last executing test programs: 1m52.767438354s ago: executing program 4 (id=333): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x44) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000040)='4', 0x1}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0xfffffffc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r4, &(0x7f00000000c0)="1c", 0x10002, 0x0, 0x0, 0x0) 1m52.3111996s ago: executing program 4 (id=335): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@redirect_dir_off}, {@metacopy_on}]}) 1m51.95592294s ago: executing program 4 (id=337): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x6, 0x19, &(0x7f0000000ec0), 0x4) sendmsg$inet(r0, &(0x7f00000029c0)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x30000001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r3}, &(0x7f0000000540), &(0x7f0000000580)=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r3, &(0x7f0000000780)}, 0x20) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000040)={0x1, {0x8, 0x6, 0xf, 0x689, 0x9}}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c4300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00"/13], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r5, &(0x7f0000000380)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c010000", @ANYRES16, @ANYBLOB="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"], 0x14c}, 0x1, 0x0, 0x0, 0x20004014}, 0x85) getgroups(0x27, &(0x7f0000002540)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6, 0x0, 0x1000000000000}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="44000000020605000000000000000000000000000c000300686173683a69700005000400000000000900020073797a310000000005000500020000000500010006"], 0x44}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) 1m51.463393866s ago: executing program 4 (id=341): openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'dvmrp1\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80400, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f00000002c0)={'bond0\x00', 0x4000}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) 1m49.618098035s ago: executing program 4 (id=349): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, 0x0) 1m49.299075188s ago: executing program 4 (id=353): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x0, 0x44}, 0x28) r0 = fsopen(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002900)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000080)=0x48) r5 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000300)={'pcl816\x00', [0x2f00, 0x5, 0xb, 0xffffffff, 0x2, 0x9, 0x20000004, 0x6, 0xffe, 0x9, 0xc, 0x1, 0x7fff, 0x4, 0xfffe, 0x8, 0x5, 0x6, 0x82e, 0x30000, 0x10000, 0x9, 0x800, 0x100101, 0x2, 0xffffbfff, 0x40, 0x3, 0x4, 0x4, 0x5]}) mkdir(&(0x7f0000000400)='./file0\x00', 0x103) quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000901, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') syz_open_dev$vcsu(0x0, 0x4, 0x1) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) 1m33.617694405s ago: executing program 32 (id=353): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x0, 0x44}, 0x28) r0 = fsopen(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002900)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000080)=0x48) r5 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000300)={'pcl816\x00', [0x2f00, 0x5, 0xb, 0xffffffff, 0x2, 0x9, 0x20000004, 0x6, 0xffe, 0x9, 0xc, 0x1, 0x7fff, 0x4, 0xfffe, 0x8, 0x5, 0x6, 0x82e, 0x30000, 0x10000, 0x9, 0x800, 0x100101, 0x2, 0xffffbfff, 0x40, 0x3, 0x4, 0x4, 0x5]}) mkdir(&(0x7f0000000400)='./file0\x00', 0x103) quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000901, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') syz_open_dev$vcsu(0x0, 0x4, 0x1) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) 1m12.12182929s ago: executing program 2 (id=448): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000380)={{0x3, 0x81}, 'port0\x00', 0x41, 0x20010, 0x2, 0x1ff, 0x8000, 0xfffffffe, 0x8, 0x0, 0x4, 0xf5}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) landlock_create_ruleset(&(0x7f0000000000)={0x19a1, 0x2, 0x1}, 0x21, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x3, 0xbfdffff8}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x40}) io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x0) 1m5.350095557s ago: executing program 2 (id=464): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2}, &(0x7f0000000540), &(0x7f0000000580)=r3}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r2, &(0x7f0000000780)}, 0x20) 1m5.122501902s ago: executing program 2 (id=465): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a32000000001400000011"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) close_range(r0, 0xffffffffffffffff, 0x0) 1m4.762275375s ago: executing program 2 (id=467): syz_init_net_socket$rose(0xb, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r1, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)}, 0xffffffff}], 0x1, 0x10000, 0x0) 1m3.450154004s ago: executing program 2 (id=470): bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x5, 0x4, 0x9, 0x8}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r0}, 0x10) 1m3.246009772s ago: executing program 2 (id=472): setreuid(0xee01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) munlockall() r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRESDEC=r5, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000002c0)=0x1) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0x2) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)) 48.071278708s ago: executing program 33 (id=472): setreuid(0xee01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) munlockall() r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRESDEC=r5, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000002c0)=0x1) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0x2) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)) 10.151826738s ago: executing program 1 (id=719): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r0, 0x8) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 9.883635086s ago: executing program 1 (id=721): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@data_frame={@msdu=@type10={{0x0, 0x2, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x4}, @from_mac=@broadcast, @broadcast, @device_a, {0xf, 0x4}, "", @value={0x0, 0x1, 0x3, 0x0, 0x7f}, @value=@ver_80211n={0x0, 0x1, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}}, @random="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"}, 0x7a9) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000cc0), &(0x7f0000000d00)=@data_frame={@msdu=@type10={{0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x8}, @random="7a3c82680dfb", @device_b, @device_b, {0x9, 0x8}, "", @void, @value=@ver_80211n={0x0, 0xc, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}}}, 0x1c) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x4008084) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000001400)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000013c0)={0x0}}, 0x811) ioctl$SIOCAX25NOUID(0xffffffffffffffff, 0x89e3, &(0x7f0000001440)) r2 = socket$inet(0x2, 0x4, 0x3a275baf) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, 0x0) pipe(0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002000)=@o_path={0x0}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000020c0)=@bpf_lsm={0x1d, 0x18, &(0x7f0000001ac0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9}, [@alu={0x7, 0x1, 0x3, 0xc, 0x3, 0xa, 0xffffffffffffffff}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x18405f880550f3db}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000001bc0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001c80)={0x0, 0x3, 0xf, 0x6}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000002040)=[r3], &(0x7f0000002080)=[{0x1, 0x1, 0x1, 0x4}, {0x0, 0x2, 0xa, 0x6}, {0x0, 0x1, 0xb, 0x1}], 0x10, 0x7}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000002180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000022c0)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002280)={&(0x7f0000002200)={0x38, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0x6}}}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x66}]}, 0x38}, 0x1, 0x0, 0x0, 0x40080c0}, 0x10) writev(r0, &(0x7f0000002500)=[{0x0}, {&(0x7f0000002440)="5d2d06bcdeefd6302fd89b889944c73e67165c49e1ceab59d8abeb", 0x1b}, {&(0x7f0000002480)="546fa77cd68ee3cbb97ebfc45d5de76c0c32c3e642c1e99d941c8ba4e10b4a05193fc61f0a92ea333cfd8e8c5766e8707c44fd10f6a2f77f1b3e7d386cac1ce5ffeb2c3cf4c7294468e46e3493ce64f8b1098b47363363b15424493ab1", 0x5d}], 0x3) 9.216049778s ago: executing program 1 (id=724): syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040f0409010104c8eea31e1af65b3d308b088e858ed276c50d78f4164a7063bd1aa504efa3d56f6647797bb182e891afe21df84dff1d7f406ab97d1182edf704527c023e48988758de3017fde42f12c1ee72fdcd65dc6ca1d0f92908aaafd8de9eab13d9e107000000795f83ca9772a6ea93bcb7ab7fd78687fe8af651fbd2a13d8604b745b2a5e6344ba20da7df3aadba73"], 0x7) openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) r0 = openat$binfmt_format(0xffffffffffffff9c, 0x0, 0x2, 0x0) writev(r0, &(0x7f0000000800)=[{&(0x7f0000000740)="66b783f0", 0x4}], 0x1) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) socket$inet(0x2, 0x4000000000000001, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xbc, 0xe9, 0xd9, 0x20, 0x2040, 0x7510, 0x6ddd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x3b, 0x0, 0x0, 0xd9, 0x50, 0xdb}}]}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x28, 0x33, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\xd8'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) ftruncate(0xffffffffffffffff, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) 8.943276854s ago: executing program 0 (id=725): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x5, 0x4, 0x9, 0x8}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) 8.56790722s ago: executing program 0 (id=727): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@userxattr}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x92) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(0x0, 0x0) renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000200)='./bus/file0\x00', 0x0) 7.694838181s ago: executing program 0 (id=728): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000e40)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000200)=&(0x7f0000000180)) syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) uname(0x0) 7.628860231s ago: executing program 3 (id=729): r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000000240), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000140)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x9, 0x3a, '\\xroc/sys/fs/binfmt_misc/register\x00', 0x3a, '\x00', 0x3a, './bus/file0'}, 0x4e) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r3}, 0x10) getdents(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, 0x4, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004004}, 0x10000004) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90224fc605800024004000400050082c137153e3719ac0180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) getsockopt$inet6_udp_int(r1, 0x11, 0x67, 0x0, &(0x7f0000000300)) 6.43610934s ago: executing program 3 (id=730): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)={0x40, r0, 0x801, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7ee5d52ffd"}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x40}}, 0x40000) 6.232972136s ago: executing program 1 (id=731): r0 = syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000100)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002200a000a00040c24020203020250800009010d2406050203078887000a00000924030101010505"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2000000000000046}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x81, 0x1, "d6"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000980)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.232212303s ago: executing program 0 (id=732): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@data_frame={@msdu=@type10={{0x0, 0x2, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x4}, @from_mac=@broadcast, @broadcast, @device_a, {0xf, 0x4}, "", @value={0x0, 0x1, 0x3, 0x0, 0x7f}, @value=@ver_80211n={0x0, 0x1, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}}, @random="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"}, 0x7a9) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000cc0), &(0x7f0000000d00)=@data_frame={@msdu=@type10={{0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x8}, @random="7a3c82680dfb", @device_b, @device_b, {0x9, 0x8}, "", @void, @value=@ver_80211n={0x0, 0xc, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}}}, 0x1c) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x4008084) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000001400)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000013c0)={0x0}}, 0x811) ioctl$SIOCAX25NOUID(0xffffffffffffffff, 0x89e3, &(0x7f0000001440)) r2 = socket$inet(0x2, 0x4, 0x3a275baf) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, 0x0) pipe(0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002000)=@o_path={0x0}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000020c0)=@bpf_lsm={0x1d, 