last executing test programs: 6m33.04018369s ago: executing program 4 (id=199): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x2711, @local}, 0x10) listen(r0, 0x5) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) accept4$unix(r0, 0x0, 0x0, 0x0) 6m32.610024368s ago: executing program 4 (id=202): mount(0x0, 0x0, 0x0, 0x0, 0x0) creat(0x0, 0xd7) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x30) write(r0, 0x0, 0x0) write(r0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$smack_current(r1, 0x0, 0x0) 6m32.210824343s ago: executing program 4 (id=205): r0 = socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000006c0)=[{{&(0x7f0000000400)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0}}], 0x1, 0x14080880) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x2d5, 0x4) recvmmsg(r0, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=""/88, 0x58}, 0x7fff}], 0x1, 0x1000000000fe, 0x0) 6m31.795930094s ago: executing program 4 (id=208): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x0) 6m31.46192478s ago: executing program 4 (id=211): openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r0, 0x4112, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, 0x0) 6m28.872576885s ago: executing program 4 (id=223): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070, 0x18}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000002680)=[{{0x0, 0x0, &(0x7f0000002580)=[{0x0}, {&(0x7f00000014c0)=""/4096, 0x94}], 0x2}, 0x200}], 0x1, 0x0, 0x0) 6m28.201621832s ago: executing program 32 (id=223): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070, 0x18}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000002680)=[{{0x0, 0x0, &(0x7f0000002580)=[{0x0}, {&(0x7f00000014c0)=""/4096, 0x94}], 0x2}, 0x200}], 0x1, 0x0, 0x0) 5m53.046282802s ago: executing program 0 (id=409): pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) close(r1) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) splice(r0, 0x0, r1, 0x0, 0xfffd, 0x0) 5m52.428564894s ago: executing program 0 (id=411): socket$nl_route(0x10, 0x3, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={[&(0x7f00000000c0)='=\x8d5\x10\xe4\x00\bj\xfb', 0x0]}) syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x80041) read$FUSE(0xffffffffffffffff, &(0x7f00000061c0)={0x2020}, 0x115f) syz_clone3(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080)=0xb, 0x8) 5m52.135571362s ago: executing program 0 (id=414): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) timer_create(0x1, 0x0, &(0x7f0000bbdffc)) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0x11a}, 0x20) 5m50.543166026s ago: executing program 0 (id=423): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x20000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x10454ca, 0x0) 5m50.226378384s ago: executing program 0 (id=424): r0 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r0, 0x0) ftruncate(r0, 0x51a9497) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x18a3c85) readv(r1, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) 5m47.911390416s ago: executing program 0 (id=437): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000001500)=""/4096, 0x1000}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000004dc0)={0x0, 0x0, &(0x7f0000003540)=[{&(0x7f00000007c0)=""/177, 0xb1}], 0x1}, 0x2) 5m47.275805038s ago: executing program 33 (id=437): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000001500)=""/4096, 0x1000}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000004dc0)={0x0, 0x0, &(0x7f0000003540)=[{&(0x7f00000007c0)=""/177, 0xb1}], 0x1}, 0x2) 4m51.685511089s ago: executing program 3 (id=819): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) sendmmsg$inet6(r0, &(0x7f00000066c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="f1", 0x1}], 0x1}}], 0x1, 0x2401c4c5) sendmmsg$inet6(r0, &(0x7f0000003740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x84) 4m51.216051458s ago: executing program 3 (id=824): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}]}}}]}]}], {0x14}}, 0xac}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r1 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000180)='/sys/fs/smackfs/doi\x00', 0x2, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009bbd8b08e80430ffd1a601220301090222000100000000090400000129fddd000905e2ff"], 0x0) writev(r1, &(0x7f0000000340)=[{&(0x7f00000025c0)='8', 0x1}], 0x1) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) 4m48.670190547s ago: executing program 3 (id=839): mount(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/sunrpc/rpc_task_begin/enable\x00', 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x4c8a1, 0xc000, 0x1, 0xc0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x20) 4m48.428549212s ago: executing program 3 (id=842): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152) 4m48.230416791s ago: executing program 3 (id=845): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1fa, 