last executing test programs: 1m53.883602954s ago: executing program 4 (id=1327): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) unshare(0xc040400) r1 = socket$rds(0x15, 0x5, 0x0) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, 0x0) userfaultfd(0x80001) r2 = syz_io_uring_setup(0x7934, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f00000000c0), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa91, &(0x7f00000002c0), &(0x7f0000000040)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x6e6a9ace1e35a607}) io_uring_enter(r2, 0xec4, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @loopback, 0x0, 0x0, 'wrr\x00', 0x1}, 0x2c) r6 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r6, &(0x7f0000001680)=[{&(0x7f0000000000)=@in={0x2, 0xfffc, @loopback}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)="9e", 0x1}], 0x1}], 0x1, 0xfc) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="2c4de3a573a892948553d21760b19aa5ef987e5196619a8b7d6876a920bdf5bf40ce38a988e179f63e23dce4c5d643bdf53883cf1f7f88032098402d9f9da1d43bff26a69404a71925cc9ea6f05cc499ae71ca2fecf37a012d719ab20e771ceca2eb76991f31c3bc2031fbd72ba58831"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000100), 0xfecc) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x33) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r7, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.events\x00', 0x275a, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001140), 0x0) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x3, &(0x7f0000000ec0)={0x2, 0x4e22, @empty}, 0x10) ioctl$UI_DEV_CREATE(r0, 0x5501) 1m52.582507187s ago: executing program 4 (id=1331): socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet_udp(0x2, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/108, 0x6c}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=""/99, 0x63}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001b00)=""/148, 0x94}}], 0x3, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000100)='.\x00', 0x0, 0x0) close(r0) fcntl$dupfd(r1, 0x0, r1) 1m44.596085632s ago: executing program 4 (id=1352): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 1m41.641617437s ago: executing program 4 (id=1359): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10.664278097s ago: executing program 0 (id=1365): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r1, 0x0) r2 = syz_io_uring_setup(0x76, 0x0, 0x0, &(0x7f0000000340)) io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001400)) writev(r0, &(0x7f0000000640)=[{&(0x7f00000006c0)="2e31b69c9bd4beb2ce56518bf0aea548722f054677edd0cb67e2afb987c3e16e3b65bfe50c4d55086a56832bebeb32802ecd8e61032995b891d24c782afea345ed2f0a87bc1bfc6101fa7d1d2c2e57f889dbb28fe7b7e2fc562acebfd86566be11c267f5c5c5e1707a44f2795400fb26cd4170d76c6807d8270435f365d737751f35771bb2d9db528e0facb25496eef50d", 0x91}, {&(0x7f0000000300)="daf97ac662b855a7fa822571ba8e6711005b919c759dd0144ff3d8db7da4622679f133c11e81e0467c22fdb38c9112", 0x2f}], 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffff86}) io_uring_enter(0xffffffffffffffff, 0x7a98, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 9.535697523s ago: executing program 0 (id=1368): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = syz_usb_connect(0x0, 0x4d, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000735aca105e042107c4900102030109023b00010000000009040000000e010000052406000105240300000d240f0100000000000000000006"], 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0003210000000203"], 0x0, 0x0, 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xc}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r1], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x48050) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x8, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 9.324779955s ago: executing program 2 (id=1369): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000001140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4048aecb, &(0x7f00000000c0)=ANY=[@ANYRES32=r2]) 9.012771261s ago: executing program 1 (id=1370): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x32, 0x4, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1}, {@remote, 0x8}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x659}, {@broadcast}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0x2}}, {@remote}, {@multicast2, 0x7}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0xdc, [@private=0xa010102, @rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 7.47241501s ago: executing program 2 (id=1372): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0x2acf, 0x11, 0x0, 0x27) socket$inet(0x2, 0x0, 0x0) r1 = dup(0xffffffffffffffff) write$UHID_INPUT(r1, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0x46, 0x407006}, 0x104) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='nv\x00', 0x14) syz_usb_connect(0x3, 0x0, 0x0, 0x0) 7.240375569s ago: executing program 4 (id=1363): socket$tipc(0x1e, 0x5, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0xc040480) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x0, 0x20000010, &(0x7f0000000dc0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xf, 0x4, 0x4, 0x7}, 0x48) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x1c, &(0x7f0000000000)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf980000000000005608000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000440)={'ip6tnl0\x00', 0x0, 0x2f, 0x97, 0x0, 0x69f3, 0x10, @local, @remote, 0x80, 0x7, 0x8}}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)=@generic={0x0, 0x0, 0x18}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1b, 0xf, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='GPL\x00', 0x200, 0x0, 0x0, 0x41000, 0x70, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0x9, 0x7fff}, 0x10, 0x0, r0, 0x0, &(0x7f0000000700), 0x0, 0x10, 0x5}, 0x90) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vcan0\x00'}}]}, 0x38}}, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x20, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0) 7.095546151s ago: executing program 1 (id=1373): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0x2acf, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0x46, 0x407006}, 0x104) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='nv\x00', 0x14) syz_usb_connect(0x3, 0x0, 0x0, 0x0) 6.650808058s ago: executing program 3 (id=1374): preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00005d4000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000040)="0f782a650f01d1b9800000c00f3235000800000f30c4e14d684c27ee0f16ddc4e1fc51d9660f0f8edf9ca2f897c4c25993bcb09b56295d66b82e000f00d0e500", 0x40}], 0x1, 0x0, 0x0, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0xf}, 0x8) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.445830823s ago: executing program 1 (id=1375): socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0xe3, 0x5, 0x1}, 0x48) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) unshare(0x20000400) ppoll(&(0x7f0000000000), 0x20000000000000a4, 0x0, 0x0, 0x0) 5.103213193s ago: executing program 0 (id=1376): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0xf1}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001e00)=@newtfilter={0xe4, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xb8, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'wg0\x00'}, @TCA_U32_ACT={0x90, 0x7, [@m_mpls={0x58, 0x6, 0x0, 0x0, {{0x9}, {0x24, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x2ebf9}, @TCA_MPLS_LABEL={0x8, 0x5, 0x4ec14}, @TCA_MPLS_PROTO={0x6, 0x4, 0x6000}, @TCA_MPLS_TTL={0x5, 0x7, 0x4}]}, {0xb, 0x6, "7748c815e3b338"}, {0xc, 0x7, {0x43315a3e86999a9, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_connmark={0x34, 0x11, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}, @TCA_U32_HASH={0x8, 0x2, 0x200}, @TCA_U32_DIVISOR={0x8, 0x4, 0xda}]}}]}, 0xe4}}, 0x0) 4.429308558s ago: executing program 3 (id=1377): getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000780)={0x0, 0x1, 0x1c, 0x1c, 0x1b, &(0x7f0000000380)="29fc7900a90cfd7ac04ce59ba6d3a1b315cd18342bd583caa8cb2950b69e58a0f0a5be1e2c350fa882aee2953d495c6a59923189b774a32a944c1b457dd4fc11e01d48a50e49e1449706ae6ea236f4c522dbdf4fd0bbc0b95f04613c7f77a4f6a66014e76e72239a0a0c708ede86471155deb6377b758ce36402928725040835dac13c62662dc0041a31253d997b2c77ce54b8c991bf02504ecbcc33e8ad77e81d33b3db2fbbbe89a8891bb829badf346837d0d6ce25c1fb059eeb8abd6ccb1ac085b2d1d80da4b36179e82692955e8f3db1f768189d3fdc1922175a481daf50b579a840a2708189aa9695d1cb384397b5092b693e6604734bb94975a85a3da026b6c847e9b7171236b89caf57f97045cf523b23253278eb4d66d885e3a7ed6cd424832451be741553c7dcc56ce4d5fe63deaf87adf052ce2b1ab5d733922d35e2b8b18dd39e710a1569a72ec18626ff262fba39147b5397d17aea9268bd4368ed55205d84c8efa9ebb2509f1eac0b4561202294c414f19e8c017919c35619ff9e5778fedde1b35612804efbc87b53d62e615892639f90f106f18b359f0cb405d77ae1bd7fd0df3af5392efcbd648470065c08483b40f0543bc4b0240a1b258a16efe489f90af16b2107e79fee7a56c8195f73efda237973d4569d1315a963be91a6da5bf2b9b34c1e526b882f95d76c71e0274e7efe8b59508ddc3880b8ec937f7ced44adab552351a34164e56cde8d8d7a1f8469999632c871a182a491c51de95dfd99b2bfe04ad64dc5780470f259a129691b4cb371b0a71ba0c3c9c1c9efb2325427734b4778611a6a2a89f4d675aacd94d8bc8d29c261149f3994eca850fca030644511f614e3b71691650a705836068a4c32089297751503073d764cfceb203f4fcad4bc744d6e97b76320c07291cfe02f73800b47a22ec6cbcfc58c34f3760766db44e327f8b45f2e6c94d2d7e1b6cab2783f8a3f3e5776ad74615a2ad11a4476ba5edafb60ab538faa512c7b69cd2660fe85ed556eb38f0ca3f7af318956c1da1d9a2894a5fa94378f412132134a706c1bf50a0118ea855335a77df59f25bc57093c8733e36c4606f360ec54cb5052bb6a6fa65ac23d2effd0b1869f13404cf7920e4cf8abb1973418032103cee1c61637f19cfa6ceda70e95b4c1a8d34a690c8bce3d1c463ced6cfb0c587ff9dd9c938d77be9232ab901384c795fc2b72147d8fd3a05f7afec3f633053278a238c45596befd437bbc3cfa385376447cba2adb0aa71de55f51da6feb1275b0db9aa7ed3f1ca3e88f0346ca499156a32b435db4cde48b21b14a5c8752f6c5b363adaf1ce22fdcb5a2e247c7ebaffdbf2c02144f7a68e975f18ff6945a80a7bc4bf3ae088bacfc66fddac516e6c350cad2e1cc0441b2db00d6bcaf5888f7cdde92e2e82579ad8c2e85313033434447f8"}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000540)=ANY=[@ANYBLOB="010000000000000001000080"]) 4.214222757s ago: executing program 0 (id=1378): r0 = epoll_create1(0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000100070000000900020073797a30000011000c000780050015000500000014000300686173683a6970b3272ae0742c697000050005000a000000050004"], 0x58}}, 0x0) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x4ffe6, 0x0) 4.136797697s ago: executing program 1 (id=1379): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000d50000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r2}, 0x11) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000002500e50100000000000000000700", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32], 0x38}}, 0x0) 3.618482662s ago: executing program 2 (id=1380): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab87100000e0a01020000000000000000030000063c0a0380100000800c00044000000000000000065402008044020b80100001800b0001007461726765740000440001800c0001007061796c6f61640034000280080003400000000308000240000000020800054000000004080006400000000108000340000000030800034000000097100001800a00010072616e6765000000140001800e000100696d6d656469617465000000100001800b0001006e756d67656e0000100001800b00010072656a6563740000a80101800a0001007261"], 0x23e80}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2000000000000320, &(0x7f0000000340)=ANY=[@ANYRESDEC=0x0], 0x0, 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000180)=@in6={0xa, 0x4e24, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xffffffff}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000380)="ead395f02ac8652dca", 0x9}], 0x1}}], 0x2, 0x1) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x0, 0xc0000) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={0x0, 0x0}) 3.006463827s ago: executing program 1 (id=1381): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket(0x28, 0x5, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r2, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r3 = accept4$unix(r2, 0x0, 0x0, 0x0) recvfrom$unix(r3, &(0x7f0000000140)=""/248, 0xffffffffffffff6e, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) creat(&(0x7f00000003c0)='./bus\x00', 0x0) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0) r5 = open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0x0) ftruncate(r5, 0x2008002) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r4, 0x0) 2.998766941s ago: executing program 3 (id=1382): socket$packet(0x11, 0x2, 0x300) r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000000480)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 2.956488934s ago: executing program 2 (id=1383): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000280), 0x3, 0x44d, &(0x7f0000000a40)="$eJzs28tvG8UfAPDvrpP219cvoZRHH0CgICIeSZMW6IEDIJA4gITEpRxDklalboOaINGqgoBQOaJK3BFHJP4CTnBBwAmJK9xRpQrlQuFktPZu/IjtJsGJS/35SNvM7I498/Xs2LM73QAG1lj2TxKxNyJ+jYiRWra5wFjtz82VK7N/rVyZTaJSefOPpFruz5Urs0XR4nV78sx4GpF+ksThNvUuXrp8bqZcnr+Y5yeXzr87uXjp8tNnz8+cmT8zf2H65MkTx6eee3b6mZ7EeVfW1kMfLBw5+Opb116fPXXt7R+/Tor4W+LokbFuBx+rVHpcXX/ta0gnQ31sCBtSioisu4ar438kSlHvvJF45eO+Ng7YUpVch8PLFeAOlkS/WwD0R/FDn13/Ftv2zT7678aLtQugLO6b+VY7MhRp1C6Mhluub3tpLCJOLf/9RbbF1tyHAABo8m02/3mq3fwvjXsbyv0/XxsazddS9kfE3RFxICLuiaiWvS8i7t9g/a2LJGvnP+n1TQW2Ttn87/l8bat5/pcWRUZLeW5fNTOcnD5bnj+WfybjMbwzy091qeO7l3/5rNOxxvlftmX1F3PBvB3Xh3Y2v2ZuZmnm38Tc6MZHEYeG2sWfrK4EJBFxMCIObbKOs098daTTsdb4K0m3d3qhOduDdabKlxGP1/p/OVriLyTd1ycn/xfl+WOTxVmx1k8/X32jU/237v+tlfX/7rbn/2r8o0njeu3ixuu4+tunHa9pJjZ1/td37Mj/vj+ztHRxKmJH8lqt0Y37p+uvLfJF+Sz+8aPtx//+qH8ShyMiO4kfiIgHI+KhvO8ejohHIuJol/h/eOnRdzodux36f66l/0ebi7T0fz2xI1r3tE+Uzn3/TfM71pPr+/47UU2N53vW8/23nnZt7mwGAACA/540IvZGkk6sptN0YqL2f/gPxO60vLC49OTphfcuzNWeERiN4bS401W7H1y7HzqVX9YX+emW/PH8vvHnpV3V/MTsQnmu38HDgNvTYfxnfi/1u3XAlvO8Fgwu4x8Gl/EPg8v4h8HVZvzv6kc7gO3X7vf/w3qyMrKdjQG2Vcv4t+wHA8T1Pwwu4x8GV+P47/r8PXAnWdwVt35IXkJiTSLS26IZvUkkWzwK9vY7wI0n+v3NBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Bv/BAAA///oO+WP") open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000280), 0x4) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x1718, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a4b78c660e677df701908b9aaa3f6a00400", "036c47c6780820d1cbf7896de1fdcf335263bdbcef549ba197fce47ddfdd753abd9501ce721b6ae9b49600002a00", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00"}) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000003}) 2.754076911s ago: executing program 0 (id=1384): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_setup(0x4172, 0x0, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f00000007c0)='./file0/file0\x00', 0x0, &(0x7f0000000800)=ANY=[@ANYRES8=0x0, @ANYRESOCT, @ANYRES8, @ANYBLOB="de4738cf9c0491c8cf5e1d7b43c142bda502b60156ee57ac4020c780d2cdb957ab9c825c83ac0fc2b7557b44cce5c21db7b42fee0725d60c318be097dc240358aa455a185d5bb0f26fd8dcacee3efa0fe1650754661657ee13065a7febad353c2365934816bf96677c1a7fa13993572c67fb68da4caa319dc3f2fdd3965f40e6744fa0d78e57620dac7662e95e9e39f441cf3a95223916ceaa9bff0c408017e69f"], 0x3, 0x6a4, &(0x7f0000000100)="$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") ioctl$FS_IOC_SETFLAGS(r1, 0x125f, 0x0) 2.443794226s ago: executing program 3 (id=1385): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x1, 0x1, 0x1}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20004808) socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(0xffffffffffffffff, 0x0, 0x0) unshare(0x22020400) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x3, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r3, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8a85009a10d943a, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc45, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffff81, 0x14, 0x0, 0x0, 0xffffffffffffff47, 0x10, 0x8, 0x0, 0x0}}, 0x64) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000780)={r4}, 0x4) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000080)={@map=0x1, r5, 0x2f, 0x0, 0xffffffffffffffff, @prog_id}, 0x20) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x10) socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$sock(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)='k', 0xfdef}], 0x1, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x303}}], 0x18}, 0x0) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18030000000000000000000000000400851000000600000018100000", @ANYRES32=r6, @ANYBLOB="0000000000000000660000000000000018000000000000000000000000000000950000000000000037dd9a060000000095000000000000008543b3624c3ff0bc5caeb3207811191ff756120e465c5a06a510ee69b3c94bf6fd9415e03987674b821ce2b85600933c1cae2280131059b20fc5360e7cef5f05dd373517f38dc8e4818925710f0bed497bf12c17f39414869376a2d56034c8adf1f2e3350a316c6841b97da84b39d51e31e470074705"], &(0x7f0000000000)='GPL\x00'}, 