last executing test programs: 1m6.732453531s ago: executing program 2 (id=211): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0xcd) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000000100)=@rose={'rose', 0x0}, 0x10) 1m5.929384008s ago: executing program 2 (id=214): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) socket(0x10, 0x803, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)) r1 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x400000000000009) socket$kcm(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x1, 0x7fffffff}, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000240), 0x4) 1m5.011000901s ago: executing program 2 (id=219): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005345c0f63cdc2e82818254950ee03568b8809a1f04c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab66c1aae9314d7381fcfeb970bea672010000000000000043144648a07a975bd89dc398712376610faa54f12495b4659be8673086f6f3543205d4bc4ce05b8b961103673dff7f158052e62bfbdcddde6985f3f1ac5d9a94cc53207899762a07282a1914452d11858e795a3ca30a101af5574f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5ed44039aab46419496362e54cfad05b4004ac71a003d7b85d07191bed4e5a8908263722d4146f7ed569985439baa355cf3d8731f5e7a237bc06d035a8d601f21746d880819f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c5b9f87d988c9fbd2b9d9b4e2d71753b1549fa734f0b2e5fcf9549804cddad721971637f9c9730a9cc384eed30345979db9c93e1c52f42cad0a4d4f9436d3f39b0ed09c395dc6e970366087a8e4daeeb1b017006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f710c490ecd085d2811a7555c53030000007f00000000bfa6478eb96b079c277e2910b7ccdc3d672ed34aa65278c549e2abb549ad954884289130bc71cee2b7de62bf48129ae1af052a2d46a6165eb0954dac7265f1f425735acf6377793946b3229e861d8ea49806b3b533345d36ecef9df700000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c000000aaae37f044bcadeb0f6846582b7653665aa336db9f0384d3c7ddf79c2e0000000000000000000000000000000000000000000000e154aa0d3e41986a668ee1e5ef93a8ceac75f44aae95e26742f895f287111f8ee86f7e3ffb63cfb0e345cf7fc63dd2b0d30977899c6f03640040af4db71f7452bfc79a05118d8bb42b63b195771e42f9942ec626bd4b5461b74324012164e8"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="02"], 0x10) 1m4.866436472s ago: executing program 2 (id=221): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r1, &(0x7f0000003480)={0x2020}, 0x2020) 1m4.696684517s ago: executing program 2 (id=222): r0 = socket(0x2, 0x2, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) bind$unix(r0, &(0x7f0000000000)=@abs, 0x6e) r1 = socket(0x2, 0x2, 0x1) bind$unix(r1, &(0x7f0000000000)=@abs, 0x6e) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r3, &(0x7f0000000700)=[{&(0x7f0000000640)=""/165, 0xa5}], 0x1, 0x180, 0x9) 1m4.320559828s ago: executing program 2 (id=224): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r0, 0x4, 0x40800) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r1, 0x2000009) sendfile(r0, r1, 0x0, 0x7ffff004) 1m4.002320559s ago: executing program 32 (id=224): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r0, 0x4, 0x40800) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r1, 0x2000009) sendfile(r0, r1, 0x0, 0x7ffff004) 49.922011289s ago: executing program 3 (id=117): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) creat(&(0x7f0000000100)='./file0\x00', 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 36.35692216s ago: executing program 3 (id=117): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) creat(&(0x7f0000000100)='./file0\x00', 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 21.684534851s ago: executing program 5 (id=425): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r0 = userfaultfd(0x80000) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0x40405515, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000000090000040"]) 21.436966797s ago: executing program 5 (id=428): r0 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010030000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000e0905810310000000000904010000020d00000904010102020d000009058238fcea892aab962afa3f1e4d133b305302000200"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) creat(0x0, 0x182) read$FUSE(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000002dc0)={{{@in=@private, @in6=@private0}}, {{@in6=@private1}, 0x0, @in6=@dev}}, &(0x7f0000002ec0)=0xe8) 20.573126113s ago: executing program 1 (id=431): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xb01100, 0x0, 0x401, 0x1, 0x8000004, 0x0, 0x0, 0x4}}, 0x50) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000061c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x78, 0x0, 0x0, {0xa, 0x0, 0x0, {0x0, 0x0, 0x400000000, 0x0, 0x2000040000000008, 0x1, 0xffffffff, 0x0, 0x8, 0x8000, 0x0, 0xffffffffffffffff, r2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 20.040762456s ago: executing program 1 (id=432): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = syz_io_uring_setup(0x507, &(0x7f0000000140)={0x0, 0x1184, 0x80, 0x0, 0x45}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) waitid$P_PIDFD(0x3, r1, 0x0, 0x4, 0x0) 19.464418626s ago: executing program 4 (id=434): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000880)=@mgmt_frame=@beacon={{{}, {}, @broadcast, @broadcast, @initial, {0x0, 0x3}}, 0x7, @random=0x7, 0x1, @val, @void, @val={0x3, 0x1, 0xc}, @val={0x4, 0x6, {0x8, 0x7, 0x8010}}, @val={0x6, 0x2, 0x643e}, @void, @val={0x25, 0x3, {0x0, 0x6b754fef1e5f8bf2, 0x3}}, @val={0x2a, 0x1, {0x1}}, @void, @void, @val={0x72, 0x6}, @void, @void}, 0x45) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000002c0)=ANY=[@ANYBLOB="98000000", @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="7a00330080000000ffffffffffff080211000000505050505050000000000000000000000000010003010e"], 0x98}}, 0x0) 18.946897906s ago: executing program 1 (id=435): openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002980)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x2000, 0xa68d7c519f800ff1, 0xffbc, 0x6, 0x1d45, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r2, &(0x7f0000000580)=[{&(0x7f0000000740)='[', 0x1}, {0x0, 0x18}], 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 18.789818012s ago: executing program 5 (id=436): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa}, 0x50) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000280), &(0x7f0000000000), 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 18.665925495s ago: executing program 4 (id=437): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r2, 0x4004743a, &(0x7f0000000300)) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00!', 0x2}], 0x1, 0x20000002, 0x100000) 18.378810841s ago: executing program 3 (id=117): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) creat(&(0x7f0000000100)='./file0\x00', 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 17.078315223s ago: executing program 0 (id=438): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 17.078001154s ago: executing program 5 (id=439): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r1, 0x40045402, &(0x7f0000000140)=0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0xdd3) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) close_range(r0, 0xffffffffffffffff, 0x0) 17.077665506s ago: executing program 4 (id=440): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r1, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) bind$packet(r4, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x10, 0x6, @link_local}, 0x14) syz_emit_ethernet(0x3a, &(0x7f0000000440)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @multicast1}, {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}, 0x0) 16.922925273s ago: executing program 5 (id=441): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4276ef66ba420266b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000980)=[@text32={0x20, 0x0}], 0x1, 0x51, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)=@arm64={0x6, 0x0, 0x1, '\x00', 0x77cd}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16.754167451s ago: executing program 4 (id=442): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000000)={0x40000003, 0x1, 0x1, "910f87a5bb5de06185cd000000000000000000001800", 0x51424752}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 16.586978559s ago: executing program 0 (id=443): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) r3 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f00000002c0)=ANY=[], 0x76) dup3(r3, r2, 0x0) finit_module(r3, 0x0, 0x100000000000000) 16.438580396s ago: executing program 4 (id=444): r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) socket(0x28, 0x5, 0x0) read(r1, &(0x7f0000000200)=""/209, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x2bd, @tick=0x5}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000740)={0xfffffffb, 0x2, 0x1, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000400)={0x0, 0x1f000000}) tkill(r0, 0x7) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYRES64=r0], 0x50) 16.433425556s ago: executing program 5 (id=445): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x3, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x2, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x5}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 16.396410876s ago: executing program 0 (id=446): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$LINK_DETACH(0x22, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r1, r3, 0x4, r4}, 0x10) 16.104702677s ago: executing program 4 (id=447): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="660f388173ab0fc76fb4c4c3294abd26aaf3fb0066bad004b000f303c70fae6e2fc0c00f2d130f01f1260f01ca660f3881b4493c000000c4c2459d78ad", 0x3d}], 0x1, 0x51, 0x0, 0x0) syz_usb_connect(0x0, 0x32e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b04af72024d05a5ea9160102030109021c0301000050000904e700050801000009050602ff03b30204491167"], 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)={{0x0, 0x0, 0x80, {0x100000, 0x2}}, "cb31455c9e9d288a70a2a6bb8068fd95dd041cf5b177a3bffe992dfbbdf959487337b92336ce1de32e7695c411c0bf9f852d2d71192f33001fd51f5b396a55cb98699a09d21648c4cb30d9d7e3e397c7a3c041c76c72385a46c48c5302848c3696facce956952c2a85822ddf20434ccee5806294ed563ff3a972cddf6ef16ddace933d8a5adea40cd3ad40c9873c29368838e815ff59723519154856b2d5cd9cd79a97af85a08dada1175817886e5f9e7aa3dca783a44c667a4806826570ec6acb57d65efc313a384e11fb633dee17ee600145f2cb3103384606140021be766fcb7fa029f0513bbb466177ca1068192550bbf4e6f5694aec747a16e27688a988fa595bca1761b8e88a7dbcaeaf97a8b7b53058b1faf880dd6f1b6eb4c7beb0582b4007f1a67db1352407adbe1456bf762c94fd825b9419d74f63cdeb6c6976de1890d773f0c8088d2bd48a838cf5b87f5ddf926352960fb978874b0f175acfa55ddfe84de3fc9f75b58bf7a35f33d3c43ed5e3224e92751fa1b43f94f64b681163ef1360a3f3bb7403afc67a188b2104b45c5814aaa9e218552498bf85f4b221d9acc32a331f5f8c109cc9f335ff4e418ab30b54b99d5376cd928c431fc8211fcbaf64716afdc4b6d0417e04d5723e4675d282b36bef3a3a19e855029ec7c33830a6df19332b63e9d8a0f22d96ac230c67657a4e7f7afab91dc0ce751b68980e5a4f6d9d6d9b98802ba9d8576640eea61b8c308a1745df61560e56108bececa3016d93246fdc8b768634e8319b1ffde103c07378f8f4927baba05e992a4b5af0958a7e495e7ce53f7917451d15a963ca14f5cdc4563775688b6533a4b97e0f84b0a33c30077b20805c1f42cc7815efada97ad59ac486bc9e0ee386b49cb97b47fbf8f919f06c75a49636795054b5ebee3e91602c90d7f4db49220affe56d56b96e4f662b2bf36dae482ffc7ba21cbc55e21b73309d6b7aa5509defcb77c236e43b579c61eae5c8d8f8fa71ad876b96069f2e4352c8aaf16e299d21edf5434c0cd9b25cdc9210fb0de759b1dd3fc7fe4c7118bbde72a5617dff21f7a5036448fba7fe41aaee0c289cd076d757e47b0713b236f6f141ba0112c9312b3ec853aabafdf1eb2cbb517d2d7352725f557214d27d9a340af0128fc960a4ea64c933b0d8dd226b6e024471aaac8a7074b2a8695ab990fabba5bf315d246fbfe4260f1fffe54814e33b6235c5b4095437298858909bcbd40a8a286d1bedb06b7b1775bce0a5bca19b0a5c2fa8dbf87b55ae0a43c5086422e5bacb94047e150451f5996420b0d4a697f59decb49900b2b9c13aade536933e14d672c21a35cb68572c3de02f3147414eff4b8674b91f7aebf35f056a8d388f67f8ef7cfaf6b28fe745831ef41def1839791647016932c70685752851327f1837d2f1e9d8f93443eefed2317119c8152ca451a5d3aeb253fb484283f52e5db9f61f059ad3c217a860ee0571d254483501b00699208c7fa5571cf58b9715c954115bc2db0af28361938bb95ced7370c8cbb6141ef62fdbf369dfc4eccd98ab9886d79a52cbf91a27dd0f4b29940492e860fb94654dea54fad6290570760e3b59a0cf28053732472dc313b5fedfc583fc702a880971dc61286370aaf167810455cce7654dc4325a41d9d1944abcdc4d81378f1e96a8f94cd95b886a01f086e379601504219d57d531ba34e1ba0905785fb629c61f6b940a652cdee9dbef12b7fcde087b92816db3386a5769049ba00788e31de4ddbb8b56de1fbe3a5e671728effda7cfd0b650cf5df2faf22470812efbbb548e47cbf36c64e05a7877820f08948ceedb35e12a4a143ee0101a7bf0a00a4062b50c39020669700adf739a6f75352a45fd1373d3e85c3867170373f0c7a794d8590f4c22ae62d438ec365b0f6a15cb2ffe0fc6f57185e1760761bd4370027c01dfad0502f00b6898115df3c530d0b0b4a64e623fd580b528a733e4c881cf5843a975a97f92a7833527887c79fa8eec82b9526a15c6c5f2972083ce8aec735810580ffa4ea2cef4823aee044dd70927f7c07bba18b930006aa86ae7399ac6b4c24bc9d6a6ab0c5b428d7255d4d983eadf97e10c1b00867da29ac981acb453073a37236e7ae808e7759b2e0cffc3ec43afb1e95cd090a7d4b9225a0e3cbebfe49b93846ab603891e2da7d85a04bf42d12d16a97c965bc4911d3ba7a9ca505794d8744fef00a436089de67aa8b480070230dfb002eb91edaff428d4908a87afae418dff7ca59aefe1ad8f6935f309fe7985c2310881659c60a66a5e50242497ba1cd5d2bd79496ccd23f9fd901afc6622829cb3701caa50f96e09e3b23bfa3181b74ec7dae2e42c9caab43e49ae1d922a1a1eb3682de026323d9215fcec42c54401a1af81450830a4b784ed1c7922734bf3632409147680dd3fabcef296353705bb5c0e650e12905a05db1e7923923a96ddc783fc1ed46e2010416c37d9d149ad73e808bd6e4464f62893024a8501803b6c88fc55c8bbc1da7cbf580b5a81fb7c61455ae3a8aaec303fba12e0f2b51ed5e8bd31db40e8bdbd00e7b1ddd364766c974d813d86fc88a27bf82bba60c62e5f0f6af6bda3390f8e72a2811baf3d6325e70d9a3b59cab1abe95290ecb87985567e1243504c038de9d4d100ea64eec45208cd8d2474e646f7d81eed6d59b8b0859552b6fc088d874cde3e75ee30243dc9d88ed5b577851a5bd9e2a453287025777fcac19ac33e1c94b4ad272f1055b16b842a6bd6168fb45f1f74ed2467020df5431068a5f2cbeaa6ac1841308c7c9f752aa06927f91fdf18ef9d9e942367e5ecac0abf4d3b8fc7b80238c0e7faf2ea7d3f5271028fc558a44799bde63168becc67c5531e843336fb16ab618d37f95a91937b824bf896b044146bc3a5e264a8f23ddd00729cd9aa56d9a9a24b7ab96ae021b193d8874d03ff4b723d86b7564e550378599c3e0c7a2b3d447ad76eb4cd699733d970a5ab218429a1af81df9c8013d6d16a6bcb019f6ace4461cdaa785d20ea027cfa53d521bb91ad2c04aaa6c0f268b14924803977633280c7b7beb14c88fae542b7a13e96253259e7296e37276da88891c14664340e84ae732edbd71e67047e476735b220ca231de31a380ece372db632ec3cb3ef5ac97ec41148febd2acb15cde1ee5e990ea0aaa95c2df39e2111dd1185d14a194e22d34fda8f54e99d3a73e5a231682c726d40816e048c1d059bf3bb9ee2b5f895365d95aa28f6adbf6e16469926b4d8ee7f04c7dbafaa444df5b88596c17874f0efe35e5ada1a69634f4b430f852d33b032f823c5deb54f47a7a4adb1adf56d5440b7a917580004c13e0b36c8e0a203a2be3f8fffd9efef3af19389a12c67859d4381ac0a02da18e25931b41216b731de25e1245482c84d45de1cddbce2109322a3428bff692012573fe9efd02109dbf35c5d3a287dec105cf3f1a2e50100cc08c7b4759766d25d0f7b42c3ea8bf8101e61159a2ba7602e9c7947cf936ac39bf59b24084709fd61d704bbdba7d282aac778b7ec1dcaf984527c8112d56e75ab774d1598d9816abc77b0e693880beca5f330c626774ab5cb6967fb0ea8e14efce120947092c3b6f8a22f07cad22e971418092481fcad36ecf0cfd6bc3864115b8507c13554584f1f6fee5ee07eb6a091638d8e7781c1c006166e0f987f9f4de535e9f3df1db8c9328e9a19a73c76059ab4edfe9eda7f16cc6b869229bafb179d194e20ccc6f9338183b673de8138ddab9a0907278f6eaacc55bf59a450ebc10e0b88c82d9f0deca86ff771f46509250fde94e0c94256b77616d099862ddc9b341838d634a9dc4b55a88fcc6248901135f6aa76365433e7e534e0e5ae8eec2a63df62c3e244a40481189ff54122698c7e2da2c829b2eec9efc9894ee05be04ae6dd48406eaace17827e38bf38b414059aded0343e0711a8d864ff41a8d9ed40fb2aa1a3f4014f691cd0e8af62445a021820ff03afa8a192ee255862f306851df1de96ce36cafb6a60b7069db7aa96fd1ffb2fb01e6247f770304dffe4b1c8d0eeb336dd6806d6ab5d418953b1cae7cbbf53766b61e4aad5cfce8255b78af26f9bd11283a9c7d12cd63b82cd2b506fd4061d1e16fc7c713d80763c3b0aa0faadcd9b7d676101aad80e1ca00369297e1f714003ab8d0b545c335014a522a25a767950963ef821425b79b521076166d0df3ef358c7d60d99cc85463c186e8faf16af79785680382e4cc93f6594f8c4461e0988c08717640df24a5f357db22432fcae21702dc792d201212fb3791e0164bb3d433a8268ec96df73766fdba42965e00e619246cba5d96eb853a7c22c34d2fe5e5d3f3ccf9c627d069517b743cd07f6f7b444074bb9a50269f2e03309c58930e56a9583eb00c37fbcdd391972261f41756c10c8899fcd036e2017e088ef9e6ec31f795d55b3bba214c53c98fc9318e4ade0e7e6fd259aa277fed54c27e5210787a5f6937f56fdbe1da5113f059061ca590ddf536a55cb91ac6ed41cb9c0418b115b29f5e823c1b0ee7c2b3982087763545b34e2c945d587ebce69bbe299a7f52b674f351977370fc700474bc15d7e6ef98c14258ecf401a4f3bba1a9aa76c5ab0b8819fe6efe3fba1899909e5e48554299150ee272451b56142d12ae2bb4942db430239701d494917f2c939a6fb9d98d4751a6f2c4537ec870342d223343a9bd7b8d8c99aff8cbfa298395551185f35dec120228073a1e496a58b59d9ac5986249a7c6db9398395cbf341c08ee910700e2daa042dba1846fef59c72ce872bba2046a14fcf9a47a5686d62bfba76309a9865c26e5fa41dd872fc749fdc57953105ace4978f9eb788c8d061c853ad0313e51e732c5d7bc05e752443c8e99b8e81c688befdb5b14c3cc2f96eb8ce8290303e483992fcbece1ff278d0dc036ad437b6cbc695c7741ba4556e242146d40843c73deaf8fceba40e4a4acd739b3031848b17a210a1ff0dc1908b77c4bb94543af52e1fe2a090c8f217428d02336303f7952c3ddefa7c81850676e7f4cc3d32c3937281fa5ab279c3fe39f92ba077dadb8c2c3df17cc511bd33c41cb161d24aea154f0f5902c94b56fe072d321a983668bd9f4838878e66ec44cb233d7d0ca908a794c844ff8b3ba4c57f6c5fc2f3a54db448b013f0c4998bbc6ed0409b3368391cb28c6df4a909fff90f308ff38c758ff7d8a2920bc221236d89b3b76de44e8ce649b32f5135a0217ba9036a8edddee97d7ba15f2c21fb7d3cae3eb6ef09dd03eed650489c83b5ba5dd9daf7a86cf0544fb8a58e46b860e3e42e10cd6f1c4f81179eb2c3ba611793a32abb4c0768db90e8bdd1694efaa9c2b45c89d203fdfb8b926b6a0d666d91b93065a83184fc2065961f2308056241b66f427c0f0aabc75852c90f0624cf036d537032ca8d73325d2ae2a79a7292c240c34584bb881fe5d468a051cbc0bde061f9eddfb758cd2dfba296eef549e5c4ede097111216a0ec60f90e8d6f5dd843c82e15f505f8c74e854ba9cd386249d552978eb8135a5f8c79c3ceb8dd5828b0218ffe40f375d6cf3ff2f47c276c8169ab98336582a852c1535018fb2306aca6b8c9f9e38d64c66a722762b76c69d4ca6c14bd6992549e4eec17287fce194467f972d9200c3d1ac4fd4a8f2620e2e4281d28c099946ed90789ba122705326390d3e058ceed24044e542efb36416272eadf6304f30efa0b7bc1ae5be92fe50e591ee6f725726e917ec113506920beb2aa53b39f1d76b31500", "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"}) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0xa, 