0 (unregistering): Port device team_slave_1 removed [ 591.288072][ T5905] usb 7-1: USB disconnect, device number 7 [ 591.288132][ C1] iowarrior 7-1:0.186: iowarrior_callback - usb_submit_urb failed with result -19 [ 591.335806][ T81] team0 (unregistering): Port device team_slave_0 removed [ 591.683991][ T5848] Bluetooth: hci4: command tx timeout [ 592.025270][T21498] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.087600][T21498] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.126310][T21498] bridge_slave_0: entered allmulticast mode [ 592.157739][T21498] bridge_slave_0: entered promiscuous mode [ 592.215223][T21498] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.235885][T21498] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.386230][T21498] bridge_slave_1: entered allmulticast mode [ 592.399029][T21498] bridge_slave_1: entered promiscuous mode [ 592.508834][T21498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 592.535514][T21498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 592.557159][T21643] netlink: 'syz.6.4052': attribute type 4 has an invalid length. [ 592.647592][T21498] team0: Port device team_slave_0 added [ 592.672249][T21498] team0: Port device team_slave_1 added [ 592.794058][T21498] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 592.798369][ T81] IPVS: stop unused estimator thread 0... [ 592.816606][T21498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 592.880002][T21498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 592.939239][T21498] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 592.965567][T21498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 593.048131][T21498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 593.158682][T21498] hsr_slave_0: entered promiscuous mode [ 593.182342][T21498] hsr_slave_1: entered promiscuous mode [ 593.195005][T21498] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 593.246543][T21498] Cannot create hsr debugfs directory [ 593.589892][ T974] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 593.762823][ T5144] Bluetooth: hci4: command tx timeout [ 593.770478][ T974] usb 9-1: config index 0 descriptor too short (expected 45, got 36) [ 593.799297][ T974] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 593.834591][ T974] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 593.871386][ T974] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 593.908433][ T974] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 593.928061][ T974] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.966536][ T974] usb 9-1: config 0 descriptor?? [ 593.968753][ T1160] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 593.979242][T21674] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 594.147873][ T1160] usb 6-1: Using ep0 maxpacket: 8 [ 594.168420][ T1160] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 594.189886][ T1160] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 594.225551][ T1160] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 594.245802][ T1160] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 594.266908][ T1160] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 594.291599][ T1160] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 594.301052][ T1160] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.432417][ T974] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 594.447483][ T974] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 594.474721][ T974] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 594.528786][ T974] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 594.549827][ T1160] usb 6-1: usb_control_msg returned -32 [ 594.561355][ T974] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 594.569483][ T1160] usbtmc 6-1:16.0: can't read capabilities [ 594.578674][ T974] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 594.587241][ T974] plantronics 0003:047F:FFFF.0029: No inputs registered, leaving [ 594.639537][ T974] plantronics 0003:047F:FFFF.0029: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 594.695895][ T974] usb 9-1: USB disconnect, device number 40 [ 594.714346][T21498] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 594.731563][T21498] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 594.776957][T21498] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 594.936135][T21498] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 595.254519][T21498] 8021q: adding VLAN 0 to HW filter on device bond0 [ 595.269909][T21727] usbtmc 6-1:16.0: usb_clear_halt returned -32 [ 595.325857][T21498] 8021q: adding VLAN 0 to HW filter on device team0 [ 595.376392][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 595.383692][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 595.424604][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 595.431786][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 595.471311][ T1160] usb 6-1: USB disconnect, device number 23 [ 595.585980][T21498] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 595.630948][ T5889] psmouse serio4: Failed to reset mouse on : -5 [ 595.687679][T21498] veth0_vlan: entered promiscuous mode [ 595.714634][T21498] veth1_vlan: entered promiscuous mode [ 595.759690][T21498] veth0_macvtap: entered promiscuous mode [ 595.786230][T21498] veth1_macvtap: entered promiscuous mode [ 595.817500][T21498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 