last executing test programs: 8.970102411s ago: executing program 1 (id=609): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f0000c75000/0x4000)=nil, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) read(r0, &(0x7f00000002c0)=""/153, 0x99) mmap$IORING_OFF_SQ_RING(&(0x7f000057d000/0x1000)=nil, 0x1000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400), 0x0, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) 8.710087411s ago: executing program 1 (id=610): r0 = socket$inet(0x2, 0x1, 0x100) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e15, @multicast2}, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) listen(r1, 0x7) listen(r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r2 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_ep_write(r2, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") syz_usb_control_io(r2, 0x0, &(0x7f0000000740)={0x44, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000665000/0x2000)=nil, 0x400000, 0x0, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x2000011, 0x32, 0xffffffffffffffff, 0x8000000) futex_waitv(&(0x7f0000004040)=[{0x0, &(0x7f0000003f80), 0x82}], 0x1, 0x0, 0x0, 0x1) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) setsockopt$inet_buf(r1, 0x0, 0x9, &(0x7f00000007c0)="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", 0x1000) read$char_usb(r4, 0x0, 0x0) 5.998748296s ago: executing program 2 (id=622): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f0000c75000/0x4000)=nil, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) read(r0, &(0x7f00000002c0)=""/153, 0x99) mmap$IORING_OFF_SQ_RING(&(0x7f000057d000/0x1000)=nil, 0x1000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400), 0x0, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) 5.609940408s ago: executing program 2 (id=623): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0700000004000000200000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000f908004457e4b4bf65320103e6c048b324524c508055b7d7a64e"], 0x48) bpf$BPF_GET_MAP_INFO(0x4, &(0x7f0000000140)={r2, 0x58, &(0x7f0000000200)}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab070011000523"], 0xfe33) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x6, 0x4, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x2, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffff0000}}], 0x68000, 0xe000) 5.609582956s ago: executing program 1 (id=624): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='memory.numa_stat\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) socket(0x15, 0x2, 0x0) execve(0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x54, 0x1, [@m_sample={0x50, 0x23, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x5}}}}]}]}, 0x68}}, 0x8011) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) 5.429401161s ago: executing program 1 (id=625): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x10000800) socket$nl_generic(0x10, 0x3, 0x10) sched_setattr(0x0, 0x0, 0x0) madvise(&(0x7f0000398000/0x2000)=nil, 0x2000, 0x4) userfaultfd(0x80001) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) fchmodat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xfffffeda) mknodat$null(0xffffffffffffff9c, 0x0, 0x1d4e, 0x103) open(0x0, 0x60840, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f00000025c0)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0xc) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SETDUPLEX(r3, 0x5016, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r4}, 0x18) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r4, 0x0, {0x1, 0xff, 0x4}}, 0x18) sendmmsg(r1, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x4) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000440)=0x36) bpf$MAP_CREATE(0x0, 0x0, 0x50) 4.669947562s ago: executing program 2 (id=626): socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0xf3a, 0x0) 3.459310927s ago: executing program 3 (id=633): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='memory.numa_stat\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) socket(0x15, 0x2, 0x0) execve(0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x23, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xde3}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x5}}}}]}]}, 0x70}}, 0x8011) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) 3.390152442s ago: executing program 3 (id=634): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, 0x0, &(0x7f0000000680)='GPL\x00'}, 0x94) r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x149000, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000500)={{0x1, 0x1, 0x6b, 0xffffffffffffffff, {0x101}}, '\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f00000190c0)) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20040014, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r4, 0xffffffffffffffff, 0x0) 3.259682106s ago: executing program 3 (id=635): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0700000004000000200000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000f908004457e4b4bf65320103e6c048b324524c508055b7d7a64e"], 0x48) bpf$BPF_GET_MAP_INFO(0x4, &(0x7f0000000140)={r2, 0x58, &(0x7f0000000200)}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab070011000523"], 0xfe33) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x6, 0x4, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x2, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffff0000}}], 0x68000, 0xe000) 2.810141504s ago: executing program 1 (id=636): socket(0x10, 0x80002, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {r2, r3+10000000}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0xf3a, 0x0) write$cgroup_pid(r4, &(0x7f0000000000), 0xffffff98) splice(r0, 0x0, r4, 0x0, 0x80, 0x8) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) r5 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) close(r5) 2.209660583s ago: executing program 3 (id=637): socket(0x10, 0x80002, 0x0) pipe(&(0x7f00000001c0)) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0xf3a, 0x0) 1.868917675s ago: executing program 1 (id=638): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x1, @empty}}, 0x0, 0x3, 0x0, 0x5, 0x7a880bb668777da9}, 0x9c) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0xc, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000080)=0x40000) bind$alg(0xffffffffffffffff, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d6a14fc29", 0xb) r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r5, 0x0, 0x0) close(r5) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r2}, 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r5, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e000000ffff0000050000000000000000180000", @ANYRES32, @ANYBLOB="0000008000"/20, @ANYRES32=r6, @ANYRES32, @ANYBLOB="0200020000bf7348a930b901dbfff91f011b0000000000c9abde48e243b92e8c89b996f2a6948c82c006"], 0x50) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/config', 0x0, 0x0) fchmod(r7, 0x0) 1.74475905s ago: executing program 0 (id=639): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000980)="91f8a984", 0x4}], 0x1}}], 0x1, 0x2090) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed', 0x9) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.67016295s ago: executing program 0 (id=640): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_GET_MAP_INFO(0x4, &(0x7f0000000140)={0xffffffffffffffff, 0x58, &(0x7f0000000200)}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x6, 0x4, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x2, 0x0) r3 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r3, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffff0000}}], 0x68000, 0xe000) 1.279321812s ago: executing program 3 (id=641): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0700000004000000200000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000f908004457e4b4bf65320103e6c048b324524c508055b7d7a64e"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x6, 0x4, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r3, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffff0000}}], 0x68000, 0xe000) 1.279065762s ago: executing program 2 (id=642): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='memory.numa_stat\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) socket(0x15, 0x2, 0x0) execve(0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x23, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xde3}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x5}}}}]}]}, 0x70}}, 0x8011) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) 1.199912431s ago: executing program 2 (id=643): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000025c0)=@delqdisc={0xf8, 0x25, 0x400, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xc}, {0xe, 0xc}, {0xb, 0x1}}, [@q_dsmark={{0xb}, {0x20, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}]}}, @q_dsmark={{0xb}, {0x24, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x101}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xd2}]}}, @q_dsmark={{0xb}, {0x8, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x24, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x401}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xffff}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x10, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6}]}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x24004000}, 0x0) recvmmsg$unix(r1, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 787.393421ms ago: executing program 2 (id=644): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x10000800) socket$nl_generic(0x10, 0x3, 0x10) sched_setattr(0x0, 0x0, 0x0) madvise(&(0x7f0000398000/0x2000)=nil, 0x2000, 0x4) r0 = userfaultfd(0x80001) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) fchmodat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xfffffeda) mknodat$null(0xffffffffffffff9c, 0x0, 0x1d4e, 0x103) open(0x0, 0x60840, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f00000025c0)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0xc) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SETDUPLEX(r4, 0x5016, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r5}, 0x18) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r5, 0x0, {0x1, 0xff, 0x4}}, 0x18) sendmmsg(r2, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000440)=0x36) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) bpf$MAP_CREATE(0x0, 0x0, 0x50) 786.732426ms ago: executing program 0 (id=645): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0700000004000000200000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000f908004457e4b4bf65320103e6c048b324524c508055b7d7a64e"], 0x48) bpf$BPF_GET_MAP_INFO(0x4, &(0x7f0000000140)={r2, 0x58, &(0x7f0000000200)}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab070011000523"], 0xfe33) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x6, 0x4, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e000091d028ef8020ab070005"], 0xfe33) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffff0000}}], 0x68000, 0xe000) 250.080083ms ago: executing program 3 (id=646): socket(0x10, 0x80002, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {r2, r3+10000000}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0xf3a, 0x0) write$cgroup_pid(r4, &(0x7f0000000000), 0xffffff98) splice(r0, 0x0, r4, 0x0, 0x80, 0x8) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) r5 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) close(r5) 89.693205ms ago: executing program 0 (id=647): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x26f2, 0x8000}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) waitid(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r3, 0x1, 0x70bd26, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xf4, 0x2e}}}}, [@chandef_params]}, 0x28}, 0x1, 0x0, 0x0, 0x4011}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x12, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@call={0x85, 0x0, 0x0, 0x29}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xd}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x41, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0xa00) pselect6(0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000740)={'syztnl1\x00', &(0x7f0000000680)={'syztnl2\x00', 0x0, 0x8, 0x7, 0x4, 0x2a, {{0x25, 0x4, 0x3, 0x1c, 0x94, 0x67, 0x0, 0xb, 0x4, 0x0, @multicast1, @remote, {[@generic={0x88, 0xa, "73d83126e7eb81dc"}, @cipso={0x86, 0x56, 0x1, [{0x5, 0x7, "8f54ec1217"}, {0x7, 0x5, "3caaed"}, {0x5, 0x10, "1a2b53f96a30e5460a512a04836c"}, {0x1, 0xa, "277bc36a957a0165"}, {0x7, 0xa, "f0a934e52136e511"}, {0x0, 0x9, "9792ae3610e08b"}, {0x0, 0x2}, {0x1, 0xc, "cc2bd44972549ac8584b"}, {0x2, 0x9, "e7985d53bcf001"}]}, @timestamp_addr={0x44, 0x1c, 0xe5, 0x1, 0xe, [{@remote, 0x7}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@multicast1, 0x8}]}, @ra={0x94, 0x4, 0x1}]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000800)={r1, 0x58, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000008c0)={'ip6gre0\x00', &(0x7f0000000840)={'syztnl2\x00', 0x0, 0x4, 0xc2, 0x7, 0x1, 0x4d, @mcast2, @private2, 0x0, 0x20, 0x8001, 0x4}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000900)={0x90, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x40080}, 0x80) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) rmdir(&(0x7f0000000200)='./file0/file1\x00') r10 = open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x8000) r11 = openat$dlm_control(0xffffff9c, &(0x7f0000000100), 0x220080, 0x0) r12 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet_int(r12, 0x0, 0x16, 0x0, &(0x7f0000003f80)) renameat2(r10, &(0x7f00000000c0)='./file0/file0\x00', r11, 0x0, 0x2) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r14, @ANYBLOB="08002600940900000800b700"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 82.459834ms ago: executing program 0 (id=648): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000980)="91f8a984", 0x4}], 0x1}}], 0x1, 0x2090) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed', 0x9) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 0s ago: executing program 0 (id=649): socket(0x10, 0x80002, 0x0) pipe(&(0x7f00000001c0)) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0xf3a, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:34056' (ED25519) to the list of known hosts. [ 47.888199][ T5711] cgroup: Unknown subsys name 'net' [ 48.020122][ T5711] cgroup: Unknown subsys name 'cpuset' [ 48.026309][ T5711] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 48.996590][ T5711] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 53.355460][ T5746] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 53.359613][ T5746] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 53.365573][ T5746] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 53.369374][ T5746] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 53.374431][ T5746] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 53.378291][ T5759] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 53.378437][ T5746] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 53.378567][ T5757] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 53.380025][ T5762] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 53.380327][ T5757] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 53.380958][ T5762] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 53.381251][ T5762] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 53.382554][ T5759] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 53.382764][ T5757] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 53.384206][ T5759] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 53.384859][ T5757] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 53.385170][ T5757] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 53.386023][ T5757] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 53.389754][ T5757] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 53.414520][ T5757] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 54.017588][ T5744] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.020911][ T5744] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.023907][ T5744] bridge_slave_0: entered allmulticast mode [ 54.028086][ T5744] bridge_slave_0: entered promiscuous mode [ 54.049115][ T5744] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.052246][ T5744] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.055213][ T5744] bridge_slave_1: entered allmulticast mode [ 54.059299][ T5744] bridge_slave_1: entered promiscuous mode [ 54.097740][ T5744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.127099][ T5744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.239460][ T5744] team0: Port device team_slave_0 added [ 54.261220][ T5744] team0: Port device team_slave_1 added [ 54.279465][ T5752] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.281867][ T5752] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.284418][ T5752] bridge_slave_0: entered allmulticast mode [ 54.287785][ T5752] bridge_slave_0: entered promiscuous mode [ 54.315987][ T5752] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.318085][ T5752] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.320824][ T5752] bridge_slave_1: entered allmulticast mode [ 54.323387][ T5752] bridge_slave_1: entered promiscuous mode [ 54.335662][ T5747] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.337982][ T5747] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.340899][ T5747] bridge_slave_0: entered allmulticast mode [ 54.344574][ T5747] bridge_slave_0: entered promiscuous mode [ 54.348714][ T5748] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.352505][ T5748] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.355565][ T5748] bridge_slave_0: entered allmulticast mode [ 54.359298][ T5748] bridge_slave_0: entered promiscuous mode [ 54.364193][ T5748] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.367294][ T5748] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.370129][ T5748] bridge_slave_1: entered allmulticast mode [ 54.372900][ T5748] bridge_slave_1: entered promiscuous mode [ 54.399847][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.402752][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.412981][ T5744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.418332][ T5747] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.421739][ T5747] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.424590][ T5747] bridge_slave_1: entered allmulticast mode [ 54.428454][ T5747] bridge_slave_1: entered promiscuous mode [ 54.452245][ T5752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.456424][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.458814][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.467628][ T5744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.492621][ T5752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.512362][ T5748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.517706][ T5747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.523634][ T5747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.553832][ T5748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.578186][ T5752] team0: Port device team_slave_0 added [ 54.581907][ T5747] team0: Port device team_slave_0 added [ 54.596396][ T5748] team0: Port device team_slave_0 added [ 54.600030][ T5752] team0: Port device team_slave_1 added [ 54.603510][ T5747] team0: Port device team_slave_1 added [ 54.627016][ T5748] team0: Port device team_slave_1 added [ 54.642267][ T5744] hsr_slave_0: entered promiscuous mode [ 54.645483][ T5744] hsr_slave_1: entered promiscuous mode [ 54.667291][ T5747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.670070][ T5747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.680140][ T5747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.690905][ T5747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.693000][ T5747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.700989][ T5747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.722026][ T5752] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.724139][ T5752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.732380][ T5752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.737155][ T5752] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.739308][ T5752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.747479][ T5752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.757206][ T5748] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.759501][ T5748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.768817][ T5748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.783547][ T5748] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.786054][ T5748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.794806][ T5748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.884974][ T5752] hsr_slave_0: entered promiscuous mode [ 54.888235][ T5752] hsr_slave_1: entered promiscuous mode [ 54.890527][ T5752] debugfs: 'hsr0' already exists in 'hsr' [ 54.892268][ T5752] Cannot create hsr debugfs directory [ 54.898965][ T5747] hsr_slave_0: entered promiscuous mode [ 54.901832][ T5747] hsr_slave_1: entered promiscuous mode [ 54.904602][ T5747] debugfs: 'hsr0' already exists in 'hsr' [ 54.907252][ T5747] Cannot create hsr debugfs directory [ 54.944099][ T5748] hsr_slave_0: entered promiscuous mode [ 54.947202][ T5748] hsr_slave_1: entered promiscuous mode [ 54.950071][ T5748] debugfs: 'hsr0' already exists in 'hsr' [ 54.952449][ T5748] Cannot create hsr debugfs directory [ 55.281001][ T5744] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.290529][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 55.294108][ T5744] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.300743][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 55.304130][ T5744] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.309007][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 55.320835][ T5744] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.325023][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 55.364401][ T5747] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.371451][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 55.374973][ T5747] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.381205][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 55.388406][ T5747] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.394628][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 55.406440][ T5747] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.410468][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 55.447258][ T5757] Bluetooth: hci3: command tx timeout [ 55.447265][ T5753] Bluetooth: hci0: command tx timeout [ 55.451866][ T5757] Bluetooth: hci2: command tx timeout [ 55.452660][ T5105] Bluetooth: hci1: command tx timeout [ 55.452971][ T5748] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.462382][ T5748] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 55.466269][ T5748] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.472231][ T5748] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 55.476905][ T5748] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.481590][ T5748] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 55.484154][ T5748] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.489179][ T5748] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 55.570266][ T5752] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.574122][ T5752] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 55.577855][ T5752] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.582308][ T5752] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 55.589096][ T5752] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.594647][ T5752] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 55.599020][ T5752] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.605234][ T5752] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 55.620488][ T5744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.672899][ T5747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.679261][ T5744] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.685684][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.688329][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.702573][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.705587][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.732261][ T5747] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.741552][ T5748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.758550][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.760857][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.771688][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.773941][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.787066][ T5748] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.817141][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.819344][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.833279][ T72] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.835633][ T72] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.866690][ T5752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.894086][ T5752] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.905321][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.908049][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.922611][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.924921][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.106956][ T5744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.125157][ T5747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.151805][ T5744] veth0_vlan: entered promiscuous mode [ 56.170134][ T5744] veth1_vlan: entered promiscuous mode [ 56.194283][ T5747] veth0_vlan: entered promiscuous mode [ 56.202493][ T5752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.207546][ T5748] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.215680][ T5747] veth1_vlan: entered promiscuous mode [ 56.232124][ T5744] veth0_macvtap: entered promiscuous mode [ 56.240260][ T5744] veth1_macvtap: entered promiscuous mode [ 56.269866][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.281293][ T5748] veth0_vlan: entered promiscuous mode [ 56.287970][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.290606][ T5747] veth0_macvtap: entered promiscuous mode [ 56.302664][ T5752] veth0_vlan: entered promiscuous mode [ 56.305071][ T5747] veth1_macvtap: entered promiscuous mode [ 56.314879][ T5748] veth1_vlan: entered promiscuous mode [ 56.318696][ T121] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.323398][ T121] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.333180][ T121] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.338146][ T121] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.344090][ T5752] veth1_vlan: entered promiscuous mode [ 56.361930][ T5747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.379225][ T5747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.414571][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.427340][ T5752] veth0_macvtap: entered promiscuous mode [ 56.431497][ T5748] veth0_macvtap: entered promiscuous mode [ 56.436224][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.439683][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.450164][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.450313][ T5752] veth1_macvtap: entered promiscuous mode [ 56.453635][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.461831][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.471038][ T5748] veth1_macvtap: entered promiscuous mode [ 56.499214][ T5752] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.510957][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.512289][ T5752] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.514224][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.523209][ T5748] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.530785][ T121] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.539558][ T121] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.542715][ T121] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.550326][ T5748] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.554971][ T5744] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 56.555644][ T121] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.584319][ T72] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.587770][ T72] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.591522][ T1163] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.607022][ T1163] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.612847][ T1163] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.625550][ T1163] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.650647][ T121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.653884][ T121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.656680][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.659779][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.728454][ T121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.736470][ T121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.888266][ T5901] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2'. [ 57.055375][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.066406][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.265731][ T5910] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.5'. [ 57.416710][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.441497][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.537589][ T5105] Bluetooth: hci0: command tx timeout [ 57.540537][ T5105] Bluetooth: hci3: command tx timeout [ 57.543529][ T5105] Bluetooth: hci2: command tx timeout [ 57.549197][ T5105] Bluetooth: hci1: command tx timeout [ 