0xe, 0x7, 0x4, 0xcc7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15.653139927s ago: executing program 1 (id=448): unshare(0x2040400) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) epoll_create1(0x80000) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r1, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r2, 0x47f5, 0x0, 0x0, 0x0, 0x0) 15.413035563s ago: executing program 0 (id=449): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) r1 = syz_io_uring_setup(0x23d, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2f}}) io_uring_enter(r1, 0x2def, 0x0, 0x20, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000300)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r5, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000dfff00"}}) 15.158298649s ago: executing program 0 (id=450): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x24, 0x29, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {}, {0x9, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x40040c4) 15.104075917s ago: executing program 1 (id=451): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@userxattr}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x2000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r0, &(0x7f0000000000)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000080)='./file0\x00') 14.945232427s ago: executing program 1 (id=452): openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002980)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x2000, 0xa68d7c519f800ff1, 0xffbc, 0x6, 0x1d45, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r2, &(0x7f0000000580)=[{&(0x7f0000000740)='[', 0x1}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 14.944505629s ago: executing program 0 (id=453): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x1d, 0x2, 0x6) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 11.62443762s ago: executing program 3 (id=117): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) creat(&(0x7f0000000100)='./file0\x00', 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 5.960132527s ago: executing program 3 (id=117): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) creat(&(0x7f0000000100)='./file0\x00', 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=117): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) creat(&(0x7f0000000100)='./file0\x00', 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): evsim3: renamed from eth3 [ 76.792880][ T5829] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.803467][ T5829] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.821840][ T5829] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.851080][ T5829] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.912465][ T5820] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 76.924459][ T5820] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 76.940814][ T5820] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 76.950882][ T5820] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 77.055730][ T5827] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 77.066096][ T5827] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 77.081148][ T5827] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 77.092941][ T5827] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 77.169978][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.244578][ T5823] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 77.255731][ T5823] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 77.268647][ T5823] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 77.281477][ T5823] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 77.309768][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.328284][ T1014] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.335498][ T1014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.390442][ T1014] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.397648][ T1014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.414059][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.457468][ T5830] Bluetooth: hci2: command tx timeout [ 77.462941][ T5830] Bluetooth: hci3: command tx timeout [ 77.468811][ T5832] Bluetooth: hci1: command tx timeout [ 77.468852][ T5832] Bluetooth: hci0: command tx timeout [ 77.493093][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.537409][ T5830] Bluetooth: hci4: command tx timeout [ 77.550892][ T1014] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.558129][ T1014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.569242][ T1014] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.576441][ T1014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.603450][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.665854][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.722625][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.742170][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.749363][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.775597][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.782741][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.804252][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.865810][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.910034][ T1014] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.917252][ T1014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.958088][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.003139][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.010345][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.020058][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.027207][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.038983][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.046169][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.073826][ T5820] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 78.089074][ T5820] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.365744][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.441159][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.604334][ T5829] veth0_vlan: entered promiscuous mode [ 78.684574][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.713383][ T5829] veth1_vlan: entered promiscuous mode [ 78.732588][ T5819] veth0_vlan: entered promiscuous mode [ 78.783921][ T5819] veth1_vlan: entered promiscuous mode [ 78.824564][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.855552][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.868791][ T5829] veth0_macvtap: entered promiscuous mode [ 78.881345][ T5829] veth1_macvtap: entered promiscuous mode [ 78.965168][ T5819] veth0_macvtap: entered promiscuous mode [ 78.980105][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.995631][ T5819] veth1_macvtap: entered promiscuous mode [ 79.032572][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.081878][ T5829] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.094180][ T5829] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.103105][ T5829] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.115454][ T5829] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.163875][ T5827] veth0_vlan: entered promiscuous mode [ 79.173330][ T5823] veth0_vlan: entered promiscuous mode [ 79.183078][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.195877][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.229314][ T5819] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.238895][ T5819] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.251037][ T5819] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.259976][ T5819] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.289104][ T5823] veth1_vlan: entered promiscuous mode [ 79.304734][ T5827] veth1_vlan: entered promiscuous mode [ 79.363351][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.375752][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.408739][ T5820] veth0_vlan: entered promiscuous mode [ 79.453594][ T5820] veth1_vlan: entered promiscuous mode [ 79.470101][ T5827] veth0_macvtap: entered promiscuous mode [ 79.480772][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.485323][ T5823] veth0_macvtap: entered promiscuous mode [ 79.499604][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.537646][ T5830] Bluetooth: hci0: command tx timeout [ 79.537663][ T51] Bluetooth: hci1: command tx timeout [ 79.537695][ T51] Bluetooth: hci2: command tx timeout [ 79.543063][ T5830] Bluetooth: hci3: command tx timeout [ 79.561616][ T5827] veth1_macvtap: entered promiscuous mode [ 79.594330][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.618892][ T5830] Bluetooth: hci4: command tx timeout [ 79.623665][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.624788][ T5823] veth1_macvtap: entered promiscuous mode [ 79.685274][ T5829] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 79.688739][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.711109][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.721509][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.739245][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.787065][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.795992][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.840299][ T5820] veth0_macvtap: entered promiscuous mode [ 79.872725][ T5820] veth1_macvtap: entered promiscuous mode [ 79.893473][ T5827] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.916575][ T5827] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.945860][ T5827] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.966311][ T5827] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.985747][ T5823] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.016682][ T5823] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.025442][ T5823] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.053047][ T5823] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.213979][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.239631][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.305023][ T5820] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.322215][ T5820] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.331293][ T5820] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.351968][ T5820] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.446862][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.454733][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.546545][ T5952] input: syz0 as /devices/virtual/input/input5 [ 80.625360][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.641959][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.744960][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.761928][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.848349][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.898586][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.946113][ T3560] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.970718][ T3560] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.134406][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.164077][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.421409][ T5972] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 81.625809][ T5830] Bluetooth: hci2: command tx timeout [ 81.631487][ T5830] Bluetooth: hci0: command tx timeout [ 81.639551][ T5836] Bluetooth: hci1: command tx timeout [ 81.639570][ T51] Bluetooth: hci3: command tx timeout [ 81.706502][ T10] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 81.706613][ T51] Bluetooth: hci4: command tx timeout [ 81.892356][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 81.944849][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.985633][ T10] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 82.022599][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.058993][ T10] usb 3-1: config 0 descriptor?? [ 82.136345][ T5973] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 82.282610][ T5989] TCP: out of memory -- consider tuning tcp_mem [ 82.337555][ T5973] usb 5-1: Using ep0 maxpacket: 8 [ 82.361888][ T5973] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 82.379351][ T5973] usb 5-1: config 179 has no interface number 0 [ 82.385695][ T5973] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 82.476394][ T5950] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 82.478580][ T5973] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 82.538975][ T5973] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 82.586426][ T5973] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 82.656956][ T5973] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 82.666052][ T5973] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.680339][ T5950] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.715026][ T5950] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.745290][ T5950] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 82.747640][ T5981] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 82.769715][ T5950] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.796129][ T5950] usb 1-1: config 0 descriptor?? [ 83.122222][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 83.139216][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 83.179712][ T10] usb 3-1: USB disconnect, device number 2 [ 83.185408][ T5973] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input6 [ 83.263955][ T5950] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 83.324065][ T5950] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 83.337124][ T5875] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 83.463138][ T5950] cp2112 0003:10C4:EA90.0001: Part Number: 0x82 Device Version: 0xFE [ 83.537519][ T5875] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 83.575699][ T5875] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.595997][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 83.596564][ T5919] usb 5-1: USB disconnect, device number 2 [ 83.604585][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 83.640258][ T5875] usb 2-1: config 0 descriptor?? [ 83.684030][ T5919] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 83.987240][ T6007] kvm: pic: non byte write [ 84.063691][ T5990] cp2112 0003:10C4:EA90.0001: Error starting transaction: -38 [ 84.081131][ T5950] cp2112 0003:10C4:EA90.0001: error reading lock byte: -32 [ 84.140431][ T5950] usb 1-1: USB disconnect, device number 2 [ 84.419939][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 84.772805][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 84.936767][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 85.183682][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 85.568191][ T5875] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 85.581936][ T5875] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 85.611752][ T5875] asix 2-1:0.0: probe with driver asix failed with error -71 [ 85.841815][ T5875] usb 2-1: USB disconnect, device number 2 [ 85.878401][ T6017] process 'syz.2.26' launched './file1' with NULL argv: empty string added [ 86.158124][ T6031] warning: `syz.4.30' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 86.566447][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.575107][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.584832][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 86.754093][ T980] cfg80211: failed to load regulatory.db [ 86.919430][ T6051] tipc: Failed to remove unknown binding: 66,1,1/0:1572568213/1572568215 [ 86.936509][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.976613][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 87.176630][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 88.043830][ T6063] netlink: 4 bytes leftover after parsing attributes in process `syz.3.42'. [ 88.515642][ T30] audit: type=1800 audit(1750975114.794:2): pid=6070 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.44" name="/" dev="fuse" ino=1 res=0 errno=0 [ 88.900595][ T12] wlan1: Trigger new scan to find an IBSS to join [ 89.141872][ T6092] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 93.276469][ T925] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 93.450406][ T925] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 93.467431][ T925] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 93.498440][ T925] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 93.515746][ T925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 93.532844][ T925] usb 4-1: SerialNumber: syz [ 93.722045][ T6168] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 93.722045][ T6168] program syz.0.79 not setting count and/or reply_len properly [ 93.816291][ T5821] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 94.024683][ T59] wlan1: Trigger new scan to find an IBSS to join [ 94.223207][ T925] usb 4-1: 0:2 : does not exist [ 95.324318][ T925] usb 4-1: USB disconnect, device number 2 [ 95.330527][ T5821] usb 2-1: Using ep0 maxpacket: 8 [ 95.343474][ T5821] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 95.401325][ T5821] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.493764][ T5821] pvrusb2: Hardware description: Terratec Grabster AV400 [ 95.520607][ T5821] pvrusb2: ********** [ 95.533929][ T5821] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 95.572322][ T5821] pvrusb2: Important functionality might not be entirely working. [ 95.612309][ T5821] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 95.641198][ T5821] pvrusb2: ********** [ 95.715507][ T2342] pvrusb2: Invalid write control endpoint [ 95.935256][ T6163] pvrusb2: Invalid write control endpoint [ 95.955534][ T5821] usb 2-1: USB disconnect, device number 3 [ 95.963927][ T2342] pvrusb2: Invalid write control endpoint [ 95.999069][ T2342] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 96.008952][ T2342] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 96.016752][ T2342] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 96.026965][ T2342] pvrusb2: Device being rendered inoperable [ 96.035000][ T2342] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 96.044765][ T6174] serio: Serial port ptm0 [ 96.066539][ T925] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 96.066570][ T2342] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 96.104983][ T2342] pvrusb2: Attached sub-driver cx25840 [ 96.111103][ T2342] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 96.121552][ T2342] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 96.135834][ T12] wlan1: Creating new IBSS network, BSSID 00:00:00:8d:00:00 [ 96.269821][ T925] usb 4-1: Using ep0 maxpacket: 16 [ 96.292004][ T925] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.323748][ T925] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.357051][ T925] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 96.370907][ T925] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 96.380395][ T925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.407873][ T925] usb 4-1: config 0 descriptor?? [ 97.095218][ T925] microsoft 0003:045E:07DA.0002: No inputs registered, leaving [ 97.183252][ T925] microsoft 0003:045E:07DA.0002: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 97.201512][ T925] microsoft 0003:045E:07DA.0002: no inputs found [ 97.208128][ T925] microsoft 0003:045E:07DA.0002: could not initialize ff, continuing anyway [ 97.236000][ T925] usb 4-1: USB disconnect, device number 3 [ 97.502455][ T6202] syz.2.90 uses obsolete (PF_INET,SOCK_PACKET) [ 98.045938][ T6215] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 98.876488][ T5909] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 98.886392][ T5950] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 99.036309][ T5950] usb 2-1: Using ep0 maxpacket: 16 [ 99.043564][ T5950] usb 2-1: config 0 has no interfaces? [ 99.051023][ T5950] usb 2-1: New USB device found, idVendor=5b8d, idProduct=3fea, bcdDevice=15.fe [ 99.056314][ T5909] usb 5-1: Using ep0 maxpacket: 32 [ 99.060410][ T5950] usb 2-1: New USB device strings: Mfr=188, Product=138, SerialNumber=0 [ 99.067470][ T5909] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 99.076750][ T5950] usb 2-1: Product: syz [ 99.086112][ T5909] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 99.090852][ T5950] usb 2-1: Manufacturer: syz [ 99.097302][ T5909] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 99.105303][ T5950] usb 2-1: config 0 descriptor?? [ 99.111111][ T5909] usb 5-1: Product: syz [ 99.120440][ T5909] usb 5-1: Manufacturer: syz [ 99.125562][ T5909] usb 5-1: SerialNumber: syz [ 99.132101][ T5909] usb 5-1: config 0 descriptor?? [ 99.138144][ T6226] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 99.394139][ T5909] usb 5-1: USB disconnect, device number 3 [ 99.410556][ T5950] usb 2-1: USB disconnect, device number 4 [ 99.746542][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 99.853462][ T5909] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 99.896291][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 99.903306][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 99.911539][ T10] usb 3-1: config 0 has no interface number 0 [ 99.920649][ T10] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.949951][ T10] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.986347][ T10] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 99.995426][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.028848][ T10] usb 3-1: config 0 descriptor?? [ 100.044281][ T5909] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 100.081357][ T5909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 100.122821][ T5909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.142243][ T5909] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 100.326670][ T5909] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 100.756278][ T5909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.771460][ T10] input: HID 28bd:0071 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:28BD:0071.0003/input/input8 [ 100.887325][ T5909] usb 5-1: config 0 descriptor?? [ 100.972145][ T10] input: HID 28bd:0071 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:28BD:0071.0003/input/input9 [ 101.014084][ T10] uclogic 0003:28BD:0071.0003: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.2-1/input1 [ 101.030951][ T10] usb 3-1: USB disconnect, device number 3 [ 101.852175][ T5909] usbhid 5-1:0.0: can't add hid device: -71 [ 101.874636][ T5909] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 101.902254][ T5909] usb 5-1: USB disconnect, device number 4 [ 102.062302][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.154340][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.268677][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.357442][ T5909] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 102.405689][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.536270][ T5909] usb 5-1: Using ep0 maxpacket: 8 [ 102.548265][ T5909] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 102.569906][ T5909] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 102.597966][ T5909] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 102.618111][ T5909] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 102.646186][ T5909] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 102.655587][ T12] bridge_slave_1: left allmulticast mode [ 102.665330][ T5909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.679589][ T12] bridge_slave_1: left promiscuous mode [ 102.686542][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.724391][ T12] bridge_slave_0: left allmulticast mode [ 102.738988][ T12] bridge_slave_0: left promiscuous mode [ 102.754967][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.871444][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 102.886094][ T5832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 102.896693][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 102.905400][ T5909] usb 5-1: GET_CAPABILITIES returned 0 [ 102.912080][ T5832] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 102.920064][ T5832] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 102.930494][ T5909] usbtmc 5-1:16.0: can't read capabilities [ 103.122738][ T980] usb 5-1: USB disconnect, device number 5 [ 103.299993][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.326795][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.337498][ T12] bond0 (unregistering): Released all slaves [ 103.772753][ T6313] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 104.183644][ T12] hsr_slave_0: left promiscuous mode [ 104.199310][ T12] hsr_slave_1: left promiscuous mode [ 104.211307][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.219293][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.229837][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.237491][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.273630][ T12] veth1_macvtap: left promiscuous mode [ 104.283580][ T12] veth0_macvtap: left promiscuous mode [ 104.296541][ T12] veth1_vlan: left promiscuous mode [ 104.312236][ T12] veth0_vlan: left promiscuous mode [ 104.822899][ T12] team0 (unregistering): Port device team_slave_1 removed [ 104.862273][ T12] team0 (unregistering): Port device team_slave_0 removed [ 104.898552][ T6353] block nbd2: NBD_DISCONNECT [ 104.903694][ T6353] block nbd2: Disconnected due to user request. [ 104.919419][ T6353] block nbd2: shutting down sockets [ 104.980142][ T51] Bluetooth: hci2: command tx timeout [ 105.370117][ T6302] chnl_net:caif_netlink_parms(): no params data found [ 105.393002][ T6343] Zero length message leads to an empty skb [ 105.427921][ T5950] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 105.606298][ T5950] usb 1-1: Using ep0 maxpacket: 32 [ 105.622363][ T5950] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 105.642158][ T5950] usb 1-1: config 0 has no interface number 0 [ 105.648581][ T5950] usb 1-1: config 0 interface 184 has no altsetting 0 [ 105.665457][ T5950] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 105.705972][ T5950] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.711470][ T6370] netlink: 4 bytes leftover after parsing attributes in process `syz.2.142'. [ 105.723867][ T5950] usb 1-1: Product: syz [ 105.734239][ T6370] netlink: 24 bytes leftover after parsing attributes in process `syz.2.142'. [ 105.743383][ T5950] usb 1-1: Manufacturer: syz [ 105.748252][ T5950] usb 1-1: SerialNumber: syz [ 105.762389][ T5950] usb 1-1: config 0 descriptor?? [ 105.790844][ T5950] smsc75xx v1.0.0 [ 105.813830][ T6302] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.829654][ T6302] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.840854][ T6302] bridge_slave_0: entered allmulticast mode [ 105.864557][ T6302] bridge_slave_0: entered promiscuous mode [ 105.904311][ T6302] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.922749][ T6302] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.931078][ T6302] bridge_slave_1: entered allmulticast mode [ 105.961561][ T6302] bridge_slave_1: entered promiscuous mode [ 106.064201][ T6302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.100699][ T6302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.256014][ T6302] team0: Port device team_slave_0 added [ 106.478336][ T6302] team0: Port device team_slave_1 added [ 106.652743][ T5950] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 106.774526][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 107.184287][ T51] Bluetooth: hci2: command tx timeout [ 107.241822][ T5950] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 107.324521][ T6302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.331598][ T6302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.333035][ T6386] netlink: 'syz.4.147': attribute type 39 has an invalid length. [ 107.357647][ T6302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.359705][ T6302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.384979][ T6302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.427146][ T6302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.449675][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.461087][ T10] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 107.473748][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.491827][ T10] usb 2-1: config 0 descriptor?? [ 107.591792][ T6302] hsr_slave_0: entered promiscuous mode [ 107.610908][ T6302] hsr_slave_1: entered promiscuous mode [ 107.627524][ T6302] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 107.635135][ T6302] Cannot create hsr debugfs directory [ 107.733419][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 107.753016][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 107.776175][ T10] usb 2-1: USB disconnect, device number 5 [ 107.901866][ T5950] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 107.924160][ T5950] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write PMT_CTL: -71 [ 107.941442][ T5950] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 107.970681][ T5950] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 107.982793][ T5950] usb 1-1: USB disconnect, device number 3 [ 108.208102][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 108.335266][ T1014] Bluetooth: hci5: Frame reassembly failed (-84) [ 108.339832][ T6302] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 108.365058][ T6302] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 108.368759][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 108.382431][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.383518][ T6302] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 108.393763][ T10] usb 2-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 108.410252][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.419445][ T6302] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 108.430506][ T10] usb 2-1: config 0 descriptor?? [ 108.455797][ T6417] ======================================================= [ 108.455797][ T6417] WARNING: The mand mount option has been deprecated and [ 108.455797][ T6417] and is ignored by this kernel. Remove the mand [ 108.455797][ T6417] option from the mount to silence this warning. [ 108.455797][ T6417] ======================================================= [ 108.498259][ C0] TC_ACT_REPEAT abuse ? [ 108.527006][ T6420] overlayfs: overlapping lowerdir path [ 108.551543][ T6302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.572667][ T6417] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 108.599106][ T6302] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.617562][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.624756][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.673479][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.680725][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.851422][ T10] kye 0003:0458:5016.0004: control desc unexpectedly large [ 108.891741][ T10] input: HID 0458:5016 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5016.0004/input/input10 [ 108.991159][ T10] input: HID 0458:5016 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5016.0004/input/input11 [ 109.032176][ T6302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.069339][ T10] kye 0003:0458:5016.0004: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.1-1/input0 [ 109.090928][ T6302] veth0_vlan: entered promiscuous mode [ 109.105480][ T6302] veth1_vlan: entered promiscuous mode [ 109.111507][ T5821] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 