0x18, &(0x7f0000001ac0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9}, [@alu={0x7, 0x1, 0x3, 0xc, 0x3, 0xa, 0xffffffffffffffff}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x18405f880550f3db}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000001bc0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001c80)={0x0, 0x3, 0xf, 0x6}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000002040)=[r3], &(0x7f0000002080)=[{0x1, 0x1, 0x1, 0x4}, {0x0, 0x2, 0xa, 0x6}, {0x0, 0x1, 0xb, 0x1}], 0x10, 0x7}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000002180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000022c0)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002280)={&(0x7f0000002200)={0x38, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0x6}}}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x66}]}, 0x38}, 0x1, 0x0, 0x0, 0x40080c0}, 0x10) writev(r0, &(0x7f0000002500)=[{0x0}, {&(0x7f0000002440)="5d2d06bcdeefd6302fd89b889944c73e67165c49e1ceab59d8abeb", 0x1b}, {&(0x7f0000002480)="546fa77cd68ee3cbb97ebfc45d5de76c0c32c3e642c1e99d941c8ba4e10b4a05193fc61f0a92ea333cfd8e8c5766e8707c44fd10f6a2f77f1b3e7d386cac1ce5ffeb2c3cf4c7294468e46e3493ce64f8b1098b47363363b15424493ab1", 0x5d}], 0x3) 5.89987344s ago: executing program 3 (id=733): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_features={{0xb, 0xb}, {0x7, 0xc9, "f3bba0f74d74b479"}}}, 0xe) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void}, 0x2e) 5.4453369s ago: executing program 0 (id=734): sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x1, 0x22, 0x0, r4}) 5.444496223s ago: executing program 6 (id=735): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x5, 0x4, 0x9, 0x8}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) 5.232231005s ago: executing program 3 (id=736): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x18) connect$can_bcm(r0, &(0x7f0000000140)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000003b00)={0x0, 0x0, &(0x7f0000003a00)={&(0x7f0000001000)=ANY=[@ANYBLOB="01000000020800000100000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYRES64=0x0, @ANYBLOB="0300004001"], 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x200060d0) 5.151907329s ago: executing program 6 (id=737): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000800000000000000", @ANYBLOB="e6"], 0x50) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x18) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x102) 5.046329448s ago: executing program 3 (id=738): r0 = syz_open_dev$sndctrl(&(0x7f0000000240), 0x2, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, 0x0) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x492492492492624, 0x0) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f0000006680)=0xfe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) 4.69178103s ago: executing program 6 (id=739): syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040f0409010104c8eea31e1af65b3d308b088e858ed276c50d78f4164a7063bd1aa504efa3d56f6647797bb182e891afe21df84dff1d7f406ab97d1182edf704527c023e48988758de3017fde42f12c1ee72fdcd65dc6ca1d0f92908aaafd8de9eab13d9e107000000795f83ca9772a6ea93bcb7ab7fd78687fe8af651fbd2a13d8604b745b2a5e6344ba20da7df3aadba73"], 0x7) openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) r0 = openat$binfmt_format(0xffffffffffffff9c, 0x0, 0x2, 0x0) writev(r0, &(0x7f0000000800)=[{&(0x7f0000000740)="66b783f0", 0x4}], 0x1) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) socket$inet(0x2, 0x4000000000000001, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xbc, 0xe9, 0xd9, 0x20, 0x2040, 0x7510, 0x6ddd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x3b, 0x0, 0x0, 0xd9, 0x50, 0xdb}}]}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x28, 0x33, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\xd8'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) ftruncate(0xffffffffffffffff, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) 4.403965045s ago: executing program 1 (id=740): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000e40)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000200)=&(0x7f0000000180)) syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) uname(0x0) 4.040014652s ago: executing program 1 (id=741): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x40, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 3.058609022s ago: executing program 6 (id=742): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040080}, 0x8c) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x802, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003740)={0x2020}, 0x2020) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, 0x0, &(0x7f0000000040)}, 0x20) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r3, &(0x7f00000014c0)={&(0x7f0000000ec0)=@in={0x2, 0x4e22, @local}, 0x10, &(0x7f0000001400)=[{&(0x7f0000000f00)}], 0x1, &(0x7f0000001480)=[@prinfo={0x18, 0x84, 0x5, {0x0, 0x8000}}], 0x18, 0xc000}, 0x4080840) r4 = memfd_create(&(0x7f0000000040)='rootmode', 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) pwritev(r4, &(0x7f0000000000)=[{&(0x7f0000000100)='E', 0x1}], 0x1, 0x0, 0x8) syz_clone3(&(0x7f0000000080)={0x180801400, 0x0, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r2, 0x0, &(0x7f0000002740)=""/4078}, 0x20) 1.342520188s ago: executing program 3 (id=743): socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="043c07aaaaaaaaaa10"], 0xa) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) 1.122653285s ago: executing program 6 (id=744): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@data_frame={@msdu=@type10={{0x0, 0x2, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x4}, @from_mac=@broadcast, @broadcast, @device_a, {0xf, 0x4}, "", @value={0x0, 0x1, 0x3, 0x0, 0x7f}, @value=@ver_80211n={0x0, 0x1, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}}, @random="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"}, 0x7a9) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000cc0), &(0x7f0000000d00)=@data_frame={@msdu=@type10={{0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x8}, @random="7a3c82680dfb", @device_b, @device_b, {0x9, 0x8}, "", @void, @value=@ver_80211n={0x0, 0xc, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}}}, 0x1c) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x4008084) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000001400)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000013c0)={0x0}}, 0x811) ioctl$SIOCAX25NOUID(0xffffffffffffffff, 0x89e3, &(0x7f0000001440)) r2 = socket$inet(0x2, 0x4, 0x3a275baf) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, 0x0) pipe(0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$OBJ_GET_MAP(0x7, &(0x7f0000002000)=@o_path={0x0}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000020c0)=@bpf_lsm={0x1d, 0x18, &(0x7f0000001ac0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9}, [@alu={0x7, 0x1, 0x3, 0xc, 0x3, 0xa, 0xffffffffffffffff}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x18405f880550f3db}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000001bc0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001c80)={0x0, 0x3, 0xf, 0x6}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000002040)=[0xffffffffffffffff], &(0x7f0000002080)=[{0x1, 0x1, 0x1, 0x4}, {0x0, 0x2, 0xa, 0x6}, {0x0, 0x1, 0xb, 0x1}], 0x10, 0x7}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000002180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000022c0)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002280)={&(0x7f0000002200)={0x38, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0x6}}}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x66}]}, 0x38}, 0x1, 0x0, 0x0, 0x40080c0}, 0x10) writev(r0, &(0x7f0000002500)=[{0x0}, {&(0x7f0000002440)="5d2d06bcdeefd6302fd89b889944c73e67165c49e1ceab59d8abeb", 0x1b}, {&(0x7f0000002480)="546fa77cd68ee3cbb97ebfc45d5de76c0c32c3e642c1e99d941c8ba4e10b4a05193fc61f0a92ea333cfd8e8c5766e8707c44fd10f6a2f77f1b3e7d386cac1ce5ffeb2c3cf4c7294468e46e3493ce64f8b1098b47363363b15424493ab1", 0x5d}], 0x3) 771.815928ms ago: executing program 0 (id=745): socket$packet(0x11, 0x3, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x8001, @multicast, 'gre0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000780)='netlink_extack\x00', r3}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001ac0)=@ipv6_newroute={0x28, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1100}, [@RTA_MULTIPATH={0xc, 0x9, {0x81, 0x0, 0x3}}]}, 0x28}, 0x1, 0x0, 0x0, 0x41}, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RTC_WKALM_SET(r6, 0x4028700f, 0x0) write$UHID_INPUT(r5, 0x0, 0x0) 201.367084ms ago: executing program 5 (id=382): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r1}, &(0x7f0000000440), &(0x7f0000000480)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x4, 0x0, 0x0) 0s ago: executing program 6 (id=746): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x5, 0x4, 0x9, 0x8}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.9' (ED25519) to the list of known hosts. [ 80.804275][ T5830] cgroup: Unknown subsys name 'net' [ 81.018255][ T5830] cgroup: Unknown subsys name 'cpuset' [ 81.073783][ T5830] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.869194][ T5830] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.561046][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.588934][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.590176][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.591586][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.592378][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.601605][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.614576][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.615467][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.616633][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.617436][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.658141][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.673950][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.683873][ T5853] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.703143][ T5853] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.723139][ T5853] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.734002][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.740554][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.742189][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.765852][ T5853] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.768864][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.866123][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.869742][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.871835][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.883058][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.886298][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.676692][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 86.736915][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 86.895196][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 86.920228][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 87.024296][ T115] cfg80211: failed to load regulatory.db [ 87.554600][ T5855] chnl_net:caif_netlink_parms(): no params data found [ 87.567846][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.568054][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.568920][ T5845] bridge_slave_0: entered allmulticast mode [ 87.584008][ T5845] bridge_slave_0: entered promiscuous mode [ 87.692378][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.692468][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.692602][ T5845] bridge_slave_1: entered allmulticast mode [ 87.698937][ T5845] bridge_slave_1: entered promiscuous mode [ 87.714129][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.714260][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.714759][ T5850] bridge_slave_0: entered allmulticast mode [ 87.717828][ T5850] bridge_slave_0: entered promiscuous mode [ 87.736213][ T5843] Bluetooth: hci1: command tx timeout [ 87.813082][ T5843] Bluetooth: hci2: command tx timeout [ 87.814154][ T5843] Bluetooth: hci3: command tx timeout [ 87.814233][ T5843] Bluetooth: hci0: command tx timeout [ 87.973066][ T5846] Bluetooth: hci4: command tx timeout [ 88.001980][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.002140][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.002303][ T5850] bridge_slave_1: entered allmulticast mode [ 88.005341][ T5850] bridge_slave_1: entered promiscuous mode [ 88.364518][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.364678][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.365183][ T5849] bridge_slave_0: entered allmulticast mode [ 88.367924][ T5849] bridge_slave_0: entered promiscuous mode [ 88.396981][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.397117][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.397631][ T5841] bridge_slave_0: entered allmulticast mode [ 88.400307][ T5841] bridge_slave_0: entered promiscuous mode [ 88.416769][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.496994][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.497106][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.497259][ T5849] bridge_slave_1: entered allmulticast mode [ 88.499423][ T5849] bridge_slave_1: entered promiscuous mode [ 88.532417][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.532551][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.533597][ T5841] bridge_slave_1: entered allmulticast mode [ 88.536249][ T5841] bridge_slave_1: entered promiscuous mode [ 88.544162][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.554355][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.777167][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.270976][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.338715][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.340846][ T5845] team0: Port device team_slave_0 added [ 89.443331][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.443573][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.443710][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.443819][ T5855] bridge_slave_0: entered allmulticast mode [ 89.445302][ T5855] bridge_slave_0: entered promiscuous mode [ 89.450314][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.452258][ T5845] team0: Port device team_slave_1 added [ 89.456589][ T5850] team0: Port device team_slave_0 added [ 89.564554][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.564720][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.564894][ T5855] bridge_slave_1: entered allmulticast mode [ 89.567687][ T5855] bridge_slave_1: entered promiscuous mode [ 89.737369][ T5850] team0: Port device team_slave_1 added [ 89.813094][ T5846] Bluetooth: hci1: command tx timeout [ 89.893164][ T5843] Bluetooth: hci3: command tx timeout [ 89.893196][ T5843] Bluetooth: hci2: command tx timeout [ 89.894206][ T5846] Bluetooth: hci0: command tx timeout [ 90.062974][ T5846] Bluetooth: hci4: command tx timeout [ 90.321283][ T5849] team0: Port device team_slave_0 added [ 90.405285][ T5841] team0: Port device team_slave_0 added [ 90.406917][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.406932][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.406946][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.516818][ T5849] team0: Port device team_slave_1 added [ 90.521057][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.523635][ T5841] team0: Port device team_slave_1 added [ 90.525020][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.525032][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.525055][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.528011][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.528025][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.528048][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.695863][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.787049][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.787065][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.787089][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.064745][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.064762][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.064785][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.144423][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.144440][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.144462][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.148112][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.148128][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.148150][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.150061][ T5855] team0: Port device team_slave_0 added [ 91.151136][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.151149][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.151171][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.342456][ T5855] team0: Port device team_slave_1 added [ 91.770567][ T5845] hsr_slave_0: entered promiscuous mode [ 91.771540][ T5845] hsr_slave_1: entered promiscuous mode [ 91.861234][ T5850] hsr_slave_0: entered promiscuous mode [ 91.862096][ T5850] hsr_slave_1: entered promiscuous mode [ 91.864989][ T5850] debugfs: 'hsr0' already exists in 'hsr' [ 91.865105][ T5850] Cannot create hsr debugfs directory [ 91.892952][ T5846] Bluetooth: hci1: command tx timeout [ 91.965284][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.965300][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.965323][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.973433][ T5853] Bluetooth: hci2: command tx timeout [ 91.973464][ T5853] Bluetooth: hci3: command tx timeout [ 91.973598][ T5846] Bluetooth: hci0: command tx timeout [ 92.133159][ T5846] Bluetooth: hci4: command tx timeout [ 92.155965][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.155981][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.156004][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.331303][ T5849] hsr_slave_0: entered promiscuous mode [ 92.332074][ T5849] hsr_slave_1: entered promiscuous mode [ 92.332631][ T5849] debugfs: 'hsr0' already exists in 'hsr' [ 92.332651][ T5849] Cannot create hsr debugfs directory [ 92.361433][ T5841] hsr_slave_0: entered promiscuous mode [ 92.362218][ T5841] hsr_slave_1: entered promiscuous mode [ 92.364432][ T5841] debugfs: 'hsr0' already exists in 'hsr' [ 92.364457][ T5841] Cannot create hsr debugfs directory [ 93.098399][ T5855] hsr_slave_0: entered promiscuous mode [ 93.099238][ T5855] hsr_slave_1: entered promiscuous mode [ 93.099728][ T5855] debugfs: 'hsr0' already exists in 'hsr' [ 93.099749][ T5855] Cannot create hsr debugfs directory [ 93.973077][ T5846] Bluetooth: hci1: command tx timeout [ 94.053288][ T5843] Bluetooth: hci3: command tx timeout [ 94.053320][ T5843] Bluetooth: hci2: command tx timeout [ 94.053382][ T5846] Bluetooth: hci0: command tx timeout [ 94.218779][ T5846] Bluetooth: hci4: command tx timeout [ 94.365596][ T5845] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.410306][ T5845] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.450841][ T5845] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.507772][ T5845] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.633918][ T5850] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 94.679760][ T5850] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 94.712533][ T5850] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 94.769979][ T5850] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.897637][ T5849] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.950627][ T5849] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.992409][ T5849] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 95.040945][ T5849] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 95.199088][ T5841] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.241446][ T5841] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.307937][ T5841] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.370472][ T5841] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.545548][ T5855] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 95.587692][ T5855] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 95.629456][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.632176][ T5855] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 95.690741][ T5855] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 95.825595][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.881906][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.897035][ T3053] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.897867][ T3053] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.950367][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.950511][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.047086][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.061409][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.100390][ T4906] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.100597][ T4906] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.146541][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.146694][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.209152][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.231474][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.270611][ T1213] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.270755][ T1213] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.336928][ T1213] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.337159][ T1213] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.451057][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.517201][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.519679][ T3050] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.519923][ T3050] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.576025][ T3050] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.576144][ T3050] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.717874][ T5855] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.780513][ T1556] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.780750][ T1556] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.822702][ T3050] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.823970][ T3050] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.929190][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.282030][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.332210][ T5845] veth0_vlan: entered promiscuous mode [ 97.441295][ T5845] veth1_vlan: entered promiscuous mode [ 97.617788][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.718790][ T5850] veth0_vlan: entered promiscuous mode [ 97.726843][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.778572][ T5845] veth0_macvtap: entered promiscuous mode [ 97.843329][ T5850] veth1_vlan: entered promiscuous mode [ 97.846578][ T5845] veth1_macvtap: entered promiscuous mode [ 97.895083][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.005933][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.059262][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.121769][ T5850] veth0_macvtap: entered promiscuous mode [ 98.131670][ T3050] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.148774][ T3050] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.149913][ T5841] veth0_vlan: entered promiscuous mode [ 98.167259][ T3050] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.187413][ T5850] veth1_macvtap: entered promiscuous mode [ 98.190399][ T3050] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.290327][ T5841] veth1_vlan: entered promiscuous mode [ 98.366798][ T5855] veth0_vlan: entered promiscuous mode [ 98.437714][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.484367][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.519938][ T5855] veth1_vlan: entered promiscuous mode [ 98.557373][ T5849] veth0_vlan: entered promiscuous mode [ 98.587763][ T3053] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.603788][ T3053] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.612472][ T3053] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.636903][ T4906] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.636930][ T4906] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.644673][ T3053] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.687954][ T5849] veth1_vlan: entered promiscuous mode [ 98.780213][ T5841] veth0_macvtap: entered promiscuous mode [ 98.888267][ T4906] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.888287][ T4906] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.909682][ T5841] veth1_macvtap: entered promiscuous mode [ 99.050628][ T5855] veth0_macvtap: entered promiscuous mode [ 99.092531][ T5855] veth1_macvtap: entered promiscuous mode [ 99.113185][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.113205][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.179256][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.258842][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.275370][ T5849] veth0_macvtap: entered promiscuous mode [ 99.297658][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.310539][ T3059] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.310557][ T3059] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.346337][ T5849] veth1_macvtap: entered promiscuous mode [ 99.351183][ T3059] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.381069][ T3059] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.408685][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.414786][ T3059] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.427256][ T3059] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.553359][ T57] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.592196][ T57] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.603643][ T57] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.608538][ T57] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.612550][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.642917][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 99.652833][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 99.962827][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 100.094280][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 100.162817][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 100.322950][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 