58.257976][ T5922] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.4'. [ 59.606052][ T5757] Bluetooth: hci1: command tx timeout [ 59.606074][ T5757] Bluetooth: hci2: command tx timeout [ 59.606095][ T5757] Bluetooth: hci3: command tx timeout [ 59.606119][ T5757] Bluetooth: hci0: command tx timeout [ 59.785806][ T5934] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.11'. [ 60.426933][ T5942] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.12'. [ 60.972459][ T5951] exFAT-fs (nbd0): unable to read boot sector [ 60.974766][ T5951] exFAT-fs (nbd0): failed to read boot sector [ 60.978190][ T5951] exFAT-fs (nbd0): failed to recognize exfat type [ 61.487708][ T5953] infiniband syz1: set active [ 61.489493][ T5953] infiniband syz1: added bond0 [ 61.525047][ T5953] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 61.530851][ T5953] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 61.537483][ T5953] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 61.696249][ T5105] Bluetooth: hci0: command tx timeout [ 61.696301][ T5757] Bluetooth: hci3: command tx timeout [ 61.702398][ T5105] Bluetooth: hci2: command tx timeout [ 61.706309][ T62] Bluetooth: hci1: command tx timeout [ 61.863885][ T5953] RDS/IB: syz1: added [ 61.865587][ T5953] smc: adding ib device syz1 with port count 1 [ 61.867597][ T5953] smc: ib device syz1 port 1 has no pnetid [ 62.759516][ T5865] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 62.945127][ T5865] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 62.949027][ T5865] usb 6-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 62.955172][ T5865] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 62.963237][ T5865] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 62.990355][ T5865] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 63.000507][ T5865] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 63.004044][ T5865] usb 6-1: Product: syz [ 63.005502][ T5865] usb 6-1: Manufacturer: syz [ 63.087161][ T5865] cdc_wdm 6-1:1.0: skipping garbage [ 63.094691][ T5865] cdc_wdm 6-1:1.0: skipping garbage [ 63.097128][ T5865] cdc_wdm 6-1:1.0: skipping garbage [ 63.100184][ T5865] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 63.684478][ T5977] exFAT-fs (nbd3): unable to read boot sector [ 63.687239][ T5977] exFAT-fs (nbd3): failed to read boot sector [ 63.689800][ T5977] exFAT-fs (nbd3): failed to recognize exfat type [ 63.718696][ T5977] rdma_rxe: rxe_newlink: failed to add bond0 [ 64.935186][ T5993] exFAT-fs (nbd3): unable to read boot sector [ 64.937708][ T5993] exFAT-fs (nbd3): failed to read boot sector [ 64.940298][ T5993] exFAT-fs (nbd3): failed to recognize exfat type [ 64.945984][ T5993] rdma_rxe: rxe_newlink: failed to add bond0 [ 65.488505][ T34] usb 6-1: USB disconnect, device number 2 [ 66.884500][ T6013] exFAT-fs (nbd1): unable to read boot sector [ 66.887806][ T6013] exFAT-fs (nbd1): failed to read boot sector [ 66.890309][ T6013] exFAT-fs (nbd1): failed to recognize exfat type [ 66.937917][ T6014] rdma_rxe: rxe_newlink: failed to add bond0 [ 68.026013][ T40] audit: type=1326 audit(1780816513.779:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.2.34" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2f7c code=0x7ffc0000 [ 68.034749][ T40] audit: type=1326 audit(1780816513.779:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.2.34" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2f7c code=0x7ffc0000 [ 68.043980][ T40] audit: type=1326 audit(1780816513.779:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.2.34" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7fc2f7c code=0x7ffc0000 [ 68.051887][ T40] audit: type=1326 audit(1780816513.779:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.2.34" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2f7c code=0x7ffc0000 [ 68.058600][ T40] audit: type=1326 audit(1780816513.779:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.2.34" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2f7c code=0x7ffc0000 [ 68.065338][ T40] audit: type=1326 audit(1780816513.779:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.2.34" exe="/syz-executor" sig=0 arch=40000003 syscall=345 compat=1 ip=0xf7fc2f7c code=0x7ffc0000 [ 68.072062][ T40] audit: type=1326 audit(1780816513.779:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.2.34" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2f7c code=0x7ffc0000 [ 68.078695][ T40] audit: type=1326 audit(1780816513.779:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.2.34" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2f7c code=0x7ffc0000 [ 68.086198][ T40] audit: type=1326 audit(1780816513.779:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.2.34" exe="/syz-executor" sig=0 arch=40000003 syscall=371 compat=1 ip=0xf7fc2f7c code=0x7ffc0000 [ 69.103949][ T6036] exFAT-fs (nbd2): unable to read boot sector [ 69.106718][ T6036] exFAT-fs (nbd2): failed to read boot sector [ 69.109278][ T6036] exFAT-fs (nbd2): failed to recognize exfat type [ 69.134751][ T6036] rdma_rxe: rxe_newlink: failed to add bond0 [ 72.012702][ T6067] Bluetooth: hci4: Frame reassembly failed (-84) [ 72.026499][ T72] Bluetooth: hci4: Frame reassembly failed (-84) [ 73.254062][ T6079] warning: `syz.1.50' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 73.444458][ T6082] netlink: 28 bytes leftover after parsing attributes in process `syz.0.51'. [ 73.448044][ T6082] netlink: 'syz.0.51': attribute type 7 has an invalid length. [ 73.451031][ T6082] netlink: 'syz.0.51': attribute type 8 has an invalid length. [ 73.453409][ T6082] netlink: 4 bytes leftover after parsing attributes in process `syz.0.51'. [ 73.459914][ T6082] bond0: entered promiscuous mode [ 73.461622][ T6082] bond_slave_0: entered promiscuous mode [ 73.463555][ T6082] bond_slave_1: entered promiscuous mode [ 73.469760][ T6082] bond0: left promiscuous mode [ 73.471759][ T6082] bond_slave_0: left promiscuous mode [ 73.473528][ T6082] bond_slave_1: left promiscuous mode [ 73.525934][ T5115] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 73.757985][ T5115] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 73.760944][ T5115] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 73.764240][ T5115] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 73.767960][ T5115] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 73.771528][ T5115] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 73.779818][ T6086] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.52'. [ 73.796883][ T5115] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 73.989863][ T5115] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 73.993989][ T5115] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 73.997608][ T5115] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 74.001861][ T5115] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 74.006122][ T5115] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 74.006461][ T5757] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 74.009183][ T5115] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 74.015814][ T5115] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 74.019533][ T5115] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 74.022977][ T5115] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 74.028939][ T5115] usb 6-1: string descriptor 0 read error: -22 [ 74.030952][ T5115] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 74.033877][ T5115] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.057104][ T5115] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 74.281022][ T6093] netlink: 28 bytes leftover after parsing attributes in process `syz.0.55'. [ 74.284637][ T6093] netlink: 'syz.0.55': attribute type 7 has an invalid length. [ 74.288254][ T6093] netlink: 'syz.0.55': attribute type 8 has an invalid length. [ 74.291983][ T6093] netlink: 4 bytes leftover after parsing attributes in process `syz.0.55'. [ 74.301138][ T6093] bond0: entered promiscuous mode [ 74.303350][ T6093] bond_slave_0: entered promiscuous mode [ 74.306555][ T6093] bond_slave_1: entered promiscuous mode [ 74.310518][ T6093] bond0: left promiscuous mode [ 74.312389][ T6093] bond_slave_0: left promiscuous mode [ 74.314584][ T6093] bond_slave_1: left promiscuous mode [ 74.526717][ T34] usb 6-1: USB disconnect, device number 3 [ 74.759208][ T1340] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 74.956437][ T1340] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 74.963505][ T1340] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 74.967890][ T1340] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 74.973278][ T1340] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 74.978189][ T1340] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 74.997057][ T1340] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 75.001086][ T1340] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 75.008382][ T1340] usb 7-1: Product: syz [ 75.010326][ T1340] usb 7-1: Manufacturer: syz [ 75.181754][ T1340] cdc_wdm 7-1:1.0: skipping garbage [ 75.213980][ T1340] cdc_wdm 7-1:1.0: skipping garbage [ 75.308828][ T1340] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 75.319184][ T1340] cdc_wdm 7-1:1.0: Unknown control protocol [ 75.475919][ T5824] usb 8-1: new low-speed USB device number 2 using dummy_hcd [ 75.840220][ T6110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.844026][ T6110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.850522][ T6110] netlink: 32 bytes leftover after parsing attributes in process `syz.3.58'. [ 75.929158][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 75.932173][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.050586][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 77.206091][ T58] wlan1: Trigger new scan to find an IBSS to join [ 77.389406][ T40] audit: type=1326 audit(1780816523.179:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6163 comm="syz.1.67" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6f7c code=0x7fc00000 [ 77.400924][ T40] audit: type=1326 audit(1780816523.179:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6163 comm="syz.1.67" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7fd6f7c code=0x7fc00000 [ 77.572505][ T34] usb 7-1: USB disconnect, device number 2 [ 77.815244][ T6193] netlink: 24 bytes leftover after parsing attributes in process `syz.2.73'. [ 78.020200][ T6198] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.76'. [ 78.070404][ T6199] pim6reg: entered allmulticast mode [ 78.098338][ T6192] team0: entered allmulticast mode [ 78.100167][ T6192] team_slave_0: entered allmulticast mode [ 78.101967][ T6192] team_slave_1: entered allmulticast mode [ 78.104399][ T6192] team0: left allmulticast mode [ 78.106081][ T6192] team_slave_0: left allmulticast mode [ 78.107824][ T6192] team_slave_1: left allmulticast mode [ 78.109829][ T6192] pim6reg: left allmulticast mode [ 78.521518][ T6207] exFAT-fs (nbd0): unable to read boot sector [ 78.523697][ T6207] exFAT-fs (nbd0): failed to read boot sector [ 78.525558][ T6207] exFAT-fs (nbd0): failed to recognize exfat type [ 78.528804][ T6207] syz1: rxe_newlink: already configured on bond0 [ 78.576279][ T5824] usb 8-1: unable to get BOS descriptor or descriptor too short [ 78.636146][ T6210] ======================================================= [ 78.636146][ T6210] WARNING: The mand mount option has been deprecated and [ 78.636146][ T6210] and is ignored by this kernel. Remove the mand [ 78.636146][ T6210] option from the mount to silence this warning. [ 78.636146][ T6210] ======================================================= [ 78.677122][ T6210] tmpfs: Too few inodes for current use [ 78.695212][ T6210] pim6reg: entered allmulticast mode [ 78.810443][ T6213] netlink: 28 bytes leftover after parsing attributes in process `syz.0.81'. [ 78.813517][ T6213] netlink: 'syz.0.81': attribute type 7 has an invalid length. [ 78.816349][ T6213] netlink: 'syz.0.81': attribute type 8 has an invalid length. [ 78.818714][ T6213] netlink: 4 bytes leftover after parsing attributes in process `syz.0.81'. [ 78.841166][ T6214] syz.3.80 uses obsolete (PF_INET,SOCK_PACKET) [ 78.843029][ T6213] bond0: entered promiscuous mode [ 78.845346][ T6213] bond_slave_0: entered promiscuous mode [ 78.848225][ T6213] bond_slave_1: entered promiscuous mode [ 79.177911][ T6213] bond0: left promiscuous mode [ 79.179980][ T6213] bond_slave_0: left promiscuous mode [ 79.182292][ T6213] bond_slave_1: left promiscuous mode [ 79.235660][ T5824] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 79.245230][ T5824] usb 8-1: can't read configurations, error -71 [ 79.382966][ T6220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.83'. [ 79.428960][ T6228] netlink: 28 bytes leftover after parsing attributes in process `syz.1.85'. [ 79.432593][ T6228] netlink: 'syz.1.85': attribute type 7 has an invalid length. [ 79.435638][ T6228] netlink: 'syz.1.85': attribute type 8 has an invalid length. [ 79.438732][ T6228] netlink: 4 bytes leftover after parsing attributes in process `syz.1.85'. [ 79.447307][ T6228] bond0: entered promiscuous mode [ 79.449559][ T6228] bond_slave_0: entered promiscuous mode [ 79.452036][ T6228] bond_slave_1: entered promiscuous mode [ 79.456143][ T6228] bond0: left promiscuous mode [ 79.457770][ T6228] bond_slave_0: left promiscuous mode [ 79.460101][ T6228] bond_slave_1: left promiscuous mode [ 79.530774][ T6232] netlink: 28 bytes leftover after parsing attributes in process `syz.0.86'. [ 79.606875][ T5824] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 79.700060][ T6234] exFAT-fs (nbd1): unable to read boot sector [ 79.701960][ T6234] exFAT-fs (nbd1): failed to read boot sector [ 79.703856][ T6234] exFAT-fs (nbd1): failed to recognize exfat type [ 79.707153][ T6234] rdma_rxe: rxe_newlink: failed to add bond0 [ 79.768591][ T5824] usb 8-1: config 0 has no interfaces? [ 79.771225][ T5824] usb 8-1: config 0 has no interfaces? [ 79.773811][ T5824] usb 8-1: config 0 has no interfaces? [ 79.776493][ T5824] usb 8-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 79.779784][ T5824] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.785836][ T5824] usb 8-1: config 0 descriptor?? [ 80.071758][ T39] usb 8-1: USB disconnect, device number 3 [ 80.256647][ T6140] wlan1: Trigger new scan to find an IBSS to join [ 81.122834][ T5757] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 81.153611][ T58] wlan1: Creating new IBSS network, BSSID f2:2d:0a:5e:e1:4c [ 81.265025][ T6258] netlink: 112 bytes leftover after parsing attributes in process `syz.1.93'. [ 81.273583][ T6258] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 81.387091][ T40] audit: type=1326 audit(1780816527.179:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6259 comm="syz.2.95" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2f7c code=0x7ffc0000 [ 81.395560][ T40] audit: type=1326 