109.140036][ T5950] TC_ACT_REPEAT abuse ? [ 109.145376][ T5875] TC_ACT_REPEAT abuse ? [ 109.151961][ T6302] veth0_macvtap: entered promiscuous mode [ 109.175440][ T6302] veth1_macvtap: entered promiscuous mode [ 109.204193][ T6302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.216624][ T5832] Bluetooth: hci2: command tx timeout [ 109.227232][ T6302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.245229][ T6302] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.259036][ T6302] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.269361][ T6302] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.278544][ T6302] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.287505][ T5821] usb 3-1: Using ep0 maxpacket: 16 [ 109.298737][ T5821] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 109.313919][ T5821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.330206][ T5821] usb 3-1: Product: syz [ 109.339658][ T5821] usb 3-1: Manufacturer: syz [ 109.351872][ T5821] usb 3-1: SerialNumber: syz [ 109.376044][ T5821] r8152-cfgselector 3-1: Unknown version 0x0000 [ 109.388001][ T5821] r8152-cfgselector 3-1: config 0 descriptor?? [ 109.422567][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.437846][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.472268][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.481625][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.582859][ T5875] usb 2-1: USB disconnect, device number 6 [ 110.407189][ T5832] Bluetooth: hci5: command 0x1003 tx timeout [ 110.413528][ T51] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 110.746302][ T6448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.166'. [ 111.888932][ T1014] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.943773][ T5821] r8152-cfgselector 3-1: USB disconnect, device number 4 [ 113.080269][ T30] audit: type=1326 audit(1750975139.364:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6493 comm="syz.4.180" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f075018e929 code=0x0 [ 113.109150][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 113.118432][ T5832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 113.126094][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 113.145604][ T5832] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 113.154176][ T5832] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 113.332261][ T1014] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.476326][ T5909] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 113.488513][ T1014] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.632412][ T1014] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.646325][ T5909] usb 3-1: Using ep0 maxpacket: 8 [ 113.683190][ T5909] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.739350][ T5909] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.801415][ T5909] usb 3-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 113.836386][ T5909] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.873334][ T5909] usb 3-1: config 0 descriptor?? [ 113.889760][ T6505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.183'. [ 114.695184][ T1014] bridge_slave_1: left allmulticast mode [ 114.711482][ T1014] bridge_slave_1: left promiscuous mode [ 114.751468][ T1014] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.789471][ T1014] bridge_slave_0: left allmulticast mode [ 114.795220][ T1014] bridge_slave_0: left promiscuous mode [ 114.806421][ T1014] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.217065][ T51] Bluetooth: hci2: command tx timeout [ 116.409128][ T5909] usbhid 3-1:0.0: can't add hid device: -71 [ 116.426551][ T5909] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 116.458895][ T5909] usb 3-1: USB disconnect, device number 5 [ 116.526433][ T5875] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 116.643201][ T1014] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.680305][ T1014] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.729577][ T1014] bond0 (unregistering): Released all slaves [ 116.760208][ T5875] usb 2-1: config 0 has no interfaces? [ 116.765749][ T5875] usb 2-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 116.786298][ T5875] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.797299][ T5875] usb 2-1: config 0 descriptor?? [ 116.805006][ T6525] tipc: Started in network mode [ 116.816893][ T6525] tipc: Node identity d2f57f95be1a, cluster identity 4711 [ 116.850275][ T6525] tipc: Enabled bearer , priority 0 [ 116.970452][ T6528] syzkaller0: entered promiscuous mode [ 116.975983][ T6528] syzkaller0: entered allmulticast mode [ 116.985878][ T6528] tipc: Resetting bearer [ 116.993301][ T6495] chnl_net:caif_netlink_parms(): no params data found [ 117.012576][ T51] Bluetooth: hci0: Invalid handle: 0xff00 > 0x0eff [ 117.021716][ T6523] tipc: Resetting bearer [ 117.298167][ T5832] Bluetooth: hci2: command tx timeout [ 117.878561][ T980] tipc: Node number set to 1827635093 [ 117.977847][ T925] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 118.137562][ T925] usb 3-1: Using ep0 maxpacket: 8 [ 118.163364][ T925] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 118.172792][ T925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.181189][ T925] usb 3-1: Product: syz [ 118.193342][ T925] usb 3-1: Manufacturer: syz [ 118.206346][ T925] usb 3-1: SerialNumber: syz [ 118.224947][ T925] usb 3-1: config 0 descriptor?? [ 118.457495][ T925] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 118.482044][ T6523] tipc: Disabling bearer [ 118.687699][ T6495] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.695349][ T6495] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.702657][ T6495] bridge_slave_0: entered allmulticast mode [ 118.710212][ T6495] bridge_slave_0: entered promiscuous mode [ 118.733748][ T6495] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.742578][ T5875] TC_ACT_REPEAT abuse ? [ 118.753874][ T6495] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.767077][ T6495] bridge_slave_1: entered allmulticast mode [ 118.778477][ T6495] bridge_slave_1: entered promiscuous mode [ 118.791321][ T1014] hsr_slave_0: left promiscuous mode [ 118.802982][ T1014] hsr_slave_1: left promiscuous mode [ 118.812015][ T1014] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.829256][ T1014] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.841464][ T1014] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.852822][ T1014] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.886546][ T1014] veth1_macvtap: left promiscuous mode [ 118.892138][ T1014] veth0_macvtap: left promiscuous mode [ 118.898228][ T6573] loop7: detected capacity change from 0 to 16384 [ 118.907375][ T1014] veth1_vlan: left promiscuous mode [ 118.912744][ T1014] veth0_vlan: left promiscuous mode [ 119.083628][ T925] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 119.099373][ T925] usb 3-1: USB disconnect, device number 6 [ 119.166397][ T5973] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 119.284587][ T925] usb 2-1: USB disconnect, device number 7 [ 119.339005][ T5973] usb 1-1: Using ep0 maxpacket: 8 [ 119.359028][ T5973] usb 1-1: config 0 has no interfaces? [ 119.378126][ T980] TC_ACT_REPEAT abuse ? [ 119.379322][ T5973] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 119.386388][ T5832] Bluetooth: hci2: command tx timeout [ 119.401241][ T5973] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.433036][ T1014] team0 (unregistering): Port device team_slave_1 removed [ 119.433852][ T5973] usb 1-1: Product: syz [ 119.453518][ T5973] usb 1-1: Manufacturer: syz [ 119.468763][ T5973] usb 1-1: SerialNumber: syz [ 119.488749][ T5973] usb 1-1: config 0 descriptor?? [ 119.498031][ T1014] team0 (unregistering): Port device team_slave_0 removed [ 119.801933][ T5875] usb 1-1: USB disconnect, device number 4 [ 119.834878][ T6573] I/O error, dev loop7, sector 3328 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0 [ 119.865253][ T6573] I/O error, dev loop7, sector 3584 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0 [ 119.902912][ T6573] I/O error, dev loop7, sector 3328 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 119.962714][ T6573] Buffer I/O error on dev loop7, logical block 416, async page read [ 119.988845][ T6573] I/O error, dev loop7, sector 3336 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 120.022657][ T6573] Buffer I/O error on dev loop7, logical block 417, async page read [ 120.044343][ T6573] I/O error, dev loop7, sector 3344 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 120.077636][ T6573] Buffer I/O error on dev loop7, logical block 418, async page read [ 120.087426][ T6573] I/O error, dev loop7, sector 3352 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 120.109976][ T6573] Buffer I/O error on dev loop7, logical block 419, async page read [ 120.118659][ T6573] I/O error, dev loop7, sector 3360 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 120.142539][ T6573] Buffer I/O error on dev loop7, logical block 420, async page read [ 120.153399][ T6573] I/O error, dev loop7, sector 3368 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 120.169337][ T6573] Buffer I/O error on dev loop7, logical block 421, async page read [ 120.179255][ T6573] I/O error, dev loop7, sector 3376 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 120.197089][ T5950] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 120.208792][ T6573] Buffer I/O error on dev loop7, logical block 422, async page read [ 120.222165][ T6573] I/O error, dev loop7, sector 3384 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 120.231776][ T6573] Buffer I/O error on dev loop7, logical block 423, async page read [ 120.240308][ T6573] Buffer I/O error on dev loop7, logical block 424, async page read [ 120.254675][ T6573] Buffer I/O error on dev loop7, logical block 425, async page read [ 120.370629][ T5950] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 120.414999][ T5950] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 120.444645][ T5950] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.508811][ T5950] usb 2-1: config 0 descriptor?? [ 120.521162][ T5950] pwc: Askey VC010 type 2 USB webcam detected. [ 120.802005][ T6495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.841501][ T6495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.879843][ T6589] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 120.939060][ T6495] team0: Port device team_slave_0 added [ 120.945462][ T5950] pwc: recv_control_msg error -32 req 02 val 2b00 [ 120.953039][ T5950] pwc: recv_control_msg error -32 req 02 val 2700 [ 120.969820][ T5950] pwc: recv_control_msg error -32 req 02 val 2c00 [ 120.988759][ T6495] team0: Port device team_slave_1 added [ 120.997386][ T5950] pwc: recv_control_msg error -32 req 04 val 1000 [ 121.013339][ T5950] pwc: recv_control_msg error -32 req 04 val 1300 [ 121.027274][ T5950] pwc: recv_control_msg error -32 req 04 val 1400 [ 121.290809][ T5950] pwc: recv_control_msg error -71 req 02 val 2100 [ 121.432263][ T5950] pwc: recv_control_msg error -71 req 04 val 1500 [ 121.476802][ T5832] Bluetooth: hci2: command tx timeout [ 121.477420][ T5950] pwc: recv_control_msg error -71 req 02 val 2500 [ 121.521082][ T6495] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.550649][ T5950] pwc: recv_control_msg error -71 req 02 val 2400 [ 121.557598][ T6495] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.569013][ T5950] pwc: recv_control_msg error -71 req 02 val 2600 [ 121.601575][ T6495] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.690294][ T6495] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.704609][ T6495] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.731282][ T6495] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.746870][ T5950] pwc: recv_control_msg error -71 req 02 val 2900 [ 121.755530][ T5950] pwc: recv_control_msg error -71 req 02 val 2800 [ 121.776963][ T5950] pwc: recv_control_msg error -71 req 04 val 1100 [ 121.803460][ T5950] pwc: recv_control_msg error -71 req 04 val 1200 [ 121.842871][ T5950] pwc: Registered as video103. [ 121.872037][ T5950] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input12 [ 121.910369][ T5950] usb 2-1: USB disconnect, device number 8 [ 121.974382][ T6495] hsr_slave_0: entered promiscuous mode [ 121.987917][ T6495] hsr_slave_1: entered promiscuous mode [ 121.995696][ T6495] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 122.008535][ T6495] Cannot create hsr debugfs directory [ 122.126601][ T5875] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 122.298177][ T5875] usb 5-1: Using ep0 maxpacket: 8 [ 122.318682][ T5875] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 122.336971][ T6604] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 122.345867][ T5875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.366003][ T5875] usb 5-1: Product: syz [ 122.384216][ T5875] usb 5-1: Manufacturer: syz [ 122.401234][ T5875] usb 5-1: SerialNumber: syz [ 122.422079][ T5875] usb 5-1: config 0 descriptor?? [ 122.651827][ T5875] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 122.812878][ T6495] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 122.826463][ T5950] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 122.856297][ T6495] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 122.889380][ T6495] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 122.919810][ T6495] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 123.009148][ T5950] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 123.052473][ T5950] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 123.071357][ T5950] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 123.081539][ T5950] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.113495][ T6607] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 123.121580][ T6495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.143665][ T5950] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 123.201003][ T6495] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.240259][ T6492] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.247478][ T6492] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.301504][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.308664][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.372906][ T5950] usb 1-1: USB disconnect, device number 5 [ 123.502582][ T5875] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 123.528975][ T5875] usb 5-1: USB disconnect, device number 6 [ 123.544283][ T30] audit: type=1326 audit(1750975149.824:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6627 comm="syz.1.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa524f8e929 code=0x7fc00000 [ 123.585832][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.712429][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.771860][ T6495] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.827312][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.877598][ T6495] veth0_vlan: entered promiscuous mode [ 123.904522][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.933337][ T6495] veth1_vlan: entered promiscuous mode [ 123.998305][ T6495] veth0_macvtap: entered promiscuous mode [ 124.018031][ T6495] veth1_macvtap: entered promiscuous mode [ 124.062184][ T6495] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.124576][ T30] audit: type=1326 audit(1750975150.404:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6627 comm="syz.1.