last executing test programs: 2m46.699436915s ago: executing program 5 (id=428): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x1bd) close(r1) r2 = syz_io_uring_setup(0x6de4, &(0x7f0000000180)={0x0, 0x113a, 0x2, 0x2}, &(0x7f00000000c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f00000024c0)={0x2, 0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000240)=""/191, 0xbf}], &(0x7f0000002480)=[0x0, 0x2]}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002cc0)=[{0x0}, {0x0}], 0x0, 0x2}, 0x20) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x8, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 2m45.784228803s ago: executing program 5 (id=431): r0 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, 0x0, 0x0, {0x1, 0x0, 0x4}}, 0x18) sendmmsg(r0, &(0x7f00000017c0)=[{{&(0x7f00000000c0)=@can={0x1d, 0x0, 0xee}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000380)="89244b", 0x3}, {0x0}], 0x2}}], 0x1, 0xf5) 2m43.931162405s ago: executing program 5 (id=435): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_ifindex, @empty}, 0x10) sched_setscheduler(0x0, 0x98d4fbf0bcbcdb9d, &(0x7f0000000240)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mlockall(0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 2m42.62771714s ago: executing program 5 (id=440): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x40000}, [@call={0x85, 0x0, 0x0, 0x7a}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000080)=r0, 0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0xf0, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}}, 0xf0}}, 0x0) 2m40.484659377s ago: executing program 5 (id=443): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) epoll_create1(0x0) epoll_create1(0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040), 0x10) listen(r2, 0x0) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000140)={0x1, 0x9}, 0x8) close(r3) 2m39.857811829s ago: executing program 5 (id=444): sendmsg$key(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) capset(&(0x7f0000000140)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x102, 0x87, 0xffffffff, 0x40}) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000140)={0x77540947ad9a168d}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r4, 0x4b49, &(0x7f0000001240)={0xfe, "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"}) r5 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f, 0x5}}, 0x20) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r5, 0xc0884113, &(0x7f0000000540)={0x1, 0x0, 0x203, 0xfffd, 0xffffffffffffffff, 0x200000000000008, 0xfffffffffffffffd, 0x200, 0x8, 0x2c, 0x80000005, 0x2}) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r5, 0xc0844123, &(0x7f0000000240)=0x3) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r6, 0x12, 0x3, &(0x7f0000000100)=0x10, 0x4) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r8, 0x4004e502, 0x0) accept4(r7, 0x0, 0x0, 0x80800) open(&(0x7f00000000c0)='.\x00', 0x40100, 0x44) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fsopen(&(0x7f00000000c0)='nilfs2\x00', 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') lseek(r9, 0x1, 0x1) 2m24.579968288s ago: executing program 32 (id=444): sendmsg$key(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) capset(&(0x7f0000000140)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x102, 0x87, 0xffffffff, 0x40}) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000140)={0x77540947ad9a168d}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r4, 0x4b49, &(0x7f0000001240)={0xfe, "1cf11f0cf3df06723d68cf2e34bec1fe7aeb2e4f9bdca646c4d338b97ec131354c136ec6cf21a7fd51f27fb956a8ae3885ea642da767ac5f7080830a09b0ff10a4e89e9067691bc9d0c78817f1b777a16c084308ced3efc24ca6c31102220f5d34355338afe106101839c316ef0f88d2fcca226daf1c10a3b4d5bfc8a48d752e7f4a193c4b146ed8108bd5fbac85d2de914e1e1f4fd94decd9fdf1c7af946b07ccce200a7e5e20ac043bf7f8dcb806487be03132bf1f4ea1dc15bfee959c453bd5382b93ec14d8cd22c31ae731cbe7526b49c83607a4d6d0184af37286c08c9572e8b83c8dac93d59d5bf5767d5cd3c023cd121bc6894b0449b66a83345f8720f9113d0363314516e93cb1156ed299e6311c6c27c40a082795958fdfbc97243266bff54d143624911e7dd42e6cfc53bdace1643feecdf2b236a43f15c815cc95c6dd597a69d1e43791827ad87ec72c556ca24bbdfaa226f2367b76559dfb4b668d9b18bb089124f45be9c870cab5973d8a7488703e0c0704777129845591622a696f225bb81d93f5c72683e9778690770fab6750f3d8ff3162cbf04eb0be6477baa460b3f8e457a7b8bfdda324330accb61d513420c4db90797203eaf78e28160ebda297f435c87ba621e550ecbae53a8e48fa9ce5b40d578f6d20778fb060b7c6706d2b842596148cc25a33b5beb9071468af7ca3cebc7b57391b6b34f8d7b9"}) r5 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f, 0x5}}, 0x20) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r5, 0xc0884113, &(0x7f0000000540)={0x1, 0x0, 0x203, 0xfffd, 0xffffffffffffffff, 0x200000000000008, 0xfffffffffffffffd, 0x200, 0x8, 0x2c, 0x80000005, 0x2}) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r5, 0xc0844123, &(0x7f0000000240)=0x3) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r6, 0x12, 0x3, &(0x7f0000000100)=0x10, 0x4) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r8, 0x4004e502, 0x0) accept4(r7, 0x0, 0x0, 0x80800) open(&(0x7f00000000c0)='.\x00', 0x40100, 0x44) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fsopen(&(0x7f00000000c0)='nilfs2\x00', 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') lseek(r9, 0x1, 0x1) 8.695556514s ago: executing program 0 (id=1085): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x7fffffff, 0x2, 0x7, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5a, 0x1, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xd, 0x407, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x4a, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x8, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0x2000bf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0xffffff49, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x4, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x1, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0xfd, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x5, 0x8, 0x30b1d693, 0x5, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) syz_open_dev$vim2m(0x0, 0x7fffffff, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x0, 0xaf, 0x80000001, 0x80000}) 7.755519458s ago: executing program 0 (id=1089): r0 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(r2, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x11, 0xffffffffffffffff, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r3, r1, &(0x7f00000000c0)=0x58, 0x5) 7.597677703s ago: executing program 0 (id=1091): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r1, 0x201, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4002080}, 0x4000) 6.847690241s ago: executing program 0 (id=1097): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0, 0x0, 0xffff}, 0x18) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x8000002, 0x0, @mcast2}, 0x50) syz_emit_ethernet(0x66, &(0x7f0000000100)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00', 0x30, 0x3a, 0x0, @local, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x504, {0x6, 0x6, ':yE', 0x2, 0x3a, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast2}}}}}}}}, 0x0) 6.764588121s ago: executing program 4 (id=1100): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x2, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x400c000) 6.606550486s ago: executing program 4 (id=1102): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 6.576080699s ago: executing program 2 (id=1103): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') syz_emit_ethernet(0x4e, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ef00", 0x18, 0x2b, 0x0, @private1, @local, {[@hopopts={0x87}], {0x3b00, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r7 = dup(r1) write$binfmt_elf32(r7, 0x0, 0x64) execveat(r7, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) connect$netlink(r0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) r8 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r8, 0x0, 0x0) syz_usb_control_io(r8, 0x0, &(0x7f00000004c0)={0x84, &(0x7f0000000280)=ANY=[@ANYRESHEX=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.346698001s ago: executing program 4 (id=1107): r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00'}) sendmsg$nl_route(r1, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 6.179625238s ago: executing program 1 (id=1108): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={0x0}}, 0x0) 6.179332314s ago: executing program 4 (id=1109): r0 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x8086e1, 0x0, 0x1, 0x27f}, &(0x7f0000000500), &(0x7f0000000000)) unshare(0x20060400) r1 = memfd_create(&(0x7f00000006c0)='/dev/loop#\x00\xee\b\xce\xde\xe9\x8d\xd2\xd59\xe8\xda\b\xd6\xb2\x15\xf6F\xb8\xb4{r.\xd2\xea\xec\xdbXe&J \xe9\x16\x82\xe8=\x83\x88sN\x83N`\xf9\xec\xe1\xb16\xfb*\xf5\xd5\\\xa7\xebe\xbe\x9d\xd7\xf5\xb9<\xb2\xc4\xf9:\xef\xc0g\xc3\xb5\x7f\xc0\xcck.5=\xcc\x10Y\xad^*\x10\x00\x00\x00\x00\x00\x00\x00\x0e%\x84\x95bXy\x81;o\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa9{b\xab\x91\x88\xba\xa5J\xfd\xd2\x96R\x06\xeeP\x0f\xb0\xad_\x0e\xf6\xe7k\xbf\x93)\x02yX\x91\xc0\x8c\xeb\xd9\xda=\\\xa0\xdeke\xb6\xef\x10\xd2\xbd9\x87<[BKq\t*t\x9e\xf9\xa6\xb5\xda\tb\xcc%?\x14Y\x9b\x18nx\x19\x11\xb7\x9d~\xc5{O\xd0S\xbdi\xf8\"P>4\x05E|h?\x0f\xf5\xf8\x8c\xce\xebXN\xb7\xc0F\xbao\xf7\xab\xedO\x96\xa1(\n\x1e\xf9\xbe/.\xe2^\xb0\xb6{\x1fdX\x100v\xab\xce\x05\x00i\x85\xf63\x05\b\xd8\xeb\xdf\x00\x00]N\xe1\x9di&\r\xd2pw\x85\vQ \x82v\x8a7\xb6\xf8\x1c\x8c\xf0\xaf\xfa\x17\xbeD\a\vM\x87\xc0Q\x94\xd4\xd3\xc7I@Z\t\xa9\xf0\x9d4c\xb1^\xeeF\x96\xa1{OV\xe0\x1e#\xb3w\xc7\x87\xdd\'c\xcf.\x04\x8b\x9e\xef-b\xbe\x17T\xee\xe1\xf7\'+s\x15\xeb\xb1D\x86\x93\x1e\xf9\xf1L\x0f\x9b7/\xd9D\x91\xc47hI\xbc\x13.@R\x8b\xe2x\x97:A\xf1\xb6\xe2\xc8\xb2\x9bD\xb2P\xdc\xd4\xb1\xa50\x9f\x83~)\x9b7-\x80&r\xbc\xf6\xcf\xcc\xe0\x04\x93>\xb8\x88\xc0\xad\x97\xd3.\x04\xc4n\x83Sb\x83\xf6L\xb7$\xb4\xeb\x91\x88\xcfn\xccwN\x9c\x8a\xb7\xfd\x83G\x18[\x00\xee\xfe\x9e\xab\xc4\xb3\x1d-q]\vep\xee\x18\xa9\x86\xa5\x1a\xd5\x92\n,\x14\x96~\x0fW\xbb\x8a:\xf5\xa3\x9b\x004\xd8\xf8_\x0e\xee\xbe>\xd7\x90\x95\xcb^\xe2a\xf4\xe5Z5\x92~@ \x00\x9b\xca\xea\xa8\xc0,\xcc\xe9s\xca\xd3\"\x14\xf3\x11\xe5\x0e\x93\x9aY\xb6\xa2|\xe8\xfe0\x9e\xc2\x99b\xd7\xd9\xa6\x15oO\xe2\xfe\xd0F\xcc\xeb\x1a\x84\x06E\xec\xf5\x9e\xea\xccB\xdd\xd84f\xb2O\r\x12\x1a\x1d\xb8\x92Q)=\xaa?\x13T\x82\xdf-E\xa4>c\xcd\xf57\xde\x17_\xfa\x9dd]-\xdd3.\x91\xd9/r\xc6>\xe4]\x8b', 0x4) fallocate(r1, 0x0, 0x0, 0x200401) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000003c0)=[{&(0x7f0000001800)='\x00', 0x1}], 0x1, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x25a5, 0x4) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 5.436261333s ago: executing program 1 (id=1111): mkdir(&(0x7f00000000c0)='./bus\x00', 0xa5) mount$overlay(0x0, &(0x7f0000000380)='./bus\x00', &(0x7f0000000080), 0x10, &(0x7f0000000540)={[], [{@smackfsroot={'smackfsroot', 0x3d, '-\xc2J\x0f\x00\x10\x00\x00\x00\x9ap='}}]}) 5.38014145s ago: executing program 0 (id=1112): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0xb4, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) futex_waitv(&(0x7f0000007840), 0x0, 0x0, 0x0, 0x1) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = fsopen(&(0x7f00000001c0)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) 5.356925915s ago: executing program 6 (id=1113): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) r0 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) close(r0) syz_emit_ethernet(0x7a, &(0x7f0000000280)={@random="856b934629fa", @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "381f34", 0x14, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x2, 0x892f}, {}, {}, {0xa888}}}}}}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) mount$9p_fd(0x0, &(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0), 0x14000, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) 5.332912313s ago: executing program 4 (id=1114): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}, 0x1, 0x0, 0x0, 0x10840}, 0x0) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000b40)=""/30, 0x1e}, {0x0}], 0x3}, 0x1008}], 0x1, 0x100, 0x0) 2.655514843s ago: executing program 0 (id=1115): r0 = socket$inet_icmp(0x2, 0x2, 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan1\x00'}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0xc000000, 0x0, 0x0, 0x12}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{}, {}, {}, {0x7, 0x0, 0xb, 0x7}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000100)=""/7, &(0x7f0000000500)="009ea08f5fcedf5b802da89b010354498b8f118d233d6e235038ee90", &(0x7f00000005c0)="1c0f4c2d9e466f707ad2aa6c44e3778bb62e2d77a78b3ff5824686b6455aebca6a84e7c401d6514a0f56a3365b96a14b6da2f52d8faef3b0dbad602fca11a27a4b274dc4135dd023fc121f326ecf7657cc3cfcad218554bf3dc658ca3a6f430be33e61ff73d9db823c2e5fc3952996c6e030c65380671355313f02ce5902ad7fd2a9335f56c63a7846355b2ff616aec5b2bbc40f3eb9b4b2de3f6e85037aae4666dce71e9c7069e536c632f34e87540b3bfbb3fb44892a79d596c35be91d3763e938aa8225bb187c0e106cba48cb9a830229befcc1fcb643cb823f9ffac2", 0x81}, 0x38) nanosleep(&(0x7f0000000380), &(0x7f00000003c0)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x800, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@access_uid}, {@cache_fscache}]}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_KEY(r7, 0x0, 0x4) 2.655269311s ago: executing program 4 (id=1116): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]}) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) setitimer(0x2, &(0x7f0000000080)={{}, {0x0, 0xea60}}, 0x0) 2.654879927s ago: executing program 1 (id=1117): io_setup(0x5, &(0x7f0000000e80)=0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_submit(r0, 0x1, &(0x7f0000001580)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x0, r1, &(0x7f0000000080)="8c", 0x1}]) 2.517093873s ago: executing program 6 (id=1118): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x44000}, 0x8094) 2.407812148s ago: executing program 2 (id=1120): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'hsr0\x00'}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x0) 2.29095497s ago: executing program 1 (id=1121): rt_sigtimedwait(&(0x7f0000000000)={[0xe]}, 0x0, 0x0, 0x8) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') pread64(r0, &(0x7f0000000500)=""/31, 0x1f, 0x9) 2.270283234s ago: executing program 6 (id=1122): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r1 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x30) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) getpeername$unix(r0, &(0x7f0000000840)=@abs, &(0x7f00000008c0)=0x6e) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) unshare(0x22020400) recvmsg(r0, 0x0, 0x40010102) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) read$char_usb(r5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x0) getsockname$packet(r6, 0x0, &(0x7f0000000440)) bind$can_j1939(r5, &(0x7f0000000900)={0x1d, 0x0, 0x1, {0x0, 0xff, 0x1}, 0xff}, 0x18) sendmsg$xdp(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 2.144208263s ago: executing program 2 (id=1123): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={0x0}}, 0x0) 2.143960841s ago: executing program 3 (id=1124): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x190, 0x1, 0x0, 0x8a0, 0x1, 0x9, 0x1, 0x2, 0x5, 0x2, 0x13, 0x7, 0x7f, 0x3e, 0xb763599953cb091d, {0x1, 0x9957}, 0x3, 0xed}}) 2.088583785s ago: executing program 2 (id=1125): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_newvlan={0x28, 0x76, 0x709, 0x10001, 0x0, {0x7, 0x2}, [@BRIDGE_VLANDB_ENTRY={0xd, 0xd, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x13}}}]}, 0x28}, 0x1, 0x5502000000000000}, 0x4000) 2.037055201s ago: executing program 3 (id=1126): syz_clone3(&(0x7f0000000080)={0x1801480, &(0x7f0000000040), 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x3000000}, 0x8) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001500)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000400)=""/185, &(0x7f0000000140)=""/79, 0x9000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 1.899430493s ago: executing program 2 (id=1127): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000500), 0xb, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r4, 0xc2604110, 0x0) 727.424264ms ago: executing program 2 (id=1128): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) inotify_init() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, 0x0, 0x0) 649.858291ms ago: executing program 3 (id=1129): bpf$MAP_CREATE(0x100000000000000, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00000016", @ANYBLOB="0000003c1a6c9053"], 0x48) 579.472965ms ago: executing program 1 (id=1130): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[], 0x94}, 0x1, 0x2, 0x0, 0x804}, 0x0) 578.403661ms ago: executing program 6 (id=1131): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in=@private=0xa010100, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x40}, {0x2, 0xfffffffffffffffc, 0x200000000000}, 0x0, 0x0, 0x1, 0x0, 0x7}}, 0xb8}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@ssrr={0x89, 