last executing test programs: 5m13.960232067s ago: executing program 0 (id=2081): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xffff, 0x0, "4ae23ae17df2e98c0000000000000009bad88f", 0x6}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000f80)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x3a) 5m13.872993756s ago: executing program 0 (id=2083): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000000080)='./file1\x00', 0x0, 0x1) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) renameat2(r0, &(0x7f0000000180)='./file1\x00', r0, &(0x7f0000000040)='./file0\x00', 0x5) 5m13.765048947s ago: executing program 0 (id=2087): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1}}, 0x20) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f00000000c0)=ANY=[@ANYBLOB="0300000003"], 0xa) 5m13.673461635s ago: executing program 0 (id=2089): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1041, 0x0) umount2(&(0x7f0000000000)='./file0/../file0\x00', 0x1) 5m13.531895152s ago: executing program 0 (id=2092): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 5m13.100670714s ago: executing program 0 (id=2101): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x3fff8, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xc}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0xf7ffffff, 0x0, 0x0, 0xffffffff}, 0x8022000, 0x0, 0xffffffff, 0x8, 0x101, 0x3, 0xfe, 0x0, 0x0, 0x0, {0x4, 0x6, 0xfffffffd, 0x0, 0x0, 0x8}}}}]}, 0x78}}, 0x40000c4) 5m12.784140942s ago: executing program 32 (id=2101): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x3fff8, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xc}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0xf7ffffff, 0x0, 0x0, 0xffffffff}, 0x8022000, 0x0, 0xffffffff, 0x8, 0x101, 0x3, 0xfe, 0x0, 0x0, 0x0, {0x4, 0x6, 0xfffffffd, 0x0, 0x0, 0x8}}}}]}, 0x78}}, 0x40000c4) 2m40.509572523s ago: executing program 4 (id=4681): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0a00000007000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x18) 2m40.393297137s ago: executing program 4 (id=4685): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x198, 0x4, 0x9, 0x2, 0x68}, 0xb, 0x1, 0x5, 0x1, 0x5, 0x16, 0x15, 0x1d, 0x6, 0x4, {0x5, 0xb, 0x41, 0x0, 0x16, 0x3ff}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x55}, 0x4000) 2m40.212874758s ago: executing program 4 (id=4687): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000100)='./file0\x00') chdir(&(0x7f0000000000)='./cgroup\x00') rename(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00') 2m40.160331131s ago: executing program 4 (id=4690): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00') 2m40.109974616s ago: executing program 4 (id=4691): r0 = socket(0x2, 0x2, 0x1) bind$unix(r0, &(0x7f0000000000)=@abs, 0x6e) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r1, &(0x7f0000000840)=[{&(0x7f0000000880)=""/192, 0xc0}], 0x1, 0x8, 0x0) 2m39.828813679s ago: executing program 4 (id=4696): ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000340)={{0x0, 0x0, 0xd, 0x6}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x8000000005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x10000000000, 0x0, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x80000001, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000004c0)='kfree\x00'}, 0x10) r0 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46020000000d0200aa1e1c170003003e000839a59434d90a2742a24e000000000000000000deef14b40028e27ebdfd74dafc20380003"], 0xfebe) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 2m39.510453978s ago: executing program 33 (id=4696): ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000340)={{0x0, 0x0, 0xd, 0x6}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x8000000005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x10000000000, 0x0, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x80000001, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000004c0)='kfree\x00'}, 0x10) r0 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46020000000d0200aa1e1c170003003e000839a59434d90a2742a24e000000000000000000deef14b40028e27ebdfd74dafc20380003"], 0xfebe) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 2m9.969139532s ago: executing program 1 (id=5136): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) r2 = dup3(r0, r1, 0x0) read$watch_queue(r2, &(0x7f0000001000)=""/235, 0xeb) 2m9.846069788s ago: executing program 1 (id=5138): r0 = syz_io_uring_setup(0x88f, &(0x7f0000000340)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40012020, 0x1, {0x2}}) io_uring_enter(r0, 0x47f6, 0x0, 0x4, 0x0, 0x0) 2m9.432538758s ago: executing program 1 (id=5139): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2, 0x0, 0x48}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) 2m6.544544516s ago: executing program 1 (id=5157): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000480)='./file0\x00', 0x0) 2m6.397827428s ago: executing program 1 (id=5159): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0xbdf) ioctl$NBD_DO_IT(r0, 0xab03) 2m5.920370931s ago: executing program 1 (id=5171): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 2m5.700851136s ago: executing program 34 (id=5171): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 1m8.958889387s ago: executing program 5 (id=5508): r0 = creat(&(0x7f0000000200)='./file1\x00', 0x12e) close(r0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000001200), 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 58.654219243s ago: executing program 5 (id=5508): r0 = creat(&(0x7f0000000200)='./file1\x00', 0x12e) close(r0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000001200), 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 48.574771732s ago: executing program 5 (id=5508): r0 = creat(&(0x7f0000000200)='./file1\x00', 0x12e) close(r0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000001200), 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 46.332633022s ago: executing program 7 (id=6036): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000780)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010b00000000000000000c00000008000300", @ANYRES32=r2], 0x1c}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r0) 46.2569291s ago: executing program 7 (id=6037): r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xe099, 0x0, 0x1, 0xb5}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x2, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000640)=@IORING_OP_ASYNC_CANCEL) 46.000608804s ago: executing program 7 (id=6039): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x9, 0x0, 0xff, 0x9, 0x0, 0xfffe}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') read$FUSE(r1, &(0x7f0000004540)={0x2020}, 0x3c) 45.680562519s ago: executing program 7 (id=6040): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000340)=@abs={0x1, 0x0, 0x104e22}, 0x6e) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 45.544979507s ago: executing program 7 (id=6041): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7079a000) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f, 0x2, 0xffffffffffffffff}, 0x0, 0x0, 0x0) 45.272679952s ago: executing program 7 (id=6042): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x284182, 0x0) sendmmsg$unix(r2, &(0x7f0000004640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f40)=[@rights={{0x18, 0x1, 0x1, [r3, r1]}}], 0x18, 0x95}}], 0x1, 0x0) 44.997232826s ago: executing program 35 (id=6042): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x284182, 0x0) sendmmsg$unix(r2, &(0x7f0000004640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f40)=[@rights={{0x18, 0x1, 0x1, [r3, r1]}}], 0x18, 0x95}}], 0x1, 0x0) 34.150860156s ago: executing program 5 (id=5508): r0 = creat(&(0x7f0000000200)='./file1\x00', 0x12e) close(r0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000001200), 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 26.648099109s ago: executing program 2 (id=6180): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b) sendmsg$rds(r1, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) 26.382333545s ago: executing program 2 (id=6185): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x2be, &(0x7f0000000140)={0x0, 0x100b420, 0x0, 0x2, 0x111}, &(0x7f00000001c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x3, r0, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r1, 0x3516, 0x3e44, 0x8, 0x0, 0x0) 25.98334304s ago: executing program 2 (id=6190): r0 = socket(0x2b, 0x1, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x20049801) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) 25.761480718s ago: executing program 2 (id=6193): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./control\x00', 0x0, 0x2000, 0x0) 25.572401963s ago: executing program 2 (id=6196): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', r1, 0x80, 0x7800, 0x0, 0xfffffffb, {{0x5, 0x4, 0x0, 0x5, 0x14, 0x0, 0x0, 0x9, 0x0, 0x0, @remote, @multicast2}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f3, &(0x7f0000001a80)={'syztnl0\x00', &(0x7f0000000140)={'gre0\x00', r3, 0x10, 0x20, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x27, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) 25.117883822s ago: executing program 2 (id=6199): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r2, r1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 24.56604841s ago: executing program 36 (id=6199): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r2, r1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 23.883519528s ago: executing program 5 (id=5508): r0 = creat(&(0x7f0000000200)='./file1\x00', 0x12e) close(r0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000001200), 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 12.408006867s ago: executing program 8 (id=6305): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) connect$inet(r0, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) sendmmsg$inet(r0, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x8c37c2b979564e6e) 12.364373295s ago: executing program 5 (id=5508): r0 = creat(&(0x7f0000000200)='./file1\x00', 0x12e) close(r0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000001200), 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 11.099848899s ago: executing program 8 (id=6309): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_open_dev$vim2m(&(0x7f0000000240), 0x6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000100)=0x1) 10.69195579s ago: executing program 8 (id=6316): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000100)=0xffff, 0x4) shutdown(r0, 0x1) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000040)=0x7, 0x4) recvmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/26, 0x1a}, 0x3}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/152}, {&(0x7f0000000300)=""/217}, {&(0x7f00000000c0)=""/29}], 0x0, &(0x7f0000000400)=""/104}, 0x7fff}], 0x32, 0x0, 0x0) 10.595483313s ago: executing program 8 (id=6318): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x8020000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff6ffc}]}) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x89, 0x40000, {r1}}, 0x20) 10.436520326s ago: executing program 8 (id=6319): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x402, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000440)=ANY=[], 0x9) 10.02655377s ago: executing program 8 (id=6324): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) r2 = dup(r1) read$FUSE(r2, &(0x7f0000003c40)={0x2020}, 0xffffff0a) 1.435495571s ago: executing program 3 (id=6385): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x96) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xdd860000, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0xb0, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x28, 0x16}, {0x8}, {0x1b}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8}, {0x8}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) 1.12461266s ago: executing program 3 (id=6388): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x0, 0x2, {0x7, 0x29, 0x1, 0x6a542793, 0x681d, 0x0, 0x3, 0x1, 0x0, 0x0, 0x100, 0x82}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x5}}, 0x30) 921.80958ms ago: executing program 3 (id=6390): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000002c0)={0xc, r1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000ff2f00000000000001"]) 843.252087ms ago: executing program 9 (id=6392): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000007c80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000007cc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f0000007dc0)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f0000002300)={0x50, r2, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "0fe4a3c6a6f185f3f48f262c02bc2310"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "d551c68dad84c9740a61e3cf1701f742"}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) 724.354843ms ago: executing program 3 (id=6393): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000009c0)="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", 0xfffffdef}], 0x1}}], 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 693.502738ms ago: executing program 9 (id=6394): r0 = io_uring_setup(0x10d7, &(0x7f00000000c0)={0x0, 0xbfff, 0x400, 0x2, 0x1d}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x200008c0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 692.782202ms ago: executing program 6 (id=6395): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x1, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000280)=r1, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) 592.638622ms ago: executing program 9 (id=6396): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYBLOB="fe88"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552d215f6", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 526.100364ms ago: executing program 6 (id=6397): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9588, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 525.407988ms ago: executing program 9 (id=6398): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x80800) r0 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x3}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1, 0x16, 0x1}) io_uring_enter(r0, 0x567, 0x0, 0x0, 0x0, 0x0) 446.597204ms ago: executing program 9 (id=6399): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) cachestat(r0, &(0x7f0000000040), &(0x7f000009de80), 0x0) 315.112505ms ago: executing program 6 (id=6400): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000100)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000180)='./file1\x00') 222.27847ms ago: executing program 3 (id=6401): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) bind$tipc(r1, 0x0, 0x0) sendmsg$tipc(r0, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x41, 0x1, 0x1}}, 0x10, 0x0}, 0x0) 218.697289ms ago: executing program 9 (id=6402): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000080)={0x20, 0xd, 0x1, "f8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000680)={0x0, 0x2, 0x8, &(0x7f0000000400)={0x1a, "65c28678035ab73ade02d839a66f560cfa56ec4319a52702236be319b49de48232"}}) 174.327569ms ago: executing program 6 (id=6403): unshare(0x400) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x3}) 90.693264ms ago: executing program 3 (id=6404): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x20400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000000000001000000000000000000000000000000001b0300ff"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000008504"]) 40.644292ms ago: executing program 6 (id=6405): r0 = timerfd_create(0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) clock_adjtime(0x0, &(0x7f0000000480)={0xd54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}) 0s ago: executing program 6 (id=6406): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) r1 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r1, 0x48e9, 0x0, 0x2, 0x0, 0x0) kernel console output (not intermixed with test programs): icast mode [ 449.230213][ T13] bridge_slave_1: left promiscuous mode [ 449.244222][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.258281][ T13] bridge_slave_0: left allmulticast mode [ 449.264878][ T13] bridge_slave_0: left promiscuous mode [ 449.270824][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.293151][T19611] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5640'. [ 449.339208][T19613] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 449.416386][ T5893] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 449.576239][ T5893] usb 3-1: Using ep0 maxpacket: 32 [ 449.590578][ T5893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 449.612450][ T5893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 449.633168][ T5893] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 449.643539][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.677838][ T5893] usb 3-1: config 0 descriptor?? [ 449.823087][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 449.839203][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 449.850302][ T13] bond0 (unregistering): Released all slaves [ 449.875814][T17588] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 450.043550][T17588] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 