0x90) 1.667490208s ago: executing program 0 (id=1386): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000b40), 0x2b842ac, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f00000004c0)=""/153}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r4, 0x0, 0x11, 0x0, &(0x7f0000000600)="61df712bc884fef053a7a9a26e9b722780", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close_range(r0, 0xffffffffffffffff, 0x0) 1.667063703s ago: executing program 2 (id=1387): unshare(0x68060200) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x2df) openat$pfkey(0xffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x16d2, 0x0, 0x0, &(0x7f0000000140)) syz_io_uring_submit(0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000040)={'broute\x00', 0x0, 0x0, 0x0, [], 0x18, 0x0, 0x0}, &(0x7f00000000c0)=0x78) 1.61415721s ago: executing program 1 (id=1388): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x24, 0x0, 0x2) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="034886dd010000000000400000006000000001002f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001000022eb"], 0xfdef) 1.100499455s ago: executing program 3 (id=1389): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='rootmode', 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) r2 = userfaultfd(0x80001) r3 = userfaultfd(0x80001) pwritev(r1, &(0x7f0000002500)=[{&(0x7f0000000140)="16", 0x1}], 0x1, 0x1507, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa07, &(0x7f0000000100)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}}) syz_clone3(&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000240)}, 0x58) 407.560212ms ago: executing program 2 (id=1390): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWSETELEM={0x20, 0xc, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0xec, 0x14, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_OBJ_USERDATA={0x4f, 0x8, "046e1afdb5caa9959e8c7522d254a35839c51679ddba129392b40504b5dd29630adbacfdf2f6e76b11eb5431d8b20082ebcaf77f198cba745c1390c0d3d204ad766fbfbfd2bfd1e983cd52"}, @NFTA_OBJ_USERDATA={0x6d, 0x8, "da70907ae8e34977da479e865846c6984c87200d045c9e7c29229d84ec5dd9f1c8aa112a531f20df27261a523440592730db1dc9b4e60d27dcd50166eaf27adb2bc7d1ad25827e0387ce2cc93dc648323f8e314f5b56cd846bb118d3e184a01b5102a0575901a4daef"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0xec, 0x14, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_OBJ_USERDATA={0xc1, 0x8, "f115525923424847b337591678d535f899dc2266970b925c4fba7517bb303ccac68e849ebb56d896022a33011ddd5eebc817e86fb13c6ce7d5c976896bbf71fc0d177c63353bf41b811ddc0c9f5b146626c71781c9d9e8dd3b5b5646b65d896b10955c066a045b576c4e9410a47b66299b18923c4d2dcdf4c8db44bcbeaf5c6a08cdd6fb4223564bbaf3f8d466d7ad836b0cdcd422d2e405a91ca9c0a0565ba69c69d06a27905127f836926e82dcb5284953c28628be8f11d03d2dad92"}, @NFTA_OBJ_USERDATA={0x11, 0x8, "52375ad908534245c139743996"}]}], {0x14}}, 0x220}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c0002"], 0xdc}}, 0x0) 4.830068ms ago: executing program 3 (id=1391): bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="02c8000400000002005b297aed4f8dd5fa9379772f72e31f8a09"], 0x9) accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000100)=@add_del={0x2, &(0x7f0000000040)='veth0_to_bridge\x00'}) socket$inet(0x2, 0x3, 0x8d) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x73}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x72, @time={0x211}}) socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000280)) sendto$inet(r3, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r3, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) ppoll(&(0x7f0000000040)=[{r3}, {r3}], 0x2, 0x0, 0x0, 0x0) bind$alg(r2, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) accept4(r2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040e07000220"], 0xa) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0) 0s ago: executing program 4 (id=1392): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="3c75c2015e8724b5a4c586f2ae924b277f0443ec773eab27570e28988217c9b0", 0x20) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) process_vm_readv(0x0, &(0x7f0000000280), 0x0, &(0x7f00000005c0)=[{&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000000540)=""/107, 0x6b}], 0x2, 0x0) accept$alg(r0, 0x0, 0x0) socket(0x1f, 0x803, 0x7fffffff) creat(&(0x7f00000003c0)='./bus\x00', 0x10c) open(&(0x7f0000000380)='./bus\x00', 0x616000, 0x1) creat(&(0x7f0000000200)='./bus\x00', 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000340)=ANY=[@ANYRESDEC=r2], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x41100}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000200)="e0b9000000007ffff2ff9b6f5bec", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000003cc0)=[0x0], 0x1}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000001c0), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, r5) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000340)="23000000010011", 0x7) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) kernel console output (not intermixed with test programs): number 14 [ 680.368843][ T8840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 680.371324][ T8] usb 2-1: usb_control_msg returned -32 [ 680.378878][ T8840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 680.383741][ T8] usbtmc 2-1:16.0: can't read capabilities [ 681.107178][ T8857] usbtmc 2-1:16.0: usb_control_msg returned -71 [ 681.127319][ T5260] usb 2-1: USB disconnect, device number 17 [ 681.180584][ T8859] rdma_rxe: rxe_newlink: failed to add vcan0 [ 681.266181][ T8865] netlink: 'syz.3.873': attribute type 10 has an invalid length. [ 681.389221][ T8865] team0: Port device netdevsim3 added [ 684.164500][ T5235] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 684.420999][ T5235] usb 3-1: Using ep0 maxpacket: 16 [ 684.527083][ T5235] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 684.541301][ T5235] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 684.555856][ T5235] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 684.565283][ T5235] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.737759][ T5235] usb 3-1: config 0 descriptor?? [ 684.851169][ T5235] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 685.378847][ T8894] syz1: rxe_newlink: already configured on vcan0 [ 686.145436][ T5235] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 686.389171][ T5235] usb 2-1: Using ep0 maxpacket: 8 [ 686.427040][ T5235] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 686.435906][ T5235] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 686.446084][ T5235] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 686.456267][ T5235] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 686.466523][ T5235] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 686.483794][ T5235] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 686.493120][ T5235] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.799109][ T8906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 686.808955][ T8906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 686.825591][ T5235] usb 2-1: usb_control_msg returned -32 [ 686.831513][ T5235] usbtmc 2-1:16.0: can't read capabilities [ 687.034865][ T5184] Bluetooth: hci1: command 0x0406 tx timeout [ 687.091827][ T1822] usb 3-1: USB disconnect, device number 15 [ 688.975346][ T8934] rdma_rxe: rxe_newlink: failed to add vcan0 [ 689.219297][ T8] usb 2-1: USB disconnect, device number 18 [ 690.932491][ T5235] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 691.052423][ T8960] netlink: 'syz.2.910': attribute type 10 has an invalid length. [ 691.164226][ T5235] usb 2-1: Using ep0 maxpacket: 16 [ 691.171459][ T8960] team0: Port device netdevsim3 added [ 691.206410][ T5235] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 691.216967][ T5235] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 691.230402][ T5235] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 691.239827][ T5235] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.332823][ T5235] usb 2-1: config 0 descriptor?? [ 691.376940][ T5235] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 691.534500][ T8] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 691.682142][ T8966] rdma_rxe: rxe_newlink: failed to add vcan0 [ 691.788529][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 691.818731][ T8] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 691.827407][ T8] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 691.837663][ T8] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 691.847818][ T8] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 691.858674][ T8] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 691.872146][ T8] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 691.881582][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.308626][ T8962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 692.325282][ T8962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 692.349535][ T8] usb 1-1: usb_control_msg returned -32 [ 692.355939][ T8] usbtmc 1-1:16.0: can't read capabilities [ 692.981951][ T8962] usbtmc 1-1:16.0: usb_control_msg returned -32 [ 693.121710][ T5242] usb 1-1: USB disconnect, device number 7 [ 694.105533][ T5242] usb 2-1: USB disconnect, device number 19 [ 696.047881][ T9004] rdma_rxe: rxe_newlink: failed to add vcan0 [ 696.099512][ T8998] netlink: 'syz.1.924': attribute type 10 has an invalid length. [ 696.247901][ T8998] team0: Port device netdevsim3 added [ 697.014177][ T1851] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 697.237708][ T1851] usb 5-1: Using ep0 maxpacket: 8 [ 697.265832][ T1851] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 697.274640][ T1851] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 697.284919][ T1851] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 697.295076][ T1851] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 697.305356][ T1851] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 697.318892][ T1851] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 697.328337][ T1851] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.711104][ T9011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 697.721186][ T9011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 697.787457][ T1851] usb 5-1: usb_control_msg returned -32 [ 697.793375][ T1851] usbtmc 5-1:16.0: can't read capabilities [ 699.415198][ T9017] loop0: detected capacity change from 0 to 40427 [ 699.459936][ T9017] F2FS-fs (loop0): invalid crc value [ 699.493852][ T5242] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 699.530676][ T9017] F2FS-fs (loop0): Found nat_bits in checkpoint [ 699.835773][ T9017] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 700.107309][ T9037] rdma_rxe: rxe_newlink: failed to add vcan0 [ 700.158922][ T8] usb 5-1: USB disconnect, device number 16 [ 700.525102][ T5242] usb 2-1: Using ep0 maxpacket: 16 [ 700.534774][ T5242] usb 2-1: device descriptor read/all, error -71 [ 701.265132][ T9048] netlink: 'syz.4.940': attribute type 10 has an invalid length. [ 701.364082][ T9048] team0: Port device netdevsim3 added [ 702.393977][ T5184] Bluetooth: hci2: command 0x0406 tx timeout [ 702.822639][ T8395] syz-executor: attempt to access beyond end of device [ 702.822639][ T8395] loop0: rw=2051, sector=36912, nr_sectors = 8152 limit=40427 [ 702.848644][ T8395] syz-executor: attempt to access beyond end of device [ 702.848644][ T8395] loop0: rw=2051, sector=45096, nr_sectors = 85976 limit=40427 [ 702.985919][ T8395] F2FS-fs (loop0): Issue discard(4614, 4614, 1019) failed, ret: -5 [ 702.994450][ T8395] F2FS-fs (loop0): Issue discard(5637, 5637, 10747) failed, ret: -5 [ 703.690578][ T9071] syz1: rxe_newlink: already configured on vcan0 [ 703.783806][ T1851] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 703.914762][ T10] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 704.039323][ T1851] usb 3-1: Using ep0 maxpacket: 8 [ 704.104100][ T1851] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 704.112582][ T1851] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 704.122768][ T1851] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 704.133103][ T1851] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 704.143391][ T1851] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 704.158916][ T1851] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 704.169959][ T1851] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.242345][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 704.320145][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 704.331117][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 704.344514][ T10] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 704.354090][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.427743][ T10] usb 5-1: config 0 descriptor?? [ 704.477872][ T10] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 704.558651][ T1851] usb 3-1: usb_control_msg returned -32 [ 704.564832][ T1851] usbtmc 3-1:16.0: can't read capabilities [ 704.577145][ T9068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 704.587381][ T9068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 704.826944][ T1851] usb 3-1: USB disconnect, device number 16 [ 705.354930][ T9089] netlink: 'syz.3.957': attribute type 10 has an invalid length. [ 707.073822][ T1851] usb 5-1: USB disconnect, device number 17 [ 707.748080][ T9091] loop1: detected capacity change from 0 to 40427 [ 707.775428][ T9107] rdma_rxe: rxe_newlink: failed to add vcan0 [ 707.836085][ T9091] F2FS-fs (loop1): invalid crc value [ 707.936990][ T9091] F2FS-fs (loop1): Found nat_bits in checkpoint [ 708.947532][ T9126] netlink: 'syz.3.971': attribute type 10 has an invalid length. [ 709.106835][ T1851] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 709.373705][ T1851] usb 2-1: Using ep0 maxpacket: 8 [ 709.413275][ T1851] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 709.426961][ T1851] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 709.440221][ T1851] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 709.450638][ T1851] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 709.460948][ T1851] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 709.474958][ T1851] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 709.484403][ T1851] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.686037][ T8] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 709.861310][ T9123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 709.871211][ T9123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 709.878210][ T1851] usb 2-1: usb_control_msg returned -32 [ 709.885248][ T1851] usbtmc 2-1:16.0: can't read capabilities [ 709.938193][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 709.959197][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 709.969781][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 709.983316][ T8] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 709.992761][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.053367][ T1851] usb 2-1: USB disconnect, device number 22 [ 710.125015][ T8] usb 1-1: config 0 descriptor?? [ 710.169169][ T8] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 710.488218][ T9141] rdma_rxe: rxe_newlink: failed to add vcan0 [ 710.581176][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 712.531900][ T9146] loop3: detected capacity change from 0 to 40427 [ 712.643185][ T9146] F2FS-fs (loop3): invalid crc value [ 712.740719][ T9146] F2FS-fs (loop3): Found nat_bits in checkpoint [ 712.964135][ T9146] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 713.506891][ T1822] usb 1-1: USB disconnect, device number 8 [ 714.342562][ T9167] netlink: 'syz.2.985': attribute type 10 has an invalid length. [ 715.822001][ T9179] syz1: rxe_newlink: already configured on vcan0 [ 715.935144][ T8491] syz-executor: attempt to access beyond end of device [ 715.935144][ T8491] loop3: rw=2051, sector=36912, nr_sectors = 8152 limit=40427 [ 716.024939][ T8491] syz-executor: attempt to access beyond end of device [ 716.024939][ T8491] loop3: rw=2051, sector=45096, nr_sectors = 85976 limit=40427 [ 716.092001][ T8491] F2FS-fs (loop3): Issue discard(4614, 4614, 1019) failed, ret: -5 [ 716.100489][ T8491] F2FS-fs (loop3): Issue discard(5637, 5637, 10747) failed, ret: -5 [ 716.356050][ T5242] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 716.509414][ T1822] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 716.563869][ T5242] usb 1-1: Using ep0 maxpacket: 8 [ 716.589565][ T5242] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 716.598309][ T5242] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 716.608456][ T5242] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 716.618618][ T5242] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 