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa524f8e929 code=0x7fc00000 [ 124.176157][ T6495] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.191709][ T6495] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.207060][ T6495] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.226105][ T6495] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.250186][ T6495] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.274147][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 124.291528][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 124.305317][ T12] bridge_slave_1: left allmulticast mode [ 124.311460][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 124.319281][ T12] bridge_slave_1: left promiscuous mode [ 124.325155][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.346847][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 124.357269][ T12] bridge_slave_0: left allmulticast mode [ 124.362946][ T12] bridge_slave_0: left promiscuous mode [ 124.369680][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 124.377047][ T925] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 124.385884][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.526337][ T925] usb 5-1: Using ep0 maxpacket: 8 [ 124.549519][ T925] usb 5-1: config 0 has no interfaces? [ 124.570184][ T925] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 124.591120][ T925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.608640][ T925] usb 5-1: Product: syz [ 124.628529][ T925] usb 5-1: Manufacturer: syz [ 124.651726][ T925] usb 5-1: SerialNumber: syz [ 124.692752][ T925] usb 5-1: config 0 descriptor?? [ 125.101534][ T5950] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 125.150896][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.163258][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 125.176734][ T12] bond0 (unregistering): Released all slaves [ 125.193025][ T5875] usb 5-1: USB disconnect, device number 7 [ 125.284773][ T5950] usb 1-1: Using ep0 maxpacket: 32 [ 125.298255][ T5950] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 125.311262][ T5950] usb 1-1: config 0 has no interface number 0 [ 125.341146][ T5950] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 125.352192][ T5950] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.364236][ T5950] usb 1-1: Product: syz [ 125.370475][ T5950] usb 1-1: Manufacturer: syz [ 125.375324][ T5950] usb 1-1: SerialNumber: syz [ 125.387860][ T5950] usb 1-1: config 0 descriptor?? [ 125.395973][ T6654] netlink: 4 bytes leftover after parsing attributes in process `syz.1.230'. [ 125.401661][ T5950] smsc95xx v2.0.0 [ 125.508870][ T1014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.518895][ T1014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.570056][ T4248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.586389][ T4248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.623034][ T12] hsr_slave_0: left promiscuous mode [ 125.632888][ T12] hsr_slave_1: left promiscuous mode [ 125.639353][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.647938][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.656029][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.664947][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.730418][ T12] veth1_macvtap: left promiscuous mode [ 125.736964][ T12] veth0_macvtap: left promiscuous mode [ 125.742674][ T12] veth1_vlan: left promiscuous mode [ 125.751226][ T12] veth0_vlan: left promiscuous mode [ 125.838374][ T5950] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 125.856876][ T5950] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 126.143149][ T4248] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 126.496342][ T51] Bluetooth: hci3: command tx timeout [ 126.636810][ T12] team0 (unregistering): Port device team_slave_1 removed [ 126.688281][ T12] team0 (unregistering): Port device team_slave_0 removed [ 127.087766][ T5950] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 127.103637][ T5950] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 127.117547][ T5950] usb 1-1: USB disconnect, device number 6 [ 127.444228][ T6639] chnl_net:caif_netlink_parms(): no params data found [ 127.722060][ T6639] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.733545][ T6639] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.751778][ T6639] bridge_slave_0: entered allmulticast mode [ 127.768205][ T6639] bridge_slave_0: entered promiscuous mode [ 127.786154][ T6639] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.793668][ T6639] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.801438][ T6639] bridge_slave_1: entered allmulticast mode [ 127.814194][ T6639] bridge_slave_1: entered promiscuous mode [ 127.935257][ T6639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.981751][ T6639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 128.074105][ T6639] team0: Port device team_slave_0 added [ 128.085210][ T6639] team0: Port device team_slave_1 added [ 128.103627][ T6692] netlink: 4 bytes leftover after parsing attributes in process `syz.0.240'. [ 128.192404][ T6639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.204013][ T6639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.236934][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 128.244245][ T6639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.247185][ T5832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 128.260088][ T6639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.268003][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 128.276981][ T5832] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 128.277594][ T6639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.284680][ T5832] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 128.319217][ T6639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 128.363623][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.420493][ T6639] hsr_slave_0: entered promiscuous mode [ 128.427526][ T6639] hsr_slave_1: entered promiscuous mode [ 128.433641][ T6639] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 128.442268][ T6639] Cannot create hsr debugfs directory [ 128.485767][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.557600][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.586689][ T51] Bluetooth: hci3: command tx timeout [ 128.641062][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.971076][ T6639] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 128.986634][ T5919] TC_ACT_REPEAT abuse ? [ 129.029315][ T6639] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 129.055998][ T12] bridge_slave_1: left allmulticast mode [ 129.065935][ T12] bridge_slave_1: left promiscuous mode [ 129.071931][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.083175][ T12] bridge_slave_0: left allmulticast mode [ 129.089463][ T12] bridge_slave_0: left promiscuous mode [ 129.095407][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.235546][ T6704] netlink: 4 bytes leftover after parsing attributes in process `syz.4.243'. [ 129.503044][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 129.518849][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 129.533381][ T12] bond0 (unregistering): Released all slaves [ 129.551989][ T6639] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 129.569564][ T6693] chnl_net:caif_netlink_parms(): no params data found [ 129.630473][ T6704] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.638311][ T6704] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.647691][ T6704] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.669339][ T6704] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.744939][ T6639] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 130.418175][ T51] Bluetooth: hci2: command tx timeout [ 130.624981][ T12] hsr_slave_0: left promiscuous mode [ 130.681938][ T51] Bluetooth: hci3: command tx timeout [ 130.688764][ T12] hsr_slave_1: left promiscuous mode [ 130.695013][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.734088][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.773538][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.787991][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.802151][ T6734] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 130.816854][ T30] audit: type=1804 audit(1750975157.084:6): pid=6734 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.250" name="/newroot/62/file0" dev="tmpfs" ino=375 res=1 errno=0 [ 130.837466][ T6734] ref_ctr increment failed for inode: 0x177 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88802c346900 [ 131.180790][ T12] veth1_macvtap: left promiscuous mode [ 131.187022][ T12] veth0_macvtap: left promiscuous mode [ 131.192698][ T12] veth1_vlan: left promiscuous mode [ 131.200160][ T12] veth0_vlan: left promiscuous mode [ 131.894396][ T925] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 132.059731][ T12] team0 (unregistering): Port device team_slave_1 removed [ 132.069859][ T925] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.084974][ T925] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 132.095369][ T925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.113180][ T925] usb 1-1: config 0 descriptor?? [ 132.123422][ T925] pwc: Askey VC010 type 2 USB webcam detected. [ 132.123519][ T12] team0 (unregistering): Port device team_slave_0 removed [ 132.488167][ T6693] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.496523][ T51] Bluetooth: hci2: command tx timeout [ 132.502180][ T6693] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.510524][ T6693] bridge_slave_0: entered allmulticast mode [ 132.518750][ T6693] bridge_slave_0: entered promiscuous mode [ 132.529999][ T6693] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.537870][ T925] pwc: recv_control_msg error -32 req 02 val 2b00 [ 132.542726][ T6693] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.545119][ T925] pwc: recv_control_msg error -32 req 02 val 2700 [ 132.555092][ T6693] bridge_slave_1: entered allmulticast mode [ 132.559694][ T925] pwc: recv_control_msg error -32 req 02 val 2c00 [ 132.565707][ T6693] bridge_slave_1: entered promiscuous mode [ 132.585992][ T925] pwc: recv_control_msg error -32 req 04 val 1000 [ 132.594844][ T925] pwc: recv_control_msg error -32 req 04 val 1300 [ 132.603879][ T925] pwc: recv_control_msg error -32 req 04 val 1400 [ 132.643484][ T6693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.658131][ T6693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.713934][ T6693] team0: Port device team_slave_0 added [ 132.722591][ T6693] team0: Port device team_slave_1 added [ 132.736711][ T51] Bluetooth: hci3: command tx timeout [ 132.789842][ T6693] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.799345][ T6693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.830476][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.830600][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.844250][ T925] pwc: recv_control_msg error -71 req 02 val 2100 [ 132.850104][ T6693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.851311][ T925] pwc: recv_control_msg error -71 req 04 val 1500 [ 132.870453][ T6693] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.876773][ T925] pwc: recv_control_msg error -71 req 02 val 2500 [ 132.880863][ T6693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.884445][ T925] pwc: recv_control_msg error -71 req 02 val 2400 [ 132.919060][ T925] pwc: recv_control_msg error -71 req 02 val 2600 [ 132.919313][ T6693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.925927][ T925] pwc: recv_control_msg error -71 req 02 val 2900 [ 132.943087][ T925] pwc: recv_control_msg error -71 req 02 val 2800 [ 132.953466][ T925] pwc: recv_control_msg error -71 req 04 val 1100 [ 132.960560][ T925] pwc: recv_control_msg error -71 req 04 val 1200 [ 132.970341][ T925] pwc: Registered as video103. [ 132.977349][ T925] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input13 [ 133.006817][ T925] usb 1-1: USB disconnect, device number 7 [ 133.024055][ T6693] hsr_slave_0: entered promiscuous mode [ 133.031412][ T6693] hsr_slave_1: entered promiscuous mode [ 133.038577][ T6693] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 133.046168][ T6693] Cannot create hsr debugfs directory [ 133.185592][ T6639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.243300][ T6639] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.294508][ T4248] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.301747][ T4248] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.378323][ T51] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 133.388200][ T51] Bluetooth: hci4: Injecting HCI hardware error event [ 133.403919][ T5832] Bluetooth: hci4: hardware error 0x00 [ 133.672218][ T4248] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.679545][ T4248] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.424232][ T6639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.447187][ T6693] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 134.475877][ T6767] netlink: 4 bytes leftover after parsing attributes in process `syz.4.261'. [ 134.479467][ T6693] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 134.576660][ T51] Bluetooth: hci2: command tx timeout [ 134.869078][ T6693] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 134.898447][ T6693] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 135.087536][ T6693] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.131517][ T51] Bluetooth: hci0: Unknown advertising packet type: 0x19 [ 135.131546][ T51] Bluetooth: hci0: Unknown advertising packet type: 0x1f [ 135.142799][ T6693] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.172020][ T4248] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.179233][ T4248] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.202339][ T4248] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.209549][ T4248] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.316388][ T980] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 135.349567][ T6639] veth0_vlan: entered promiscuous mode [ 135.388385][ T6639] veth1_vlan: entered promiscuous mode [ 135.418889][ T6639] veth0_macvtap: entered promiscuous mode [ 135.432338][ T6639] veth1_macvtap: entered promiscuous mode [ 135.444669][ T30] audit: type=1326 audit(1750975161.724:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6795 comm="syz.0.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0d158e929 code=0x7fc00000 [ 135.459705][ T6639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.500121][ T6639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.500158][ T980] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.518449][ T6639] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.533835][ T6639] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.552328][ T980] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 135.559273][ T6639] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.576350][ T980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.591477][ T6639] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.597152][ T980] usb 5-1: config 0 descriptor?? [ 135.696601][ T5832] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 135.752834][ T6811] TC_ACT_REPEAT abuse ? [ 135.761826][ T6811] TC_ACT_REPEAT abuse ? [ 135.766547][ T6811] TC_ACT_REPEAT abuse ? [ 135.773348][ T6811] TC_ACT_REPEAT abuse ? [ 135.779456][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.781111][ T6811] TC_ACT_REPEAT abuse ? [ 135.793749][ T6811] TC_ACT_REPEAT abuse ? [ 135.798521][ C1] TC_ACT_REPEAT abuse ? [ 135.803189][ C1] TC_ACT_REPEAT abuse ? [ 135.816101][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.817520][ T6811] TC_ACT_REPEAT abuse ? [ 135.825517][ T980] usbhid 5-1:0.0: can't add hid device: -71 [ 135.831363][ T6811] TC_ACT_REPEAT abuse ? [ 135.834821][ T980] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 135.860118][ T980] usb 5-1: USB disconnect, device number 8 [ 135.925096][ T6492] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.948973][ T30] audit: type=1326 audit(1750975162.234:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6795 comm="syz.0.