450.085781][T17588] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 450.108515][ T5827] Bluetooth: hci2: command tx timeout [ 450.130749][T17588] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 450.148317][ T5893] savu 0003:1E7D:2D5A.0030: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 450.156047][T17588] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.181558][T19575] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.198347][T19575] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.210455][T19575] bridge_slave_0: entered allmulticast mode [ 450.211565][T17588] usb 7-1: config 0 descriptor?? [ 450.228459][T19575] bridge_slave_0: entered promiscuous mode [ 450.409639][ T5867] usb 3-1: USB disconnect, device number 45 [ 450.507456][T19575] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.526305][T19575] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.544034][T19575] bridge_slave_1: entered allmulticast mode [ 450.577293][T19575] bridge_slave_1: entered promiscuous mode [ 450.637527][T17588] keytouch 0003:0926:3333.0031: fixing up Keytouch IEC report descriptor [ 450.679082][T17588] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.0031/input/input57 [ 450.849433][T17588] keytouch 0003:0926:3333.0031: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0 [ 450.881503][T19575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 450.894978][T17588] usb 7-1: USB disconnect, device number 7 [ 451.012380][ T13] hsr_slave_0: left promiscuous mode [ 451.039212][ T13] hsr_slave_1: left promiscuous mode [ 451.059696][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 451.084927][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 451.121897][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 451.134769][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 451.189368][ T13] veth1_macvtap: left promiscuous mode [ 451.205194][ T13] veth0_macvtap: left promiscuous mode [ 451.211047][ T13] veth1_vlan: left promiscuous mode [ 451.221189][ T13] veth0_vlan: left promiscuous mode [ 452.183564][ T13] team0 (unregistering): Port device team_slave_1 removed [ 452.191511][ T5827] Bluetooth: hci2: command tx timeout [ 452.259783][ T13] team0 (unregistering): Port device team_slave_0 removed [ 453.532568][T19575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 453.744760][T19575] team0: Port device team_slave_0 added [ 453.758278][T19575] team0: Port device team_slave_1 added [ 454.029312][T19575] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 454.038997][T19575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 454.096315][T19575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 454.127185][T19575] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 454.134175][T19575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 454.214334][T19575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 454.245671][ T10] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 454.266690][ T5827] Bluetooth: hci2: command tx timeout [ 454.438758][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 454.470165][ T10] usb 7-1: config 0 interface 0 altsetting 74 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 454.485686][ T10] usb 7-1: config 0 interface 0 altsetting 74 endpoint 0x81 has invalid wMaxPacketSize 0 [ 454.526894][T19575] hsr_slave_0: entered promiscuous mode [ 454.533584][T19575] hsr_slave_1: entered promiscuous mode [ 454.535503][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 454.548511][ T10] usb 7-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 454.554239][T19575] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 454.566443][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.569193][ T10] usb 7-1: config 0 descriptor?? [ 454.587645][T19575] Cannot create hsr debugfs directory [ 455.007683][ T10] petalynx 0003:18B1:0037.0032: unknown main item tag 0x0 [ 455.014883][ T10] petalynx 0003:18B1:0037.0032: unknown main item tag 0x0 [ 455.031929][ T10] petalynx 0003:18B1:0037.0032: item fetching failed at offset 2/3 [ 455.041105][ T10] petalynx 0003:18B1:0037.0032: parse failed [ 455.047276][ T10] petalynx 0003:18B1:0037.0032: probe with driver petalynx failed with error -22 [ 455.236233][T17588] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 455.297651][ T5893] usb 7-1: USB disconnect, device number 8 [ 455.368194][T19575] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 455.383652][T19575] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 455.413664][T19575] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 455.432731][T19575] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 455.441258][T17588] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 455.469130][T17588] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 455.500050][T17588] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 455.528125][T17588] usb 4-1: SerialNumber: syz [ 455.640423][T19575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 455.661688][T19758] tipc: Started in network mode [ 455.672616][T19758] tipc: Node identity ff55, cluster identity 4711 [ 455.679655][T19758] tipc: Enabling of bearer rejected, failed to enable media [ 455.701640][T19575] 8021q: adding VLAN 0 to HW filter on device team0 [ 455.720769][ T3491] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.728028][ T3491] bridge0: port 1(bridge_slave_0) entered forwarding state [ 455.778643][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.785895][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 455.940208][T19575] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 456.204485][T17588] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 456.223438][T19773] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 456.339045][T19782] netlink: 'syz.6.5713': attribute type 10 has an invalid length. [ 456.347604][ T5827] Bluetooth: hci2: command tx timeout [ 456.410672][T19782] team0: Port device wlan1 added [ 456.454335][T19575] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 456.553535][ T5893] kernel write not supported for file /484/loginuid (pid: 5893 comm: kworker/1:5) [ 456.593430][ T5916] usb 4-1: USB disconnect, device number 39 [ 456.603280][ T5916] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 456.793242][T19801] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5720'. [ 456.959862][T19575] veth0_vlan: entered promiscuous mode [ 456.980499][T19575] veth1_vlan: entered promiscuous mode [ 457.061661][T19575] veth0_macvtap: entered promiscuous mode [ 457.078407][T19575] veth1_macvtap: entered promiscuous mode [ 457.107063][T19575] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 457.132468][T19575] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 457.163191][T19575] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.190665][T19575] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.206270][T19575] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.217472][T19575] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.377097][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.399339][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.458791][ T3491] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.482528][ T3491] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.540720][T19817] overlayfs: workdir and upperdir must reside under the same mount [ 457.691758][ T5868] hid-generic 00A0:0006:0003.0033: unknown main item tag 0x0 [ 457.702249][ T5868] hid-generic 00A0:0006:0003.0033: unknown main item tag 0x0 [ 457.717879][ T5868] hid-generic 00A0:0006:0003.0033: unknown main item tag 0x0 [ 457.725671][ T5868] hid-generic 00A0:0006:0003.0033: unknown main item tag 0x0 [ 457.733147][ T5868] hid-generic 00A0:0006:0003.0033: unknown main item tag 0x2 [ 457.752472][ T5868] hid-generic 00A0:0006:0003.0033: unknown main item tag 0x0 [ 457.761875][ T5868] hid-generic 00A0:0006:0003.0033: unknown main item tag 0x0 [ 457.769410][ T5868] hid-generic 00A0:0006:0003.0033: unknown main item tag 0x0 [ 457.777065][ T5868] hid-generic 00A0:0006:0003.0033: unknown main item tag 0x0 [ 457.784481][ T5868] hid-generic 00A0:0006:0003.0033: unknown main item tag 0x0 [ 457.798361][ T5868] hid-generic 00A0:0006:0003.0033: unknown main item tag 0x0 [ 457.806273][ T5868] hid-generic 00A0:0006:0003.0033: unknown main item tag 0x0 [ 457.814029][ T5868] hid-generic 00A0:0006:0003.0033: unknown main item tag 0x0 [ 457.824411][ T5868] hid-generic 00A0:0006:0003.0033: hidraw0: HID v0.05 Device [syz1] on syz0 [ 457.945857][ T10] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 458.125735][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 458.136113][ T10] usb 4-1: config 0 has no interfaces? [ 458.144024][ T10] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 458.158103][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.166399][ T10] usb 4-1: Product: syz [ 458.174710][ T10] usb 4-1: Manufacturer: syz [ 458.179456][ T10] usb 4-1: SerialNumber: syz [ 458.191394][ T10] usb 4-1: config 0 descriptor?? [ 458.376183][T19835] Bluetooth: MGMT ver 1.23 [ 458.415663][ T10] usb 4-1: USB disconnect, device number 40 [ 458.786966][ T5868] kernel read not supported for file /video37 (pid: 5868 comm: kworker/0:7) [ 458.831577][ T59] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.282178][ T59] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.368864][T19868] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5750'. [ 459.565771][T18521] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 459.584847][T18521] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 459.593595][T18521] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 459.603293][T18521] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 459.611166][T18521] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 459.678186][ T59] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.779009][ T59] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.046481][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 460.046498][ T30] audit: type=1326 audit(1748388513.949:2483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19892 comm="syz.6.5759" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2502d8e969 code=0x0 [ 460.142638][ T59] bridge_slave_1: left allmulticast mode [ 460.153018][ T59] bridge_slave_1: left promiscuous mode [ 460.170976][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.211693][ T59] bridge_slave_0: left allmulticast mode [ 460.220227][ T59] bridge_slave_0: left promiscuous mode [ 460.230265][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.104796][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 461.118551][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 461.129321][ T59] bond0 (unregistering): Released all slaves [ 461.536301][ T5893] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 461.594235][ T30] audit: type=1800 audit(1748388515.489:2484): pid=19939 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.5778" name="file0" dev="tmpfs" ino=5954 res=0 errno=0 [ 461.677191][T19875] chnl_net:caif_netlink_parms(): no params data found [ 461.697184][ T5893] usb 3-1: Using ep0 maxpacket: 8 [ 461.706665][ T5827] Bluetooth: hci2: command tx timeout [ 461.717430][ T5893] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 461.725096][ T5893] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 461.738172][ T5893] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 461.751055][ T5893] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 461.763296][ T5893] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 461.778624][ T5893] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 461.780057][ T59] hsr_slave_0: left promiscuous mode [ 461.787348][ T5893] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 461.803968][ T5893] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 461.803976][ T59] hsr_slave_1: left promiscuous mode [ 461.803997][ T5893] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 461.827282][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 461.834667][ T5893] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 461.847083][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 461.854647][ T5893] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 461.869503][ T5893] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 461.870409][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 461.885878][ T5893] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 461.902558][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 461.904765][ T5893] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 461.926991][ T5893] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 461.945571][ T5868] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 461.948994][ T5893] usb 3-1: string descriptor 0 read error: -22 [ 461.962643][ T5893] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 461.974669][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.975009][ T59] veth1_macvtap: left promiscuous mode [ 462.002361][ T5893] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 462.010800][ T59] veth0_macvtap: left promiscuous mode [ 462.017822][ T59] veth1_vlan: left promiscuous mode [ 462.023815][ T59] veth0_vlan: left promiscuous mode [ 462.115629][ T5868] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 462.135662][ T5868] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 462.155512][ T5868] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 462.181621][ T5868] usb 7-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 462.206459][ T5868] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.214496][ T5868] usb 7-1: Product: syz [ 462.235525][ T5868] usb 7-1: Manufacturer: syz [ 462.240212][ T5868] usb 7-1: SerialNumber: syz [ 462.260019][ T5868] usb 7-1: config 0 descriptor?? [ 462.266835][T19941] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 462.274160][T19941] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 462.316568][ T5868] usb 7-1: ucan: probing device on interface #0 [ 462.331157][ T5893] usb 3-1: USB disconnect, device number 46 [ 462.420553][T19949] vivid-002: disconnect [ 462.439788][T19948] vivid-002: reconnect [ 462.924642][ T59] team0 (unregistering): Port device team_slave_1 removed [ 462.984817][ T59] team0 (unregistering): Port device team_slave_0 removed [ 463.604091][ T5868] ucan 7-1:0.0 can0: registered device [ 463.620040][ T5868] ucan 7-1:0.0 can0: firmware string: [ 463.786987][ T5827] Bluetooth: hci2: command tx timeout [ 463.851130][ T5893] usb 7-1: USB disconnect, device number 9 [ 463.927604][T19875] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.938788][T19875] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.946548][T19875] bridge_slave_0: entered allmulticast mode [ 463.960900][T19875] bridge_slave_0: entered promiscuous mode [ 463.986035][T19875] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.993585][T19875] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.002440][T19875] bridge_slave_1: entered allmulticast mode [ 464.010154][T19875] bridge_slave_1: entered promiscuous mode [ 464.050782][T19875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 464.063470][T19875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 464.133818][T19875] team0: Port device team_slave_0 added [ 464.173209][T19875] team0: Port device team_slave_1 added [ 464.221889][T19875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 464.229020][T19875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 464.295485][T19875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 464.313629][T19875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 464.322327][T19875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 464.355105][T19875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 464.452523][T19875] hsr_slave_0: entered promiscuous mode [ 464.466738][T19875] hsr_slave_1: entered promiscuous mode [ 464.478354][T19875] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 464.492551][T19875] Cannot create hsr debugfs directory [ 465.306429][T19875] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 465.330709][T19875] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 465.348081][T19875] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 465.360620][T19875] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 465.366217][ T5893] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 465.536940][ T5893] usb 7-1: Using ep0 maxpacket: 8 [ 465.551280][ T5893] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 465.567014][ T5893] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 465.577027][ T5893] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.588030][ T5893] usb 7-1: config 0 descriptor?? [ 465.612580][T19875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 465.670884][T19875] 8021q: adding VLAN 0 to HW filter on device team0 [ 465.710786][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.718092][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 465.779632][ T1085] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.786869][ T1085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 465.821303][ T5893] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 465.875768][ T5827] Bluetooth: hci2: command tx timeout [ 466.003740][ T5893] usb 