595.839537][ T5848] Bluetooth: hci4: command tx timeout [ 595.841622][T21498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.876468][T21498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 595.917436][T21498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.954967][T21498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 595.997804][T21498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 596.025998][T21498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 596.036964][T21498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 596.053712][T21498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 596.055424][T21755] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 596.075279][T21498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 596.097141][T21498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 596.126979][T21498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 596.177325][T21498] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 596.214045][T21498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 596.248615][T21498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 596.270432][T21498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 596.292709][T21498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 596.314204][T21498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 596.335868][T21498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 596.360973][T21498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 596.396023][T21498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 596.429494][T21498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 596.476239][T21498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 596.533166][T21498] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 596.590954][T21498] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.608121][T21498] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.649221][T21498] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.657968][T21498] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.795125][T21498] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: ipvlan2 [ 596.816074][T21498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 596.846445][ T3576] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 596.874310][ T3576] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 596.984490][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 597.011392][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 597.323741][ T194] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.475157][ T194] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.640333][ T194] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.800221][ T194] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.996357][ T194] bridge_slave_1: left allmulticast mode [ 598.020486][ T194] bridge_slave_1: left promiscuous mode [ 598.026301][ T194] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.049296][ T194] bridge_slave_0: left allmulticast mode [ 598.058691][ T194] bridge_slave_0: left promiscuous mode [ 598.064416][ T194] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.094084][ T5144] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 598.112650][ T5144] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 598.126159][ T5144] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 598.140183][ T5144] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 598.148986][ T5144] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 598.156522][ T5144] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 598.549733][T15933] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 598.583393][ T194] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 598.724867][T15933] usb 1-1: Using ep0 maxpacket: 8 [ 598.762982][T15933] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 598.772402][T15933] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.794088][T15933] usb 1-1: Product: syz [ 598.798336][T15933] usb 1-1: Manufacturer: syz [ 598.803040][T15933] usb 1-1: SerialNumber: syz [ 598.819511][T15933] usb 1-1: config 0 descriptor?? [ 598.827194][T15933] gspca_main: sq930x-2.14.0 probing 2770:930c [ 598.878184][ T194] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 598.909114][ T194] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 598.931401][ T194] bond0 (unregistering): (slave team0): Releasing backup interface [ 598.952095][ T194] bond0 (unregistering): Released all slaves [ 599.036011][T15933] gspca_sq930x: reg_r 001f failed -71 [ 599.048639][T15933] sq930x 1-1:0.0: probe with driver sq930x failed with error -71 [ 599.075014][T15933] usb 1-1: USB disconnect, device number 25 [ 599.307430][ T194] hsr_slave_1: left promiscuous mode [ 599.322467][ T194] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 599.336291][ T194] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 599.354240][ T194] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 599.365274][ T194] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 599.388780][ T5889] misc userio: Buffer overflowed, userio client isn't keeping up [ 599.412917][ T194] veth1_macvtap: left promiscuous mode [ 599.419724][ T194] veth0_macvtap: left promiscuous mode [ 599.425404][ T194] veth1_vlan: left promiscuous mode [ 599.437749][ T194] veth0_vlan: left promiscuous mode [ 600.210857][ T194] team0 (unregistering): Port device team_slave_1 removed [ 600.239513][ T5144] Bluetooth: hci1: command tx timeout [ 600.296783][ T194] team0 (unregistering): Port device team_slave_0 removed [ 600.489641][ T5889] input: PS/2 Generic Mouse as /devices/serio4/input/input55 [ 600.747446][ T5889] psmouse serio4: Failed to enable mouse on [ 601.034026][ T5851] udevd[5851]: setting owner of /dev/input/mouse1 to uid=0, gid=104 failed: No such file or directory [ 601.745123][T21819] chnl_net:caif_netlink_parms(): no params data found [ 602.122385][T21819] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.122899][T21947] netlink: 'syz.8.4095': attribute type 10 has an invalid length. [ 602.148156][T21819] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.166098][T21819] bridge_slave_0: entered allmulticast mode [ 602.195118][T21819] bridge_slave_0: entered promiscuous mode [ 602.222778][T21947] syz_tun: entered promiscuous mode [ 602.256976][T21947] syz_tun: entered allmulticast mode [ 602.288246][T21947] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 602.319029][ T5144] Bluetooth: hci1: command tx timeout [ 602.380662][T21819] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.398234][T21963] loop2: detected capacity change from 0 to 7 [ 602.408115][T21819] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.435460][T21963] Dev loop2: unable to read RDB block 7 [ 602.441489][T21819] bridge_slave_1: entered allmulticast mode [ 602.451521][T21963] loop2: AHDI p1 p2 [ 602.455473][T21963] loop2: partition table partially beyond EOD, truncated [ 602.480298][T21819] bridge_slave_1: entered promiscuous mode [ 602.499872][T21963] loop2: p1 size 150995200 extends beyond EOD, truncated [ 602.593077][ T5963] udevd[5963]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 602.637505][T21973] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4099'. [ 602.685677][T21819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 602.766342][T21819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 602.902713][ T194] IPVS: stop unused estimator thread 0... [ 602.920100][T21819] team0: Port device team_slave_0 added [ 602.933835][T21819] team0: Port device team_slave_1 added [ 603.078078][T21819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 603.106149][T21819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 603.189101][T21819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 603.215575][T21819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 603.231020][T21819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 603.291947][T21819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 603.607504][T21819] hsr_slave_0: entered promiscuous mode [ 603.635112][T21819] hsr_slave_1: entered promiscuous mode [ 603.710059][T21819] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 603.738944][T21819] Cannot create hsr debugfs directory [ 604.399159][ T5144] Bluetooth: hci1: command tx timeout [ 604.680175][T22059] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 605.622969][ T35] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.842514][ T35] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.899545][T21819] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 606.042606][T21819] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 606.380270][ T35] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.423956][T21819] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 606.463602][T21819] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 606.478971][ T5144] Bluetooth: hci1: command tx timeout [ 606.581434][ T35] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.758408][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 606.767821][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 606.788071][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 606.796025][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 606.804772][ T5848] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 606.812830][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 607.002320][ T35] bridge_slave_1: left allmulticast mode [ 607.008057][ T35] bridge_slave_1: left promiscuous mode [ 607.045887][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.086145][ T35] bridge_slave_0: left allmulticast mode [ 607.096356][ T35] bridge_slave_0: left promiscuous mode [ 607.102514][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.172336][T22121] netlink: 'syz.8.4147': attribute type 1 has an invalid length. [ 607.197016][T22121] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4147'. [ 607.678877][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 607.703935][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 607.715956][ T35] bond0 (unregistering): Released all slaves [ 607.738913][ T25] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 607.909335][ T25] usb 1-1: config index 0 descriptor too short (expected 31, got 27) [ 607.917500][ T25] usb 1-1: config 1 interface 0 altsetting 253 endpoint 0x1 has invalid wMaxPacketSize 0 [ 607.947853][ T25] usb 1-1: config 1 interface 0 has no altsetting 0 [ 607.954811][T21819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 608.011578][ T25] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= b.72 [ 608.049870][ T29] audit: type=1326 audit(1737367000.507:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22139 comm="syz.6.4154" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe67af85d29 code=0x0 [ 608.074867][ T25] usb 1-1: New USB device strings: Mfr=28, Product=37, SerialNumber=3 [ 608.086862][ T25] usb 1-1: Product: syz [ 608.092287][ T25] usb 1-1: Manufacturer: syz [ 608.097048][ T25] usb 1-1: SerialNumber: syz [ 608.162648][T21819] 8021q: adding VLAN 0 to HW filter on device team0 [ 608.438054][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.445227][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 608.505430][T22116] chnl_net:caif_netlink_parms(): no params data found [ 608.538938][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.546122][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 608.610872][ T35] hsr_slave_0: left promiscuous mode [ 608.626126][ T35] hsr_slave_1: left promiscuous mode [ 608.642180][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 608.658694][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 608.669656][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 608.687306][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 608.737731][ T35] veth1_macvtap: left promiscuous mode [ 608.758813][ T35] veth0_macvtap: left promiscuous mode [ 608.764450][ T35] veth1_vlan: left promiscuous mode [ 608.778854][ T35] veth0_vlan: left promiscuous mode [ 608.782495][ T25] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 26 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 608.880824][ T5848] Bluetooth: hci3: command tx timeout [ 608.984527][ T25] usb 1-1: USB disconnect, device number 26 [ 609.004763][ T25] usblp0: removed [ 609.665613][ T35] team0 (unregistering): Port device team_slave_1 removed [ 609.758452][ T35] team0 (unregistering): Port device team_slave_0 removed [ 610.961441][ T5848] Bluetooth: hci3: command tx timeout [ 611.084801][T22116] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.109256][T22116] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.149064][T22116] bridge_slave_0: entered allmulticast mode [ 611.168837][T22116] bridge_slave_0: entered promiscuous mode [ 611.235314][T22116] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.261566][T22116] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.279031][T22116] bridge_slave_1: entered allmulticast mode [ 611.296514][T22116] bridge_slave_1: entered promiscuous mode [ 611.412495][T22116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 611.440594][T22116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 611.497704][T21819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 611.576953][T22116] team0: Port device team_slave_0 added [ 611.639738][T22116] team0: Port device team_slave_1 added [ 611.708386][T21819] veth0_vlan: entered promiscuous mode [ 611.741126][T22116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 611.758219][T22116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 611.818706][T22116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 611.871478][T22116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 611.883591][T22116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 611.956621][T22116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 611.989476][T21819] veth1_vlan: entered promiscuous mode [ 612.132908][T22116] hsr_slave_0: entered promiscuous mode [ 612.167317][T22116] hsr_slave_1: entered promiscuous mode [ 612.173807][T22116] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 612.187424][T22116] Cannot create hsr debugfs directory [ 612.214854][T21819] veth0_macvtap: entered promiscuous mode [ 612.330339][T21819] veth1_macvtap: entered promiscuous mode [ 612.571690][T21819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 612.608761][T21819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.678630][T21819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 612.728671][T21819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.766913][T21819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 612.792912][T21819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.830448][T21819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 612.859769][T21819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.912527][T21819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 612.951349][T21819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.981809][T21819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 613.013150][T21819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 613.040447][ T5848] Bluetooth: hci3: command tx timeout [ 613.077369][T21819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.136434][T21819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 613.205544][T21819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.242828][T21819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 613.302664][T21819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.338868][T21819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 613.361738][T21819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.389956][T21819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 613.521546][T21819] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.538686][T21819] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.568657][T21819] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.577447][T21819] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.883443][T22116] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.995756][T22116] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.126728][T22116] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.256746][T22116] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.425681][ T81] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.551920][ T81] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.776347][ T81] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.010149][ T81] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.126262][T22116] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 615.133788][ T5848] Bluetooth: hci3: command tx timeout [ 615.193998][T22116] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 615.252223][T22116] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 615.315853][T22116] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 615.551337][ T81] bridge_slave_1: left allmulticast mode [ 615.557020][ T81] bridge_slave_1: left promiscuous mode [ 615.588343][ T81] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.610799][ T81] bridge_slave_0: left allmulticast mode [ 615.616487][ T81] bridge_slave_0: left promiscuous mode [ 615.623828][ T81] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.617165][ T81] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 616.640696][ T81] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 616.661834][ T81] bond0 (unregistering): Released all slaves [ 616.797087][ T81] hsr_slave_0: left promiscuous mode [ 616.823962][ T81] hsr_slave_1: left promiscuous mode [ 616.856210][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 616.878691][ T81] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 616.917600][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 616.932228][ T81] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 616.988411][ T81] veth1_macvtap: left promiscuous mode [ 617.013387][ T81] veth0_macvtap: left promiscuous mode [ 617.041877][ T81] veth1_vlan: left promiscuous mode [ 617.058851][ T81] veth0_vlan: left promiscuous mode [ 618.174246][ T81] team0 (unregistering): Port device team_slave_1 removed [ 618.235233][ T81] team0 (unregistering): Port device team_slave_0 removed [ 619.166937][T22298] tipc: Started in network mode [ 619.173877][T22298] tipc: Node identity 2d1af8ff00000000002e, cluster identity 4711 [ 619.237095][T22116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 619.291106][T22116] 8021q: adding VLAN 0 to HW filter on device team0 [ 619.349998][ T3576] bridge0: port 1(bridge_slave_0) entered blocking state [ 619.357210][ T3576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 619.392550][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.399697][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 619.620451][T22116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 619.733563][T22116] veth0_vlan: entered promiscuous mode [ 619.774775][T22116] veth1_vlan: entered promiscuous mode [ 619.934273][T22116] veth0_macvtap: entered promiscuous mode [ 619.958262][T22116] veth1_macvtap: entered promiscuous mode [ 619.996816][T22116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 620.054756][T22116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.088596][T22116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 620.124927][T22116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.157468][T22116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 620.193794][T22116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.220458][T22116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 620.286884][T22116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.298653][T22116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 620.347758][T22116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.378034][T22116] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 620.426345][T22116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 620.488670][T22116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.516279][T22116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 620.546470][T22116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.585281][T22116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 620.608730][T22116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.643878][T22116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 620.668683][T22116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.693321][T22116] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 620.749167][T22116] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.758045][T22116] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.798994][T22116] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.808457][T22116] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.040906][ T81] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.332652][ T81] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.088034][ T81] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.450286][ T81] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.811049][ T81] bridge_slave_1: left allmulticast mode [ 623.830997][ T81] bridge_slave_1: left promiscuous mode [ 623.836740][ T81] bridge0: port 2(bridge_slave_1) entered disabled state [ 623.921931][ T81] bridge_slave_0: left allmulticast mode [ 623.927630][ T81] bridge_slave_0: left promiscuous mode [ 623.966518][ T81] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.969641][T22419] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4210'. [ 