716.628980][ T5242] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 716.642498][ T5242] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 716.651905][ T5242] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.780311][ T1822] usb 2-1: Using ep0 maxpacket: 16 [ 716.810880][ T1822] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 716.824984][ T1822] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 716.834617][ T1822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.877947][ T1822] usb 2-1: config 0 descriptor?? [ 716.924324][ T1822] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 716.982519][ T9181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 716.993262][ T9181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 717.055154][ T5242] usb 1-1: usb_control_msg returned -32 [ 717.061060][ T5242] usbtmc 1-1:16.0: can't read capabilities [ 717.154877][ T5242] usb 1-1: USB disconnect, device number 9 [ 718.209911][ T9204] netlink: 'syz.2.1000': attribute type 10 has an invalid length. [ 718.935207][ T9211] rdma_rxe: rxe_newlink: failed to add vcan0 [ 719.790630][ T5242] usb 2-1: USB disconnect, device number 23 [ 721.032159][ T9210] loop3: detected capacity change from 0 to 40427 [ 721.084813][ T9210] F2FS-fs (loop3): invalid crc value [ 721.201457][ T9210] F2FS-fs (loop3): Found nat_bits in checkpoint [ 721.473866][ T9210] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 721.494085][ T5242] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 721.784069][ T5242] usb 1-1: Using ep0 maxpacket: 8 [ 721.856028][ T5242] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 721.865532][ T5242] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 721.875761][ T5242] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 721.885868][ T5242] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 721.896168][ T5242] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 721.914756][ T5242] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 721.924301][ T5242] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.965078][ T9244] netlink: 'syz.2.1014': attribute type 10 has an invalid length. [ 722.547468][ T9233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 722.557625][ T9233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 723.397496][ T9253] syz1: rxe_newlink: already configured on vcan0 [ 724.204694][ T1851] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 724.372086][ T5242] usb 1-1: usb_control_msg returned -32 [ 724.378252][ T5242] usbtmc 1-1:16.0: can't read capabilities [ 724.426626][ T1851] usb 3-1: Using ep0 maxpacket: 16 [ 724.427306][ T5242] usb 1-1: USB disconnect, device number 10 [ 724.492381][ T1851] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 724.505836][ T1851] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 724.515305][ T1851] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.559788][ T8491] syz-executor: attempt to access beyond end of device [ 724.559788][ T8491] loop3: rw=2051, sector=36912, nr_sectors = 8152 limit=40427 [ 724.571394][ T1851] usb 3-1: config 0 descriptor?? [ 724.632560][ T1851] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 724.655590][ T8491] syz-executor: attempt to access beyond end of device [ 724.655590][ T8491] loop3: rw=2051, sector=45096, nr_sectors = 85976 limit=40427 [ 724.762476][ T8491] F2FS-fs (loop3): Issue discard(4614, 4614, 1019) failed, ret: -5 [ 724.770850][ T8491] F2FS-fs (loop3): Issue discard(5637, 5637, 10747) failed, ret: -5 [ 725.556334][ T9275] netlink: 'syz.0.1026': attribute type 10 has an invalid length. [ 725.611008][ T9275] team0: Port device netdevsim3 added [ 726.705556][ T9289] rdma_rxe: rxe_newlink: failed to add vcan0 [ 727.385839][ T1851] usb 3-1: USB disconnect, device number 17 [ 728.114093][ T8] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 728.394884][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 728.459650][ T8] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 728.475061][ T8] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 728.485245][ T8] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 728.495353][ T8] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 728.505655][ T8] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 728.519077][ T8] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 728.528539][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.952285][ T9298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 728.962459][ T9298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 729.000496][ T8] usb 4-1: usb_control_msg returned -32 [ 729.006521][ T8] usbtmc 4-1:16.0: can't read capabilities [ 729.051044][ T9307] netlink: 'syz.2.1039': attribute type 10 has an invalid length. [ 729.168484][ T9292] loop0: detected capacity change from 0 to 40427 [ 729.221520][ T9292] F2FS-fs (loop0): invalid crc value [ 729.259990][ T9292] F2FS-fs (loop0): Found nat_bits in checkpoint [ 729.579586][ T9292] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 730.990751][ T1822] usb 4-1: USB disconnect, device number 5 [ 731.559573][ T9328] syz1: rxe_newlink: already configured on vcan0 [ 732.642117][ T8395] syz-executor: attempt to access beyond end of device [ 732.642117][ T8395] loop0: rw=2051, sector=36912, nr_sectors = 8152 limit=40427 [ 732.682931][ T8395] syz-executor: attempt to access beyond end of device [ 732.682931][ T8395] loop0: rw=2051, sector=45096, nr_sectors = 85976 limit=40427 [ 732.710769][ T8395] F2FS-fs (loop0): Issue discard(4614, 4614, 1019) failed, ret: -5 [ 732.721285][ T8395] F2FS-fs (loop0): Issue discard(5637, 5637, 10747) failed, ret: -5 [ 732.964206][ T5242] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 733.226141][ T5242] usb 2-1: Using ep0 maxpacket: 16 [ 733.236905][ T9344] netlink: 'syz.3.1051': attribute type 10 has an invalid length. [ 733.293031][ T5242] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 733.306565][ T5242] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 733.316025][ T5242] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.340439][ T5242] usb 2-1: config 0 descriptor?? [ 733.377898][ T5242] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 734.324926][ T5242] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 734.466196][ T9358] rdma_rxe: rxe_newlink: failed to add vcan0 [ 734.573843][ T5242] usb 3-1: Using ep0 maxpacket: 8 [ 734.593664][ T5242] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 734.602218][ T5242] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 734.615650][ T5242] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 734.626804][ T5242] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 734.637370][ T5242] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 734.650811][ T5242] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 734.660239][ T5242] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.058555][ T9354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 735.068393][ T9354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 735.754198][ T8] usb 2-1: USB disconnect, device number 24 [ 737.182383][ T9379] netlink: 'syz.0.1063': attribute type 10 has an invalid length. [ 737.313036][ T9365] loop4: detected capacity change from 0 to 40427 [ 737.324003][ T5242] usb 3-1: usb_control_msg returned -32 [ 737.330085][ T5242] usbtmc 3-1:16.0: can't read capabilities [ 737.352539][ T9365] F2FS-fs (loop4): invalid crc value [ 737.368927][ T5242] usb 3-1: USB disconnect, device number 18 [ 737.458349][ T9365] F2FS-fs (loop4): Found nat_bits in checkpoint [ 737.757233][ T9365] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 738.254512][ T5184] Bluetooth: hci3: command 0x0406 tx timeout [ 738.869229][ T9399] rdma_rxe: rxe_newlink: failed to add vcan0 [ 739.916842][ T1822] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 740.237067][ T1822] usb 2-1: Using ep0 maxpacket: 16 [ 740.281829][ T1822] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 740.292117][ T1822] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 740.305377][ T1822] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 740.314809][ T1822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.568338][ T1822] usb 2-1: config 0 descriptor?? [ 740.676170][ T1822] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 740.798028][ T8002] syz-executor: attempt to access beyond end of device [ 740.798028][ T8002] loop4: rw=2051, sector=36912, nr_sectors = 8152 limit=40427 [ 740.864701][ T8002] syz-executor: attempt to access beyond end of device [ 740.864701][ T8002] loop4: rw=2051, sector=45096, nr_sectors = 85976 limit=40427 [ 740.901314][ T8002] F2FS-fs (loop4): Issue discard(4614, 4614, 1019) failed, ret: -5 [ 740.910065][ T8002] F2FS-fs (loop4): Issue discard(5637, 5637, 10747) failed, ret: -5 [ 741.239744][ T1822] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 741.453946][ T1822] usb 1-1: Using ep0 maxpacket: 8 [ 741.482936][ T1822] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 741.491833][ T1822] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 741.502143][ T1822] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 741.512238][ T1822] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 741.522624][ T1822] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 741.536047][ T1822] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 741.545463][ T1822] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.885496][ T9417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 741.895360][ T9417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 741.914055][ T1822] usb 1-1: usb_control_msg returned -32 [ 741.920057][ T1822] usbtmc 1-1:16.0: can't read capabilities [ 742.584241][ T9431] usbtmc 1-1:16.0: usb_control_msg returned -71 [ 742.592882][ T1822] usb 1-1: USB disconnect, device number 11 [ 742.675904][ T9434] rdma_rxe: rxe_newlink: failed to add vcan0 [ 742.741911][ T1851] usb 2-1: USB disconnect, device number 25 [ 744.224041][ T9451] netlink: 'syz.1.1089': attribute type 10 has an invalid length. [ 745.456086][ T9439] loop2: detected capacity change from 0 to 40427 [ 745.491482][ T9439] F2FS-fs (loop2): invalid crc value [ 745.524950][ T9439] F2FS-fs (loop2): Found nat_bits in checkpoint [ 745.821288][ T9439] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 746.194236][ T1822] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 746.350425][ T9471] rdma_rxe: rxe_newlink: failed to add vcan0 [ 746.453653][ T1822] usb 2-1: Using ep0 maxpacket: 16 [ 746.534468][ T1822] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 746.544944][ T1822] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 746.558231][ T1822] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 746.567710][ T1822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.300361][ T1851] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 747.548138][ T1851] usb 1-1: Using ep0 maxpacket: 8 [ 747.595481][ T1851] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 747.604275][ T1851] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 747.619379][ T1851] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 747.630943][ T1851] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 747.641276][ T1851] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 747.654702][ T1851] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 747.664106][ T1851] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.255608][ T1851] usb 1-1: usb_control_msg returned -32 [ 748.261626][ T1851] usbtmc 1-1:16.0: can't read capabilities [ 748.275776][ T9479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 748.285658][ T9479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 748.645173][ T1822] usb 2-1: config 0 descriptor?? [ 748.673649][ T1822] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 748.751009][ T7520] syz-executor: attempt to access beyond end of device [ 748.751009][ T7520] loop2: rw=2051, sector=36912, nr_sectors = 8152 limit=40427 [ 748.793774][ T7520] syz-executor: attempt to access beyond end of device [ 748.793774][ T7520] loop2: rw=2051, sector=45096, nr_sectors = 85976 limit=40427 [ 748.875056][ T7520] F2FS-fs (loop2): Issue discard(4614, 4614, 1019) failed, ret: -5 [ 748.883314][ T7520] F2FS-fs (loop2): Issue discard(5637, 5637, 10747) failed, ret: -5 [ 749.017787][ T1851] usb 2-1: USB disconnect, device number 26 [ 749.167311][ T9489] usbtmc 1-1:16.0: usb_control_msg returned -71 [ 749.184209][ T8] usb 1-1: USB disconnect, device number 12 [ 750.432311][ T9503] netlink: 'syz.2.1102': attribute type 10 has an invalid length. [ 754.755361][ T9523] loop0: detected capacity change from 0 to 40427 [ 754.774424][ T8361] Bluetooth: hci0: command 0x0406 tx timeout [ 754.880520][ T9523] F2FS-fs (loop0): invalid crc value [ 754.964842][ T9523] F2FS-fs (loop0): Found nat_bits in checkpoint [ 755.170417][ T9521] rdma_rxe: rxe_newlink: failed to add vcan0 [ 755.170508][ T9523] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 757.365791][ T8395] syz-executor: attempt to access beyond end of device [ 757.365791][ T8395] loop0: rw=2051, sector=36912, nr_sectors = 8152 limit=40427 [ 757.474263][ T8395] syz-executor: attempt to access beyond end of device [ 757.474263][ T8395] loop0: rw=2051, sector=45096, nr_sectors = 85976 limit=40427 [ 757.515044][ T8395] F2FS-fs (loop0): Issue discard(4614, 4614, 1019) failed, ret: -5 [ 757.523295][ T8395] F2FS-fs (loop0): Issue discard(5637, 5637, 10747) failed, ret: -5 [ 757.934787][ T9542] netlink: 'syz.1.1119': attribute type 10 has an invalid length. [ 758.113848][ T8] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 758.369788][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 758.400853][ T8] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 758.409553][ T8] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 758.420092][ T8] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 758.430238][ T8] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 758.440543][ T8] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 758.454107][ T8] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 758.463419][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.684460][ T5238] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 758.842876][ T9540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 758.853003][ T9540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 758.902447][ T8] usb 3-1: usb_control_msg returned -32 [ 758.908612][ T8] usbtmc 3-1:16.0: can't read capabilities [ 758.953825][ T5238] usb 1-1: Using ep0 maxpacket: 16 [ 758.977041][ T5238] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 758.991950][ T5238] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 759.006769][ T5238] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 759.016182][ T5238] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.071995][ T5238] usb 1-1: config 0 descriptor?? [ 759.135091][ T5238] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 759.815284][ T9557] usbtmc 3-1:16.0: usb_control_msg returned -71 [ 759.822085][ T5242] usb 3-1: USB disconnect, device number 19 [ 761.150938][ T9559] loop1: detected capacity change from 0 to 40427 [ 761.302249][ T9559] F2FS-fs (loop1): invalid crc value [ 761.349829][ T9559] F2FS-fs (loop1): Found nat_bits in checkpoint [ 761.622394][ T9559] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 763.693292][ T1822] usb 1-1: USB disconnect, device number 13 [ 763.858259][ T8112] syz-executor: attempt to access beyond end of device [ 763.858259][ T8112] loop1: rw=2051, sector=36912, nr_sectors = 8152 limit=40427 [ 763.898672][ T8112] syz-executor: attempt to access beyond end of device [ 763.898672][ T8112] loop1: rw=2051, sector=45096, nr_sectors = 85976 limit=40427 [ 763.915591][ T9575] rdma_rxe: rxe_newlink: failed to add vcan0 [ 764.005084][ T8112] F2FS-fs (loop1): Issue discard(4614, 4614, 1019) failed, ret: -5 [ 764.013396][ T8112] F2FS-fs (loop1): Issue discard(5637, 5637, 10747) failed, ret: -5 [ 764.168273][ T9581] netlink: 'syz.4.1132': attribute type 10 has an invalid length. [ 766.234078][ T5238] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 766.545303][ T5238] usb 3-1: Using ep0 maxpacket: 16 [ 766.638877][ T5238] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 766.650984][ T5238] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 766.666146][ T5238] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 766.680846][ T5238] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 766.690313][ T5238] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 766.848797][ T5238] usb 3-1: config 0 descriptor?? [ 767.108674][ T9613] rdma_rxe: rxe_newlink: failed to add vcan0 [ 767.413991][ T5238] usbhid 3-1:0.0: can't add hid device: -71 [ 767.420848][ T5238] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 767.558815][ T5238] usb 3-1: USB disconnect, device number 20 [ 768.125250][ T9604] loop1: detected capacity change from 0 to 40427 [ 768.135256][ T5242] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 768.162948][ T9604] F2FS-fs (loop1): invalid crc value [ 768.283008][ T9604] F2FS-fs (loop1): Found nat_bits in checkpoint [ 768.563778][ T5242] usb 1-1: Using ep0 maxpacket: 8 [ 768.597562][ T9604] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 769.929676][ T9626] netlink: 'syz.2.1146': attribute type 10 has an invalid length. [ 771.706446][ T5242] usb 1-1: device descriptor read/all, error -71 [ 772.018300][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 772.199082][ T9653] rdma_rxe: rxe_newlink: failed to add vcan0 [ 772.835234][ T5242] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 772.895207][ T5238] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 773.034347][ T5242] usb 1-1: Using ep0 maxpacket: 16 [ 773.063986][ T5242] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 773.075567][ T5242] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 773.085903][ T5242] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 773.099208][ T5242] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 773.108718][ T5242] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.157364][ T5238] usb 4-1: Using ep0 maxpacket: 8 [ 773.173061][ T5242] usb 1-1: config 0 descriptor?? [ 773.235044][ T5238] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 773.243929][ T5238] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 773.254170][ T5238] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 773.264286][ T5238] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 773.274648][ T5238] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 773.288056][ T5238] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 773.297465][ T5238] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.576242][ T9657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 773.586743][ T9657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 773.588373][ T5238] usb 4-1: usb_control_msg returned -32 [ 773.600825][ T5238] usbtmc 4-1:16.0: can't read capabilities [ 773.619912][ T9661] netlink: 'syz.2.1160': attribute type 10 has an invalid length. [ 773.664437][ T5242] usbhid 1-1:0.0: can't add hid device: -71 [ 773.671207][ T5242] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 773.747267][ T5242] usb 1-1: USB disconnect, device number 15 [ 774.358468][ T5238] usb 4-1: USB disconnect, device number 6 [ 774.363866][ T9664] usbtmc 4-1:16.0: usb_control_msg returned -71 [ 776.086929][ T9683] rdma_rxe: rxe_newlink: failed to add vcan0 [ 776.129022][ T9687] netlink: 'syz.3.1171': attribute type 10 has an invalid length. [ 777.285575][ T1822] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 777.975280][ T1822] usb 4-1: Using ep0 maxpacket: 16 [ 778.213265][ T1822] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 778.224995][ T1822] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 778.238472][ T1822] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 778.252797][ T1822] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 778.262394][ T1822] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.469251][ T9689] loop4: detected capacity change from 0 to 40427 [ 778.477022][ T1822] usb 4-1: config 0 descriptor?? [ 778.515734][ T5242] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 778.530246][ T9689] F2FS-fs (loop4): invalid crc value [ 778.586746][ T9689] F2FS-fs (loop4): Found nat_bits in checkpoint [ 778.754338][ T5242] usb 1-1: Using ep0 maxpacket: 8 [ 778.794968][ T5242] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 778.803887][ T5242] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 778.814235][ T5242] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 778.824578][ T5242] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 778.835114][ T5242] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 778.854951][ T5242] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 778.865205][ T5242] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.937238][ T9689] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 779.347625][ T1822] usbhid 4-1:0.0: can't add hid device: -71 [ 779.355346][ T1822] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 779.404310][ T9697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 779.414588][ T9697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 779.426231][ T5242] usb 1-1: usb_control_msg returned -32 [ 779.432130][ T5242] usbtmc 1-1:16.0: can't read capabilities [ 779.635602][ T1822] usb 4-1: USB disconnect, device number 7 [ 780.231033][ T1822] usb 1-1: USB disconnect, device number 16 [ 780.251512][ T9710] usbtmc 1-1:16.0: usb_control_msg returned -71 [ 781.064831][ T9725] netlink: 'syz.3.1182': attribute type 10 has an invalid length. [ 781.273179][ T9727] rdma_rxe: rxe_newlink: failed to add vcan0 [ 781.495098][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 781.495174][ T29] audit: type=1326 audit(1723399609.439:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9730 comm="syz.0.1184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95573779f9 code=0x7ffc0000 [ 781.528862][ T29] audit: type=1326 audit(1723399609.439:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9730 comm="syz.0.1184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f95573779f9 code=0x7ffc0000 [ 781.552930][ T29] audit: type=1326 audit(1723399609.439:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9730 comm="syz.0.1184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95573779f9 code=0x7ffc0000 [ 781.907813][ T9737] loop2: detected capacity change from 0 to 512 [ 781.937680][ T9737] EXT4-fs: quotafile must be on filesystem root [ 782.804163][ T44] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 783.095066][ T44] usb 2-1: Using ep0 maxpacket: 16 [ 783.181661][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 783.193797][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 783.203997][ T44] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 783.217378][ T44] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 783.226784][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.916249][ T44] usb 2-1: config 0 descriptor?? [ 786.205910][ T44] usbhid 2-1:0.0: can't add hid device: -71 [ 786.214257][ T44] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 786.494518][ T44] usb 2-1: USB disconnect, device number 27 [ 787.535905][ T9766] netlink: 'syz.0.1196': attribute type 10 has an invalid length. [ 787.545368][ T9767] rdma_rxe: rxe_newlink: failed to add vcan0 [ 787.589639][ T8361] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 787.606061][ T8361] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 787.616250][ T8361] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 787.630076][ T8361] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 787.647255][ T8361] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 787.674485][ T8361] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 787.986988][ T9768] vcan0 speed is unknown, defaulting to 1000 [ 789.231647][ T9790] loop1: detected capacity change from 0 to 128 [ 789.359392][ T5238] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 789.521110][ T9796] syz.1.1205: attempt to access beyond end of device [ 789.521110][ T9796] loop1: rw=2049, sector=145, nr_sectors = 112 limit=128 [ 789.607652][ T5238] usb 4-1: Using ep0 maxpacket: 16 [ 789.632852][ T5238] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 789.644400][ T5238] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 789.654532][ T5238] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 789.667818][ T5238] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 789.677211][ T5238] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.716858][ T5238] usb 4-1: config 0 descriptor?? [ 789.749669][ T9768] chnl_net:caif_netlink_parms(): no params data found [ 789.851001][ T5184] Bluetooth: hci4: command tx timeout [ 790.142929][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 790.164492][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 790.195030][ T5238] usbhid 4-1:0.0: can't add hid device: -71 [ 790.204353][ T5238] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 790.286377][ T5238] usb 4-1: USB disconnect, device number 8 [ 790.555795][ T9804] rdma_rxe: rxe_newlink: failed to add vcan0 [ 791.311690][ T9811] netlink: 'syz.0.1210': attribute type 10 has an invalid length. [ 791.333224][ T9768] bridge0: port 1(bridge_slave_0) entered blocking state [ 791.346241][ T9768] bridge0: port 1(bridge_slave_0) entered disabled state [ 791.356583][ T9768] bridge_slave_0: entered allmulticast mode [ 791.365631][ T9768] bridge_slave_0: entered promiscuous mode [ 791.430771][ T9768] bridge0: port 2(bridge_slave_1) entered blocking state [ 791.444713][ T9768] bridge0: port 2(bridge_slave_1) entered disabled state [ 791.452474][ T9768] bridge_slave_1: entered allmulticast mode [ 791.461581][ T9768] bridge_slave_1: entered promiscuous mode [ 791.553887][ T1851] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 791.709721][ T9708] syz.4.1167: attempt to access beyond end of device [ 791.709721][ T9708] loop4: rw=2051, sector=36912, nr_sectors = 8152 limit=40427 [ 791.770903][ T9768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 791.808783][ T9708] syz.4.1167: attempt to access beyond end of device [ 791.808783][ T9708] loop4: rw=2051, sector=45096, nr_sectors = 85976 limit=40427 [ 791.829599][ T1851] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 791.840887][ T1851] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 791.855955][ T1851] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 791.864277][ T9768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 791.866769][ T1851] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.898236][ T9708] F2FS-fs (loop4): Issue discard(4614, 4614, 1019) failed, ret: -5 [ 791.906735][ T9708] F2FS-fs (loop4): Issue discard(5637, 5637, 10747) failed, ret: -5 [ 791.926609][ T5184] Bluetooth: hci4: command tx timeout [ 791.960459][ T1851] usb 3-1: config 0 descriptor?? [ 792.258166][ T9768] team0: Port device team_slave_0 added [ 792.322240][ T9768] team0: Port device team_slave_1 added [ 792.501591][ T9821] loop0: detected capacity change from 0 to 512 [ 792.549245][ T1851] hid-multitouch 0003:1FD2:6007.0002: unknown main item tag 0x0 [ 792.589714][ T9768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 792.597050][ T9768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 792.623637][ T9768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 792.655660][ T9821] EXT4-fs (loop0): blocks per group (95) and clusters per group (32768) inconsistent [ 792.691963][ T1851] hid-multitouch 0003:1FD2:6007.0002: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.2-1/input0 [ 792.746608][ T1851] usb 3-1: USB disconnect, device number 21 [ 792.804821][ T9768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 792.812073][ T9768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 792.838436][ T9768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 793.349714][ T9768] hsr_slave_0: entered promiscuous mode [ 793.437424][ T9768] hsr_slave_1: entered promiscuous mode [ 793.495343][ T2451] kworker/u8:8: attempt to access beyond end of device [ 793.495343][ T2451] loop1: rw=1, sector=257, nr_sectors = 784 limit=128 [ 793.522546][ T9768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 793.530518][ T9768] Cannot create hsr debugfs directory [ 793.994028][ T5184] Bluetooth: hci4: command tx timeout [ 794.288292][ T9830] rdma_rxe: rxe_newlink: failed to add vcan0 [ 794.804759][ T9768] team0: Port device netdevsim3 removed [ 794.817694][ T9768] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.019825][ T9768] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.124048][ T44] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 795.257797][ T9768] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.413704][ T44] usb 3-1: Using ep0 maxpacket: 16 [ 795.442784][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 795.454536][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 795.464711][ T44] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 795.478061][ T44] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 795.487596][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.539477][ T44] usb 3-1: config 0 descriptor?? [ 795.567649][ T9768] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.836040][ T9844] netlink: 'syz.1.1223': attribute type 10 has an invalid length. [ 796.074548][ T5184] Bluetooth: hci4: command tx timeout [ 796.133846][ T44] usbhid 3-1:0.0: can't add hid device: -71 [ 796.133955][ T2451] bridge_slave_1: left allmulticast mode [ 796.140433][ T44] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 796.145841][ T2451] bridge_slave_1: left promiscuous mode [ 796.146666][ T2451] bridge0: port 2(bridge_slave_1) entered disabled state [ 796.280919][ T44] usb 3-1: USB disconnect, device number 22 [ 796.314495][ T2451] bridge_slave_0: left allmulticast mode [ 796.320378][ T2451] bridge_slave_0: left promiscuous mode [ 796.327186][ T2451] bridge0: port 1(bridge_slave_0) entered disabled state [ 797.197087][ T2451] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 797.331895][ T2451] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 797.439051][ T2451] bond0 (unregistering): Released all slaves [ 797.537750][ T9768] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 797.732489][ T9768] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 797.809312][ T9768] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 797.898108][ T9768] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 797.989113][ T29] audit: type=1326 audit(1723399625.959:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9850 comm="syz.3.1226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd5a9779f9 code=0x7ffc0000 [ 798.015868][ T29] audit: type=1326 audit(1723399625.999:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9850 comm="syz.3.1226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd5a9779f9 code=0x7ffc0000 [ 799.075193][ T9868] rdma_rxe: rxe_newlink: failed to add vcan0 [ 799.100428][ T2451] hsr_slave_0: left promiscuous mode [ 799.154636][ T2451] hsr_slave_1: left promiscuous mode [ 799.184375][ T2451] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 799.192170][ T2451] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 799.229137][ T2451] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 799.237332][ T2451] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 799.301141][ T2451] veth1_macvtap: left promiscuous mode [ 799.307361][ T2451] veth0_macvtap: left promiscuous mode [ 799.313251][ T2451] veth1_vlan: left promiscuous mode [ 799.319003][ T2451] veth0_vlan: left promiscuous mode [ 800.475426][ T2451] team0 (unregistering): Port device team_slave_1 removed [ 800.530919][ T2451] team0 (unregistering): Port device team_slave_0 removed [ 801.063794][ T9879] netlink: 'syz.0.1234': attribute type 10 has an invalid length. [ 801.662285][ T9768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 801.927494][ T9768] 8021q: adding VLAN 0 to HW filter on device team0 [ 802.022783][ T2550] bridge0: port 1(bridge_slave_0) entered blocking state [ 802.030663][ T2550] bridge0: port 1(bridge_slave_0) entered forwarding state [ 802.158645][ T2550] bridge0: port 2(bridge_slave_1) entered blocking state [ 802.166409][ T2550] bridge0: port 2(bridge_slave_1) entered forwarding state [ 802.348872][ T9892] loop2: detected capacity change from 0 to 512 [ 802.423949][ T9892] EXT4-fs (loop2): blocks per group (95) and clusters per group (32768) inconsistent [ 805.414338][ T9768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 805.668197][ T9909] rdma_rxe: rxe_newlink: failed to add vcan0 [ 806.740868][ T9920] evm: overlay not supported [ 806.776644][ T9920] overlayfs: failed to get inode (-116) [ 806.782687][ T9920] overlayfs: failed to get inode (-116) [ 806.828733][ T9920] overlayfs: failed to get inode (-116) [ 806.846178][ T9920] overlayfs: failed to get inode (-116) [ 808.019832][ T9768] veth0_vlan: entered promiscuous mode [ 808.115339][ T8361] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 808.144598][ T8361] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 808.157649][ T8361] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 808.186874][ T8361] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 808.210777][ T8361] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 808.221788][ T8361] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 808.318038][ T9768] veth1_vlan: entered promiscuous mode [ 808.482390][ T9933] vcan0 speed is unknown, defaulting to 1000 [ 808.642138][ T9768] veth0_macvtap: entered promiscuous mode [ 808.787917][ T9768] veth1_macvtap: entered promiscuous mode [ 809.043365][ T9768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 809.058110][ T9768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.069367][ T9768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 809.080097][ T9768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.090187][ T9768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 809.101477][ T9768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.111547][ T9768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 809.123843][ T9768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.138654][ T9768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 809.182877][ T9768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 809.195823][ T9768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.206352][ T9768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 809.217073][ T9768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.227182][ T9768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 809.239266][ T9768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.249454][ T9768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 809.264127][ T9768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.280030][ T9768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 809.432419][ T9768] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.442672][ T9768] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.454342][ T9768] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.467748][ T9768] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.321852][ T8361] Bluetooth: hci1: command tx timeout [ 810.514880][ T9933] chnl_net:caif_netlink_parms(): no params data found [ 811.391081][ T11] team0: Port device netdevsim3 removed [ 811.403397][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.644808][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.879320][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.176888][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.397915][ T5184] Bluetooth: hci1: command tx timeout [ 812.449650][ T5184] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 812.474608][ T5184] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 812.489387][ T5184] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 812.553934][ T5184] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 812.568197][ T9933] bridge0: port 1(bridge_slave_0) entered blocking state [ 812.576105][ T9933] bridge0: port 1(bridge_slave_0) entered disabled state [ 812.585180][ T5184] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 812.587018][ T9933] bridge_slave_0: entered allmulticast mode [ 812.605534][ T5184] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 812.709462][ T9933] bridge_slave_0: entered promiscuous mode [ 812.821867][ T9933] bridge0: port 2(bridge_slave_1) entered blocking state [ 812.831772][ T9933] bridge0: port 2(bridge_slave_1) entered disabled state [ 812.839615][ T9933] bridge_slave_1: entered allmulticast mode [ 812.853869][ T9933] bridge_slave_1: entered promiscuous mode [ 812.978052][ T9965] vcan0 speed is unknown, defaulting to 1000 [ 813.185938][ T11] bridge_slave_1: left allmulticast mode [ 813.191837][ T11] bridge_slave_1: left promiscuous mode [ 813.198673][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 813.304298][ T11] bridge_slave_0: left allmulticast mode [ 813.310191][ T11] bridge_slave_0: left promiscuous mode [ 813.316937][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 814.184684][ T5260] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 814.280043][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 814.315992][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 814.346777][ T11] bond0 (unregistering): Released all slaves [ 814.405368][ T5260] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 814.415682][ T5260] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 814.425176][ T5260] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 814.476442][ T5184] Bluetooth: hci1: command tx timeout [ 814.506829][ T5260] usb 3-1: config 0 descriptor?? [ 814.665393][ T9933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 814.794401][ T5184] Bluetooth: hci0: command tx timeout [ 814.957094][ T9933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 815.099825][ T5260] lenovo 0003:17EF:6047.0003: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.2-1/input0 [ 815.672219][ T9933] team0: Port device team_slave_0 added [ 815.725453][ T9933] team0: Port device team_slave_1 added [ 815.743022][ T5260] lenovo 0003:17EF:6047.0003: Fn-lock setting failed: -71 [ 815.787280][ T5260] lenovo 0003:17EF:6047.0003: Sensitivity setting failed: -71 [ 815.915495][ T5260] usb 3-1: USB disconnect, device number 23 [ 816.272303][ T11] hsr_slave_0: left promiscuous mode [ 816.281005][ T11] hsr_slave_1: left promiscuous mode [ 816.294823][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 816.302590][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 816.335110][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 816.342938][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 816.422426][ T11] veth1_macvtap: left promiscuous mode [ 816.430886][ T11] veth0_macvtap: left promiscuous mode [ 816.436934][ T11] veth1_vlan: left promiscuous mode [ 816.442499][ T11] veth0_vlan: left promiscuous mode [ 816.582128][ T5184] Bluetooth: hci1: command tx timeout [ 816.894740][ T5184] Bluetooth: hci0: command tx timeout [ 817.367990][ T11] team0 (unregistering): Port device team_slave_1 removed [ 817.500662][ T11] team0 (unregistering): Port device team_slave_0 removed [ 818.153730][T10001] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1261'. [ 818.196671][ T9933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 818.203932][ T9933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 818.231499][ T9933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 818.324112][ T9965] chnl_net:caif_netlink_parms(): no params data found [ 818.345949][ T9933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 818.353206][ T9933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 818.386656][ T9933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 818.966814][ T5184] Bluetooth: hci0: command tx timeout [ 818.998881][ T9933] hsr_slave_0: entered promiscuous mode [ 819.096513][ T9933] hsr_slave_1: entered promiscuous mode [ 819.108087][ T9933] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 819.116130][ T9933] Cannot create hsr debugfs directory [ 819.539315][ T11] team0: Port device netdevsim3 removed [ 819.552044][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.730057][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.032198][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.336696][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.383571][ T9965] bridge0: port 1(bridge_slave_0) entered blocking state [ 820.391251][ T9965] bridge0: port 1(bridge_slave_0) entered disabled state [ 820.399122][ T9965] bridge_slave_0: entered allmulticast mode [ 820.408068][ T9965] bridge_slave_0: entered promiscuous mode [ 820.678577][ T9965] bridge0: port 2(bridge_slave_1) entered blocking state [ 820.686349][ T9965] bridge0: port 2(bridge_slave_1) entered disabled state [ 820.694143][ T9965] bridge_slave_1: entered allmulticast mode [ 820.767877][ T9965] bridge_slave_1: entered promiscuous mode [ 820.866069][ T2451] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 820.874351][ T2451] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 821.415482][ T5184] Bluetooth: hci0: command tx timeout [ 821.967340][ T9965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 822.296840][ T11] bridge_slave_1: left allmulticast mode [ 822.302945][ T11] bridge_slave_1: left promiscuous mode [ 822.309764][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 822.336506][ T2569] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 822.345485][ T2569] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 822.414637][ T11] bridge_slave_0: left allmulticast mode [ 822.420665][ T11] bridge_slave_0: left promiscuous mode [ 822.427403][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 823.064836][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 823.120547][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 823.152636][ T11] bond0 (unregistering): Released all slaves [ 823.192301][ T9965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 823.937735][ T9965] team0: Port device team_slave_0 added [ 824.195234][ T9965] team0: Port device team_slave_1 added [ 824.472156][ T9965] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 824.480338][ T9965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 824.507182][ T9965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 824.791913][ T9965] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 824.799733][ T9965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 824.827684][ T9965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 825.344746][ T11] hsr_slave_0: left promiscuous mode [ 825.352926][ T11] hsr_slave_1: left promiscuous mode [ 825.364622][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 825.372315][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 825.384359][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 825.392020][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 825.416941][ T11] veth1_macvtap: left promiscuous mode [ 825.422665][ T11] veth0_macvtap: left promiscuous mode [ 825.428668][ T11] veth1_vlan: left promiscuous mode [ 825.434360][ T11] veth0_vlan: left promiscuous mode [ 825.781749][ T11] infiniband syz1: set down [ 825.832758][ T1851] infiniband syz1: ib_query_port failed (-19) [ 826.045254][ T1851] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 826.308140][ T11] team0 (unregistering): Port device team_slave_1 removed [ 826.356098][ T11] team0 (unregistering): Port device team_slave_0 removed [ 826.630674][ T7793] smc: removing ib device syz1 [ 826.735238][ T1851] usb 5-1: Using ep0 maxpacket: 8 [ 827.004670][ T1851] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 827.013243][ T1851] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 827.024623][ T1851] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 827.036478][ T1851] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 827.046740][ T1851] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 827.060125][ T1851] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 827.069605][ T1851] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.565979][ T9933] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 827.703316][T10046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 827.713287][T10046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 828.029167][ T9933] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 828.064635][ T1851] usb 5-1: usb_control_msg returned -32 [ 828.070553][ T1851] usbtmc 5-1:16.0: can't read capabilities [ 829.003763][ T9933] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 829.104672][ T9965] hsr_slave_0: entered promiscuous mode [ 829.187900][ T9965] hsr_slave_1: entered promiscuous mode [ 829.257056][ T9965] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 829.264926][ T9965] Cannot create hsr debugfs directory [ 829.290963][ T9933] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 830.136073][ T25] usb 5-1: USB disconnect, device number 18 [ 831.053236][ T9933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 831.236086][ T9933] 8021q: adding VLAN 0 to HW filter on device team0 [ 831.411146][ T2569] bridge0: port 1(bridge_slave_0) entered blocking state [ 831.418897][ T2569] bridge0: port 1(bridge_slave_0) entered forwarding state [ 831.572058][ T2569] bridge0: port 2(bridge_slave_1) entered blocking state [ 831.579844][ T2569] bridge0: port 2(bridge_slave_1) entered forwarding state [ 831.712815][ T9965] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 831.857165][ T9965] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 831.954956][ T9965] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 832.087213][ T9965] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 832.819989][T10089] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1283'. [ 833.459717][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 833.662503][ T9965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 833.903872][ T9965] 8021q: adding VLAN 0 to HW filter on device team0 [ 833.986218][ T7439] bridge0: port 1(bridge_slave_0) entered blocking state [ 833.993929][ T7439] bridge0: port 1(bridge_slave_0) entered forwarding state [ 834.080943][ T9933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 834.132511][ T7439] bridge0: port 2(bridge_slave_1) entered blocking state [ 834.140264][ T7439] bridge0: port 2(bridge_slave_1) entered forwarding state [ 834.687884][ T5238] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 834.813051][ T9933] veth0_vlan: entered promiscuous mode [ 834.922619][ T9933] veth1_vlan: entered promiscuous mode [ 834.968927][ T5238] usb 5-1: Using ep0 maxpacket: 8 [ 834.999532][ T5238] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 835.009838][ T5238] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 835.020163][ T5238] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 835.030330][ T5238] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 835.040727][ T5238] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 835.054177][ T5238] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 835.065557][ T5238] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.421346][T10108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 835.425445][ T5238] usb 5-1: usb_control_msg returned -32 [ 835.431206][T10108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 835.435740][ T5238] usbtmc 5-1:16.0: can't read capabilities [ 835.463077][ T9933] veth0_macvtap: entered promiscuous mode [ 835.487751][T10106] loop0: detected capacity change from 0 to 4096 [ 835.561303][ T9933] veth1_macvtap: entered promiscuous mode [ 835.584516][T10106] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 835.759493][ T9933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 835.770377][ T9933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 835.782465][ T9933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 835.793845][ T9933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 835.803962][ T9933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 835.814771][ T9933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 835.829635][ T9933] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 836.083241][ T9933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 836.096492][ T9933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 836.107228][ T9933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 836.118004][ T9933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 836.128083][ T9933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 836.138858][ T9933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 836.153873][ T9933] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 836.240232][ T9933] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.249429][ T9933] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.258662][ T9933] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.267749][ T9933] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.318151][ T5238] usb 5-1: USB disconnect, device number 19 [ 836.326811][T10121] usbtmc 5-1:16.0: usb_control_msg returned -71 [ 836.796874][ T9965] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 837.080068][T10106] overlayfs: missing 'lowerdir' [ 837.408250][ T9965] veth0_vlan: entered promiscuous mode [ 837.532892][T10126] syzkaller0: entered promiscuous mode [ 837.538840][T10126] syzkaller0: entered allmulticast mode [ 837.606719][ T9965] veth1_vlan: entered promiscuous mode [ 838.376653][ T9965] veth0_macvtap: entered promiscuous mode [ 838.465676][ T9965] veth1_macvtap: entered promiscuous mode [ 838.595059][T10143] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1293'. [ 838.632604][ T9965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 838.645567][ T9965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 838.658142][ T9965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 838.669475][ T9965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 838.679580][ T9965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 838.690299][ T9965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 838.700398][ T9965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 