last executing test programs: 3m2.488216994s ago: executing program 1 (id=69): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000031000/0x18000)=nil, 0x0, 0x0, 0x52, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00800010003b15fd070000fbdbdf", @ANYBLOB="0000000000b401001c00128009000100626f"], 0x3c}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x4000081, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x80000, 0x5, 0x0, 0x2, 0x8001], 0x0, 0x2200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m1.219138108s ago: executing program 1 (id=79): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty, 0x3}, 0x1c) shutdown(r0, 0x2) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000880)={@in6={{0xa, 0x4e23, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}}, 0x0, 0x0, 0x27, 0x0, "bb353738626e3fc7c9f1cf53b6a7b4e24740bd4c0b42a25d7214bf92594925208a0e2f964e654dc534a6b24d4993fcf19b2d07ee818a118a7c49462189316d556d2ccd00"}, 0xd8) sendto$inet6(r0, 0x0, 0x0, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) 3m0.530730311s ago: executing program 1 (id=82): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) unshare(0x22020600) r1 = accept$alg(r0, 0x0, 0x0) sendmsg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=[{0xc0, 0x0, 0x0, "eedae1af1761c038e28047c0f6ead4d7346a25899590beb03a6a09edbd96e8028f6ab6be92368e56fdb939d613b0e8b0e9efb197a0915d1cd880251246c129ef073548a2b1802562fa0e6efb6398a283da44bc4800d737a6b283ebf145cb57c57e8db7b7797de210c5ee8a6762a7159f2a5e5e7b369ee22650630fcf0d638a23a3487e7ff6562a3672b5e6961eb3c6f6e3acfe07003994b6e9c04eabb1e14690390bfc49bc4be21647"}, {0xc10, 0x101, 0x3, "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"}, {0xe8, 0x10b, 0x1, "79c8795757ff6ef9fa3e8596a0e83be9337161ee5cc376c5b624c923fe94873a2984142456e0475ba5ac93b6352885222aea568b827e254ef3f7cacdc3c46d71393dc934753aed81b422323b2deb651eae4eaa58d573a2d6dc4288304e5a244b0d8fd1d5c9d0892ef63507ea9a058ec496cc58c08a335e1a2c446ad5b20b4546165fdc659f1609e67fdb0ea5f10e788510e7b541182187ce99e037ce2343b11c1ab2ea1d8cc49ac5e4c179f7bdc8786bc354f386c44751977ef684ab9f186d18ba5b50c5cfdd9940ad3f07519db87738c6"}, {0xf8, 0x118, 0xc, "b97970f1196f735bea2934422be16c88168c5ef6528a970e6f67240decf43658e479b17d79dc76172a4f85655afd5db9d0ebf46f23838c4fa48aa44ec41d77d5d4edab9b3166bd9600e8d04c6a5ac30dc20198b8205cc1c85c31a7048addaa0f77db1ed6e59d6b7deacc9290e77d1def759e9c384caafb75e218cc9159ab240347472c98ccfa81f683664df18168960483332167759b19fb1a0ebc1a4f87e600f5ce054aa8b898982b17a5638d174fac1b3906e70a1400ab592a6eb7e052ba0cde06a8bf6fde5f67d7eb97dc7f6e606e3e44cda5dce535c7d3f6ac66d3ade47a5375"}, {0xd58, 0x163, 0x6, "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"}], 0x1c08}, 0x20048080) 2m59.893042215s ago: executing program 1 (id=88): copy_file_range(0xffffffffffffffff, &(0x7f00000002c0)=0xfffffffffffffff8, 0xffffffffffffffff, 0x0, 0x7, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e22, 0x6a, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}, 0x81, 0x401}, &(0x7f0000000140)=0x90) 2m59.387320563s ago: executing program 1 (id=92): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRES8=r0, @ANYRESOCT=r0], 0x18}, 0x1, 0x0, 0x0, 0x40008}, 0x20000000) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xff, 0x0, 0x7fff0000}]}) r2 = syz_io_uring_setup(0x810, &(0x7f0000000480)={0x0, 0x5c2c, 0x80, 0x2, 0x261}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0xda1a0b6210925d15, 0x0, @fd=r2, 0x0, 0x0, 0x1, 0x1}) io_uring_enter(r2, 0x22d0, 0x20, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DEST(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00', @ANYBLOB="00022cbd7000fddbdf25080000000c"], 0x20}, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r7, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008"], 0x44}, 0x1, 0x2}, 0x40000) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000019c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000001a80)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x10000002}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x1c, r8, 0x400, 0x401, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0xc001) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f00000000c0)={&(0x7f0000002000), 0x0, 0x2}, 0x1) close_range(r1, 0xffffffffffffffff, 0x0) 2m58.057394707s ago: executing program 1 (id=100): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffc, 0x6, 0x4, @buffer={0x300, 0x56, &(0x7f0000000440)=""/86}, &(0x7f0000000380)="259374c94982", 0x0, 0x0, 0x14, 0x0, 0x0}) 2m40.626088416s ago: executing program 32 (id=100): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffc, 0x6, 0x4, @buffer={0x300, 0x56, &(0x7f0000000440)=""/86}, &(0x7f0000000380)="259374c94982", 0x0, 0x0, 0x14, 0x0, 0x0}) 16.083283463s ago: executing program 2 (id=394): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008000000", @ANYRES32, @ANYBLOB], 0x48) 15.515849672s ago: executing program 2 (id=397): mount$bind(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='\x00', 0x89901) mount_setattr(r0, 0x0, 0x9000, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) setxattr(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="757365722e002ac100c5ad25d4d08eab5971787ea380eb5989b42994f6193d52f282134c37f6f20fdf5bc2f5cffb51eee6f94d0baa8bd48e10622ed862f846a9b8d4a832d4a17004f5958c8ec936d67a53ae6563e5c4fe57f83a9d866a11065a0145d6974ac826357c019b6502cbec692ca142e689e2bccaf5710a1d59201be53c8c0dd426bc4f22d7f32ed473b73c74002979f5d49c15b2dccf045988afbefd07dea0c7336ca5d9143b1aa26c24cb325df28b2b7b5622a378831b0c"], 0x0, 0x0, 0x2) sendmsg$inet(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) pipe(&(0x7f0000000540)={0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r2, 0x0, 0x0, 0x0, 0xc884, 0x1}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r6, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e6365"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 13.291038688s ago: executing program 0 (id=400): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000540)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x0, {0x0, 0x1, 0x4}, 0x2}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="00010100004000", 0x7}, {&(0x7f0000000300)="5411", 0x2}], 0x2}, 0x4004) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/17, 0x11}, {0x0}], 0x2) 12.579692589s ago: executing program 3 (id=403): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfffffc99}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x43) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)}}], 0x56, 0x10) 12.108126743s ago: executing program 0 (id=404): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x401}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}}, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f00000000c0)={0x9, 0x6, 0x1c, 0x6, 0x5, "5db0beb81a6b4b4cd28bd0119d959f0fcaa21c"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0xd) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0xb3) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x3) 12.106124808s ago: executing program 3 (id=405): pipe2$watch_queue(&(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = add_key$user(&(0x7f0000000100), 0x0, &(0x7f0000000180)="8e", 0x1, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r3, 0x9f) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0x33) 12.061379727s ago: executing program 4 (id=406): bpf$MAP_CREATE(0x0, 0x0, 0x48) 11.711050266s ago: executing program 2 (id=407): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x400, 0x0) preadv2(r0, &(0x7f0000000840)=[{&(0x7f0000000280)=""/165, 0xa5}], 0x1, 0x7fffffff, 0x100, 0x18) 11.551253624s ago: executing program 3 (id=408): bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 11.550992741s ago: executing program 4 (id=409): sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, 0x0, 0x20000081) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x9100, &(0x7f0000000140)={0x6, 0x8a, 0x40000}, 0x37) socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @rand_addr, 0x3}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4008840, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000400)="17", 0x1, 0x40000, 0x0, 0x0) 11.524057822s ago: executing program 0 (id=410): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xdf7e}, 0x94) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000, 0x4000, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.303024624s ago: executing program 4 (id=411): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/user\x00') open_by_handle_at(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="20000000f1000100", @ANYRES32=r0], 0x0) 2.225700084s ago: executing program 2 (id=412): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$inet6(0xa, 0x80002, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff}) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) socket$inet6_tcp(0xa, 0x1, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) socket$inet6(0xa, 0x5, 0x0) socket(0x200000000000011, 0x4000000000080002, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 2.225328486s ago: executing program 3 (id=413): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000540)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x0, {0x0, 0x1, 0x4}, 0x2}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, 0x0, 0x4004) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/17, 0x11}, {0x0}], 0x2) 1.835733531s ago: executing program 0 (id=414): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfffffc99}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x43) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)}}], 0x56, 0x10) 1.680833319s ago: executing program 4 (id=415): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="4f4741494e20274361707475726520566f6c756d65272030303030303030303030303030303030303030300a494741494e0a50486ce2369e9e7101d386d8c8cc4f4e454f55540a535045414b45"], 0xaf) close(r0) 1.286339346s ago: executing program 0 (id=416): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x39, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0xa, 