0x0, 0x0, 0x1000, &(0x7f0000ff3000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x2e3}]}) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m47.0928841s ago: executing program 3 (id=861): r0 = fanotify_init(0x20, 0x2) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) fsopen(0x0, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, 0x0) fanotify_mark(r0, 0x1, 0x40001008, 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00') 4m46.532416816s ago: executing program 34 (id=861): r0 = fanotify_init(0x20, 0x2) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) fsopen(0x0, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, 0x0) fanotify_mark(r0, 0x1, 0x40001008, 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00') 2m34.050620157s ago: executing program 6 (id=1872): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4b4, 0xbca1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, "", [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x10, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x132, 0xffffffffffffffff, 0xffffd000) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0022180000000501150875089501093081"], 0x0}, 0x0) 2m33.061358368s ago: executing program 6 (id=1880): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x1, 0xfffffffb}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) sendmsg$tipc(r1, &(0x7f0000000e00)={&(0x7f0000000540)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20044811}, 0x44000094) 2m32.693580805s ago: executing program 6 (id=1883): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r2, 0xc0884123, &(0x7f0000000340)={0x0, "72a59baeb6c10b67b134a5f267418d0000000000000000000000820f2cf9ff6c8d2600", {0x800000000000004, 0x50000000000}}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000540)={0x1, 0x3, 0xe65, 0x400000005, 0x6, 0x5, 0x8, 0xcc3, 0x0, 0x100000a, 0x100400, 0x1}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000080)={0x1, 0x0, 0xffff5f11, 0xfffd, 0xfffffffffffffffb, 0x7ff, 0xfffffffffffffffa, 0x1fe, 0x4a, 0x20000000000028, 0x4, 0x2}) 2m32.495233173s ago: executing program 6 (id=1885): r0 = eventfd(0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000c1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000001100)="02965d1f5ec3de3d", 0x8}, {0x0}], 0x2) 2m32.283198883s ago: executing program 6 (id=1887): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1f7) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000001600)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f000029a000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m31.864649554s ago: executing program 6 (id=1891): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) accept4$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x1c, 0x80000) 2m15.720746549s ago: executing program 35 (id=1891): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) accept4$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x1c, 0x80000) 1m45.584975702s ago: executing program 1 (id=2274): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x40, 0x0, 0x0, 0xffe00001}]}, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x7, 0x1, 0x0, 0xc3d, 0x0, 0x2004cb, 0xffffffdfffffffff, 0xa1d, 0x7, 0x100005, 0x79, 0x3, 0x3], 0x3332d000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x4000, 0xe000, 0x0, 0x77, 0x4, 0x3, 0xcb, 0x2, 0x0, 0x6, 0x6, 0xf4}, {0x2, 0x9000, 0x3, 0xeb, 0x2, 0x0, 0x0, 0xbf, 0x7, 0x0, 0x3}, {0xeeee0000, 0x1000, 0xe, 0x0, 0x7, 0xc4, 0x5, 0x1, 0x55, 0x3, 0x4, 0xfc}, {0x1, 0x0, 0x9, 0x4, 0x81, 0x0, 0x9, 0x1, 0x3, 0x0, 0x9}, {0x0, 0x8000000, 0x8, 0x1, 0x0, 0x4, 0x0, 0x6, 0x2, 0x34, 0xff}, {0xffff1000, 0x1, 0xe, 0x78, 0x8, 0x0, 0x2, 0x1c, 0xa3, 0xff, 0x9}, {0xeeee8000, 0xdddd1000, 0xa, 0x7, 0x0, 0x0, 0x7, 0x20, 0x0, 0x83}, {0x0, 0x6000, 0xa, 0x0, 0xa4, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0xfe}, {0xc000, 0x9}, {0x3000, 0xfffd}, 0xddf8ffdb, 0x0, 0x0, 0x120, 0x0, 0xf801, 0xdddd1000, [0x9, 0x0, 0xfffffdffffffffff, 0xfffffffeffffffff]}) 1m44.421470532s ago: executing program 1 (id=2278): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./mnt\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./mnt/usb_gadget/g1/functions/geth.