0x3, 0xe9}, @generic={0x7, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x20, 0x8000}}}}}}, 0x0) 431.656744ms ago: executing program 3 (id=1132): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x14f) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) rmdir(&(0x7f0000000000)='./file1\x00') chdir(&(0x7f00000003c0)='./bus\x00') creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) 378.163341ms ago: executing program 1 (id=1133): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d", 0x44}], 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) poll(&(0x7f0000000040)=[{r0, 0x4080}], 0x1, 0xe0000000) 345.269477ms ago: executing program 6 (id=1134): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c000000170a010800000000000000000200"], 0x2c}, 0x1, 0x0, 0x0, 0x44000}, 0x8094) 155.668126ms ago: executing program 3 (id=1135): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x0, 0x2, 0x6, 0xfffa}, 0x3a, [0x3, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff00, 0x6, 0x3, 0x20, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x7fffffff, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0xffff, 0x0, 0x20005, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x4, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2c0, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x9, 0xc, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0xffffff7f, 0x9, 0x5, 0x7fff, 0x0, 0x0, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x4, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x9, 0x3, 0x3, 0x20000008, 0x3, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x1, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x1, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0xd, 0xbb33, 0xf9a5, 0x7, 0x5, 0x6, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x8, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0x6, 0xa620, 0x2, 0x5, 0x0, 0x2, 0x14c, 0x60a7, 0x4, 0x16, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1d, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 123.800911ms ago: executing program 6 (id=1136): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f00000002c0)='E', 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback={0x2000000}, 0xffffffff}, 0x1c) 0s ago: executing program 3 (id=1137): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000340)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x0, 0x35dfdbfb, {0xa, 0x80, 0x80}}, 0x1c}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.47' (ED25519) to the list of known hosts. [ 82.807723][ T5817] cgroup: Unknown subsys name 'net' [ 83.000503][ T5817] cgroup: Unknown subsys name 'cpuset' [ 83.009827][ T5817] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.533814][ T5817] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.016600][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.030377][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.047181][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.055764][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.064196][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.076773][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.088340][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.095685][ T5848] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 87.103373][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.106520][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.110823][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.126034][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.126621][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.133401][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.141718][ T5853] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.147783][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.154935][ T5850] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.169191][ T5853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.176648][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.181843][ T5850] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.190773][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.191939][ T5850] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.198321][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.205320][ T5853] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.212647][ T5845] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 87.219436][ T5850] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.226737][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.249654][ T5832] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 87.263487][ T5832] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 87.271111][ T5832] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 88.043777][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 88.189380][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 88.275187][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 88.342667][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 88.366104][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 88.411239][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 88.580838][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.588257][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.595455][ T5831] bridge_slave_0: entered allmulticast mode [ 88.603040][ T5831] bridge_slave_0: entered promiscuous mode [ 88.663814][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.671009][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.678165][ T5831] bridge_slave_1: entered allmulticast mode [ 88.685546][ T5831] bridge_slave_1: entered promiscuous mode [ 88.782330][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.789808][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.797052][ T5828] bridge_slave_0: entered allmulticast mode [ 88.804399][ T5828] bridge_slave_0: entered promiscuous mode [ 88.857639][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.864761][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.871954][ T5830] bridge_slave_0: entered allmulticast mode [ 88.880204][ T5830] bridge_slave_0: entered promiscuous mode [ 88.887877][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.895051][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.902246][ T5828] bridge_slave_1: entered allmulticast mode [ 88.909625][ T5828] bridge_slave_1: entered promiscuous mode [ 88.946817][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.958145][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.965229][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.972458][ T5829] bridge_slave_0: entered allmulticast mode [ 88.980190][ T5829] bridge_slave_0: entered promiscuous mode [ 88.987893][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.995017][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.002376][ T5830] bridge_slave_1: entered allmulticast mode [ 89.009832][ T5830] bridge_slave_1: entered promiscuous mode [ 89.043766][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.051027][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.058240][ T5835] bridge_slave_0: entered allmulticast mode [ 89.065540][ T5835] bridge_slave_0: entered promiscuous mode [ 89.075579][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.085773][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.093447][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.100656][ T5829] bridge_slave_1: entered allmulticast mode [ 89.108161][ T5829] bridge_slave_1: entered promiscuous mode [ 89.140712][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.147869][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.155005][ T5833] bridge_slave_0: entered allmulticast mode [ 89.162534][ T5833] bridge_slave_0: entered promiscuous mode [ 89.166721][ T5844] Bluetooth: hci0: command tx timeout [ 89.171646][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.181558][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.189174][ T5833] bridge_slave_1: entered allmulticast mode [ 89.196749][ T5833] bridge_slave_1: entered promiscuous mode [ 89.219173][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.226336][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.233438][ T5835] bridge_slave_1: entered allmulticast mode [ 89.240948][ T5835] bridge_slave_1: entered promiscuous mode [ 89.289992][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.327193][ T5844] Bluetooth: hci2: command tx timeout [ 89.327247][ T5848] Bluetooth: hci5: command tx timeout [ 89.332744][ T52] Bluetooth: hci4: command tx timeout [ 89.338187][ T5832] Bluetooth: hci3: command tx timeout [ 89.349138][ T5850] Bluetooth: hci1: command tx timeout [ 89.377587][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.389447][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.401519][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.427619][ T5831] team0: Port device team_slave_0 added [ 89.436629][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.448421][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.487286][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.499049][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.510555][ T5831] team0: Port device team_slave_1 added [ 89.519141][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.568648][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.607186][ T5830] team0: Port device team_slave_0 added [ 89.614882][ T5828] team0: Port device team_slave_0 added [ 89.677796][ T5830] team0: Port device team_slave_1 added [ 89.685268][ T5828] team0: Port device team_slave_1 added [ 89.693236][ T5833] team0: Port device team_slave_0 added [ 89.713633][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.721288][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.747796][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.761448][ T5829] team0: Port device team_slave_0 added [ 89.797861][ T5833] team0: Port device team_slave_1 added [ 89.805303][ T5835] team0: Port device team_slave_0 added [ 89.812270][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.819627][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.845667][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.858769][ T5829] team0: Port device team_slave_1 added [ 89.905280][ T5835] team0: Port device team_slave_1 added [ 89.932532][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.939516][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.966110][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.978248][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.985179][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.011359][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.077331][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.084261][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.111148][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.122842][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.129987][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.155945][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.167723][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.174645][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.200874][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.227268][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.234212][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.260146][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.300735][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.307806][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.334252][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.346334][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.353269][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.380059][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.451984][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.468537][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.495242][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.528178][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.535114][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.561260][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.602330][ T5830] hsr_slave_0: entered promiscuous mode [ 90.609254][ T5830] hsr_slave_1: entered promiscuous mode [ 90.632693][ T5831] hsr_slave_0: entered promiscuous mode [ 90.639799][ T5831] hsr_slave_1: entered promiscuous mode [ 90.646341][ T5831] debugfs: 'hsr0' already exists in 'hsr' [ 90.652100][ T5831] Cannot create hsr debugfs directory [ 90.732757][ T5828] hsr_slave_0: entered promiscuous mode [ 90.739182][ T5828] hsr_slave_1: entered promiscuous mode [ 90.745367][ T5828] debugfs: 'hsr0' already exists in 'hsr' [ 90.751411][ T5828] Cannot create hsr debugfs directory [ 90.844989][ T5833] hsr_slave_0: entered promiscuous mode [ 90.851705][ T5833] hsr_slave_1: entered promiscuous mode [ 90.858759][ T5833] debugfs: 'hsr0' already exists in 'hsr' [ 90.864469][ T5833] Cannot create hsr debugfs directory [ 90.888445][ T5829] hsr_slave_0: entered promiscuous mode [ 90.894849][ T5829] hsr_slave_1: entered promiscuous mode [ 90.901525][ T5829] debugfs: 'hsr0' already exists in 'hsr' [ 90.907425][ T5829] Cannot create hsr debugfs directory [ 90.968213][ T5835] hsr_slave_0: entered promiscuous mode [ 90.974609][ T5835] hsr_slave_1: entered promiscuous mode [ 90.981058][ T5835] debugfs: 'hsr0' already exists in 'hsr' [ 90.986966][ T5835] Cannot create hsr debugfs directory [ 91.256228][ T5850] Bluetooth: hci0: command tx timeout [ 91.406482][ T52] Bluetooth: hci1: command tx timeout [ 91.406512][ T5832] Bluetooth: hci4: command tx timeout [ 91.411947][ T5850] Bluetooth: hci5: command tx timeout [ 91.417431][ T5848] Bluetooth: hci2: command tx timeout [ 91.422695][ T5844] Bluetooth: hci3: command tx timeout [ 91.665035][ T5830] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 91.686591][ T5830] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 91.708078][ T5830] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 91.719517][ T5830] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 91.780844][ T5833] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.793066][ T5833] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.810071][ T5833] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.831341][ T5833] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.905598][ T5835] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.918193][ T5835] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.930534][ T5835] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.944531][ T5835] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.042629][ T5831] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.059201][ T5831] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.075796][ T5831] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.090304][ T5831] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.173695][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.220920][ T5828] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.234124][ T5828] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.251258][ T5828] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.263942][ T5828] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.335870][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.392074][ T3787] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.399285][ T3787] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.412942][ T5829] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.432907][ T5829] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.445895][ T5829] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.462982][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.475572][ T5829] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.498551][ T3735] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.505646][ T3735] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.558115][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.577169][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.608005][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.615123][ T1156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.650773][ T1156] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.657924][ T1156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.707666][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.745534][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.752699][ T1156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.784850][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.800834][ T3735] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.808039][ T3735] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.903921][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.916745][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.971760][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.978923][ T4182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.018856][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.026005][ T4182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.049341][ T5835] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.082987][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.151109][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.170260][ T3787] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.177412][ T3787] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.219805][ T3787] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.226983][ T3787] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.336045][ T5844] Bluetooth: hci0: command tx timeout [ 93.343832][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.400623][ T4550] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.407803][ T4550] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.450780][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.475392][ T4550] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.482514][ T4550] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.490142][ T5850] Bluetooth: hci4: command tx timeout [ 93.495599][ T5844] Bluetooth: hci2: command tx timeout [ 93.503676][ T5850] Bluetooth: hci3: command tx timeout [ 93.503707][ T5832] Bluetooth: hci1: command tx timeout [ 93.515253][ T5848] Bluetooth: hci5: command tx timeout [ 93.546843][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.660958][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.798994][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.859656][ T5833] veth0_vlan: entered promiscuous mode [ 93.929427][ T5833] veth1_vlan: entered promiscuous mode [ 94.030665][ T5835] veth0_vlan: entered promiscuous mode [ 94.073596][ T5835] veth1_vlan: entered promiscuous mode [ 94.092635][ T5833] veth0_macvtap: entered promiscuous mode [ 94.123537][ T5833] veth1_macvtap: entered promiscuous mode [ 94.212948][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.237368][ T5830] veth0_vlan: entered promiscuous mode [ 94.252016][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.274327][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.312780][ T1156] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.328177][ T5830] veth1_vlan: entered promiscuous mode [ 94.336742][ T1156] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.345590][ T1156] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.363479][ T5835] veth0_macvtap: entered promiscuous mode [ 94.375139][ T1156] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.400540][ T5835] veth1_macvtap: entered promiscuous mode [ 94.443373][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.460481][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.514083][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.559204][ T5830] veth0_macvtap: entered promiscuous mode [ 94.577372][ T1156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.587888][ T5830] veth1_macvtap: entered promiscuous mode [ 94.596394][ T1156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.616882][ T3735] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.642130][ T3735] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.651528][ T3735] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.679040][ T3735] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.719526][ T5828] veth0_vlan: entered promiscuous mode [ 94.729696][ T177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.740327][ T177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.746565][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.792049][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.816501][ T5828] veth1_vlan: entered promiscuous mode [ 94.832934][ T5833] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.836864][ T5831] veth0_vlan: entered promiscuous mode [ 94.862834][ T3735] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.872157][ T3735] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.897744][ T3735] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.914685][ T3735] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.927885][ T5829] veth0_vlan: entered promiscuous mode [ 94.950326][ T5831] veth1_vlan: entered promiscuous mode [ 95.016744][ T3787] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.035837][ T3787] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.077173][ T5829] veth1_vlan: entered promiscuous mode [ 95.108497][ T3787] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.119342][ T5828] veth0_macvtap: entered promiscuous mode [ 95.126529][ T3787] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.162917][ T5828] veth1_macvtap: entered promiscuous mode [ 95.262756][ T3787] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.271399][ T3787] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.282186][ T5831] veth0_macvtap: entered promiscuous mode [ 95.318221][ T5831] veth1_macvtap: entered promiscuous mode [ 95.379123][ T5986] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 95.406142][ T5848] Bluetooth: hci0: command tx timeout [ 95.422296][ T3735] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.426775][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.438955][ T3735] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.504061][ T5829] veth0_macvtap: entered promiscuous mode [ 95.519753][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.543443][ T5829] veth1_macvtap: entered promiscuous mode [ 95.577087][ T5848] Bluetooth: hci3: command tx timeout [ 95.577110][ T5832] Bluetooth: hci2: command tx timeout [ 95.577140][ T5832] Bluetooth: hci5: command tx timeout [ 95.583509][ T5850] Bluetooth: hci1: command tx timeout [ 95.583552][ T5844] Bluetooth: hci4: command tx timeout [ 95.628753][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.678113][ T57] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.693896][ T57] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.738231][ T57] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.758096][ T57] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.801486][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.138300][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.147067][ T4550] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.157465][ T4550] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.184560][ T4550] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.207880][ T4550] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.218569][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.852943][ T906] cfg80211: failed to load regulatory.db [ 96.896371][ T1150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.904194][ T1150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.126148][ T3735] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.134904][ T3735] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.227233][ T3735] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.263626][ T3735] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.307707][ T4182] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.347350][ T4182] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.495900][ T4182] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.503886][ T4182] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.709917][ T5941] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 97.721407][ T177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.762704][ T177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.896778][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.904620][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.916351][ T5839] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 97.924934][ T5941] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.950234][ T5941] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 97.976259][ T5941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.994533][ T5941] usb 2-1: config 0 descriptor?? [ 98.017687][ T5941] pwc: Askey VC010 type 2 USB webcam detected. [ 98.118020][ T5839] usb 1-1: config 7 has an invalid interface number: 192 but max is 0 [ 98.136091][ T5839] usb 1-1: config 7 has no interface number 0 [ 98.143816][ T5839] usb 1-1: config 7 interface 192 has no altsetting 0 [ 98.158591][ T5839] usb 1-1: New USB device found, idVendor=09fb, idProduct=ebbe, bcdDevice=d4.8d [ 98.175975][ T5839] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.194696][ T5839] usb 1-1: Product: syz [ 98.204783][ T5839] usb 1-1: Manufacturer: syz [ 98.219082][ T5839] usb 1-1: SerialNumber: syz [ 98.450477][ T5941] pwc: recv_control_msg error -32 req 02 val 2b00 [ 98.486750][ T5941] pwc: recv_control_msg error -32 req 02 val 2700 [ 98.497665][ T5839] usb 1-1: USB disconnect, device number 2 [ 98.508519][ T5941] pwc: recv_control_msg error -32 req 02 val 2c00 [ 98.534257][ T5941] pwc: recv_control_msg error -32 req 04 val 1000 [ 98.756679][ T5941] pwc: recv_control_msg error -71 req 04 val 1400 [ 98.770892][ T5941] pwc: recv_control_msg error -71 req 02 val 2000 [ 98.788933][ T5941] pwc: recv_control_msg error -71 req 02 val 2100 [ 98.797665][ T5941] pwc: recv_control_msg error -71 req 04 val 1500 [ 98.810208][ T5941] pwc: recv_control_msg error -71 req 02 val 2500 [ 98.848970][ T5941] pwc: recv_control_msg error -71 req 02 val 2400 [ 98.860545][ T5941] pwc: recv_control_msg error -71 req 02 val 2600 [ 98.872107][ T5941] pwc: recv_control_msg error -71 req 02 val 2900 [ 98.892783][ T5941] pwc: recv_control_msg error -71 req 02 val 2800 [ 98.908022][ T5941] pwc: recv_control_msg error -71 req 04 val 1100 [ 98.909156][ T4182] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.935672][ T5941] pwc: recv_control_msg error -71 req 04 val 1200 [ 98.952754][ T4182] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.967864][ T5941] pwc: Registered as video103. [ 98.975441][ T5941] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input5 [ 99.074696][ T5941] usb 2-1: USB disconnect, device number 2 [ 99.509964][ T6057] netlink: 'syz.2.3': attribute type 21 has an invalid length. [ 99.567538][ T6057] netlink: 'syz.2.3': attribute type 4 has an invalid length. [ 99.644076][ T6057] netlink: 14413 bytes leftover after parsing attributes in process `syz.2.3'. [ 101.102968][ T31] audit: type=1326 audit(1766722449.174:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6080 comm="syz.5.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f275718f749 code=0x7ffc0000 [ 101.211923][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 101.314432][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 101.519261][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 101.566254][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 101.744618][ T31] audit: type=1326 audit(1766722449.174:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6080 comm="syz.5.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f275718f749 code=0x7ffc0000 [ 101.766737][ T31] audit: type=1326 audit(1766722449.174:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6080 comm="syz.5.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f275718f749 code=0x7ffc0000 [ 101.788824][ T31] audit: type=1326 audit(1766722449.174:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6080 comm="syz.5.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f275718f749 code=0x7ffc0000 [ 101.811075][ T975] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 101.939628][ T31] audit: type=1326 audit(1766722449.184:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6080 comm="syz.5.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f275718f749 code=0x7ffc0000 [ 102.229413][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 102.241532][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 102.287033][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 102.306092][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 102.340518][ T975] usb 5-1: config 7 has an invalid interface number: 192 but max is 0 [ 102.442105][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 102.478114][ T31] audit: type=1326 audit(1766722449.184:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6080 comm="syz.5.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f275718f749 code=0x7ffc0000 [ 102.514719][ T975] usb 5-1: config 7 has no interface number 0 [ 102.544587][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 102.642691][ T975] usb 5-1: config 7 interface 192 has no altsetting 0 [ 102.814819][ T975] usb 5-1: New USB device found, idVendor=09fb, idProduct=ebbe, bcdDevice=d4.8d [ 102.913872][ T31] audit: type=1326 audit(1766722450.204:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6080 comm="syz.5.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f275718f749 code=0x7ffc0000 [ 102.983785][ T975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.111842][ T975] usb 5-1: Product: syz [ 103.198635][ T975] usb 5-1: Manufacturer: syz [ 103.276888][ T975] usb 5-1: SerialNumber: syz [ 103.294676][ T31] audit: type=1326 audit(1766722450.224:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6080 comm="syz.5.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f275718f749 code=0x7ffc0000 [ 103.873593][ T31] audit: type=1326 audit(1766722451.344:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6098 comm="syz.1.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994798f749 code=0x7ffc0000 [ 104.336028][ T31] audit: type=1326 audit(1766722451.374:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6098 comm="syz.1.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994798f749 code=0x7ffc0000 [ 104.383652][ T975] usb 5-1: USB disconnect, device number 2 [ 106.788212][ T6112] warning: `syz.3.45' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 107.108461][ T6131] netlink: 'syz.2.54': attribute type 4 has an invalid length. [ 107.506429][ T6100] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 107.622723][ T5921] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 107.835985][ T6100] usb 2-1: Using ep0 maxpacket: 32 [ 108.620773][ T5921] usb 4-1: config 7 has an invalid interface number: 192 but max is 0 [ 108.675752][ T6100] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.705998][ T6100] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 108.729226][ T6100] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 108.733229][ T5921] usb 4-1: config 7 has no interface number 0 [ 108.749694][ T6100] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 108.757903][ T6100] usb 2-1: Product: syz [ 108.762065][ T6100] usb 2-1: Manufacturer: syz [ 108.767421][ T6100] usb 2-1: SerialNumber: syz [ 108.777574][ T6100] usb 2-1: config 0 descriptor?? [ 108.784468][ T6100] hub 2-1:0.0: bad descriptor, ignoring hub [ 108.793628][ T6100] hub 2-1:0.0: probe with driver hub failed with error -5 [ 108.815549][ T5921] usb 4-1: config 7 interface 192 has no altsetting 0 [ 108.854816][ T5921] usb 4-1: New USB device found, idVendor=09fb, idProduct=ebbe, bcdDevice=d4.8d [ 108.888674][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.907764][ T5921] usb 4-1: Product: syz [ 108.919809][ T5921] usb 4-1: Manufacturer: syz [ 108.936030][ T5921] usb 4-1: SerialNumber: syz [ 111.967103][ T5913] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 112.267235][ T6169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.279989][ T6169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.726288][ T5921] usb 4-1: USB disconnect, device number 2 [ 112.856373][ T6047] usb 2-1: USB disconnect, device number 3 [ 113.089066][ T6183] Zero length message leads to an empty skb [ 116.416655][ T5913] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 116.647864][ T5913] usb 6-1: config 7 has an invalid interface number: 192 but max is 0 [ 116.665975][ T5913] usb 6-1: config 7 has no interface number 0 [ 116.672631][ T5913] usb 6-1: config 7 interface 192 has no altsetting 0 [ 116.705613][ T5913] usb 6-1: New USB device found, idVendor=09fb, idProduct=ebbe, bcdDevice=d4.8d [ 116.714963][ T5913] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.723335][ T5913] usb 6-1: Product: syz [ 116.727959][ T5913] usb 6-1: Manufacturer: syz [ 116.732547][ T5913] usb 6-1: SerialNumber: syz [ 116.854254][ T6214] loop9: detected capacity change from 0 to 7 [ 116.910580][ T6214] Dev loop9: unable to read RDB block 7 [ 116.930504][ T6214] loop9: unable to read partition table [ 116.962844][ T6214] loop9: partition table beyond EOD, truncated [ 116.971248][ T5913] usb 6-1: USB disconnect, device number 2 [ 117.017510][ T6214] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 117.136034][ T6100] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 117.226647][ T6219] overlayfs: failed to resolve './file1': -2 [ 117.306172][ T6100] usb 1-1: Using ep0 maxpacket: 8 [ 117.816240][ T5913] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 119.668836][ T6100] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 119.677220][ T6100] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 119.687445][ T6100] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 119.698056][ T6100] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 10982, setting to 1024 [ 119.759778][ T6100] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 