last executing test programs: 28.514379214s ago: executing program 1 (id=195): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000140)="f3", 0x1}], 0x1}, 0x20000000}], 0x1, 0x0) 28.40352954s ago: executing program 1 (id=196): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={0x94, r2, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}, @NL80211_ATTR_FRAME={0x73, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @broadcast, @device_a, @initial, {0xf, 0x5}}, 0x1, @random=0x400, 0x3800, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1, 0x2c}, @val={0x4, 0x6, {0x70, 0x1, 0x7, 0x4}}, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x400, 0x2, 0x5, 0x0, {0x2, 0xb78, 0x0, 0x347, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x100, 0x1}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x2, 0x20}}, @val={0x76, 0x6, {0x3, 0x0, 0x2f, 0x6}}}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 28.371171424s ago: executing program 1 (id=198): r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) epoll_create1(0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 28.296217703s ago: executing program 1 (id=199): syz_open_dev$loop(&(0x7f0000000380), 0x2, 0x103382) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x12, &(0x7f0000000080)=0xa, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) socket$netlink(0x10, 0x3, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) mount$9p_fd(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, 0x0) r2 = socket$kcm(0x18, 0x7, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x40047452, 0x0) setpgid(r1, 0x0) setpgid(0x0, r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, 0x0, 0x20000098) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) umount2(0x0, 0x0) openat$mice(0xffffffffffffff9c, 0x0, 0x8401) write$FUSE_NOTIFY_STORE(r5, &(0x7f0000000000)={0x28, 0x4, 0x0, {0x1, 0x8000000000000000}}, 0x28) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x440, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x80}}, 0x50) ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0x800000000000001) socket$inet6(0xa, 0x3, 0xa) openat$autofs(0xffffffffffffff9c, 0x0, 0x40, 0x0) 28.083377106s ago: executing program 1 (id=201): r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) msgrcv(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2800) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x0, 0x1}, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x2, &(0x7f0000000400)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0xc000}}) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6erspan0\x00'}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(0xffffffffffffffff, 0x8000) 27.707731454s ago: executing program 1 (id=203): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000240)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000009e809000000ff0000f03ac71036000000ffffffffffffffffffe7ee00000000000000000200000000da", 0x59}], 0x1) 27.535340442s ago: executing program 32 (id=203): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000240)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000009e809000000ff0000f03ac71036000000ffffffffffffffffffe7ee00000000000000000200000000da", 0x59}], 0x1) 4.359596746s ago: executing program 4 (id=387): r0 = gettid() timer_create(0x1, &(0x7f0000000900)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f00000008c0)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) preadv(r1, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/188, 0xbc}], 0x1, 0x7, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) 3.818889589s ago: executing program 4 (id=397): r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000140)=@ethtool_sfeatures}) 3.800711178s ago: executing program 3 (id=398): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x300) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xfffffffffffffffd, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x200, 0x45c5, 0xc595, 0x7, 0x2, 0x1, 0x0, 0x80000004000000, 0x5], 0x8000000, 0x1000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000200)="440f20c0350b000000440f22c0360f09c4217d700c9d0000000028b8010000000f01c166b82e000f00d80f20d835080000000f22d82e0f019885000000b9b1060000b86f8d0000ba0000000066b8b5008ec036363ef3420f51a600000000b9e30b0000b8f233278fba000000000f30", 0x6f}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.687484164s ago: executing program 4 (id=399): syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000480)=@e={0xff, 0xa, 0xd, 0x40, @SEQ_CONTROLLER=0xfe, 0x10, 0xb, 0x8b}) 3.480410848s ago: executing program 3 (id=401): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r0, &(0x7f00000001c0)="bc12", 0x2, 0x84, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c) sendto$inet6(r0, &(0x7f0000000100)="15", 0x1, 0x1, &(0x7f0000000140)={0xa, 0x4e23, 0x7ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000380)={&(0x7f0000000180)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000480)='y', 0x1}], 0x1}, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0x0, 0x0, 0x4}, &(0x7f0000000080)=0x9c) 2.486801854s ago: executing program 3 (id=404): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000540)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x4008000) 2.436013994s ago: executing program 2 (id=405): syz_open_dev$usbmon(&(0x7f0000000080), 0xba, 0x8400) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 2.409707753s ago: executing program 0 (id=406): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 2.35848392s ago: executing program 4 (id=407): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@prinfo={0x14, 0x84, 0x5, {0x20, 0xfffffffb}}], 0x14, 0x2400e044}, 0x6) 2.263496275s ago: executing program 2 (id=408): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x2c, r0, 0x1, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16c1}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x2c}}, 0x20044040) 2.24426398s ago: executing program 3 (id=409): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0, 0x4}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) timer_create(0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e02036220072400"], 0x9) 2.218369596s ago: executing program 0 (id=410): r0 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff) 2.111566332s ago: executing program 4 (id=411): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet(0x2, 0x2, 0x0) syz_clone(0x4088080, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) 2.109105655s ago: executing program 2 (id=412): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20,serpent)\x00'}, 0x4e) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r1, 0xffffffffffffffff, 0x0) 2.091970546s ago: executing program 0 (id=413): r0 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x0, 0x101880) ioctl$VIDIOC_ENUMSTD(r0, 0xc0405619, &(0x7f0000000480)={0x7, 0x1000, "ff41eb03737d8c45ca37d148a327668ca17d53a71be54735", {0x1}, 0xfff}) 1.960139699s ago: executing program 0 (id=414): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000001ec0)=0x7fffffff, 0x4) 1.791761499s ago: executing program 2 (id=415): syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000480)=@e={0xff, 0xa, 0xd, 0x40, @SEQ_CONTROLLER=0xfe, 0x10, 0xb, 0x8b}) 1.791647331s ago: executing program 0 (id=416): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x141540, 0x0) syz_open_dev$I2C(0x0, 0x1, 0x2003) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 1.718564876s ago: executing program 0 (id=417): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) kexec_load(0x8, 0x1, &(0x7f0000000500)=[{0x0, 0x0, 0x0, 0x10000}], 0x3e0000) 1.127277728s ago: executing program 4 (id=418): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) syz_open_dev$admmidi(&(0x7f00000001c0), 0x20, 0x0) r2 = socket$caif_seqpacket(0x25, 0x5, 0x7) tee(0xffffffffffffffff, r2, 0x8, 0x6) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x402c4580, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) sendto$packet(0xffffffffffffffff, &(0x7f0000000100)="f257a8ea7bc273dfaeab96", 