100.727417][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.920077][ T4906] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.961540][ T4906] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.232863][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.392884][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.392992][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.393270][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.611272][ T4906] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.634190][ T5974] netlink: 'syz.0.7': attribute type 2 has an invalid length. [ 101.697904][ T4906] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.869035][ T3059] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.869049][ T3059] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.299556][ T4906] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.299578][ T4906] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.462182][ T5977] befs: (nbd3): No write support. Marking filesystem read-only [ 102.476281][ T5977] block nbd3: Attempted send on invalid socket [ 102.476469][ T5977] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 102.476851][ T5977] befs: (nbd3): unable to read superblock [ 102.855521][ T3053] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.855536][ T3053] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.244436][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.244449][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.438028][ T3059] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.438048][ T3059] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.072282][ T5984] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 104.072543][ T5984] overlayfs: failed to set xattr on upper [ 104.072574][ T5984] overlayfs: ...falling back to redirect_dir=nofollow. [ 104.072602][ T5984] overlayfs: ...falling back to index=off. [ 104.072631][ T5984] overlayfs: ...falling back to uuid=null. [ 104.300288][ T5985] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 105.075068][ T1556] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.075088][ T1556] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.656379][ T5995] netlink: 56 bytes leftover after parsing attributes in process `syz.0.10'. [ 107.261620][ T45] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 107.481943][ T45] usb 1-1: unable to get BOS descriptor or descriptor too short [ 107.494843][ T45] usb 1-1: not running at top speed; connect to a high speed hub [ 107.500657][ T45] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.500682][ T45] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 107.560554][ T45] usb 1-1: string descriptor 0 read error: -22 [ 107.560773][ T45] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 107.560796][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.887046][ T45] usb 1-1: 0:2 : does not exist [ 109.717810][ T45] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 109.723729][ T45] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 109.942251][ T45] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 109.991348][ T45] usb 1-1: USB disconnect, device number 2 [ 113.014652][ T5906] udevd[5906]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 113.343296][ T6033] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 114.134849][ T6033] ntfs3(loop2): try to read out of volume at offset 0x0 [ 114.453954][ T6039] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 114.453991][ T6039] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 114.477264][ T6039] vhci_hcd vhci_hcd.0: Device attached [ 115.019932][ T45] usb 35-1: new high-speed USB device number 2 using vhci_hcd [ 115.183139][ T6041] vhci_hcd: connection reset by peer [ 115.191620][ T1556] vhci_hcd: stop threads [ 115.192258][ T1556] vhci_hcd: release socket [ 115.192456][ T1556] vhci_hcd: disconnect device [ 115.738765][ T6053] netlink: 156 bytes leftover after parsing attributes in process `syz.0.23'. [ 119.145847][ T37] audit: type=1326 audit(1757855476.823:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6064 comm="syz.4.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6737eba9 code=0x7ffc0000 [ 119.145905][ T37] audit: type=1326 audit(1757855476.823:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6064 comm="syz.4.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6737eba9 code=0x7ffc0000 [ 119.145949][ T37] audit: type=1326 audit(1757855476.823:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6064 comm="syz.4.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fce6737eba9 code=0x7ffc0000 [ 119.145988][ T37] audit: type=1326 audit(1757855476.823:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6064 comm="syz.4.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6737eba9 code=0x7ffc0000 [ 119.146044][ T37] audit: type=1326 audit(1757855476.823:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6064 comm="syz.4.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6737eba9 code=0x7ffc0000 [ 119.146083][ T37] audit: type=1326 audit(1757855476.823:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6064 comm="syz.4.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fce6737eba9 code=0x7ffc0000 [ 119.146121][ T37] audit: type=1326 audit(1757855476.823:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6064 comm="syz.4.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6737eba9 code=0x7ffc0000 [ 119.146161][ T37] audit: type=1326 audit(1757855476.823:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6064 comm="syz.4.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6737eba9 code=0x7ffc0000 [ 119.146200][ T37] audit: type=1326 audit(1757855476.823:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6064 comm="syz.4.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fce6737eba9 code=0x7ffc0000 [ 119.146240][ T37] audit: type=1326 audit(1757855476.823:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6064 comm="syz.4.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6737eba9 code=0x7ffc0000 [ 120.192969][ T45] vhci_hcd: vhci_device speed not set [ 120.873025][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 121.087688][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.087734][ T9] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 121.087756][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.268364][ T9] usb 4-1: config 0 descriptor?? [ 121.953192][ T6098] netlink: 36 bytes leftover after parsing attributes in process `syz.0.33'. [ 122.478768][ T9] lenovo 0003:17EF:6047.0001: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.3-1/input0 [ 122.491072][ T9] lenovo 0003:17EF:6047.0001: Failed to switch F7/9/11 mode: -71 [ 122.498345][ T9] lenovo 0003:17EF:6047.0001: Failed to switch middle button: -71 [ 122.500123][ T9] lenovo 0003:17EF:6047.0001: Fn-lock setting failed: -71 [ 122.522335][ T9] lenovo 0003:17EF:6047.0001: Sensitivity setting failed: -71 [ 122.838877][ T9] usb 4-1: USB disconnect, device number 2 [ 123.201773][ T6101] fido_id[6101]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 126.013409][ T6140] netlink: 'syz.3.46': attribute type 10 has an invalid length. [ 126.078242][ T6142] Zero length message leads to an empty skb [ 126.240789][ T6140] team0: Port device dummy0 added [ 127.553656][ T6161] overlayfs: failed to resolve './file0': -2 [ 129.719245][ T6192] : entered promiscuous mode [ 131.433792][ T6204] overlayfs: failed to resolve './file1': -2 [ 132.123226][ T5919] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 132.341587][ T5919] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 132.341618][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.341636][ T5919] usb 4-1: Product: syz [ 132.341648][ T5919] usb 4-1: Manufacturer: syz [ 132.341659][ T5919] usb 4-1: SerialNumber: syz [ 132.540328][ T5919] usb 4-1: config 0 descriptor?? [ 132.614299][ T6227] random: crng reseeded on system resumption [ 132.947469][ T5919] usb 4-1: USB disconnect, device number 3 [ 133.103442][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.103589][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.198779][ T6234] netlink: 28 bytes leftover after parsing attributes in process `syz.4.80'. [ 133.282522][ T6006] udevd[6006]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 133.333896][ T5998] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 133.509267][ T5998] usb 3-1: config 0 has an invalid interface number: 59 but max is 0 [ 133.509401][ T5998] usb 3-1: config 0 has no interface number 0 [ 133.537838][ T5998] usb 3-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=6d.dd [ 133.538263][ T5998] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.538589][ T5998] usb 3-1: Product: syz [ 133.538604][ T5998] usb 3-1: Manufacturer: syz [ 133.538617][ T5998] usb 3-1: SerialNumber: syz [ 133.604809][ T5998] usb 3-1: config 0 descriptor?? [ 133.643862][ T5998] pvrusb2: Hardware description: WinTV HVR-1975 Model 160000 [ 134.427790][ T6242] netlink: 'syz.2.79': attribute type 1 has an invalid length. [ 134.509586][ T5998] usb 3-1: USB disconnect, device number 2 [ 134.566620][ T2368] usb 3-1: Direct firmware load for v4l-pvrusb2-160xxx-01.fw failed with error -2 [ 134.566637][ T2368] usb 3-1: Falling back to sysfs fallback for: v4l-pvrusb2-160xxx-01.fw [ 135.202898][ T5835] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 135.357231][ T5835] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.357290][ T5835] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 135.357312][ T5835] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.429646][ T5835] usb 4-1: config 0 descriptor?? [ 135.444073][ T5932] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 135.499417][ T5835] pwc: Askey VC010 type 2 USB webcam detected. [ 135.612968][ T5932] usb 5-1: unable to get BOS descriptor or descriptor too short [ 135.614622][ T5932] usb 5-1: not running at top speed; connect to a high speed hub [ 135.625391][ T5932] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 135.625418][ T5932] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 135.645686][ T5932] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 135.645716][ T5932] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.645735][ T5932] usb 5-1: Product: syz [ 135.645748][ T5932] usb 5-1: Manufacturer: syz [ 135.645761][ T5932] usb 5-1: SerialNumber: syz [ 135.878617][ T5835] pwc: recv_control_msg error -32 req 02 val 2b00 [ 135.879825][ T5835] pwc: recv_control_msg error -32 req 02 val 2700 [ 135.880508][ T5835] pwc: recv_control_msg error -32 req 02 val 2c00 [ 135.881358][ T5835] pwc: recv_control_msg error -32 req 04 val 1000 [ 135.882220][ T5835] pwc: recv_control_msg error -32 req 04 val 1300 [ 135.903627][ T5835] pwc: recv_control_msg error -32 req 04 val 1400 [ 135.926653][ T5835] pwc: recv_control_msg error -32 req 02 val 2000 [ 135.927506][ T5835] pwc: recv_control_msg error -32 req 02 val 2100 [ 135.977436][ T5932] usb 5-1: 0:2 : does not exist [ 135.977531][ T5932] usb 5-1: unit 0 not found! [ 136.131389][ T5835] pwc: recv_control_msg error -71 req 02 val 2500 [ 136.131912][ T5835] pwc: recv_control_msg error -71 req 02 val 2400 [ 136.132471][ T5835] pwc: recv_control_msg error -71 req 02 val 2600 [ 136.143345][ T5835] pwc: recv_control_msg error -71 req 02 val 2900 [ 136.165246][ T5835] pwc: recv_control_msg error -71 req 02 val 2800 [ 136.166273][ T5932] usb 5-1: USB disconnect, device number 2 [ 136.169081][ T5835] pwc: recv_control_msg error -71 req 04 val 1100 [ 136.169627][ T5835] pwc: recv_control_msg error -71 req 04 val 1200 [ 136.265303][ T5835] pwc: Registered as video103. [ 136.330024][ T5835] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input5 [ 136.376243][ T5835] usb 4-1: USB disconnect, device number 4 [ 136.815332][ T5969] udevd[5969]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 136.897577][ T5919] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 136.980285][ T6273] unsupported nla_type 52263 [ 137.059238][ T5919] usb 2-1: New USB device found, idVendor=0b05, idProduct=19b6, bcdDevice= 0.00 [ 137.059267][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.100213][ T5919] usb 2-1: config 0 descriptor?? [ 138.607993][ T5919] usbhid 2-1:0.0: can't add hid device: -71 [ 138.609353][ T5919] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 138.653703][ T5919] usb 2-1: USB disconnect, device number 2 [ 140.292946][ T9] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 140.450419][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 140.451214][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 140.470505][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.470530][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 140.495789][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 140.495818][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.495836][ T9] usb 1-1: Product: syz [ 140.495849][ T9] usb 1-1: Manufacturer: syz [ 140.495863][ T9] usb 1-1: SerialNumber: syz [ 140.815433][ T6309] netlink: 'syz.1.107': attribute type 1 has an invalid length. [ 140.815504][ T6309] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.107'. [ 141.577555][ T9] usb 1-1: 0:2 : does not exist [ 141.577668][ T9] usb 1-1: unit 0 not found! [ 141.675894][ T9] usb 1-1: USB disconnect, device number 3 [ 141.877945][ T5906] udevd[5906]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 142.117169][ T5859] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 142.286412][ T5859] usb 5-1: New USB device found, idVendor=0b05, idProduct=19b6, bcdDevice= 0.00 [ 142.286442][ T5859] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.340402][ T5859] usb 5-1: config 0 descriptor?? [ 142.781677][ T5859] usbhid 5-1:0.0: can't add hid device: -71 [ 142.781801][ T5859] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 142.805320][ T5859] usb 5-1: USB disconnect, device number 3 [ 143.123001][ T5919] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 143.159641][ T6333] syz.3.119 uses obsolete (PF_INET,SOCK_PACKET) [ 143.305737][ T5919] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.305795][ T5919] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 143.305817][ T5919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.357026][ T5919] usb 1-1: config 0 descriptor?? [ 143.382248][ T5919] pwc: Askey VC010 type 2 USB webcam detected. [ 143.784739][ T5919] pwc: recv_control_msg error -32 req 02 val 2b00 [ 143.797313][ T5919] pwc: recv_control_msg error -32 req 02 val 2700 [ 143.798131][ T5919] pwc: recv_control_msg error -32 req 02 val 2c00 [ 143.803221][ T5919] pwc: recv_control_msg error -32 req 04 val 1000 [ 143.810254][ T5919] pwc: recv_control_msg error -32 req 04 val 1300 [ 143.813639][ T5919] pwc: recv_control_msg error -32 req 04 val 1400 [ 143.818243][ T6341] syzkaller0: entered promiscuous mode [ 143.818351][ T6341] syzkaller0: entered allmulticast mode [ 143.823183][ T5919] pwc: recv_control_msg error -32 req 02 val 2000 [ 143.823893][ T5919] pwc: recv_control_msg error -32 req 02 val 2100 [ 144.032003][ T5919] pwc: recv_control_msg error -71 req 02 val 2500 [ 144.032983][ T5919] pwc: recv_control_msg error -71 req 02 val 2400 [ 144.033456][ T5919] pwc: recv_control_msg error -71 req 02 val 2600 [ 144.034026][ T5919] pwc: recv_control_msg error -71 req 02 val 2900 [ 144.034484][ T5919] pwc: recv_control_msg error -71 req 02 val 2800 [ 144.035226][ T5919] pwc: recv_control_msg error -71 req 04 val 1100 [ 144.035740][ T5919] pwc: recv_control_msg error -71 req 04 val 1200 [ 144.098602][ T5919] pwc: Registered as video103. [ 144.146840][ T5919] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input6 [ 144.189526][ T5919] usb 1-1: USB disconnect, device number 4 [ 144.863129][ T6364] input: syz1 as /devices/virtual/input/input7 [ 144.950998][ T6369] netlink: 28 bytes leftover after parsing attributes in process `syz.1.133'. [ 146.578252][ T6392] syzkaller0: entered promiscuous mode [ 146.578282][ T6392] syzkaller0: entered allmulticast mode [ 149.677955][ T6410] netlink: 28 bytes leftover after parsing attributes in process `syz.1.147'. [ 149.882456][ T6416] overlayfs: failed to resolve './file1': -2 [ 150.004623][ T6420] PKCS7: Unknown OID: [4] 0.38.35.41.951690.11253 [ 150.004649][ T6420] PKCS7: Only support pkcs7_signedData type [ 150.472651][ T6436] syzkaller0: entered promiscuous mode [ 150.472679][ T6436] syzkaller0: entered allmulticast mode [ 150.921895][ T6444] netlink: 28 bytes leftover after parsing attributes in process `syz.1.161'. [ 151.223309][ T6451] overlayfs: failed to resolve './file1': -2 [ 151.998891][ T6475] syzkaller0: entered promiscuous mode [ 151.998921][ T6475] syzkaller0: entered allmulticast mode [ 153.144353][ T6482] netlink: 28 bytes leftover after parsing attributes in process `syz.4.175'. [ 153.222404][ T6484] random: crng reseeded on system resumption [ 153.491744][ T37] kauditd_printk_skb: 16 callbacks suppressed [ 153.491758][ T37] audit: type=1326 audit(1757855511.183:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6437 comm="syz.0.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6f2d9eba9 code=0x7ffc0000 [ 153.558015][ T37] audit: type=1326 audit(1757855511.253:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6437 comm="syz.0.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7fa6f2d9eba9 code=0x7ffc0000 [ 153.558337][ T37] audit: type=1326 audit(1757855511.253:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6437 comm="syz.0.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6f2d9eba9 code=0x7ffc0000 [ 153.566778][ T6492] overlayfs: failed to resolve './file1': -2 [ 153.663193][ T37] audit: type=1326 audit(1757855511.363:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6437 comm="syz.0.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6f2d9eba9 code=0x7ffc0000 [ 153.804919][ T37] audit: type=1326 audit(1757855511.483:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6437 comm="syz.0.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6f2d9eba9 code=0x7ffc0000 [ 153.804969][ T37] audit: type=1326 audit(1757855511.503:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6437 comm="syz.0.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6f2d9eba9 code=0x7ffc0000 [ 153.814882][ T37] audit: type=1326 audit(1757855511.503:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6437 comm="syz.0.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa6f2d9eba9 code=0x7ffc0000 [ 153.878745][ T6438] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.195778][ T6524] netlink: 28 bytes leftover after parsing attributes in process `syz.2.187'. [ 156.503264][ T6438] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.712039][ T6550] overlayfs: failed to resolve './file0': -2 [ 157.365221][ T6438] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.781035][ T6581] netlink: 28 bytes leftover after parsing attributes in process `syz.3.200'. [ 157.929661][ T6438] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.230050][ T6597] overlayfs: failed to resolve './file0': -2 [ 158.405704][ T3059] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.635014][ T6607] netlink: 8 bytes leftover after parsing attributes in process `syz.4.206'. [ 158.643005][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.681713][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.752027][ T3059] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.818405][ T6609] overlayfs: missing 'lowerdir' [ 159.337176][ T6615] syzkaller0: entered promiscuous mode [ 159.337208][ T6615] syzkaller0: entered allmulticast mode [ 159.405269][ T6633] netlink: 28 bytes leftover after parsing attributes in process `syz.2.215'. [ 159.542918][ T10] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 159.645504][ T6638] overlayfs: failed to resolve './file0': -2 [ 159.706391][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 159.707328][ T10] usb 1-1: not running at top speed; connect to a high speed hub [ 159.709313][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 159.709336][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 159.748093][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 159.748121][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.748140][ T10] usb 1-1: Product: syz [ 159.748152][ T10] usb 1-1: Manufacturer: syz [ 159.748165][ T10] usb 1-1: SerialNumber: syz [ 160.603647][ T10] usb 1-1: 0:2 : does not exist [ 160.603737][ T10] usb 1-1: unit 0 not found! [ 160.690396][ T10] usb 1-1: USB disconnect, device number 5 [ 160.785237][ T5906] udevd[5906]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 160.841762][ T37] audit: type=1800 audit(1757855518.533:35): pid=6643 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.219" name="/" dev="9p" ino=2 res=0 errno=0 [ 161.177340][ T6657] overlayfs: missing 'lowerdir' [ 161.301518][ T6659] netlink: 28 bytes leftover after parsing attributes in process `syz.4.226'. [ 161.801871][ T6673] overlayfs: failed to resolve './file0': -2 [ 162.877357][ T37] audit: type=1800 audit(1757855520.563:36): pid=6683 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.235" name="/" dev="9p" ino=2 res=0 errno=0 [ 163.057332][ T6692] netlink: 28 bytes leftover after parsing attributes in process `syz.1.238'. [ 163.144090][ T998] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 163.335924][ T998] usb 5-1: unable to get BOS descriptor or descriptor too short [ 163.338003][ T998] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 163.338039][ T998] usb 5-1: can't read configurations, error -71 [ 163.383582][ T6702] overlayfs: failed to resolve './file0': -2 [ 165.288241][ T6745] overlayfs: failed to resolve './file0': -2 [ 165.350785][ T6744] netlink: 16 bytes leftover after parsing attributes in process `syz.2.258'. [ 166.763083][ T9] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 166.922366][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 166.932602][ T9] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 166.932626][ T9] usb 5-1: can't read configurations, error -71 [ 167.756018][ T6778] overlayfs: failed to resolve './file1': -2 [ 168.100845][ T6787] random: crng reseeded on system resumption [ 169.550519][ T6802] syzkaller0: entered promiscuous mode [ 169.550549][ T6802] syzkaller0: entered allmulticast mode [ 169.878762][ T6813] overlayfs: failed to resolve './file1': -2 [ 170.203627][ T6823] process 'syz.3.289' launched '/dev/fd/7' with NULL argv: empty string added [ 171.667558][ T6845] overlayfs: failed to resolve './file1': -2 [ 174.993540][ T6881] random: crng reseeded on system resumption [ 176.859613][ T6922] random: crng reseeded on system resumption [ 177.968357][ T6936] overlayfs: missing 'lowerdir' [ 178.292949][ T5853] Bluetooth: hci5: command 0x1003 tx timeout [ 178.293165][ T5846] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 178.943848][ T6949] random: crng reseeded on system resumption [ 180.513778][ T6966] overlayfs: missing 'lowerdir' [ 181.074961][ C1] vkms_vblank_simulate: vblank timer overrun [ 181.352286][ C1] vkms_vblank_simulate: vblank timer overrun [ 181.768284][ C1] vkms_vblank_simulate: vblank timer overrun [ 181.905247][ T10] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 182.065948][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 182.066714][ T10] usb 1-1: not running at top speed; connect to a high speed hub [ 182.068260][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 182.068283][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 182.099612][ T10] usb 1-1: string descriptor 0 read error: -22 [ 182.099767][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 182.099789][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.760894][ T10] usb 1-1: 0:2 : does not exist [ 184.126900][ T10] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 184.163044][ T10] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 184.195149][ T10] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 185.033934][ T10] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 185.104151][ T10] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 185.109787][ T10] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 185.138917][ T10] usb 1-1: USB disconnect, device number 6 [ 186.619325][ T7028] binder_alloc: 7023: binder_alloc_buf, no vma [ 186.715476][ T7031] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 186.715539][ T7031] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 187.233090][ T10] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 188.646163][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 188.653707][ T10] usb 4-1: not running at top speed; connect to a high speed hub [ 188.671889][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 188.671914][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 188.705345][ T10] usb 4-1: string descriptor 0 read error: -22 [ 188.705477][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 188.705495][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.839227][ T10] usb 4-1: 0:2 : does not exist [ 189.006186][ T37] audit: type=1800 audit(1757855546.693:37): pid=7043 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.372" name="/" dev="9p" ino=2 res=0 errno=0 [ 189.354076][ T10] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 189.360443][ T10] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 189.422323][ T10] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 190.848409][ T10] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 190.913116][ T10] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 190.917472][ T10] usb 4-1: USB disconnect, device number 5 [ 194.538262][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.538311][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.652929][ T991] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 197.815109][ T991] usb 4-1: New USB device found, idVendor=0b05, idProduct=19b6, bcdDevice= 0.00 [ 197.815140][ T991] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.832504][ T991] usb 4-1: config 0 descriptor?? [ 198.074703][ T5853] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 198.101672][ T5853] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 198.114835][ T5853] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 198.142376][ T5853] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 198.162325][ T5853] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 198.461501][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 198.537361][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 