audit(1780816527.179:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6259 comm="syz.2.95" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2f7c code=0x7ffc0000 [ 81.404991][ T40] audit: type=1326 audit(1780816527.179:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6259 comm="syz.2.95" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2f7c code=0x7ffc0000 [ 81.413811][ T40] audit: type=1326 audit(1780816527.179:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6259 comm="syz.2.95" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fc2f7c code=0x7ffc0000 [ 81.414509][ T40] audit: type=1326 audit(1780816527.179:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6259 comm="syz.2.95" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2f7c code=0x7ffc0000 [ 81.414548][ T40] audit: type=1326 audit(1780816527.179:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6259 comm="syz.2.95" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2f7c code=0x7ffc0000 [ 81.414582][ T40] audit: type=1326 audit(1780816527.179:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6259 comm="syz.2.95" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2f7c code=0x7ffc0000 [ 81.414615][ T40] audit: type=1326 audit(1780816527.179:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6259 comm="syz.2.95" exe="/syz-executor" sig=0 arch=40000003 syscall=394 compat=1 ip=0xf7fc2f7c code=0x7ffc0000 [ 81.566207][ T6269] exFAT-fs (nbd0): unable to read boot sector [ 81.566295][ T6269] exFAT-fs (nbd0): failed to read boot sector [ 81.566300][ T6269] exFAT-fs (nbd0): failed to recognize exfat type [ 81.570414][ T6269] syz1: rxe_newlink: already configured on bond0 [ 81.857846][ T6281] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 81.861557][ T6281] overlayfs: overlapping lowerdir path [ 82.003052][ T6289] netlink: 'syz.3.102': attribute type 1 has an invalid length. [ 82.011205][ T6289] netlink: 396 bytes leftover after parsing attributes in process `syz.3.102'. [ 82.140045][ T6292] team0: entered allmulticast mode [ 82.142754][ T6292] team_slave_0: entered allmulticast mode [ 82.145083][ T6292] team_slave_1: entered allmulticast mode [ 82.148719][ T6292] team0: left allmulticast mode [ 82.150802][ T6292] team_slave_0: left allmulticast mode [ 82.152888][ T6292] team_slave_1: left allmulticast mode [ 82.154661][ T6292] pim6reg: left allmulticast mode [ 82.228160][ T6301] netlink: 16 bytes leftover after parsing attributes in process `syz.1.107'. [ 82.240641][ T6304] exFAT-fs (nbd3): unable to read boot sector [ 82.242923][ T6304] exFAT-fs (nbd3): failed to read boot sector [ 82.245749][ T6304] exFAT-fs (nbd3): failed to recognize exfat type [ 82.250368][ T6304] rdma_rxe: rxe_newlink: failed to add bond0 [ 82.471373][ T6317] netlink: 4 bytes leftover after parsing attributes in process `syz.3.111'. [ 83.428705][ T6337] exFAT-fs (nbd3): unable to read boot sector [ 83.431208][ T6337] exFAT-fs (nbd3): failed to read boot sector [ 83.433633][ T6337] exFAT-fs (nbd3): failed to recognize exfat type [ 83.438341][ T6337] rdma_rxe: rxe_newlink: failed to add bond0 [ 83.595954][ T5859] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 83.605968][ T34] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 83.748183][ T5859] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 83.751703][ T5859] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 83.755741][ T5859] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 83.759951][ T5859] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 83.764702][ T5859] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 83.772239][ T5859] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 83.776160][ T5859] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 83.779862][ T5859] usb 6-1: Product: syz [ 83.781716][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 83.786096][ T5859] usb 6-1: Manufacturer: syz [ 83.789608][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 83.794396][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 83.800855][ T6348] Bluetooth: hci4: Frame reassembly failed (-84) [ 83.802359][ T34] usb 7-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 83.804634][ T121] Bluetooth: hci4: Frame reassembly failed (-84) [ 83.808429][ T5859] cdc_wdm 6-1:1.0: skipping garbage [ 83.810581][ T121] Bluetooth: hci4: Frame reassembly failed (-84) [ 83.812034][ T5859] cdc_wdm 6-1:1.0: skipping garbage [ 83.817253][ T34] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.820503][ T34] usb 7-1: Product: syz [ 83.822198][ T34] usb 7-1: Manufacturer: syz [ 83.824082][ T34] usb 7-1: SerialNumber: syz [ 83.827512][ T5859] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 83.830104][ T5859] cdc_wdm 6-1:1.0: Unknown control protocol [ 83.836634][ T34] usb 7-1: config 0 descriptor?? [ 84.053648][ T34] adutux 7-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux1 [ 84.252253][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - 4 bytes [ 84.283694][ T5115] usb 7-1: USB disconnect, device number 3 [ 85.207178][ T5105] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 85.210638][ T5105] Bluetooth: hci3: Injecting HCI hardware error event [ 85.213653][ T5105] Bluetooth: hci3: hardware error 0x00 [ 85.761443][ T6358] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.124'. [ 85.845973][ T5757] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 85.848612][ T5753] Bluetooth: hci4: command 0x1003 tx timeout [ 85.903287][ T6361] ptrace attach of ""[6362] was attempted by "/syz-executor exec"[6361] [ 85.925829][ T6364] netlink: 8 bytes leftover after parsing attributes in process `syz.2.126'. [ 85.928762][ T6364] netlink: 24 bytes leftover after parsing attributes in process `syz.2.126'. [ 85.933004][ T6364] fuse: Unknown parameter 'C¾]0x0000000000000006' qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 85.971035][ T6364] netlink: 68 bytes leftover after parsing attributes in process `syz.2.126'. [ 86.174461][ T24] cfg80211: failed to load regulatory.db [ 86.520976][ T5895] usb 6-1: USB disconnect, device number 4 [ 86.616272][ T29] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 86.688260][ T6384] exFAT-fs (nbd3): unable to read boot sector [ 86.690220][ T6384] exFAT-fs (nbd3): failed to read boot sector [ 86.692198][ T6384] exFAT-fs (nbd3): failed to recognize exfat type [ 86.696672][ T6384] rdma_rxe: rxe_newlink: failed to add bond0 [ 86.788078][ T6383] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.132'. [ 86.820641][ T29] usb 7-1: unable to get BOS descriptor or descriptor too short [ 86.826580][ T29] usb 7-1: config 1 has an invalid interface number: 214 but max is 2 [ 86.831346][ T29] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.836088][ T29] usb 7-1: config 1 has no interface number 2 [ 86.838236][ T29] usb 7-1: too many endpoints for config 1 interface 214 altsetting 19: 188, using maximum allowed: 30 [ 86.842921][ T29] usb 7-1: config 1 interface 214 altsetting 19 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 86.849014][ T29] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 86.853328][ T29] usb 7-1: config 1 interface 214 has no altsetting 0 [ 86.858789][ T29] usb 7-1: config 1 interface 1 has no altsetting 0 [ 86.863687][ T29] usb 7-1: string descriptor 0 read error: -22 [ 86.868116][ T29] usb 7-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 86.870916][ T29] usb 7-1: New USB device strings: Mfr=238, Product=1, SerialNumber=3 [ 87.121266][ T29] usb 7-1: Can't get UAC3 power state for id 10 [ 87.126900][ T29] usb 7-1: selecting invalid altsetting 0 [ 87.138398][ T29] usb 7-1: selecting invalid altsetting 0 [ 87.308069][ T5105] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 87.330873][ T29] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 87.398347][ T29] usb 7-1: USB disconnect, device number 4 [ 87.814489][ T121] Bluetooth: hci4: Frame reassembly failed (-84) [ 88.137759][ T6407] netlink: 36 bytes leftover after parsing attributes in process `syz.2.138'. [ 88.406095][ T24] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 88.587844][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.591680][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.594886][ T24] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 88.596010][ T5859] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 88.599179][ T24] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 88.604960][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.609258][ T24] usb 7-1: config 0 descriptor?? [ 88.760218][ T5859] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 88.763999][ T5859] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 88.768280][ T5859] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 88.771828][ T5859] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 88.776215][ T5859] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 88.781830][ T5859] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 88.785488][ T5859] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 88.789568][ T5859] usb 6-1: Product: syz [ 88.791297][ T5859] usb 6-1: Manufacturer: syz [ 88.800031][ T5859] cdc_wdm 6-1:1.0: skipping garbage [ 88.802180][ T5859] cdc_wdm 6-1:1.0: skipping garbage [ 88.805025][ T5859] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 88.807430][ T5859] cdc_wdm 6-1:1.0: Unknown control protocol [ 88.820147][ T6407] Bluetooth: MGMT ver 1.23 [ 88.833521][ T24] usbhid 7-1:0.0: can't add hid device: -71 [ 88.835502][ T24] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 88.846386][ T24] usb 7-1: USB disconnect, device number 5 [ 89.045957][ T29] usb 8-1: new low-speed USB device number 4 using dummy_hcd [ 89.196030][ T29] usb 8-1: device descriptor read/64, error -71 [ 89.445961][ T29] usb 8-1: new low-speed USB device number 5 using dummy_hcd [ 89.625944][ T29] usb 8-1: device descriptor read/64, error -71 [ 89.694238][ T6418] exFAT-fs (nbd2): unable to read boot sector [ 89.696256][ T6418] exFAT-fs (nbd2): failed to read boot sector [ 89.698192][ T6418] exFAT-fs (nbd2): failed to recognize exfat type [ 89.704980][ T6418] rdma_rxe: rxe_newlink: failed to add bond0 [ 89.737393][ T29] usb usb8-port1: attempt power cycle [ 89.748345][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 4 bytes [ 89.847449][ T5105] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 89.850152][ T5753] Bluetooth: hci4: command 0x1003 tx timeout [ 90.075921][ T29] usb 8-1: new low-speed USB device number 6 using dummy_hcd [ 90.097212][ T29] usb 8-1: device descriptor read/8, error -71 [ 90.345970][ T29] usb 8-1: new low-speed USB device number 7 using dummy_hcd [ 90.376425][ T29] usb 8-1: device descriptor read/8, error -71 [ 90.486681][ T29] usb usb8-port1: unable to enumerate USB device [ 90.588377][ T121] Bluetooth: hci4: Frame reassembly failed (-84) [ 90.591003][ T121] Bluetooth: hci4: Frame reassembly failed (-84) [ 90.595779][ T6425] Bluetooth: hci4: Frame reassembly failed (-84) [ 91.395115][ T5851] usb 6-1: USB disconnect, device number 5 [ 91.427884][ T6433] XFS (sr0): Invalid superblock magic number [ 91.684124][ T6442] netlink: 8 bytes leftover after parsing attributes in process `syz.1.146'. [ 91.687008][ T6442] netlink: 4 bytes leftover after parsing attributes in process `syz.1.146'. [ 91.689704][ T6442] netlink: 'syz.1.146': attribute type 18 has an invalid length. [ 91.698970][ T6442] netlink: 4 bytes leftover after parsing attributes in process `syz.1.146'. [ 91.705274][ T6442] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 91.712834][ T6442] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 92.235941][ T34] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 92.268725][ T6452] netlink: 28 bytes leftover after parsing attributes in process `syz.3.150'. [ 92.272451][ T6452] netlink: 'syz.3.150': attribute type 7 has an invalid length. [ 92.275604][ T6452] netlink: 'syz.3.150': attribute type 8 has an invalid length. [ 92.279231][ T6452] netlink: 4 bytes leftover after parsing attributes in process `syz.3.150'. [ 92.288723][ T6452] bond0: entered promiscuous mode [ 92.291005][ T6452] bond_slave_0: entered promiscuous mode [ 92.294987][ T6452] bond_slave_1: entered promiscuous mode [ 92.300201][ T6452] bond0: left promiscuous mode [ 92.302413][ T6452] bond_slave_0: left promiscuous mode [ 92.304708][ T6452] bond_slave_1: left promiscuous mode [ 92.385962][ T34] usb 6-1: Using ep0 maxpacket: 8 [ 92.389681][ T34] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 92.393600][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.405070][ T34] pvrusb2: Hardware description: Terratec Grabster AV400 [ 92.415647][ T34] pvrusb2: ********** [ 92.417408][ T34] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 92.430463][ T34] pvrusb2: Important functionality might not be entirely working. [ 92.443005][ T34] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 92.452475][ T34] pvrusb2: ********** [ 92.554571][ T6460] exFAT-fs (nbd2): unable to read boot sector [ 92.556862][ T6460] exFAT-fs (nbd2): failed to read boot sector [ 92.560430][ T6460] exFAT-fs (nbd2): failed to recognize exfat type [ 92.567641][ T6460] rdma_rxe: rxe_newlink: failed to add bond0 [ 92.615649][ T2511] pvrusb2: Invalid write control endpoint [ 92.651022][ T2511] pvrusb2: Invalid write control endpoint [ 92.653321][ T2511] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 92.655997][ T5105] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 92.657105][ T2511] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 92.658122][ T5753] Bluetooth: hci4: command 0x1003 tx timeout [ 92.668848][ T2511] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 92.680806][ T2511] pvrusb2: Device being rendered inoperable [ 92.686001][ T5851] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 92.697790][ T2511] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 92.714495][ T2511] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 92.743174][ T2511] pvrusb2: Attached sub-driver cx25840 [ 92.746891][ T2511] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 92.750472][ T2511] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 92.838544][ T5851] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 92.841489][ T5851] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 92.844677][ T5851] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 92.847962][ T5851] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 92.852551][ T5851] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 92.858572][ T5851] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 92.862452][ T5851] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 92.865796][ T5851] usb 8-1: Product: syz [ 92.868023][ T5851] usb 8-1: Manufacturer: syz [ 92.883429][ T6450] netlink: 12 bytes leftover after parsing attributes in process `syz.1.149'. [ 92.900895][ T5851] cdc_wdm 8-1:1.0: skipping garbage [ 92.902820][ T5851] cdc_wdm 8-1:1.0: skipping garbage [ 92.916002][ T5851] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 92.918296][ T5851] cdc_wdm 8-1:1.0: Unknown control protocol [ 92.955451][ T6450] pvrusb2: Attempted to execute control transfer when device not ok [ 93.883585][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 6 bytes [ 94.991686][ T5745] usb 6-1: USB disconnect, device number 6 [ 95.225255][ T6501] netlink: 12 bytes leftover after parsing attributes in process `syz.2.166'. [ 95.286961][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 95.518509][ T6505] pim6reg: entered allmulticast mode [ 95.525348][ T9] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 95.530328][ T9] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 95.536364][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 95.544897][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 95.567844][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 95.592486][ T9] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 95.597164][ T9] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 95.603727][ T9] usb 5-1: Product: syz [ 95.609707][ T9] usb 5-1: Manufacturer: syz [ 95.719482][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 95.726693][ T6503] team0: entered allmulticast mode [ 95.731219][ T6503] team_slave_0: entered allmulticast mode [ 95.734636][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 95.736383][ T6503] team_slave_1: entered allmulticast mode [ 95.760296][ T9] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device [ 95.768816][ T9] cdc_wdm 5-1:1.0: Unknown control protocol [ 96.198516][ T29] usb 8-1: USB disconnect, device number 8 [ 96.509977][ T6504] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.516446][ T6504] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.525697][ T6515] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.167'. [ 96.697072][ T5831] usb 5-1: USB disconnect, device number 2 [ 96.702991][ T6504] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.713030][ T6504] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.791008][ T6503] team0: left allmulticast mode [ 96.796017][ T6503] team_slave_0: left allmulticast mode [ 96.804192][ T6503] team_slave_1: left allmulticast mode [ 96.823182][ T6503] pim6reg: left allmulticast mode [ 96.835819][ T6522] exFAT-fs (nbd3): unable to read boot sector [ 96.837969][ T6522] exFAT-fs (nbd3): failed to read boot sector [ 96.840990][ T6522] exFAT-fs (nbd3): failed to recognize exfat type [ 96.846223][ T6522] rdma_rxe: rxe_newlink: failed to add bond0 [ 96.867178][ T121] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.870837][ T121] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.875137][ T121] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.879003][ T121] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.129999][ T6528] netlink: 4 bytes leftover after parsing attributes in process `syz.2.170'. [ 97.182475][ T6528] netlink: 12 bytes leftover after parsing attributes in process `syz.2.170'. [ 98.021196][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!! [ 98.438414][ T6535] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 98.499001][ T6535] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 98.502669][ T6535] overlayfs: failed to look up (tracing) for ino (-66) [ 99.598911][ T6540] 9pnet_virtio: no channels available for device syz [ 99.896471][ T34] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 99.985559][ T6547] netlink: 4 bytes leftover after parsing attributes in process `syz.3.177'. [ 100.047151][ T34] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 100.049928][ T34] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 100.053674][ T34] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 100.057367][ T34] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 100.060702][ T34] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 100.066436][ T34] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 100.069693][ T34] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 100.072989][ T34] usb 6-1: Product: syz [ 100.074698][ T34] usb 6-1: Manufacturer: syz [ 100.080502][ T34] cdc_wdm 6-1:1.0: skipping garbage [ 100.082463][ T34] cdc_wdm 6-1:1.0: skipping garbage [ 100.086128][ T34] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 100.091083][ T34] cdc_wdm 6-1:1.0: Unknown control protocol [ 101.099220][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - 6 bytes [ 101.258613][ T6574] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.185'. [ 102.385770][ T6598] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.196'. [ 102.631400][ T6606] syzkaller0: entered promiscuous mode [ 102.633160][ T6606] syzkaller0: entered allmulticast mode [ 102.881943][ T5115] usb 6-1: USB disconnect, device number 7 [ 103.440920][ T6619] fuse: Unknown parameter '' [ 104.339722][ T6628] process 'syz.0.202' launched './file1' with NULL argv: empty string added [ 104.344806][ T6628] netlink: 12 bytes leftover after parsing attributes in process `syz.0.202'. [ 105.338686][ T6634] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.206'. [ 105.549552][ T6640] overlayfs: missing 'lowerdir' [ 105.663114][ T6646] FAULT_INJECTION: forcing a failure. [ 105.663114][ T6646] name failslab, interval 1, probability 0, space 0, times 1 [ 105.668690][ T6646] CPU: 1 UID: 0 PID: 6646 Comm: syz.2.208 Not tainted syzkaller #0 PREEMPT(full) [ 105.668706][ T6646] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 105.668712][ T6646] Call Trace: [ 105.668715][ T6646] [ 105.668720][ T6646] dump_stack_lvl+0x100/0x190 [ 105.668741][ T6646] should_fail_ex.cold+0x5/0xa [ 105.668755][ T6646] should_failslab+0xc2/0x120 [ 105.668768][ T6646] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 105.668784][ T6646] ? security_inode_alloc+0x3b/0x2c0 [ 105.668796][ T6646] ? lockdep_init_map_type+0x5c/0x250 [ 105.668815][ T6646] security_inode_alloc+0x3b/0x2c0 [ 105.668827][ T6646] inode_init_always_gfp+0xc77/0xfb0 [ 105.668843][ T6646] alloc_inode+0x8e/0x250 [ 105.668858][ T6646] new_inode+0x22/0x1c0 [ 105.668876][ T6646] proc_pid_make_inode+0x22/0x160 [ 105.668890][ T6646] proc_ns_instantiate+0x57/0x100 [ 105.668902][ T6646] proc_fill_cache+0x384/0x490 [ 105.668914][ T6646] ? __pfx_proc_ns_instantiate+0x10/0x10 [ 105.668926][ T6646] ? __pfx_proc_fill_cache+0x10/0x10 [ 105.668938][ T6646] ? rcu_is_watching+0x12/0xc0 [ 105.668957][ T6646] ? filldir64+0x4df/0x640 [ 105.668970][ T6646] proc_ns_dir_readdir+0x1ba/0x530 [ 105.668983][ T6646] iterate_dir+0x296/0xae0 [ 105.668996][ T6646] __ia32_sys_getdents64+0x13a/0x2c0 [ 105.669007][ T6646] ? __pfx___ia32_sys_getdents64+0x10/0x10 [ 105.669019][ T6646] ? __pfx_filldir64+0x10/0x10 [ 105.669031][ T6646] ? rcu_is_watching+0x12/0xc0 [ 105.669044][ T6646] __do_fast_syscall_32+0xe7/0x970 [ 105.669061][ T6646] ? lockdep_hardirqs_on+0x78/0x100 [ 105.669076][ T6646] do_fast_syscall_32+0x32/0x70 [ 105.669091][ T6646] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 105.669104][ T6646] RIP: 0023:0xf7fc2f7c [ 105.669113][ T6646] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 105.669123][ T6646] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 00000000000000dc [ 105.669133][ T6646] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 105.669139][ T6646] RDX: 000000000000009d RSI: 0000000000000000 RDI: 0000000000000000 [ 105.669145][ T6646] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 105.669150][ T6646] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 105.669156][ T6646] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 105.669169][ T6646] [ 105.787923][ T6653] AppArmor: change_hat: Invalid input '0x' [ 106.210388][ T6659] netlink: 4 bytes leftover after parsing attributes in process `syz.1.214'. [ 106.361540][ T6665] binder_alloc: 6664: pid 6664 spamming oneway? 1 buffers allocated for a total size of 4096 [ 106.367863][ T6665] binder_alloc: 6664: binder_alloc_buf size -944 failed, no address space [ 106.372384][ T6665] binder_alloc: allocated: 5120 (num: 2 largest: 4096), free: 7168 (num: 1 largest: 7168) [ 106.568035][ T6671] exFAT-fs (nbd1): unable to read boot sector [ 106.569977][ T6671] exFAT-fs (nbd1): failed to read boot sector [ 106.571873][ T6671] exFAT-fs (nbd1): failed to recognize exfat type [ 106.582248][ T6671] rdma_rxe: rxe_newlink: failed to add bond0 [ 106.720550][ T6672] exFAT-fs (nbd2): unable to read boot sector [ 106.723048][ T6672] exFAT-fs (nbd2): failed to read boot sector [ 106.725642][ T6672] exFAT-fs (nbd2): failed to recognize exfat type [ 106.768399][ T6672] rdma_rxe: rxe_newlink: failed to add bond0 [ 108.776202][ T40] kauditd_printk_skb: 325 callbacks suppressed [ 108.776216][ T40] audit: type=1326 audit(1780816554.569:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6684 comm="syz.3.222" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46f7c code=0x7ffc0000 [ 108.789824][ T40] audit: type=1326 audit(1780816554.579:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6684 comm="syz.3.222" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46f7c code=0x7ffc0000 [ 108.797983][ T40] audit: type=1326 audit(1780816554.589:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6684 comm="syz.3.222" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f46f7c code=0x7ffc0000 [ 108.804905][ T40] audit: type=1326 audit(1780816554.589:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6684 comm="syz.3.222" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46f7c code=0x7ffc0000 [ 109.078989][ T5105] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 109.082892][ T5105] CPU: 0 UID: 0 PID: 5105 Comm: kworker/u33:1 Not tainted syzkaller #0 PREEMPT(full) [ 109.082908][ T5105] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 109.082915][ T5105] Workqueue: hci1 hci_rx_work [ 109.082933][ T5105] Call Trace: [ 109.082938][ T5105] [ 109.082942][ T5105] dump_stack_lvl+0x100/0x190 [ 109.082963][ T5105] sysfs_warn_dup.cold+0x1c/0x28 [ 109.082980][ T5105] sysfs_create_dir_ns+0x24b/0x2b0 [ 109.082992][ T5105] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 109.083002][ T5105] ? find_held_lock+0x2b/0x80 [ 109.083015][ T5105] ? kobject_add_internal+0x25f/0x930 [ 109.083026][ T5105] ? kobject_add_internal+0x25f/0x930 [ 109.083037][ T5105] ? do_raw_spin_unlock+0x145/0x1e0 [ 109.083050][ T5105] kobject_add_internal+0x2c8/0x930 [ 109.083062][ T5105] kobject_add+0x16a/0x1e0 [ 109.083073][ T5105] ? __pfx_kobject_add+0x10/0x10 [ 109.083083][ T5105] ? class_to_subsys+0x10f/0x150 [ 109.083097][ T5105] ? kobject_put+0xb9/0x640 [ 109.083112][ T5105] ? _raw_spin_unlock+0x28/0x50 [ 109.083129][ T5105] device_add+0x294/0x1950 [ 109.083141][ T5105] ? __pfx_dev_set_name+0x10/0x10 [ 109.083155][ T5105] ? __pfx_device_add+0x10/0x10 [ 109.083166][ T5105] ? mgmt_send_event_skb+0x2fb/0x460 [ 109.083183][ T5105] hci_conn_add_sysfs+0x1a3/0x260 [ 109.083201][ T5105] le_conn_complete_evt+0x11eb/0x1f60 [ 109.083218][ T5105] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 109.083235][ T5105] hci_le_conn_complete_evt+0x23c/0x3a0 [ 109.083249][ T5105] ? skb_pull_data+0x15f/0x1e0 [ 109.083264][ T5105] hci_le_meta_evt+0x34a/0x5f0 [ 109.083278][ T5105] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 109.083294][ T5105] hci_event_packet+0x51c/0xcd0 [ 109.083307][ T5105] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 109.083322][ T5105] ? __pfx_hci_event_packet+0x10/0x10 [ 109.083336][ T5105] ? kcov_remote_start+0x374/0x660 [ 109.083350][ T5105] ? lockdep_hardirqs_on+0x78/0x100 [ 109.083368][ T5105] hci_rx_work+0x451/0xfc0 [ 109.083384][ T5105] process_one_work+0xa0e/0x1980 [ 109.083406][ T5105] ? __pfx_process_one_work+0x10/0x10 [ 109.083421][ T5105] ? __pfx_hci_rx_work+0x10/0x10 [ 109.083436][ T5105] worker_thread+0x5ef/0xe50 [ 109.083452][ T5105] ? kthread+0x13a/0x450 [ 109.083467][ T5105] ? __pfx_worker_thread+0x10/0x10 [ 109.083477][ T5105] kthread+0x370/0x450 [ 109.083493][ T5105] ? __pfx_kthread+0x10/0x10 [ 109.083510][ T5105] ret_from_fork+0x72b/0xd50 [ 109.083522][ T5105] ? __pfx_ret_from_fork+0x10/0x10 [ 109.083533][ T5105] ? __switch_to+0x800/0x1100 [ 109.083548][ T5105] ? __pfx_kthread+0x10/0x10 [ 109.083565][ T5105] ret_from_fork_asm+0x1a/0x30 [ 109.083585][ T5105] [ 109.083599][ T5105] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 109.188496][ T5105] Bluetooth: hci1: failed to register connection device [ 109.827017][ T40] audit: type=1326 audit(1780816554.589:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6684 comm="syz.3.222" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46f7c code=0x7ffc0000 [ 109.833493][ T40] audit: type=1326 audit(1780816554.609:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6684 comm="syz.3.222" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f46f7c code=0x7ffc0000 [ 109.841731][ T40] audit: type=1326 audit(1780816554.609:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6684 comm="syz.3.222" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46f7c code=0x7ffc0000 [ 109.851091][ T40] audit: type=1326 audit(1780816554.619:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6684 comm="syz.3.222" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46f7c code=0x7ffc0000 [ 109.860323][ T40] audit: type=1326 audit(1780816554.649:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6684 comm="syz.3.222" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f46f7c code=0x7ffc0000 [ 109.870881][ T40] audit: type=1326 audit(1780816554.649:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6684 comm="syz.3.222" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46f7c code=0x7ffc0000 [ 110.166036][ T5745] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 110.329417][ T5745] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 110.332781][ T5745] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 110.336978][ T5745] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 110.340197][ T5745] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 110.343732][ T5745] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 110.348924][ T5745] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 110.351713][ T5745] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 110.354254][ T5745] usb 6-1: Product: syz [ 110.355935][ T5745] usb 6-1: Manufacturer: syz [ 110.361972][ T5745] cdc_wdm 6-1:1.0: skipping garbage [ 110.364046][ T5745] cdc_wdm 6-1:1.0: skipping garbage [ 110.368138][ T5745] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 110.370092][ T5745] cdc_wdm 6-1:1.0: Unknown control protocol [ 110.975962][ T5824] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 111.136009][ T5824] usb 7-1: Using ep0 maxpacket: 32 [ 111.140798][ T5824] usb 7-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 111.143772][ T5824] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.146262][ T5824] usb 7-1: Product: syz [ 111.147577][ T5824] usb 7-1: Manufacturer: syz [ 111.149004][ T5824] usb 7-1: SerialNumber: syz [ 111.154582][ T5824] usb 7-1: config 0 descriptor?? [ 111.159317][ T5824] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 111.162609][ T5824] dvb-usb: bulk message failed: -22 (4/0) [ 111.164782][ T5824] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 111.168165][ T5824] dvb-usb: bulk message failed: -22 (5/0) [ 111.170013][ T5824] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 111.181023][ T5824] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 111.185502][ T5824] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 111.188992][ T5824] usb 7-1: media controller created [ 111.203119][ T5824] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 111.224573][ T5824] usb 7-1: selecting invalid altsetting 3 [ 111.227779][ T5824] ttusb2: set interface to alts=3 failed [ 111.255629][ T5824] DVB: Unable to find symbol tda10086_attach() [ 111.258680][ T5824] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 111.262597][ T5824] dvb-usb: bulk message failed: -22 (4/0) [ 111.265807][ T5824] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 111.268946][ T5824] dvb-usb: bulk message failed: -22 (5/0) [ 111.270642][ T5824] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 111.273620][ T5824] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 111.336364][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - 7 bytes [ 111.370851][ T6714] ttusb2: more than 2 i2c messages at a time is not handled yet. TODO. [ 111.374826][ T6714] dvb-usb: bulk message failed: -22 (7/0) [ 111.378856][ T6714] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 111.383620][ T6714] ttusb2: i2c transfer failed. [ 111.476650][ T5895] usb 7-1: USB disconnect, device number 6 [ 111.526514][ T5895] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 112.072709][ T6722] Driver unsupported XDP return value 0 on prog (id 36) dev N/A, expect packet loss! [ 112.406609][ T6140] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 112.968776][ T9] usb 6-1: USB disconnect, device number 8 [ 115.377525][ T5105] Bluetooth: hci1: command 0x0406 tx timeout [ 116.427693][ T6776] exFAT-fs (nbd0): unable to read boot sector [ 116.430331][ T6776] exFAT-fs (nbd0): failed to read boot sector [ 116.432861][ T6776] exFAT-fs (nbd0): failed to recognize exfat type [ 116.447030][ T6776] syz1: rxe_newlink: already configured on bond0 [ 116.810837][ T6781] netlink: 28 bytes leftover after parsing attributes in process `syz.1.251'. [ 116.814502][ T6781] netlink: 'syz.1.251': attribute type 7 has an invalid length. [ 116.819491][ T6781] netlink: 'syz.1.251': attribute type 8 has an invalid length. [ 116.826157][ T6781] netlink: 4 bytes leftover after parsing attributes in process `syz.1.251'. [ 116.834924][ T6781] bond0: entered promiscuous mode [ 116.838016][ T6781] bond_slave_0: entered promiscuous mode [ 116.840530][ T6781] bond_slave_1: entered promiscuous mode [ 116.844460][ T6781] bond0: left promiscuous mode [ 116.846819][ T6781] bond_slave_0: left promiscuous mode [ 116.849251][ T6781] bond_slave_1: left promiscuous mode [ 117.097744][ T6796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.257'. [ 117.384752][ T6804] Zero length message leads to an empty skb [ 117.441371][ T6805] exFAT-fs (nbd3): unable to read boot sector [ 117.444110][ T6805] exFAT-fs (nbd3): failed to read boot sector [ 117.446192][ T6805] exFAT-fs (nbd3): failed to recognize exfat type [ 117.458725][ T6805] rdma_rxe: rxe_newlink: failed to add bond0 [ 118.045446][ T6809] pim6reg: entered allmulticast mode [ 118.129146][ T6809] team0: entered allmulticast mode [ 118.130908][ T6809] team_slave_0: entered allmulticast mode [ 118.132933][ T6809] team_slave_1: entered allmulticast mode [ 118.157900][ T6809] team0: left allmulticast mode [ 118.160109][ T6809] team_slave_0: left allmulticast mode [ 118.162674][ T6809] team_slave_1: left allmulticast mode [ 118.165780][ T6809] pim6reg: left allmulticast mode [ 120.129713][ T6824] netlink: 16 bytes leftover after parsing attributes in process `syz.1.263'. [ 120.202924][ T6826] netlink: 28 bytes leftover after parsing attributes in process `syz.1.264'. [ 120.205732][ T6826] netlink: 'syz.1.264': attribute type 7 has an invalid length. [ 120.208294][ T6826] netlink: 'syz.1.264': attribute type 8 has an invalid length. [ 120.210754][ T6826] netlink: 4 bytes leftover after parsing attributes in process `syz.1.264'. [ 120.459677][ T6836] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.269'. [ 121.062444][ T6850] netlink: 16 bytes leftover after parsing attributes in process `syz.1.273'. [ 121.979756][ T6866] netlink: 28 bytes leftover after parsing attributes in process `syz.1.276'. [ 121.982566][ T6866] netlink: 'syz.1.276': attribute type 7 has an invalid length. [ 121.984963][ T6866] netlink: 'syz.1.276': attribute type 8 has an invalid length. [ 121.987516][ T6866] netlink: 4 bytes leftover after parsing attributes in process `syz.1.276'. [ 122.177716][ T6875] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.280'. [ 124.459363][ T6910] netlink: 28 bytes leftover after parsing attributes in process `syz.0.290'. [ 124.467009][ T6910] netlink: 'syz.0.290': attribute type 7 has an invalid length. [ 124.475258][ T6910] netlink: 'syz.0.290': attribute type 8 has an invalid length. [ 124.479012][ T6910] netlink: 4 bytes leftover after parsing attributes in process `syz.0.290'. [ 126.654911][ T6936] netlink: 72 bytes leftover after parsing attributes in process `syz.3.297'. [ 126.909016][ T6943] netlink: 28 bytes leftover after parsing attributes in process `syz.1.300'. [ 126.914491][ T6943] netlink: 'syz.1.300': attribute type 7 has an invalid length. [ 126.918711][ T6943] netlink: 'syz.1.300': attribute type 8 has an invalid length. [ 126.921814][ T6943] netlink: 4 bytes leftover after parsing attributes in process `syz.1.300'. [ 126.929789][ T6943] team0: entered promiscuous mode [ 126.931584][ T6943] team_slave_0: entered promiscuous mode [ 126.933467][ T6943] team_slave_1: entered promiscuous mode [ 126.938384][ T6943] bond0: entered promiscuous mode [ 126.940059][ T6943] bond_slave_0: entered promiscuous mode [ 126.941885][ T6943] bond_slave_1: entered promiscuous mode [ 126.944313][ T6943] erspan0: entered promiscuous mode [ 126.946907][ T6943] hsr1: Slave A (team0) is not up; please bring it up to get a fully working HSR network [ 126.950235][ T6943] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 127.067245][ T6953] fuse: Unknown parameter '' [ 127.533203][ T5115] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 127.703512][ T5115] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.710358][ T5115] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.715078][ T5115] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 127.722080][ T5115] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 127.726622][ T5115] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.733325][ T5115] usb 6-1: config 0 descriptor?? [ 127.914515][ T24] libceph: connect (1)[c::]:6789 error -101 [ 127.919568][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 127.923405][ T24] libceph: connect (1)[c::]:6789 error -101 [ 127.925358][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 128.022529][ T6965] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 128.024785][ T6965] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 128.029168][ T6965] vhci_hcd vhci_hcd.0: Device attached [ 128.163238][ T5115] plantronics 0003:047F:FFFF.0002: reserved main item tag 0xd [ 128.187453][ T24] libceph: connect (1)[c::]:6789 error -101 [ 128.198001][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 128.215268][ T5115] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 128.249749][ T6969] vhci_hcd: connection closed [ 128.253736][ T6140] vhci_hcd vhci_hcd.3: stop threads [ 128.269795][ T6140] vhci_hcd vhci_hcd.3: release socket [ 128.281128][ T6140] vhci_hcd vhci_hcd.3: disconnect device [ 128.318135][ T5851] usb 44-1: enqueue for inactive port 0 [ 128.358141][ T5824] libceph: connect (1)[c::]:6789 error -101 [ 128.361769][ T5824] libceph: mon0 (1)[c::]:6789 connect error [ 128.436151][ T6958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.439947][ T6958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.451574][ T5831] usb 6-1: USB disconnect, device number 9 [ 128.626253][ T5824] libceph: connect (1)[c::]:6789 error -101 [ 128.628594][ T5824] libceph: mon0 (1)[c::]:6789 connect error [ 128.726041][ T5115] libceph: connect (1)[c::]:6789 error -101 [ 128.728628][ T5115] libceph: mon0 (1)[c::]:6789 connect error [ 128.741362][ T6962] ceph: No mds server is up or the cluster is laggy [ 128.744894][ T6976] ceph: No mds server is up or the cluster is laggy [ 128.817269][ T5851] usb usb44-port1: attempt power cycle [ 129.147770][ T6994] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.314'. [ 129.409308][ T5851] usb usb44-port1: unable to enumerate USB device [ 129.500226][ T7006] netlink: 28 bytes leftover after parsing attributes in process `syz.1.317'. [ 129.504519][ T7006] netlink: 'syz.1.317': attribute type 7 has an invalid length. [ 129.507247][ T7006] netlink: 'syz.1.317': attribute type 8 has an invalid length. [ 129.512659][ T7006] netlink: 4 bytes leftover after parsing attributes in process `syz.1.317'. [ 130.017044][ T7014] fuse: Unknown parameter '' [ 130.854386][ T7020] netlink: 27 bytes leftover after parsing attributes in process `syz.2.323'. [ 130.912912][ T7023] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.324'. [ 130.931232][ T7024] exFAT-fs (nbd1): unable to read boot sector [ 130.944648][ T7024] exFAT-fs (nbd1): failed to read boot sector [ 130.947792][ T7024] exFAT-fs (nbd1): failed to recognize exfat type [ 130.958213][ T7024] rdma_rxe: rxe_newlink: failed to add bond0 [ 131.039811][ T7028] netlink: 28 bytes leftover after parsing attributes in process `syz.2.326'. [ 131.042625][ T7028] netlink: 'syz.2.326': attribute type 7 has an invalid length. [ 131.045031][ T7028] netlink: 'syz.2.326': attribute type 8 has an invalid length. [ 131.047796][ T7028] netlink: 4 bytes leftover after parsing attributes in process `syz.2.326'. [ 131.054885][ T7028] team0: entered promiscuous mode [ 131.057249][ T7028] team_slave_0: entered promiscuous mode [ 131.059777][ T7028] team_slave_1: entered promiscuous mode [ 131.062399][ T7028] bond0: entered promiscuous mode [ 131.064023][ T7028] bond_slave_0: entered promiscuous mode [ 131.065945][ T7028] bond_slave_1: entered promiscuous mode [ 131.068311][ T7028] erspan0: entered promiscuous mode [ 131.070693][ T7028] debugfs: 'hsr1' already exists in 'hsr' [ 131.072513][ T7028] Cannot create hsr debugfs directory [ 131.074255][ T7028] hsr1: Slave A (team0) is not up; please bring it up to get a fully working HSR network [ 131.077296][ T7028] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 131.080349][ T7028] hsr1: Interlink (erspan0) is not up; please bring it up to get a fully working HSR network [ 131.084699][ T7028] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 132.114581][ T7045] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.333'. [ 133.799796][ T7072] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.342'. [ 134.909786][ T7088] netlink: 28 bytes leftover after parsing attributes in process `syz.2.348'. [ 134.914325][ T7088] netlink: 'syz.2.348': attribute type 7 has an invalid length. [ 134.917426][ T7088] netlink: 'syz.2.348': attribute type 8 has an invalid length. [ 134.919824][ T7088] netlink: 4 bytes leftover after parsing attributes in process `syz.2.348'. [ 135.643527][ T7096] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.351'. [ 135.867255][ T7104] netlink: 36 bytes leftover after parsing attributes in process `syz.0.354'. [ 136.116318][ T24] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 136.297721][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.306519][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.314915][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 136.330409][ T24] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 136.340761][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.341965][ T7111] /dev/nullb0: Can't open blockdev [ 136.349972][ T24] usb 5-1: config 0 descriptor?? [ 136.797331][ T7136] fuse: Unknown parameter '' [ 136.922481][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 136.924527][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 136.936121][ T24] usb 5-1: USB disconnect, device number 3 [ 137.091451][ T7144] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 137.095828][ T7144] File: /dev/nullb0 PID: 7144 Comm: syz.1.359 [ 137.367205][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.370093][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.513997][ T7162] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.361'. [ 138.051682][ T7187] netlink: 4 bytes leftover after parsing attributes in process `syz.0.369'. [ 138.075027][ T7187] netlink: 12 bytes leftover after parsing attributes in process `syz.0.369'. [ 139.180653][ T7193] netlink: 28 bytes leftover after parsing attributes in process `syz.1.370'. [ 139.183418][ T7193] netlink: 'syz.1.370': attribute type 7 has an invalid length. [ 139.185770][ T7193] netlink: 'syz.1.370': attribute type 8 has an invalid length. [ 139.188424][ T7193] netlink: 4 bytes leftover after parsing attributes in process `syz.1.370'. [ 139.465794][ T7195] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.371'. [ 139.761891][ T7209] exFAT-fs (nbd0): unable to read boot sector [ 139.764602][ T7209] exFAT-fs (nbd0): failed to read boot sector [ 139.767145][ T7209] exFAT-fs (nbd0): failed to recognize exfat type [ 139.816940][ T7212] syz1: rxe_newlink: already configured on bond0 [ 139.856030][ T5859] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 140.019886][ T5859] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.027308][ T5859] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.032110][ T5859] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 140.039799][ T5859] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 140.043591][ T5859] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.087545][ T5859] usb 6-1: config 0 descriptor?? [ 140.314827][ T5859] usbhid 6-1:0.0: can't add hid device: -71 [ 140.321695][ T5859] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 140.328287][ T5859] usb 6-1: USB disconnect, device number 10 [ 140.645907][ T7222] __nla_validate_parse: 1 callbacks suppressed [ 140.645918][ T7222] netlink: 28 bytes leftover after parsing attributes in process `syz.2.379'. [ 140.651961][ T7222] netlink: 28 bytes leftover after parsing attributes in process `syz.2.379'. [ 141.435026][ T7232] fuse: Unknown parameter '' [ 141.834174][ T7236] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.383'. [ 142.161225][ T7251] netlink: 16 bytes leftover after parsing attributes in process `syz.0.389'. [ 142.418690][ T7256] netlink: 28 bytes leftover after parsing attributes in process `syz.1.391'. [ 142.428416][ T7256] netlink: 28 bytes leftover after parsing attributes in process `syz.1.391'. [ 142.431489][ T1270] Bluetooth: Error in BCSP hdr checksum [ 142.694741][ T6142] Bluetooth: Error in BCSP hdr checksum [ 142.947302][ T1270] Bluetooth: Error in BCSP hdr checksum [ 143.766826][ T6142] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 143.947899][ T7266] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.393'. [ 144.246007][ T5105] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 144.251277][ T5753] Bluetooth: hci4: command 0x1003 tx timeout [ 144.255781][ T7281] netlink: 28 bytes leftover after parsing attributes in process `syz.1.400'. [ 144.266087][ T7281] netlink: 28 bytes leftover after parsing attributes in process `syz.1.400'. [ 144.510440][ T7290] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.403'. [ 146.448776][ T7324] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.413'. [ 146.450188][ T7323] netlink: 28 bytes leftover after parsing attributes in process `syz.0.414'. [ 146.455454][ T7323] netlink: 28 bytes leftover after parsing attributes in process `syz.0.414'. [ 146.463150][ T7323] team0: entered promiscuous mode [ 146.465132][ T7323] team_slave_0: entered promiscuous mode [ 146.468769][ T7323] team_slave_1: entered promiscuous mode [ 146.473429][ T7323] bond0: entered promiscuous mode [ 146.475358][ T7323] bond_slave_0: entered promiscuous mode [ 146.477600][ T7323] bond_slave_1: entered promiscuous mode [ 146.480280][ T7323] debugfs: 'hsr1' already exists in 'hsr' [ 146.482322][ T7323] Cannot create hsr debugfs directory [ 146.484207][ T7323] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 146.683985][ T7332] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.417'. [ 147.629926][ T7346] netlink: 28 bytes leftover after parsing attributes in process `syz.3.424'. [ 147.632822][ T7346] netlink: 28 bytes leftover after parsing attributes in process `syz.3.424'. [ 147.640638][ T7346] team0: entered promiscuous mode [ 147.642775][ T7346] team_slave_0: entered promiscuous mode [ 147.644816][ T7346] team_slave_1: entered promiscuous mode [ 147.649361][ T7346] bond0: entered promiscuous mode [ 147.650925][ T7346] bond_slave_0: entered promiscuous mode [ 147.652762][ T7346] bond_slave_1: entered promiscuous mode [ 147.656195][ T7346] debugfs: 'hsr1' already exists in 'hsr' [ 147.657984][ T7346] Cannot create hsr debugfs directory [ 147.660931][ T7346] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 147.796107][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 147.852652][ T7356] Bluetooth: hci4: Frame reassembly failed (-84) [ 147.867268][ T6140] Bluetooth: hci4: Frame reassembly failed (-84) [ 147.870634][ T6140] Bluetooth: hci4: Frame reassembly failed (-84) [ 147.873433][ T6140] Bluetooth: hci4: Frame reassembly failed (-84) [ 147.894160][ T7357] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.426'. [ 147.958692][ T9] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 147.965625][ T9] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 147.969718][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 147.973293][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 147.977665][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 147.986459][ T9] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 147.990229][ T9] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 147.999461][ T9] usb 5-1: Product: syz [ 148.003841][ T9] usb 5-1: Manufacturer: syz [ 148.026169][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 148.028216][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 148.040628][ T9] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 148.048140][ T9] cdc_wdm 5-1:1.0: Unknown control protocol [ 149.020349][ C2] cdc_wdm 5-1:1.0: nonzero urb status received: -EPIPE [ 149.659658][ T7382] netlink: 28 bytes leftover after parsing attributes in process `syz.2.436'. [ 149.662361][ T7382] netlink: 28 bytes leftover after parsing attributes in process `syz.2.436'. [ 149.715034][ T7383] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.433'. [ 149.927111][ T5105] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 149.927186][ T5753] Bluetooth: hci4: command 0x1003 tx timeout [ 150.122570][ T7389] fuse: Unknown parameter '' [ 150.718003][ T9] usb 5-1: USB disconnect, device number 4 [ 150.867931][ T7405] fuse: Unknown parameter '' [ 150.883343][ T12] Bluetooth: hci4: Frame reassembly failed (-84) [ 150.887285][ T7404] Bluetooth: hci4: Frame reassembly failed (-84) [ 151.471189][ T7420] Bluetooth: hci5: Frame reassembly failed (-84) [ 151.475471][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 152.886575][ T5757] Bluetooth: hci4: command 0x1003 tx timeout [ 152.886609][ T5105] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 153.525980][ T5105] Bluetooth: hci5: command 0x1003 tx timeout [ 153.526012][ T5753] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 153.601005][ T7437] exFAT-fs (nbd1): unable to read boot sector [ 153.603620][ T7437] exFAT-fs (nbd1): failed to read boot sector [ 153.606288][ T7437] exFAT-fs (nbd1): failed to recognize exfat type [ 153.616251][ T7437] rdma_rxe: rxe_newlink: failed to add bond0 [ 154.320808][ T7445] __nla_validate_parse: 2 callbacks suppressed [ 154.320843][ T7445] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.454'. [ 154.869085][ T7454] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.459'. [ 155.032873][ T7458] netlink: 28 bytes leftover after parsing attributes in process `syz.1.460'. [ 155.036873][ T7458] netlink: 28 bytes leftover after parsing attributes in process `syz.1.460'. [ 156.283582][ T7480] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.467'. [ 157.094482][ T7489] fuse: Unknown parameter '' [ 157.235401][ T7492] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.471'. [ 158.073592][ T7504] exFAT-fs (nbd2): unable to read boot sector [ 158.076006][ T7504] exFAT-fs (nbd2): failed to read boot sector [ 158.077866][ T7504] exFAT-fs (nbd2): failed to recognize exfat type [ 158.474992][ T7514] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.475'. [ 158.765983][ T5745] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 158.823615][ T7516] rdma_rxe: rxe_newlink: failed to add bond0 [ 159.370428][ T5745] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 159.375492][ T5745] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 159.379685][ T5745] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 159.383312][ T5745] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 159.387117][ T5745] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 159.393631][ T5745] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 159.401999][ T5745] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 159.409880][ T5745] usb 5-1: Product: syz [ 159.411584][ T5745] usb 5-1: Manufacturer: syz [ 159.446183][ T5745] cdc_wdm 5-1:1.0: skipping garbage [ 159.455903][ T5745] cdc_wdm 5-1:1.0: skipping garbage [ 159.459758][ T5745] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 159.464782][ T5745] cdc_wdm 5-1:1.0: Unknown control protocol [ 159.505109][ T7527] netlink: 28 bytes leftover after parsing attributes in process `syz.1.480'. [ 159.508114][ T7527] netlink: 28 bytes leftover after parsing attributes in process `syz.1.480'. [ 159.560344][ T7528] /dev/nullb0: Can't open blockdev [ 160.008148][ T7561] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.484'. [ 160.520502][ T7591] netlink: 36 bytes leftover after parsing attributes in process `syz.2.486'. [ 160.594890][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -EPIPE [ 160.756498][ T5745] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 160.919561][ T5745] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.925173][ T5745] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.929496][ T5745] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 160.933521][ T5745] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 160.936762][ T5745] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.941136][ T5745] usb 7-1: config 0 descriptor?? [ 161.165629][ T5745] usbhid 7-1:0.0: can't add hid device: -71 [ 161.167786][ T5745] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 161.176339][ T5745] usb 7-1: USB disconnect, device number 7 [ 161.627767][ T7607] netlink: 28 bytes leftover after parsing attributes in process `syz.3.489'. [ 161.631430][ T7607] netlink: 28 bytes leftover after parsing attributes in process `syz.3.489'. [ 161.662298][ T5745] usb 5-1: USB disconnect, device number 5 [ 161.738971][ T7611] Bluetooth: hci4: Frame reassembly failed (-84) [ 161.742598][ T121] Bluetooth: hci4: Frame reassembly failed (-84) [ 161.744562][ T6142] Bluetooth: hci4: Frame reassembly failed (-84) [ 161.912194][ T7622] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.495'. [ 162.007779][ T7626] exFAT-fs (nbd2): unable to read boot sector [ 162.009878][ T7626] exFAT-fs (nbd2): failed to read boot sector [ 162.012314][ T7626] exFAT-fs (nbd2): failed to recognize exfat type [ 162.020174][ T7626] rdma_rxe: rxe_newlink: failed to add bond0 [ 163.165932][ T5859] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 163.317734][ T5859] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 163.324759][ T5859] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 163.332676][ T5859] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 163.338145][ T5859] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 163.345961][ T5859] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 163.353538][ T5859] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 163.356368][ T5859] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 163.358623][ T5859] usb 5-1: Product: syz [ 163.360005][ T5859] usb 5-1: Manufacturer: syz [ 163.367612][ T5859] cdc_wdm 5-1:1.0: skipping garbage [ 163.369479][ T5859] cdc_wdm 5-1:1.0: skipping garbage [ 163.373942][ T5859] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 163.375820][ T5859] cdc_wdm 5-1:1.0: Unknown control protocol [ 163.532559][ T7636] netlink: 28 bytes leftover after parsing attributes in process `syz.2.500'. [ 163.535380][ T7636] netlink: 28 bytes leftover after parsing attributes in process `syz.2.500'. [ 163.765926][ T5105] Bluetooth: hci4: command 0x1003 tx timeout [ 163.769429][ T5753] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 163.948592][ T7645] netlink: 36 bytes leftover after parsing attributes in process `syz.3.503'. [ 164.313422][ C2] cdc_wdm 5-1:1.0: nonzero urb status received: -EPIPE [ 164.651462][ T7660] fuse: Unknown parameter '' [ 165.459520][ T7668] __nla_validate_parse: 1 callbacks suppressed [ 165.459537][ T7668] netlink: 28 bytes leftover after parsing attributes in process `syz.2.510'. [ 165.465793][ T7668] netlink: 28 bytes leftover after parsing attributes in process `syz.2.510'. [ 165.582015][ T7672] exFAT-fs (nbd1): unable to read boot sector [ 165.583923][ T7672] exFAT-fs (nbd1): failed to read boot sector [ 165.585962][ T7672] exFAT-fs (nbd1): failed to recognize exfat type [ 165.592316][ T7672] rdma_rxe: rxe_newlink: failed to add bond0 [ 166.092296][ T5859] usb 5-1: USB disconnect, device number 6 [ 166.573449][ T121] Bluetooth: hci4: Frame reassembly failed (-84) [ 166.586120][ T7682] Bluetooth: hci4: Frame reassembly failed (-84) [ 166.616100][ T7684] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.514'. [ 167.550955][ T7699] netlink: 28 bytes leftover after parsing attributes in process `syz.1.519'. [ 167.566561][ T7699] netlink: 28 bytes leftover after parsing attributes in process `syz.1.519'. [ 167.896749][ T5859] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 168.067260][ T7709] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.523'. [ 168.077262][ T5859] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 168.080079][ T5859] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 168.083206][ T5859] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 168.086163][ T5859] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 168.089719][ T5859] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 168.094380][ T5859] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 168.097882][ T5859] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 168.100367][ T5859] usb 6-1: Product: syz [ 168.101669][ T5859] usb 6-1: Manufacturer: syz [ 168.112483][ T5859] cdc_wdm 6-1:1.0: skipping garbage [ 168.114193][ T5859] cdc_wdm 6-1:1.0: skipping garbage [ 168.119621][ T5859] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 168.121466][ T5859] cdc_wdm 6-1:1.0: Unknown control protocol [ 168.272522][ T7711] netlink: 36 bytes leftover after parsing attributes in process `syz.3.524'. [ 168.646685][ T5105] Bluetooth: hci4: command 0x1003 tx timeout [ 168.650344][ T5753] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 168.823738][ T7719] exFAT-fs (nbd2): unable to read boot sector [ 168.825749][ T7719] exFAT-fs (nbd2): failed to read boot sector [ 168.827938][ T7719] exFAT-fs (nbd2): failed to recognize exfat type [ 168.857035][ T7719] rdma_rxe: rxe_newlink: failed to add bond0 [ 169.615632][ T7725] netlink: 28 bytes leftover after parsing attributes in process `syz.0.528'. [ 169.618579][ T7725] netlink: 28 bytes leftover after parsing attributes in process `syz.0.528'. [ 170.699950][ T29] usb 6-1: USB disconnect, device number 11 [ 171.730650][ T7752] netlink: 28 bytes leftover after parsing attributes in process `syz.3.537'. [ 171.734463][ T7752] netlink: 28 bytes leftover after parsing attributes in process `syz.3.537'. [ 172.644158][ T7766] exFAT-fs (nbd3): unable to read boot sector [ 172.646779][ T7766] exFAT-fs (nbd3): failed to read boot sector [ 172.649228][ T7766] exFAT-fs (nbd3): failed to recognize exfat type [ 172.659915][ T7766] rdma_rxe: rxe_newlink: failed to add bond0 [ 172.709182][ T7768] netlink: 36 bytes leftover after parsing attributes in process `syz.1.542'. [ 172.975958][ T5851] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 173.013758][ T7773] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.543'. [ 173.129305][ T5851] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.133886][ T5851] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.139661][ T5851] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 173.144958][ T5851] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 173.152919][ T5851] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.161171][ T5851] usb 6-1: config 0 descriptor?? [ 173.402095][ T5851] usbhid 6-1:0.0: can't add hid device: -71 [ 173.404617][ T5851] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 173.420238][ T5851] usb 6-1: USB disconnect, device number 12 [ 173.467485][ T121] Bluetooth: hci4: Frame