0xb, 0x0, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r5 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) readv(r5, &(0x7f0000000140)=[{&(0x7f0000000600)=""/152, 0x98}], 0x1) recvmmsg(r5, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20,serpent)\x00'}, 0x4e) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r6, 0xffffffffffffffff, 0x0) 499.517506ms ago: executing program 3 (id=419): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x110, 0x1}], 0x10, 0x7000000}, 0xf401}], 0x1, 0x0) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x10, 0x110, 0x1}], 0x10, 0x7000000}, 0xf401}], 0x1, 0x0) 255.785815ms ago: executing program 2 (id=420): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x44090}, 0x800) 135.937035ms ago: executing program 3 (id=421): syz_clone(0x1144280, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000400), 0x12) 0s ago: executing program 2 (id=422): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x40000001ed602, 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000006c00), 0x3, 0x0) ioctl$SNAPSHOT_S2RAM(r2, 0x330b) io_submit(r1, 0x2000000000000153, &(0x7f00000000c0)=[&(0x7f0000000200)={0x0, 0x0, 0x20, 0x1, 0x0, r0, 0x0, 0xfe00}]) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.34' (ED25519) to the list of known hosts. [ 63.890854][ T5804] cgroup: Unknown subsys name 'net' [ 64.040744][ T5804] cgroup: Unknown subsys name 'cpuset' [ 64.049101][ T5804] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.392314][ T5804] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 67.438889][ T5824] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.448721][ T5824] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 67.457730][ T5824] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 67.463019][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.466834][ T5824] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.480580][ T5831] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 67.483498][ T5824] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 67.490030][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.504363][ T5832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 67.504518][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.512931][ T5824] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 67.520550][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.527374][ T5824] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 67.535433][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 67.541453][ T5824] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 67.551354][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 67.560531][ T5142] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 67.570153][ T5829] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 67.580733][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.588669][ T5142] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.095089][ T5815] chnl_net:caif_netlink_parms(): no params data found [ 68.146387][ T5817] chnl_net:caif_netlink_parms(): no params data found [ 68.204376][ T5816] chnl_net:caif_netlink_parms(): no params data found [ 68.332148][ T5818] chnl_net:caif_netlink_parms(): no params data found [ 68.373545][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.380960][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.388522][ T5815] bridge_slave_0: entered allmulticast mode [ 68.395886][ T5815] bridge_slave_0: entered promiscuous mode [ 68.452214][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.459541][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.466737][ T5815] bridge_slave_1: entered allmulticast mode [ 68.474367][ T5815] bridge_slave_1: entered promiscuous mode [ 68.504722][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.512010][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.519283][ T5817] bridge_slave_0: entered allmulticast mode [ 68.526511][ T5817] bridge_slave_0: entered promiscuous mode [ 68.560834][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.568194][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.575822][ T5817] bridge_slave_1: entered allmulticast mode [ 68.583424][ T5817] bridge_slave_1: entered promiscuous mode [ 68.630441][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.639868][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.647174][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.656072][ T5816] bridge_slave_0: entered allmulticast mode [ 68.663766][ T5816] bridge_slave_0: entered promiscuous mode [ 68.696329][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.707020][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.714638][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.722096][ T5816] bridge_slave_1: entered allmulticast mode [ 68.729359][ T5816] bridge_slave_1: entered promiscuous mode [ 68.752487][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.765513][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.807081][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.814450][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.822019][ T5818] bridge_slave_0: entered allmulticast mode [ 68.829316][ T5818] bridge_slave_0: entered promiscuous mode [ 68.848948][ T5815] team0: Port device team_slave_0 added [ 68.865286][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.872712][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.880281][ T5818] bridge_slave_1: entered allmulticast mode [ 68.887791][ T5818] bridge_slave_1: entered promiscuous mode [ 68.906899][ T5815] team0: Port device team_slave_1 added [ 68.925960][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.939306][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.961805][ T5817] team0: Port device team_slave_0 added [ 68.999610][ T5817] team0: Port device team_slave_1 added [ 69.006891][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.014032][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.039938][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.067391][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.087827][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.094776][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.121098][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.139504][ T5816] team0: Port device team_slave_0 added [ 69.149740][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.188767][ T5816] team0: Port device team_slave_1 added [ 69.205963][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.214433][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.240687][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.266784][ T5818] team0: Port device team_slave_0 added [ 69.275311][ T5818] team0: Port device team_slave_1 added [ 69.281991][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.289235][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.315571][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.381790][ T5815] hsr_slave_0: entered promiscuous mode [ 69.388745][ T5815] hsr_slave_1: entered promiscuous mode [ 69.396711][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.403879][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.429834][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.454428][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.461471][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.487397][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.500947][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.507943][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.533957][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.546251][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.553341][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.579284][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.618573][ T5833] Bluetooth: hci0: command tx timeout [ 69.624676][ T5142] Bluetooth: hci2: command tx timeout [ 69.630583][ T51] Bluetooth: hci1: command tx timeout [ 69.636631][ T5827] Bluetooth: hci3: command tx timeout [ 69.652112][ T5817] hsr_slave_0: entered promiscuous mode [ 69.658781][ T5817] hsr_slave_1: entered promiscuous mode [ 69.665556][ T5817] debugfs: 'hsr0' already exists in 'hsr' [ 69.671808][ T5817] Cannot create hsr debugfs directory [ 69.786852][ T5818] hsr_slave_0: entered promiscuous mode [ 69.793477][ T5818] hsr_slave_1: entered promiscuous mode [ 69.800084][ T5818] debugfs: 'hsr0' already exists in 'hsr' [ 69.805860][ T5818] Cannot create hsr debugfs directory [ 69.826118][ T5816] hsr_slave_0: entered promiscuous mode [ 69.833140][ T5816] hsr_slave_1: entered promiscuous mode [ 69.839925][ T5816] debugfs: 'hsr0' already exists in 'hsr' [ 69.845724][ T5816] Cannot create hsr debugfs directory [ 70.279298][ T5815] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.300248][ T5815] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.321745][ T5815] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.344415][ T5815] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.392430][ T5817] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.412065][ T5817] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.423548][ T5817] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.441776][ T5817] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.547350][ T5818] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.559755][ T5818] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.576676][ T5818] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.594151][ T5818] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.691807][ T5816] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.703555][ T5816] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.723574][ T5816] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.736033][ T5816] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.781767][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.823874][ T5815] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.870982][ T3485] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.878686][ T3485] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.905042][ T3485] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.912176][ T3485] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.963583][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.028884][ T5817] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.067355][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.079788][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.086906][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.131355][ T3485] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.138753][ T3485] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.164888][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.212080][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.226113][ T3485] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.233379][ T3485] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.261130][ T3485] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.268375][ T3485] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.309581][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.316066][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.357173][ T5816] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.389984][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.397116][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.413854][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.440553][ T3485] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.447790][ T3485] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.682716][ T5815] veth0_vlan: entered promiscuous mode [ 71.699354][ T5142] Bluetooth: hci2: command tx timeout [ 71.705116][ T5833] Bluetooth: hci0: command tx timeout [ 71.710612][ T51] Bluetooth: hci1: command tx timeout [ 71.716034][ T5827] Bluetooth: hci3: command tx timeout [ 71.757222][ T5815] veth1_vlan: entered promiscuous mode [ 71.916471][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.939572][ T5815] veth0_macvtap: entered promiscuous mode [ 71.972819][ T5815] veth1_macvtap: entered promiscuous mode [ 72.006982][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.025288][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.062558][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.081621][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.114526][ T5817] veth0_vlan: entered promiscuous mode [ 72.138611][ T78] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.158847][ T78] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.167963][ T78] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.194200][ T78] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.217231][ T5817] veth1_vlan: entered promiscuous mode [ 72.263226][ T5818] veth0_vlan: entered promiscuous mode [ 72.301875][ T5816] veth0_vlan: entered promiscuous mode [ 72.314899][ T5818] veth1_vlan: entered promiscuous mode [ 72.376625][ T5816] veth1_vlan: entered promiscuous mode [ 72.393411][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.404833][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.435811][ T5817] veth0_macvtap: entered promiscuous mode [ 72.474488][ T140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.487473][ T5818] veth0_macvtap: entered promiscuous mode [ 72.493533][ T140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.500290][ T5817] veth1_macvtap: entered promiscuous mode [ 72.525951][ T5818] veth1_macvtap: entered promiscuous mode [ 72.594955][ T5815] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 72.595198][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.619701][ T5816] veth0_macvtap: entered promiscuous mode [ 72.643040][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.671255][ T5816] veth1_macvtap: entered promiscuous mode [ 72.687287][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.716523][ T78] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.728845][ T78] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.745172][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.761144][ T78] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.770647][ T78] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.839410][ T3485] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.848720][ T3485] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.871194][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.882900][ T3485] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.902616][ T78] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.956832][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.031790][ T140] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.041701][ T140] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.103197][ T140] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.142464][ T3485] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.161338][ T3485] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.181855][ T140] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.301401][ T140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.325931][ T140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.349085][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.365827][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.451978][ T3485] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.490224][ T3485] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.502471][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.523405][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.555493][ C0] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 73.646619][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.660269][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.779357][ T51] Bluetooth: hci1: command tx timeout [ 73.784833][ T5827] Bluetooth: hci3: command tx timeout [ 73.790438][ T5833] Bluetooth: hci0: command tx timeout [ 73.795868][ T5142] Bluetooth: hci2: command tx timeout [ 73.839833][ T5822] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 73.990982][ T5933] 9pnet_virtio: no channels available for device syz [ 74.049523][ T5822] usb 1-1: Using ep0 maxpacket: 8 [ 74.071967][ T5822] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 74.093783][ T5822] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 74.104581][ T5822] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 74.117359][ T5822] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 74.132755][ T5937] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15'. [ 74.141734][ T5822] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 74.157623][ T5822] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.177991][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 74.343372][ T10] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 74.359459][ T10] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 74.371085][ T10] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 74.381076][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.394347][ T5929] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 74.403641][ T5822] usb 1-1: GET_CAPABILITIES returned 0 [ 74.409480][ T5822] usbtmc 1-1:16.0: can't read capabilities [ 74.432980][ T10] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 74.606569][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 74.617294][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 74.626419][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 74.635534][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 74.649995][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 74.659102][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 74.666832][ T5864] usb 4-1: USB disconnect, device number 2 [ 74.668187][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 74.683387][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 74.729400][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 74.738534][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 74.747643][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 74.758399][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 74.772536][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 74.781656][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 74.790749][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 74.801299][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 74.824310][ T9] usb 1-1: USB disconnect, device number 2 [ 75.632312][ T5970] input: syz0 as /devices/virtual/input/input5 [ 75.657841][ T5871] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 75.721535][ T5142] Bluetooth: hci2: Unknown advertising packet type: 0x5f [ 75.721600][ T5142] Bluetooth: hci2: Malformed LE Event: 0x0d [ 75.830134][ T5871] usb 3-1: Using ep0 maxpacket: 8 [ 75.846084][ T5871] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 75.858250][ T5142] Bluetooth: hci2: command tx timeout [ 75.864413][ T5833] Bluetooth: hci0: command tx timeout [ 75.870881][ T5827] Bluetooth: hci3: command tx timeout [ 75.870895][ T51] Bluetooth: hci1: command tx timeout [ 75.888263][ T5871] usb 3-1: config 0 has no interfaces? [ 75.901604][ T5871] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 75.912042][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.927620][ T5871] usb 3-1: config 0 descriptor?? [ 76.207640][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 76.227668][ T5871] usb 3-1: USB disconnect, device number 2 [ 76.380445][ T9] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 76.405146][ T9] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 76.423306][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 76.447585][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.479221][ T5983] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 76.491865][ T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 76.649236][ T6008] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 76.725096][ T30] usb 1-1: USB disconnect, device number 3 [ 76.840763][ T29] audit: type=1326 audit(1772588805.585:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6013 comm="syz.2.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f691599c799 code=0x7ffc0000 [ 76.864724][ T29] audit: type=1326 audit(1772588805.585:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6013 comm="syz.2.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f691599c799 code=0x7ffc0000 [ 76.907794][ T29] audit: type=1326 audit(1772588805.585:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6013 comm="syz.2.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f691599c799 code=0x7ffc0000 [ 76.931307][ T29] audit: type=1326 audit(1772588805.585:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6013 comm="syz.2.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f691599c799 code=0x7ffc0000 [ 77.027549][ T5822] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 77.155787][ T6024] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 77.176802][ T6026] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 77.262671][ T5822] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.282419][ T5822] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 77.303932][ T5822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.351729][ T5822] usb 2-1: config 0 descriptor?? [ 77.385841][ T6031] capability: warning: `syz.0.55' uses deprecated v2 capabilities in a way that may be insecure [ 77.592925][ T5822] usbhid 2-1:0.0: can't add hid device: -71 [ 77.619626][ T5822] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 77.665835][ T5822] usb 2-1: USB disconnect, device number 2 [ 77.905309][ T6055] 9pnet_virtio: no channels available for device syz [ 77.946855][ T6057] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 77.988595][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 78.125155][ T5822] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 78.180502][ T9] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 78.207519][ T9] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 78.226934][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 78.239431][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.260284][ T6046] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 78.280130][ T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 78.307534][ T5822] usb 2-1: Using ep0 maxpacket: 32 [ 78.320300][ T5822] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.344936][ T5822] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 78.380265][ T5822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.417306][ T5822] usb 2-1: config 0 descriptor?? [ 78.441831][ T5822] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 78.469663][ T5822] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 78.483993][ T6072] syz.3.74 uses obsolete (PF_INET,SOCK_PACKET) [ 78.516647][ T9] usb 1-1: USB disconnect, device number 4 [ 78.529769][ T6072] netlink: 8 bytes leftover after parsing attributes in process `syz.3.74'. [ 78.778934][ T6076] netlink: 'syz.3.75': attribute type 3 has an invalid length. [ 78.786911][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 78.904183][ T9] usb 2-1: USB disconnect, device number 3 [ 78.921947][ T9] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 79.099034][ C0] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 79.526722][ T6108] netlink: 4 bytes leftover after parsing attributes in process `syz.1.89'. [ 79.657545][ T5919] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 79.826659][ T5919] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 79.855493][ T5919] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 79.882779][ T5919] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 79.912315][ T5919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.950808][ T6104] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 79.982480][ T5919] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 80.187146][ T9] usb 1-1: USB disconnect, device number 5 [ 80.262034][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 