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd0d158e929 code=0x7fc00000 [ 135.976429][ T6492] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.984423][ T6693] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.112156][ T6818] netlink: 12 bytes leftover after parsing attributes in process `syz.1.275'. [ 136.182190][ T6693] veth0_vlan: entered promiscuous mode [ 136.231180][ T6693] veth1_vlan: entered promiscuous mode [ 136.336887][ T980] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 136.352526][ T6693] veth0_macvtap: entered promiscuous mode [ 136.428309][ T6693] veth1_macvtap: entered promiscuous mode [ 136.508676][ T980] usb 5-1: Using ep0 maxpacket: 16 [ 136.527515][ T6693] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 136.533336][ T980] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.564359][ T6693] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.575898][ T980] usb 5-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 136.594817][ T6693] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.613098][ T6693] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.619396][ T980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.623455][ T6693] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.641850][ T6693] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.653529][ T980] usb 5-1: config 0 descriptor?? [ 136.668455][ T5832] Bluetooth: hci2: command tx timeout [ 136.811261][ T6492] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.829580][ T6492] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.875141][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.884581][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.091630][ T980] kye 0003:0458:5016.0005: control desc unexpectedly large [ 137.142855][ T980] input: HID 0458:5016 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5016.0005/input/input14 [ 137.442523][ T980] input: HID 0458:5016 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5016.0005/input/input15 [ 137.551214][ T980] kye 0003:0458:5016.0005: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.4-1/input0 [ 137.747351][ T980] usb 5-1: USB disconnect, device number 9 [ 137.994785][ T4248] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.511568][ T4248] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.069433][ T4248] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.219790][ T4248] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.332918][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 139.347542][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 139.363091][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 139.421629][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 139.430337][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 139.532133][ T4248] bridge_slave_1: left allmulticast mode [ 139.547837][ T4248] bridge_slave_1: left promiscuous mode [ 139.562250][ T4248] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.609955][ T4248] bridge_slave_0: left allmulticast mode [ 139.624741][ T4248] bridge_slave_0: left promiscuous mode [ 139.647701][ T4248] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.816436][ T980] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 139.986402][ T980] usb 6-1: Using ep0 maxpacket: 16 [ 139.998011][ T980] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 140.038537][ T980] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 140.066259][ T980] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 140.130183][ T980] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 140.143603][ T980] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 140.178550][ T980] usb 6-1: SerialNumber: syz [ 140.196452][ T6880] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 140.434805][ T980] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 140.461810][ T980] usb 6-1: USB disconnect, device number 2 [ 140.504175][ T4248] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 140.515439][ T4248] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 140.532551][ T4248] bond0 (unregistering): Released all slaves [ 140.676612][ T5973] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 140.789871][ T6878] chnl_net:caif_netlink_parms(): no params data found [ 140.838199][ T4248] hsr_slave_0: left promiscuous mode [ 140.844169][ T4248] hsr_slave_1: left promiscuous mode [ 140.852745][ T4248] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.860740][ T4248] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.870767][ T5973] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.877310][ T4248] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.882471][ T5973] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 140.889560][ T4248] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.908490][ T5973] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.919168][ T5973] usb 1-1: config 0 descriptor?? [ 140.928964][ T4248] veth1_macvtap: left promiscuous mode [ 140.934673][ T4248] veth0_macvtap: left promiscuous mode [ 140.940930][ T4248] veth1_vlan: left promiscuous mode [ 140.947375][ T4248] veth0_vlan: left promiscuous mode [ 141.131903][ T5973] usbhid 1-1:0.0: can't add hid device: -71 [ 141.137110][ T10] net_ratelimit: 35 callbacks suppressed [ 141.137128][ T10] TC_ACT_REPEAT abuse ? [ 141.156372][ T5973] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 141.170906][ T5973] usb 1-1: USB disconnect, device number 8 [ 141.541102][ T51] Bluetooth: hci2: command tx timeout [ 141.746277][ T5973] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 141.797855][ T10] TC_ACT_REPEAT abuse ? [ 141.909957][ T5973] usb 1-1: Using ep0 maxpacket: 16 [ 141.923928][ T5973] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.935939][ T5973] usb 1-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 141.945675][ T5973] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.972747][ T5973] usb 1-1: config 0 descriptor?? [ 142.053171][ T4248] team0 (unregistering): Port device team_slave_1 removed [ 142.124648][ T4248] team0 (unregistering): Port device team_slave_0 removed [ 142.443599][ T5973] kye 0003:0458:5016.0006: control desc unexpectedly large [ 142.455963][ T5973] input: HID 0458:5016 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5016.0006/input/input16 [ 142.581381][ T5973] input: HID 0458:5016 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5016.0006/input/input17 [ 142.664249][ T5973] kye 0003:0458:5016.0006: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.0-1/input0 [ 142.953157][ T6929] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 143.117684][ T5973] usb 1-1: USB disconnect, device number 9 [ 143.357329][ T6919] tipc: Started in network mode [ 143.390086][ T6919] tipc: Node identity ae76f6a93542, cluster identity 4711 [ 143.408222][ T6919] tipc: Enabled bearer , priority 0 [ 143.450132][ T6925] syzkaller0: MTU too low for tipc bearer [ 143.479977][ T6925] tipc: Disabling bearer [ 143.616410][ T51] Bluetooth: hci2: command tx timeout [ 143.772931][ T6878] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.803748][ T6878] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.826458][ T6878] bridge_slave_0: entered allmulticast mode [ 143.848142][ T6878] bridge_slave_0: entered promiscuous mode [ 143.859334][ T6878] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.886418][ T6878] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.907340][ T6878] bridge_slave_1: entered allmulticast mode [ 143.914990][ T6878] bridge_slave_1: entered promiscuous mode [ 144.015876][ T6878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.029379][ T6878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.115040][ T6878] team0: Port device team_slave_0 added [ 144.125596][ T6878] team0: Port device team_slave_1 added [ 144.166432][ T5973] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 144.190783][ T6878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.197979][ T6878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.227383][ T6878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.272154][ T6878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.281361][ T6878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.307730][ T6878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.339562][ T5973] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 144.352262][ T5973] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.363288][ T5973] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.374313][ T5973] usb 1-1: config 0 interface 0 has no altsetting 0 [ 144.381008][ T5973] usb 1-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 144.392368][ T5973] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.417332][ T5973] usb 1-1: config 0 descriptor?? [ 144.844205][ T5973] kye 0003:0458:5015.0007: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 144.855895][ T5973] kye 0003:0458:5015.0007: unknown main item tag 0x0 [ 144.865646][ T5973] kye 0003:0458:5015.0007: unknown main item tag 0x0 [ 144.872581][ T5973] kye 0003:0458:5015.0007: unknown main item tag 0x0 [ 144.879378][ T5973] kye 0003:0458:5015.0007: unknown main item tag 0x0 [ 144.887912][ T5973] kye 0003:0458:5015.0007: unknown main item tag 0x0 [ 144.894650][ T5973] kye 0003:0458:5015.0007: unknown main item tag 0x0 [ 144.901656][ T5973] kye 0003:0458:5015.0007: unknown main item tag 0x0 [ 144.913609][ T5973] kye 0003:0458:5015.0007: hidraw0: USB HID v0.04 Device [HID 0458:5015] on usb-dummy_hcd.0-1/input0 [ 144.924605][ T5973] kye 0003:0458:5015.0007: tablet-enabling feature report not found [ 144.932939][ T5973] kye 0003:0458:5015.0007: tablet enabling failed [ 145.068468][ T5973] usb 1-1: USB disconnect, device number 10 [ 145.696524][ T51] Bluetooth: hci2: command tx timeout [ 145.721960][ T6878] hsr_slave_0: entered promiscuous mode [ 145.737717][ T6878] hsr_slave_1: entered promiscuous mode [ 145.743769][ T6878] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 145.753331][ T6878] Cannot create hsr debugfs directory [ 145.830044][ T6970] Bluetooth: MGMT ver 1.23 [ 146.126330][ T5973] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 146.289410][ T5973] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.308575][ T5973] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 146.329087][ T5973] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.349466][ T5973] usb 6-1: config 0 descriptor?? [ 146.568608][ T6878] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 146.586709][ T6878] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 146.599878][ T6878] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 146.639923][ T6878] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 146.664005][ T5973] usbhid 6-1:0.0: can't add hid device: -71 [ 146.686434][ T5973] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 146.709201][ T5973] usb 6-1: USB disconnect, device number 3 [ 147.100655][ T6878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.148068][ T6878] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.163553][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.170761][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.202584][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.209766][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.218767][ T5973] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 147.390028][ T5973] usb 6-1: Using ep0 maxpacket: 16 [ 147.405311][ T5973] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.426350][ T5973] usb 6-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 147.446860][ T5973] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.477797][ T5973] usb 6-1: config 0 descriptor?? [ 147.654414][ T6878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.769535][ T6878] veth0_vlan: entered promiscuous mode [ 147.776823][ T51] Bluetooth: hci2: command tx timeout [ 147.809020][ T6878] veth1_vlan: entered promiscuous mode [ 147.831122][ T6997] binder: 6996:6997 ioctl c0306201 200000000700 returned -22 [ 147.870731][ T6878] veth0_macvtap: entered promiscuous mode [ 147.909665][ T6878] veth1_macvtap: entered promiscuous mode [ 147.945278][ T5973] kye 0003:0458:5016.0008: control desc unexpectedly large [ 147.986152][ T5973] input: HID 0458:5016 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5016.0008/input/input18 [ 148.005347][ T6878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.038157][ T6878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.053075][ T6878] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.080039][ T7005] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input20 [ 148.094626][ T6878] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.118575][ T5973] input: HID 0458:5016 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5016.0008/input/input19 [ 148.140135][ T6878] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.153933][ T6878] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.025587][ T5973] kye 0003:0458:5016.0008: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.5-1/input0 [ 149.240636][ T5973] usb 6-1: USB disconnect, device number 4 [ 149.338527][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.377957][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.488468][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.522089][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.386577][ T10] TC_ACT_REPEAT abuse ? [ 151.448329][ T6878] syz-executor (6878) used greatest stack depth: 19712 bytes left [ 151.627276][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.948747][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.020594][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.062332][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.150068][ T13] bridge_slave_1: left allmulticast mode [ 152.156965][ T13] bridge_slave_1: left promiscuous mode [ 152.162681][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.173437][ T13] bridge_slave_0: left allmulticast mode [ 152.179353][ T13] bridge_slave_0: left promiscuous mode [ 152.185039][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.443145][ T7056] netlink: 8 bytes leftover after parsing attributes in process `syz.4.359'. [ 152.443185][ T7053] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 152.717621][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.741558][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.757916][ T13] bond0 (unregistering): Released all slaves [ 153.035853][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 153.048825][ T5832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 153.061413][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 153.069674][ T5832] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 153.078924][ T5832] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 153.569431][ T7089] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 153.569431][ T7089] program syz.5.357 not setting count and/or reply_len properly [ 154.078967][ T13] hsr_slave_0: left promiscuous mode [ 154.162321][ T13] hsr_slave_1: left promiscuous mode [ 154.238451][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.332851][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.503505][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.511613][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.614085][ T13] veth1_macvtap: left promiscuous mode [ 154.646434][ T13] veth0_macvtap: left promiscuous mode [ 154.652125][ T13] veth1_vlan: left promiscuous mode [ 154.691491][ T13] veth0_vlan: left promiscuous mode [ 155.137517][ T51] Bluetooth: hci2: command tx timeout [ 155.726656][ T13] team0 (unregistering): Port device team_slave_1 removed [ 155.770790][ T13] team0 (unregistering): Port device team_slave_0 removed [ 156.353085][ T7113] sit0: entered promiscuous mode [ 156.377610][ T7113] netlink: 'syz.4.365': attribute type 1 has an invalid length. [ 156.412928][ T7121] cgroup: fork rejected by pids controller in /syz0 [ 156.420510][ T7113] netlink: 1 bytes leftover after parsing attributes in process `syz.4.365'. [ 156.673181][ T7070] chnl_net:caif_netlink_parms(): no params data found [ 156.894431][ T7070] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.918486][ T7070] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.925862][ T7070] bridge_slave_0: entered allmulticast mode [ 156.953094][ T7070] bridge_slave_0: entered promiscuous mode [ 156.965578][ T7070] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.975156][ T7070] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.986307][ T7070] bridge_slave_1: entered allmulticast mode [ 156.994110][ T7070] bridge_slave_1: entered promiscuous mode [ 157.059687][ T7070] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.073905][ T7070] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.107923][ T7070] team0: Port device team_slave_0 added [ 157.115675][ T7070] team0: Port device team_slave_1 added [ 157.143652][ T7070] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.150718][ T7070] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.179555][ T6492] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 157.190696][ T7070] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.204646][ T7070] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.216457][ T51] Bluetooth: hci2: command tx timeout [ 157.223423][ T7070] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.300273][ T7070] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.431056][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.554841][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.580872][ T7070] hsr_slave_0: entered promiscuous mode [ 157.590380][ T7070] hsr_slave_1: entered promiscuous mode [ 157.596843][ T7070] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 157.605812][ T7070] Cannot create hsr debugfs directory [ 157.690308][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.855518][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.972838][ T7155] netlink: 12 bytes leftover after parsing attributes in process `syz.5.382'. [ 158.064803][ T7157] bond1: entered promiscuous mode [ 158.087041][ T7157] bond1: entered allmulticast mode [ 158.109568][ T7157] 8021q: adding VLAN 0 to HW filter on device bond1 [ 158.174784][ T5832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 158.185347][ T5832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 158.196417][ T5832] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 158.214715][ T5832] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 158.224614][ T5832] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 158.434665][ T7157] bond1 (unregistering): Released all slaves [ 158.871177][ T12] bridge_slave_1: left allmulticast mode [ 158.884045][ T12] bridge_slave_1: left promiscuous mode [ 158.890069][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.913470][ T12] bridge_slave_0: left allmulticast mode [ 158.926512][ T12] bridge_slave_0: left promiscuous mode [ 158.937368][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.263601][ T7192] 9pnet: p9_errstr2errno: server reported unknown error 184467440 [ 159.296539][ T51] Bluetooth: hci2: command tx timeout [ 159.399783][ T7196] af_packet: tpacket_rcv: packet too big, clamped from 56412 to 4294967272. macoff=96 [ 160.289754][ T51] Bluetooth: hci4: command tx timeout [ 160.948896][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.978135][ T980] TC_ACT_REPEAT abuse ? [ 161.001956][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.014254][ T12] bond0 (unregistering): Released all slaves [ 161.275011][ T12] tipc: Left network mode [ 161.376839][ T51] Bluetooth: hci2: command tx timeout [ 161.932595][ T12] hsr_slave_0: left promiscuous mode [ 161.964024][ T12] hsr_slave_1: left promiscuous mode [ 161.992954][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.056431][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.069979][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.099900][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.145048][ T12] veth1_macvtap: left promiscuous mode [ 162.189223][ T12] veth0_macvtap: left promiscuous mode [ 162.194985][ T12] veth1_vlan: left promiscuous mode [ 162.215958][ T12] veth0_vlan: left promiscuous mode [ 162.346252][ T51] Bluetooth: hci4: command tx timeout [ 163.509948][ T30] audit: type=1800 audit(1750975189.784:9): pid=7246 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.412" name="/" dev="9p" ino=2 res=0 errno=0 [ 163.687783][ T12] team0 (unregistering): Port device team_slave_1 removed [ 164.090836][ T12] team0 (unregistering): Port device team_slave_0 removed [ 164.191090][ T7255] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 164.426392][ T51] Bluetooth: hci4: command tx timeout [ 164.564925][ T7166] chnl_net:caif_netlink_parms(): no params data found [ 164.607983][ T7261] netlink: 8 bytes leftover after parsing attributes in process `syz.1.417'. [ 164.804954][ T7070] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 164.916149][ T7166] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.925739][ T7166] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.961672][ T7166] bridge_slave_0: entered allmulticast mode [ 164.980817][ T7166] bridge_slave_0: entered promiscuous mode [ 164.992891][ T7070] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 165.022609][ T7070] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 165.064383][ T7070] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 165.102806][ T7166] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.111771][ T7166] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.121185][ T7166] bridge_slave_1: entered allmulticast mode [ 165.135750][ T7166] bridge_slave_1: entered promiscuous mode [ 165.240926][ T7278] TC_ACT_REPEAT abuse ? [ 165.245555][ T7278] TC_ACT_REPEAT abuse ? [ 165.250176][ T7278] TC_ACT_REPEAT abuse ? [ 165.265555][ T7278] TC_ACT_REPEAT abuse ? [ 165.270214][ T7278] TC_ACT_REPEAT abuse ? [ 165.270790][ T7166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.274728][ T7278] TC_ACT_REPEAT abuse ? [ 165.288269][ T7278] TC_ACT_REPEAT abuse ? [ 165.292847][ T7278] TC_ACT_REPEAT abuse ? [ 165.299645][ T7278] TC_ACT_REPEAT abuse ? [ 165.310011][ T7166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.408647][ T7166] team0: Port device team_slave_0 added [ 165.423210][ T7166] team0: Port device team_slave_1 added [ 165.457994][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805c8de000: rx timeout, send abort [ 165.468072][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805c8de000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 165.946047][ T7166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.953300][ T7166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.981580][ T7166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.994747][ T7166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.000978][ T7287] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 166.001796][ T7166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.019162][ T980] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 166.047832][ T7287] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 166.058046][ T7166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.180134][ T7166] hsr_slave_0: entered promiscuous mode [ 166.196417][ T980] usb 2-1: Using ep0 maxpacket: 16 [ 166.204641][ T7166] hsr_slave_1: entered promiscuous mode [ 166.215747][ T980] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 166.230191][ T7166] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 166.247086][ T980] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 166.257150][ T7166] Cannot create hsr debugfs directory [ 166.266439][ T980] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 166.299442][ T980] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 166.320406][ T980] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 166.336760][ T980] usb 2-1: SerialNumber: syz [ 166.347852][ T7282] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 166.374445][ T7070] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.496519][ T51] Bluetooth: hci4: command tx timeout [ 166.543845][ T7070] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.566448][ T980] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 166.591840][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.597166][ T980] usb 2-1: USB disconnect, device number 9 [ 166.599138][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.623090][ T4248] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.630315][ T4248] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.676602][ T10] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 166.970196][ T10] usb 6-1: config 1 has an invalid descriptor of length 150, skipping remainder of the config [ 166.980684][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 167.023528][ T10] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 60156, setting to 64 [ 167.065919][ T10] usb 6-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 167.106562][ T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 167.117019][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.138667][ T10] usb 6-1: Product: syz [ 167.142881][ T10] usb 6-1: Manufacturer: syz [ 167.149343][ T7166] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 167.156472][ T10] usb 6-1: SerialNumber: syz [ 167.170915][ T7166] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 167.215751][ T7166] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 167.243808][ T7166] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 167.692583][ T7070] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.790953][ T7166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.881480][ T7166] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.892567][ T7070] veth0_vlan: entered promiscuous mode [ 167.909863][ T1014] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.917055][ T1014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.955065][ T7070] veth1_vlan: entered promiscuous mode [ 167.975833][ T1014] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.983066][ T1014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.047503][ T7322] lo: entered allmulticast mode [ 168.134247][ T7321] lo: left allmulticast mode [ 168.202950][ T7070] veth0_macvtap: entered promiscuous mode [ 168.256575][ T7070] veth1_macvtap: entered promiscuous mode [ 168.346060][ T7070] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.418774][ T7070] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.440225][ T7325] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.465881][ T7070] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.492728][ T7070] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.521050][ T7070] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.544700][ T7070] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.596895][ T10] cdc_ncm 6-1:1.0: bind() failure [ 168.607220][ T10] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 168.614057][ T10] cdc_ncm 6-1:1.1: bind() failure [ 168.649163][ T10] usb 6-1: USB disconnect, device number 5 [ 168.862691][ T4248] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.885791][ T4248] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.919836][ T7166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.936489][ T4248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.944372][ T4248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.037244][ T7166] veth0_vlan: entered promiscuous mode [ 169.097668][ T7166] veth1_vlan: entered promiscuous mode [ 169.174456][ T7166] veth0_macvtap: entered promiscuous mode [ 169.195482][ T7166] veth1_macvtap: entered promiscuous mode [ 169.291443][ T7166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.303673][ T7166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.322104][ T7166] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.331349][ T7166] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.342200][ T7166] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.351795][ T7166] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.475498][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.500262][ T1014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.517538][ T1014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.558599][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.609631][ T1014] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.630600][ T1014] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.669353][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.750568][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.953762][ T12] bridge_slave_1: left allmulticast mode [ 169.959555][ T12] bridge_slave_1: left promiscuous mode [ 169.965387][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.975694][ T12] bridge_slave_0: left allmulticast mode [ 169.982059][ T12] bridge_slave_0: left promiscuous mode [ 169.988216][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.242559][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 170.253784][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.265409][ T12] bond0 (unregistering): Released all slaves [ 170.585609][ T5919] net_ratelimit: 25 callbacks suppressed [ 170.585627][ T5919] TC_ACT_REPEAT abuse ? [ 170.642132][ T12] hsr_slave_0: left promiscuous mode [ 170.648803][ T12] hsr_slave_1: left promiscuous mode [ 170.654997][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.665852][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.684067][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.701897][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 170.706341][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.717818][ T5832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 170.725904][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 170.756789][ T5832] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 170.764565][ T5832] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 170.799804][ T12] veth1_macvtap: left promiscuous mode [ 170.805527][ T12] veth0_macvtap: left promiscuous mode [ 170.829896][ T12] veth1_vlan: left promiscuous mode [ 170.835257][ T12] veth0_vlan: left promiscuous mode [ 171.285465][ T30] audit: type=1804 audit(1750975197.564:10): pid=7359 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.443" name="bus" dev="ramfs" ino=19821 res=1 errno=0 [ 171.308767][ T7359] Invalid ELF header magic: != ELF [ 171.785481][ T12] team0 (unregistering): Port device team_slave_1 removed [ 171.855741][ T12] team0 (unregistering): Port device team_slave_0 removed [ 172.096749][ T5821] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 172.266310][ T5821] usb 5-1: Using ep0 maxpacket: 32 [ 172.277438][ T5821] usb 5-1: config 0 has an invalid interface number: 231 but max is 0 [ 172.291894][ T5821] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.302470][ T5821] usb 5-1: config 0 has no interface number 0 [ 172.308674][ T5821] usb 5-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 172.319371][ T5821] usb 5-1: config 0 interface 231 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 172.375651][ T5821] usb 5-1: New USB device found, idVendor=d024, idProduct=5e5a, bcdDevice=16.a9 [ 172.410251][ T5821] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.566394][ T5821] usb 5-1: Product: syz [ 172.602575][ T5821] usb 5-1: Manufacturer: syz [ 172.607346][ T5821] usb 5-1: SerialNumber: syz [ 172.627178][ T5821] usb 5-1: config 0 descriptor?? [ 172.657196][ T7374] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 172.683496][ T5821] usb-storage 5-1:0.231: USB Mass Storage device detected [ 172.780469][ T7387] netlink: 8 bytes leftover after parsing attributes in process `syz.0.450'. [ 172.823867][ T5832] Bluetooth: hci2: command tx timeout [ 172.847899][ T7340] chnl_net:caif_netlink_parms(): no params data found [ 172.956537][ T5875] usb 5-1: USB disconnect, device number 10 [ 173.005549][ T7340] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.014321][ T7340] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.021730][ T7340] bridge_slave_0: entered allmulticast mode [ 173.029484][ T7340] bridge_slave_0: entered promiscuous mode [ 173.038863][ T7340] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.048133][ T7340] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.055339][ T7340] bridge_slave_1: entered allmulticast mode [ 173.062784][ T7340] bridge_slave_1: entered promiscuous mode [ 173.115369][ T7340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.130019][ T7340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.174296][ T7340] team0: Port device team_slave_0 added [ 173.184455][ T7340] team0: Port device team_slave_1 added [ 173.224692][ T7340] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.231778][ T7340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.259791][ T7340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.273884][ T7340] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.280925][ T7340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.307369][ T7340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.390017][ T7340] hsr_slave_0: entered promiscuous mode [ 173.397088][ T7340] hsr_slave_1: entered promiscuous mode [ 173.403283][ T7340] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 173.412136][ T7340] Cannot create hsr debugfs directory [ 173.845996][ T7340] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 173.855405][ T7340] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 173.866013][ T7340] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 173.876473][ T7340] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 173.960274][ T7340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.981849][ T7340] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.995386][ T4248] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.002546][ T4248] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.021007][ T3560] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.028164][ T3560] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.217751][ T7340] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.259573][ T7340] veth0_vlan: entered promiscuous mode [ 174.273297][ T7340] veth1_vlan: entered promiscuous mode [ 174.314538][ T7340] veth0_macvtap: entered promiscuous mode [ 174.324080][ T7340] veth1_macvtap: entered promiscuous mode [ 174.346003][ T7340] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.362483][ T7340] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.375589][ T7340] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.384586][ T7340] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.393413][ T7340] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.402174][ T7340] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.497971][ T4248] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.513880][ T4248] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.546568][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.564627][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.225804][ T3560] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.216073][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 177.224353][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 177.232354][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 177.242695][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 177.250455][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 177.393460][ T7416] chnl_net:caif_netlink_parms(): no params data found [ 177.464253][ T7416] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.471687][ T7416] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.480123][ T7416] bridge_slave_0: entered allmulticast mode [ 177.487784][ T7416] bridge_slave_0: entered promiscuous mode [ 177.495493][ T7416] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.503841][ T7416] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.511069][ T7416] bridge_slave_1: entered allmulticast mode [ 177.518016][ T7416] bridge_slave_1: entered promiscuous mode [ 177.554884][ T7416] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.566665][ T7416] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.602284][ T7416] team0: Port device team_slave_0 added [ 177.612182][ T7416] team0: Port device team_slave_1 added [ 177.641393][ T7416] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.648482][ T7416] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.675570][ T7416] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.689279][ T7416] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.696537][ T7416] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.724190][ T7416] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.770574][ T7416] hsr_slave_0: entered promiscuous mode [ 177.780125][ T7416] hsr_slave_1: entered promiscuous mode [ 177.786138][ T7416] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 177.794352][ T7416] Cannot create hsr debugfs directory [ 177.820961][ T3560] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.883692][ T3560] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.959124][ T3560] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.053663][ T3560] bridge_slave_1: left allmulticast mode [ 178.060675][ T3560] bridge_slave_1: left promiscuous mode [ 178.066575][ T3560] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.077029][ T3560] bridge_slave_0: left allmulticast mode [ 178.082679][ T3560] bridge_slave_0: left promiscuous mode [ 178.088435][ T3560] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.371132][ T3560] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.382230][ T3560] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.392165][ T3560] bond0 (unregistering): Released all slaves [ 178.646426][ T3560] hsr_slave_0: left promiscuous mode [ 178.652369][ T3560] hsr_slave_1: left promiscuous mode [ 178.658438][ T3560] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.665837][ T3560] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.676058][ T3560] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.683720][ T3560] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.703466][ T3560] veth1_macvtap: left promiscuous mode [ 178.709412][ T3560] veth0_macvtap: left promiscuous mode [ 178.714995][ T3560] veth1_vlan: left promiscuous mode [ 178.721312][ T3560] veth0_vlan: left promiscuous mode [ 179.100545][ T3560] team0 (unregistering): Port device team_slave_1 removed [ 179.138030][ T3560] team0 (unregistering): Port device team_slave_0 removed [ 179.306488][ T5832] Bluetooth: hci2: command tx timeout [ 179.544866][ T7416] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 179.554549][ T7416] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 179.573168][ T7416] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 179.590796][ T7416] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 179.705507][ T7416] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.729668][ T7416] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.742599][ T4248] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.749782][ T4248] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.766969][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.774122][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.944619][ T7416] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.989870][ T7416] veth0_vlan: entered promiscuous mode [ 180.003423][ T7416] veth1_vlan: entered promiscuous mode [ 180.030966][ T7416] veth0_macvtap: entered promiscuous mode [ 180.040907][ T7416] veth1_macvtap: entered promiscuous mode [ 180.055788][ T7416] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.070504][ T7416] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.087584][ T7416] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.096545][ T7416] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.105238][ T7416] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.115244][ T7416] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.175699][ T3560] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.185859][ T5919] TC_ACT_REPEAT abuse ? [ 180.193058][ T3560] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.218564][ T4248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.226737][ T4248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.886099][ T3560] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.032422][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 183.041739][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 183.050447][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 183.062932][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 183.072360][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 183.219922][ T7435] chnl_net:caif_netlink_parms(): no params data found [ 183.287291][ T7435] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.294417][ T7435] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.302035][ T7435] bridge_slave_0: entered allmulticast mode [ 183.309217][ T7435] bridge_slave_0: entered promiscuous mode [ 183.317945][ T7435] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.325104][ T7435] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.332542][ T7435] bridge_slave_1: entered allmulticast mode [ 183.340713][ T7435] bridge_slave_1: entered promiscuous mode [ 183.370200][ T7435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.383227][ T7435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.435128][ T3560] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.455799][ T7435] team0: Port device team_slave_0 added [ 183.463882][ T7435] team0: Port device team_slave_1 added [ 183.505971][ T3560] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.523204][ T7435] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.530776][ T7435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.557004][ T7435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.581575][ T3560] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.597009][ T7435] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.603986][ T7435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.630350][ T7435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.679407][ T7435] hsr_slave_0: entered promiscuous mode [ 183.685887][ T7435] hsr_slave_1: entered promiscuous mode [ 183.694296][ T7435] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 183.702001][ T7435] Cannot create hsr debugfs directory [ 183.828186][ T3560] bridge_slave_1: left allmulticast mode [ 183.833881][ T3560] bridge_slave_1: left promiscuous mode [ 183.839845][ T3560] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.849676][ T3560] bridge_slave_0: left allmulticast mode [ 183.855321][ T3560] bridge_slave_0: left promiscuous mode [ 183.861646][ T3560] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.160526][ T3560] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.171109][ T3560] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 184.181071][ T3560] bond0 (unregistering): Released all slaves [ 184.392308][ T3560] hsr_slave_0: left promiscuous mode [ 184.400975][ T3560] hsr_slave_1: left promiscuous mode [ 184.407246][ T3560] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.415810][ T3560] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.424896][ T3560] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.433048][ T3560] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.449964][ T3560] veth1_macvtap: left promiscuous mode [ 184.455531][ T3560] veth0_macvtap: left promiscuous mode [ 184.461357][ T3560] veth1_vlan: left promiscuous mode [ 184.466768][ T3560] veth0_vlan: left promiscuous mode [ 184.849408][ T3560] team0 (unregistering): Port device team_slave_1 removed [ 184.887611][ T3560] team0 (unregistering): Port device team_slave_0 removed [ 185.138457][ T5832] Bluetooth: hci2: command tx timeout [ 185.383125][ T7435] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 185.398742][ T7435] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 185.410778][ T7435] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 185.420372][ T7435] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 185.504155][ T7435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.529791][ T7435] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.549506][ T4248] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.556700][ T4248] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.565366][ T4248] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.572496][ T4248] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.743996][ T7435] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.790220][ T7435] veth0_vlan: entered promiscuous mode [ 185.800357][ T7435] veth1_vlan: entered promiscuous mode [ 185.830539][ T7435] veth0_macvtap: entered promiscuous mode [ 185.839908][ T7435] veth1_macvtap: entered promiscuous mode [ 185.859396][ T7435] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.875626][ T7435] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.889706][ T7435] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.899283][ T7435] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.908132][ T7435] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.916917][ T7435] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.981864][ T3560] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.992536][ T3560] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.018505][ T3560] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.027398][ T3560] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.845393][ T4248] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.198268][ T6492] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 188.208542][ T6492] ------------[ cut here ]------------ [ 188.213986][ T6492] UBSAN: array-index-out-of-bounds in net/mac80211/scan.c:1223:5 [ 188.221717][ T6492] index 11 is out of range for type 'struct ieee80211_channel *[] __counted_by(n_channels)' (aka 'struct ieee80211_channel *[]') [ 188.235068][ T6492] CPU: 1 UID: 0 PID: 6492 Comm: kworker/u8:9 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) [ 188.235090][ T6492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 188.235105][ T6492] Workqueue: events_unbound cfg80211_wiphy_work [ 188.235142][ T6492] Call Trace: [ 188.235152][ T6492] [ 188.235159][ T6492] dump_stack_lvl+0x189/0x250 [ 188.235183][ T6492] ? __pfx_dump_stack_lvl+0x10/0x10 [ 188.235201][ T6492] ? __pfx__printk+0x10/0x10 [ 188.235224][ T6492] ubsan_epilogue+0xa/0x40 [ 188.235238][ T6492] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 188.235263][ T6492] ieee80211_request_ibss_scan+0x600/0x8b0 [ 188.235293][ T6492] ieee80211_ibss_work+0xd85/0x1060 [ 188.235311][ T6492] ? lockdep_hardirqs_on+0x9c/0x150 [ 188.235330][ T6492] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 188.235346][ T6492] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 188.235362][ T6492] ? kcov_remote_stop+0x17e/0x6d0 [ 188.235378][ T6492] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 188.235399][ T6492] ? skb_dequeue+0x10e/0x150 [ 188.235416][ T6492] ? ieee80211_iface_work+0xcd4/0xfe0 [ 188.235435][ T6492] ? ieee80211_iface_work+0xf39/0xfe0 [ 188.235462][ T6492] cfg80211_wiphy_work+0x2df/0x460 [ 188.235476][ T6492] ? process_scheduled_works+0x9ef/0x17b0 [ 188.235496][ T6492] process_scheduled_works+0xade/0x17b0 [ 188.235538][ T6492] ? __pfx_process_scheduled_works+0x10/0x10 [ 188.235570][ T6492] worker_thread+0x8a0/0xda0 [ 188.235591][ T6492] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 188.235615][ T6492] ? __kthread_parkme+0x7b/0x200 [ 188.235642][ T6492] kthread+0x70e/0x8a0 [ 188.235660][ T6492] ? __pfx_worker_thread+0x10/0x10 [ 188.235677][ T6492] ? __pfx_kthread+0x10/0x10 [ 188.235694][ T6492] ? _raw_spin_unlock_irq+0x23/0x50 [ 188.235710][ T6492] ? lockdep_hardirqs_on+0x9c/0x150 [ 188.235728][ T6492] ? __pfx_kthread+0x10/0x10 [ 188.235744][ T6492] ret_from_fork+0x3fc/0x770 [ 188.235765][ T6492] ? __pfx_ret_from_fork+0x10/0x10 [ 188.235788][ T6492] ? __switch_to_asm+0x39/0x70 [ 188.235800][ T6492] ? __switch_to_asm+0x33/0x70 [ 188.235811][ T6492] ? __pfx_kthread+0x10/0x10 [ 188.235825][ T6492] ret_from_fork_asm+0x1a/0x30 [ 188.235852][ T6492] [ 188.235857][ T6492] ---[ end trace ]--- [ 188.455841][ T6492] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 188.463039][ T6492] CPU: 1 UID: 0 PID: 6492 Comm: kworker/u8:9 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) [ 188.475191][ T6492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 188.485243][ T6492] Workqueue: events_unbound cfg80211_wiphy_work [ 188.491486][ T6492] Call Trace: [ 188.494751][ T6492] [ 188.497677][ T6492] dump_stack_lvl+0x99/0x250 [ 188.502263][ T6492] ? __asan_memcpy+0x40/0x70 [ 188.506861][ T6492] ? __pfx_dump_stack_lvl+0x10/0x10 [ 188.512076][ T6492] ? __pfx__printk+0x10/0x10 [ 188.516678][ T6492] panic+0x2db/0x790 [ 188.520589][ T6492] ? __pfx_panic+0x10/0x10 [ 188.524993][ T6492] ? _printk+0xcf/0x120 [ 188.529155][ T6492] ? __pfx__printk+0x10/0x10 [ 188.533746][ T6492] check_panic_on_warn+0x89/0xb0 [ 188.538695][ T6492] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 188.544421][ T6492] ieee80211_request_ibss_scan+0x600/0x8b0 [ 188.550286][ T6492] ieee80211_ibss_work+0xd85/0x1060 [ 188.555484][ T6492] ? lockdep_hardirqs_on+0x9c/0x150 [ 188.560684][ T6492] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 188.566576][ T6492] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 188.572896][ T6492] ? kcov_remote_stop+0x17e/0x6d0 [ 188.578350][ T6492] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 188.583989][ T6492] ? skb_dequeue+0x10e/0x150 [ 188.588577][ T6492] ? ieee80211_iface_work+0xcd4/0xfe0 [ 188.593947][ T6492] ? ieee80211_iface_work+0xf39/0xfe0 [ 188.599327][ T6492] cfg80211_wiphy_work+0x2df/0x460 [ 188.604438][ T6492] ? process_scheduled_works+0x9ef/0x17b0 [ 188.610337][ T6492] process_scheduled_works+0xade/0x17b0 [ 188.615907][ T6492] ? __pfx_process_scheduled_works+0x10/0x10 [ 188.621902][ T6492] worker_thread+0x8a0/0xda0 [ 188.626494][ T6492] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 188.632830][ T6492] ? __kthread_parkme+0x7b/0x200 [ 188.637781][ T6492] kthread+0x70e/0x8a0 [ 188.641875][ T6492] ? __pfx_worker_thread+0x10/0x10 [ 188.646983][ T6492] ? __pfx_kthread+0x10/0x10 [ 188.651579][ T6492] ? _raw_spin_unlock_irq+0x23/0x50 [ 188.656773][ T6492] ? lockdep_hardirqs_on+0x9c/0x150 [ 188.661966][ T6492] ? __pfx_kthread+0x10/0x10 [ 188.666557][ T6492] ret_from_fork+0x3fc/0x770 [ 188.671147][ T6492] ? __pfx_ret_from_fork+0x10/0x10 [ 188.676258][ T6492] ? __switch_to_asm+0x39/0x70 [ 188.681014][ T6492] ? __switch_to_asm+0x33/0x70 [ 188.685767][ T6492] ? __pfx_kthread+0x10/0x10 [ 188.690442][ T6492] ret_from_fork_asm+0x1a/0x30 [ 188.695242][ T6492] [ 188.698405][ T6492] Kernel Offset: disabled [ 188.702785][ T6492] Rebooting in 86400 seconds..