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000380)='./mnt/usb_gadget/g1/functions/geth.usb0\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./mnt/usb_gadget/g1/configs/c.1/geth.usb0\x00') openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./mnt/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000840)='\n', 0x1) 1m43.311602388s ago: executing program 1 (id=2292): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) recvmmsg(r1, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}, 0xa902}], 0x1, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) 1m42.579034989s ago: executing program 1 (id=2287): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) 1m42.144837108s ago: executing program 1 (id=2291): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000000c0)={r2, 0x4}, 0x8) 1m38.106426797s ago: executing program 1 (id=2319): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x811}, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xe8) readv(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r0, 0x2500}], 0x1, 0x3e1) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000000000") 1m37.640267436s ago: executing program 36 (id=2319): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x811}, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xe8) readv(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r0, 0x2500}], 0x1, 0x3e1) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000000000") 12.090380464s ago: executing program 5 (id=2645): syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e079c0814"], 0xa) 7.528377118s ago: executing program 8 (id=2661): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000005c0)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(r0, r5, &(0x7f0000000540)={0x0, 0x0, 0x0, 0xfffffffe, 0x20000}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1302, 0x1, 0x0, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x0, 0xfffffffd, 0x69, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffefffe, 0x800}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6253, 0x40, 0x3, 0xffffffff}}], 0x1, &(0x7f00000003c0)={0x2e, 0x4c, 0x0, r0, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x4000, 0xdbd, 0x0, 0x0}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, 0x94) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) 7.275251112s ago: executing program 5 (id=2664): socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000100), 0x10) sendmsg$can_bcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="0500000008000000ed00000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="03"], 0x48}, 0x1, 0x0, 0x0, 0x2000c014}, 0x800) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x200008c1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f00000002c0)={0x1d, r2}, 0x10, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYRES64=r1], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x8001) 6.619270393s ago: executing program 5 (id=2667): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000001540)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) syz_ublk_setup_queues(r5, r4, &(0x7f0000000340)={0x0, 0x0, 0x10, 0x1, 0x257}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x880000, 0x20, 0x1000000, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x800, 0x0, 0x22a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f6d, 0x8c, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb4ac, 0x20, 0x8, 0x9d7c}}], 0x1, &(0x7f00000014c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_usb_disconnect(0xffffffffffffffff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 6.41837315s ago: executing program 7 (id=2669): openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) setrlimit(0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) mkdir(0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r0, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x7f03) 6.28431952s ago: executing program 9 (id=2670): r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) writev(r0, &(0x7f0000000540)=[{&(0x7f00000005c0)='\b', 0x1}], 0x1) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x2, 0x255}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6474, 0x8, 0x2, 0x15e, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x2, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x200, 0x3, 0x92, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x10, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x4, 0x8004, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) 6.219179745s ago: executing program 8 (id=2671): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x80000000001, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000580)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r0, r1, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40) 5.71366191s ago: executing program 7 (id=2673): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f080c26a04883ad5c8c82b8af00", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0xc}, 0x94) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_emit_ethernet(0x36, &(0x7f0000000280)={@local, @random="fad1e048716e", @void, {@ipv4={0x800, @udp={{0x8, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp_prespec={0x44, 0xc, 0x5, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}]}]}}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 5.587826269s ago: executing program 8 (id=2674): r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r2) r4 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0, r3) r5 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, r4) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r5) r7 