80.270835][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 80.279405][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.557780][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.566533][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.575316][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 81.147972][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.156933][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.566278][ T1208] cfg80211: failed to load regulatory.db [ 82.298159][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 82.477623][ T30] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 82.699401][ T30] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 82.728840][ T30] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 82.763619][ T30] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 82.800551][ T30] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.836504][ T6175] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 82.871494][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 82.899051][ T30] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 83.100051][ T5902] usb 4-1: USB disconnect, device number 3 [ 84.037795][ T5871] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 84.207753][ T5871] usb 4-1: Using ep0 maxpacket: 32 [ 84.221305][ T5871] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 84.236437][ T5871] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 84.260258][ T5871] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 84.283805][ T5871] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 84.316587][ T5871] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 84.338328][ T5871] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 84.384030][ T5871] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 84.397578][ T5871] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.409193][ T5871] usb 4-1: config 0 descriptor?? [ 84.526841][ T6228] ÿÿÿÿÿÿ: renamed from vlan0 (while UP) [ 84.642195][ T5871] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 84.850374][ C1] usblp0: nonzero read bulk status received: -71 [ 84.851093][ T5871] usb 4-1: USB disconnect, device number 4 [ 85.071066][ T6197] usblp0: removed [ 85.471493][ T6253] overlayfs: failed to resolve './file1': -2 [ 86.927932][ T6278] netlink: 12 bytes leftover after parsing attributes in process `syz.3.159'. [ 87.631767][ T6316] 9pnet_virtio: no channels available for device syz [ 87.800566][ T78] Bluetooth: hci4: Frame reassembly failed (-84) [ 88.894915][ T6363] caif0 speed is unknown, defaulting to 1000 [ 88.947885][ T6363] caif0 speed is unknown, defaulting to 1000 [ 88.996149][ T6363] caif0 speed is unknown, defaulting to 1000 [ 89.259205][ T9] caif0 speed is unknown, defaulting to 1000 [ 89.266528][ T6363] infiniband syz2: set down [ 89.272224][ T6363] infiniband syz2: added caif0 [ 89.304624][ T6363] RDS/IB: syz2: added [ 89.310422][ T6363] smc: adding ib device syz2 with port count 1 [ 89.316826][ T6363] smc: ib device syz2 port 1 has no pnetid [ 89.325768][ T24] caif0 speed is unknown, defaulting to 1000 [ 89.352269][ T6363] caif0 speed is unknown, defaulting to 1000 [ 89.618834][ T6363] caif0 speed is unknown, defaulting to 1000 [ 89.681175][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.693231][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.703127][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.716153][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.726302][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.859143][ T51] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 89.867238][ T5833] Bluetooth: hci4: command 0xfc11 tx timeout [ 89.881985][ T6363] caif0 speed is unknown, defaulting to 1000 [ 90.244872][ T6363] caif0 speed is unknown, defaulting to 1000 [ 90.432751][ T6363] caif0 speed is unknown, defaulting to 1000 [ 90.567598][ T5871] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 90.576229][ T6373] rdma_rxe: rxe_newlink: failed to add caif0 [ 90.717512][ T5871] usb 3-1: device descriptor read/64, error -71 [ 90.912084][ T6370] chnl_net:caif_netlink_parms(): no params data found [ 90.991924][ T5871] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 90.999782][ T5833] Bluetooth: hci0: unexpected event 0x33 length: 7 < 10 [ 91.147917][ T5871] usb 3-1: device descriptor read/64, error -71 [ 91.241506][ T6370] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.262068][ T6370] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.276987][ T6370] bridge_slave_0: entered allmulticast mode [ 91.288032][ T5871] usb usb3-port1: attempt power cycle [ 91.294702][ T6370] bridge_slave_0: entered promiscuous mode [ 91.320430][ T6370] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.340080][ T6370] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.347723][ T6370] bridge_slave_1: entered allmulticast mode [ 91.351441][ T6420] trusted_key: encrypted_key: insufficient parameters specified [ 91.355797][ T6370] bridge_slave_1: entered promiscuous mode [ 91.425037][ T6370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.443171][ T6370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.507248][ T6370] team0: Port device team_slave_0 added [ 91.533546][ T6370] team0: Port device team_slave_1 added [ 91.618059][ T6370] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.629499][ T6370] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.660734][ T5871] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 91.673986][ T6370] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.688714][ T6370] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.688733][ T5871] usb 3-1: device descriptor read/8, error -71 [ 91.695718][ T6370] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.695748][ T6370] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.768290][ T6370] hsr_slave_0: entered promiscuous mode [ 91.775692][ T6370] hsr_slave_1: entered promiscuous mode [ 91.779209][ T5833] Bluetooth: hci2: command tx timeout [ 91.790699][ T6370] debugfs: 'hsr0' already exists in 'hsr' [ 91.797368][ T6370] Cannot create hsr debugfs directory [ 92.027997][ T5871] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 92.058689][ T5871] usb 3-1: device descriptor read/8, error -71 [ 92.103096][ T6370] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.117157][ T6370] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.130212][ T6370] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.144746][ T6370] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.168312][ T5871] usb usb3-port1: unable to enumerate USB device [ 92.322236][ T6370] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.375517][ T6370] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.395604][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.402834][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.451153][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.458353][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.904136][ T6370] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.493494][ T6480] sp0: Synchronizing with TNC [ 93.553436][ T6370] veth0_vlan: entered promiscuous mode [ 93.660752][ T6370] veth1_vlan: entered promiscuous mode [ 93.782309][ T6490] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 93.803103][ T6490] block device autoloading is deprecated and will be removed. [ 93.839847][ T58] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.858674][ T5833] Bluetooth: hci2: command tx timeout [ 93.995056][ T6370] veth0_macvtap: entered promiscuous mode [ 94.049417][ T58] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.084207][ T6370] veth1_macvtap: entered promiscuous mode [ 94.154579][ T58] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.168635][ T6504] netlink: 4 bytes leftover after parsing attributes in process `syz.3.256'. [ 94.187965][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 94.214587][ T6370] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.259792][ T58] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.300297][ T6370] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.308023][ T6507] Zero length message leads to an empty skb [ 94.337623][ T9] usb 1-1: device descriptor read/64, error -71 [ 94.360526][ T1148] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.370739][ T1148] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.389624][ T1148] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.390614][ T6504] nbd: socks must be embedded in a SOCK_ITEM attr [ 94.445508][ T1148] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.455773][ T5830] block nbd64: NBD_DISCONNECT [ 94.469844][ T6505] netlink: 4 bytes leftover after parsing attributes in process `syz.3.256'. [ 94.504889][ T6505] nbd: device at index 64 is going down [ 94.617719][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 94.744077][ T58] bridge_slave_1: left allmulticast mode [ 94.764711][ T58] bridge_slave_1: left promiscuous mode [ 94.778120][ T5830] udevd[5830]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 94.779167][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.798081][ T9] usb 1-1: device descriptor read/64, error -71 [ 94.841748][ T58] bridge_slave_0: left allmulticast mode [ 94.857499][ T58] bridge_slave_0: left promiscuous mode [ 94.866114][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.931779][ T9] usb usb1-port1: attempt power cycle [ 95.180701][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 95.198967][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 95.216014][ T58] bond0 (unregistering): Released all slaves [ 95.267885][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 95.289418][ T9] usb 1-1: device descriptor read/8, error -71 [ 95.505722][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.528317][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.567647][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 95.620102][ T9] usb 1-1: device descriptor read/8, error -71 [ 95.741370][ T9] usb usb1-port1: unable to enumerate USB device [ 95.804644][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.822916][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.937635][ T5833] Bluetooth: hci2: command tx timeout [ 96.094376][ T29] audit: type=1326 audit(1772588824.835:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6501 comm="syz.2.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f691593db19 code=0x7ffc0000 [ 96.172713][ T29] audit: type=1326 audit(1772588824.835:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6501 comm="syz.2.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f691593db19 code=0x7ffc0000 [ 96.211135][ T6520] warning: `syz.4.204' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 96.223184][ T29] audit: type=1326 audit(1772588824.835:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6501 comm="syz.2.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f691593db19 code=0x7ffc0000 [ 96.323527][ T58] hsr_slave_0: left promiscuous mode [ 96.339206][ T29] audit: type=1326 audit(1772588824.835:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6501 comm="syz.2.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f691593db19 code=0x7ffc0000 [ 96.372707][ T58] hsr_slave_1: left promiscuous mode [ 96.385611][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.399411][ T29] audit: type=1326 audit(1772588824.835:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6501 comm="syz.2.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f691593db19 code=0x7ffc0000 [ 96.421881][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.447648][ T6526] process 'syz.4.260' launched './file0' with NULL argv: empty string added [ 96.461846][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.470406][ T29] audit: type=1326 audit(1772588824.835:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6501 comm="syz.2.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f691593db19 code=0x7ffc0000 [ 96.493994][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.545360][ T29] audit: type=1326 audit(1772588824.835:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6501 comm="syz.2.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f691593db19 code=0x7ffc0000 [ 96.574018][ T58] veth1_macvtap: left promiscuous mode [ 96.587601][ T58] veth0_macvtap: left promiscuous mode [ 96.603466][ T58] veth1_vlan: left promiscuous mode [ 96.614052][ T58] veth0_vlan: left promiscuous mode [ 96.621627][ T29] audit: type=1326 audit(1772588824.835:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6501 comm="syz.2.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f691593db19 code=0x7ffc0000 [ 96.692785][ T29] audit: type=1326 audit(1772588824.835:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6501 comm="syz.2.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f691593db19 code=0x7ffc0000 [ 96.771639][ T29] audit: type=1326 audit(1772588824.835:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6501 comm="syz.2.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f691593db19 code=0x7ffc0000 [ 96.980564][ T5822] IPVS: starting estimator thread 0... [ 97.088912][ T6531] IPVS: using max 37 ests per chain, 88800 per kthread [ 97.552407][ T5902] hid-generic 0005:0006:5508.0001: item fetching failed at offset 0/1 [ 97.569331][ T5902] hid-generic 0005:0006:5508.0001: probe with driver hid-generic failed with error -22 [ 97.620380][ T58] team0 (unregistering): Port device team_slave_1 removed [ 97.707046][ T58] team0 (unregistering): Port device team_slave_0 removed [ 98.017891][ T5833] Bluetooth: hci2: command tx timeout [ 98.097850][ T30] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 98.207695][ T6555] bond0: (slave batadv_slave_0): Error: Device can not be enslaved while up [ 98.247592][ T30] usb 3-1: device descriptor read/64, error -71 [ 98.312955][ T5822] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 98.503707][ T30] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 98.509929][ T5822] usb 1-1: Using ep0 maxpacket: 8 [ 98.523419][ T5822] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 98.549217][ T5822] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 98.561131][ T5822] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 98.575155][ T5822] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 98.599561][ T5822] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 98.614981][ T5822] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 98.624495][ T5822] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.637636][ T30] usb 3-1: device descriptor read/64, error -71 [ 98.758447][ T30] usb usb3-port1: attempt power cycle [ 98.842717][ T5822] usb 1-1: usb_control_msg returned -32 [ 98.848436][ T5822] usbtmc 1-1:16.0: can't read capabilities [ 99.098235][ T30] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 99.138786][ T30] usb 3-1: device descriptor read/8, error -71 [ 99.268584][ T6597] usbtmc 1-1:16.0: usb_control_msg returned -32 [ 99.379078][ T30] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 99.402712][ T5871] usb 1-1: USB disconnect, device number 10 [ 99.419137][ T30] usb 3-1: device descriptor read/8, error -71 [ 99.548788][ T30] usb usb3-port1: unable to enumerate USB device [ 99.577706][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 99.980686][ T6623] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 99.987303][ T6623] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 99.995780][ T6623] Failed to get privilege flags for destination (handle=0x2:0x0) [ 100.497915][ T5833] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 100.505781][ T51] Bluetooth: hci4: command 0xfc11 tx timeout [ 100.892914][ T6650] netlink: 'syz.4.285': attribute type 1 has an invalid length. [ 100.911510][ T6650] netlink: 224 bytes leftover after parsing attributes in process `syz.4.285'. [ 100.983123][ T6653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.287'. [ 101.604960][ T6666] caif0 speed is