198.567996][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 198.633360][ T991] usbhid 4-1:0.0: can't add hid device: -32 [ 198.635881][ T991] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 198.982986][ T991] usb 4-1: USB disconnect, device number 6 [ 199.422964][ T998] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 199.590748][ T998] usb 1-1: Using ep0 maxpacket: 16 [ 199.593456][ T998] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 199.595635][ T998] usb 1-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 199.595652][ T998] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.595662][ T998] usb 1-1: Product: syz [ 199.595669][ T998] usb 1-1: Manufacturer: syz [ 199.595676][ T998] usb 1-1: SerialNumber: syz [ 199.656245][ T998] ums-alauda 1-1:1.0: USB Mass Storage device detected [ 199.724429][ T2368] pvrusb2: request_firmware fatal error with code=-110 [ 199.724460][ T2368] pvrusb2: Failure uploading firmware1 [ 199.724470][ T2368] pvrusb2: Device initialization was not successful. [ 199.724477][ T2368] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 199.724486][ T2368] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 199.724921][ T5998] pvrusb2: Device being rendered inoperable [ 200.053260][ T998] usb 1-1: USB disconnect, device number 7 [ 200.213042][ T5853] Bluetooth: hci5: command tx timeout [ 201.340516][ T1480] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.357641][ T5853] Bluetooth: hci5: command tx timeout [ 202.857876][ T1480] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.614042][ T5919] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 203.663381][ T1480] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.765638][ T5919] usb 1-1: New USB device found, idVendor=0b05, idProduct=19b6, bcdDevice= 0.00 [ 203.765667][ T5919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.792611][ T5919] usb 1-1: config 0 descriptor?? [ 204.217844][ T5919] usbhid 1-1:0.0: can't add hid device: -71 [ 204.217933][ T5919] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 204.233485][ T5919] usb 1-1: USB disconnect, device number 8 [ 204.479057][ T5853] Bluetooth: hci5: command tx timeout [ 205.239109][ T1480] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.359706][ T7099] chnl_net:caif_netlink_parms(): no params data found [ 206.532947][ T5853] Bluetooth: hci5: command tx timeout [ 211.172691][ T7099] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.183154][ T7099] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.183404][ T7099] bridge_slave_0: entered allmulticast mode [ 211.186168][ T7099] bridge_slave_0: entered promiscuous mode [ 211.263048][ T7099] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.263176][ T7099] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.379089][ T7099] bridge_slave_1: entered allmulticast mode [ 211.405419][ T7099] bridge_slave_1: entered promiscuous mode [ 212.299952][ T5853] Bluetooth: hci1: command 0x0406 tx timeout [ 212.300072][ T5853] Bluetooth: hci3: command 0x0406 tx timeout [ 212.699269][ T5843] Bluetooth: hci0: command 0x0406 tx timeout [ 213.102582][ T7238] netlink: 'syz.1.428': attribute type 1 has an invalid length. [ 213.102629][ T7238] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.428'. [ 213.798188][ T7099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.843956][ T7099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.428636][ T1480] bridge_slave_1: left allmulticast mode [ 214.429007][ T1480] bridge_slave_1: left promiscuous mode [ 214.431241][ T1480] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.739214][ T1480] bridge_slave_0: left allmulticast mode [ 214.739237][ T1480] bridge_slave_0: left promiscuous mode [ 214.739398][ T1480] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.096232][ T7260] overlayfs: missing 'lowerdir' [ 216.175100][ C0] vkms_vblank_simulate: vblank timer overrun [ 216.220306][ C0] vkms_vblank_simulate: vblank timer overrun [ 216.650519][ C0] vkms_vblank_simulate: vblank timer overrun [ 217.092782][ C0] vkms_vblank_simulate: vblank timer overrun [ 221.307845][ T7306] overlayfs: missing 'lowerdir' [ 226.863839][ T7373] binder_alloc: 7369: binder_alloc_buf, no vma [ 228.994929][ T1480] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 229.075865][ T37] audit: type=1326 audit(1757855586.773:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7374 comm="syz.2.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f982553eba9 code=0x7ffc0000 [ 229.079575][ T37] audit: type=1326 audit(1757855586.773:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7374 comm="syz.2.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f982553eba9 code=0x7ffc0000 [ 229.079893][ T37] audit: type=1326 audit(1757855586.773:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7374 comm="syz.2.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f982553eba9 code=0x7ffc0000 [ 229.080208][ T37] audit: type=1326 audit(1757855586.773:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7374 comm="syz.2.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f982553eba9 code=0x7ffc0000 [ 229.080546][ T37] audit: type=1326 audit(1757855586.773:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7374 comm="syz.2.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f982553eba9 code=0x7ffc0000 [ 229.080802][ T37] audit: type=1326 audit(1757855586.773:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7374 comm="syz.2.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f982553eba9 code=0x7ffc0000 [ 229.081231][ T37] audit: type=1326 audit(1757855586.773:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7374 comm="syz.2.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f982553eba9 code=0x7ffc0000 [ 229.081580][ T37] audit: type=1326 audit(1757855586.773:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7374 comm="syz.2.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f982553eba9 code=0x7ffc0000 [ 229.086425][ T37] audit: type=1326 audit(1757855586.783:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7374 comm="syz.2.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f982553eba9 code=0x7ffc0000 [ 229.086870][ T37] audit: type=1326 audit(1757855586.783:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7374 comm="syz.2.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f982553eba9 code=0x7ffc0000 [ 230.317188][ T1480] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 230.355781][ T1480] bond0 (unregistering): Released all slaves [ 230.474178][ T7099] team0: Port device team_slave_0 added [ 230.559479][ T7303] bridge_slave_0: left allmulticast mode [ 230.559525][ T7303] bridge_slave_0: left promiscuous mode [ 230.559974][ T7303] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.655521][ T7303] bridge_slave_1: left allmulticast mode [ 230.655551][ T7303] bridge_slave_1: left promiscuous mode [ 230.655767][ T7303] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.753049][ T5919] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 230.773518][ T7303] bond0: (slave bond_slave_0): Releasing backup interface [ 230.855558][ T7303] bond0: (slave bond_slave_1): Releasing backup interface [ 230.905533][ T5919] usb 2-1: New USB device found, idVendor=0b05, idProduct=19b6, bcdDevice= 0.00 [ 230.905564][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.910741][ T5919] usb 2-1: config 0 descriptor?? [ 230.993384][ T7303] team0: Port device team_slave_0 removed [ 231.032726][ T7303] team0: Port device team_slave_1 removed [ 231.035361][ T7303] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.035396][ T7303] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.091078][ T7303] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.091100][ T7303] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.276356][ T7099] team0: Port device team_slave_1 added [ 231.413162][ T5846] Bluetooth: hci5: command 0x0405 tx timeout [ 231.551009][ T5919] usbhid 2-1:0.0: can't add hid device: -71 [ 231.551218][ T5919] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 231.585318][ T5919] usb 2-1: USB disconnect, device number 3 [ 232.188051][ T7375] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.208703][ T7430] binder_alloc: 7426: binder_alloc_buf, no vma [ 233.476108][ T7438] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 233.476168][ T7438] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 233.760410][ T7434] bridge_slave_0: left allmulticast mode [ 233.760442][ T7434] bridge_slave_0: left promiscuous mode [ 233.760690][ T7434] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.862240][ T7434] bridge_slave_1: left allmulticast mode [ 233.862270][ T7434] bridge_slave_1: left promiscuous mode [ 233.864396][ T7434] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.060758][ T7434] bond0: (slave bond_slave_0): Releasing backup interface [ 234.154612][ T7434] bond0: (slave bond_slave_1): Releasing backup interface [ 234.263680][ T7434] team0: Port device team_slave_0 removed [ 234.297772][ T7434] team0: Port device team_slave_1 removed [ 234.298387][ T7434] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.298416][ T7434] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.339157][ T7434] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.339189][ T7434] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.611179][ T7464] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 234.611246][ T7464] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 236.063194][ T5919] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 236.223909][ T5919] usb 1-1: New USB device found, idVendor=0b05, idProduct=19b6, bcdDevice= 0.00 [ 236.223939][ T5919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.230410][ T5919] usb 1-1: config 0 descriptor?? [ 236.299011][ T7375] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.353777][ T7099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 236.353793][ T7099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.353817][ T7099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.457893][ T7099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.457910][ T7099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.457933][ T7099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 236.913540][ T5919] usbhid 1-1:0.0: can't add hid device: -71 [ 236.913673][ T5919] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 236.943479][ T5919] usb 1-1: USB disconnect, device number 9 [ 237.898369][ T7375] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.127498][ T1480] hsr_slave_0: left promiscuous mode [ 238.504828][ T1480] hsr_slave_1: left promiscuous mode [ 238.506184][ T1480] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 238.506278][ T1480] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 238.554369][ T1480] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 238.554391][ T1480] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 238.899404][ T1480] veth1_macvtap: left promiscuous mode [ 238.899726][ T1480] veth0_macvtap: left promiscuous mode [ 238.900048][ T1480] veth1_vlan: left promiscuous mode [ 238.900398][ T1480] veth0_vlan: left promiscuous mode [ 240.745281][ C0] vkms_vblank_simulate: vblank timer overrun [ 241.095601][ C0] vkms_vblank_simulate: vblank timer overrun [ 242.188368][ T7545] overlayfs: missing 'lowerdir' [ 242.874940][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 242.879237][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 242.881790][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 242.883855][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 242.911540][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 245.012946][ T5846] Bluetooth: hci2: command tx timeout [ 245.418755][ T1480] team0 (unregistering): Port device team_slave_1 removed [ 245.685259][ T1480] team0 (unregistering): Port device team_slave_0 removed [ 246.171048][ T7574] overlayfs: missing 'lowerdir' [ 247.093026][ T5846] Bluetooth: hci2: command tx timeout [ 248.129192][ T7588] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.132422][ T7588] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 249.105408][ T7596] overlayfs: missing 'workdir' [ 249.173155][ T5846] Bluetooth: hci2: command tx timeout [ 249.376735][ T7375] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.452121][ T7604] netlink: 12 bytes leftover after parsing attributes in process `syz.3.555'. [ 249.651771][ T7608] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 249.663677][ T7608] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 249.709249][ T7099] hsr_slave_0: entered promiscuous mode [ 249.711930][ T7099] hsr_slave_1: entered promiscuous mode [ 249.724539][ T7099] debugfs: 'hsr0' already exists in 'hsr' [ 249.724566][ T7099] Cannot create hsr debugfs directory [ 249.794670][ C1] vkms_vblank_simulate: vblank timer overrun [ 250.328630][ T7618] team0: Port device dummy0 removed [ 250.341509][ T7618] bridge_slave_0: left allmulticast mode [ 250.341540][ T7618] bridge_slave_0: left promiscuous mode [ 250.341869][ T7618] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.378683][ T7621] overlayfs: missing 'workdir' [ 250.447051][ T7618] bridge_slave_1: left allmulticast mode [ 250.447083][ T7618] bridge_slave_1: left promiscuous mode [ 250.447324][ T7618] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.588880][ T7618] bond0: (slave bond_slave_0): Releasing backup interface [ 250.670708][ T7618] bond0: (slave bond_slave_1): Releasing backup interface [ 250.780565][ T7618] team0: Port device team_slave_0 removed [ 250.837273][ T7618] team0: Port device team_slave_1 removed [ 250.838568][ T7618] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.838596][ T7618] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.890224][ T7618] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.890254][ T7618] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.075640][ T7623] netlink: 'syz.1.562': attribute type 29 has an invalid length. [ 251.263035][ T5846] Bluetooth: hci2: command tx timeout [ 251.331041][ T7627] netlink: 'syz.1.562': attribute type 29 has an invalid length. [ 251.457902][ T7644] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 251.461105][ T7644] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 251.543140][ T7646] overlayfs: missing 'workdir' [ 251.575756][ T7628] netlink: 'syz.1.562': attribute type 29 has an invalid length. [ 251.578429][ T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.794702][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.003190][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.585402][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.770026][ T7678] netlink: 'syz.3.580': attribute type 29 has an invalid length. [ 252.798168][ T7680] netlink: 'syz.3.580': attribute type 29 has an invalid length. [ 252.839194][ T7684] netlink: 'syz.3.580': attribute type 29 has an invalid length. [ 253.699763][ T7699] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 253.721477][ T7699] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 254.683440][ T7553] chnl_net:caif_netlink_parms(): no params data found [ 254.826005][ T7099] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 254.957144][ T7099] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 255.317585][ T7099] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 255.434089][ T7099] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 255.571065][ T7720] netlink: 'syz.1.591': attribute type 29 has an invalid length. [ 255.644638][ T7720] netlink: 'syz.1.591': attribute type 29 has an invalid length. [ 255.784302][ T7724] netlink: 'syz.1.591': attribute type 29 has an invalid length. [ 255.931021][ T7553] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.931244][ T7553] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.931462][ T7553] bridge_slave_0: entered allmulticast mode [ 255.951214][ T7553] bridge_slave_0: entered promiscuous mode [ 255.968872][ T7553] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.969010][ T7553] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.969254][ T7553] bridge_slave_1: entered allmulticast mode [ 255.999613][ T7553] bridge_slave_1: entered promiscuous mode [ 256.006432][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.006507][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.055071][ T7736] 9pnet_fd: Insufficient options for proto=fd [ 256.544480][ T7742] netlink: 'syz.0.596': attribute type 1 has an invalid length. [ 256.544527][ T7742] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.596'. [ 256.551778][ C0] vkms_vblank_simulate: vblank timer overrun [ 257.260539][ C0] vkms_vblank_simulate: vblank timer overrun [ 257.336916][ T7553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.379960][ T7553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.675580][ T7757] netlink: 'syz.1.603': attribute type 29 has an invalid length. [ 257.865842][ T7759] netlink: 'syz.1.603': attribute type 29 has an invalid length. [ 257.866216][ T7757] netlink: 'syz.1.603': attribute type 29 has an invalid length. [ 257.924153][ T7553] team0: Port device team_slave_0 added [ 257.927965][ T7553] team0: Port device team_slave_1 added [ 257.999544][ T7768] 9pnet_fd: Insufficient options for proto=fd [ 258.399539][ T7553] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.399554][ T7553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.399577][ T7553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.409584][ T7553] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.409599][ T7553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.409622][ T7553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.674845][ T5848] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 258.683078][ T5848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 258.691287][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 258.745338][ T5848] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 258.747585][ T5848] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 258.979698][ T7792] random: crng reseeded on system resumption [ 259.327920][ T7800] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 259.333577][ T7800] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 259.618947][ T7805] 9pnet_fd: Insufficient options for proto=fd [ 259.988204][ C0] vkms_vblank_simulate: vblank timer overrun [ 260.115430][ T7811] netlink: 12 bytes leftover after parsing attributes in process `syz.3.617'. [ 260.284857][ T7553] hsr_slave_0: entered promiscuous mode [ 260.288531][ T7553] hsr_slave_1: entered promiscuous mode [ 260.325189][ T7553] debugfs: 'hsr0' already exists in 'hsr' [ 260.325219][ T7553] Cannot create hsr debugfs directory [ 260.852956][ T5846] Bluetooth: hci4: command tx timeout [ 261.603396][ T7842] netlink: 12 bytes leftover after parsing attributes in process `syz.0.627'. [ 261.793964][ T7846] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 261.795910][ T7846] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 263.054560][ C0] vkms_vblank_simulate: vblank timer overrun [ 263.055321][ T5846] Bluetooth: hci4: command tx timeout [ 263.207888][ C0] vkms_vblank_simulate: vblank timer overrun [ 263.969554][ C0] vkms_vblank_simulate: vblank timer overrun [ 264.193361][ T7877] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 264.196587][ T7877] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 264.891965][ T7892] netlink: 'syz.1.645': attribute type 29 has an invalid length. [ 265.002349][ T7896] netlink: 'syz.1.645': attribute type 29 has an invalid length. [ 265.021537][ T7780] chnl_net:caif_netlink_parms(): no params data found [ 265.055693][ T7892] netlink: 'syz.1.645': attribute type 29 has an invalid length. [ 265.074196][ T7553] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 265.092982][ T5846] Bluetooth: hci4: command tx timeout [ 265.202929][ T5835] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 265.313689][ T7553] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 265.382004][ T5835] usb 1-1: unable to get BOS descriptor or descriptor too short [ 265.383453][ T5835] usb 1-1: not running at top speed; connect to a high speed hub [ 265.399145][ T5835] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 265.399170][ T5835] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 265.416255][ T7906] 9pnet_fd: Insufficient options for proto=fd [ 265.437847][ T5835] usb 1-1: string descriptor 0 read error: -22 [ 265.437999][ T5835] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 265.438021][ T5835] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.558526][ T5835] usb 1-1: 0:2 : does not exist [ 265.592950][ T7553] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 265.768004][ T3059] bridge_slave_1: left allmulticast mode [ 265.768037][ T3059] bridge_slave_1: left promiscuous mode [ 265.768515][ T3059] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.902147][ T3059] bridge_slave_0: left allmulticast mode [ 265.902557][ T3059] bridge_slave_0: left promiscuous mode [ 265.904312][ T3059] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.098641][ T5835] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 266.110711][ T5835] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 266.143436][ T5835] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 266.293353][ T7925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 266.296689][ T7925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 266.424085][ T5835] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 266.445889][ T5835] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 266.473199][ T5835] usb 1-1: USB disconnect, device number 10 [ 267.034565][ T3059] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 267.075395][ T7941] 9pnet_fd: Insufficient options for proto=fd [ 267.172933][ T5846] Bluetooth: hci4: command tx timeout [ 267.180268][ T3059] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 267.523694][ T3059] bond0 (unregistering): Released all slaves [ 268.530912][ T7553] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 268.633379][ T7933] netlink: 'syz.3.657': attribute type 29 has an invalid length. [ 269.002367][ T7976] 9pnet_fd: Insufficient options for proto=fd [ 269.044130][ T3059] hsr_slave_0: left promiscuous mode [ 269.093191][ T3059] hsr_slave_1: left promiscuous mode [ 269.094315][ T3059] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 269.143997][ T3059] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.064367][ T3059] team0 (unregistering): Port device team_slave_1 removed [ 270.183810][ T3059] team0 (unregistering): Port device team_slave_0 removed [ 270.794352][ T7961] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 270.972132][ T7985] netlink: 'syz.3.673': attribute type 29 has an invalid length. [ 271.163161][ T7780] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.163331][ T7780] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.163566][ T7780] bridge_slave_0: entered allmulticast mode [ 271.195152][ T7780] bridge_slave_0: entered promiscuous mode [ 271.226099][ T7780] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.228764][ T7780] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.229040][ T7780] bridge_slave_1: entered allmulticast mode [ 271.232122][ T7780] bridge_slave_1: entered promiscuous mode [ 271.433147][ T8007] 9pnet_fd: Insufficient options for proto=fd [ 271.682281][ T8015] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 271.704163][ T7780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.706657][ T8015] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 271.761092][ T7780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 271.919822][ T8017] netlink: 'syz.1.684': attribute type 29 has an invalid length. [ 272.058033][ T8018] netlink: 'syz.1.684': attribute type 29 has an invalid length. [ 272.059655][ T8022] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 272.193184][ T7780] team0: Port device team_slave_0 added [ 272.210487][ T8017] netlink: 'syz.1.684': attribute type 29 has an invalid length. [ 272.245633][ T7780] team0: Port device team_slave_1 added [ 272.631711][ T8036] 9pnet_fd: Insufficient options for proto=fd [ 272.710524][ T7780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.710550][ T7780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.710572][ T7780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.731777][ T7780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.731793][ T7780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.731821][ T7780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.930432][ T8063] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 274.937841][ T8063] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 275.040598][ T8060] netlink: 'syz.1.696': attribute type 29 has an invalid length. [ 275.230561][ T7780] hsr_slave_0: entered promiscuous mode [ 275.430432][ T7780] hsr_slave_1: entered promiscuous mode [ 275.519527][ T7780] debugfs: 'hsr0' already exists in 'hsr' [ 275.531405][ T7780] Cannot create hsr debugfs directory [ 275.594442][ T8062] netlink: 'syz.1.696': attribute type 29 has an invalid length. [ 275.634415][ T8064] netlink: 'syz.1.696': attribute type 29 has an invalid length. [ 275.883927][ T8073] 9pnet_fd: Insufficient options for proto=fd [ 276.115871][ T8081] binder_alloc: 8077: binder_alloc_buf, no vma [ 276.277528][ T7553] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.419292][ T5846] Bluetooth: hci1: unexpected event for opcode 0x0401 [ 276.567353][ T8097] netlink: 92 bytes leftover after parsing attributes in process `syz.3.710'. [ 276.567416][ T8097] netlink: 24 bytes leftover after parsing attributes in process `syz.3.710'. [ 276.699704][ T7236] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 276.829018][ T7553] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.932351][ T3055] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.932695][ T3055] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.970239][ T3055] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.970395][ T3055] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.065710][ T7236] usb 1-1: config 0 has an invalid interface number: 59 but max is 0 [ 277.065736][ T7236] usb 1-1: config 0 has no interface number 0 [ 277.072250][ T7236] usb 1-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=6d.dd [ 277.072278][ T7236] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.072298][ T7236] usb 1-1: Product: syz [ 