0x200008, 0x5, 0x1ffff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x37b, @tick=0x8440, 0xff, {}, 0x0, 0x0, 0xfb}) 1.271874567s ago: executing program 2 (id=417): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f00000099c0)=[{{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0xff6}], 0x1}, 0x80000001}], 0x1, 0x40002000, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) 1.012452304s ago: executing program 3 (id=418): pipe2$watch_queue(&(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = add_key$user(&(0x7f0000000100), 0x0, &(0x7f0000000180)="8e", 0x1, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r3, 0x9f) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0x33) 1.006979232s ago: executing program 4 (id=419): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0xfffffffd, 0xa, 0x400000, 0x17, "3eccd8000000000000000010000000040100"}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x401}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}}, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f00000000c0)={0x9, 0x6, 0x1c, 0x6, 0x5, "5db0beb81a6b4b4cd28bd0119d959f0fcaa21c"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0xd) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0xb3) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x3) 742.187608ms ago: executing program 0 (id=420): mount$bind(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='\x00', 0x89901) mount_setattr(r0, 0x0, 0x9000, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) setxattr(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="757365722e002ac100c5ad25d4d08eab5971787ea380eb5989b42994f6193d52f282134c37f6f20fdf5bc2f5cffb51eee6f94d0baa8bd48e10622ed862f846a9b8d4a832d4a17004f5958c8ec936d67a53ae6563e5c4fe57f83a9d866a11065a0145d6974ac826357c019b6502cbec692ca142e689e2bccaf5710a1d59201be53c8c0dd426bc4f22d7f32ed473b73c74002979f5d49c15b2dccf045988afbefd07dea0c7336ca5d9143b1aa26c24cb325df28b2b7b5622a378831b0c"], 0x0, 0x0, 0x2) sendmsg$inet(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) pipe(&(0x7f0000000540)={0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r2, 0x0, 0x0, 0x0, 0xc884, 0x1}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r6, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e6365"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 434.968937ms ago: executing program 3 (id=421): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfe000/0x400000)=nil) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x3, 0x0, 0x8, 0xffffffffffffffff, 0x1000, 0x8000, 0x1001002, 0x4, 0x6000000, 0x4, 0xd3, 0x2372, 0x8bd7, 0xfffffffffffffefe, 0x401, 0x20000000000020], 0x25000, 0x216146}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 394.79865ms ago: executing program 4 (id=422): r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000040)=0x7, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, '\x00', 0x8, 0x2c, 0x1, @private2, @mcast2, {[@hopopts={0xff}]}}}}}, 0x0) recvmmsg(r0, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x10102, 0x0) 0s ago: executing program 2 (id=423): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xdf7e}, 0x94) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000380)={0x2, 0x34000, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000, 0x4000, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.168' (ED25519) to the list of known hosts. [ 163.300862][ T5754] cgroup: Unknown subsys name 'net' [ 163.424661][ T5754] cgroup: Unknown subsys name 'cpuset' [ 163.438722][ T5754] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 168.951736][ T5754] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 173.441762][ T5775] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 173.467032][ T5779] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 173.475510][ T5779] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 173.487270][ T5782] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 173.496283][ T5782] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 173.513648][ T5784] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 173.525191][ T5784] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 173.535199][ T5784] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 173.544566][ T5784] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 173.553802][ T5784] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 173.565044][ T5784] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 173.574168][ T5784] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 173.585364][ T5784] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 173.593962][ T5784] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 173.607985][ T5789] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 173.620927][ T5786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 173.632323][ T5789] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 173.646824][ T5789] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 173.663713][ T5786] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 173.667334][ T5791] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 173.677975][ T5786] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 173.686789][ T5792] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 173.694765][ T5791] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 173.710833][ T5784] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 173.762382][ T5775] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 175.043836][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 175.256403][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 175.436934][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 175.461082][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 175.717306][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 175.789618][ T5779] Bluetooth: hci3: command tx timeout [ 175.795271][ T5779] Bluetooth: hci2: command tx timeout [ 175.801127][ T5775] Bluetooth: hci1: command tx timeout [ 175.806543][ T5784] Bluetooth: hci0: command tx timeout [ 175.855893][ T5779] Bluetooth: hci4: command tx timeout [ 176.078346][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.109110][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.126282][ T5773] bridge_slave_0: entered allmulticast mode [ 176.147791][ T5773] bridge_slave_0: entered promiscuous mode [ 176.204402][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.226327][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.233974][ T5773] bridge_slave_1: entered allmulticast mode [ 176.259478][ T5773] bridge_slave_1: entered promiscuous mode [ 176.390537][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.399338][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.407159][ T5772] bridge_slave_0: entered allmulticast mode [ 176.416865][ T5772] bridge_slave_0: entered promiscuous mode [ 176.504995][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.516608][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.524224][ T5772] bridge_slave_1: entered allmulticast mode [ 176.533330][ T5772] bridge_slave_1: entered promiscuous mode [ 176.575566][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.587273][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.595087][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.603615][ T5780] bridge_slave_0: entered allmulticast mode [ 176.612037][ T5780] bridge_slave_0: entered promiscuous mode [ 176.678666][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.711886][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.719475][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.727066][ T5780] bridge_slave_1: entered allmulticast mode [ 176.735324][ T5780] bridge_slave_1: entered promiscuous mode [ 176.765075][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.773053][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.780843][ T5781] bridge_slave_0: entered allmulticast mode [ 176.789142][ T5781] bridge_slave_0: entered promiscuous mode [ 176.878683][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.888784][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.897244][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.904736][ T5781] bridge_slave_1: entered allmulticast mode [ 176.913177][ T5781] bridge_slave_1: entered promiscuous mode [ 176.947948][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.955429][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.963551][ T5777] bridge_slave_0: entered allmulticast mode [ 176.972040][ T5777] bridge_slave_0: entered promiscuous mode [ 177.012815][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.052755][ T5773] team0: Port device team_slave_0 added [ 177.069285][ T5773] team0: Port device team_slave_1 added [ 177.075533][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.083901][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.091876][ T5777] bridge_slave_1: entered allmulticast mode [ 177.102021][ T5777] bridge_slave_1: entered promiscuous mode [ 177.139042][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.173981][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.244399][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.359646][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.448429][ T5772] team0: Port device team_slave_0 added [ 177.482523][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.489719][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.515929][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.537506][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.553863][ T5780] team0: Port device team_slave_0 added [ 177.567473][ T5772] team0: Port device team_slave_1 added [ 177.597636][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.604841][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.631241][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.650514][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.668426][ T5780] team0: Port device team_slave_1 added [ 177.704167][ T5781] team0: Port device team_slave_0 added [ 177.807893][ T5781] team0: Port device team_slave_1 added [ 177.856593][ T5779] Bluetooth: hci0: command tx timeout [ 177.856636][ T5782] Bluetooth: hci3: command tx timeout [ 177.866128][ T5782] Bluetooth: hci2: command tx timeout [ 177.868199][ T5779] Bluetooth: hci1: command tx timeout [ 177.901454][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.908685][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.935222][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.937582][ T5779] Bluetooth: hci4: command tx timeout [ 178.041743][ T5777] team0: Port device team_slave_0 added [ 178.050282][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.057729][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 178.083988][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.097899][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.105000][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 178.131463][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.145446][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.152856][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 178.179286][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.203369][ T5773] hsr_slave_0: entered promiscuous mode [ 178.211930][ T5773] hsr_slave_1: entered promiscuous mode [ 178.227939][ T5777] team0: Port device team_slave_1 added [ 178.236746][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.243807][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 178.271784][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.301479][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.308679][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 178.334909][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.441496][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.448815][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 178.475144][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.491872][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.499424][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 178.526174][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.810120][ T5781] hsr_slave_0: entered promiscuous mode [ 178.818766][ T5781] hsr_slave_1: entered promiscuous mode [ 178.827057][ T5781] debugfs: 'hsr0' already exists in 'hsr' [ 178.832907][ T5781] Cannot create hsr debugfs directory [ 178.852509][ T5780] hsr_slave_0: entered promiscuous mode [ 178.861281][ T5780] hsr_slave_1: entered promiscuous mode [ 178.869312][ T5780] debugfs: 'hsr0' already exists in 'hsr' [ 178.875152][ T5780] Cannot create hsr debugfs directory [ 178.922806][ T5772] hsr_slave_0: entered promiscuous mode [ 178.931450][ T5772] hsr_slave_1: entered promiscuous mode [ 178.939674][ T5772] debugfs: 'hsr0' already exists in 'hsr' [ 178.945502][ T5772] Cannot create hsr debugfs directory [ 179.022354][ T5777] hsr_slave_0: entered promiscuous mode [ 179.032213][ T5777] hsr_slave_1: entered promiscuous mode [ 179.040521][ T5777] debugfs: 'hsr0' already exists in 'hsr' [ 179.046573][ T5777] Cannot create hsr debugfs directory [ 179.936083][ T5779] Bluetooth: hci1: command tx timeout [ 179.936623][ T5775] Bluetooth: hci2: command tx timeout [ 179.941650][ T5779] Bluetooth: hci0: command tx timeout [ 179.947437][ T5782] Bluetooth: hci3: command tx timeout [ 180.015922][ T5782] Bluetooth: hci4: command tx timeout [ 180.258747][ T5773] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 180.293004][ T5773] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 180.312249][ T5773] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 180.331451][ T5773] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 180.461794][ T5781] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 180.484818][ T5781] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 180.527558][ T5781] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 180.565048][ T5781] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 180.748255][ T5777] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 180.769747][ T5777] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 180.791411][ T5777] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 180.813886][ T5777] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 181.039286][ T5772] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 181.080521][ T5772] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 181.103020][ T5772] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 181.122545][ T5772] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 181.393867][ T5780] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 181.431523][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.455362][ T5780] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 181.478466][ T5780] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 181.499494][ T5780] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 181.713614][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.864166][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.871584][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.899710][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.016661][ T5782] Bluetooth: hci0: command tx timeout [ 182.016761][ T5775] Bluetooth: hci3: command tx timeout [ 182.022382][ T5782] Bluetooth: hci2: command tx timeout [ 182.033048][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.033968][ T5779] Bluetooth: hci1: command tx timeout [ 182.041241][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.085001][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.096625][ T5779] Bluetooth: hci4: command tx timeout [ 182.104870][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.222351][ T135] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.229880][ T135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.248455][ T135] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.255962][ T135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.382965][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.405045][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.555007][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.562621][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.596840][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.665779][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.673153][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.855564][ T130] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.863154][ T130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.955780][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.963246][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.120770][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.469765][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.678935][ T1015] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.686553][ T1015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.815405][ T1015] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.823018][ T1015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.901432][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.019815][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.728923][ T5781] veth0_vlan: entered promiscuous mode [ 184.810908][ T5781] veth1_vlan: entered promiscuous mode [ 185.021506][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.231287][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.410616][ T5781] veth0_macvtap: entered promiscuous mode [ 185.506735][ T5781] veth1_macvtap: entered promiscuous mode [ 185.545533][ T5777] veth0_vlan: entered promiscuous mode [ 185.685487][ T5777] veth1_vlan: entered promiscuous mode [ 185.715220][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.768368][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.811930][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.882373][ T135] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.891972][ T135] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.931580][ T135] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.942157][ T135] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.060955][ T5773] veth0_vlan: entered promiscuous mode [ 186.100080][ T5772] veth0_vlan: entered promiscuous mode [ 186.120946][ T5777] veth0_macvtap: entered promiscuous mode [ 186.211879][ T5773] veth1_vlan: entered promiscuous mode [ 186.242164][ T5777] veth1_macvtap: entered promiscuous mode [ 186.273621][ T5772] veth1_vlan: entered promiscuous mode [ 186.501466][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.548666][ T5780] veth0_vlan: entered promiscuous mode [ 186.598088][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.675256][ T1145] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.686413][ T1145] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.695415][ T1145] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.720705][ T5780] veth1_vlan: entered promiscuous mode [ 186.761440][ T1145] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.894803][ T5773] veth0_macvtap: entered promiscuous mode [ 186.943803][ T5773] veth1_macvtap: entered promiscuous mode [ 186.998517][ T5772] veth0_macvtap: entered promiscuous mode [ 187.091770][ T5772] veth1_macvtap: entered promiscuous mode [ 187.150155][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.306201][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.349619][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.440560][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.450022][ T1015] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.465086][ T1015] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.530708][ T1015] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.554246][ T5780] veth0_macvtap: entered promiscuous mode [ 187.628170][ T1015] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.647515][ T1015] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.684194][ T1015] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.710168][ T1015] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.738546][ T5780] veth1_macvtap: entered promiscuous mode [ 187.772908][ T1015] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.034661][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.161898][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.297991][ T130] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.324983][ T130] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.411824][ T130] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.456352][ T130] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.726638][ T130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.734661][ T130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.035398][ T1015] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.053337][ T1015] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.515594][ T5781] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 192.213953][ T135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.253041][ T135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.445447][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.499526][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.060631][ T135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.112693][ T135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.199660][ T5970] syz.1.7 uses obsolete (PF_INET,SOCK_PACKET) [ 194.262762][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.283462][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.423824][ T5835] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 194.476678][ T5835] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 194.573535][ T135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.605128][ T135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.867923][ T135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.912111][ T135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.156644][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.185913][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.495590][ T5972] fido_id[5972]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 195.571214][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.599370][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.065922][ T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 196.194196][ T5981] bond_slave_0: entered promiscuous mode [ 196.200346][ T5981] bond_slave_1: entered promiscuous mode [ 196.246225][ T5981] vlan2: entered promiscuous mode [ 196.264758][ T24] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 196.295986][ T5981] bond0: entered promiscuous mode [ 196.301426][ T24] usb 2-1: config 0 has no interface number 0 [ 196.334892][ T24] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 196.435889][ T24] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 196.467033][ T5987] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 196.500568][ T24] usb 2-1: config 0 interface 255 has no altsetting 0 [ 196.514560][ T24] usb 2-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 196.579861][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.626665][ T24] usb 2-1: config 0 descriptor?? [ 196.644590][ T24] ums-realtek 2-1:0.255: USB Mass Storage device detected [ 196.950320][ T24] usb 2-1: USB disconnect, device number 2 [ 198.852730][ T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 199.176692][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 199.413484][ T24] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 199.567175][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 199.637466][ T24] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 199.637627][ T24] usb 5-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 199.637747][ T24] usb 5-1: Product: syz [ 199.637868][ T24] usb 5-1: Manufacturer: syz [ 199.637978][ T24] usb 5-1: SerialNumber: syz [ 199.658568][ T24] usb 5-1: config 0 descriptor?? [ 199.761977][ T24] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 200.817590][ T6046] usb 5-1: Failed to submit usb control message: -110 [ 200.824765][ T6046] usb 5-1: unable to send the bmi data to the device: -110 [ 200.999274][ T6046] usb 5-1: unable to get target info from device [ 201.127641][ T6046] usb 5-1: could not get target info (-110) [ 201.275887][ T6046] usb 5-1: could not probe fw (-110) [ 201.534037][ T5116] usb 5-1: USB disconnect, device number 2 [ 201.855067][ T6063] loop8: detected capacity change from 0 to 8 [ 201.902389][ T6063] Dev loop8: unable to read RDB block 8 [ 201.937246][ T6063] loop8: unable to read partition table [ 201.996759][ T6063] loop8: partition table beyond EOD, truncated [ 202.031251][ T6063] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 203.076496][ T24] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 203.356850][ T24] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 203.465218][ T24] usb 5-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 203.494763][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.910408][ T6083] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 203.970420][ T24] usb 5-1: Product: syz [ 203.974809][ T24] usb 5-1: Manufacturer: syz [ 203.979872][ T24] usb 5-1: SerialNumber: syz [ 204.498439][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 204.548148][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 204.856174][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 204.946886][ T6091] Zero length message leads to an empty skb [ 204.958477][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 205.515986][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 205.525833][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 205.595754][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 205.615718][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 205.666047][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 205.778003][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 207.555248][ T29] audit: type=1326 audit(1772402264.770:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6071 comm="syz.4.29" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f99b259c799 code=0x0 [ 207.589176][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 207.598099][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 208.243436][ T6108] loop7: detected capacity change from 0 to 16384 [ 208.340216][ T24] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 208.381025][ T24] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 208.616254][ T6109] loop7: detected capacity change from 16384 to 0 [ 208.623254][ C1] I/O error, dev loop7, sector 1280 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2 [ 209.000706][ T24] usb 5-1: USB disconnect, device number 3 [ 209.295548][ T6123] netlink: 32 bytes leftover after parsing attributes in process `syz.4.46'. [ 211.348019][ T6054] udevd[6054]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 217.488872][ T6229] Bluetooth: MGMT ver 1.23 [ 217.630550][ T6232] netlink: 8 bytes leftover after parsing attributes in process `syz.1.92'. [ 220.012732][ T5782] Bluetooth: hci0: command 0x0c1a tx timeout [ 220.957219][ T5779] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 223.346120][ T5835] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 225.813341][ T5835] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.870449][ T5835] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 225.936104][ T5835] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.009020][ T5835] usb 5-1: config 0 descriptor?? [ 226.369573][ T5835] usb 5-1: can't set config #0, error -71 [ 226.417340][ T5835] usb 5-1: USB disconnect, device number 4 [ 232.057134][ T6305] loop8: detected capacity change from 0 to 7 [ 232.117772][ T6305] Dev loop8: unable to read RDB block 7 [ 232.123646][ T6305] loop8: unable to read partition table [ 232.177255][ T6305] loop8: partition table beyond EOD, truncated [ 232.187863][ T6305] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 232.657781][ T5835] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 232.877174][ T5835] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.845874][ T5835] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 233.859525][ T5835] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.880601][ T5835] usb 5-1: config 0 descriptor?? [ 235.648695][ T24] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 235.908645][ T5835] pwc: Askey VC010 type 2 USB webcam detected. [ 236.901820][ T5835] pwc: send_video_command error -71 [ 236.912783][ T5835] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 236.921072][ T5835] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 236.933189][ T24] usb 3-1: device descriptor read/all, error -71 [ 241.009995][ T5835] usb 5-1: USB disconnect, device number 5 [ 245.901140][ T5782] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 245.910843][ T5782] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 245.934600][ T5782] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 245.965329][ T5782] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 245.976687][ T5782] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 246.566284][ T5833] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 246.768710][ T5833] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.801739][ T5833] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 246.829568][ T5833] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.919279][ T5833] usb 1-1: config 0 descriptor?? [ 247.010487][ T5833] pwc: Askey VC010 type 2 USB webcam detected. [ 247.401720][ T5833] pwc: recv_control_msg error -32 req 02 val 2b00 [ 247.441888][ T5833] pwc: recv_control_msg error -32 req 02 val 2700 [ 247.483811][ T5833] pwc: recv_control_msg error -32 req 02 val 2c00 [ 247.504550][ T5833] pwc: recv_control_msg error -32 req 04 val 1000 [ 247.544941][ T5833] pwc: recv_control_msg error -32 req 04 val 1300 [ 247.568192][ T5833] pwc: recv_control_msg error -32 req 04 val 1400 [ 247.616487][ T5833] pwc: recv_control_msg error -32 req 02 val 2000 [ 247.634694][ T5833] pwc: recv_control_msg error -32 req 02 val 2100 [ 247.659593][ T5116] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 247.834994][ T5116] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 247.887453][ T5833] pwc: recv_control_msg error -32 req 02 val 2500 [ 247.907326][ T5116] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 247.920166][ T6356] chnl_net:caif_netlink_parms(): no params data found [ 247.951749][ T5116] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 248.029933][ T5116] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 248.056001][ T5116] usb 4-1: SerialNumber: syz [ 248.096516][ T5782] Bluetooth: hci5: command tx timeout [ 248.111162][ T5833] pwc: recv_control_msg error -71 req 02 val 2600 [ 248.127231][ T5833] pwc: recv_control_msg error -71 req 02 val 2900 [ 248.146951][ T5833] pwc: recv_control_msg error -71 req 02 val 2800 [ 248.173769][ T5833] pwc: recv_control_msg error -71 req 04 val 1100 [ 248.183417][ T5833] pwc: recv_control_msg error -71 req 04 val 1200 [ 248.220989][ T5833] pwc: Registered as video103. [ 248.262213][ T5833] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5 [ 248.426724][ T5833] usb 1-1: USB disconnect, device number 2 [ 248.540917][ T5116] usb 4-1: skipping empty audio interface (v1) [ 249.312682][ T5116] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 249.349613][ T6386] netlink: 'syz.2.144': attribute type 10 has an invalid length. [ 249.370814][ T6386] netlink: 256 bytes leftover after parsing attributes in process `syz.2.144'. [ 249.390733][ T5116] usb 4-1: USB disconnect, device number 2 [ 249.943958][ T6054] udevd[6054]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 250.175975][ T5782] Bluetooth: hci5: command tx timeout [ 251.184233][ T5833] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 251.336362][ T6356] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.415941][ T6356] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.434195][ T5833] usb 1-1: Using ep0 maxpacket: 32 [ 251.480329][ T5833] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 251.493753][ T6356] bridge_slave_0: entered allmulticast mode [ 251.546361][ T6356] bridge_slave_0: entered promiscuous mode [ 251.565859][ T5833] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 251.684389][ T5833] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 251.726146][ T6356] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.775426][ T6356] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.816099][ T5833] usb 1-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 251.824573][ T5833] usb 1-1: Product: syz [ 251.847630][ T6356] bridge_slave_1: entered allmulticast mode [ 251.920010][ T5833] usb 1-1: Manufacturer: syz [ 251.924830][ T5833] usb 1-1: SerialNumber: syz [ 251.945007][ T6356] bridge_slave_1: entered promiscuous mode [ 252.029440][ T5833] usb 1-1: config 0 descriptor?? [ 252.242685][ T5833] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 252.268655][ T5782] Bluetooth: hci5: command tx timeout [ 252.752022][ T1047] usb 1-1: Failed to submit usb control message: -71 [ 252.765952][ T5833] usb 1-1: USB disconnect, device number 3 [ 252.797066][ T6356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.798218][ T1047] usb 1-1: unable to send the bmi data to the device: -71 [ 252.830836][ T1047] usb 1-1: unable to get target info from device [ 252.875135][ T1047] usb 1-1: could not get target info (-71) [ 252.904190][ T6356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.949468][ T1047] usb 1-1: could not probe fw (-71) [ 253.553547][ T6356] team0: Port device team_slave_0 added [ 253.671567][ T6356] team0: Port device team_slave_1 added [ 254.114668][ T135] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.155335][ T6356] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.189918][ T6356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 254.293759][ T6356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.340659][ T5782] Bluetooth: hci5: command tx timeout [ 254.463565][ T135] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.535598][ T6356] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.584682][ T6356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 254.681031][ T6356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.681075][ T5116] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 254.840326][ T135] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.882182][ T5116] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 254.904999][ T5116] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 254.969819][ T5116] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 255.005872][ T5116] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 255.014195][ T5116] usb 3-1: SerialNumber: syz [ 255.112282][ T135] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.365028][ T5116] usb 3-1: 0:2 : does not exist [ 255.655347][ T6356] hsr_slave_0: entered promiscuous mode [ 255.666661][ T6356] hsr_slave_1: entered promiscuous mode [ 255.676263][ T6356] debugfs: 'hsr0' already exists in 'hsr' [ 255.682333][ T6356] Cannot create hsr debugfs directory [ 255.710541][ T6443] fuse: Bad value for 'user_id' [ 255.715596][ T6443] fuse: Bad value for 'user_id' [ 255.841850][ T5116] usb 3-1: USB disconnect, device number 4 [ 256.042134][ T6054] udevd[6054]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 258.538438][ T135] bridge_slave_1: left allmulticast mode [ 258.544296][ T135] bridge_slave_1: left promiscuous mode [ 258.570410][ T135] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.647548][ T135] bridge_slave_0: left allmulticast mode [ 258.653582][ T135] bridge_slave_0: left promiscuous mode [ 258.681298][ T135] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.686026][ T11] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 259.865986][ T11] usb 5-1: Using ep0 maxpacket: 32 [ 259.923030][ T11] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 259.948818][ T11] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 260.022191][ T11] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 260.043755][ T11] usb 5-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 260.061607][ T11] usb 5-1: Product: syz [ 260.069540][ T11] usb 5-1: Manufacturer: syz [ 260.076112][ T11] usb 5-1: SerialNumber: syz [ 260.104088][ T11] usb 5-1: config 0 descriptor?? [ 260.153578][ T135] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 260.206652][ T11] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 260.277715][ T6464] netlink: 'syz.3.166': attribute type 1 has an invalid length. [ 260.297644][ T135] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 260.384426][ T135] bond0 (unregistering): Released all slaves [ 260.422688][ T6457] Illegal XDP return value 4294967262 on prog (id 6) dev N/A, expect packet loss! [ 261.298873][ T458] usb 5-1: Failed to submit usb control message: -110 [ 261.372605][ T458] usb 5-1: unable to send the bmi data to the device: -110 [ 261.419430][ T6464] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 261.433561][ T458] usb 5-1: unable to get target info from device [ 261.503951][ T458] usb 5-1: could not get target info (-110) [ 261.526127][ T458] usb 5-1: could not probe fw (-110) [ 261.648126][ T5829] usb 5-1: USB disconnect, device number 6 [ 262.653379][ T135] hsr_slave_0: left promiscuous mode [ 262.700364][ T135] hsr_slave_1: left promiscuous mode [ 262.756606][ T135] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.796340][ T135] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 262.888258][ T135] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 262.946223][ T135] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 263.036838][ T135] veth1_macvtap: left promiscuous mode [ 263.053007][ T135] veth0_macvtap: left promiscuous mode [ 263.077998][ T135] veth1_vlan: left promiscuous mode [ 263.106217][ T135] veth0_vlan: left promiscuous mode [ 263.419502][ T6486] fuse: Bad value for 'user_id' [ 263.424557][ T6486] fuse: Bad value for 'user_id' [ 265.566009][ T5835] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 266.340660][ T135] team0 (unregistering): Port device team_slave_1 removed [ 266.488231][ T135] team0 (unregistering): Port device team_slave_0 removed [ 266.715896][ T5835] usb 3-1: Using ep0 maxpacket: 32 [ 266.727198][ T5835] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 267.510846][ T5835] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 267.553625][ T5835] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 267.580356][ T5835] usb 3-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 267.916929][ T5835] usb 3-1: Product: syz [ 267.921233][ T5835] usb 3-1: Manufacturer: syz [ 267.946722][ T5835] usb 3-1: SerialNumber: syz [ 267.982290][ T5835] usb 3-1: config 0 descriptor?? [ 268.112657][ T5835] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 268.210766][ T6356] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 268.403099][ T6520] fuse: Bad value for 'user_id' [ 268.408606][ T5835] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 268.423111][ T6356] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 268.451277][ T6520] fuse: Bad value for 'user_id' [ 268.550228][ T458] usb 3-1: Failed to submit usb control message: -71 [ 268.596997][ T458] usb 3-1: unable to send the bmi data to the device: -71 [ 268.607211][ T6356] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 268.617700][ T5829] usb 3-1: USB disconnect, device number 5 [ 268.620031][ T5835] usb 1-1: Using ep0 maxpacket: 8 [ 268.660122][ T458] usb 3-1: unable to get target info from device [ 268.702181][ T458] usb 3-1: could not get target info (-71) [ 268.746713][ T5835] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 268.748293][ T458] usb 3-1: could not probe fw (-71) [ 268.800717][ T6356] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 268.810021][ T5835] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 