838.711129][ T9965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 838.726283][ T9965] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 838.962383][ T9965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 838.974036][ T9965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 838.984848][ T9965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 838.995727][ T9965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.005881][ T9965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 839.016722][ T9965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.026838][ T9965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 839.037699][ T9965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.052441][ T9965] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 839.461329][ T9965] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.474458][ T9965] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.485306][ T9965] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.495215][ T9965] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.954016][ T10] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 842.122989][T10187] loop0: detected capacity change from 0 to 512 [ 842.185906][T10187] EXT4-fs: Ignoring removed oldalloc option [ 842.202780][ T10] usb 5-1: config 0 has an invalid interface number: 120 but max is 0 [ 842.212342][ T10] usb 5-1: config 0 has no interface number 0 [ 842.218826][ T10] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 842.234732][T10187] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 842.330851][ T10] usb 5-1: New USB device found, idVendor=e828, idProduct=cea8, bcdDevice=50.03 [ 842.342891][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.351831][ T10] usb 5-1: Product: syz [ 842.356416][ T10] usb 5-1: Manufacturer: syz [ 842.361245][ T10] usb 5-1: SerialNumber: syz [ 842.456612][ T10] usb 5-1: config 0 descriptor?? [ 842.464924][T10180] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 842.826976][ T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 842.835661][ T10] usb 5-1: MIDIStreaming interface descriptor not found [ 842.891050][T10198] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1304'. [ 843.102227][ T10] usb 5-1: USB disconnect, device number 20 [ 843.102569][T10187] EXT4-fs (loop0): failed to open journal device unknown-block(0,0) -6 [ 843.943225][ T7914] udevd[7914]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.120/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 844.492629][T10215] loop0: detected capacity change from 0 to 2048 [ 844.638340][T10226] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 845.332118][ T4390] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 845.341422][ T4390] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 846.382085][ T4390] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 846.391349][ T4390] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 847.254081][T10250] netlink: 'syz.3.1246': attribute type 10 has an invalid length. [ 847.266762][T10254] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1313'. [ 847.435879][T10250] team0: Failed to send port change of device netdevsim3 via netlink (err -105) [ 847.446778][T10250] team0: Failed to send options change via netlink (err -105) [ 847.459502][T10250] team0: Port device netdevsim3 added [ 847.483030][ T2569] team0: Failed to send port change of device netdevsim3 via netlink (err -105) [ 848.975407][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 848.983370][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 849.208636][ T2569] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 849.216829][ T2569] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 849.925149][T10282] loop3: detected capacity change from 0 to 1024 [ 849.981358][T10296] vcan0 speed is unknown, defaulting to 1000 [ 849.990093][T10296] vcan0 speed is unknown, defaulting to 1000 [ 849.997935][T10296] vcan0 speed is unknown, defaulting to 1000 [ 850.285931][T10296] infiniband syz1: set active [ 850.290766][T10296] infiniband syz1: added vcan0 [ 850.333345][ T8] vcan0 speed is unknown, defaulting to 1000 [ 850.465093][T10282] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 850.477715][T10282] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 850.727053][T10305] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1325'. [ 850.840764][T10296] RDS/IB: syz1: added [ 850.845220][T10296] smc: adding ib device syz1 with port count 1 [ 850.851612][T10296] smc: ib device syz1 port 1 has pnetid [ 850.859496][T10296] vcan0 speed is unknown, defaulting to 1000 [ 851.147557][T10296] vcan0 speed is unknown, defaulting to 1000 [ 851.293131][ T8] vcan0 speed is unknown, defaulting to 1000 [ 851.687658][T10296] vcan0 speed is unknown, defaulting to 1000 [ 851.965633][T10296] vcan0 speed is unknown, defaulting to 1000 [ 852.237038][T10296] vcan0 speed is unknown, defaulting to 1000 [ 853.128720][ T1822] IPVS: starting estimator thread 0... [ 853.152374][T10312] IPVS: wrr: SCTP 127.0.0.1:0 - no destination available [ 853.285903][T10314] IPVS: using max 240 ests per chain, 12000 per kthread [ 853.428206][T10312] input: syz1 as /devices/virtual/input/input8 [ 856.507735][T10353] rdma_rxe: rxe_newlink: failed to add vcan0 [ 857.031732][T10360] vcan0 speed is unknown, defaulting to 1000 [ 857.580607][T10364] input: syz1 as /devices/virtual/input/input9 [ 860.824768][ T8361] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 860.839605][ T8361] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 860.850139][ T8361] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 860.878404][ T8361] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 860.901042][ T8361] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 860.911088][ T8361] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 861.126929][T10394] vcan0 speed is unknown, defaulting to 1000 [ 861.672697][T10397] syz1: rxe_newlink: already configured on vcan0 [ 862.584209][T10411] input: syz1 as /devices/virtual/input/input10 [ 863.025280][ T5184] Bluetooth: hci2: command tx timeout [ 864.872729][T10394] chnl_net:caif_netlink_parms(): no params data found [ 865.048153][ T5184] Bluetooth: hci2: command tx timeout [ 867.486043][ T5184] Bluetooth: hci2: command tx timeout [ 869.514118][ T8361] Bluetooth: hci2: command tx timeout [ 904.158948][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 906.596508][ T5184] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 906.633121][ T5184] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 906.650456][ T5184] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 906.665709][ T5184] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 906.685832][ T5184] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 906.699367][ T5184] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 906.944273][ T8361] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 906.968240][ T8361] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 906.985967][ T8361] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 907.001011][ T8361] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 907.013112][ T8361] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 907.023006][ T8361] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 907.141525][T10442] vcan0 speed is unknown, defaulting to 1000 [ 907.286655][T10394] bridge0: port 1(bridge_slave_0) entered blocking state [ 907.294439][T10394] bridge0: port 1(bridge_slave_0) entered disabled state [ 907.302147][T10394] bridge_slave_0: entered allmulticast mode [ 907.312408][T10394] bridge_slave_0: entered promiscuous mode [ 907.315252][ T5184] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 907.327896][ T5184] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 907.337220][ T5184] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 907.350487][ T5184] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 907.368368][ T5184] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 907.377605][ T5184] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 907.540510][T10394] bridge0: port 2(bridge_slave_1) entered blocking state [ 907.548757][T10394] bridge0: port 2(bridge_slave_1) entered disabled state [ 907.556665][T10394] bridge_slave_1: entered allmulticast mode [ 907.574525][T10394] bridge_slave_1: entered promiscuous mode [ 907.949712][T10444] vcan0 speed is unknown, defaulting to 1000 [ 908.591826][T10394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 908.613838][ T8361] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 908.648797][ T8361] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 908.734417][ T8361] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 908.780917][T10446] vcan0 speed is unknown, defaulting to 1000 [ 908.869550][ T8361] Bluetooth: hci6: command tx timeout [ 908.874374][ T51] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 908.931998][ T51] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 908.941769][ T8361] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 909.028758][T10394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 909.135158][ T8361] Bluetooth: hci7: command tx timeout [ 909.474051][ T51] Bluetooth: hci8: command tx timeout [ 910.054045][T10394] team0: Port device team_slave_0 added [ 910.093878][T10449] vcan0 speed is unknown, defaulting to 1000 [ 910.241759][T10394] team0: Port device team_slave_1 added [ 911.040505][ T51] Bluetooth: hci9: command tx timeout [ 911.050383][ T51] Bluetooth: hci6: command tx timeout [ 911.201371][ T51] Bluetooth: hci7: command tx timeout [ 911.312563][ T2451] team0: Port device netdevsim3 removed [ 911.324496][ T2451] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 911.427731][T10442] chnl_net:caif_netlink_parms(): no params data found [ 911.448871][T10394] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 911.458886][T10394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 911.485811][T10394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 911.519504][ T51] Bluetooth: hci8: command tx timeout [ 911.595858][T10394] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 911.603016][T10394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 911.629381][T10394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 911.666858][ T2451] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 911.827872][ T2451] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 911.998460][ T2451] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 912.288913][T10444] chnl_net:caif_netlink_parms(): no params data found [ 912.314023][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 912.451308][T10394] hsr_slave_0: entered promiscuous mode [ 912.504189][T10394] hsr_slave_1: entered promiscuous mode [ 912.527290][T10394] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 912.535224][T10394] Cannot create hsr debugfs directory [ 912.704633][T10446] chnl_net:caif_netlink_parms(): no params data found [ 913.114462][ T8361] Bluetooth: hci9: command tx timeout [ 913.120110][ T8361] Bluetooth: hci6: command tx timeout [ 913.169991][ T2451] bridge_slave_1: left allmulticast mode [ 913.176174][ T2451] bridge_slave_1: left promiscuous mode [ 913.182759][ T2451] bridge0: port 2(bridge_slave_1) entered disabled state [ 913.228049][ T2451] bridge_slave_0: left allmulticast mode [ 913.234339][ T2451] bridge_slave_0: left promiscuous mode [ 913.240931][ T2451] bridge0: port 1(bridge_slave_0) entered disabled state [ 913.284624][ T51] Bluetooth: hci7: command tx timeout [ 913.593978][ T51] Bluetooth: hci8: command tx timeout [ 913.769984][ T2451] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 913.790175][ T2451] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 913.821541][ T2451] bond0 (unregistering): Released all slaves [ 914.100836][T10449] chnl_net:caif_netlink_parms(): no params data found [ 914.281682][T10442] bridge0: port 1(bridge_slave_0) entered blocking state [ 914.292688][T10442] bridge0: port 1(bridge_slave_0) entered disabled state [ 914.300724][T10442] bridge_slave_0: entered allmulticast mode [ 914.308755][T10442] bridge_slave_0: entered promiscuous mode [ 914.467435][T10442] bridge0: port 2(bridge_slave_1) entered blocking state [ 914.475457][T10442] bridge0: port 2(bridge_slave_1) entered disabled state [ 914.483148][T10442] bridge_slave_1: entered allmulticast mode [ 914.492307][T10442] bridge_slave_1: entered promiscuous mode [ 915.204075][ T51] Bluetooth: hci6: command tx timeout [ 915.209707][ T51] Bluetooth: hci9: command tx timeout [ 915.357366][ T51] Bluetooth: hci7: command tx timeout [ 915.526536][T10444] bridge0: port 1(bridge_slave_0) entered blocking state [ 915.537363][T10444] bridge0: port 1(bridge_slave_0) entered disabled state [ 915.545186][T10444] bridge_slave_0: entered allmulticast mode [ 915.556058][T10444] bridge_slave_0: entered promiscuous mode [ 915.658963][ T2451] hsr_slave_0: left promiscuous mode [ 915.679211][ T8361] Bluetooth: hci8: command tx timeout [ 915.685715][ T2451] hsr_slave_1: left promiscuous mode [ 915.706341][ T2451] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 915.714225][ T2451] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 915.776325][ T2451] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 915.784108][ T2451] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 915.851301][ T2451] veth1_macvtap: left promiscuous mode [ 915.861384][ T2451] veth0_macvtap: left promiscuous mode [ 915.867472][ T2451] veth1_vlan: left promiscuous mode [ 915.873012][ T2451] veth0_vlan: left promiscuous mode [ 916.709650][ T2451] team0 (unregistering): Port device team_slave_1 removed [ 916.801776][ T2451] team0 (unregistering): Port device team_slave_0 removed [ 917.106888][T10442] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 917.260495][T10444] bridge0: port 2(bridge_slave_1) entered blocking state [ 917.268346][T10444] bridge0: port 2(bridge_slave_1) entered disabled state [ 917.276329][T10444] bridge_slave_1: entered allmulticast mode [ 917.278004][ T8361] Bluetooth: hci9: command tx timeout [ 917.285173][T10444] bridge_slave_1: entered promiscuous mode [ 917.450007][T10394] team0: Port device netdevsim3 removed [ 917.464653][T10394] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.531236][T10442] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 917.680292][T10446] bridge0: port 1(bridge_slave_0) entered blocking state [ 917.688130][T10446] bridge0: port 1(bridge_slave_0) entered disabled state [ 917.696000][T10446] bridge_slave_0: entered allmulticast mode [ 917.711138][T10446] bridge_slave_0: entered promiscuous mode [ 917.763205][T10394] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.976651][T10444] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 918.004514][T10446] bridge0: port 2(bridge_slave_1) entered blocking state [ 918.020761][T10446] bridge0: port 2(bridge_slave_1) entered disabled state [ 918.028740][T10446] bridge_slave_1: entered allmulticast mode [ 918.037791][T10446] bridge_slave_1: entered promiscuous mode [ 918.102618][T10394] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.338050][T10449] bridge0: port 1(bridge_slave_0) entered blocking state [ 918.353886][T10449] bridge0: port 1(bridge_slave_0) entered disabled state [ 918.361708][T10449] bridge_slave_0: entered allmulticast mode [ 918.370775][T10449] bridge_slave_0: entered promiscuous mode [ 918.390514][T10444] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 918.436431][T10442] team0: Port device team_slave_0 added [ 918.590980][T10394] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.761930][T10449] bridge0: port 2(bridge_slave_1) entered blocking state [ 918.769752][T10449] bridge0: port 2(bridge_slave_1) entered disabled state [ 918.777699][T10449] bridge_slave_1: entered allmulticast mode [ 918.786778][T10449] bridge_slave_1: entered promiscuous mode [ 918.803059][T10442] team0: Port device team_slave_1 added [ 919.025051][T10281] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 919.116650][T10444] team0: Port device team_slave_0 added [ 919.142398][T10444] team0: Port device team_slave_1 added [ 919.388198][T10446] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 919.417594][T10442] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 919.424816][T10442] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 919.454480][T10442] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 919.568606][T10444] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 919.576031][T10444] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 919.602507][T10444] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 919.678556][ T2451] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 919.704865][T10449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 