7-1: USB disconnect, device number 10 [ 466.181156][T19875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 466.421571][T20048] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 466.421654][ T5916] IPVS: starting estimator thread 0... [ 466.525885][T20051] IPVS: using max 29 ests per chain, 69600 per kthread [ 466.561398][T19875] veth0_vlan: entered promiscuous mode [ 466.577712][T19875] veth1_vlan: entered promiscuous mode [ 466.622443][T19875] veth0_macvtap: entered promiscuous mode [ 466.638894][T19875] veth1_macvtap: entered promiscuous mode [ 466.668505][T19875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 466.688112][T19875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 466.704114][T19875] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.724789][T19875] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.748609][T19875] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.770695][T19875] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.947978][ T1085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.981833][ T1085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.043825][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.064634][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.064682][T20069] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5818'. [ 467.254497][T20076] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 467.361215][T20082] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 467.771976][T20098] input: syz1 as /devices/virtual/input/input59 [ 468.436764][ T5916] hid-generic 0005:046D:FFF9.0034: item fetching failed at offset 0/1 [ 468.463345][ T5916] hid-generic 0005:046D:FFF9.0034: probe with driver hid-generic failed with error -22 [ 468.504562][ T1085] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.291804][ T1085] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.358230][T20132] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5845'. [ 469.489586][T20137] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5847'. [ 469.612308][ T1085] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.807421][ T1085] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.883431][T18521] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 469.912998][T18521] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 469.922386][T18521] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 469.931768][T18521] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 469.944965][T18521] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 470.147075][ T1085] bridge_slave_1: left allmulticast mode [ 470.152780][ T1085] bridge_slave_1: left promiscuous mode [ 470.163184][ T1085] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.180782][ T1085] bridge_slave_0: left allmulticast mode [ 470.192997][ T1085] bridge_slave_0: left promiscuous mode [ 470.203179][ T1085] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.413318][T20160] program syz.3.5857 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 470.645939][ T5867] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 470.797473][ T5867] usb 7-1: Using ep0 maxpacket: 16 [ 470.832533][ T5867] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 470.841416][ T5867] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 470.852319][ T5867] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 470.865209][ T1085] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 470.879922][ T1085] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 470.891815][ T5867] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 470.901956][ T5867] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.918294][ T1085] bond0 (unregistering): Released all slaves [ 470.925483][ T5867] usb 7-1: Product: syz [ 470.934389][ T5867] usb 7-1: Manufacturer: syz [ 470.946736][ T5867] usb 7-1: SerialNumber: syz [ 471.170759][ T5867] usb 7-1: 0:2 : does not exist [ 471.191542][ T5867] usb 7-1: USB disconnect, device number 11 [ 471.340877][ T1085] hsr_slave_0: left promiscuous mode [ 471.359086][ T1085] hsr_slave_1: left promiscuous mode [ 471.376710][ T1085] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 471.400408][ T1085] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 471.414968][ T1085] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 471.425229][ T1085] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 471.459340][ T1085] veth1_macvtap: left promiscuous mode [ 471.467200][ T1085] veth0_macvtap: left promiscuous mode [ 471.472804][ T1085] veth1_vlan: left promiscuous mode [ 471.481188][ T1085] veth0_vlan: left promiscuous mode [ 472.026892][T20201] kvm: apic: phys broadcast and lowest prio [ 472.037016][T18521] Bluetooth: hci2: command tx timeout [ 472.296962][ T1085] team0 (unregistering): Port device team_slave_1 removed [ 472.369755][ T1085] team0 (unregistering): Port device team_slave_0 removed [ 472.581719][T20216] dlm: non-version read from control device 4 [ 472.687385][ T5916] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 472.716701][ T5916] hid-generic 0000:0000:0000.0035: hidraw0: HID v0.00 Device [syz1] on syz0 [ 473.023177][T20221] hid-generic 0000:0000:0000.0035: pid 20221 passed too short report [ 473.103152][T20210] lo: entered allmulticast mode [ 473.108610][T20213] lo: left allmulticast mode [ 473.118441][T20151] chnl_net:caif_netlink_parms(): no params data found [ 473.346117][ T30] audit: type=1326 audit(1748388527.229:2485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20223 comm="syz.3.5881" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fafa858e969 code=0x0 [ 473.367260][ C0] vkms_vblank_simulate: vblank timer overrun [ 473.409720][T20235] vivid-000: disconnect [ 473.444251][T20226] vivid-000: reconnect [ 473.513861][T20151] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.547925][T20151] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.555256][T20151] bridge_slave_0: entered allmulticast mode [ 473.577398][T20151] bridge_slave_0: entered promiscuous mode [ 473.611833][T20151] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.625892][T20151] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.641309][T20151] bridge_slave_1: entered allmulticast mode [ 473.669778][T20151] bridge_slave_1: entered promiscuous mode [ 473.753399][T20151] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 473.781255][T20151] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 473.861299][T20151] team0: Port device team_slave_0 added [ 473.872704][T20151] team0: Port device team_slave_1 added [ 473.886734][ T30] audit: type=1326 audit(1748388527.779:2486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20247 comm="syz.6.5890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2502d8e969 code=0x7fc00000 [ 473.930500][ T30] audit: type=1326 audit(1748388527.779:2487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20247 comm="syz.6.5890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2502d8e969 code=0x7fc00000 [ 473.952071][ C0] vkms_vblank_simulate: vblank timer overrun [ 473.966251][ T30] audit: type=1326 audit(1748388527.779:2488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20247 comm="syz.6.5890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2502d8e969 code=0x7fc00000 [ 474.032756][ T30] audit: type=1326 audit(1748388527.779:2489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20247 comm="syz.6.5890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2502d8e969 code=0x7fc00000 [ 474.075271][T20151] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 474.099706][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 474.108575][T18521] Bluetooth: hci2: command tx timeout [ 474.116803][T20151] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 474.164985][ T30] audit: type=1326 audit(1748388527.779:2490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20247 comm="syz.6.5890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2502d8e969 code=0x7fc00000 [ 474.206271][T20151] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 474.236253][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 474.244965][ T30] audit: type=1326 audit(1748388527.779:2491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20247 comm="syz.6.5890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2502d8e969 code=0x7fc00000 [ 474.266956][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 474.278178][T20151] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 474.285199][T20151] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 474.376929][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 474.396963][T20151] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 474.417594][ T30] audit: type=1326 audit(1748388527.779:2492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20247 comm="syz.6.5890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2502d8e969 code=0x7fc00000 [ 474.464558][T20255] netlink: 144 bytes leftover after parsing attributes in process `syz.3.5893'. [ 474.489919][ T30] audit: type=1326 audit(1748388527.779:2493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20247 comm="syz.6.5890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2502d8e969 code=0x7fc00000 [ 474.560928][ T30] audit: type=1326 audit(1748388527.779:2494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20247 comm="syz.6.5890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2502d8e969 code=0x7fc00000 [ 474.734884][T20151] hsr_slave_0: entered promiscuous mode [ 474.765961][T20151] hsr_slave_1: entered promiscuous mode [ 474.772143][T20151] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 474.801716][T20151] Cannot create hsr debugfs directory [ 475.066032][ T5893] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 475.219781][ T5893] usb 3-1: config 7 has an invalid interface number: 101 but max is 0 [ 475.228399][ T5893] usb 3-1: config 7 has no interface number 0 [ 475.238433][ T5893] usb 3-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 475.252414][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.261364][ T5893] usb 3-1: Product: syz [ 475.268977][ T5893] usb 3-1: Manufacturer: syz [ 475.274086][ T5893] usb 3-1: SerialNumber: syz [ 475.389608][T20151] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 475.404621][T20151] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 475.420436][T20151] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 475.441276][T20151] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 475.563948][T20151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 475.603527][T20151] 8021q: adding VLAN 0 to HW filter on device team0 [ 475.632997][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.640214][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 475.663035][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.670296][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 476.080152][ T5893] as10x_usb: device has been detected [ 476.095003][T20151] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 476.107807][ T5893] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 476.140072][ T5893] usb 3-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 476.183631][ T5893] as10x_usb: error during firmware upload part1 [ 476.191526][T18521] Bluetooth: hci2: command tx timeout [ 476.208267][ T5893] Registered device Elgato EyeTV DTT Deluxe [ 476.297853][ T5893] usb 3-1: USB disconnect, device number 47 [ 476.334790][ T5893] Unregistered device Elgato EyeTV DTT Deluxe [ 476.338503][ T5893] as10x_usb: device has been disconnected [ 476.619351][T20151] veth0_vlan: entered promiscuous mode [ 476.654674][T20151] veth1_vlan: entered promiscuous mode [ 476.704400][T20151] veth0_macvtap: entered promiscuous mode [ 476.721116][T20151] veth1_macvtap: entered promiscuous mode [ 476.753047][T20151] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 476.783931][T20151] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 476.810238][T20151] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.827564][T20151] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.846181][T20151] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.854943][T20151] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.156661][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.184323][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.283740][ T1085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.327422][ T1085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.593943][ T977] kernel write not supported for file bpf-prog (pid: 977 comm: kworker/0:2) [ 477.615896][T17587] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 477.655506][ T10] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 477.704960][T20328] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5920'. [ 477.726216][T20328] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5920'. [ 477.778464][T17587] usb 3-1: Using ep0 maxpacket: 16 [ 477.790313][T17587] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 477.809227][ T10] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 477.815274][T17587] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 477.825375][ T10] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 477.849997][ T10] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 477.857077][T17587] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 477.877672][T17587] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.894367][T17587] usb 3-1: config 0 descriptor?? [ 477.896111][ T10] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 477.919259][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.942110][ T10] usb 7-1: Product: syz [ 477.955468][ T10] usb 7-1: Manufacturer: syz [ 477.962106][ T10] usb 7-1: SerialNumber: syz [ 478.163506][T20341] netlink: 6 bytes leftover after parsing attributes in process `syz.3.5926'. [ 478.210535][ T10] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 478.328723][T17587] input: HID 05ac:8241 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:05AC:8241.0036/input/input60 [ 478.418553][T17587] appleir 0003:05AC:8241.0036: input,hiddev1,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.2-1/input0 [ 478.531908][ T977] usb 3-1: USB disconnect, device number 48 [ 478.545120][T20351] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x1 [ 478.623159][ T36] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.675629][ T10] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 478.848378][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 478.859924][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 478.870739][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 478.879933][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.890911][ T10] usb 4-1: config 0 descriptor?? [ 479.326083][ T10] logitech 0003:046D:C29C.0037: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.3-1/input0 [ 479.326178][T20355] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5932'. [ 479.514453][ T10] logitech 0003:046D:C29C.0037: no inputs found [ 479.540583][ T10] usb 4-1: USB disconnect, device number 41 [ 479.597091][ T5827] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 479.614295][ T5827] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 479.644916][ T36] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.656841][ T5827] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 479.667357][ T5827] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 479.680221][ T5827] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 479.751663][ T36] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.839511][ T36] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.093596][ T36] bridge_slave_1: left allmulticast mode [ 480.106057][ T36] bridge_slave_1: left promiscuous mode [ 480.112016][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.140913][ T36] bridge_slave_0: left allmulticast mode [ 480.160725][ T36] bridge_slave_0: left promiscuous mode [ 480.172230][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.228982][T20376] binder: 20374:20376 ioctl c0306201 200000000540 returned -14 [ 480.449892][ T5916] usb 7-1: USB disconnect, device number 12 [ 480.469920][ T5916] usblp0: removed [ 481.018932][T20402] program syz.6.5948 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 481.097987][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 481.119074][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 481.130186][ T36] bond0 (unregistering): Released all slaves [ 481.201089][T20358] chnl_net:caif_netlink_parms(): no params data found [ 481.355563][T17587] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 481.487226][T20358] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.495062][T20358] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.507448][T20358] bridge_slave_0: entered allmulticast mode [ 481.514603][T20358] bridge_slave_0: entered promiscuous mode [ 481.526212][T17587] usb 7-1: Using ep0 maxpacket: 16 [ 481.533908][T17587] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 481.547501][ T36] hsr_slave_0: left promiscuous mode [ 481.557303][ T36] hsr_slave_1: left promiscuous mode [ 481.564111][T17587] usb 7-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 481.564304][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 