unknown, defaulting to 1000 [ 101.816399][ T6675] tipc: Started in network mode [ 101.827677][ T6675] tipc: Node identity 16636ef743c5, cluster identity 4711 [ 101.836319][ T6675] tipc: Enabled bearer , priority 0 [ 101.848683][ T6675] syzkaller0: MTU too low for tipc bearer [ 101.854461][ T6675] tipc: Disabling bearer [ 101.897729][ T5822] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 102.038435][ T5822] usb 4-1: device descriptor read/64, error -71 [ 102.241566][ T6687] netlink: 28 bytes leftover after parsing attributes in process `syz.4.302'. [ 102.299533][ T5822] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 102.357564][ T30] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 102.437802][ T5822] usb 4-1: device descriptor read/64, error -71 [ 102.528048][ T30] usb 3-1: Using ep0 maxpacket: 8 [ 102.538530][ T30] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 102.548876][ T30] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.574742][ T5822] usb usb4-port1: attempt power cycle [ 102.590346][ T30] pvrusb2: Hardware description: Terratec Grabster AV400 [ 102.597582][ T30] pvrusb2: ********** [ 102.601752][ T30] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 102.613993][ T30] pvrusb2: Important functionality might not be entirely working. [ 102.622032][ T30] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 102.633389][ T30] pvrusb2: ********** [ 102.785475][ T2346] pvrusb2: Invalid write control endpoint [ 102.869972][ T2346] pvrusb2: Invalid write control endpoint [ 102.875849][ T2346] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 102.903258][ T2346] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 102.918581][ T5822] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 102.926133][ T2346] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 102.937201][ T2346] pvrusb2: Device being rendered inoperable [ 102.946248][ T2346] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 102.957141][ T2346] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 102.966651][ T5822] usb 4-1: device descriptor read/8, error -71 [ 102.979109][ T2346] pvrusb2: Attached sub-driver cx25840 [ 102.985486][ T2346] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 102.996281][ T2346] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 103.025283][ T24] usb 3-1: USB disconnect, device number 11 [ 103.030620][ T6699] syzkaller1: entered promiscuous mode [ 103.036867][ T6699] syzkaller1: entered allmulticast mode [ 103.209541][ T5822] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 103.239292][ T5822] usb 4-1: device descriptor read/8, error -71 [ 103.347927][ T5822] usb usb4-port1: unable to enumerate USB device [ 103.797557][ T24] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 103.947521][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 103.954202][ T24] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 103.965498][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 103.975590][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 103.985975][ T24] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 103.999042][ T24] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 104.008141][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.228193][ T24] usb 3-1: GET_CAPABILITIES returned 0 [ 104.234170][ T24] usbtmc 3-1:16.0: can't read capabilities [ 104.434820][ T24] usb 3-1: USB disconnect, device number 12 [ 105.447549][ T797] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 105.497569][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 105.597639][ T797] usb 1-1: device descriptor read/64, error -71 [ 105.647755][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 105.654588][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 105.667194][ T9] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 105.676414][ T9] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 105.684644][ T9] usb 3-1: Product: syz [ 105.688865][ T9] usb 3-1: Manufacturer: syz [ 105.693465][ T9] usb 3-1: SerialNumber: syz [ 105.701033][ T9] usb 3-1: config 0 descriptor?? [ 105.706763][ T6767] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 105.715337][ T9] hub 3-1:0.0: bad descriptor, ignoring hub [ 105.721364][ T9] hub 3-1:0.0: probe with driver hub failed with error -5 [ 105.837602][ T797] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 105.967676][ T797] usb 1-1: device descriptor read/64, error -71 [ 106.079321][ T797] usb usb1-port1: attempt power cycle [ 106.085536][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 106.427534][ T797] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 106.448050][ T797] usb 1-1: device descriptor read/8, error -71 [ 106.687543][ T797] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 106.708052][ T797] usb 1-1: device descriptor read/8, error -71 [ 106.817888][ T797] usb usb1-port1: unable to enumerate USB device [ 106.974015][ T30] usb 3-1: USB disconnect, device number 13 [ 107.726869][ T6740] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 108.126127][ T5902] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 108.325302][ T5902] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 108.395224][ T5902] usb 5-1: config 0 has no interface number 0 [ 108.470602][ T5902] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 108.577352][ T5902] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 108.690451][ T5902] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 108.813772][ T5902] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 108.923856][ T5902] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 109.079889][ T5902] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 109.242413][ T5902] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 109.273638][ T5902] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.302640][ T5902] usb 5-1: config 0 descriptor?? [ 109.325979][ T6787] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 109.360927][ T6787] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 109.416320][ T5902] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 109.676951][ T6787] ldusb 5-1:0.55: Write buffer overflow, 1 bytes dropped [ 109.738218][ T5902] usb 5-1: USB disconnect, device number 2 [ 109.776646][ T5902] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 109.979524][ C0] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 110.107516][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 110.253199][ T9] usb 4-1: device descriptor read/64, error -71 [ 110.321829][ T30] IPVS: starting estimator thread 0... [ 110.429546][ T6845] IPVS: using max 36 ests per chain, 86400 per kthread [ 110.517500][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 110.678424][ T9] usb 4-1: device descriptor read/64, error -71 [ 110.810153][ T9] usb usb4-port1: attempt power cycle [ 110.935080][ T6876] netlink: 4 bytes leftover after parsing attributes in process `syz.0.363'. [ 111.178534][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 111.208233][ T9] usb 4-1: device descriptor read/8, error -71 [ 111.468422][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 111.508259][ T9] usb 4-1: device descriptor read/8, error -71 [ 111.632715][ T9] usb usb4-port1: unable to enumerate USB device [ 112.130586][ T6929] sp0: Synchronizing with TNC [ 113.247530][ T30] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 113.409476][ T30] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 113.430875][ T30] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 113.463514][ T30] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 113.480485][ T30] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.545521][ T6991] caif0 speed is unknown, defaulting to 1000 [ 113.687586][ T24] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 113.710501][ T30] usb 1-1: GET_CAPABILITIES returned 0 [ 113.722690][ T30] usbtmc 1-1:16.0: can't read capabilities [ 113.850370][ T24] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 113.871838][ T24] usb 