119.776341][ T5913] usb 4-1: Using ep0 maxpacket: 32 [ 119.792578][ T6100] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 119.797832][ T5913] usb 4-1: unable to get BOS descriptor or descriptor too short [ 119.829539][ T5913] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 119.844201][ T5913] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 119.863515][ T6100] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 119.882896][ T5913] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 119.904378][ T5913] usb 4-1: language id specifier not provided by device, defaulting to English [ 119.927583][ T5913] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 119.935988][ T6100] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.967722][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.984741][ T5913] usb 4-1: Product: syz [ 119.998440][ T6100] usb 1-1: can't set config #16, error -71 [ 120.001146][ T5913] usb 4-1: Manufacturer: 킉 [ 120.020958][ T6100] usb 1-1: USB disconnect, device number 3 [ 120.021649][ T5913] usb 4-1: SerialNumber: syz [ 120.078789][ T6235] 9p: Bad value for 'uname' [ 120.307707][ T5913] usb 4-1: 0:2 : does not exist [ 120.363429][ T5913] usb 4-1: USB disconnect, device number 3 [ 121.812184][ T6100] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 122.867824][ T6100] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 122.890988][ T6100] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 122.917804][ T6100] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.929022][ T6100] usb 1-1: Product: syz [ 122.933816][ T6100] usb 1-1: Manufacturer: syz [ 122.945656][ T6100] usb 1-1: SerialNumber: syz [ 122.973116][ T6100] usb 1-1: config 0 descriptor?? [ 122.999874][ T6100] hub 1-1:0.0: bad descriptor, ignoring hub [ 123.018626][ T6100] hub 1-1:0.0: probe with driver hub failed with error -5 [ 123.120598][ T6100] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input6 [ 123.177516][ T5934] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 124.026267][ T5934] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.046115][ T5934] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 124.075989][ T5934] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.096650][ T5934] usb 4-1: config 0 descriptor?? [ 124.123720][ T5934] pwc: Askey VC010 type 2 USB webcam detected. [ 124.266024][ T5913] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 124.456194][ T5913] usb 3-1: Using ep0 maxpacket: 16 [ 124.478288][ T5913] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.496548][ T5913] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.511656][ T5913] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 124.556577][ T5913] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 124.580910][ T5913] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.816905][ T5913] usb 3-1: config 0 descriptor?? [ 124.836108][ T5934] pwc: recv_control_msg error -71 req 02 val 2700 [ 124.843536][ T5934] pwc: recv_control_msg error -71 req 02 val 2c00 [ 124.852243][ T5934] pwc: recv_control_msg error -71 req 04 val 1000 [ 125.574191][ T5934] pwc: recv_control_msg error -71 req 04 val 1300 [ 125.584495][ T5934] pwc: recv_control_msg error -71 req 04 val 1400 [ 125.643306][ T5934] pwc: recv_control_msg error -71 req 02 val 2000 [ 125.769347][ T6300] ceph: No mds server is up or the cluster is laggy [ 125.815784][ T906] libceph: connect (1)[c::]:6789 error -101 [ 125.816240][ T906] libceph: mon0 (1)[c::]:6789 connect error [ 126.068959][ T5934] pwc: recv_control_msg error -71 req 02 val 2100 [ 126.076239][ T5934] pwc: recv_control_msg error -71 req 04 val 1500 [ 126.076650][ T5934] pwc: recv_control_msg error -71 req 02 val 2500 [ 126.077073][ T5934] pwc: recv_control_msg error -71 req 02 val 2400 [ 126.141111][ T5913] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 126.168552][ T5913] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 126.211623][ T5913] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 126.217705][ T5934] pwc: recv_control_msg error -71 req 02 val 2600 [ 126.228758][ T5934] pwc: recv_control_msg error -71 req 02 val 2900 [ 126.235847][ T5934] pwc: recv_control_msg error -71 req 02 val 2800 [ 126.246235][ T5934] pwc: recv_control_msg error -71 req 04 val 1100 [ 126.249002][ T5913] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 126.266169][ T5934] pwc: recv_control_msg error -71 req 04 val 1200 [ 126.282055][ T5934] pwc: Registered as video103. [ 126.286007][ T5913] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 126.294584][ T5913] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 126.307271][ T5934] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input7 [ 126.318882][ T5913] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 126.347287][ T5934] usb 4-1: USB disconnect, device number 4 [ 126.361400][ T5913] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 126.376744][ T5913] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 126.387931][ T5913] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 129.915010][ T6316] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 129.924606][ T5913] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0001/input/input8 [ 129.937455][ T6316] block device autoloading is deprecated and will be removed. [ 130.223865][ T5913] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 130.930459][ T5913] usb 3-1: USB disconnect, device number 3 [ 131.511340][ T6335] netlink: 184 bytes leftover after parsing attributes in process `syz.1.124'. [ 133.982856][ T6100] usb 1-1: USB disconnect, device number 4 [ 134.070302][ T6368] syz.4.136 uses obsolete (PF_INET,SOCK_PACKET) [ 134.528204][ T6379] xt_HMARK: proto mask must be zero with L3 mode [ 137.116532][ T6172] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 137.330718][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.345949][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.505998][ T6172] usb 4-1: Using ep0 maxpacket: 8 [ 137.513835][ T6172] usb 4-1: config 0 has an invalid interface number: 170 but max is 0 [ 137.526287][ T6172] usb 4-1: config 0 has no interface number 0 [ 137.536077][ T6172] usb 4-1: config 0 interface 170 altsetting 0 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 138.233557][ T6172] usb 4-1: config 0 interface 170 altsetting 0 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 138.276868][ T6172] usb 4-1: New USB device found, idVendor=2833, idProduct=0211, bcdDevice=43.14 [ 138.326395][ T6172] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.380585][ T6172] usb 4-1: Product: syz [ 138.436094][ T6172] usb 4-1: Manufacturer: syz [ 139.375974][ T6172] usb 4-1: SerialNumber: syz [ 139.388697][ T6172] usb 4-1: config 0 descriptor?? [ 140.166351][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 140.347601][ T9] usb 2-1: config 0 has an invalid interface number: 95 but max is 0 [ 141.590067][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.700303][ T6172] uvcvideo 4-1:0.170: Found UVC 0.00 device syz (2833:0211) [ 141.856038][ T6172] uvcvideo 4-1:0.170: No valid video chain found. [ 141.926507][ T6172] usb 4-1: USB disconnect, device number 5 [ 142.037245][ T9] usb 2-1: config 0 has no interface number 0 [ 142.286780][ T9] usb 2-1: config 0 interface 95 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 142.343733][ T9] usb 2-1: string descriptor 0 read error: -71 [ 142.359975][ T9] usb 2-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 142.369982][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.388473][ T9] usb 2-1: config 0 descriptor?? [ 142.394175][ T9] usb 2-1: can't set config #0, error -71 [ 144.949236][ T9] usb 2-1: USB disconnect, device number 4 [ 146.305998][ T5913] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 146.466200][ T5913] usb 2-1: Using ep0 maxpacket: 16 [ 146.496929][ T5913] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 146.545956][ T5913] usb 2-1: config 0 has no interfaces? [ 146.578499][ T5913] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 146.622014][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.706215][ T5913] usb 2-1: Product: syz [ 146.710389][ T5913] usb 2-1: Manufacturer: syz [ 146.843499][ T6492] capability: warning: `syz.3.177' uses 32-bit capabilities (legacy support in use) [ 147.755335][ T5913] usb 2-1: SerialNumber: syz [ 147.857023][ T5913] usb 2-1: config 0 descriptor?? [ 148.101484][ T5844] Bluetooth: hci5: Malformed LE Event: 0x0d [ 148.136698][ T6170] usb 2-1: USB disconnect, device number 5 [ 154.428588][ T6548] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 157.698726][ T6578] netlink: 16 bytes leftover after parsing attributes in process `syz.1.209'. [ 157.727433][ T6578] netlink: 16 bytes leftover after parsing attributes in process `syz.1.209'. [ 157.986223][ T5934] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 158.076019][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 159.002562][ T5934] usb 4-1: Using ep0 maxpacket: 16 [ 159.010103][ T5934] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.021342][ T5934] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.031228][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 159.066044][ T5934] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 159.082266][ T9] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 159.125986][ T5934] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 159.145285][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 159.178458][ T5934] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.225832][ T9] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 159.239747][ T5934] usb 4-1: config 0 descriptor?? [ 159.266187][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.275695][ T9] usb 6-1: Product: syz [ 159.309426][ T9] usb 6-1: Manufacturer: syz [ 159.314065][ T9] usb 6-1: SerialNumber: syz [ 159.337176][ T9] usb 6-1: config 0 descriptor?? [ 159.349638][ T9] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 159.369639][ T9] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 160.110703][ T6610] netlink: 8 bytes leftover after parsing attributes in process `syz.2.218'. [ 161.466031][ T9] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 161.496996][ T9] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 161.513254][ T31] kauditd_printk_skb: 9 callbacks suppressed [ 161.513269][ T31] audit: type=1800 audit(1766722509.584:21): pid=6609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.219" name="bus" dev="overlay" ino=229 res=0 errno=0 [ 161.550100][ T9] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 161.559529][ T5934] usbhid 4-1:0.0: can't add hid device: -71 [ 161.569010][ T9] em28xx 6-1:0.0: No AC97 audio processor [ 161.583113][ T5934] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 161.603996][ T9] usb 6-1: USB disconnect, device number 3 [ 161.616292][ T5934] usb 4-1: USB disconnect, device number 6 [ 161.636166][ T9] em28xx 6-1:0.0: Disconnecting em28xx [ 161.659428][ T9] em28xx 6-1:0.0: Freeing device [ 161.978507][ T6117] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 162.837098][ T6117] usb 1-1: Using ep0 maxpacket: 8 [ 162.854087][ T6117] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 162.890337][ T6117] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 162.936019][ T6117] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 162.945692][ T6117] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 162.977156][ T6117] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 162.994965][ T6117] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 163.023732][ T6117] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.246338][ T6117] usb 1-1: config 0 descriptor?? [ 163.489154][ T5848] Bluetooth: hci7: urb ffff88807e567900 submission failed (90) [ 164.450652][ T6019] usb 1-1: USB disconnect, device number 5 [ 164.545977][ T6172] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 164.836466][ T6656] process 'syz.3.234' launched './file0' with NULL argv: empty string added [ 165.166386][ T5844] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 165.277539][ T6172] usb 5-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 165.669268][ T6172] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.690982][ T6172] usb 5-1: config 0 descriptor?? [ 165.699796][ T6172] gspca_main: spca508-2.14.0 probing 8086:0110 [ 166.308557][ T6674] loop5: detected capacity change from 0 to 32768 [ 166.690242][ T6172] gspca_spca508: reg_read err -71 [ 166.721647][ T6172] gspca_spca508: reg_read err -71 [ 166.728158][ T6172] gspca_spca508: reg_read err -71 [ 166.737271][ T6172] gspca_spca508: reg_read err -71 [ 166.744065][ T6674] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 166.760455][ T6172] gspca_spca508: reg write: error -71 [ 166.774795][ T6172] spca508 5-1:0.0: probe with driver spca508 failed with error -71 [ 166.797155][ T6172] usb 5-1: USB disconnect, device number 3 [ 166.856659][ T6674] XFS (loop5): Ending clean mount [ 166.867095][ T6674] XFS (loop5): Quotacheck needed: Please wait. [ 166.925367][ T6674] XFS (loop5): Quotacheck: Done. [ 167.009895][ T6692] netlink: 'syz.0.246': attribute type 3 has an invalid length. [ 167.017874][ T6692] netlink: 92 bytes leftover after parsing attributes in process `syz.0.246'. [ 167.053981][ T5830] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 167.968858][ T6704] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 169.854557][ T6735] netlink: 112 bytes leftover after parsing attributes in process `syz.5.263'. [ 171.389226][ T6737] netlink: 'syz.2.262': attribute type 4 has an invalid length. [ 173.259035][ T6773] netlink: 'syz.1.277': attribute type 4 has an invalid length. [ 173.337163][ T6775] netlink: 4 bytes leftover after parsing attributes in process `syz.5.279'. [ 177.196012][ T6072] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 178.654690][ T6821] loop1: detected capacity change from 0 to 40427 [ 178.669965][ T6821] F2FS-fs (loop1): Image doesn't support compression [ 178.676979][ T6821] F2FS-fs (loop1): build fault injection rate: 690 [ 178.686869][ T6821] F2FS-fs (loop1): invalid crc value [ 178.762971][ T6821] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 178.776054][ T6821] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 178.791974][ T31] audit: type=1800 audit(1766722526.874:22): pid=6821 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.296" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 178.958509][ T5835] syz-executor: attempt to access beyond end of device [ 178.958509][ T5835] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 178.983660][ T5835] CPU: 0 UID: 0 PID: 5835 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 178.983689][ T5835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 178.983703][ T5835] Call Trace: [ 178.983713][ T5835] [ 178.983723][ T5835] dump_stack_lvl+0xe8/0x150 [ 178.983760][ T5835] f2fs_handle_critical_error+0x37c/0x540 [ 178.983799][ T5835] f2fs_write_end_io+0x886/0xb60 [ 178.983856][ T5835] __submit_merged_bio+0x256/0x660 [ 178.983892][ T5835] __submit_merged_write_cond+0x269/0x530 [ 178.983928][ T5835] f2fs_write_data_pages+0x2756/0x3290 [ 178.984010][ T5835] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 178.984038][ T5835] ? is_bpf_text_address+0x26/0x2b0 [ 178.984094][ T5835] ? arch_stack_walk+0xfc/0x150 [ 178.984164][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 178.984192][ T5835] ? add_lock_to_list+0xc7/0x100 [ 178.984226][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 178.984254][ T5835] ? __lock_acquire+0x146f/0x2cf0 [ 178.984317][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 178.984345][ T5835] ? do_raw_spin_lock+0x121/0x290 [ 178.984387][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 178.984420][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 178.984448][ T5835] ? do_raw_spin_unlock+0x122/0x240 [ 178.984483][ T5835] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 178.984516][ T5835] do_writepages+0x32e/0x550 [ 178.984552][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 178.984583][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 178.984617][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 178.984644][ T5835] ? do_raw_spin_unlock+0x122/0x240 [ 178.984685][ T5835] filemap_fdatawrite+0x199/0x240 [ 178.984720][ T5835] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 178.984806][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 178.984837][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 178.984872][ T5835] ? do_raw_spin_unlock+0x122/0x240 [ 178.984913][ T5835] f2fs_sync_dirty_inodes+0x30f/0x810 [ 178.984971][ T5835] f2fs_write_checkpoint+0x935/0x2430 [ 178.985052][ T5835] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 178.985083][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 178.985188][ T5835] kill_f2fs_super+0x2d2/0x6c0 [ 178.985231][ T5835] ? __pfx_kill_f2fs_super+0x10/0x10 [ 178.985297][ T5835] deactivate_locked_super+0xbc/0x130 [ 178.985337][ T5835] cleanup_mnt+0x425/0x4c0 [ 178.985374][ T5835] ? _raw_spin_unlock_irq+0x23/0x50 [ 178.985420][ T5835] task_work_run+0x1d4/0x260 [ 178.985460][ T5835] ? __pfx_task_work_run+0x10/0x10 [ 178.985496][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 178.985538][ T5835] exit_to_user_mode_loop+0xef/0x4e0 [ 178.985563][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 178.985591][ T5835] ? rcu_is_watching+0x15/0xb0 [ 178.985627][ T5835] do_syscall_64+0x2b7/0xf80 [ 178.985652][ T5835] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.985675][ T5835] ? trace_irq_disable+0x37/0x100 [ 178.985717][ T5835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.985740][ T5835] RIP: 0033:0x7f9947990a77 [ 178.985761][ T5835] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 178.985780][ T5835] RSP: 002b:00007ffe12e69c48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 178.985805][ T5835] RAX: 0000000000000000 RBX: 00007f9947a13d7d RCX: 00007f9947990a77 [ 178.985822][ T5835] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe12e69d00 [ 178.985837][ T5835] RBP: 00007ffe12e69d00 R08: 0000000000000000 R09: 0000000000000000 [ 178.985852][ T5835] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe12e6ad90 [ 178.985869][ T5835] R13: 00007f9947a13d7d R14: 000000000002bac1 R15: 00007ffe12e6add0 [ 178.985917][ T5835] [ 179.386963][ T5835] F2FS-fs (loop1): Remounting filesystem read-only [ 179.428386][ T6827] input: syz0 as /devices/virtual/input/input9 [ 179.495981][ T6047] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 180.098233][ T6047] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.109982][ T6047] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.135267][ T6047] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 180.202418][ T6047] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.248579][ T6047] usb 6-1: config 0 descriptor?? [ 180.316852][ T6835] netlink: 4 bytes leftover after parsing attributes in process `syz.4.303'. [ 180.687536][ T6047] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 180.707146][ T6047] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 180.754732][ T6047] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 180.763811][ T6047] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 181.404856][ T6047] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 181.419425][ T6047] cm6533_jd 0003:0D8C:0022.0002: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 181.434143][ T6047] usb 6-1: USB disconnect, device number 4 [ 181.701320][ T6851] loop2: detected capacity change from 0 to 256 [ 183.922496][ T6868] Bluetooth: MGMT ver 1.23 [ 183.948195][ T6865] Illegal XDP return value 4294967294 on prog (id 42) dev N/A, expect packet loss! [ 184.048306][ T6872] netlink: 4 bytes leftover after parsing attributes in process `syz.0.318'. [ 184.242857][ T5942] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 184.288467][ T6878] netlink: 64 bytes leftover after parsing attributes in process `syz.3.319'. [ 185.081550][ T5942] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 185.135166][ T5942] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.157352][ T5942] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.177758][ T5942] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 185.223517][ T5942] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 185.239984][ T5942] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 185.258995][ T5942] usb 5-1: Manufacturer: syz [ 185.284032][ T5942] usb 5-1: config 0 descriptor?? [ 187.892061][ T5942] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 187.905307][ T5942] appleir 0003:05AC:8243.0003: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 188.151665][ T6912] vxcan1: tx drop: invalid da for name 0x00000000000000ee [ 188.211415][ T9] usb 5-1: USB disconnect, device number 4 [ 188.508945][ T6921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.334'. [ 188.622127][ T6925] netlink: 4 bytes leftover after parsing attributes in process `syz.0.333'. [ 189.348058][ T6941] 9p: Bad value for 'rfdno' [ 189.911127][ T6946] loop2: detected capacity change from 0 to 7 [ 189.930372][ T6946] Dev loop2: unable to read RDB block 7 [ 189.941595][ T6946] loop2: unable to read partition table [ 189.951503][ T6946] loop2: partition table beyond EOD, truncated [ 189.958350][ T6950] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(10) [ 189.965024][ T6950] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 189.979682][ T6946] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 190.007155][ T6950] vhci_hcd vhci_hcd.0: Device attached [ 190.025012][ T6950] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(12) [ 190.031614][ T6950] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 190.066309][ T6950] vhci_hcd vhci_hcd.0: Device attached [ 190.083550][ T6950] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(14) [ 190.090143][ T6950] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 190.136809][ T6950] vhci_hcd vhci_hcd.0: Device attached [ 190.208851][ T6950] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(16) [ 190.215463][ T6950] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 190.255639][ T6968] netlink: 112 bytes leftover after parsing attributes in process `syz.2.349'. [ 190.273703][ T6950] vhci_hcd vhci_hcd.0: Device attached [ 190.304959][ T6969] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(19) [ 190.311561][ T6969] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 190.345451][ T6969] vhci_hcd vhci_hcd.0: Device attached [ 190.365080][ T6950] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(18) [ 190.371675][ T6950] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 190.484300][ T6950] vhci_hcd vhci_hcd.0: Device attached [ 190.801865][ T6969] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 190.979634][ T6976] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 191.046039][ T6950] vhci_hcd vhci_hcd.0: pdev(5) rhport(7) sockfd(28) [ 191.052679][ T6950] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 191.073293][ T9] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 191.115392][ T6950] vhci_hcd vhci_hcd.0: Device attached [ 191.148287][ T6969] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 191.206101][ T6951] vhci_hcd: connection reset by peer [ 191.206582][ T6958] vhci_hcd: connection closed [ 191.211505][ T6965] vhci_hcd: connection closed [ 191.216332][ T6979] vhci_hcd: connection closed [ 191.221708][ T6970] vhci_hcd: connection closed [ 191.222490][ T6955] vhci_hcd: connection closed [ 191.227309][ T6973] vhci_hcd: connection closed [ 191.254897][ T3735] vhci_hcd vhci_hcd.5: stop threads [ 191.279985][ T3735] vhci_hcd vhci_hcd.5: release socket [ 191.296819][ T3735] vhci_hcd vhci_hcd.5: disconnect device [ 192.904180][ T3735] vhci_hcd vhci_hcd.5: stop threads [ 192.968692][ T6994] netlink: 4 bytes leftover after parsing attributes in process `syz.4.353'. [ 192.983915][ T3735] vhci_hcd vhci_hcd.5: release socket [ 192.999655][ T3735] vhci_hcd vhci_hcd.5: disconnect device [ 193.012621][ T3735] vhci_hcd vhci_hcd.5: stop threads [ 193.024061][ T3735] vhci_hcd vhci_hcd.5: release socket [ 193.036013][ T5839] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 193.074050][ T3735] vhci_hcd vhci_hcd.5: disconnect device [ 193.090154][ T3735] vhci_hcd vhci_hcd.5: stop threads [ 193.104046][ T3735] vhci_hcd vhci_hcd.5: release socket [ 193.319463][ T3735] vhci_hcd vhci_hcd.5: disconnect device [ 193.326758][ T3735] vhci_hcd vhci_hcd.5: stop threads [ 193.331968][ T3735] vhci_hcd vhci_hcd.5: release socket [ 193.337796][ T3735] vhci_hcd vhci_hcd.5: disconnect device [ 193.343649][ T3735] vhci_hcd vhci_hcd.5: stop threads [ 193.349467][ T3735] vhci_hcd vhci_hcd.5: release socket [ 193.354902][ T3735] vhci_hcd vhci_hcd.5: disconnect device [ 193.361005][ T3735] vhci_hcd vhci_hcd.5: stop threads [ 193.366705][ T3735] vhci_hcd vhci_hcd.5: release socket [ 193.373546][ T3735] vhci_hcd vhci_hcd.5: disconnect device [ 193.398348][ T5839] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 193.437422][ T5839] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.475297][ T5839] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.501233][ T5839] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 193.547239][ T5839] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 193.575220][ T5839] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 193.594271][ T5839] usb 2-1: Manufacturer: syz [ 193.603626][ T31] audit: type=1326 audit(1766722541.684:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7008 comm="syz.3.361" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd25958f749 code=0x0 [ 193.642615][ T5839] usb 2-1: config 0 descriptor?? [ 193.826171][ T5913] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 193.995978][ T5913] usb 5-1: Using ep0 maxpacket: 32 [ 194.012481][ T5913] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.077899][ T5839] appleir 0003:05AC:8243.0004: unknown main item tag 0x0 [ 194.084963][ T5913] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.116677][ T5839] appleir 0003:05AC:8243.0004: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 194.164818][ T5913] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 194.185357][ T5913] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 194.205539][ T5913] usb 5-1: Product: syz [ 194.210148][ T5913] usb 5-1: Manufacturer: syz [ 194.225407][ T5913] hub 5-1:4.0: USB hub found [ 194.356435][ T5839] usb 2-1: USB disconnect, device number 7 [ 194.428893][ T5913] hub 5-1:4.0: 1 port detected [ 195.229603][ T5913] hub 5-1:4.0: set hub depth failed [ 195.289791][ T5913] usb 5-1: USB disconnect, device number 5 [ 195.300979][ T7031] netlink: 56 bytes leftover after parsing attributes in process `syz.2.356'. [ 195.305165][ T7028] netlink: 4 bytes leftover after parsing attributes in process `syz.0.368'. [ 195.316115][ T7030] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 195.325700][ T7030] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 195.349447][ T7034] netlink: 4 bytes leftover after parsing attributes in process `syz.1.371'. [ 195.358609][ T7031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.356'. [ 195.374675][ T7030] vhci_hcd vhci_hcd.0: Device attached [ 195.398734][ T7037] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(13) [ 195.405333][ T7037] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 195.414258][ T7037] vhci_hcd vhci_hcd.0: Device attached [ 195.432218][ T7030] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(12) [ 195.438812][ T7030] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 195.453192][ T7030] vhci_hcd vhci_hcd.0: Device attached [ 195.476010][ T7030] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(16) [ 195.482618][ T7030] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 195.498500][ T7030] vhci_hcd vhci_hcd.0: Device attached [ 195.498612][ T7028] bridge_slave_1: left allmulticast mode [ 195.512419][ T7030] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(18) [ 195.516034][ T7028] bridge_slave_1: left promiscuous mode [ 195.519007][ T7030] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 195.519355][ T7030] vhci_hcd vhci_hcd.0: Device attached [ 195.544352][ T7028] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.561723][ T7030] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(20) [ 195.568326][ T7030] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 195.583720][ T7028] bridge_slave_0: left allmulticast mode [ 195.593844][ T7030] vhci_hcd vhci_hcd.0: Device attached [ 195.600886][ T7037] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 195.616000][ T7028] bridge_slave_0: left promiscuous mode [ 195.621637][ T6127] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 195.636180][ T7028] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.656258][ T5839] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 197.288787][ T7030] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 197.297541][ T9] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 197.312244][ T7061] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 197.339576][ T7037] vhci_hcd vhci_hcd.0: pdev(3) rhport(7) sockfd(27) [ 197.346174][ T7037] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 197.386981][ T7037] vhci_hcd vhci_hcd.0: Device attached [ 197.398426][ T7049] vhci_hcd: connection closed [ 197.399318][ T7047] vhci_hcd: connection closed [ 197.399662][ T7041] vhci_hcd: connection closed [ 197.404009][ T57] vhci_hcd vhci_hcd.3: stop threads [ 197.404040][ T57] vhci_hcd vhci_hcd.3: release socket [ 197.416078][ T7038] vhci_hcd: connection closed [ 197.424562][ T7044] vhci_hcd: connection closed [ 197.427593][ T7032] vhci_hcd: connection reset by peer [ 197.436265][ T5839] usb 6-1: config 0 has an invalid interface number: 239 but max is 0 [ 197.447972][ T7065] netlink: 'syz.4.376': attribute type 4 has an invalid length. [ 197.463017][ T7059] vhci_hcd: connection closed [ 197.463699][ T5839] usb 6-1: config 0 has no interface number 0 [ 197.471551][ T57] vhci_hcd vhci_hcd.3: disconnect device [ 197.486421][ T5839] usb 6-1: config 0 interface 239 altsetting 0 endpoint 0x1 has invalid maxpacket 991, setting to 64 [ 197.506317][ T5839] usb 6-1: config 0 interface 239 altsetting 0 endpoint 0x82 has invalid maxpacket 255, setting to 64 [ 197.512466][ T57] vhci_hcd vhci_hcd.3: stop threads [ 197.530652][ T5839] usb 6-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 197.535790][ T57] vhci_hcd vhci_hcd.3: release socket [ 197.545844][ T5839] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.562082][ T5839] usb 6-1: Product: syz [ 197.573179][ T57] vhci_hcd vhci_hcd.3: disconnect device [ 197.574039][ T5839] usb 6-1: Manufacturer: syz [ 197.587127][ T57] vhci_hcd vhci_hcd.3: stop threads [ 197.600323][ T57] vhci_hcd vhci_hcd.3: release socket [ 197.609062][ T5839] usb 6-1: SerialNumber: syz [ 197.613746][ T57] vhci_hcd vhci_hcd.3: disconnect device [ 197.628674][ T5839] usb 6-1: config 0 descriptor?? [ 197.631490][ T57] vhci_hcd vhci_hcd.3: stop threads [ 197.646725][ T57] vhci_hcd vhci_hcd.3: release socket [ 197.663519][ T57] vhci_hcd vhci_hcd.3: disconnect device [ 197.683131][ T57] vhci_hcd vhci_hcd.3: stop threads [ 197.699969][ T57] vhci_hcd vhci_hcd.3: release socket [ 197.717838][ T57] vhci_hcd vhci_hcd.3: disconnect device [ 197.739332][ T57] vhci_hcd vhci_hcd.3: stop threads [ 197.748575][ T57] vhci_hcd vhci_hcd.3: release socket [ 197.765284][ T57] vhci_hcd vhci_hcd.3: disconnect device [ 197.780496][ T57] vhci_hcd vhci_hcd.3: stop threads [ 197.787510][ T57] vhci_hcd vhci_hcd.3: release socket [ 197.793055][ T57] vhci_hcd vhci_hcd.3: disconnect device [ 198.130214][ T5839] asix 6-1:0.239 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 198.175499][ T5839] asix 6-1:0.239: probe with driver asix failed with error -71 [ 200.226903][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.233853][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.266959][ T5839] usb 6-1: USB disconnect, device number 5 [ 200.443265][ T31] audit: type=1326 audit(1766722548.524:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7079 comm="syz.2.382" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa28558f749 code=0x0 [ 201.471304][ T5942] usb usb44-port1: attempt power cycle [ 201.477853][ T6127] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 201.540305][ T5839] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 201.808471][ T5839] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 201.843539][ T5839] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.880634][ T5839] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.288998][ T5942] usb usb44-port1: unable to enumerate USB device [ 206.116247][ T5839] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 206.166543][ T5839] usb 6-1: string descriptor 0 read error: -71 [ 206.215957][ T5839] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 206.225013][ T5839] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 206.281709][ T7122] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(10) [ 206.288314][ T7122] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 206.360055][ T7122] vhci_hcd vhci_hcd.0: Device attached [ 206.396924][ T7127] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(13) [ 206.403529][ T7127] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 206.437721][ T5839] usb 6-1: config 0 descriptor?? [ 206.457764][ T5839] usb 6-1: can't set config #0, error -71 [ 206.501017][ T5839] usb 6-1: USB disconnect, device number 6 [ 206.516510][ T7127] vhci_hcd vhci_hcd.0: Device attached [ 206.542546][ T7122] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(12) [ 206.549141][ T7122] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 206.593396][ T30] usb usb40-port1: attempt power cycle [ 206.625932][ T5913] usb 43-1: new low-speed USB device number 3 using vhci_hcd [ 206.679306][ T7122] vhci_hcd vhci_hcd.0: Device attached [ 207.042606][ T7127] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(15) [ 207.049232][ T7127] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 207.215624][ T30] usb usb40-port1: unable to enumerate USB device [ 207.224605][ T7127] vhci_hcd vhci_hcd.0: Device attached [ 207.255214][ T7122] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(19) [ 207.261821][ T7122] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 207.356251][ T7122] vhci_hcd vhci_hcd.0: Device attached [ 207.366962][ T7146] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 207.375284][ T7141] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(22) [ 207.381881][ T7141] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 207.428078][ T7127] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 207.430109][ T31] audit: type=1326 audit(1766722555.514:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7148 comm="syz.1.403" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f994798f749 code=0x0 [ 207.457564][ T7141] vhci_hcd vhci_hcd.0: Device attached [ 207.498873][ T7122] vhci_hcd vhci_hcd.0: pdev(5) rhport(7) sockfd(21) [ 207.505468][ T7122] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 207.551454][ T7127] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 207.597426][ T7122] vhci_hcd vhci_hcd.0: Device attached [ 207.622322][ T7150] vhci_hcd: connection closed [ 207.622633][ T1086] vhci_hcd vhci_hcd.5: stop threads [ 207.623317][ T7142] vhci_hcd: connection closed [ 207.627922][ T7140] vhci_hcd: connection closed [ 207.643974][ T7138] vhci_hcd: connection closed [ 207.649630][ T7132] vhci_hcd: connection closed [ 207.654504][ T7129] vhci_hcd: connection closed [ 207.660362][ T7123] vhci_hcd: connection reset by peer [ 207.665989][ T1086] vhci_hcd vhci_hcd.5: release socket [ 207.686326][ T1086] vhci_hcd vhci_hcd.5: disconnect device [ 207.705910][ T1086] vhci_hcd vhci_hcd.5: stop threads [ 207.712451][ T1086] vhci_hcd vhci_hcd.5: release socket [ 207.726651][ T1086] vhci_hcd vhci_hcd.5: disconnect device [ 207.736005][ T1086] vhci_hcd vhci_hcd.5: stop threads [ 207.744377][ T1086] vhci_hcd vhci_hcd.5: release socket [ 207.766185][ T1086] vhci_hcd vhci_hcd.5: disconnect device [ 207.774639][ T1086] vhci_hcd vhci_hcd.5: stop threads [ 207.780430][ T7156] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 207.786936][ T7156] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 207.806008][ T1086] vhci_hcd vhci_hcd.5: release socket [ 207.806099][ T7156] vhci_hcd vhci_hcd.0: Device attached [ 207.814390][ T1086] vhci_hcd vhci_hcd.5: disconnect device [ 207.834704][ T1086] vhci_hcd vhci_hcd.5: stop threads [ 207.841623][ T1086] vhci_hcd vhci_hcd.5: release socket [ 207.848372][ T7159] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(12) [ 207.854964][ T7159] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 207.872771][ T1086] vhci_hcd vhci_hcd.5: disconnect device [ 207.878706][ T1086] vhci_hcd vhci_hcd.5: stop threads [ 207.894292][ T7159] vhci_hcd vhci_hcd.0: Device attached [ 207.899880][ T1086] vhci_hcd vhci_hcd.5: release socket [ 207.907845][ T1086] vhci_hcd vhci_hcd.5: disconnect device [ 207.923135][ T1086] vhci_hcd vhci_hcd.5: stop threads [ 207.929943][ T7156] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(11) [ 207.936539][ T7156] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 207.954472][ T1086] vhci_hcd vhci_hcd.5: release socket [ 207.962981][ T1086] vhci_hcd vhci_hcd.5: disconnect device [ 207.969632][ T7156] vhci_hcd vhci_hcd.0: Device attached [ 207.993527][ T7159] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(14) [ 208.000124][ T7159] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 208.047100][ T7159] vhci_hcd vhci_hcd.0: Device attached [ 208.107410][ T7159] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(20) [ 208.114022][ T7159] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 208.175209][ T7156] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(16) [ 208.181811][ T7156] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 208.256365][ T9] usb 39-1: new low-speed USB device number 3 using vhci_hcd [ 208.266319][ T7171] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 208.315852][ T7156] vhci_hcd vhci_hcd.0: Device attached [ 208.342788][ T7159] vhci_hcd vhci_hcd.0: Device attached [ 208.353949][ T7171] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 208.441857][ T7174] vhci_hcd vhci_hcd.0: pdev(3) rhport(7) sockfd(19) [ 208.448489][ T7174] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 208.488124][ T7174] vhci_hcd vhci_hcd.0: Device attached [ 208.504293][ T7156] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(30) [ 208.510897][ T7156] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 208.548687][ T7156] vhci_hcd vhci_hcd.0: Device attached [ 208.558850][ T7159] vhci_hcd vhci_hcd.0: port 0 already used [ 211.977690][ T5913] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 212.003578][ T7175] vhci_hcd: connection closed [ 212.003682][ T7168] vhci_hcd: connection closed [ 212.009154][ T7167] vhci_hcd: connection closed [ 212.010600][ T7160] vhci_hcd: connection closed [ 212.015661][ T7165] vhci_hcd: connection closed [ 212.025254][ T3554] vhci_hcd vhci_hcd.3: stop threads [ 212.030943][ T7163] vhci_hcd: connection closed [ 212.047098][ T7157] vhci_hcd: connection reset by peer [ 212.067141][ T3554] vhci_hcd vhci_hcd.3: release socket [ 212.086225][ T3554] vhci_hcd vhci_hcd.3: disconnect device [ 212.112545][ T3554] vhci_hcd vhci_hcd.3: stop threads [ 212.130758][ T3554] vhci_hcd vhci_hcd.3: release socket [ 212.159406][ T3554] vhci_hcd vhci_hcd.3: disconnect device [ 213.662653][ T7158] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 213.670220][ T5854] Bluetooth: hci1: command 0x0406 tx timeout [ 213.676494][ T5147] Bluetooth: hci0: command 0x0406 tx timeout [ 213.682508][ T5147] Bluetooth: hci4: command 0x0406 tx timeout [ 213.697707][ T52] Bluetooth: hci5: command 0x0406 tx timeout [ 213.707919][ T5844] Bluetooth: hci3: command 0x0406 tx timeout [ 213.713013][ T3554] vhci_hcd vhci_hcd.3: stop threads [ 213.713926][ T5853] Bluetooth: hci2: command 0x0406 tx timeout [ 213.721747][ T3554] vhci_hcd vhci_hcd.3: release socket [ 213.731183][ T3554] vhci_hcd vhci_hcd.3: disconnect device [ 213.746197][ T3554] vhci_hcd vhci_hcd.3: stop threads [ 213.752761][ T3554] vhci_hcd vhci_hcd.3: release socket [ 213.760313][ T3554] vhci_hcd vhci_hcd.3: disconnect device [ 213.776090][ T3554] vhci_hcd vhci_hcd.3: stop threads [ 213.782802][ T3554] vhci_hcd vhci_hcd.3: release socket [ 213.789260][ T3554] vhci_hcd vhci_hcd.3: disconnect device [ 213.795134][ T3554] vhci_hcd vhci_hcd.3: stop threads [ 213.801319][ T3554] vhci_hcd vhci_hcd.3: release socket [ 213.807076][ T3554] vhci_hcd vhci_hcd.3: disconnect device [ 213.812743][ T3554] vhci_hcd vhci_hcd.3: stop threads [ 213.821509][ T3554] vhci_hcd vhci_hcd.3: release socket [ 213.828261][ T3554] vhci_hcd vhci_hcd.3: disconnect device [ 213.930764][ T9] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 213.959627][ T7179] vhci_hcd: connection closed [ 213.959939][ T6154] vhci_hcd vhci_hcd.3: stop threads [ 214.015924][ T6154] vhci_hcd vhci_hcd.3: release socket [ 214.043919][ T6154] vhci_hcd vhci_hcd.3: disconnect device [ 214.727371][ T6170] usb usb44-port1: attempt power cycle [ 216.720041][ T6170] usb usb44-port1: unable to enumerate USB device [ 216.727036][ T6903] usb usb40-port1: attempt power cycle [ 217.172928][ T7228] netlink: 4 bytes leftover after parsing attributes in process `syz.3.423'. [ 217.317957][ T6903] usb usb40-port1: unable to enumerate USB device [ 217.466424][ T31] audit: type=1326 audit(1766722565.544:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7234 comm="syz.5.425" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f275718f749 code=0x0 [ 217.475409][ T7237] netlink: 8 bytes leftover after parsing attributes in process `syz.2.409'. [ 217.610185][ T7239] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 217.616733][ T7239] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 217.624621][ T7239] vhci_hcd vhci_hcd.0: Device attached [ 217.916053][ T7062] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 217.933368][ T6903] usb 43-1: new high-speed USB device number 4 using vhci_hcd [ 218.462623][ T7240] vhci_hcd: connection reset by peer [ 218.576262][ T7062] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 218.608899][ T12] vhci_hcd vhci_hcd.5: stop threads [ 218.667155][ T12] vhci_hcd vhci_hcd.5: release socket [ 218.724215][ T7062] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.766097][ T12] vhci_hcd vhci_hcd.5: disconnect device [ 219.076222][ T7062] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.086628][ T7062] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 219.100869][ T7062] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 219.109960][ T7062] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 219.118136][ T7062] usb 2-1: Manufacturer: syz [ 219.125963][ T7062] usb 2-1: config 0 descriptor?? [ 219.158727][ T7254] netlink: 112 bytes leftover after parsing attributes in process `syz.3.429'. [ 219.403761][ T7255] netlink: 64 bytes leftover after parsing attributes in process `syz.4.414'. [ 220.042969][ T7062] appleir 0003:05AC:8243.0005: unknown main item tag 0x0 [ 220.070462][ T7062] appleir 0003:05AC:8243.0005: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 221.877982][ T7269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.936643][ T7269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.074983][ T6464] usb 2-1: USB disconnect, device number 8 [ 223.278224][ T6903] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 226.085210][ T7305] fuse: Bad value for 'fd' [ 227.036067][ T7220] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 227.318178][ T7220] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 227.359472][ T7220] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.395918][ T7220] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.426384][ T7220] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 227.475381][ T7220] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 227.510071][ T7220] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 227.537738][ T7220] usb 4-1: Manufacturer: syz [ 227.567016][ T7220] usb 4-1: config 0 descriptor?? [ 228.342008][ T7312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.546380][ T7312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.618458][ T7220] appleir 0003:05AC:8243.0006: unknown main item tag 0x0 [ 228.633229][ T7220] appleir 0003:05AC:8243.0006: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 228.646986][ T7220] usb 4-1: USB disconnect, device number 7 [ 228.806104][ T7325] netlink: 112 bytes leftover after parsing attributes in process `syz.1.442'. [ 229.073610][ T7334] capability: warning: `syz.2.456' uses deprecated v2 capabilities in a way that may be insecure [ 229.966305][ T7333] fuse: Bad value for 'fd' [ 230.545100][ T7344] fuse: Bad value for 'fd' [ 230.886561][ T7348] netlink: 'syz.3.461': attribute type 4 has an invalid length. [ 231.815966][ T7062] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 231.980767][ T7062] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 232.005920][ T7062] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.057249][ T7062] usb 2-1: config 0 descriptor?? [ 232.083868][ T7062] gspca_main: spca508-2.14.0 probing 8086:0110 [ 232.268934][ T7062] gspca_spca508: reg_read err -32 [ 232.289600][ T7062] gspca_spca508: reg_read err -32 [ 232.512451][ T7062] gspca_spca508: reg_read err -71 [ 232.520600][ T7062] gspca_spca508: reg_read err -71 [ 232.543378][ T7062] gspca_spca508: reg write: error -71 [ 232.557744][ T7062] spca508 2-1:0.0: probe with driver spca508 failed with error -71 [ 232.581563][ T7062] usb 2-1: USB disconnect, device number 9 [ 232.811611][ T7378] fuse: Bad value for 'fd' [ 232.876371][ T5914] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 233.067109][ T5914] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 233.084792][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.116550][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.138382][ T5914] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 233.170898][ T5914] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 233.196469][ T5914] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 233.207124][ T5914] usb 3-1: Manufacturer: syz [ 233.226811][ T5914] usb 3-1: config 0 descriptor?? [ 233.511296][ T7394] loop1: detected capacity change from 0 to 32768 [ 233.541763][ T7394] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 233.597401][ T7394] XFS (loop1): Ending clean mount [ 233.607755][ T7394] XFS (loop1): Quotacheck needed: Please wait. [ 233.663481][ T7394] XFS (loop1): Quotacheck: Done. [ 233.761603][ T5835] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 233.770930][ T5914] appleir 0003:05AC:8243.0007: unknown main item tag 0x0 [ 233.828936][ T5914] appleir 0003:05AC:8243.0007: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 233.909577][ T7407] overlayfs: failed to clone upperpath [ 234.028188][ T7376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.174611][ T7376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.218572][ T6464] usb 3-1: USB disconnect, device number 4 [ 235.037855][ T7419] fuse: Bad value for 'fd' [ 241.342864][ T7464] fuse: Bad value for 'fd' [ 241.407500][ T5845] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 241.418235][ T5845] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 241.425740][ T5845] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 241.434976][ T5845] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 241.442828][ T5845] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 243.509035][ T5845] Bluetooth: hci6: command tx timeout [ 245.041593][ T7466] chnl_net:caif_netlink_parms(): no params data found [ 245.583384][ T5845] Bluetooth: hci6: command tx timeout [ 245.600387][ T4182] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.765940][ T6127] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 245.807802][ T4182] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.951267][ T6127] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 246.006362][ T6127] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.019500][ T4182] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.047171][ T6127] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.066440][ T6127] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 246.096443][ T6127] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 246.119149][ T6127] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 246.132503][ T6127] usb 5-1: Manufacturer: syz [ 246.148977][ T6127] usb 5-1: config 0 descriptor?? [ 246.215471][ T4182] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.277175][ T7466] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.294977][ T7466] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.337343][ T7466] bridge_slave_0: entered allmulticast mode [ 246.386306][ T7466] bridge_slave_0: entered promiscuous mode [ 246.433383][ T7466] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.567270][ T7466] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.663875][ T7466] bridge_slave_1: entered allmulticast mode [ 246.792745][ T6127] appleir 0003:05AC:8243.0008: unknown main item tag 0x0 [ 246.890515][ T7466] bridge_slave_1: entered promiscuous mode [ 246.961066][ T7495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.078632][ T7495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.192259][ T6127] appleir 0003:05AC:8243.0008: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 247.206140][ T6127] usb 5-1: USB disconnect, device number 6 [ 248.528226][ T5845] Bluetooth: hci6: command tx timeout [ 248.697987][ T7466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.900822][ T7466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.172202][ T5845] Bluetooth: hci6: command tx timeout [ 251.374118][ T7466] team0: Port device team_slave_0 added [ 251.465669][ T7466] team0: Port device team_slave_1 added [ 251.744287][ T7466] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.793613][ T7466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 251.870755][ T7466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.896770][ T4182] bridge_slave_1: left allmulticast mode [ 251.916025][ T4182] bridge_slave_1: left promiscuous mode [ 251.923681][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.037071][ T4182] bridge_slave_0: left allmulticast mode [ 252.042768][ T4182] bridge_slave_0: left promiscuous mode [ 252.074726][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.137321][ T7556] netlink: 8 bytes leftover after parsing attributes in process `syz.1.534'. [ 252.175937][ T7556] netlink: 8 bytes leftover after parsing attributes in process `syz.1.534'. [ 252.430571][ T5964] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 253.728106][ T5964] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 253.791929][ T5964] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 253.825945][ T5964] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.858627][ T5964] usb 5-1: config 0 descriptor?? [ 253.888755][ T5964] pwc: Askey VC010 type 2 USB webcam detected. [ 254.088874][ T4182] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.104974][ T4182] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 254.118962][ T4182] bond0 (unregistering): Released all slaves [ 254.142222][ T7466] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.150137][ T7466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 254.177651][ T7466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.195354][ T7567] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.284544][ T5964] pwc: recv_control_msg error -32 req 02 val 2b00 [ 254.299198][ T5964] pwc: recv_control_msg error -32 req 02 val 2700 [ 254.318533][ T5964] pwc: recv_control_msg error -32 req 02 val 2c00 [ 254.340070][ T5964] pwc: recv_control_msg error -32 req 04 val 1000 [ 254.432178][ T7466] hsr_slave_0: entered promiscuous mode [ 254.439783][ T7466] hsr_slave_1: entered promiscuous mode [ 254.448311][ T7466] debugfs: 'hsr0' already exists in 'hsr' [ 254.454141][ T7466] Cannot create hsr debugfs directory [ 254.552164][ T5964] pwc: recv_control_msg error -32 req 04 val 1400 [ 254.574016][ T5964] pwc: recv_control_msg error -32 req 02 val 2000 [ 254.603354][ T5964] pwc: recv_control_msg error -32 req 02 val 2100 [ 254.830985][ T7580] nft_compat: unsupported protocol 0 [ 254.849642][ T5964] pwc: recv_control_msg error -71 req 02 val 2500 [ 255.015738][ T5964] pwc: recv_control_msg error -71 req 02 val 2400 [ 255.246422][ T5964] pwc: recv_control_msg error -71 req 02 val 2600 [ 255.285408][ T5964] pwc: recv_control_msg error -71 req 02 val 2900 [ 255.322716][ T5964] pwc: recv_control_msg error -71 req 02 val 2800 [ 255.366622][ T5964] pwc: recv_control_msg error -71 req 04 val 1100 [ 255.427732][ T5964] pwc: recv_control_msg error -71 req 04 val 1200 [ 255.483012][ T5964] pwc: Registered as video103. [ 255.510082][ T5964] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input10 [ 255.574530][ T5964] usb 5-1: USB disconnect, device number 7 [ 258.366423][ T4182] hsr_slave_0: left promiscuous mode [ 258.418277][ T4182] hsr_slave_1: left promiscuous mode [ 258.424487][ T4182] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.468695][ T4182] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.502677][ T4182] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.536650][ T4182] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.818924][ T4182] veth1_macvtap: left promiscuous mode [ 258.824650][ T4182] veth0_macvtap: left promiscuous mode [ 258.882491][ T4182] veth1_vlan: left promiscuous mode [ 258.933268][ T4182] veth0_vlan: left promiscuous mode [ 260.311829][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.381869][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.565451][ T7635] netlink: 112 bytes leftover after parsing attributes in process `syz.2.561'. [ 261.076166][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 261.177465][ T4182] team0 (unregistering): Port device team_slave_1 removed [ 261.258495][ T9] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 261.282671][ T4182] team0 (unregistering): Port device team_slave_0 removed [ 261.292867][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.314441][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.339369][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 261.369888][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 261.382715][ T9] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 261.402317][ T9] usb 5-1: Manufacturer: syz [ 261.418653][ T9] usb 5-1: config 0 descriptor?? [ 263.512268][ T9] appleir 0003:05AC:8243.0009: unknown main item tag 0x0 [ 263.555530][ T9] appleir 0003:05AC:8243.0009: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 263.767132][ T7639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.796274][ T7639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.914723][ T7466] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 263.945668][ T7466] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 264.097901][ T7466] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 264.141841][ T7466] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 265.098452][ T7466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.140466][ T7220] usb 5-1: reset high-speed USB device number 8 using dummy_hcd [ 266.180103][ T7466] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.565060][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.572265][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.024771][ T1156] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.031958][ T1156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.046110][ T9] usb 5-1: USB disconnect, device number 8 [ 267.221786][ T7740] netlink: 112 bytes leftover after parsing attributes in process `syz.4.584'. [ 267.653161][ T7466] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.707098][ T7761] vlan0: entered promiscuous mode [ 267.727478][ T7761] team0: Port device vlan0 added [ 267.732545][ T7761] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 268.110505][ T7466] veth0_vlan: entered promiscuous mode [ 268.141768][ T7466] veth1_vlan: entered promiscuous mode [ 268.839783][ T7466] veth0_macvtap: entered promiscuous mode [ 268.892180][ T7466] veth1_macvtap: entered promiscuous mode [ 268.944590][ T7466] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.988555][ T7466] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.163279][ T4550] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.182754][ T7784] netlink: 112 bytes leftover after parsing attributes in process `syz.3.598'. [ 269.216418][ T4550] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.254804][ T4550] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.256340][ T31] audit: type=1800 audit(1766722617.334:27): pid=7787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.602" name="bus" dev="tmpfs" ino=561 res=0 errno=0 [ 269.275709][ T4550] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.324578][ T7791] loop4: detected capacity change from 0 to 512 [ 269.427094][ T7791] vfat: Unknown parameter 'sysßimmutable' [ 269.468590][ T7791] loop4: detected capacity change from 0 to 128 [ 269.475465][ T7791] vfat: Bad value for 'shortname' [ 269.484412][ T7025] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.515388][ T7025] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.601967][ T6118] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.628941][ T6118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.756031][ T6317] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 269.938524][ T6317] usb 2-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 269.957423][ T6317] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.991310][ T6317] usb 2-1: config 0 descriptor?? [ 270.160638][ T7791] loop4: detected capacity change from 0 to 32768 [ 270.250049][ T7791] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.600 (7791) [ 270.374620][ T7791] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 270.416565][ T7791] BTRFS info (device loop4): using blake2b (blake2b-256-lib) checksum algorithm [ 270.619774][ T6317] hackrf 2-1:0.0: Board ID: 00 [ 270.624611][ T6317] hackrf 2-1:0.0: Firmware version: [ 270.650043][ T6317] hackrf 2-1:0.0: Registered as swradio24 [ 270.655831][ T6317] videodev: could not get a free minor [ 270.661353][ T6317] hackrf 2-1:0.0: Failed to register as video device (-23) [ 270.687377][ T6317] hackrf 2-1:0.0: probe with driver hackrf failed with error -23 [ 270.942294][ T7791] BTRFS info (device loop4): enabling ssd optimizations [ 270.975920][ T7791] BTRFS info (device loop4): turning on async discard [ 271.015346][ T7791] BTRFS info (device loop4): enabling free space tree [ 271.022832][ T7791] BTRFS info (device loop4): use lzo compression, level 1 [ 271.091437][ T7836] netlink: 'syz.3.613': attribute type 62 has an invalid length. [ 271.133797][ T7837] lo speed is unknown, defaulting to 1000 [ 271.140410][ T7837] lo speed is unknown, defaulting to 1000 [ 271.162116][ T7837] lo speed is unknown, defaulting to 1000 [ 271.205315][ T7837] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 271.357994][ T7837] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 271.636436][ T7837] lo speed is unknown, defaulting to 1000 [ 271.658189][ T7837] lo speed is unknown, defaulting to 1000 [ 271.665761][ T7837] lo speed is unknown, defaulting to 1000 [ 271.673432][ T7837] lo speed is unknown, defaulting to 1000 [ 271.681051][ T7837] lo speed is unknown, defaulting to 1000 [ 271.688718][ T7837] lo speed is unknown, defaulting to 1000 [ 271.697723][ T7838] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 271.743739][ T7841] netlink: 112 bytes leftover after parsing attributes in process `syz.2.614'. [ 272.005381][ T5831] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 272.630029][ T7857] ======================================================= [ 272.630029][ T7857] WARNING: The mand mount option has been deprecated and [ 272.630029][ T7857] and is ignored by this kernel. Remove the mand [ 272.630029][ T7857] option from the mount to silence this warning. [ 272.630029][ T7857] ======================================================= [ 272.710008][ T7857] overlay: Unknown parameter '/' [ 273.342153][ T7858] overlayfs: failed to clone lowerpath [ 273.434183][ T7860] batadv_slave_1: entered promiscuous mode [ 273.464933][ T7859] batadv_slave_1: left promiscuous mode [ 273.477518][ T5839] usb 2-1: USB disconnect, device number 10 [ 274.783699][ T7883] fuse: Unknown parameter 'user_i00000000000000000000' [ 280.864457][ T7930] fuse: Unknown parameter 'user_i00000000000000000000' [ 286.037212][ T7974] netlink: 4 bytes leftover after parsing attributes in process `syz.4.660'. [ 286.142438][ T7977] fuse: Unknown parameter 'user_i00000000000000000000' [ 287.506424][ T31] audit: type=1326 audit(1766722635.304:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7981 comm="syz.3.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd25958f749 code=0x7ffc0000 [ 287.590026][ T31] audit: type=1326 audit(1766722635.304:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7981 comm="syz.3.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd25958f749 code=0x7ffc0000 [ 287.649048][ T7990] netlink: 'syz.6.667': attribute type 2 has an invalid length. [ 287.865524][ T31] audit: type=1326 audit(1766722635.304:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7981 comm="syz.3.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd25958f749 code=0x7ffc0000 [ 287.995943][ T31] audit: type=1326 audit(1766722635.404:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7981 comm="syz.3.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd25958f749 code=0x7ffc0000 [ 290.366634][ T7992] fuse: Bad value for 'fd' [ 291.113951][ T8010] netlink: 112 bytes leftover after parsing attributes in process `syz.6.676'. [ 293.966143][ T8050] mmap: syz.1.690 (8050) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 295.457726][ T8075] fuse: Bad value for 'fd' [ 295.705143][ T8083] netlink: 32 bytes leftover after parsing attributes in process `syz.6.701'. [ 296.569312][ T8086] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 296.594021][ T8086] batadv_slave_0: entered promiscuous mode [ 296.613727][ T31] audit: type=1326 audit(1766722644.694:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8090 comm="syz.2.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa28558f749 code=0x7ffc0000 [ 296.707830][ T31] audit: type=1326 audit(1766722644.724:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8090 comm="syz.2.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa28558f749 code=0x7ffc0000 [ 297.003120][ T31] audit: type=1326 audit(1766722644.824:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8090 comm="syz.2.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fa28558f749 code=0x7ffc0000 [ 298.009785][ T31] audit: type=1326 audit(1766722644.824:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8090 comm="syz.2.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa28558f749 code=0x7ffc0000 [ 298.032998][ T31] audit: type=1326 audit(1766722644.824:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8090 comm="syz.2.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa28558f749 code=0x7ffc0000 [ 298.438376][ T31] audit: type=1326 audit(1766722644.834:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8090 comm="syz.2.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fa28558f749 code=0x7ffc0000 [ 298.583307][ T31] audit: type=1326 audit(1766722644.834:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8090 comm="syz.2.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa28558f749 code=0x7ffc0000 [ 298.605595][ T31] audit: type=1326 audit(1766722644.834:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8090 comm="syz.2.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa28558f749 code=0x7ffc0000 [ 298.665679][ T8102] hsr0: entered promiscuous mode [ 298.675730][ T31] audit: type=1326 audit(1766722644.834:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8090 comm="syz.2.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa28558f749 code=0x7ffc0000 [ 298.718533][ T8102] macvtap1: entered promiscuous mode [ 298.772896][ T31] audit: type=1326 audit(1766722644.834:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8090 comm="syz.2.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa28558f749 code=0x7ffc0000 [ 299.644293][ T8114] bridge1: entered promiscuous mode [ 299.649755][ T8114] bridge1: entered allmulticast mode [ 302.969558][ T8156] netlink: 80 bytes leftover after parsing attributes in process `syz.3.728'. [ 302.995203][ T8156] netlink: 80 bytes leftover after parsing attributes in process `syz.3.728'. [ 303.276296][ T8162] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 304.688673][ T31] kauditd_printk_skb: 22 callbacks suppressed [ 304.688693][ T31] audit: type=1326 audit(1766722652.774:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8173 comm="syz.2.734" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa28558f749 code=0x0 [ 305.150329][ T8188] overlayfs: failed to clone lowerpath [ 305.556333][ T31] audit: type=1804 audit(1766722653.634:65): pid=8200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.741" name="file0" dev="tmpfs" ino=668 res=1 errno=0 [ 308.464710][ T5845] Bluetooth: hci1: unexpected event for opcode 0x200c [ 308.832502][ T8236] netlink: 4 bytes leftover after parsing attributes in process `syz.4.757'. [ 310.633605][ T5942] kernel read not supported for file inotify (pid: 5942 comm: kworker/1:8) [ 311.986593][ T8288] netlink: 4 bytes leftover after parsing attributes in process `syz.4.777'. [ 312.227521][ T8298] 9pnet_virtio: no channels available for device syz [ 313.451212][ T6127] libceph: connect (1)[c::]:6789 error -101 [ 313.477408][ T6127] libceph: mon0 (1)[c::]:6789 connect error [ 313.508468][ T8300] ceph: No mds server is up or the cluster is laggy [ 314.997249][ T8335] netlink: 4 bytes leftover after parsing attributes in process `syz.0.795'. [ 315.013817][ T8331] overlayfs: failed to clone lowerpath [ 315.327237][ T8347] netlink: 20 bytes leftover after parsing attributes in process `syz.2.799'. [ 318.863596][ T8391] netlink: 20 bytes leftover after parsing attributes in process `syz.4.816'. [ 321.461171][ T8418] netlink: 12 bytes leftover after parsing attributes in process `syz.2.828'. [ 321.650759][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 321.659864][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 321.846340][ T8430] netlink: 20 bytes leftover after parsing attributes in process `syz.3.832'. [ 323.972662][ T8454] fuse: Bad value for 'fd' [ 326.337219][ T8471] netlink: 56 bytes leftover after parsing attributes in process `syz.6.845'. [ 326.361223][ T8471] netlink: 8 bytes leftover after parsing attributes in process `syz.6.845'. [ 326.499133][ T8475] netlink: 20 bytes leftover after parsing attributes in process `syz.0.848'. [ 329.108239][ T8513] netlink: 56 bytes leftover after parsing attributes in process `syz.4.862'. [ 332.426149][ T8560] netlink: 56 bytes leftover after parsing attributes in process `syz.2.878'. [ 335.339486][ T8601] netlink: 56 bytes leftover after parsing attributes in process `syz.3.895'. [ 335.723525][ T8616] netlink: 112 bytes leftover after parsing attributes in process `syz.1.902'. [ 337.731574][ T8635] netlink: 44 bytes leftover after parsing attributes in process `syz.2.908'. [ 341.317096][ T8682] netlink: 80 bytes leftover after parsing attributes in process `syz.3.928'. [ 342.041619][ T8686] fuse: Bad value for 'fd' [ 342.751139][ T8694] fuse: Bad value for 'fd' [ 342.998126][ T8703] netlink: 'syz.3.932': attribute type 4 has an invalid length. [ 351.743107][ T8803] netlink: 4 bytes leftover after parsing attributes in process `syz.0.954'. [ 353.974745][ T8823] netlink: 24 bytes leftover after parsing attributes in process `syz.1.975'. [ 358.046599][ T8858] netlink: 80 bytes leftover after parsing attributes in process `syz.0.991'. [ 358.792638][ T8872] netlink: 12 bytes leftover after parsing attributes in process `syz.3.977'. [ 364.693288][ T5845] Bluetooth: hci6: command 0x0406 tx timeout [ 366.347010][ T24] IPVS: starting estimator thread 0... [ 366.558116][ T8938] IPVS: using max 24 ests per chain, 57600 per kthread [ 367.481475][ T8947] fuse: Unknown parameter 'fd0x0000000000000004' [ 368.182592][ T8958] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1011'. [ 369.134530][ T8974] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1028'. [ 372.056830][ T9013] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1046'. [ 372.077450][ T9013] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1046'. [ 372.589850][ T9019] IPv6: addrconf: prefix option has invalid lifetime [ 372.596705][ T9019] IPv6: addrconf: prefix option has invalid lifetime [ 374.023519][ T5848] Bluetooth: Frame is too long (len 12, expected len 4) [ 374.392975][ T9045] nft_compat: unsupported protocol 0 [ 374.756003][ T9046] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1060'. [ 374.893879][ T9046] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1060'. [ 375.302067][ T9057] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1064'. [ 375.329308][ T9057] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1064'. [ 376.149096][ T9084] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1074'. [ 376.161104][ T9084] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1074'. [ 376.204555][ T9088] overlayfs: failed to clone lowerpath [ 376.431523][ T9097] netlink: zone id is out of range [ 376.444703][ T9097] netlink: del zone limit has 8 unknown bytes [ 377.051334][ T9105] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1083'. [ 379.073981][ T9147] hsr0: left promiscuous mode [ 379.155061][ T13] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.173796][ T13] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.197601][ T13] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.306380][ T13] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 380.377079][ T9172] overlay: Unknown parameter 'smackfsroot' [ 383.096601][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.225463][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.672035][ T9208] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1125'. [ 385.373933][ T9223] overlayfs: failed to clone upperpath [ 385.466357][ T9227] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1134'. [ 490.845772][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 490.852754][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P9231/3:b..l [ 490.861100][ C0] rcu: (detected by 0, t=10502 jiffies, g=26217, q=166 ncpus=2) [ 490.868814][ C0] task:syz.6.1136 state:R running task stack:26176 pid:9231 tgid:9230 ppid:7466 task_flags:0x400040 flags:0x00080000 [ 490.883222][ C0] Call Trace: [ 490.886503][ C0] [ 490.889431][ C0] __schedule+0x149b/0x4fd0 [ 490.893970][ C0] ? __pfx___schedule+0x10/0x10 [ 490.898811][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 490.904464][ C0] preempt_schedule_irq+0x4d/0xa0 [ 490.909485][ C0] irqentry_exit+0x5d8/0x660 [ 490.914075][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 490.919712][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 490.925686][ C0] RIP: 0010:filemap_map_pages+0x193f/0x1fd0 [ 490.931574][ C0] Code: 03 42 80 3c 30 00 74 08 48 89 df e8 db c1 2c 00 48 8b 3b e8 13 d3 61 09 e8 4e 42 5f 09 89 c3 31 ff 89 c6 e8 93 a5 c6 ff 85 db <0f> 84 b3 00 00 00 e8 16 a8 ac ff 84 c0 0f 84 ad 00 00 00 e8 39 a1 [ 490.951178][ C0] RSP: 0018:ffffc900034875c0 EFLAGS: 00000202 [ 490.957248][ C0] RAX: ffffffff81fa542d RBX: 0000000000000001 RCX: 0000000000000002 [ 490.965212][ C0] RDX: ffff8880305e1e80 RSI: 0000000000000001 RDI: 0000000000000000 [ 490.973174][ C0] RBP: ffffc900034877b0 R08: ffff8880540db063 R09: 1ffff1100a81b60c [ 490.981140][ C0] R10: dffffc0000000000 R11: ffffed100a81b60d R12: 0000000000000000 [ 490.989106][ C0] R13: 0000000000000007 R14: dffffc0000000000 R15: 0000000000000003 [ 490.997076][ C0] ? filemap_map_pages+0x193d/0x1fd0 [ 491.002391][ C0] ? filemap_map_pages+0x160/0x1fd0 [ 491.007594][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 491.013060][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 491.018695][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 491.024163][ C0] ? do_pte_missing+0x11a9/0x3330 [ 491.029187][ C0] do_pte_missing+0x20b0/0x3330 [ 491.034049][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 491.039695][ C0] ? handle_mm_fault+0xdb/0x32b0 [ 491.044643][ C0] handle_mm_fault+0x1b26/0x32b0 [ 491.049583][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 491.055228][ C0] ? handle_mm_fault+0xdb/0x32b0 [ 491.060181][ C0] ? __pfx_handle_mm_fault+0x10/0x10 [ 491.065470][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 491.071097][ C0] ? follow_page_pte+0x7ef/0x13e0 [ 491.076138][ C0] ? __pfx_follow_page_pte+0x10/0x10 [ 491.081431][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 491.087068][ C0] __get_user_pages+0x1650/0x29f0 [ 491.092129][ C0] populate_vma_page_range+0x29f/0x3a0 [ 491.097594][ C0] ? __pfx_populate_vma_page_range+0x10/0x10 [ 491.103575][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 491.109201][ C0] ? down_read+0x274/0x2e0 [ 491.113612][ C0] ? __mm_populate+0x160/0x380 [ 491.118375][ C0] __mm_populate+0x24c/0x380 [ 491.122965][ C0] ? __pfx___mm_populate+0x10/0x10 [ 491.128078][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 491.133713][ C0] vm_mmap_pgoff+0x387/0x4d0 [ 491.138308][ C0] ? __se_sys_futex+0x36f/0x400 [ 491.143158][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 491.148267][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 491.153910][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 491.159543][ C0] ? rcu_is_watching+0x15/0xb0 [ 491.164310][ C0] ? ksys_mmap_pgoff+0xf4/0x760 [ 491.169172][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 491.174806][ C0] ? __x64_sys_mmap+0x7f/0x140 [ 491.179566][ C0] do_syscall_64+0xec/0xf80 [ 491.184122][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.190225][ C0] ? trace_irq_disable+0x37/0x100 [ 491.195265][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.201154][ C0] RIP: 0033:0x7fbe51f8f749 [ 491.205562][ C0] RSP: 002b:00007fbe52e2d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 491.213978][ C0] RAX: ffffffffffffffda RBX: 00007fbe521e5fa0 RCX: 00007fbe51f8f749 [ 491.221948][ C0] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 491.229912][ C0] RBP: 00007fbe52013f91 R08: ffffffffffffffff R09: 0000000000000000 [ 491.237878][ C0] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 491.245839][ C0] R13: 00007fbe521e6038 R14: 00007fbe521e5fa0 R15: 00007fff39dccc68 [ 491.253825][ C0] [ 491.256841][ C0] rcu: rcu_preempt kthread starved for 9903 jiffies! g26217 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 491.267940][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 491.277894][ C0] rcu: RCU grace-period kthread stack dump: [ 491.283766][ C0] task:rcu_preempt state:R running task stack:27824 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 491.297267][ C0] Call Trace: [ 491.300536][ C0] [ 491.303461][ C0] __schedule+0x149b/0x4fd0 [ 491.308000][ C0] ? __pfx___schedule+0x10/0x10 [ 491.312853][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 491.318489][ C0] ? schedule+0x91/0x360 [ 491.322729][ C0] schedule+0x165/0x360 [ 491.326878][ C0] schedule_timeout+0x12b/0x270 [ 491.331732][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 491.337110][ C0] ? __pfx_process_timeout+0x10/0x10 [ 491.342413][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 491.348044][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 491.353856][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 491.359484][ C0] ? prepare_to_swait_event+0x341/0x380 [ 491.365044][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 491.369899][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 491.375530][ C0] ? rcu_gp_init+0x11dc/0x1650 [ 491.380291][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 491.386442][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 491.391720][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 491.396935][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 491.402752][ C0] rcu_gp_kthread+0x99/0x390 [ 491.407340][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 491.412533][ C0] ? __kthread_parkme+0x7b/0x200 [ 491.417466][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 491.423094][ C0] ? __kthread_parkme+0x1a1/0x200 [ 491.428125][ C0] kthread+0x711/0x8a0 [ 491.432204][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 491.437396][ C0] ? __pfx_kthread+0x10/0x10 [ 491.441983][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 491.447614][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 491.452819][ C0] ? __pfx_kthread+0x10/0x10 [ 491.457418][ C0] ret_from_fork+0x510/0xa50 [ 491.462010][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 491.467114][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 491.472746][ C0] ? __switch_to+0xc9e/0x1480 [ 491.477430][ C0] ? __pfx_kthread+0x10/0x10 [ 491.482020][ C0] ret_from_fork_asm+0x1a/0x30 [ 491.486805][ C0] [ 491.489812][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 491.496127][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 491.506628][ C0] Tainted: [L]=SOFTLOCKUP [ 491.510940][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 491.520983][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 491.526703][ C0] Code: 3e b4 b6 f5 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 73 c1 0e 00 f3 0f 1e fa fb f4 13 b4 b6 f5 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 491.546303][ C0] RSP: 0018:ffffffff8dc07dc0 EFLAGS: 000002c2 [ 491.552372][ C0] RAX: 0000000000738e69 RBX: ffffffff819713be RCX: 0000000080000001 [ 491.560339][ C0] RDX: 0000000000000001 RSI: ffffffff8d792008 RDI: ffffffff8bc083e0 [ 491.568315][ C0] RBP: ffffffff8dc07eb0 R08: ffff8880b86336db R09: 1ffff110170c66db [ 491.576279][ C0] R10: dffffc0000000000 R11: ffffed10170c66dc R12: ffffffff8f822170 [ 491.584241][ C0] R13: 1ffffffff1b92a68 R14: 0000000000000000 R15: 0000000000000000 [ 491.592206][ C0] FS: 0000000000000000(0000) GS:ffff888125e1f000(0000) knlGS:0000000000000000 [ 491.601127][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 491.607704][ C0] CR2: 00007f42c965b02d CR3: 00000000793fd000 CR4: 0000000000350ef0 [ 491.615687][ C0] Call Trace: [ 491.618957][ C0] [ 491.621876][ C0] default_idle+0x13/0x20 [ 491.626206][ C0] default_idle_call+0x73/0xb0 [ 491.630975][ C0] do_idle+0x1be/0x4d0 [ 491.635037][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 491.640665][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 491.645866][ C0] ? __pfx_do_idle+0x10/0x10 [ 491.650464][ C0] cpu_startup_entry+0x44/0x60 [ 491.655225][ C0] rest_init+0x2de/0x300 [ 491.659469][ C0] start_kernel+0x381/0x3d0 [ 491.664149][ C0] x86_64_start_reservations+0x24/0x30 [ 491.669612][ C0] x86_64_start_kernel+0x143/0x1c0 [ 491.674725][ C0] common_startup_64+0x13e/0x147 [ 491.679682][ C0] [ 492.186883][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 492.193225][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 SYZFAIL: failed to send rpc fd=3 want=240 sent=0 n=-1 (errno 32: Broken pipe) [ 495.279646][ T4382] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.430013][ T4382] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.577985][ T4382] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.705460][ T4382] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.924919][ T4382] bridge_slave_1: left allmulticast mode [ 495.932717][ T4382] bridge_slave_1: left promiscuous mode [ 495.950950][ T4382] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.967567][ T4382] bridge_slave_0: left allmulticast mode [ 495.973276][ T4382] bridge_slave_0: left promiscuous mode [ 495.979462][ T4382] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.276673][ T4382] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 496.290538][ T4382] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 496.300591][ T4382] bond0 (unregistering): Released all slaves [ 496.586592][ T4382] hsr_slave_0: left promiscuous mode [ 496.592521][ T4382] hsr_slave_1: left promiscuous mode [ 496.599491][ T4382] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 496.606985][ T4382] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 496.614742][ T4382] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 496.622370][ T4382] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 496.643745][ T4382] veth1_macvtap: left promiscuous mode [ 496.649339][ T4382] veth0_macvtap: left promiscuous mode [ 496.654929][ T4382] veth1_vlan: left promiscuous mode [ 496.660357][ T4382] veth0_vlan: left promiscuous mode [ 496.966892][ T4382] team0 (unregistering): Port device team_slave_1 removed [ 497.010392][ T4382] team0 (unregistering): Port device team_slave_0 removed [ 497.641425][ T4382] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.719414][ T4382] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.799816][ T4382] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.863701][ T4382] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.974022][ T4382] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.049747][ T4382] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.152072][ T4382] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.231235][ T4382] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.332918][ T4382] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.427327][ T4382] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.501411][ T4382] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.542864][ T4382] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.677318][ T4382] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 498.687991][ T4382] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.748546][ T4382] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 498.760216][ T4382] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.844168][ T4382] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 498.857193][ T4382] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.922836][ T4382] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 498.935237][ T4382] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.059438][ T4382] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.134335][ T4382] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.214716][ T4382] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.272146][ T4382] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.388795][ T4382] bridge_slave_1: left allmulticast mode [ 499.394459][ T4382] bridge_slave_1: left promiscuous mode [ 499.400614][ T4382] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.410448][ T4382] bridge_slave_0: left allmulticast mode [ 499.416140][ T4382] bridge_slave_0: left promiscuous mode [ 499.421846][ T4382] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.432893][ T4382] bridge_slave_1: left allmulticast mode [ 499.438603][ T4382] bridge_slave_1: left promiscuous mode [ 499.444304][ T4382] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.458548][ T4382] bridge_slave_0: left allmulticast mode [ 499.464180][ T4382] bridge_slave_0: left promiscuous mode [ 499.470374][ T4382] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.481504][ T4382] bridge_slave_1: left allmulticast mode [ 499.487348][ T4382] bridge_slave_1: left promiscuous mode [ 499.493065][ T4382] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.502227][ T4382] bridge_slave_0: left allmulticast mode [ 499.507940][ T4382] bridge_slave_0: left promiscuous mode [ 499.513633][ T4382] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.526829][ T4382] bridge_slave_1: left allmulticast mode [ 499.532473][ T4382] bridge_slave_1: left promiscuous mode [ 499.538333][ T4382] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.550118][ T4382] bridge_slave_0: left allmulticast mode [ 499.555884][ T4382] bridge_slave_0: left promiscuous mode [ 499.561575][ T4382] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.949356][ T4382] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 499.962988][ T4382] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 499.973331][ T4382] bond0 (unregistering): Released all slaves [ 500.219549][ T4382] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 500.230483][ T4382] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 500.240603][ T4382] bond0 (unregistering): Released all slaves [ 500.460864][ T4382] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 500.474898][ T4382] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 500.485201][ T4382] bond0 (unregistering): Released all slaves [ 500.749651][ T4382] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 500.760353][ T4382] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 500.771091][ T4382] bond0 (unregistering): Released all slaves