268.861287][ T5835] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 268.903896][ T5835] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 269.004325][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 269.011087][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 269.046227][ T5835] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 269.098426][ T5835] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.400819][ T5835] usb 1-1: GET_CAPABILITIES returned 2f [ 269.420644][ T5835] usbtmc 1-1:16.0: can't read capabilities [ 269.607601][ T6511] usbtmc 1-1:16.0: usbtmc488_ioctl_trigger returned -71 [ 269.696978][ T5829] usb 1-1: USB disconnect, device number 4 [ 272.843668][ T6356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.110363][ T6356] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.286918][ T1047] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.294375][ T1047] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.389490][ T1047] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.397131][ T1047] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.193931][ T5833] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 274.366297][ T5833] usb 5-1: Using ep0 maxpacket: 32 [ 274.402725][ T5833] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 274.455877][ T5833] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 274.584715][ T5833] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 275.563960][ T5833] usb 5-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 275.573553][ T5833] usb 5-1: Product: syz [ 275.578813][ T5833] usb 5-1: Manufacturer: syz [ 275.583579][ T5833] usb 5-1: SerialNumber: syz [ 275.594597][ T5833] usb 5-1: config 0 descriptor?? [ 276.445477][ T5833] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 276.822470][ T14] usb 5-1: Failed to submit usb control message: -71 [ 276.863397][ T5829] usb 5-1: USB disconnect, device number 7 [ 276.925207][ T14] usb 5-1: unable to send the bmi data to the device: -71 [ 277.007629][ T14] usb 5-1: unable to get target info from device [ 277.057183][ T14] usb 5-1: could not get target info (-71) [ 277.094014][ T14] usb 5-1: could not probe fw (-71) [ 278.659296][ T6601] netlink: 'syz.3.201': attribute type 10 has an invalid length. [ 279.626288][ T6601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.641062][ T6601] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 280.406903][ T6356] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.176793][ T5786] Bluetooth: hci0: command 0x0c1a tx timeout [ 298.183656][ T49] Bluetooth: hci1: command 0x0406 tx timeout [ 298.192585][ T5786] Bluetooth: hci3: command 0x0406 tx timeout [ 298.201201][ T5791] Bluetooth: hci4: command 0x0406 tx timeout [ 303.481006][ T5779] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 303.508552][ T5779] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 303.520083][ T5779] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 303.556756][ T5779] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 303.601245][ T5779] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 305.874552][ T5775] Bluetooth: hci2: command tx timeout [ 307.943804][ T5775] Bluetooth: hci2: command tx timeout [ 308.533799][ T6748] netlink: 12 bytes leftover after parsing attributes in process `syz.2.246'. [ 310.586480][ T5775] Bluetooth: hci2: command tx timeout [ 311.747252][ T6748] bond1: entered promiscuous mode [ 311.752848][ T6748] bond1: entered allmulticast mode [ 311.763963][ T6748] 8021q: adding VLAN 0 to HW filter on device bond1 [ 312.013537][ T6763] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 312.020311][ T6763] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 312.030064][ T6763] vhci_hcd vhci_hcd.0: Device attached [ 312.047917][ T6764] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 312.055100][ T6753] erspan1: entered allmulticast mode [ 312.117148][ T12] vhci_hcd vhci_hcd.3: stop threads [ 312.122584][ T12] vhci_hcd vhci_hcd.3: release socket [ 312.154674][ T6753] erspan1: entered promiscuous mode [ 312.157987][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 312.200003][ T6753] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 312.226157][ T5835] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 312.655997][ T5775] Bluetooth: hci2: command tx timeout [ 313.325921][ T5829] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 314.136596][ T35] bridge_slave_1: left allmulticast mode [ 314.143778][ T5829] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 314.152759][ T5829] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 314.187479][ T35] bridge_slave_1: left promiscuous mode [ 314.204092][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.255499][ T5829] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 314.566584][ T5829] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 314.656260][ T5829] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 314.696806][ T35] bridge_slave_0: left allmulticast mode [ 314.741847][ T35] bridge_slave_0: left promiscuous mode [ 314.776252][ T5829] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 314.816799][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.866140][ T5829] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 314.874386][ T5829] usb 1-1: Product: syz [ 314.966042][ T5829] usb 1-1: Manufacturer: syz [ 315.125218][ T5829] cdc_wdm 1-1:1.0: skipping garbage [ 315.216914][ T5829] cdc_wdm 1-1:1.0: skipping garbage [ 315.967864][ T5829] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 316.884221][ T5829] cdc_wdm 1-1:1.0: Unknown control protocol [ 316.925966][ T5829] usb 1-1: USB disconnect, device number 5 [ 318.977531][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 318.999543][ T6815] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 319.006304][ T6815] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 319.018433][ T6815] vhci_hcd vhci_hcd.0: Device attached [ 319.080186][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 319.097309][ T6816] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 319.112994][ T35] bond0 (unregistering): Released all slaves [ 319.117186][ T6040] vhci_hcd vhci_hcd.0: stop threads [ 319.126741][ T6040] vhci_hcd vhci_hcd.0: release socket [ 319.143366][ T6040] vhci_hcd vhci_hcd.0: disconnect device [ 319.195269][ T6800] syz_tun: entered allmulticast mode [ 319.210632][ T6800] syz_tun: left allmulticast mode [ 319.229519][ T6802] syz_tun: entered allmulticast mode [ 319.262374][ T6701] chnl_net:caif_netlink_parms(): no params data found [ 319.582695][ T35] hsr_slave_0: left promiscuous mode [ 319.669900][ T35] hsr_slave_1: left promiscuous mode [ 319.718996][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 319.757424][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 320.456140][ T30] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 320.636387][ T30] usb 1-1: Using ep0 maxpacket: 8 [ 320.681178][ T30] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 320.712407][ T30] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.855556][ T30] usb 1-1: Product: syz [ 320.860102][ T30] usb 1-1: Manufacturer: syz [ 320.864866][ T30] usb 1-1: SerialNumber: syz [ 320.946113][ T30] usb 1-1: config 0 descriptor?? [ 321.436072][ T30] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 321.725103][ T35] team0 (unregistering): Port device team_slave_1 removed [ 322.710143][ T30] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 322.783774][ T30] usb 1-1: USB disconnect, device number 6 [ 323.603773][ T35] team0 (unregistering): Port device team_slave_0 removed [ 325.935499][ T6852] netlink: 196 bytes leftover after parsing attributes in process `syz.0.273'. [ 326.108411][ T6856] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 326.115177][ T6856] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 326.243789][ T6856] vhci_hcd vhci_hcd.0: Device attached [ 326.386010][ T30] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 326.486114][ T5116] usb 39-1: new low-speed USB device number 3 using vhci_hcd [ 326.565914][ T30] usb 4-1: device descriptor read/64, error -71 [ 326.851212][ T30] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 326.952254][ T6861] process 'syz.2.277' launched '/dev/fd/3' with NULL argv: empty string added [ 327.105864][ T30] usb 4-1: device descriptor read/64, error -71 [ 327.531575][ T6701] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.558148][ T6701] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.568389][ T30] usb usb4-port1: attempt power cycle [ 327.579185][ T6701] bridge_slave_0: entered allmulticast mode [ 327.611864][ T6701] bridge_slave_0: entered promiscuous mode [ 327.691490][ T6701] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.746008][ T6701] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.782050][ T6701] bridge_slave_1: entered allmulticast mode [ 327.833660][ T6701] bridge_slave_1: entered promiscuous mode [ 327.952438][ T30] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 328.079394][ T30] usb 4-1: device descriptor read/8, error -71 [ 328.456420][ T30] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 328.619503][ T30] usb 4-1: device descriptor read/8, error -71 [ 328.848998][ T30] usb usb4-port1: unable to enumerate USB device [ 329.086463][ T6701] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 329.246539][ T6701] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 329.445835][ T6857] vhci_hcd: connection reset by peer [ 329.525375][ T130] vhci_hcd vhci_hcd.3: stop threads [ 329.568137][ T130] vhci_hcd vhci_hcd.3: release socket [ 329.629488][ T130] vhci_hcd vhci_hcd.3: disconnect device [ 330.475138][ T6701] team0: Port device team_slave_0 added [ 330.483721][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 330.501795][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 330.504207][ T6701] team0: Port device team_slave_1 added [ 330.966390][ T6701] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 