277.072313][ T7236] usb 1-1: Manufacturer: syz [ 277.072335][ T7236] usb 1-1: SerialNumber: syz [ 277.086448][ T7236] usb 1-1: config 0 descriptor?? [ 277.107571][ T7236] pvrusb2: Hardware description: WinTV HVR-1975 Model 160000 [ 278.471228][ T2368] usb 1-1: Direct firmware load for v4l-pvrusb2-160xxx-01.fw failed with error -2 [ 278.471260][ T2368] usb 1-1: Falling back to sysfs fallback for: v4l-pvrusb2-160xxx-01.fw [ 278.630480][ T7236] usb 1-1: USB disconnect, device number 11 [ 278.846616][ T8118] random: crng reseeded on system resumption [ 279.784786][ T8135] binder_alloc: 8133: binder_alloc_buf, no vma [ 279.910180][ T7553] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.267237][ T8149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 280.287593][ T8149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 280.389345][ T7780] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 280.435153][ T7780] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 280.544517][ T7780] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 280.621515][ T7780] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 280.895974][ T8167] random: crng reseeded on system resumption [ 281.072325][ T7553] veth0_vlan: entered promiscuous mode [ 281.078806][ T5846] Bluetooth: hci0: unexpected event for opcode 0x0401 [ 281.162173][ T7553] veth1_vlan: entered promiscuous mode [ 281.214679][ T7780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.281311][ T7553] veth0_macvtap: entered promiscuous mode [ 281.325270][ T7553] veth1_macvtap: entered promiscuous mode [ 281.340784][ T7780] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.352917][ T6995] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 281.442568][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.443011][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.499386][ T7553] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.513835][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.514046][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.514486][ T6995] usb 2-1: config 0 has an invalid interface number: 59 but max is 0 [ 281.514508][ T6995] usb 2-1: config 0 has no interface number 0 [ 281.524297][ T6995] usb 2-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=6d.dd [ 281.524325][ T6995] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.524343][ T6995] usb 2-1: Product: syz [ 281.524357][ T6995] usb 2-1: Manufacturer: syz [ 281.524370][ T6995] usb 2-1: SerialNumber: syz [ 281.587644][ T6995] usb 2-1: config 0 descriptor?? [ 281.605252][ T7553] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.625216][ T6995] pvrusb2: Hardware description: WinTV HVR-1975 Model 160000 [ 281.733549][ T67] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.761310][ T67] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.800267][ T67] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.814914][ T67] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.068390][ C1] vkms_vblank_simulate: vblank timer overrun [ 282.408085][ T6995] usb 2-1: USB disconnect, device number 4 [ 282.409425][ T6995] pvrusb2: Device being rendered inoperable [ 282.848182][ C1] vkms_vblank_simulate: vblank timer overrun [ 282.966322][ T8195] netlink: 'syz.3.729': attribute type 1 has an invalid length. [ 282.966345][ T8195] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.729'. [ 283.375794][ C1] vkms_vblank_simulate: vblank timer overrun [ 283.835135][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.835157][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.026462][ T8204] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 284.085600][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.085621][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.182968][ T998] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 284.265781][ T8211] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 284.337886][ T998] usb 2-1: unable to get BOS descriptor or descriptor too short [ 284.338641][ T998] usb 2-1: not running at top speed; connect to a high speed hub [ 284.340236][ T998] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 284.340257][ T998] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 284.355104][ T998] usb 2-1: string descriptor 0 read error: -22 [ 284.355268][ T998] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 284.355290][ T998] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.390669][ T7780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.452506][ T998] usb 2-1: 0:2 : does not exist [ 285.090013][ T998] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 285.107938][ T998] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 285.136281][ T998] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 285.194366][ T998] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 285.229133][ T998] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 285.249388][ T998] usb 2-1: USB disconnect, device number 5 [ 285.261979][ T7598] udevd[7598]: setting mode of /dev/mixer3 to 020660 failed: No such file or directory [ 285.262186][ T7598] udevd[7598]: setting owner of /dev/mixer3 to uid=0, gid=29 failed: No such file or directory [ 285.627590][ T7780] veth0_vlan: entered promiscuous mode [ 285.758118][ T7780] veth1_vlan: entered promiscuous mode [ 285.883280][ T5858] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 285.937509][ T7780] veth0_macvtap: entered promiscuous mode [ 285.967259][ T7780] veth1_macvtap: entered promiscuous mode [ 286.042706][ T5858] usb 7-1: config 0 has an invalid interface number: 59 but max is 0 [ 286.042733][ T5858] usb 7-1: config 0 has no interface number 0 [ 286.046271][ T5858] usb 7-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=6d.dd [ 286.046305][ T5858] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.046323][ T5858] usb 7-1: Product: syz [ 286.046336][ T5858] usb 7-1: Manufacturer: syz [ 286.046349][ T5858] usb 7-1: SerialNumber: syz [ 286.055787][ T7780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.071654][ T5858] usb 7-1: config 0 descriptor?? [ 286.143659][ T5858] pvrusb2: Hardware description: WinTV HVR-1975 Model 160000 [ 286.297091][ T8233] netlink: 'syz.6.739': attribute type 1 has an invalid length. [ 286.400180][ T7780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.443549][ T5858] usb 7-1: USB disconnect, device number 2 [ 286.444757][ T5858] pvrusb2: Device being rendered inoperable [ 286.500840][ T67] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.515084][ T67] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.521413][ T3050] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.547589][ T3050] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.814747][ T5835] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 286.982874][ T5835] usb 2-1: Using ep0 maxpacket: 8 [ 287.046967][ T5835] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 287.046997][ T5835] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.047016][ T5835] usb 2-1: Product: syz [ 287.047030][ T5835] usb 2-1: Manufacturer: syz [ 287.047043][ T5835] usb 2-1: SerialNumber: syz [ 287.100010][ T5835] usb 2-1: config 0 descriptor?? [ 287.126406][ T5835] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 287.509870][ T3050] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.683790][ T5835] gspca_sonixj: reg_w1 err -110 [ 288.784854][ T5835] sonixj 2-1:0.0: probe with driver sonixj failed with error -110 [ 288.940917][ T3050] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.027621][ T8253] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 289.037742][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.037762][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.140888][ T3050] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.313528][ T3050] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.459211][ T8253] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 289.485508][ T1498] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.485529][ T1498] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.076814][ T8249] BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48 [ 290.076835][ T8249] in_atomic(): 0, irqs_disabled(): 1, non_block: 0, pid: 8249, name: syz.1.741 [ 290.076851][ T8249] preempt_count: 0, expected: 0 [ 290.076859][ T8249] RCU nest depth: 0, expected: 0 [ 290.076881][ T8249] 1 lock held by syz.1.741/8249: [ 290.076892][ T8249] #0: ffff888145724058 (&dum_hcd->dum->lock){+.+.}-{3:3}, at: dummy_dequeue+0x164/0x480 [ 290.076967][ T8249] irq event stamp: 236 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 290.076974][ T8249] hardirqs last enabled at (235): [] _raw_spin_unlock_irq+0x23/0x50 [ 290.077008][ T8249] hardirqs last disabled at (236): [] dummy_dequeue+0x151/0x480 [ 290.077034][ T8249] softirqs last enabled at (0): [] copy_process+0x979/0x3ae0 [ 290.077063][ T8249] softirqs last disabled at (0): [<0000000000000000>] 0x0 [ 290.077113][ T8249] CPU: 1 UID: 0 PID: 8249 Comm: syz.1.741 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 290.077136][ T8249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 290.077154][ T8249] Call Trace: [ 290.077162][ T8249] [ 290.077171][ T8249] dump_stack_lvl+0x189/0x250 [ 290.077206][ T8249] ? __pfx_dump_stack_lvl+0x10/0x10 [ 290.077241][ T8249] ? print_lock_name+0xde/0x100 [ 290.077267][ T8249] __might_resched+0x44b/0x5d0 [ 290.077297][ T8249] ? __pfx___might_resched+0x10/0x10 [ 290.077319][ T8249] ? dummy_dequeue+0x164/0x480 [ 290.077358][ T8249] rt_spin_lock+0xc7/0x2c0 [ 290.077381][ T8249] ? _raw_spin_unlock_irq+0x23/0x50 [ 290.077411][ T8249] ? __pfx_rt_spin_lock+0x10/0x10 [ 290.077440][ T8249] ? rcu_is_watching+0x15/0xb0 [ 290.077473][ T8249] dummy_dequeue+0x164/0x480 [ 290.077505][ T8249] ? __pfx_dummy_dequeue+0x10/0x10 [ 290.077527][ T8249] ? __pfx_schedule_timeout+0x10/0x10 [ 290.077553][ T8249] ? __pfx___wait_for_common+0x10/0x10 [ 290.077595][ T8249] usb_ep_dequeue+0x66/0x250 [ 290.077621][ T8249] raw_process_ep0_io+0x435/0x980 [ 290.077658][ T8249] raw_ioctl+0x2609/0x3ba0 [ 290.077686][ T8249] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 290.077712][ T8249] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 290.077740][ T8249] ? do_vfs_ioctl+0xbeb/0x1440 [ 290.077766][ T8249] ? __pfx_raw_ioctl+0x10/0x10 [ 290.077791][ T8249] ? __pfx_smack_log+0x10/0x10 [ 290.077822][ T8249] ? smk_access+0x14c/0x4e0 [ 290.077857][ T8249] ? smk_tskacc+0x2fc/0x370 [ 290.077892][ T8249] ? smack_file_ioctl+0x2ac/0x340 [ 290.077916][ T8249] ? __pfx_smack_file_ioctl+0x10/0x10 [ 290.077948][ T8249] ? __fget_files+0x2a/0x420 [ 290.077972][ T8249] ? __fget_files+0x3a6/0x420 [ 290.077995][ T8249] ? __fget_files+0x2a/0x420 [ 290.078024][ T8249] ? bpf_lsm_file_ioctl+0x9/0x20 [ 290.078047][ T8249] ? __pfx_raw_ioctl+0x10/0x10 [ 290.078072][ T8249] __se_sys_ioctl+0xff/0x170 [ 290.078105][ T8249] do_syscall_64+0xfa/0x3b0 [ 290.078123][ T8249] ? lockdep_hardirqs_on+0x9c/0x150 [ 290.078151][ T8249] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.078171][ T8249] ? clear_bhb_loop+0x60/0xb0 [ 290.078194][ T8249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.078214][ T8249] RIP: 0033:0x7f71b2dbe7ab [ 290.078232][ T8249] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 290.078247][ T8249] RSP: 002b:00007f71b0ffaf60 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 290.078268][ T8249] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f71b2dbe7ab [ 290.078282][ T8249] RDX: 00007f71b0ffafe0 RSI: 00000000c0085504 RDI: 0000000000000003 [ 290.078295][ T8249] RBP: 00007f71b2e41e19 R08: 0000000000000001 R09: 0000000000000000 [ 290.078308][ T8249] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f71b0ffafe8 [ 290.078321][ T8249] R13: 0000000000000000 R14: 00007f71b3006090 R15: 00007ffd6170eda8 [ 290.078353][ T8249] [ 290.174925][ T6404] usb 2-1: USB disconnect, device number 6 [ 290.442275][ T3050] bridge_slave_1: left allmulticast mode [ 290.442311][ T3050] bridge_slave_1: left promiscuous mode [ 290.442591][ T3050] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.956361][ T3050] bridge_slave_0: left allmulticast mode [ 290.956393][ T3050] bridge_slave_0: left promiscuous mode [ 290.956733][ T3050] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.951514][ T3050] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 294.023883][ T3050] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 294.047613][ T3050] bond0 (unregistering): Released all slaves [ 296.084538][ T3050] hsr_slave_0: left promiscuous mode [ 296.104481][ T3050] hsr_slave_1: left promiscuous mode [ 296.105505][ T3050] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 296.105533][ T3050] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 296.154069][ T3050] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 296.154100][ T3050] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 296.237731][ T3050] veth1_macvtap: left promiscuous mode [ 296.237857][ T3050] veth0_macvtap: left promiscuous mode [ 296.238146][ T3050] veth1_vlan: left promiscuous mode [ 296.238353][ T3050] veth0_vlan: left promiscuous mode [ 298.613965][ T3050] team0 (unregistering): Port device team_slave_1 removed [ 298.855248][ T3050] team0 (unregistering): Port device team_slave_0 removed