reassembly failed (-84) [ 173.469436][ T6142] Bluetooth: hci4: Frame reassembly failed (-84) [ 173.473390][ T7778] Bluetooth: hci4: Frame reassembly failed (-84) [ 173.885090][ T7782] netlink: 28 bytes leftover after parsing attributes in process `syz.0.546'. [ 173.888870][ T7782] netlink: 28 bytes leftover after parsing attributes in process `syz.0.546'. [ 174.263191][ T7799] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.553'. [ 175.192752][ T7810] netlink: 28 bytes leftover after parsing attributes in process `syz.1.556'. [ 175.195517][ T7810] netlink: 28 bytes leftover after parsing attributes in process `syz.1.556'. [ 175.202739][ T7811] exFAT-fs (nbd3): unable to read boot sector [ 175.204663][ T7811] exFAT-fs (nbd3): failed to read boot sector [ 175.206711][ T7811] exFAT-fs (nbd3): failed to recognize exfat type [ 175.214135][ T7811] rdma_rxe: rxe_newlink: failed to add bond0 [ 175.525965][ T5753] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 175.776032][ T121] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 175.912223][ T7815] netlink: 36 bytes leftover after parsing attributes in process `syz.2.558'. [ 176.145976][ T5851] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 176.307308][ T5851] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.310787][ T5851] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.313700][ T5851] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 176.317936][ T5851] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 176.320675][ T5851] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.326877][ T5851] usb 7-1: config 0 descriptor?? [ 176.540582][ T5851] usbhid 7-1:0.0: can't add hid device: -71 [ 176.545690][ T5851] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 176.554650][ T5851] usb 7-1: USB disconnect, device number 8 [ 176.804972][ T1270] Bluetooth: hci4: Frame reassembly failed (-84) [ 176.807397][ T7831] Bluetooth: hci4: Frame reassembly failed (-84) [ 177.283264][ T7837] netlink: 28 bytes leftover after parsing attributes in process `syz.1.565'. [ 177.285910][ T7837] netlink: 28 bytes leftover after parsing attributes in process `syz.1.565'. [ 178.767348][ T7848] Bluetooth: hci5: Frame reassembly failed (-84) [ 178.779332][ T121] Bluetooth: hci5: Frame reassembly failed (-84) [ 178.806086][ T5753] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 178.809115][ T5751] Bluetooth: hci4: command 0x1003 tx timeout [ 179.318796][ T7862] exFAT-fs (nbd3): unable to read boot sector [ 179.321130][ T7862] exFAT-fs (nbd3): failed to read boot sector [ 179.323239][ T7862] exFAT-fs (nbd3): failed to recognize exfat type [ 179.640199][ T7867] rdma_rxe: rxe_newlink: failed to add bond0 [ 180.409117][ T5753] Bluetooth: hci1: command 0x0406 tx timeout [ 180.411107][ T5753] Bluetooth: hci2: command 0x0406 tx timeout [ 180.485965][ T5753] Bluetooth: hci0: command 0x0406 tx timeout [ 180.806059][ T5753] Bluetooth: hci5: command 0x1003 tx timeout [ 180.811652][ T5759] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 181.099733][ T7873] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.572'. [ 181.586468][ T7876] netlink: 36 bytes leftover after parsing attributes in process `syz.1.573'. [ 181.844246][ T7879] netlink: 28 bytes leftover after parsing attributes in process `syz.3.574'. [ 181.845946][ T5851] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 181.847184][ T7879] netlink: 28 bytes leftover after parsing attributes in process `syz.3.574'. [ 182.018756][ T5851] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.022012][ T5851] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.025057][ T5851] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 182.029062][ T5851] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 182.031817][ T5851] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.035364][ T5851] usb 6-1: config 0 descriptor?? [ 182.292434][ T5851] usbhid 6-1:0.0: can't add hid device: -71 [ 182.294445][ T5851] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 182.305970][ T5851] usb 6-1: USB disconnect, device number 13 [ 183.531162][ T121] Bluetooth: hci4: Frame reassembly failed (-84) [ 183.540496][ T7900] Bluetooth: hci4: Frame reassembly failed (-84) [ 183.763962][ T7909] exFAT-fs (nbd3): unable to read boot sector [ 183.766769][ T7909] exFAT-fs (nbd3): failed to read boot sector [ 183.769365][ T7909] exFAT-fs (nbd3): failed to recognize exfat type [ 183.843087][ T7910] rdma_rxe: rxe_newlink: failed to add bond0 [ 184.059047][ T7913] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.582'. [ 184.617350][ T7915] Bluetooth: hci5: Frame reassembly failed (-84) [ 184.624622][ T1270] Bluetooth: hci5: Frame reassembly failed (-84) [ 184.935676][ T7918] fuse: Unknown parameter '' [ 185.258761][ T7923] netlink: 28 bytes leftover after parsing attributes in process `syz.3.584'. [ 185.267049][ T7923] netlink: 28 bytes leftover after parsing attributes in process `syz.3.584'. [ 185.529607][ T5757] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 186.418826][ T7934] netlink: 36 bytes leftover after parsing attributes in process `syz.2.587'. [ 186.647513][ T5105] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 186.686082][ T5851] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 186.867985][ T5851] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.872250][ T5851] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.876331][ T5851] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 186.881325][ T5851] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 186.884787][ T5851] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.890767][ T5851] usb 7-1: config 0 descriptor?? [ 187.220578][ T5851] usbhid 7-1:0.0: can't add hid device: -71 [ 187.647366][ T5851] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 187.976992][ T5851] usb 7-1: USB disconnect, device number 9 [ 188.256029][ T50] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 188.375613][ T7960] Bluetooth: hci4: Frame reassembly failed (-84) [ 188.378930][ T58] Bluetooth: hci4: Frame reassembly failed (-84) [ 188.407379][ T50] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 188.410130][ T50] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 188.413166][ T50] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 188.417840][ T50] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 188.423529][ T50] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 188.433949][ T50] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 188.438679][ T50] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 188.443577][ T50] usb 5-1: Product: syz [ 188.444902][ T50] usb 5-1: Manufacturer: syz [ 188.454894][ T50] cdc_wdm 5-1:1.0: skipping garbage [ 188.459397][ T50] cdc_wdm 5-1:1.0: skipping garbage [ 188.466613][ T50] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 188.470977][ T50] cdc_wdm 5-1:1.0: Unknown control protocol [ 188.995629][ T58] Bluetooth: hci5: Frame reassembly failed (-84) [ 188.998788][ T7969] Bluetooth: hci5: Frame reassembly failed (-84) [ 190.405970][ T62] Bluetooth: hci4: command 0x1003 tx timeout [ 190.409175][ T5105] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 190.933080][ T7986] fuse: Unknown parameter '' [ 191.046102][ T5757] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 191.050043][ T5105] Bluetooth: hci5: command 0x1003 tx timeout [ 191.172623][ T5115] usb 5-1: USB disconnect, device number 7 [ 191.875641][ T6136] Bluetooth: hci4: Frame reassembly failed (-84) [ 191.879985][ T7996] Bluetooth: hci4: Frame reassembly failed (-84) [ 191.887952][ T6136] Bluetooth: hci4: Frame reassembly failed (-84) [ 192.237455][ T8011] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.607'. [ 193.936361][ T5757] Bluetooth: hci4: command 0x1003 tx timeout [ 193.938678][ T5105] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 194.043465][ T5831] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 194.135735][ T8034] netlink: 28 bytes leftover after parsing attributes in process `syz.0.615'. [ 194.138714][ T8034] netlink: 28 bytes leftover after parsing attributes in process `syz.0.615'. [ 194.197191][ T5831] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 194.200074][ T5831] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 194.203572][ T5831] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 194.206558][ T5831] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 194.210007][ T5831] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 194.214664][ T5831] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 194.217804][ T5831] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 194.220346][ T5831] usb 6-1: Product: syz [ 194.221651][ T5831] usb 6-1: Manufacturer: syz [ 194.228716][ T5831] cdc_wdm 6-1:1.0: skipping garbage [ 194.231073][ T5831] cdc_wdm 6-1:1.0: skipping garbage [ 194.234530][ T5831] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 194.236799][ T5831] cdc_wdm 6-1:1.0: Unknown control protocol [ 194.356917][ T8038] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.616'. [ 195.358576][ T8049] fuse: Unknown parameter '' [ 196.861767][ T5859] usb 6-1: USB disconnect, device number 14 [ 196.908326][ T8067] netlink: 28 bytes leftover after parsing attributes in process `syz.1.624'. [ 196.911239][ T8067] netlink: 28 bytes leftover after parsing attributes in process `syz.1.624'. [ 197.575694][ T6142] Bluetooth: hci4: Frame reassembly failed (-84) [ 197.579256][ T8074] Bluetooth: hci4: Frame reassembly failed (-84) [ 198.701229][ T8089] Bluetooth: hci5: Frame reassembly failed (-84) [ 198.704245][ T6136] Bluetooth: hci5: Frame reassembly failed (-84) [ 198.806798][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 198.809262][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.605924][ T5105] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 199.607963][ T62] Bluetooth: hci4: command 0x1003 tx timeout [ 200.726005][ T5105] Bluetooth: hci5: command 0x1003 tx timeout [ 200.726178][ T5757] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 202.518549][ T8145] Oops: general protection fault, probably for non-canonical address 0xe000080fe29dd18c: 0000 [#1] SMP KASAN NOPTI [ 202.522770][ T8145] KASAN: maybe wild-memory-access in range [0x0000607f14ee8c60-0x0000607f14ee8c67] [ 202.525664][ T8145] CPU: 3 UID: 0 PID: 8145 Comm: syz.3.646 Not tainted syzkaller #0 PREEMPT(full) [ 202.528410][ T8145] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 202.531449][ T8145] RIP: 0010:try_module_get+0x23/0xd0 [ 202.533296][ T8145] Code: 90 90 90 90 90 90 90 f3 0f 1e fa 48 85 ff 0f 84 9b 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 55 48 c1 ea 03 53 48 89 fb <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 89 00 00 00 83 3b 02 74 67 48 [ 202.540420][ T8145] RSP: 0000:ffffc900038cf8c0 EFLAGS: 00010202 [ 202.542760][ T8145] RAX: dffffc0000000000 RBX: 0000607f14ee8c60 RCX: ffffc90029f26000 [ 202.545648][ T8145] RDX: 00000c0fe29dd18c RSI: ffffffff87edd090 RDI: 0000607f14ee8c60 [ 202.548542][ T8145] RBP: ffff888029ecac00 R08: 0000000000000001 R09: fffffbfff1fdb865 [ 202.551600][ T8145] R10: ffffffff8fedc32f R11: 0000000000000000 R12: ffff88801385dc00 [ 202.554462][ T8145] R13: ffff8880258d2100 R14: ffff888029cadb40 R15: ffff88801385dc48 [ 202.557682][ T8145] FS: 0000000000000000(0000) GS:ffff88809748e000(0063) knlGS:00000000f4fa1b40 [ 202.560921][ T8145] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 202.563341][ T8145] CR2: 00000000f4f9fbc0 CR3: 0000000076a14000 CR4: 0000000000352ef0 [ 202.566400][ T8145] Call Trace: [ 202.567561][ T8145] [ 202.568722][ T8145] dvb_device_open+0x124/0x3b0 [ 202.570614][ T8145] ? __pfx_dvb_device_open+0x10/0x10 [ 202.572671][ T8145] chrdev_open+0x234/0x6a0 [ 202.574168][ T8145] ? __pfx_apparmor_file_open+0x10/0x10 [ 202.576109][ T8145] ? __pfx_chrdev_open+0x10/0x10 [ 202.578039][ T8145] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 202.580357][ T8145] do_dentry_open+0x6ab/0x14d0 [ 202.582279][ T8145] ? __pfx_chrdev_open+0x10/0x10 [ 202.584160][ T8145] vfs_open+0x82/0x3f0 [ 202.585659][ T8145] path_openat+0x208c/0x31a0 [ 202.587513][ T8145] ? asm_int80_emulation+0x1a/0x20 [ 202.589130][ T8145] ? __pfx_path_openat+0x10/0x10 [ 202.590654][ T8145] do_file_open+0x20e/0x430 [ 202.592065][ T8145] ? __pfx_do_file_open+0x10/0x10 [ 202.593664][ T8145] ? _raw_spin_unlock+0x28/0x50 [ 202.595182][ T8145] ? alloc_fd+0x476/0x790 [ 202.596535][ T8145] do_sys_openat2+0x10d/0x1e0 [ 202.597995][ T8145] ? __pfx_do_sys_openat2+0x10/0x10 [ 202.599891][ T8145] ? rto_push_irq_work_func+0xc9/0x180 [ 202.602075][ T8145] ? kvm_sched_clock_read+0x11/0x20 [ 202.603965][ T8145] ? sched_clock+0x38/0x60 [ 202.605835][ T8145] __ia32_compat_sys_openat+0x12d/0x210 [ 202.607857][ T8145] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 202.610232][ T8145] ? rcu_is_watching+0x12/0xc0 [ 202.612006][ T8145] do_int80_emulation+0x14b/0x720 [ 202.614040][ T8145] asm_int80_emulation+0x1a/0x20 [ 202.615887][ T8145] RIP: 0023:0xf71461ab [ 202.617506][ T8145] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 202.624695][ T8145] RSP: 002b:00000000f4fa103c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 202.627883][ T8145] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f4fa1100 [ 202.630927][ T8145] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 202.633948][ T8145] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 202.636819][ T8145] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 202.639924][ T8145] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 202.642908][ T8145] [ 202.644161][ T8145] Modules linked in: [ 202.645996][ T8145] ---[ end trace 0000000000000000 ]--- [ 202.648177][ T8145] RIP: 0010:try_module_get+0x23/0xd0 [ 202.650168][ T8145] Code: 90 90 90 90 90 90 90 f3 0f 1e fa 48 85 ff 0f 84 9b 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 55 48 c1 ea 03 53 48 89 fb <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 89 00 00 00 83 3b 02 74 67 48 [ 202.656686][ T8145] RSP: 0000:ffffc900038cf8c0 EFLAGS: 00010202 [ 202.658689][ T8145] RAX: dffffc0000000000 RBX: 0000607f14ee8c60 RCX: ffffc90029f26000 [ 202.661461][ T8145] RDX: 00000c0fe29dd18c RSI: ffffffff87edd090 RDI: 0000607f14ee8c60 [ 202.664125][ T8145] RBP: ffff888029ecac00 R08: 0000000000000001 R09: fffffbfff1fdb865 [ 202.667299][ T8145] R10: ffffffff8fedc32f R11: 0000000000000000 R12: ffff88801385dc00 [ 202.670402][ T8145] R13: ffff8880258d2100 R14: ffff888029cadb40 R15: ffff88801385dc48 [ 202.673385][ T8145] FS: 0000000000000000(0000) GS:ffff88809748e000(0063) knlGS:00000000f4fa1b40 [ 202.676861][ T8145] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 202.679431][ T8145] CR2: 00000000f4f9fbc0 CR3: 0000000076a14000 CR4: 0000000000352ef0 [ 202.682520][ T8145] Kernel panic - not syncing: Fatal exception [ 202.685430][ T8145] Kernel Offset: disabled [ 202.687104][ T8145] Rebooting in 86400 seconds..