624.486112][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.492891][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.100005][T21498] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 625.631067][ T81] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 625.719081][ T81] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 625.773187][ T81] bond0 (unregistering): Released all slaves [ 625.810710][T22433] batman_adv: batadv0: Adding interface: gretap1 [ 625.817095][T22433] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 625.848895][T22433] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 626.035360][T19356] bond0: (slave syz_tun): Releasing backup interface [ 626.064666][T19356] syz_tun (unregistering): left allmulticast mode [ 626.117794][ T81] hsr_slave_0: left promiscuous mode [ 626.123960][ T81] hsr_slave_1: left promiscuous mode [ 626.168000][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 626.195039][ T81] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 626.216805][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 626.247678][ T81] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 626.306956][ T81] veth1_macvtap: left promiscuous mode [ 626.357885][ T81] veth0_macvtap: left promiscuous mode [ 626.385622][ T81] veth1_vlan: left promiscuous mode [ 626.391100][ T81] veth0_vlan: left promiscuous mode [ 627.923550][ T81] team0 (unregistering): Port device team_slave_1 removed [ 628.074212][ T81] team0 (unregistering): Port device team_slave_0 removed [ 629.932272][ T81] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.122267][ T81] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.387308][ T81] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.562483][ T81] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.044166][ T81] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.267706][ T81] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.390804][ T81] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.501645][ T81] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.684439][ T81] bridge_slave_1: left allmulticast mode [ 631.703274][ T81] bridge_slave_1: left promiscuous mode [ 631.713350][ T81] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.724850][ T81] bridge_slave_0: left allmulticast mode [ 631.738883][ T81] bridge_slave_0: left promiscuous mode [ 631.744660][ T81] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.774230][ T81] bond0: left allmulticast mode [ 631.779306][ T81] bond_slave_0: left allmulticast mode [ 631.784794][ T81] bond_slave_1: left allmulticast mode [ 631.818962][ T81] bridge0: port 3(bond0) entered disabled state [ 631.843065][ T81] bridge_slave_1: left allmulticast mode [ 631.849073][ T81] bridge_slave_1: left promiscuous mode [ 631.854761][ T81] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.880134][ T81] bridge_slave_0: left allmulticast mode [ 631.885934][ T81] bridge_slave_0: left promiscuous mode [ 631.903433][ T81] bridge0: port 1(bridge_slave_0) entered disabled state [ 633.327780][ T81] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 633.347407][ T81] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 633.440468][ T81] bond0 (unregistering): Released all slaves [ 633.752232][ T81] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 633.761577][ T81] bond_slave_0: left promiscuous mode [ 633.780454][ T81] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 633.806617][ T81] bond_slave_1: left promiscuous mode [ 633.825658][ T81] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 633.848991][ T81] macvlan0: left promiscuous mode [ 633.854480][ T81] veth1_vlan: left allmulticast mode [ 633.870048][ T81] bond0 (unregistering): Released all slaves [ 634.190342][ T81] bond1 (unregistering): Released all slaves [ 634.926097][ T81] hsr_slave_0: left promiscuous mode [ 635.004027][ T81] hsr_slave_1: left promiscuous mode [ 635.013185][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 635.029916][ T81] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 635.059368][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 635.066811][ T81] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 635.097527][ T81] hsr_slave_0: left promiscuous mode [ 635.158779][ T81] hsr_slave_1: left promiscuous mode [ 635.175326][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 635.198732][ T81] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 635.239401][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 635.246848][ T81] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 635.351738][ T81] veth1_macvtap: left promiscuous mode [ 635.357397][ T81] veth1_vlan: left promiscuous mode [ 635.378649][ T81] veth0_vlan: left promiscuous mode [ 635.395079][ T81] veth1_macvtap: left promiscuous mode [ 635.400809][ T81] veth0_macvtap: left promiscuous mode [ 635.406375][ T81] veth1_vlan: left promiscuous mode [ 635.426660][ T81] veth0_vlan: left promiscuous mode [ 636.909907][ T81] team0 (unregistering): Port device team_slave_1 removed [ 637.021432][ T81] team0 (unregistering): Port device team_slave_0 removed [ 638.463988][ T81] team0 (unregistering): Port device team_slave_1 removed [ 638.516012][ T81] team0 (unregistering): Port device team_slave_0 removed [ 639.605552][ T81] IPVS: stop unused estimator thread 0... SYZFAIL: open(/dev/rfkill) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) SYZFAIL: repeatedly failed to execute the program proc=2 req=4136 state=1 