481.577663][T17587] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.591092][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 481.621341][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 481.627107][T17587] usb 7-1: config 0 descriptor?? [ 481.643528][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 481.721064][ T36] veth1_macvtap: left promiscuous mode [ 481.727968][ T36] veth0_macvtap: left promiscuous mode [ 481.733808][ T36] veth1_vlan: left promiscuous mode [ 481.739499][ T36] veth0_vlan: left promiscuous mode [ 481.786980][ T5827] Bluetooth: hci2: command tx timeout [ 482.047753][T17587] samsung 0003:0419:0600.0038: item fetching failed at offset 0/5 [ 482.062450][T17587] samsung 0003:0419:0600.0038: parse failed [ 482.070990][T17587] samsung 0003:0419:0600.0038: probe with driver samsung failed with error -22 [ 482.270396][T17587] usb 7-1: USB disconnect, device number 13 [ 482.584245][ T36] team0 (unregistering): Port device team_slave_1 removed [ 482.651024][ T36] team0 (unregistering): Port device team_slave_0 removed [ 482.836266][T17587] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 483.029824][T17587] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 483.060511][T17587] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 483.071324][T17587] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 483.101701][T17587] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 483.118423][T17587] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.140190][T17587] usb 4-1: Product: syz [ 483.144437][T17587] usb 4-1: Manufacturer: syz [ 483.171844][T17587] usb 4-1: SerialNumber: syz [ 483.283910][ T30] kauditd_printk_skb: 80 callbacks suppressed [ 483.283928][ T30] audit: type=1326 audit(1748388537.179:2575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20444 comm="syz.6.5966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2502d8e969 code=0x7ffc0000 [ 483.358711][ T30] audit: type=1326 audit(1748388537.179:2576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20444 comm="syz.6.5966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2502d8e969 code=0x7ffc0000 [ 483.415936][ T30] audit: type=1326 audit(1748388537.179:2577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20444 comm="syz.6.5966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2502d8e969 code=0x7ffc0000 [ 483.416010][T20431] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 483.444802][ C0] vkms_vblank_simulate: vblank timer overrun [ 483.464448][ T30] audit: type=1326 audit(1748388537.179:2578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20444 comm="syz.6.5966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2502d8e969 code=0x7ffc0000 [ 483.488811][ T30] audit: type=1326 audit(1748388537.179:2579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20444 comm="syz.6.5966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7f2502d8e969 code=0x7ffc0000 [ 483.511880][ T30] audit: type=1326 audit(1748388537.179:2580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20444 comm="syz.6.5966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2502d8e969 code=0x7ffc0000 [ 483.540077][ T30] audit: type=1326 audit(1748388537.179:2581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20444 comm="syz.6.5966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2502d8e969 code=0x7ffc0000 [ 483.791723][T20358] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.802105][T20358] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.815157][T20358] bridge_slave_1: entered allmulticast mode [ 483.828928][T20358] bridge_slave_1: entered promiscuous mode [ 483.845238][T20424] vlan2: entered promiscuous mode [ 483.866187][ T5827] Bluetooth: hci2: command tx timeout [ 483.963123][T20358] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 483.979247][T20358] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 484.138067][T20431] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 484.294040][T20358] team0: Port device team_slave_0 added [ 484.344652][T20358] team0: Port device team_slave_1 added [ 484.406196][T17587] cdc_ncm 4-1:1.0: bind() failure [ 484.425195][T17587] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 484.447552][T17587] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 484.459856][T17587] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 484.472864][T17587] usb 4-1: USB disconnect, device number 42 [ 484.573003][T20358] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 484.595744][T20358] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 484.621792][ C0] vkms_vblank_simulate: vblank timer overrun [ 484.638129][T20358] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 484.700854][T20358] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 484.714181][T20358] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 484.740135][ C0] vkms_vblank_simulate: vblank timer overrun [ 484.754143][T20358] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 484.874537][T20358] hsr_slave_0: entered promiscuous mode [ 484.885764][T20358] hsr_slave_1: entered promiscuous mode [ 484.892811][T20358] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 484.905031][T20358] Cannot create hsr debugfs directory [ 485.250056][T20496] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5986'. [ 485.437772][T20504] syzkaller1: entered promiscuous mode [ 485.443506][T20504] syzkaller1: entered allmulticast mode [ 485.556400][ T5893] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 485.641266][T20358] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 485.653493][T20358] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 485.664464][T20358] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 485.676925][T20358] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 485.732391][ T5893] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 485.759066][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.770149][T20358] 8021q: adding VLAN 0 to HW filter on device bond0 [ 485.793100][ T5893] usb 3-1: Product: syz [ 485.801304][T20358] 8021q: adding VLAN 0 to HW filter on device team0 [ 485.802895][ T5893] usb 3-1: Manufacturer: syz [ 485.827135][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.834350][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 485.835255][ T5893] usb 3-1: SerialNumber: syz [ 485.847670][ T43] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 485.862422][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.869719][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 485.886631][ T5893] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 485.908036][T20358] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 485.919694][T20358] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 485.948664][ T5827] Bluetooth: hci2: command tx timeout [ 485.962592][T17587] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 486.012723][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 486.037383][ T43] usb 7-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 486.057898][ T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.080437][ T43] usb 7-1: config 0 descriptor?? [ 486.091884][T20506] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 486.191817][T20358] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 486.534810][ T43] elan 0003:04F3:0755.0039: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.6-1/input0 [ 486.674575][T20358] veth0_vlan: entered promiscuous mode [ 486.691460][T20358] veth1_vlan: entered promiscuous mode [ 486.700236][ T5867] usb 3-1: USB disconnect, device number 49 [ 486.752060][ T5868] usb 7-1: USB disconnect, device number 14 [ 486.764413][T20358] veth0_macvtap: entered promiscuous mode [ 486.788294][T20358] veth1_macvtap: entered promiscuous mode [ 486.814253][T20358] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 486.839521][T20358] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 486.857672][T20358] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.866924][T20358] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.878569][T20358] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.891139][T20358] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.000961][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.011605][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.046093][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.054918][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.307813][T17587] usb 3-1: Service connection timeout for: 256 [ 487.314037][T17587] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 487.349506][T17587] ath9k_htc: Failed to initialize the device [ 487.366034][ T5867] usb 3-1: ath9k_htc: USB layer deinitialized [ 487.708111][T20551] vxcan3: entered allmulticast mode [ 488.366661][T20573] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6016'. [ 488.401798][T20573] ipvlan2: entered promiscuous mode [ 488.576536][T20584] loop8: detected capacity change from 0 to 8 [ 488.583463][T20584] Dev loop8: unable to read RDB block 8 [ 488.592199][T20584] loop8: unable to read partition table [ 488.599343][T20584] loop8: partition table beyond EOD, truncated [ 488.606286][T20584] loop_reread_partitions: partition scan of loop8 (þ被xü^>à– ) failed (rc=-5) [ 488.731202][ T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.060345][ T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.077841][T18521] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 490.088856][T18521] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 490.099811][T18521] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 490.111198][T18521] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 490.122883][T20613] netlink: 'syz.2.6032': attribute type 29 has an invalid length. [ 490.125170][T18521] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 490.143892][T20616] netlink: 'syz.2.6032': attribute type 29 has an invalid length. [ 490.166422][ T5893] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 490.187544][T20613] netlink: 492 bytes leftover after parsing attributes in process `syz.2.6032'. [ 490.202844][ T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.297919][ T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.356235][ T5893] usb 4-1: Using ep0 maxpacket: 32 [ 490.372615][ T5893] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 490.414490][ T5893] usb 4-1: config 0 has no interface number 0 [ 490.458276][ T5893] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 490.497776][ T5893] usb 4-1: config 0 interface 85 has no altsetting 0 [ 490.508676][ T5893] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 490.519298][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.528153][ T5893] usb 4-1: Product: syz [ 490.532588][ T5893] usb 4-1: Manufacturer: syz [ 490.538201][ T5893] usb 4-1: SerialNumber: syz [ 490.546954][ T5893] usb 4-1: config 0 descriptor?? [ 490.569020][ T13] bridge_slave_1: left allmulticast mode [ 490.574924][ T13] bridge_slave_1: left promiscuous mode [ 490.583526][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.598795][ T13] bridge_slave_0: left allmulticast mode [ 490.604762][ T13] bridge_slave_0: left promiscuous mode [ 490.612211][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.186196][ T5893] appletouch 4-1:0.85: Geyser mode initialized. [ 491.215056][ T5893] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input61 [ 491.322885][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 491.341858][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 491.354237][ T13] bond0 (unregistering): Released all slaves [ 491.413320][T20614] chnl_net:caif_netlink_parms(): no params data found [ 491.421723][ T977] usb 4-1: USB disconnect, device number 43 [ 491.488975][ T977] appletouch 4-1:0.85: input: appletouch disconnected [ 491.793270][T20614] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.801585][T20614] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.810753][T20614] bridge_slave_0: entered allmulticast mode [ 491.820012][T20614] bridge_slave_0: entered promiscuous mode [ 491.829811][T20614] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.838436][T20614] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.847746][T20614] bridge_slave_1: entered allmulticast mode [ 491.854934][T20614] bridge_slave_1: entered promiscuous mode [ 491.920021][ T13] hsr_slave_0: left promiscuous mode [ 491.939695][ T13] hsr_slave_1: left promiscuous mode [ 491.955836][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 491.963317][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 492.020486][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 492.034101][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 492.093898][ T13] veth1_macvtap: left promiscuous mode [ 492.099831][ T13] veth0_macvtap: left promiscuous mode [ 492.106695][ T13] veth1_vlan: left promiscuous mode [ 492.112058][ T13] veth0_vlan: left promiscuous mode [ 492.186732][ T5827] Bluetooth: hci2: command tx timeout [ 492.512388][ T5827] Bluetooth: hci5: command 0x1003 tx timeout [ 492.519644][T18521] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 492.805247][ T5827] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 492.819359][ T5827] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 492.832718][ T5827] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 492.846682][ T5827] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 492.854736][ T5827] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 492.915947][ T5893] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 493.079546][ T5893] usb 3-1: Using ep0 maxpacket: 8 [ 493.092111][ T5893] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 493.131305][ T5893] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 493.153826][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.188845][ T5893] usb 3-1: config 0 descriptor?? [ 493.197979][ T5893] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 493.636746][ T13] team0 (unregistering): Port device team_slave_1 removed [ 493.724879][ T13] team0 (unregistering): Port device team_slave_0 removed [ 494.204598][ T5893] gspca_vc032x: reg_r err -71 [ 494.211183][ T5893] vc032x 3-1:0.0: probe with driver vc032x failed with error -71 [ 494.258637][ T5893] usb 3-1: USB disconnect, device number 50 [ 494.275828][T18521] Bluetooth: hci2: command tx timeout [ 494.689767][T20614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 494.721010][T20614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 494.889965][T20614] team0: Port device team_slave_0 added [ 494.905589][T18521] Bluetooth: hci4: command tx timeout [ 494.940982][T20614] team0: Port device team_slave_1 added [ 495.003590][T20614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 495.022445][T20614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 495.049132][T20614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 495.085940][T20614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 495.093077][T20614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 495.119509][T20614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 495.126266][T17587] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 495.226472][T20614] hsr_slave_0: entered promiscuous mode [ 495.233225][T20614] hsr_slave_1: entered promiscuous mode [ 495.240111][T20614] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 495.249081][T20614] Cannot create hsr debugfs directory [ 495.286205][T17587] usb 3-1: Using ep0 maxpacket: 32 [ 495.303111][T17587] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 495.326847][T17587] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.347025][T17587] usb 3-1: config 0 descriptor?? [ 495.472243][ T13] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.571894][T17587] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 495.592958][T17587] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 495.614853][T17587] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 495.629039][ T13] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.639492][T17587] usb 3-1: media controller created [ 495.664797][T17587] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 495.793076][ T13] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.856272][T20658] chnl_net:caif_netlink_parms(): no params data found [ 495.992070][ T13] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.208373][T20658] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.233641][T20658] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.242291][T20658] bridge_slave_0: entered allmulticast mode [ 496.251731][T20658] bridge_slave_0: entered promiscuous mode [ 496.293125][T20658] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.301180][T20658] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.308789][T20658] bridge_slave_1: entered allmulticast mode [ 496.317520][T20658] bridge_slave_1: entered promiscuous mode [ 496.356231][T18521] Bluetooth: hci2: command tx timeout [ 496.398072][T17587] az6027: usb out operation failed. (-71) [ 496.406806][T17587] stb0899_attach: Driver disabled by Kconfig [ 496.432224][T20658] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 496.442467][T17587] az6027: no front-end attached [ 496.442467][T17587] [ 496.459830][T17587] az6027: usb out operation