919.732929][T10446] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 919.772026][T10449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 919.784621][T10442] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 919.791761][T10442] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 919.818029][T10442] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 919.927519][T10394] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 919.965094][T10444] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 919.972157][T10444] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 919.998485][T10444] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 920.021918][T10394] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 920.135924][ T2451] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 920.587039][T10394] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 920.708480][ T2451] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 920.828664][ T2451] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 920.881855][T10446] team0: Port device team_slave_0 added [ 920.898957][T10449] team0: Port device team_slave_0 added [ 921.051980][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 921.066665][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 921.088595][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 921.111255][T10446] team0: Port device team_slave_1 added [ 921.135923][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 921.149299][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 921.159728][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 921.163025][T10449] team0: Port device team_slave_1 added [ 921.413770][T10442] hsr_slave_0: entered promiscuous mode [ 921.424393][T10442] hsr_slave_1: entered promiscuous mode [ 921.433194][T10442] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 921.441408][T10442] Cannot create hsr debugfs directory [ 921.575129][T10444] hsr_slave_0: entered promiscuous mode [ 921.612162][T10444] hsr_slave_1: entered promiscuous mode [ 921.635321][T10444] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 921.643089][T10444] Cannot create hsr debugfs directory [ 921.855499][T10449] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 921.862664][T10449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 921.889232][T10449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 921.929193][T10492] vcan0 speed is unknown, defaulting to 1000 [ 922.097748][T10446] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 922.107913][T10446] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 922.135398][T10446] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 922.251821][T10446] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 922.259064][T10446] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 922.285676][T10446] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 922.302336][T10449] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 922.314230][T10449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 922.341925][T10449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 922.789829][ T2451] team0: Port device netdevsim3 removed [ 922.803092][ T2451] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.929303][ T2451] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 923.108897][ T2451] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 923.274125][ T8361] Bluetooth: hci0: command tx timeout [ 923.321453][T10449] hsr_slave_0: entered promiscuous mode [ 923.339848][T10449] hsr_slave_1: entered promiscuous mode [ 923.350044][T10449] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 923.359227][T10449] Cannot create hsr debugfs directory [ 923.492473][ T2451] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 923.772978][T10446] hsr_slave_0: entered promiscuous mode [ 923.797520][T10446] hsr_slave_1: entered promiscuous mode [ 923.807512][T10446] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 923.815685][T10446] Cannot create hsr debugfs directory [ 924.521754][T10444] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.697549][T10444] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.944383][T10444] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 925.026998][T10444] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 925.235691][ T2451] bridge_slave_1: left allmulticast mode [ 925.241576][ T2451] bridge_slave_1: left promiscuous mode [ 925.249800][ T2451] bridge0: port 2(bridge_slave_1) entered disabled state [ 925.285387][ T2451] bridge_slave_0: left allmulticast mode [ 925.291260][ T2451] bridge_slave_0: left promiscuous mode [ 925.297921][ T2451] bridge0: port 1(bridge_slave_0) entered disabled state [ 925.315817][ T2451] bridge_slave_1: left allmulticast mode [ 925.321683][ T2451] bridge_slave_1: left promiscuous mode [ 925.328325][ T2451] bridge0: port 2(bridge_slave_1) entered disabled state [ 925.340175][ T2451] bridge_slave_0: left allmulticast mode [ 925.349668][ T2451] bridge_slave_0: left promiscuous mode [ 925.354224][ T8361] Bluetooth: hci0: command tx timeout [ 925.356366][ T2451] bridge0: port 1(bridge_slave_0) entered disabled state [ 925.376253][ T2451] bridge_slave_1: left allmulticast mode [ 925.388601][ T2451] bridge_slave_1: left promiscuous mode [ 925.397789][ T2451] bridge0: port 2(bridge_slave_1) entered disabled state [ 925.413107][ T2451] bridge_slave_0: left allmulticast mode [ 925.420088][ T2451] bridge_slave_0: left promiscuous mode [ 925.429179][ T2451] bridge0: port 1(bridge_slave_0) entered disabled state [ 926.586153][ T2451] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 926.600717][ T2451] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 926.628860][ T2451] bond0 (unregistering): Released all slaves [ 926.653203][ T2451] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 926.669261][ T2451] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 926.689793][ T2451] bond0 (unregistering): Released all slaves [ 926.734342][ T2451] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 926.762913][ T2451] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 926.778604][ T2451] bond0 (unregistering): Released all slaves [ 926.988787][T10492] chnl_net:caif_netlink_parms(): no params data found [ 927.434011][ T8361] Bluetooth: hci0: command tx timeout [ 928.121581][T10492] bridge0: port 1(bridge_slave_0) entered blocking state [ 928.129473][T10492] bridge0: port 1(bridge_slave_0) entered disabled state [ 928.137397][T10492] bridge_slave_0: entered allmulticast mode [ 928.149520][T10492] bridge_slave_0: entered promiscuous mode [ 928.216869][T10492] bridge0: port 2(bridge_slave_1) entered blocking state [ 928.227579][T10492] bridge0: port 2(bridge_slave_1) entered disabled state [ 928.237241][T10492] bridge_slave_1: entered allmulticast mode [ 928.250913][T10492] bridge_slave_1: entered promiscuous mode [ 928.589655][T10444] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 928.632946][T10492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 928.643279][T10444] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 928.783343][T10492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 928.823159][T10444] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 929.015084][T10444] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 929.438501][T10492] team0: Port device team_slave_0 added [ 929.515598][ T8361] Bluetooth: hci0: command tx timeout [ 930.073148][T10492] team0: Port device team_slave_1 added [ 930.108821][ T2451] hsr_slave_0: left promiscuous mode [ 930.117292][ T2451] hsr_slave_1: left promiscuous mode [ 930.125618][ T2451] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 930.133222][ T2451] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 930.143664][ T2451] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 930.151369][ T2451] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 930.173015][ T2451] hsr_slave_0: left promiscuous mode [ 930.180683][ T2451] hsr_slave_1: left promiscuous mode [ 930.191940][ T2451] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 930.200639][ T2451] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 930.211817][ T2451] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 930.219664][ T2451] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 930.243425][ T2451] hsr_slave_0: left promiscuous mode [ 930.251998][ T2451] hsr_slave_1: left promiscuous mode [ 930.259867][ T2451] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 930.268003][ T2451] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 930.278250][ T2451] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 930.286158][ T2451] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 930.316169][ T2451] veth1_macvtap: left promiscuous mode [ 930.321844][ T2451] veth0_macvtap: left promiscuous mode [ 930.327899][ T2451] veth1_vlan: left promiscuous mode [ 930.333631][ T2451] veth0_vlan: left promiscuous mode [ 930.340852][ T2451] veth1_macvtap: left promiscuous mode [ 930.347018][ T2451] veth0_macvtap: left promiscuous mode [ 930.352786][ T2451] veth1_vlan: left promiscuous mode [ 930.358431][ T2451] veth0_vlan: left promiscuous mode [ 930.365811][ T2451] veth1_macvtap: left promiscuous mode [ 930.371478][ T2451] veth0_macvtap: left promiscuous mode [ 930.377438][ T2451] veth1_vlan: left promiscuous mode [ 930.382906][ T2451] veth0_vlan: left promiscuous mode [ 931.178917][ T2451] infiniband syz1: set down [ 931.190570][ T5260] infiniband syz1: ib_query_port failed (-19) [ 931.455328][ T2451] team0 (unregistering): Port device team_slave_1 removed [ 931.507464][ T2451] team0 (unregistering): Port device team_slave_0 removed [ 932.005039][ T2451] team0 (unregistering): Port device team_slave_1 removed [ 932.044377][ T2451] team0 (unregistering): Port device team_slave_0 removed [ 932.504012][ T2451] team0 (unregistering): Port device team_slave_1 removed [ 932.540662][ T2451] team0 (unregistering): Port device team_slave_0 removed [ 932.687243][ T7793] smc: removing ib device syz1 [ 933.983285][T10492] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 933.990647][T10492] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 934.018178][T10492] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 934.145668][T10492] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 934.152829][T10492] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 934.179281][T10492] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 935.485843][T10492] hsr_slave_0: entered promiscuous mode [ 935.497998][T10492] hsr_slave_1: entered promiscuous mode [ 935.703929][T10444] 8021q: adding VLAN 0 to HW filter on device bond0 [ 935.771972][T10444] 8021q: adding VLAN 0 to HW filter on device team0 [ 935.781379][T10446] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 935.886271][T10446] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 935.932538][T10446] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 935.980040][ T2550] bridge0: port 1(bridge_slave_0) entered blocking state [ 935.987753][ T2550] bridge0: port 1(bridge_slave_0) entered forwarding state [ 936.082045][T10446] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 936.114135][T10442] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 936.213071][ T2550] bridge0: port 2(bridge_slave_1) entered blocking state [ 936.220808][ T2550] bridge0: port 2(bridge_slave_1) entered forwarding state [ 936.293784][T10442] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 936.414646][ T2451] IPVS: stop unused estimator thread 0... [ 936.449701][T10449] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 936.479003][T10442] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 936.580690][T10449] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 936.654046][T10442] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 936.716259][T10449] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 936.851050][T10449] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 937.585010][ T2451] bridge_slave_1: left allmulticast mode [ 937.590913][ T2451] bridge_slave_1: left promiscuous mode [ 937.600385][ T2451] bridge0: port 2(bridge_slave_1) entered disabled state [ 937.646114][ T2451] bridge_slave_0: left allmulticast mode [ 937.651961][ T2451] bridge_slave_0: left promiscuous mode [ 937.658790][ T2451] bridge0: port 1(bridge_slave_0) entered disabled state [ 937.673073][ T2451] bridge_slave_1: left allmulticast mode [ 937.680960][ T2451] bridge_slave_1: left promiscuous mode [ 937.689478][ T2451] bridge0: port 2(bridge_slave_1) entered disabled state [ 937.701463][ T2451] bridge_slave_0: left allmulticast mode [ 937.707665][ T2451] bridge_slave_0: left promiscuous mode [ 937.714193][ T2451] bridge0: port 1(bridge_slave_0) entered disabled state [ 938.284434][ T2451] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 938.302707][ T2451] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 938.316738][ T2451] bond0 (unregistering): Released all slaves [ 938.348554][ T2451] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 938.363201][ T2451] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 938.379843][ T2451] bond0 (unregistering): Released all slaves [ 938.844663][T10492] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 938.999463][T10492] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 939.044159][T10492] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 939.074530][T10492] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 939.263046][T10442] 8021q: adding VLAN 0 to HW filter on device bond0 [ 939.313237][T10446] 8021q: adding VLAN 0 to HW filter on device bond0 [ 939.352345][ T2451] hsr_slave_0: left promiscuous mode [ 939.372484][ T2451] hsr_slave_1: left promiscuous mode [ 939.381366][ T2451] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 939.391999][ T2451] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 939.418737][ T2451] hsr_slave_0: left promiscuous mode [ 939.429050][ T2451] hsr_slave_1: left promiscuous mode [ 939.442222][ T2451] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 939.452238][ T2451] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 939.462030][ T2451] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 939.469855][ T2451] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 939.488435][ T2451] veth1_macvtap: left promiscuous mode [ 939.494653][ T2451] veth0_macvtap: left promiscuous mode [ 939.500357][ T2451] veth1_vlan: left promiscuous mode [ 939.505928][ T2451] veth0_vlan: left promiscuous mode [ 939.954613][ T2451] team0 (unregistering): Port device team_slave_1 removed [ 940.005636][ T2451] team0 (unregistering): Port device team_slave_0 removed [ 940.414255][ T2451] team0 (unregistering): Port device team_slave_1 removed [ 940.462641][ T2451] team0 (unregistering): Port device team_slave_0 removed [ 940.818032][T10442] 8021q: adding VLAN 0 to HW filter on device team0 [ 940.848963][T10444] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 940.902563][T10449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 940.986173][T10446] 8021q: adding VLAN 0 to HW filter on device team0 [ 941.031672][ T7793] bridge0: port 1(bridge_slave_0) entered blocking state [ 941.039413][ T7793] bridge0: port 1(bridge_slave_0) entered forwarding state [ 941.158962][ T7793] bridge0: port 1(bridge_slave_0) entered blocking state [ 941.166673][ T7793] bridge0: port 1(bridge_slave_0) entered forwarding state [ 941.355112][ T7793] bridge0: port 2(bridge_slave_1) entered blocking state [ 941.362757][ T7793] bridge0: port 2(bridge_slave_1) entered forwarding state [ 941.378072][ T7793] bridge0: port 2(bridge_slave_1) entered blocking state [ 941.385776][ T7793] bridge0: port 2(bridge_slave_1) entered forwarding state [ 941.429665][T10449] 8021q: adding VLAN 0 to HW filter on device team0 [ 941.660113][ T7793] bridge0: port 1(bridge_slave_0) entered blocking state [ 941.667847][ T7793] bridge0: port 1(bridge_slave_0) entered forwarding state [ 941.943554][ T7793] bridge0: port 2(bridge_slave_1) entered blocking state [ 941.951241][ T7793] bridge0: port 2(bridge_slave_1) entered forwarding state [ 942.029330][T10444] veth0_vlan: entered promiscuous mode [ 942.129691][T10446] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 942.190881][T10492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 942.211294][T10444] veth1_vlan: entered promiscuous mode [ 942.592763][T10492] 8021q: adding VLAN 0 to HW filter on device team0 [ 942.730102][ T7793] bridge0: port 1(bridge_slave_0) entered blocking state [ 942.737833][ T7793] bridge0: port 1(bridge_slave_0) entered forwarding state [ 942.838605][T10444] veth0_macvtap: entered promiscuous mode [ 942.863246][ T7793] bridge0: port 2(bridge_slave_1) entered blocking state [ 942.870977][ T7793] bridge0: port 2(bridge_slave_1) entered forwarding state [ 942.966422][T10444] veth1_macvtap: entered promiscuous mode [ 943.255585][T10492] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 943.266546][T10492] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 943.300921][T10444] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 943.451977][T10444] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 943.587175][T10444] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.596525][T10444] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.605717][T10444] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.614915][T10444] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 944.046805][T10442] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 944.484383][T10446] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 944.726768][T10449] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 944.785863][T10442] veth0_vlan: entered promiscuous mode [ 944.951445][T10442] veth1_vlan: entered promiscuous mode [ 945.096635][T10446] veth0_vlan: entered promiscuous mode [ 945.333188][T10446] veth1_vlan: entered promiscuous mode [ 945.498478][T10442] veth0_macvtap: entered promiscuous mode [ 945.542532][T10442] veth1_macvtap: entered promiscuous mode [ 945.673030][T10442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 945.688080][T10442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 945.705159][T10442] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 945.780519][T10492] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 945.857939][T10442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 945.868813][T10442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 945.883390][T10442] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 946.012229][T10442] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.021502][T10442] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.030754][T10442] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.039861][T10442] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.068110][T10446] veth0_macvtap: entered promiscuous mode [ 946.216203][T10446] veth1_macvtap: entered promiscuous mode [ 946.458912][T10446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 946.469709][T10446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 946.479980][T10446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 946.490728][T10446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 946.505754][T10446] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 946.594693][T10492] veth0_vlan: entered promiscuous mode [ 946.691218][T10492] veth1_vlan: entered promiscuous mode [ 946.791439][T10446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 946.803919][T10446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 946.814111][T10446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 946.824853][T10446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 946.839485][T10446] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 946.977634][T10446] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.986920][T10446] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.996108][T10446] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.005240][T10446] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.195781][T10492] veth0_macvtap: entered promiscuous mode [ 947.305828][T10492] veth1_macvtap: entered promiscuous mode [ 947.547995][T10492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 947.559991][T10492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 947.572191][T10492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 947.582919][T10492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 947.593047][T10492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 947.604053][T10492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 947.618840][T10492] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 947.884180][T10492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 947.894975][T10492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 947.905238][T10492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 947.918676][T10492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 947.929588][T10492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 947.941861][T10492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 947.958785][T10492] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 948.167918][T10492] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.180278][T10492] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.190209][T10492] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.199316][T10492] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.235297][T10449] veth0_vlan: entered promiscuous mode [ 948.368789][T10449] veth1_vlan: entered promiscuous mode [ 948.762904][T10449] veth0_macvtap: entered promiscuous mode [ 948.855754][T10449] veth1_macvtap: entered promiscuous mode [ 949.050057][T10449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 949.060970][T10449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 949.071336][T10449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 949.082129][T10449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 949.092270][T10449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 949.103077][T10449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 949.113295][T10449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 949.124229][T10449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 949.139053][T10449] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 949.445631][T10449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 949.456535][T10449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 949.466706][T10449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 949.478483][T10449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 949.488724][T10449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 949.499457][T10449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 949.509610][T10449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 949.521128][T10449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 949.536704][T10449] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 949.815114][T10449] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.825950][T10449] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.838387][T10449] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.849260][T10449] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 951.844004][ T7439] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 951.851966][ T7439] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 952.008495][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 952.017787][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 954.421718][ T7793] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 954.429970][ T7793] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 954.718135][ T7793] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 954.727294][ T7793] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 955.166097][T10683] netlink: 'syz.1.1364': attribute type 25 has an invalid length. [ 955.175726][T10683] netlink: 'syz.1.1364': attribute type 8 has an invalid length. [ 955.337097][T10683] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1364'. [ 955.346871][T10683] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1364'. [ 955.775569][ T4303] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 955.784592][ T4303] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 956.001042][ T7793] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 956.010122][ T7793] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 956.344520][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 956.742741][T10708] bridge0: port 1(bridge_slave_0) entered disabled state [ 956.752171][ T4303] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 956.760368][ T4303] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 957.002998][T10710] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1367'. [ 957.031565][ T4303] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 957.039979][ T4303] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 957.690286][ T8] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 957.946729][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 958.002309][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 958.079102][ T8] usb 1-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 958.088772][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 958.098309][ T8] usb 1-1: Product: syz [ 958.102709][ T8] usb 1-1: Manufacturer: syz [ 958.107770][ T8] usb 1-1: SerialNumber: syz [ 958.175871][ T8] usb 1-1: config 0 descriptor?? [ 958.404142][ T7793] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 958.412205][ T7793] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 958.716824][ T7439] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 958.726210][ T7439] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 959.902724][T10747] vcan0 speed is unknown, defaulting to 1000 [ 959.911371][T10747] vcan0 speed is unknown, defaulting to 1000 [ 959.918713][T10747] vcan0 speed is unknown, defaulting to 1000 [ 960.659113][T10747] infiniband syz1: set active [ 960.664172][T10747] infiniband syz1: added vcan0 [ 960.669908][ T5260] vcan0 speed is unknown, defaulting to 1000 [ 960.759237][T10747] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 960.777019][T10747] infiniband syz1: Couldn't open port 1 [ 960.921859][ T8] usb 1-1: Found UVC 0.00 device syz (045e:0721) [ 960.929154][ T8] usb 1-1: No valid video chain found. [ 961.039002][ T8] usb 1-1: USB disconnect, device number 17 [ 961.142238][T10747] RDS/IB: syz1: added [ 961.147454][T10747] smc: adding ib device syz1 with port count 1 [ 961.155145][T10747] smc: ib device syz1 port 1 has pnetid [ 961.261644][T10747] vcan0 speed is unknown, defaulting to 1000 [ 961.333193][ T25] vcan0 speed is unknown, defaulting to 1000 [ 962.061416][T10747] vcan0 speed is unknown, defaulting to 1000 [ 962.635209][T10747] vcan0 speed is unknown, defaulting to 1000 [ 962.930119][T10779] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1379'. [ 963.259103][T10747] vcan0 speed is unknown, defaulting to 1000 [ 963.465213][T10781] Can't find ip_set type hash:ip³'*ąt,ip [ 963.909986][T10789] loop2: detected capacity change from 0 to 512 [ 963.978719][T10789] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 964.120641][T10747] vcan0 speed is unknown, defaulting to 1000 [ 964.248710][T10789] EXT4-fs (loop2): 1 orphan inode deleted [ 964.255506][T10789] EXT4-fs (loop2): 1 truncate cleaned up [ 964.403088][T10789] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 964.404628][T10794] loop0: detected capacity change from 0 to 1024 [ 964.518006][ T29] audit: type=1800 audit(1723399792.489:74): pid=10789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1383" name="bus" dev="loop2" ino=17 res=0 errno=0 [ 964.546659][T10789] loop2: detected capacity change from 512 to 11 [ 964.852589][T10446] EXT4-fs warning (device loop2): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -12 reading directory block [ 964.868406][T10446] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5810: Out of memory [ 964.958760][T10446] EXT4-fs error (device loop2): ext4_dirty_inode:6014: inode #2: comm syz-executor: mark_inode_dirty error [ 965.130446][T10747] vcan0 speed is unknown, defaulting to 1000 [ 965.412671][ T29] audit: type=1326 audit(1723399793.329:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10804 comm="syz.0.1386" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f06675779f9 code=0x0 [ 965.546269][T10446] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 966.734303][ T8361] ===================================================== [ 966.741618][ T8361] BUG: KMSAN: uninit-value in l2cap_recv_frame+0xc9c5/0x18b10 [ 966.755114][ T8361] l2cap_recv_frame+0xc9c5/0x18b10 [ 966.760445][ T8361] l2cap_recv_acldata+0xdd9/0x2ac0 [ 966.767686][ T8361] hci_rx_work+0xb38/0x1130 [ 966.772400][ T8361] process_scheduled_works+0xae0/0x1c40 [ 966.778216][ T8361] worker_thread+0xea5/0x1520 [ 966.783083][ T8361] kthread+0x3dd/0x540 [ 966.787722][ T8361] ret_from_fork+0x6d/0x90 [ 966.792317][ T8361] ret_from_fork_asm+0x1a/0x30 [ 966.797446][ T8361] [ 966.799887][ T8361] Uninit was created at: [ 966.804456][ T8361] kmem_cache_alloc_node_noprof+0x6bf/0xb80 [ 966.810557][ T8361] kmalloc_reserve+0x13d/0x4a0 [ 966.815575][ T8361] __alloc_skb+0x363/0x7b0 [ 966.820197][ T8361] vhci_write+0x128/0x910 [ 966.824907][ T8361] vfs_write+0xb2f/0x1550 [ 966.829403][ T8361] ksys_write+0x20f/0x4c0 [ 966.835470][ T8361] __x64_sys_write+0x93/0xe0 [ 966.840244][ T8361] x64_sys_call+0x306a/0x3ba0 [ 966.845251][ T8361] do_syscall_64+0xcd/0x1e0 [ 966.849932][ T8361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 966.862082][ T8361] [ 966.866393][ T8361] CPU: 1 UID: 0 PID: 8361 Comm: kworker/u9:1 Not tainted 6.11.0-rc2-syzkaller-00257-g5189dafa4cf9 #0 [ 966.877543][ T8361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 966.887957][ T8361] Workqueue: hci0 hci_rx_work [ 966.892851][ T8361] ===================================================== [ 966.899997][ T8361] Disabling lock debugging due to kernel taint [ 966.906360][ T8361] Kernel panic - not syncing: kmsan.panic set ... [ 966.912928][ T8361] CPU: 1 UID: 0 PID: 8361 Comm: kworker/u9:1 Tainted: G B 6.11.0-rc2-syzkaller-00257-g5189dafa4cf9 #0 [ 966.925473][ T8361] Tainted: [B]=BAD_PAGE [ 966.929729][ T8361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 966.939932][ T8361] Workqueue: hci0 hci_rx_work [ 966.944823][ T8361] Call Trace: [ 966.948222][ T8361] [ 966.951247][ T8361] dump_stack_lvl+0x216/0x2d0 [ 966.956106][ T8361] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 966.962122][ T8361] dump_stack+0x1e/0x30 [ 966.966459][ T8361] panic+0x4e2/0xcd0 [ 966.970523][ T8361] ? kmsan_get_metadata+0x61/0x1c0 [ 966.975850][ T8361] kmsan_report+0x2c7/0x2d0 [ 966.980542][ T8361] ? kmsan_get_metadata+0x60/0x1c0 [ 966.985850][ T8361] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 966.991858][ T8361] ? __msan_warning+0x95/0x120 [ 966.996791][ T8361] ? l2cap_recv_frame+0xc9c5/0x18b10 [ 967.002270][ T8361] ? l2cap_recv_acldata+0xdd9/0x2ac0 [ 967.007747][ T8361] ? hci_rx_work+0xb38/0x1130 [ 967.012615][ T8361] ? process_scheduled_works+0xae0/0x1c40 [ 967.018515][ T8361] ? worker_thread+0xea5/0x1520 [ 967.023547][ T8361] ? kthread+0x3dd/0x540 [ 967.027976][ T8361] ? ret_from_fork+0x6d/0x90 [ 967.032720][ T8361] ? ret_from_fork_asm+0x1a/0x30 [ 967.037854][ T8361] ? __update_load_avg_cfs_rq+0xaac/0x10e0 [ 967.043851][ T8361] ? kmsan_get_metadata+0x13e/0x1c0 [ 967.049245][ T8361] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 967.055257][ T8361] ? min_vruntime_cb_rotate+0x12d/0x2b0 [ 967.061099][ T8361] ? kmsan_get_metadata+0x13e/0x1c0 [ 967.066504][ T8361] ? kmsan_get_metadata+0x13e/0x1c0 [ 967.071899][ T8361] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 967.077909][ T8361] ? kmsan_get_metadata+0x13e/0x1c0 [ 967.083301][ T8361] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 967.089486][ T8361] __msan_warning+0x95/0x120 [ 967.094251][ T8361] l2cap_recv_frame+0xc9c5/0x18b10 [ 967.099565][ T8361] ? __update_load_avg_cfs_rq+0x121/0x10e0 [ 967.105575][ T8361] ? kmsan_get_metadata+0x13e/0x1c0 [ 967.110969][ T8361] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 967.116989][ T8361] ? kmsan_get_metadata+0x13e/0x1c0 [ 967.122395][ T8361] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 967.128418][ T8361] ? _raw_spin_lock_irqsave+0x35/0xc0 [ 967.133957][ T8361] ? filter_irq_stacks+0x60/0x1a0 [ 967.139147][ T8361] ? kmsan_get_metadata+0x13e/0x1c0 [ 967.144536][ T8361] ? kmsan_get_metadata+0x13e/0x1c0 [ 967.149929][ T8361] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 967.156444][ T8361] ? kmsan_get_metadata+0x13e/0x1c0 [ 967.161841][ T8361] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 967.167866][ T8361] l2cap_recv_acldata+0xdd9/0x2ac0 [ 967.173191][ T8361] hci_rx_work+0xb38/0x1130 [ 967.177908][ T8361] ? __pfx_hci_rx_work+0x10/0x10 [ 967.183032][ T8361] process_scheduled_works+0xae0/0x1c40 [ 967.188807][ T8361] worker_thread+0xea5/0x1520 [ 967.193676][ T8361] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 967.199715][ T8361] kthread+0x3dd/0x540 [ 967.203981][ T8361] ? __pfx_worker_thread+0x10/0x10 [ 967.209283][ T8361] ? __pfx_kthread+0x10/0x10 [ 967.214063][ T8361] ret_from_fork+0x6d/0x90 [ 967.218632][ T8361] ? __pfx_kthread+0x10/0x10 [ 967.223418][ T8361] ret_from_fork_asm+0x1a/0x30 [ 967.228387][ T8361] [ 967.231718][ T8361] Kernel Offset: disabled [ 967.236098][ T8361] Rebooting in 86400 seconds..