5-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 113.888669][ T24] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 113.907485][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.917142][ T5822] usb 1-1: USB disconnect, device number 15 [ 114.164732][ T24] usb 5-1: USB disconnect, device number 3 [ 115.314395][ T24] kernel read not supported for file /comedi4 (pid: 24 comm: kworker/1:0) [ 115.577554][ T24] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 115.757765][ T24] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 115.793220][ T24] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 115.813580][ T24] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 115.835052][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.130174][ T5822] usb 3-1: USB disconnect, device number 14 [ 117.157871][ T7056] random: crng reseeded on system resumption [ 117.367776][ T7039] kexec: Could not allocate control_code_buffer [ 117.416552][ T7057] ------------[ cut here ]------------ [ 117.422221][ T7057] !valid_signal(sig) [ 117.422249][ T7057] WARNING: kernel/signal.c:2174 at do_notify_parent+0xc7e/0xd70, CPU#0: syz.3.421/7057 [ 117.435743][ T7057] Modules linked in: [ 117.439787][ T7057] CPU: 0 UID: 0 PID: 7057 Comm: syz.3.421 Not tainted syzkaller #0 PREEMPT(full) [ 117.448966][ T7057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 117.459016][ T7057] RIP: 0010:do_notify_parent+0xc7e/0xd70 [ 117.464642][ T7057] Code: c6 05 7c 06 93 0e 01 48 c7 c7 c0 46 cb 8b be a3 08 00 00 48 c7 c2 40 48 cb 8b e8 6d 6e 17 00 e9 c6 fa ff ff e8 b3 1b 3b 00 90 <0f> 0b 90 45 31 e4 e9 1c ff ff ff e8 a2 1b 3b 00 90 0f 0b 90 e9 75 [ 117.484239][ T7057] RSP: 0018:ffffc90003417c40 EFLAGS: 00010093 [ 117.490301][ T7057] RAX: ffffffff818aed1d RBX: dffffc0000000000 RCX: ffff888059600000 [ 117.498261][ T7057] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000000000040 [ 117.506217][ T7057] RBP: ffffc90003417d90 R08: 0000000000000003 R09: 0000000000000004 [ 117.514181][ T7057] R10: dffffc0000000000 R11: fffff52000682fa4 R12: ffff8880305e2b90 [ 117.522142][ T7057] R13: ffff888059600000 R14: 0000000000000080 R15: 1ffff92000682f90 [ 117.530100][ T7057] FS: 0000000000000000(0000) GS:ffff888124ff5000(0000) knlGS:0000000000000000 [ 117.539014][ T7057] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 117.545583][ T7057] CR2: 00007f7fb99e9e80 CR3: 000000000e74c000 CR4: 00000000003526f0 [ 117.553542][ T7057] Call Trace: [ 117.556819][ T7057] [ 117.559740][ T7057] ? do_raw_spin_lock+0x12b/0x2f0 [ 117.564761][ T7057] ? __pfx_do_notify_parent+0x10/0x10 [ 117.570125][ T7057] ? do_raw_write_lock+0x11d/0x260 [ 117.575226][ T7057] ? __pfx_do_raw_write_lock+0x10/0x10 [ 117.580672][ T7057] ? kill_orphaned_pgrp+0x170/0x610 [ 117.585878][ T7057] do_exit+0x15b3/0x2580 [ 117.590132][ T7057] ? __pfx_do_exit+0x10/0x10 [ 117.594718][ T7057] ? rcu_is_watching+0x15/0xb0 [ 117.599484][ T7057] __x64_sys_exit+0x40/0x40 [ 117.603978][ T7057] x64_sys_call+0x2231/0x2240 [ 117.608650][ T7057] do_syscall_64+0x14d/0xf80 [ 117.613233][ T7057] ? trace_irq_disable+0x3b/0x150 [ 117.618240][ T7057] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.624294][ T7057] ? clear_bhb_loop+0x40/0x90 [ 117.628960][ T7057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.634837][ T7057] RIP: 0033:0x7f7fb999c799 [ 117.639254][ T7057] Code: Unable to access opcode bytes at 0x7f7fb999c76f. [ 117.646254][ T7057] RSP: 002b:00007f7fb7bf5fd8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 117.654658][ T7057] RAX: ffffffffffffffda RBX: 00007f7fb9c15fa0 RCX: 00007f7fb999c799 [ 117.662622][ T7057] RDX: 00007f7fb7bf69c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 117.670579][ T7057] RBP: 00007f7fb9a32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 117.678535][ T7057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.686489][ T7057] R13: 00007f7fb9c16038 R14: 00007f7fb9c15fa0 R15: 00007ffcde3d0c08 [ 117.694458][ T7057] [ 117.697466][ T7057] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 117.704730][ T7057] CPU: 0 UID: 0 PID: 7057 Comm: syz.3.421 Not tainted syzkaller #0 PREEMPT(full) [ 117.713906][ T7057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 117.723946][ T7057] Call Trace: [ 117.727215][ T7057] [ 117.730132][ T7057] vpanic+0x56c/0xa60 [ 117.734110][ T7057] ? __pfx__printk+0x10/0x10 [ 117.738684][ T7057] ? __pfx_vpanic+0x10/0x10 [ 117.743177][ T7057] ? is_bpf_text_address+0x292/0x2b0 [ 117.748452][ T7057] ? is_bpf_text_address+0x26/0x2b0 [ 117.753645][ T7057] panic+0xc5/0xd0 [ 117.757358][ T7057] ? __pfx_panic+0x10/0x10 [ 117.761775][ T7057] __warn+0x315/0x4f0 [ 117.765752][ T7057] ? do_notify_parent+0xc7e/0xd70 [ 117.770766][ T7057] ? do_notify_parent+0xc7e/0xd70 [ 117.775779][ T7057] __report_bug+0x29a/0x540 [ 117.780286][ T7057] ? do_notify_parent+0xc7e/0xd70 [ 117.785299][ T7057] ? __pfx___report_bug+0x10/0x10 [ 117.790314][ T7057] ? stack_depot_save_flags+0x33/0x810 [ 117.795765][ T7057] ? __lock_acquire+0x600/0x2cf0 [ 117.800701][ T7057] ? kasan_save_track+0x4f/0x80 [ 117.805538][ T7057] ? kasan_save_track+0x3e/0x80 [ 117.810377][ T7057] ? kasan_save_free_info+0x46/0x50 [ 117.815563][ T7057] ? __kasan_slab_free+0x5c/0x80 [ 117.820489][ T7057] ? kmem_cache_free+0x187/0x630 [ 117.825416][ T7057] ? do_notify_parent+0xc7e/0xd70 [ 117.830428][ T7057] report_bug+0x16a/0x220 [ 117.834747][ T7057] ? do_notify_parent+0xc7e/0xd70 [ 117.839758][ T7057] ? do_notify_parent+0xc80/0xd70 [ 117.844769][ T7057] handle_bug+0x9c/0x200 [ 117.849006][ T7057] exc_invalid_op+0x1a/0x50 [ 117.853502][ T7057] asm_exc_invalid_op+0x1a/0x20 [ 117.858337][ T7057] RIP: 0010:do_notify_parent+0xc7e/0xd70 [ 117.863959][ T7057] Code: c6 05 7c 06 93 0e 01 48 c7 c7 c0 46 cb 8b be a3 08 00 00 48 c7 c2 40 48 cb 8b e8 6d 6e 17 00 e9 c6 fa ff ff e8 b3 1b 3b 00 90 <0f> 0b 90 45 31 e4 e9 1c ff ff ff e8 a2 1b 3b 00 90 0f 0b 90 e9 75 [ 117.883547][ T7057] RSP: 0018:ffffc90003417c40 EFLAGS: 00010093 [ 117.889600][ T7057] RAX: ffffffff818aed1d RBX: dffffc0000000000 RCX: ffff888059600000 [ 117.897555][ T7057] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000000000040 [ 117.905537][ T7057] RBP: ffffc90003417d90 R08: 0000000000000003 R09: 0000000000000004 [ 117.913497][ T7057] R10: dffffc0000000000 R11: fffff52000682fa4 R12: ffff8880305e2b90 [ 117.921454][ T7057] R13: ffff888059600000 R14: 0000000000000080 R15: 1ffff92000682f90 [ 117.929418][ T7057] ? do_notify_parent+0xc7d/0xd70 [ 117.934463][ T7057] ? do_raw_spin_lock+0x12b/0x2f0 [ 117.939474][ T7057] ? __pfx_do_notify_parent+0x10/0x10 [ 117.944841][ T7057] ? do_raw_write_lock+0x11d/0x260 [ 117.949950][ T7057] ? __pfx_do_raw_write_lock+0x10/0x10 [ 117.955400][ T7057] ? kill_orphaned_pgrp+0x170/0x610 [ 117.960586][ T7057] do_exit+0x15b3/0x2580 [ 117.964829][ T7057] ? __pfx_do_exit+0x10/0x10 [ 117.969413][ T7057] ? rcu_is_watching+0x15/0xb0 [ 117.974191][ T7057] __x64_sys_exit+0x40/0x40 [ 117.978688][ T7057] x64_sys_call+0x2231/0x2240 [ 117.983363][ T7057] do_syscall_64+0x14d/0xf80 [ 117.987947][ T7057] ? trace_irq_disable+0x3b/0x150 [ 117.992957][ T7057] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.999011][ T7057] ? clear_bhb_loop+0x40/0x90 [ 118.003676][ T7057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.009552][ T7057] RIP: 0033:0x7f7fb999c799 [ 118.013956][ T7057] Code: Unable to access opcode bytes at 0x7f7fb999c76f. [ 118.020981][ T7057] RSP: 002b:00007f7fb7bf5fd8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 118.029382][ T7057] RAX: ffffffffffffffda RBX: 00007f7fb9c15fa0 RCX: 00007f7fb999c799 [ 118.037338][ T7057] RDX: 00007f7fb7bf69c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 118.045296][ T7057] RBP: 00007f7fb9a32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 118.053251][ T7057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.061209][ T7057] R13: 00007f7fb9c16038 R14: 00007f7fb9c15fa0 R15: 00007ffcde3d0c08 [ 118.069182][ T7057] [ 118.072435][ T7057] Kernel Offset: disabled [ 118.076746][ T7057] Rebooting in 86400 seconds..