failed. (-71) [ 496.471272][T17587] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 496.482697][T17587] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input62 [ 496.505095][T17587] dvb-usb: schedule remote query interval to 400 msecs. [ 496.514895][T17587] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 496.527517][T20658] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 496.558861][T17587] usb 3-1: USB disconnect, device number 51 [ 496.624504][T17587] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 496.663245][ T13] bridge_slave_1: left allmulticast mode [ 496.672794][ T13] bridge_slave_1: left promiscuous mode [ 496.680764][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.698260][ T13] bridge_slave_0: left allmulticast mode [ 496.704512][ T13] bridge_slave_0: left promiscuous mode [ 496.713383][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.986013][T18521] Bluetooth: hci4: command tx timeout [ 497.586071][ T5893] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 497.644253][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 497.654878][ T13] bond0 (unregistering): Released all slaves [ 497.675075][T20658] team0: Port device team_slave_0 added [ 497.701236][T20658] team0: Port device team_slave_1 added [ 497.760577][ T5893] usb 7-1: Using ep0 maxpacket: 8 [ 497.778396][ T13] tipc: Left network mode [ 497.782837][T20614] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 497.789641][ T5893] usb 7-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 497.799971][ T5893] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.804798][T20658] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 497.808731][ T5893] usb 7-1: Product: syz [ 497.820395][T20658] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 497.847192][ T5893] usb 7-1: Manufacturer: syz [ 497.847215][ T5893] usb 7-1: SerialNumber: syz [ 497.857256][T20658] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 497.858276][ T5893] usb 7-1: config 0 descriptor?? [ 497.869085][T20614] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 497.906155][ T5893] gspca_main: sq905-2.14.0 probing 2770:9120 [ 497.921038][T20658] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 497.929272][T20658] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 497.960355][T20658] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 497.978749][T20614] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 498.005590][T20614] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 498.102352][T20658] hsr_slave_0: entered promiscuous mode [ 498.109494][T20658] hsr_slave_1: entered promiscuous mode [ 498.117147][T20658] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 498.124799][T20658] Cannot create hsr debugfs directory [ 498.172844][ T13] hsr_slave_0: left promiscuous mode [ 498.181771][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 498.190937][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 498.202121][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 498.210475][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 498.238610][ T13] veth1_macvtap: left promiscuous mode [ 498.244244][ T13] veth0_macvtap: left promiscuous mode [ 498.249980][ T13] veth1_vlan: left promiscuous mode [ 498.255353][ T13] veth0_vlan: left promiscuous mode [ 498.427274][T18521] Bluetooth: hci2: command tx timeout [ 498.933834][ T5893] gspca_sq905: sq905_read_data: usb_control_msg failed (-71) [ 498.943209][ T5893] sq905 7-1:0.0: probe with driver sq905 failed with error -71 [ 498.954365][ T5893] usb 7-1: USB disconnect, device number 15 [ 499.079987][T18521] Bluetooth: hci4: command tx timeout [ 499.146581][ T13] team0 (unregistering): Port device team_slave_1 removed [ 499.233058][ T13] team0 (unregistering): Port device team_slave_0 removed [ 499.828157][ T5893] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 499.949217][ T5916] hid-generic 0000:0000:0000.003A: unknown main item tag 0x0 [ 499.973075][ T5916] hid-generic 0000:0000:0000.003A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 500.008639][ T5893] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 500.021101][ T5893] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 500.044703][ T5893] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 500.056344][ T5893] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 500.071098][ T5893] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 500.081068][ T5893] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.097970][ T5893] usb 7-1: config 0 descriptor?? [ 500.191954][T20614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 500.199538][ T43] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 500.254290][T20614] 8021q: adding VLAN 0 to HW filter on device team0 [ 500.331661][ T1085] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.338903][ T1085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 500.370567][ T43] usb 3-1: config 0 has no interfaces? [ 500.398165][ T3491] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.405402][ T3491] bridge0: port 2(bridge_slave_1) entered forwarding state [ 500.414839][ T43] usb 3-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=87.c0 [ 500.437647][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.469321][ T43] usb 3-1: Product: syz [ 500.480368][ T43] usb 3-1: Manufacturer: syz [ 500.505047][T20658] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 500.505269][ T43] usb 3-1: SerialNumber: syz [ 500.526902][ T5893] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0 [ 500.542447][T20658] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 500.549138][ T5893] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0 [ 500.549171][ T5893] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0 [ 500.549195][ T5893] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0 [ 500.549218][ T5893] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0 [ 500.550248][ T5893] plantronics 0003:047F:FFFF.003B: No inputs registered, leaving [ 500.591186][ T43] usb 3-1: config 0 descriptor?? [ 500.625900][T20658] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 500.650078][ T5893] plantronics 0003:047F:FFFF.003B: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 500.678744][T20658] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 500.819679][ T5893] usb 3-1: USB disconnect, device number 52 [ 500.852441][T17587] usb 7-1: USB disconnect, device number 16 [ 500.861474][T20658] 8021q: adding VLAN 0 to HW filter on device bond0 [ 500.901939][T20658] 8021q: adding VLAN 0 to HW filter on device team0 [ 500.930969][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.938207][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 500.970681][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.977907][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 501.041610][T20614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 501.147364][T18521] Bluetooth: hci4: command tx timeout [ 501.238134][T20776] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6092'. [ 501.262063][T20776] vlan2: entered promiscuous mode [ 501.271834][T20776] hsr0: entered promiscuous mode [ 501.462713][T20658] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 501.638660][T20614] veth0_vlan: entered promiscuous mode [ 501.687773][T20614] veth1_vlan: entered promiscuous mode [ 501.695621][ T5867] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 501.741640][T20614] veth0_macvtap: entered promiscuous mode [ 501.768719][T20614] veth1_macvtap: entered promiscuous mode [ 501.829380][T20614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 501.852896][T20614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 501.867529][ T5867] usb 3-1: Using ep0 maxpacket: 32 [ 501.878710][ T5867] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 501.892304][T20614] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.902403][ T5867] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 501.913408][T20793] evm: overlay not supported [ 501.925178][T20614] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.925388][ T5867] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 501.947856][T20614] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.970956][T20614] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.978529][ T5867] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 501.991544][ T5867] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 502.020889][ T5867] usb 3-1: Product: syz [ 502.025106][ T5867] usb 3-1: Manufacturer: syz [ 502.043355][ T5867] usb 3-1: SerialNumber: syz [ 502.059088][ T5867] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input63 [ 502.190766][ T1085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 502.205964][ T1085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 502.273509][ T1085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 502.281352][ T43] usb 3-1: USB disconnect, device number 53 [ 502.281440][ C1] appletouch 3-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 502.305177][ T43] appletouch 3-1:1.0: input: appletouch disconnected [ 502.315718][ T1085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 502.348857][T17587] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 502.393186][T20658] veth0_vlan: entered promiscuous mode [ 502.412057][T20658] veth1_vlan: entered promiscuous mode [ 502.508032][T17587] usb 4-1: Using ep0 maxpacket: 32 [ 502.518650][T17587] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 502.530985][T17587] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.553513][T20658] veth0_macvtap: entered promiscuous mode [ 502.570435][T17587] usb 4-1: config 0 descriptor?? [ 502.579287][T20658] veth1_macvtap: entered promiscuous mode [ 502.598064][T17587] as10x_usb: device has been detected [ 502.605210][T17587] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 502.638509][T17587] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 502.650314][T20658] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 502.671188][T20658] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 502.673576][T17587] as10x_usb: error during firmware upload part1 [ 502.682546][T20658] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.698298][T17587] Registered device nBox DVB-T Dongle [ 502.700423][T20658] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.715884][T20658] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.724751][T20658] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.853647][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 502.864879][T17587] usb 4-1: USB disconnect, device number 44 [ 502.878870][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 502.891927][T17587] Unregistered device nBox DVB-T Dongle [ 502.893326][T17587] as10x_usb: device has been disconnected [ 502.935135][ T1085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 502.944901][ T1085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.222493][T17472] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.337755][T17472] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.410967][ T43] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 503.434204][T17472] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.601683][ T43] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 503.615197][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.627060][ T43] usb 3-1: config 0 descriptor?? [ 503.643133][T17472] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.873504][T17472] bridge_slave_1: left allmulticast mode [ 503.880625][T17472] bridge_slave_1: left promiscuous mode [ 503.886553][T17472] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.897605][T17472] bridge_slave_0: left allmulticast mode [ 503.903290][T17472] bridge_slave_0: left promiscuous mode [ 503.909711][T17472] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.052142][ T43] [drm:udl_init] *ERROR* Selecting channel failed [ 504.077551][ T43] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 504.084299][ T43] [drm] Initialized udl on minor 2 [ 504.111180][ T43] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 504.158180][ T43] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 504.170206][T17587] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 504.197179][T17587] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 504.207988][ T43] usb 3-1: USB disconnect, device number 54 [ 504.216433][T17587] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 504.594644][ T5827] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 504.618902][ T5827] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 504.630799][ T5827] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 504.649818][ T5827] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 504.664441][ T5827] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 504.844248][T17472] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 504.874165][T17472] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 504.898299][T17472] bond0 (unregistering): Released all slaves [ 505.152577][T20838] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 505.659116][T17472] hsr_slave_0: left promiscuous mode [ 505.682278][T17472] hsr_slave_1: left promiscuous mode [ 505.699597][T17472] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 505.715741][T17472] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 505.739950][T17472] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 505.752027][T17472] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 505.839406][T17472] veth1_macvtap: left promiscuous mode [ 505.855514][T17472] veth0_macvtap: left promiscuous mode [ 505.861349][T17472] veth1_vlan: left promiscuous mode [ 505.881572][T17472] veth0_vlan: left promiscuous mode [ 505.942517][ T977] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 506.140035][ T977] usb 7-1: config 0 has an invalid interface number: 235 but max is 0 [ 506.161922][ T977] usb 7-1: config 0 has no interface number 0 [ 506.177331][ T977] usb 7-1: config 0 interface 235 altsetting 16 endpoint 0x5 has invalid maxpacket 49765, setting to 64 [ 506.202786][ T977] usb 7-1: config 0 interface 235 has no altsetting 0 [ 506.233637][ T977] usb 7-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=3e.18 [ 506.254675][ T977] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.268894][T20885] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 506.287828][ T977] usb 7-1: Product: syz [ 506.292042][ T977] usb 7-1: Manufacturer: syz [ 506.317145][ T977] usb 7-1: SerialNumber: syz [ 506.339566][ T977] usb 7-1: config 0 descriptor?? [ 506.351030][T20869] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 506.383926][ T977] keyspan 7-1:0.235: Keyspan 1 port adapter converter detected [ 506.425807][ T977] keyspan 7-1:0.235: found no endpoint descriptor for endpoint 87 [ 506.431988][T20892] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6136'. [ 506.433757][ T977] keyspan 7-1:0.235: found no endpoint descriptor for endpoint 7 [ 506.468005][ T977] keyspan 7-1:0.235: found no endpoint descriptor for endpoint 81 [ 506.479808][ T977] keyspan 7-1:0.235: found no endpoint descriptor for endpoint 1 [ 506.489936][ T977] keyspan 7-1:0.235: found no endpoint descriptor for endpoint 85 [ 506.504371][ T977] usb 7-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 506.638487][ T977] usb 7-1: USB disconnect, device number 17 [ 506.650886][ T977] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 506.663094][ T977] keyspan 7-1:0.235: device disconnected [ 506.747636][ T5827] Bluetooth: hci2: command tx timeout [ 506.862819][T20903] input: syz1 as /devices/virtual/input/input64 [ 507.130983][T17472] team0 (unregistering): Port device team_slave_1 removed [ 507.259467][T17472] team0 (unregistering): Port device team_slave_0 removed [ 507.288211][T20909] sctp: [Deprecated]: syz.6.6143 (pid 20909) Use of struct sctp_assoc_value in delayed_ack socket option. [ 507.288211][T20909] Use struct sctp_sack_info instead [ 507.359982][T20911] netlink: 'syz.2.6144': attribute type 1 has an invalid length. [ 507.375964][T20911] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6144'. [ 508.072474][T20827] chnl_net:caif_netlink_parms(): no params data found [ 508.364970][T20827] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.380394][T20827] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.388047][T20827] bridge_slave_0: entered allmulticast mode [ 508.396051][T20827] bridge_slave_0: entered promiscuous mode [ 508.404839][T20827] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.412920][T20827] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.420910][T20827] bridge_slave_1: entered allmulticast mode [ 508.428873][T20827] bridge_slave_1: entered promiscuous mode [ 508.475513][ T5868] usb 3-1: new full-speed USB device number 55 using dummy_hcd [ 508.509570][T20827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 508.525128][T20827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 508.632754][T20827] team0: Port device team_slave_0 added [ 508.646854][ T5868] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 508.669301][T20827] team0: Port device team_slave_1 added [ 508.680887][ T5868] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 508.701166][ T5868] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 