330.973527][ T6701] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 331.100151][ T6701] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 331.147746][ T6701] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 331.154860][ T6701] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 331.196669][ T6701] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 331.666016][ T5835] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 331.688925][ T5116] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 331.836188][ T5835] usb 3-1: Using ep0 maxpacket: 16 [ 331.853530][ T6701] hsr_slave_0: entered promiscuous mode [ 331.864221][ T6911] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 331.871336][ T6911] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 331.882210][ T5835] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 331.908872][ T6701] hsr_slave_1: entered promiscuous mode [ 331.920334][ T5835] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 331.958175][ T6701] debugfs: 'hsr0' already exists in 'hsr' [ 331.964090][ T6701] Cannot create hsr debugfs directory [ 331.973909][ T6911] vhci_hcd vhci_hcd.0: Device attached [ 331.995365][ T5835] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 332.007793][ T5835] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.036357][ T5835] usb 3-1: Product: syz [ 332.044993][ T5835] usb 3-1: Manufacturer: syz [ 332.068421][ T5835] usb 3-1: SerialNumber: syz [ 332.124217][ T5835] usb 3-1: config 0 descriptor?? [ 332.186702][ T5835] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 332.205848][ T5835] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 332.208655][ T30] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 332.226515][ T5833] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 332.378395][ T30] usb 5-1: device descriptor read/64, error -71 [ 332.647110][ T30] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 332.821207][ T5835] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 332.831137][ T5835] em28xx 3-1:0.0: Config register raw data: 0xea [ 332.848514][ T5835] em28xx 3-1:0.0: I2S Audio (1 sample rate(s)) [ 332.864064][ T30] usb 5-1: device descriptor read/64, error -71 [ 332.892457][ T5835] em28xx 3-1:0.0: No AC97 audio processor [ 333.032923][ T30] usb usb5-port1: attempt power cycle [ 333.421351][ T6926] Bluetooth: hci0: unsupported parameter 255 [ 333.427958][ T6926] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 333.446070][ T30] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 333.497074][ T30] usb 5-1: device descriptor read/8, error -71 [ 333.646636][ T5835] usb 3-1: USB disconnect, device number 6 [ 333.746430][ T30] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 333.826784][ T30] usb 5-1: device descriptor read/8, error -71 [ 333.945025][ T30] usb usb5-port1: unable to enumerate USB device [ 336.318910][ T6701] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 336.492124][ T6701] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 336.526855][ T6913] vhci_hcd: connection reset by peer [ 336.533145][ T1015] vhci_hcd vhci_hcd.4: stop threads [ 336.574809][ T1015] vhci_hcd vhci_hcd.4: release socket [ 336.607450][ T1015] vhci_hcd vhci_hcd.4: disconnect device [ 336.668778][ T6701] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 336.805934][ T6701] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 337.378080][ T5833] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 337.558231][ T6942] fuse: Unknown parameter '00000000000000000000' [ 338.872012][ T6701] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.163968][ T6701] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.284657][ T6040] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.292303][ T6040] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.393168][ T6040] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.400895][ T6040] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.973139][ T6701] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 342.022867][ T6701] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 342.261460][ T7016] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†Ø' [ 342.910811][ T7025] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 350.775047][ T7064] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†Ø' [ 350.898702][ T6701] veth0_vlan: entered promiscuous mode [ 351.033838][ T6701] veth1_vlan: entered promiscuous mode [ 352.039300][ T7081] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 352.218769][ T6701] veth0_macvtap: entered promiscuous mode [ 352.418853][ T6701] veth1_macvtap: entered promiscuous mode [ 352.714159][ T6701] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 353.134729][ T7089] bridge_slave_0: left allmulticast mode [ 353.195234][ T7089] bridge_slave_0: left promiscuous mode [ 353.240738][ T7089] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.412401][ T7089] bridge_slave_1: left allmulticast mode [ 353.468434][ T7089] bridge_slave_1: left promiscuous mode [ 353.505098][ T7089] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.802600][ T7089] bond0: (slave bond_slave_0): Releasing backup interface [ 354.923428][ T7089] bond0: (slave bond_slave_1): Releasing backup interface [ 355.058349][ T7089] team0: Port device team_slave_0 removed [ 355.165448][ T7089] team0: Port device team_slave_1 removed [ 355.213309][ T7089] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 355.254693][ T7089] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 355.301083][ T7089] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 355.329865][ T7089] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 355.410239][ T7089] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 355.749695][ T7090] team0: Mode changed to "loadbalance" [ 355.887709][ T6701] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 356.386030][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.516046][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.525241][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.641083][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.842674][ T7114] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†Ø' [ 358.946923][ T7132] netlink: 96 bytes leftover after parsing attributes in process `syz.3.359'. [ 358.957890][ T7130] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 363.437626][ T5784] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 363.461000][ T5784] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 363.488285][ T5784] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 363.510092][ T5784] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 363.522265][ T5784] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 363.978097][ T7153] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 364.036095][ T7153] ALSA: mixer_oss: invalid OSS volume 'S' [ 364.883810][ T7169] ======================================================= [ 364.883810][ T7169] WARNING: The mand mount option has been deprecated and [ 364.883810][ T7169] and is ignored by this kernel. Remove the mand [ 364.883810][ T7169] option from the mount to silence this warning. [ 364.883810][ T7169] ======================================================= [ 365.216049][ T5784] Bluetooth: hci4: command 0x0406 tx timeout [ 365.626350][ T5775] Bluetooth: hci5: command tx timeout [ 365.824019][ T7144] chnl_net:caif_netlink_parms(): no params data found [ 366.008597][ T5833] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 366.021877][ T14] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.196230][ T5833] usb 4-1: Using ep0 maxpacket: 16 [ 366.234438][ T5833] usb 4-1: config index 0 descriptor too short (expected 37359, got 202) [ 366.303972][ T5833] usb 4-1: config 33 has too many interfaces: 95, using maximum allowed: 32 [ 366.339514][ T5833] usb 4-1: config 33 has an invalid descriptor of length 1, skipping remainder of the config [ 366.384469][ T5833] usb 4-1: config 33 has 1 interface, different from the descriptor's value: 95 [ 366.421166][ T14] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.457476][ T5833] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 366.482114][ T5833] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.514510][ T7186] loop2: detected capacity change from 0 to 7 [ 366.524437][ T5833] usb 4-1: Product: syz [ 366.551949][ T7186] Dev loop2: unable to read RDB block 7 [ 366.564444][ T5833] usb 4-1: Manufacturer: syz [ 366.586370][ T5833] usb 4-1: SerialNumber: syz [ 366.602051][ T7186] loop2: unable to read partition table [ 366.658504][ T7186] loop2: partition table beyond EOD, truncated [ 366.665393][ T7186] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 366.782050][ T7189] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 366.848075][ T5833] usb 4-1: 0:2 : does not exist [ 366.924605][ T14] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.959457][ T5833] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 367.211538][ T14] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.699280][ T5775] Bluetooth: hci5: command tx timeout [ 367.792478][ T5833] usb 4-1: USB disconnect, device number 7 [ 369.777065][ T5775] Bluetooth: hci5: command tx timeout [ 370.319931][ T14] bridge_slave_1: left allmulticast mode [ 370.408695][ T14] bridge_slave_1: left promiscuous mode [ 370.552518][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.339481][ T14] bridge_slave_0: left allmulticast mode [ 371.345333][ T14] bridge_slave_0: left promiscuous mode [ 371.346835][ T6054] udevd[6054]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:33.