status=67 (errno 9: Bad file descriptor) [ 646.540735][T22801] syz-executor: vmalloc error: size 4194304, failed to allocated page array size 8192, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 646.563674][T22801] CPU: 0 UID: 0 PID: 22801 Comm: syz-executor Not tainted 6.13.0-syzkaller #0 [ 646.572573][T22801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 646.582679][T22801] Call Trace: [ 646.585985][T22801] [ 646.588944][T22801] dump_stack_lvl+0x241/0x360 [ 646.593661][T22801] ? __pfx_dump_stack_lvl+0x10/0x10 [ 646.598893][T22801] ? __pfx__printk+0x10/0x10 [ 646.603511][T22801] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 646.609941][T22801] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 646.616500][T22801] warn_alloc+0x278/0x410 [ 646.620889][T22801] ? __pfx_warn_alloc+0x10/0x10 [ 646.625762][T22801] ? kcov_ioctl+0x56/0x640 [ 646.630199][T22801] ? __get_vm_area_node+0x1c8/0x2d0 [ 646.635414][T22801] ? __get_vm_area_node+0x25c/0x2d0 [ 646.640631][T22801] __vmalloc_node_range_noprof+0x62f/0x1380 [ 646.646549][T22801] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 646.652985][T22801] vmalloc_user_noprof+0x74/0x80 [ 646.657932][T22801] ? kcov_ioctl+0x56/0x640 [ 646.662357][T22801] kcov_ioctl+0x56/0x640 [ 646.666980][T22801] ? __pfx_kcov_ioctl+0x10/0x10 [ 646.671930][T22801] __se_sys_ioctl+0xf5/0x170 [ 646.676558][T22801] do_syscall_64+0xf3/0x230 [ 646.681095][T22801] ? clear_bhb_loop+0x35/0x90 [ 646.685781][T22801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.691696][T22801] RIP: 0033:0x7f47e258592b [ 646.696116][T22801] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 646.715726][T22801] RSP: 002b:00007ffeaa061650 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 646.724162][T22801] RAX: ffffffffffffffda RBX: 0000000000080000 RCX: 00007f47e258592b [ 646.732176][T22801] RDX: 0000000000080000 RSI: ffffffff80086301 RDI: 00000000000000de [ 646.740158][T22801] RBP: 00007f47e2776578 R08: 00000000000000da R09: 0000000000000000 [ 646.748133][T22801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 646.756110][T22801] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 646.764091][T22801] [ 646.776181][T22801] Mem-Info: [ 646.779546][T22801] active_anon:4160 inactive_anon:2 isolated_anon:0 [ 646.779546][T22801] active_file:11510 inactive_file:3461 isolated_file:0 [ 646.779546][T22801] unevictable:768 dirty:71 writeback:0 [ 646.779546][T22801] slab_reclaimable:10752 slab_unreclaimable:102007 [ 646.779546][T22801] mapped:10115 shmem:1476 pagetables:504 [ 646.779546][T22801] sec_pagetables:0 bounce:0 [ 646.779546][T22801] kernel_misc_reclaimable:0 [ 646.779546][T22801] free:1401833 free_pcp:961 free_cma:0 [ 646.827866][T22801] Node 0 active_anon:16540kB inactive_anon:8kB active_file:46032kB inactive_file:13836kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:38660kB dirty:280kB writeback:0kB shmem:4368kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10296kB pagetables:1916kB sec_pagetables:0kB all_unreclaimable? no [ 646.860608][T22801] Node 1 active_anon:0kB inactive_anon:0kB active_file:8kB inactive_file:8kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 646.903516][T22801] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 646.958662][T22801] lowmem_reserve[]: 0 2492 2493 0 0 [ 646.964222][T22801] Node 0 DMA32 free:1693200kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:15536kB inactive_anon:8kB active_file:45748kB inactive_file:13316kB unevictable:1536kB writepending:276kB present:3129332kB managed:2552760kB mlocked:0kB bounce:0kB free_pcp:15384kB local_pcp:11624kB free_cma:0kB [ 647.039759][T22801] lowmem_reserve[]: 0 0 0 0 0 [ 647.044560][T22801] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:100kB inactive_anon:0kB active_file:204kB inactive_file:540kB unevictable:0kB writepending:4kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:28kB local_pcp:20kB free_cma:0kB [ 647.111789][T22801] lowmem_reserve[]: 0 0 0 0 0 [ 647.116569][T22801] Node 1 Normal free:3906024kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:8kB inactive_file:8kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 647.160768][T22801] lowmem_reserve[]: 0 0 0 0 0 [ 647.165670][T22801] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 647.216075][T22801] Node 0 DMA32: 2785*4kB (UME) 4438*8kB (UME) 3662*16kB (UME) 2742*32kB (UME) 934*64kB (UME) 233*128kB (UME) 37*256kB (UME) 32*512kB (UM) 15*1024kB (UM) 12*2048kB (UM) 329*4096kB (UME) = 1695956kB [ 647.236823][T22801] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 647.248786][T22801] Node 1 Normal: 196*4kB (UME) 61*8kB (UME) 43*16kB (UME) 244*32kB (UME) 107*64kB (UME) 28*128kB (UME) 17*256kB (UME) 7*512kB (UME) 3*1024kB (U) 2*2048kB (UE) 945*4096kB (UM) = 3906024kB [ 647.268141][T22801] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 647.278060][T22801] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 647.287898][T22801] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 647.297768][T22801] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 647.307579][T22801] 16440 total pagecache pages [ 647.312582][T22801] 3 pages in swap cache [ 647.316767][T22801] Free swap = 124496kB [ 647.321526][T22801] Total swap = 124996kB [ 647.326122][T22801] 2097051 pages RAM [ 647.330404][T22801] 0 pages HighMem/MovableOnly [ 647.335121][T22801] 427011 pages reserved [ 647.346703][T22801] 0 pages cma reserved