508.720028][ T5868] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 508.736453][ T5868] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 508.758095][ T5868] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 508.779163][ T5868] usb 3-1: Manufacturer: syz [ 508.789839][T20827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 508.806441][T20827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 508.838256][ T5868] usb 3-1: config 0 descriptor?? [ 508.846031][ T5827] Bluetooth: hci2: command tx timeout [ 508.854812][T20827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 508.871525][T20827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 508.878680][T20827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 508.905267][T20827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 508.940203][ T30] audit: type=1400 audit(1748388562.819:2582): lsm=SMACK fn=smack_inode_remove_acl action=denied subject="w" object="_" requested=w pid=20945 comm="syz.6.6159" name="342" dev="tmpfs" ino=1764 [ 509.054414][T20827] hsr_slave_0: entered promiscuous mode [ 509.077169][T20827] hsr_slave_1: entered promiscuous mode [ 509.099023][T20827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 509.119278][T20827] Cannot create hsr debugfs directory [ 509.179056][ T5868] rc_core: IR keymap rc-hauppauge not found [ 509.195304][ T5868] Registered IR keymap rc-empty [ 509.205782][ T5868] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 509.235644][ T5868] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 509.286398][ T5868] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 509.321061][ T5868] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input65 [ 509.385148][ T5868] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 509.425701][ T5868] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 509.445669][ T5868] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 509.482888][T20967] netdevsim netdevsim6: Direct firmware load for ./file0 failed with error -2 [ 509.495648][ T5868] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 509.499794][T20967] netdevsim netdevsim6: Falling back to sysfs fallback for: ./file0 [ 509.525696][ T5868] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 509.545834][ T5868] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 509.576302][ T5868] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 509.596681][ T5868] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 509.616484][ T5868] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 509.646395][ T5868] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 509.688858][ T5868] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 509.698810][ T5868] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 509.711427][ T5868] usb 3-1: USB disconnect, device number 55 [ 509.905294][T20827] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 509.920311][T20827] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 509.932961][T20827] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 509.950442][T20827] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 510.059347][T20827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 510.099357][T20827] 8021q: adding VLAN 0 to HW filter on device team0 [ 510.122699][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.129901][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 510.142052][T20980] program syz.8.6174 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 510.159583][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.166810][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 510.832789][T20827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 510.905784][ T5827] Bluetooth: hci2: command tx timeout [ 511.529292][T20827] veth0_vlan: entered promiscuous mode [ 511.574327][T20827] veth1_vlan: entered promiscuous mode [ 511.702206][T20827] veth0_macvtap: entered promiscuous mode [ 511.738211][T20827] veth1_macvtap: entered promiscuous mode [ 511.800232][T20827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 512.012442][T20827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 512.062369][T20827] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.091620][T20827] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.113725][T20827] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.140600][T20827] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.392541][T17472] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 512.409586][T17472] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 512.459681][ T3491] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 512.486201][ T43] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 512.486328][ T3491] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 512.655844][ T43] usb 7-1: Using ep0 maxpacket: 32 [ 512.696296][ T43] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 512.706809][ T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.730708][ T43] usb 7-1: config 0 descriptor?? [ 512.928669][T21060] syzkaller1: entered promiscuous mode [ 512.940346][T21060] syzkaller1: entered allmulticast mode [ 512.963253][ T43] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 512.976618][ T43] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 513.015119][ T43] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 513.033422][ T43] usb 7-1: media controller created [ 513.109104][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 513.174547][T21049] az6027: more than 2 i2c messages at a time is not handled yet. TODO. [ 513.192115][ T43] az6027: usb out operation failed. (-71) [ 513.209133][ T43] az6027: usb out operation failed. (-71) [ 513.214918][ T43] stb0899_attach: Driver disabled by Kconfig [ 513.256062][ T43] az6027: no front-end attached [ 513.256062][ T43] [ 513.274501][ T43] az6027: usb out operation failed. (-71) [ 513.288740][ T43] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 513.318339][ T43] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input66 [ 513.380044][ T43] dvb-usb: schedule remote query interval to 400 msecs. [ 513.406294][ T43] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 513.455217][ T43] usb 7-1: USB disconnect, device number 18 [ 513.722736][T18521] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 513.735109][T18521] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 513.746396][T18521] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 513.757950][T18521] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 513.774752][T18521] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 513.844982][ T43] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 513.899868][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.911450][ T30] audit: type=1326 audit(1748388567.799:2583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21068 comm="syz.8.6209" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2c30b8e969 code=0x0 [ 514.079041][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.415865][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.447551][T21070] chnl_net:caif_netlink_parms(): no params data found [ 514.484936][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.620956][T21070] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.629060][T21070] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.636382][T21070] bridge_slave_0: entered allmulticast mode [ 514.643332][T21070] bridge_slave_0: entered promiscuous mode [ 514.653452][T21070] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.660980][T21070] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.668389][T21070] bridge_slave_1: entered allmulticast mode [ 514.676545][T21070] bridge_slave_1: entered promiscuous mode [ 514.723769][T21070] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 514.755950][T21070] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 514.784109][ T12] bridge_slave_1: left allmulticast mode [ 514.790208][ T12] bridge_slave_1: left promiscuous mode [ 514.796698][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.810499][ T12] bridge_slave_0: left allmulticast mode [ 514.816783][ T12] bridge_slave_0: left promiscuous mode [ 514.822480][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.907625][T21084] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6211'. [ 515.448011][T18521] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 515.460384][T18521] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 515.473431][T18521] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 515.484354][T18521] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 515.494345][T18521] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 515.689892][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 515.703661][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 515.717697][ T12] bond0 (unregistering): Released all slaves [ 515.813253][T21070] team0: Port device team_slave_0 added [ 515.876764][ T5827] Bluetooth: hci2: command tx timeout [ 515.907728][T21070] team0: Port device team_slave_1 added [ 516.157947][T21070] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 516.166679][T21070] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 516.204223][T21070] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 516.285573][T21070] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 516.294723][T21070] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 516.325433][ T977] usb 9-1: new low-speed USB device number 2 using dummy_hcd [ 516.334323][T21070] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 516.430258][ T12] hsr_slave_0: left promiscuous mode [ 516.440142][ T12] hsr_slave_1: left promiscuous mode [ 516.446974][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 516.454516][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 516.463006][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 516.471350][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 516.480999][ T977] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 516.489443][ T977] usb 9-1: config 0 has no interface number 0 [ 516.495941][ T977] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 516.525523][ T977] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 516.537139][ T12] veth1_macvtap: left promiscuous mode [ 516.542800][ T12] veth0_macvtap: left promiscuous mode [ 516.548506][ T977] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 516.560449][ T12] veth1_vlan: left promiscuous mode [ 516.566069][ T977] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 516.578124][ T12] veth0_vlan: left promiscuous mode [ 516.587922][ T977] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 516.610274][ T977] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 516.645479][ T977] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 516.654675][ T977] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.685875][ T977] usb 9-1: config 0 descriptor?? [ 516.691658][T21106] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 516.713410][T21106] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 516.748967][ T977] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 516.981555][ T5868] usb 9-1: USB disconnect, device number 2 [ 516.991642][ T5868] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 517.258173][ T12] team0 (unregistering): Port device team_slave_1 removed [ 517.316618][ T12] team0 (unregistering): Port device team_slave_0 removed [ 517.557735][ T5827] Bluetooth: hci3: command tx timeout [ 517.583711][T21126] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6228'. [ 517.961854][T18521] Bluetooth: hci2: command tx timeout [ 518.184943][T21070] hsr_slave_0: entered promiscuous mode [ 518.197441][T21070] hsr_slave_1: entered promiscuous mode [ 518.203846][T21070] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 518.212171][T21070] Cannot create hsr debugfs directory [ 518.394130][T21140] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6234'. [ 518.473867][T21140] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 518.483730][T21140] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 518.493020][T21140] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 518.502368][T21140] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 518.533253][T21140] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 518.542939][T21140] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 518.552494][T21140] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 518.561566][T21140] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 518.646086][T21148] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 519.018950][T21092] chnl_net:caif_netlink_parms(): no params data found [ 519.331320][T21070] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 519.387455][T21070] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 519.399559][T21070] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 519.460969][T21092] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.471104][T21092] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.515844][T21092] bridge_slave_0: entered allmulticast mode [ 519.523725][T21092] bridge_slave_0: entered promiscuous mode [ 519.567776][T21070] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 519.599344][T21092] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.617173][T21092] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.624550][T21092] bridge_slave_1: entered allmulticast mode [ 519.630776][T18521] Bluetooth: hci3: command tx timeout [ 519.643002][T21092] bridge_slave_1: entered promiscuous mode [ 519.781244][T21092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 519.815050][T21092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 519.855724][T20532] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 519.914206][T21092] team0: Port device team_slave_0 added [ 519.937112][T21092] team0: Port device team_slave_1 added [ 520.020600][T21092] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 520.026582][T18521] Bluetooth: hci2: command tx timeout [ 520.036427][T20532] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 520.056378][T21092] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 520.083707][T20532] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 520.118783][T20532] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 520.145401][T20532] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 520.159489][T20532] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.167979][T21092] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 520.178986][T20532] usb 4-1: Product: syz [ 520.183182][T20532] usb 4-1: Manufacturer: syz [ 520.194713][T20532] usb 4-1: SerialNumber: syz [ 520.210635][T21181] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 520.222317][T21092] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 520.235988][T21092] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 520.269757][T21092] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 520.301328][ T30] audit: type=1326 audit(1748388574.199:2584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21189 comm="syz.8.6255" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2c30b8e969 code=0x0 [ 520.426359][T21092] hsr_slave_0: entered promiscuous mode [ 520.432847][T21092] hsr_slave_1: entered promiscuous mode [ 520.452130][T21181] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 520.463348][T21092] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 520.471390][T21092] Cannot create hsr debugfs directory [ 520.578927][T21070] 8021q: adding VLAN 0 to HW filter on device bond0 [ 520.671788][T21070] 8021q: adding VLAN 0 to HW filter on device team0 [ 520.711886][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.719122][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 520.769728][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.777004][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 521.069459][T21181] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 521.285062][T20532] cdc_ncm 4-1:1.0: bind() failure [ 521.301919][T20532] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 521.330060][T21070] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 521.391134][T21092] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 521.443482][T21092] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 521.446090][T20532] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 521.472989][T21092] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 521.482095][T20532] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 521.515869][T20532] usb 4-1: USB disconnect, device number 45 [ 521.520929][T21092] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 521.660682][T21209] netlink: 'syz.8.6260': attribute type 1 has an invalid length. [ 521.693766][T21209] netlink: 224 bytes leftover after parsing attributes in process `syz.8.6260'. [ 521.707861][T18521] Bluetooth: hci3: command tx timeout [ 521.813321][T21092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 521.889911][T21218] ALSA: mixer_oss: invalid OSS volume '' [ 521.892324][T21092] 8021q: adding VLAN 0 to HW filter on device team0 [ 521.934375][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.941609][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 522.068742][ T1085] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.075963][ T1085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 522.104237][T21227] netlink: 830 bytes leftover after parsing attributes in process `syz.6.6265'. [ 522.107272][T18521] Bluetooth: hci2: command tx timeout [ 522.320290][T21070] veth0_vlan: entered promiscuous mode [ 522.354330][T21070] veth1_vlan: entered promiscuous mode [ 522.450230][T21070] veth0_macvtap: entered promiscuous mode [ 522.480198][T21070] veth1_macvtap: entered promiscuous mode [ 522.533091][T21070] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 522.562279][T21070] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 522.577210][T21070] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.613118][T21070] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.628072][T21070] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.639240][T21070] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.753238][T21092] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 522.900427][T17472] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 522.935757][T17472] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.981227][T21253] loop8: detected capacity change from 0 to 1 [ 523.014749][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 523.019614][T21253] Dev loop8: unable to read RDB block 1 [ 523.039107][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 523.044655][T21253] loop8: unable to read partition table [ 523.082837][T21253] loop8: partition table beyond EOD, truncated [ 523.126270][T21253] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 523.420383][T21092] veth0_vlan: entered promiscuous mode [ 523.441406][T21092] veth1_vlan: entered promiscuous mode [ 523.512998][T21092] veth0_macvtap: entered promiscuous mode [ 523.534909][T21092] veth1_macvtap: entered promiscuous mode [ 523.576897][ T5868] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 523.592023][T21092] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 523.620417][T21092] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 523.650550][T21092] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.667841][T21092] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.681651][T21092] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.691763][T21092] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.774178][ T5868] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 523.788668][T18521] Bluetooth: hci3: command tx timeout [ 523.803065][ T5868] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 523.867247][ T5868] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 523.880242][T21288] batadv_slave_1: entered promiscuous mode [ 523.903964][ T5868] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 523.908767][T21287] batadv_slave_1: left promiscuous mode [ 523.930689][ T5868] usb 10-1: SerialNumber: syz [ 523.938453][T17472] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 523.962523][T17472] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 524.070885][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 524.122687][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 524.205153][ T5868] usb 10-1: 0:2 : does not exist [ 524.242338][ T5868] usb 10-1: USB disconnect, device number 2 [ 524.278447][T21299] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 524.319795][T21300] overlay: filesystem on ./bus not supported as upperdir [ 524.478838][T21306] input: syz0 as /devices/virtual/input/input67 [ 524.966236][ T1085] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.123301][ T1085] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.214386][ T977] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 525.227940][ T1085] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.375590][ T977] usb 10-1: Using ep0 maxpacket: 16 [ 525.382496][ T977] usb 10-1: unable to get BOS descriptor or descriptor too short [ 525.395421][ T977] usb 10-1: config 1 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 39, changing to 9 [ 525.406968][ T977] usb 10-1: config 1 interface 0 altsetting 127 endpoint 0x81 has invalid maxpacket 1536, setting to 1024 [ 525.418508][ T977] usb 10-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 525.433349][ T977] usb 10-1: config 1 interface 0 has no altsetting 0 [ 525.442537][ T977] usb 10-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 525.452026][ T977] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.460373][ T977] usb 10-1: Product: syz [ 525.464709][ T977] usb 10-1: Manufacturer: syz [ 525.468315][ T1085] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.476189][ T977] usb 10-1: SerialNumber: syz [ 525.494936][T21326] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 525.658633][ T1085] bridge_slave_1: left allmulticast mode [ 525.664344][ T1085] bridge_slave_1: left promiscuous mode [ 525.670948][ T1085] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.683579][ T1085] bridge_slave_0: left allmulticast mode [ 525.690051][ T1085] bridge_slave_0: left promiscuous mode [ 525.697157][ T1085] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.719228][ T977] input: bcm5974 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/input/input68 [ 526.161426][ C1] bcm5974 10-1:1.0: trackpad urb failed: -1 [ 526.196357][ T30] audit: type=1400 audit(1748388580.089:2585): lsm=SMACK fn=smack_file_ioctl action=denied subject="w" object="_" requested=w pid=21331 comm="syz.6.6311" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=91295 [ 526.298996][T21334] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 526.326800][ T977] usb 10-1: USB disconnect, device number 3 [ 526.327690][ T5172] bcm5974 10-1:1.0: could not read from device [ 526.378576][ T5172] bcm5974 10-1:1.0: could not read from device [ 526.531647][ T5868] kernel write not supported for file /sg0 (pid: 5868 comm: kworker/0:7) [ 526.544637][ T1085] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 526.590948][ T1085] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 526.624235][ T1085] bond0 (unregistering): Released all slaves [ 526.882205][ T5827] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 526.893939][ T5827] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 526.914637][ T5827] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 526.925748][ T5827] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 526.934276][ T5827] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 527.058034][T21359] mkiss: ax0: crc mode is auto. [ 527.319281][ T1085] hsr_slave_0: left promiscuous mode [ 527.335891][ T1085] hsr_slave_1: left promiscuous mode [ 527.341844][ T1085] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 527.366014][ T1085] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 527.387191][ T1085] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 527.394862][ T1085] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 527.430724][ T1085] veth1_macvtap: left promiscuous mode [ 527.437908][ T1085] veth0_macvtap: left promiscuous mode [ 527.443573][ T1085] veth1_vlan: left promiscuous mode [ 527.449131][ T1085] veth0_vlan: left promiscuous mode [ 527.925495][ T10] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 528.108533][ T10] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 528.117919][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 528.174955][ T10] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 528.177469][T18521] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 528.201522][T18521] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 528.210395][T18521] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 528.227032][T18521] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 528.236660][T18521] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 528.261294][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 528.280604][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 528.322422][ T10] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 528.366475][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 528.383170][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 528.421177][ T10] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 528.456992][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 528.476908][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 528.486357][ T10] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 528.499111][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 528.541237][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 528.562062][ T10] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 528.595739][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 528.604507][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 528.619026][ T10] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 528.636176][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 528.650513][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 528.659767][ T10] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 528.674934][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 528.683180][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 528.692429][ T10] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 528.703866][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 528.715181][ T10] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 528.724960][ T10] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 528.736884][ T10] usb 4-1: Product: syz [ 528.741088][ T10] usb 4-1: Manufacturer: syz [ 528.750829][ T10] usb 4-1: SerialNumber: syz [ 528.763444][ T10] usb 4-1: config 0 descriptor?? [ 528.800123][ T10] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 528.841657][ T1085] team0 (unregistering): Port device team_slave_1 removed [ 528.905161][ T1085] team0 (unregistering): Port device team_slave_0 removed [ 529.062919][ T10] usb 4-1: USB disconnect, device number 46 [ 529.075082][ T5827] Bluetooth: hci3: command tx timeout [ 529.077012][ T10] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 529.879281][T21354] chnl_net:caif_netlink_parms(): no params data found [ 530.201681][T21402] input: syz0 as /devices/virtual/input/input69 [ 530.274335][ T5827] Bluetooth: hci4: command tx timeout [ 530.315109][T21374] chnl_net:caif_netlink_parms(): no params data found [ 530.390372][T21354] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.393604][T21407] program syz.9.6339 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 530.399189][T21354] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.416054][T21354] bridge_slave_0: entered allmulticast mode [ 530.424825][T21354] bridge_slave_0: entered promiscuous mode [ 530.494355][ T1085] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.596714][T21354] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.603842][T21354] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.629011][T21354] bridge_slave_1: entered allmulticast mode [ 530.638262][T21354] bridge_slave_1: entered promiscuous mode [ 530.816164][T17587] IPVS: starting estimator thread 0... [ 530.835289][T21354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 530.893081][ T1085] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.916210][T21427] IPVS: using max 27 ests per chain, 64800 per kthread [ 530.919277][T21426] tipc: Started in network mode [ 530.945807][T21426] tipc: Node identity ac1414aa, cluster identity 4711 [ 530.967346][T21426] tipc: Enabled bearer , priority 10 [ 530.977421][T21354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 531.108305][ T1085] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.146342][ T5827] Bluetooth: hci3: command tx timeout [ 531.269614][ T1085] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.306357][T21354] team0: Port device team_slave_0 added [ 531.318068][T21441] can0: slcan on ttyS3. [ 531.347352][T21374] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.366641][T21374] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.373928][T21374] bridge_slave_0: entered allmulticast mode [ 531.386240][T21374] bridge_slave_0: entered promiscuous mode [ 531.404453][T21354] team0: Port device team_slave_1 added [ 531.436633][T21374] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.444801][T21374] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.453053][T21374] bridge_slave_1: entered allmulticast mode [ 531.461179][T21374] bridge_slave_1: entered promiscuous mode [ 531.468003][T21445] can0 (unregistered): slcan off ttyS3. [ 531.628826][T21374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 531.642086][T21354] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 531.649694][T21354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 531.676270][ T10] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 531.685114][T21354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 531.699635][T21374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 531.782480][T21354] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 531.797371][T21354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 531.829687][T21354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 531.849916][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 531.859333][ T10] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 531.869498][ T977] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 531.881730][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.899568][ T10] usb 7-1: Product: syz [ 531.912230][ T10] usb 7-1: Manufacturer: syz [ 531.926041][ T10] usb 7-1: SerialNumber: syz [ 531.942550][ T10] usb 7-1: config 0 descriptor?? [ 531.952440][T21374] team0: Port device team_slave_0 added [ 531.991695][T21374] team0: Port device team_slave_1 added [ 532.041990][ T977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 532.064394][ T977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 532.079569][ T977] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 532.103352][ T977] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 532.113257][T20532] tipc: Node number set to 2886997162 [ 532.132768][ T977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.145957][ T977] usb 4-1: config 0 descriptor?? [ 532.172201][ T10] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 532.195009][T21374] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 532.203569][T21374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 532.231571][T21374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 532.259790][T21354] hsr_slave_0: entered promiscuous mode [ 532.277396][T21354] hsr_slave_1: entered promiscuous mode [ 532.283942][T21354] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 532.299683][T21354] Cannot create hsr debugfs directory [ 532.317832][T21374] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 532.324850][T21374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 532.346415][ T5827] Bluetooth: hci4: command tx timeout [ 532.364123][T21374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 532.393117][ T1085] bridge_slave_1: left allmulticast mode [ 532.401729][ T1085] bridge_slave_1: left promiscuous mode [ 532.411399][ T1085] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.425208][ T1085] bridge_slave_0: left allmulticast mode [ 532.443137][ T1085] bridge_slave_0: left promiscuous mode [ 532.451522][ T1085] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.567725][ T977] plantronics 0003:047F:FFFF.003C: No inputs registered, leaving [ 532.587074][ T977] plantronics 0003:047F:FFFF.003C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 532.779705][ T10] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 532.807367][ T10] usb 7-1: USB disconnect, device number 19 [ 532.849173][T17587] usb 4-1: USB disconnect, device number 47 [ 533.225998][ T5827] Bluetooth: hci3: command tx timeout [ 533.298971][ T1085] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 533.321154][ T1085] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 533.340703][ T30] audit: type=1326 audit(1748388587.239:2586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21475 comm="syz.9.6367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dc578e969 code=0x7ffc0000 [ 533.409318][ T1085] bond0 (unregistering): Released all slaves [ 533.425777][ T30] audit: type=1326 audit(1748388587.269:2587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21475 comm="syz.9.6367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1dc572ab39 code=0x7ffc0000 [ 533.538715][ T30] audit: type=1326 audit(1748388587.269:2588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21475 comm="syz.9.6367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dc578e969 code=0x7ffc0000 [ 533.579297][T21480] could not open pipe file descriptor [ 533.639723][ T30] audit: type=1326 audit(1748388587.269:2589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21475 comm="syz.9.6367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1dc572ab39 code=0x7ffc0000 [ 533.663195][ T30] audit: type=1326 audit(1748388587.269:2590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21475 comm="syz.9.6367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dc578e969 code=0x7ffc0000 [ 533.696044][ T30] audit: type=1326 audit(1748388587.269:2591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21475 