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 371.373489][ T7205] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 371.379558][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.396006][ T7205] ALSA: mixer_oss: invalid OSS volume 'S' [ 371.855933][ T5775] Bluetooth: hci5: command tx timeout [ 374.004734][ T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 374.167934][ T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 374.295591][ T14] bond0 (unregistering): Released all slaves [ 375.108150][ T7230] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 375.310548][ T14] hsr_slave_0: left promiscuous mode [ 375.481254][ T14] hsr_slave_1: left promiscuous mode [ 375.569135][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 375.931767][ T14] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 376.378102][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 376.421334][ T14] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 377.903160][ T14] veth1_macvtap: left promiscuous mode [ 377.983716][ T14] veth0_macvtap: left promiscuous mode [ 378.030745][ T14] veth1_vlan: left promiscuous mode [ 378.119567][ T14] veth0_vlan: left promiscuous mode [ 379.358088][ T7245] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 379.426430][ T7245] ALSA: mixer_oss: invalid OSS volume 'S' [ 380.953352][ T7267] kernel profiling enabled (shift: 9) [ 383.154373][ T14] team0 (unregistering): Port device team_slave_1 removed [ 383.330581][ T14] team0 (unregistering): Port device team_slave_0 removed [ 383.394028][ T7280] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 384.037605][ T7144] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.060752][ T7144] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.070782][ T7144] bridge_slave_0: entered allmulticast mode [ 384.083584][ T7144] bridge_slave_0: entered promiscuous mode [ 384.091573][ T7287] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 384.141304][ T7287] ALSA: mixer_oss: invalid OSS volume 'SPEAKE' [ 384.422202][ T7271] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 384.512500][ T7275] team0: Unable to change to the same mode the team is in [ 384.563514][ T7144] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.613462][ T7144] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.659299][ T7144] bridge_slave_1: entered allmulticast mode [ 384.699859][ T7144] bridge_slave_1: entered promiscuous mode [ 389.192715][ T7144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 392.408087][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 392.414726][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 394.061943][ T7144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 394.511909][ T7144] team0: Port device team_slave_0 added [ 394.565153][ T7314] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 394.607269][ T7144] team0: Port device team_slave_1 added [ 394.878126][ T7144] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 394.918415][ T7144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 394.986601][ T7144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 395.036730][ T7320] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 395.046519][ T7144] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 395.053644][ T7144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 395.055989][ T7320] ALSA: mixer_oss: invalid OSS volume 'SPEAKE' [ 395.162975][ T7144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 395.791971][ T7144] hsr_slave_0: entered promiscuous mode [ 395.820363][ T7144] hsr_slave_1: entered promiscuous mode [ 395.859160][ T7144] debugfs: 'hsr0' already exists in 'hsr' [ 395.865090][ T7144] Cannot create hsr debugfs directory [ 396.385502][ T7334] bridge_slave_0: left allmulticast mode [ 396.416755][ T7334] bridge_slave_0: left promiscuous mode [ 396.440417][ T7334] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.550492][ C1] ===================================================== [ 396.557718][ C1] BUG: KMSAN: uninit-value in __flush_smp_call_function_queue+0x362/0x18e0 [ 396.566561][ C1] __flush_smp_call_function_queue+0x362/0x18e0 [ 396.573106][ C1] generic_smp_call_function_single_interrupt+0x1c/0x30 [ 396.580201][ C1] __sysvec_call_function_single+0x4b/0x3e0 [ 396.586265][ C1] sysvec_call_function_single+0x7c/0x90 [ 396.592079][ C1] asm_sysvec_call_function_single+0x1f/0x30 [ 396.598212][ C1] interval_tree_insert+0x151/0x500 [ 396.603574][ C1] kvm_replace_memslot+0x6fa/0xfe0 [ 396.608877][ C1] kvm_set_memslot+0xa2b/0x1950 [ 396.613858][ C1] kvm_set_memory_region+0x145a/0x18a0 [ 396.619477][ C1] kvm_vm_ioctl_set_memory_region+0xd3/0x150 [ 396.625603][ C1] kvm_vm_ioctl+0xc21/0x1680 [ 396.630319][ C1] __se_sys_ioctl+0x23c/0x400 [ 396.635139][ C1] __x64_sys_ioctl+0x97/0xe0 [ 396.639871][ C1] x64_sys_call+0x1975/0x3ea0 [ 396.644774][ C1] do_syscall_64+0x134/0xf80 [ 396.649526][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.655561][ C1] [ 396.657943][ C1] Local variable iter created at: [ 396.663032][ C1] tdp_mmu_zap_leafs+0x52/0x6e0 [ 396.668026][ C1] kvm_tdp_mmu_unmap_gfn_range+0x910/0xb50 [ 396.673987][ C1] [ 396.676409][ C1] CPU: 1 UID: 0 PID: 7338 Comm: syz.3.421 Not tainted syzkaller #0 PREEMPT(full) [ 396.685729][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 396.696053][ C1] ===================================================== [ 396.703047][ C1] Disabling lock debugging due to kernel taint [ 396.709276][ C1] Kernel panic - not syncing: kmsan.panic set ... [ 396.715807][ C1] CPU: 1 UID: 0 PID: 7338 Comm: syz.3.421 Tainted: G B syzkaller #0 PREEMPT(full) [ 396.726723][ C1] Tainted: [B]=BAD_PAGE [ 396.730951][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 396.741110][ C1] Call Trace: [ 396.744465][ C1] [ 396.747393][ C1] __dump_stack+0x26/0x30 [ 396.752050][ C1] dump_stack_lvl+0x50/0x1c0 [ 396.756847][ C1] ? dump_stack+0x12/0x25 [ 396.761377][ C1] dump_stack+0x1e/0x25 [ 396.765701][ C1] vpanic+0x7b4/0x1430 [ 396.769961][ C1] panic+0x15d/0x160 [ 396.774071][ C1] kmsan_report+0x31a/0x320 [ 396.778748][ C1] ? __msan_warning+0x1b/0x30 [ 396.783683][ C1] ? __flush_smp_call_function_queue+0x362/0x18e0 [ 396.790246][ C1] ? generic_smp_call_function_single_interrupt+0x1c/0x30 [ 396.797518][ C1] ? __sysvec_call_function_single+0x4b/0x3e0 [ 396.803741][ C1] ? sysvec_call_function_single+0x7c/0x90 [ 396.809729][ C1] ? asm_sysvec_call_function_single+0x1f/0x30 [ 396.816031][ C1] ? interval_tree_insert+0x151/0x500 [ 396.821544][ C1] ? kvm_replace_memslot+0x6fa/0xfe0 [ 396.826975][ C1] ? kvm_set_memslot+0xa2b/0x1950 [ 396.832135][ C1] ? kvm_set_memory_region+0x145a/0x18a0 [ 396.837931][ C1] ? kvm_vm_ioctl_set_memory_region+0xd3/0x150 [ 396.844241][ C1] ? kvm_vm_ioctl+0xc21/0x1680 [ 396.849140][ C1] ? __se_sys_ioctl+0x23c/0x400 [ 396.854151][ C1] ? __x64_sys_ioctl+0x97/0xe0 [ 396.859082][ C1] ? x64_sys_call+0x1975/0x3ea0 [ 396.864096][ C1] ? do_syscall_64+0x134/0xf80 [ 396.868993][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.875317][ C1] ? native_apic_msr_write+0x15/0x70 [ 396.880747][ C1] ? lapic_next_event+0x22/0x50 [ 396.885782][ C1] ? __pfx_lapic_next_event+0x10/0x10 [ 396.891334][ C1] ? clockevents_program_event+0x58d/0xcb0 [ 396.897325][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 396.902673][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 396.908009][ C1] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 396.914515][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 396.919809][ C1] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 396.925808][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 396.931111][ C1] __msan_warning+0x1b/0x30 [ 396.935806][ C1] __flush_smp_call_function_queue+0x362/0x18e0 [ 396.942248][ C1] generic_smp_call_function_single_interrupt+0x1c/0x30 [ 396.949456][ C1] __sysvec_call_function_single+0x4b/0x3e0 [ 396.955521][ C1] sysvec_call_function_single+0x7c/0x90 [ 396.961341][ C1] [ 396.964342][ C1] [ 396.967354][ C1] asm_sysvec_call_function_single+0x1f/0x30 [ 396.973504][ C1] RIP: 0010:interval_tree_insert+0x151/0x500 [ 396.979668][ C1] Code: 48 8b 4d 80 4c 89 31 44 89 b9 88 0c 00 00 48 8b 45 b8 48 89 41 08 8b 45 c8 89 81 90 0c 00 00 4c 89 ef 4c 89 e6 e8 2f de 72 fb <4c> 89 e8 4c 09 f0 49 f7 d6 4d 21 ee 4c 3b b5 50 ff ff ff 0f 92 c1 [ 396.999499][ C1] RSP: 0018:ffff8881276b7968 EFLAGS: 00000297 [ 397.005693][ C1] RAX: ffffffff868ce351 RBX: ffff88801b81e678 RCX: ffff88810ead2100 [ 397.013796][ C1] RDX: 0000000000000002 RSI: 0000200000d65fff RDI: 0000200000c65fff [ 397.021903][ C1] RBP: ffff8881276b7a20 R08: ffffea000000000f R09: 0000000000000000 [ 397.030147][ C1] R10: ffff888126eb79a8 R11: 0000000000000002 R12: 0000200000d65fff [ 397.038227][ C1] R13: 0000200000c65fff R14: 0000000000000000 R15: 0000000000000000 [ 397.046317][ C1] ? interval_tree_insert+0x151/0x500 [ 397.051870][ C1] ? interval_tree_insert+0x151/0x500 [ 397.057424][ C1] kvm_replace_memslot+0x6fa/0xfe0 [ 397.062695][ C1] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 397.068731][ C1] kvm_set_memslot+0xa2b/0x1950 [ 397.073749][ C1] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 397.079758][ C1] kvm_set_memory_region+0x145a/0x18a0 [ 397.085439][ C1] kvm_vm_ioctl_set_memory_region+0xd3/0x150 [ 397.091609][ C1] kvm_vm_ioctl+0xc21/0x1680 [ 397.096381][ C1] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 397.101568][ C1] __se_sys_ioctl+0x23c/0x400 [ 397.106415][ C1] __x64_sys_ioctl+0x97/0xe0 [ 397.111176][ C1] x64_sys_call+0x1975/0x3ea0 [ 397.116197][ C1] do_syscall_64+0x134/0xf80 [ 397.120940][ C1] ? clear_bhb_loop+0x50/0xa0 [ 397.125766][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.131808][ C1] RIP: 0033:0x7f704d59c42b [ 397.136345][ C1] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 397.156091][ C1] RSP: 002b:00007f704e4dcf00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 397.164651][ C1] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 00007f704d59c42b [ 397.172739][ C1] RDX: 00007f704e4dcfc0 RSI: 000000004020ae46 RDI: 0000000000000004 [ 397.180825][ C1] RBP: 00007f704d651a40 R08: 0000200000c60000 R09: 0000000000000004 [ 397.188914][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000bfe000 [ 397.196988][ C1] R13: 000000000000000b R14: 0000000000000000 R15: 0000000000298000 [ 397.205100][ C1] [ 397.208604][ C1] Kernel Offset: disabled [ 397.213024][ C1] Rebooting in 86400 seconds..