comm="syz.9.6367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dc578e969 code=0x7ffc0000 [ 533.718062][ T30] audit: type=1326 audit(1748388587.269:2592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21475 comm="syz.9.6367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1dc572ab39 code=0x7ffc0000 [ 533.815769][ T30] audit: type=1326 audit(1748388587.269:2593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21475 comm="syz.9.6367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1dc572ab39 code=0x7ffc0000 [ 533.899497][ T30] audit: type=1326 audit(1748388587.269:2594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21475 comm="syz.9.6367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1dc572ab39 code=0x7ffc0000 [ 533.930285][ T30] audit: type=1326 audit(1748388587.269:2595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21475 comm="syz.9.6367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dc578e969 code=0x7ffc0000 [ 534.050226][T21374] hsr_slave_0: entered promiscuous mode [ 534.080747][T21374] hsr_slave_1: entered promiscuous mode [ 534.092779][T21374] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 534.101950][T21374] Cannot create hsr debugfs directory [ 534.329239][ T1085] hsr_slave_0: left promiscuous mode [ 534.342588][ T1085] hsr_slave_1: left promiscuous mode [ 534.354554][ T1085] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 534.364698][ T1085] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 534.379534][ T1085] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 534.397737][ T1085] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 534.425750][ T5827] Bluetooth: hci4: command tx timeout [ 534.440221][ T1085] veth1_macvtap: left promiscuous mode [ 534.446122][ T1085] veth0_macvtap: left promiscuous mode [ 534.451708][ T1085] veth1_vlan: left promiscuous mode [ 534.457167][ T1085] veth0_vlan: left promiscuous mode [ 534.488884][T21502] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6378'. [ 535.038031][ T1085] team0 (unregistering): Port device team_slave_1 removed [ 535.104765][ T1085] team0 (unregistering): Port device team_slave_0 removed [ 535.305597][ T5827] Bluetooth: hci3: command tx timeout [ 535.944762][T21516] netlink: 80 bytes leftover after parsing attributes in process `syz.3.6385'. [ 535.987837][T21516] netlink: 80 bytes leftover after parsing attributes in process `syz.3.6385'. [ 536.101408][T21520] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6386'. [ 536.515467][ T5827] Bluetooth: hci4: command tx timeout [ 537.095015][T21354] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 537.124074][T21354] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 537.142617][T21354] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 537.276631][ T5893] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 598.825659][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.185337][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 642.192339][ C1] rcu: 0-...!: (1 GPs behind) idle=e404/1/0x4000000000000000 softirq=111674/111675 fqs=9 [ 642.203500][ C1] rcu: (detected by 1, t=10502 jiffies, g=97585, q=272 ncpus=2) [ 642.211251][ C1] Sending NMI from CPU 1 to CPUs 0: [ 642.211300][ C0] NMI backtrace for cpu 0 [ 642.211334][ C0] CPU: 0 UID: 0 PID: 21354 Comm: syz-executor Not tainted 6.15.0-syzkaller-02443-g015a99fa7665 #0 PREEMPT(full) [ 642.211353][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 642.211366][ C0] RIP: 0010:lock_acquire+0xb9/0x360 [ 642.211389][ C0] Code: 7c e9 e0 0d 00 0f 84 fa 00 00 00 65 8b 05 0f ed d7 10 85 c0 0f 85 eb 00 00 00 65 48 8b 04 25 08 90 75 92 83 b8 ec 0a 00 00 00 <0f> 85 d5 00 00 00 48 c7 44 24 30 00 00 00 00 9c 8f 44 24 30 4c 89 [ 642.211404][ C0] RSP: 0018:ffffc90000007bc0 EFLAGS: 00000046 [ 642.211419][ C0] RAX: ffff888026f19e00 RBX: 0000000000000000 RCX: cd0f3f0c0da9bd00 [ 642.211431][ C0] RDX: 0000000000000000 RSI: ffffffff8b59622e RDI: 1ffff1100b338a60 [ 642.211442][ C0] RBP: ffffffff89782074 R08: 0000000000000001 R09: 0000000000000000 [ 642.211452][ C0] R10: dffffc0000000000 R11: ffffffff89781fb0 R12: 0000000000000000 [ 642.211463][ C0] R13: ffff8880599c5300 R14: 0000000000000000 R15: 0000000000000001 [ 642.211474][ C0] FS: 000055555b343500(0000) GS:ffff8881260c7000(0000) knlGS:0000000000000000 [ 642.211488][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 642.211499][ C0] CR2: 0000001b2f61fffc CR3: 000000006db78000 CR4: 00000000003526f0 [ 642.211513][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 642.211523][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 642.211533][ C0] Call Trace: [ 642.211541][ C0] [ 642.211563][ C0] _raw_spin_lock+0x2e/0x40 [ 642.211580][ C0] ? advance_sched+0xc4/0xc90 [ 642.211598][ C0] advance_sched+0xc4/0xc90 [ 642.211616][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 642.211632][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 642.211652][ C0] ? __pfx_advance_sched+0x10/0x10 [ 642.211669][ C0] __hrtimer_run_queues+0x529/0xc60 [ 642.211699][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 642.211715][ C0] ? read_tsc+0x9/0x20 [ 642.211735][ C0] hrtimer_interrupt+0x45b/0xaa0 [ 642.211768][ C0] __sysvec_apic_timer_interrupt+0x10b/0x410 [ 642.211789][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 642.211807][ C0] [ 642.211813][ C0] [ 642.211820][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 642.211837][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110 [ 642.211853][ C0] Code: 74 05 e8 cb 0a 6e f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 33 2a 37 f6 65 8b 05 6c 2a 1c 07 85 c0 74 40 48 c7 04 24 0e 36 [ 642.211866][ C0] RSP: 0018:ffffc9000449e420 EFLAGS: 00000206 [ 642.211879][ C0] RAX: cd0f3f0c0da9bd00 RBX: 0000000000000a06 RCX: cd0f3f0c0da9bd00 [ 642.211891][ C0] RDX: 0000000000000002 RSI: ffffffff8d74785b RDI: 0000000000000001 [ 642.211901][ C0] RBP: ffffc9000449e4b0 R08: ffffffff8f7e9bb7 R09: 1ffffffff1efd376 [ 642.211913][ C0] R10: dffffc0000000000 R11: fffffbfff1efd377 R12: dffffc0000000000 [ 642.211925][ C0] R13: ffff88802844a9c0 R14: ffffffff99a45750 R15: 1ffff92000893c84 [ 642.211948][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 642.211963][ C0] ? rtnl_put_cacheinfo+0x1f2/0x280 [ 642.211986][ C0] ? skb_release_data+0x5fd/0x790 [ 642.212014][ C0] debug_check_no_obj_freed+0x451/0x470 [ 642.212036][ C0] ? netlink_broadcast_filtered+0x91/0x1140 [ 642.212057][ C0] ? skb_release_data+0x5fd/0x790 [ 642.212074][ C0] kmem_cache_free+0x113/0x400 [ 642.212097][ C0] skb_release_data+0x5fd/0x790 [ 642.212121][ C0] consume_skb+0x9e/0xf0 [ 642.212139][ C0] netlink_broadcast_filtered+0x103c/0x1140 [ 642.212158][ C0] ? __build_skb_around+0x257/0x3e0 [ 642.212182][ C0] nlmsg_notify+0xf0/0x1a0 [ 642.212201][ C0] fib6_add+0x1d0d/0x4360 [ 642.212233][ C0] ? __pfx_fib6_add+0x10/0x10 [ 642.212250][ C0] ? do_raw_spin_lock+0x121/0x290 [ 642.212270][ C0] ? ip6_route_add+0x75/0x160 [ 642.212287][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 642.212311][ C0] ? ip6_route_add+0x75/0x160 [ 642.212328][ C0] ip6_route_add+0x8a/0x160 [ 642.212345][ C0] addrconf_add_dev+0x24f/0x340 [ 642.212361][ C0] ? __pfx_addrconf_add_dev+0x10/0x10 [ 642.212388][ C0] ? addrconf_permanent_addr+0x917/0x9d0 [ 642.212406][ C0] ? addrconf_permanent_addr+0x917/0x9d0 [ 642.212427][ C0] addrconf_init_auto_addrs+0x5cf/0xb50 [ 642.212444][ C0] ? __pfx_addrconf_init_auto_addrs+0x10/0x10 [ 642.212464][ C0] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 642.212484][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 642.212501][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 642.212518][ C0] ? tls_dev_event+0x717/0xec0 [ 642.212545][ C0] ? addrconf_link_ready+0x112/0x170 [ 642.212563][ C0] addrconf_notify+0xacc/0x1010 [ 642.212583][ C0] notifier_call_chain+0x1b6/0x3e0 [ 642.212606][ C0] __dev_notify_flags+0x18d/0x2e0 [ 642.212626][ C0] ? __pfx___dev_notify_flags+0x10/0x10 [ 642.212642][ C0] ? __dev_change_flags+0x4cc/0x6d0 [ 642.212663][ C0] ? __pfx___dev_change_flags+0x10/0x10 [ 642.212683][ C0] ? __pfx_netif_change_name+0x10/0x10 [ 642.212701][ C0] netif_change_flags+0xe8/0x1a0 [ 642.212722][ C0] do_setlink+0xcb9/0x40d0 [ 642.212748][ C0] ? __pfx_do_setlink+0x10/0x10 [ 642.212766][ C0] ? __lock_acquire+0xab9/0xd20 [ 642.212786][ C0] ? __mutex_trylock_common+0x153/0x260 [ 642.212807][ C0] ? __pfx___mutex_trylock_common+0x10/0x10 [ 642.212829][ C0] ? rcu_is_watching+0x15/0xb0 [ 642.212848][ C0] ? trace_contention_end+0x39/0x120 [ 642.212867][ C0] ? __mutex_lock+0x330/0xe80 [ 642.212889][ C0] ? rtnl_newlink+0x8db/0x1c70 [ 642.212904][ C0] ? rcu_is_watching+0x15/0xb0 [ 642.212923][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 642.212945][ C0] ? ns_capable+0x8a/0xf0 [ 642.212964][ C0] ? rtnl_link_get_net_capable+0x16a/0x350 [ 642.212984][ C0] rtnl_newlink+0x160b/0x1c70 [ 642.213012][ C0] ? __pfx_rtnl_newlink+0x10/0x10 [ 642.213031][ C0] ? __lock_acquire+0xab9/0xd20 [ 642.213050][ C0] ? __lock_acquire+0xab9/0xd20 [ 642.213073][ C0] ? __lock_acquire+0xab9/0xd20 [ 642.213099][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 642.213119][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 642.213135][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 642.213153][ C0] ? kernel_text_address+0xa5/0xe0 [ 642.213172][ C0] ? __lock_acquire+0xab9/0xd20 [ 642.213202][ C0] ? __pfx_rtnl_newlink+0x10/0x10 [ 642.213218][ C0] rtnetlink_rcv_msg+0x7cf/0xb70 [ 642.213233][ C0] ? kasan_save_track+0x4f/0x80 [ 642.213252][ C0] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 642.213268][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 642.213284][ C0] ? __lock_acquire+0xab9/0xd20 [ 642.213308][ C0] netlink_rcv_skb+0x21c/0x490 [ 642.213325][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 642.213342][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 642.213370][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 642.213386][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 642.213405][ C0] netlink_unicast+0x758/0x8d0 [ 642.213426][ C0] netlink_sendmsg+0x805/0xb30 [ 642.213448][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 642.213468][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 642.213489][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 642.213505][ C0] __sock_sendmsg+0x219/0x270 [ 642.213522][ C0] __sys_sendto+0x3bd/0x520 [ 642.213542][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 642.213566][ C0] ? fput_close_sync+0x119/0x200 [ 642.213589][ C0] ? __pfx_fput_close_sync+0x10/0x10 [ 642.213609][ C0] __x64_sys_sendto+0xde/0x100 [ 642.213628][ C0] do_syscall_64+0xfa/0x3b0 [ 642.213646][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 642.213661][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.213677][ C0] ? clear_bhb_loop+0x60/0xb0 [ 642.213694][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.213710][ C0] RIP: 0033:0x7f23a45907fc [ 642.213724][ C0] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 642.213738][ C0] RSP: 002b:00007ffe7e8a8260 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 642.213753][ C0] RAX: ffffffffffffffda RBX: 00007f23a52e35c0 RCX: 00007f23a45907fc [ 642.213765][ C0] RDX: 0000000000000030 RSI: 00007f23a52e3610 RDI: 0000000000000006 [ 642.213775][ C0] RBP: 0000000000000000 R08: 00007ffe7e8a82b4 R09: 000000000000000c [ 642.213786][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 642.213795][ C0] R13: 0000000000000000 R14: 00007f23a52e3610 R15: 0000000000000000 [ 642.213814][ C0] [ 642.214291][ C1] rcu: rcu_preempt kthread starved for 10484 jiffies! g97585 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 643.042277][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 643.052268][ C1] rcu: RCU grace-period kthread stack dump: [ 643.058182][ C1] task:rcu_preempt state:R running task stack:26696 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 643.071696][ C1] Call Trace: [ 643.075059][ C1] [ 643.078002][ C1] __schedule+0x16a2/0x4cb0 [ 643.082524][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 643.087750][ C1] ? schedule+0x165/0x360 [ 643.092089][ C1] ? __lock_acquire+0xab9/0xd20 [ 643.096951][ C1] ? __pfx___schedule+0x10/0x10 [ 643.101831][ C1] ? schedule+0x91/0x360 [ 643.106101][ C1] schedule+0x165/0x360 [ 643.110265][ C1] schedule_timeout+0x12b/0x270 [ 643.115126][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 643.120524][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 643.126442][ C1] ? __pfx_process_timeout+0x10/0x10 [ 643.131748][ C1] ? prepare_to_swait_event+0x341/0x380 [ 643.137321][ C1] rcu_gp_fqs_loop+0x301/0x1540 [ 643.142183][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 643.147404][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 643.153564][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 643.158853][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 643.164074][ C1] ? finish_swait+0xcd/0x1f0 [ 643.168681][ C1] rcu_gp_kthread+0x99/0x390 [ 643.173288][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 643.178496][ C1] ? __kthread_parkme+0x7b/0x200 [ 643.183446][ C1] ? __kthread_parkme+0x1a1/0x200 [ 643.188492][ C1] kthread+0x711/0x8a0 [ 643.192570][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 643.197777][ C1] ? __pfx_kthread+0x10/0x10 [ 643.202372][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 643.207577][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 643.212782][ C1] ? __pfx_kthread+0x10/0x10 [ 643.217379][ C1] ret_from_fork+0x3fc/0x770 [ 643.221982][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 643.227108][ C1] ? __switch_to_asm+0x39/0x70 [ 643.231906][ C1] ? __switch_to_asm+0x33/0x70 [ 643.236681][ C1] ? __pfx_kthread+0x10/0x10 [ 643.241279][ C1] ret_from_fork_asm+0x1a/0x30 [ 643.246077][ C1] [ 643.249101][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 643.255436][ C1] CPU: 1 UID: 0 PID: 21561 Comm: syz.3.6404 Not tainted 6.15.0-syzkaller-02443-g015a99fa7665 #0 PREEMPT(full) [ 643.267152][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 643.277298][ C1] RIP: 0010:smp_call_function_many_cond+0xe69/0x11c0 [ 643.283993][ C1] Code: 00 45 8b 2f 44 89 ee 83 e6 01 31 ff e8 b0 6f 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 5b 6b 0b 00 eb 37 f3 90 <43> 0f b6 04 2c 84 c0 75 10 41 f7 07 01 00 00 00 74 1e e8 40 6b 0b [ 643.303610][ C1] RSP: 0018:ffffc900001f7ac0 EFLAGS: 00000246 [ 643.309702][ C1] RAX: ffffffff81b484f0 RBX: ffff8880b893b000 RCX: 0000000000080000 [ 643.317680][ C1] RDX: ffffc90004bb2000 RSI: 000000000007ffff RDI: 0000000000080000 [ 643.325653][ C1] RBP: ffffc900001f7c20 R08: ffffffff8f7e9bb7 R09: 1ffffffff1efd376 [ 643.333634][ C1] R10: dffffc0000000000 R11: fffffbfff1efd377 R12: 1ffff110171082a9 [ 643.341706][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8880b8841548 [ 643.349681][ C1] FS: 00007fafa93976c0(0000) GS:ffff8881261c7000(0000) knlGS:0000000000000000 [ 643.358617][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 643.365204][ C1] CR2: 00007f2503c35d58 CR3: 000000004a800000 CR4: 00000000003526f0 [ 643.373208][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 643.381195][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 643.389183][ C1] Call Trace: [ 643.392475][ C1] [ 643.395425][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 643.400478][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 643.406815][ C1] ? __pfx___text_poke+0x10/0x10 [ 643.411759][ C1] ? rcu_is_watching+0x15/0xb0 [ 643.416531][ C1] ? trace_contention_end+0x39/0x120 [ 643.421838][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 643.426884][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 643.432009][ C1] smp_text_poke_batch_finish+0x5e0/0x1100 [ 643.437831][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 643.442868][ C1] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 643.449126][ C1] ? arch_jump_label_transform_queue+0x97/0x110 [ 643.455381][ C1] ? __jump_label_update+0x37e/0x3a0 [ 643.460947][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 643.466941][ C1] static_key_slow_inc_cpuslocked+0x80/0xf0 [ 643.472843][ C1] static_key_slow_inc+0x1a/0x30 [ 643.477797][ C1] kvm_dev_ioctl+0x16a8/0x18e0 [ 643.482588][ C1] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 643.487738][ C1] ? __fget_files+0x2a/0x420 [ 643.492350][ C1] ? bpf_lsm_file_ioctl+0x9/0x20 [ 643.497294][ C1] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 643.502420][ C1] __se_sys_ioctl+0xf9/0x170 [ 643.507024][ C1] do_syscall_64+0xfa/0x3b0 [ 643.511553][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.517620][ C1] ? asm_sysvec_call_function_single+0x1a/0x20 [ 643.523775][ C1] ? clear_bhb_loop+0x60/0xb0 [ 643.528469][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.534362][ C1] RIP: 0033:0x7fafa858e969 [ 643.538781][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 643.558392][ C1] RSP: 002b:00007fafa9397038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 643.566816][ C1] RAX: ffffffffffffffda RBX: 00007fafa87b5fa0 RCX: 00007fafa858e969 [ 643.574804][ C1] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 643.582792][ C1] RBP: 00007fafa8610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 643.590772][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 643.598753][ C1] R13: 0000000000000000 R14: 00007fafa87b5fa0 R15: 00007ffc39544a18 [ 643.606750][ C1]