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, r6) add_key$fscrypt_provisioning(&(0x7f0000000780), &(0x7f00000007c0)={'syz', 0x0}, &(0x7f0000000840)=ANY=[@ANYBLOB="0300000000000000616263646566676869b90d0000000000007273747576777879175d3132333420ca206c672107a9233f4fff770ea0e94cbd"], 0x29, r7) 5.238142361s ago: executing program 8 (id=2675): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f0000000140)={0x1}) 4.590689023s ago: executing program 9 (id=2679): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x26}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004041) r0 = io_uring_setup(0x1978, &(0x7f0000000040)={0x0, 0xca72, 0x1cc90, 0x0, 0x20002fb}) r1 = socket$inet(0x2, 0x80001, 0x84) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x13d, 0x0, 0x3, {0x11, 0x0, 0x0, '\x00', {0x9ca7a16b958dcf33, 0xf602, 0x6, 0x8, 0x0, 0x0, 0x0, '\x00', 0xfffffffffffffffe, 0x0, 0x1ff, 0x0, {}, {0x200005, 0x4}, {0xfffffffffffffffb, 0x4}, {0x5}, 0x60, 0x0, 0x7fff}}}}) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2218, 0x7521, 0x16, 0x0, 0x0) 4.222184805s ago: executing program 7 (id=2682): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 4.056723107s ago: executing program 9 (id=2684): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x1, 0x10001043, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r2, &(0x7f0000000000)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2) 4.000523555s ago: executing program 5 (id=2685): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000001600)={@fd, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x14}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x0, 0x13}}, &(0x7f0000000080)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 3.538417299s ago: executing program 5 (id=2687): openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@empty, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) futex(0x0, 0x4, 0x1, 0x0, 0x0, 0x1) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d000010000000000000000000000008001200020002000000bd00000000001000330002030000003fff00000000000200000000000000000000570d45f3dd65602100000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0) 3.398856286s ago: executing program 7 (id=2689): unshare(0x28000600) unshare(0x20040600) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r0, 0xfffffffdffffffff) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000140)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000340)=0x1) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, 0x0) 3.271930799s ago: executing program 9 (id=2690): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @empty}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x7, 0x30}, 0xc) sendto$inet(r0, &(0x7f00000000c0)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r0, &(0x7f0000000300)="ab", 0x34000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f0000000580)='Z', 0x1}], 0x1) 3.008494358s ago: executing program 5 (id=2692): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040a61b01000100000000010902200001010080320904"], 0x0) syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[], 0x0) socket$nl_generic(0x10, 0x3, 0x10) fchdir(0xffffffffffffffff) syz_usb_control_io(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000980)='#\n$)-.\x02\xcc\xd7\xb2f\xcdY\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\n\x13:\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb|&#\xe9\xa3\'\x91>C\x1bV\x87\xeb\xfe\xda\x89\xb7}@\xab%\xf2\x8f\x97\x18\xce\x92\xc9\xa8\x1c\x9d\\C\xfeI%\xae\x8fKHq\x89\x83\xbb\x9dC\xd6H\x80s\xd66y\xfao\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc\n=/o\xf3\x96\xaf\b1\x1b48\bu\x01\xab\x90Q\xe8r\xe7\r\'-06,\xff\x84x\'+\xd5\xd4?[e\x19\xa3\xe495\x12B\x06\xe5\x8f\x83Vb\xf1\xbc\xb9E\x1a\x9bH$\x1f^\x9dX\xd0\xca\xcc\xc9\x86\xaa\x90\x9c\xc0\x82\xabE\xcc{\xcd\xd3\xdb\x97\x1e.y\xb0\x9f\x8f\xefv\x9c\xbd%\x84\xbf\"\xd9\xb4Vm\t.\x15\xf1)\xd6\xd8\x1cb\xc5\xd9=c\xb5<|+K*\x9f\x01u\x00\x00\x00\x00\x00', 0xfeffffff00000000) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x1c, &(0x7f00000003c0)={0x40, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x1, 0x802) 2.495252877s ago: executing program 8 (id=2693): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f080c26a04883ad5c8c82b8af00", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0xc}, 0x94) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_emit_ethernet(0x36, &(0x7f0000000280)={@local, @random="fad1e048716e", @void, {@ipv4={0x800, @udp={{0x8, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp_prespec={0x44, 0xc, 0x5, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}]}]}}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 2.49107327s ago: executing program 7 (id=2703): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f0000000140)={0x1}) 1.470943547s ago: executing program 8 (id=2695): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000001540)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) syz_ublk_setup_queues(r5, r4, &(0x7f0000000340)={0x0, 0x0, 0x10, 0x1, 0x257}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x880000, 0x20, 0x1000000, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x800, 0x0, 0x22a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f6d, 0x8c, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb4ac, 0x20, 0x8, 0x9d7c}}], 0x1, &(0x7f00000014c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_usb_disconnect(0xffffffffffffffff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1.470757588s ago: executing program 9 (id=2696): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x68, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x2, @media='ib\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.470561239s ago: executing program 2 (id=2697): socket$netlink(0x10, 0x3, 0x8000000004) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x77, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r1, &(0x7f0000000f80)=ANY=[], 0x540) read$FUSE(r0, &(0x7f0000002a80)={0x2020}, 0x2020) shutdown(r0, 0x1) 1.262762697s ago: executing program 2 (id=2698): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) close(r3) 933.765896ms ago: executing program 2 (id=2699): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x6) fcntl$notify(r1, 0x402, 0x8000001c) fcntl$notify(r0, 0x402, 0x100000020) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bridge0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x8000000a, 0x10001}}]}]}, @IFLA_IFALIASn={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4600}, 0x24044800) write(0xffffffffffffffff, &(0x7f0000000240)='online_mova', 0xb) 652.580612ms ago: executing program 2 (id=2700): socket$kcm(0x10, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r2, 0x0, &(0x7f0000000480)=@udp6=r1, 0x2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0x200000ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 408.753069ms ago: executing program 2 (id=2701): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknod(&(0x7f0000000280)='./file0\x00', 0x8001420, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r1, 0x4, 0x8e000) read$FUSE(r1, &(0x7f0000002d80)={0x2020}, 0x2020) 228.672076ms ago: executing program 9 (id=2702): r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0x1, 0x60, {"3ef30fc735fc9a00003e0f01c8c4417df1a9b398000066b824008ec8460f79f2c4e1717db49c26000000b9800000c00f3235000400000f307b9666baa00066b8000066ef66bad1040f01c2260f78da"}}], 0x60}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0}, 0x4080) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, &(0x7f00000001c0)={"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"}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x5e0, 0x8, 0x0, 0x17c, 0x2, 0x800, 0xf9, 0x3f2, 0x1, 0x2, 0x6, 0x2000009, 0x8, 0x9, 0x80000000000, 0xbdc], 0x60000, 0xc1390}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 217.427ms ago: executing program 7 (id=2704): prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x408b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 2 (id=2705): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000540)={0xaa, 0x310}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000001000/0x1000)=nil, 0x1000}}) kernel console output (not intermixed with test programs): C3/../uevent} for writing: No such file or directory [ 165.950123][ T6581] ======================================================= [ 165.950123][ T6581] WARNING: The mand mount option has been deprecated and [ 165.950123][ T6581] and is ignored by this kernel. Remove the mand [ 165.950123][ T6581] option from the mount to silence this warning. [ 165.950123][ T6581] ======================================================= [ 166.531441][ T6432] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 166.584822][ T6432] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 166.756317][ T6432] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 166.929783][ T6432] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 167.081772][ T36] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 167.082386][ T6432] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 167.180351][ T6432] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 167.194200][ T6432] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 167.231277][ T6432] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 167.236477][ T36] usb 1-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 167.249205][ T36] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 167.249264][ T36] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.322977][ T36] usb 1-1: config 0 descriptor?? [ 167.328795][ T6594] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 167.847630][ T6432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.995221][ T36] wacom 0003:056A:0084.0001: unknown main item tag 0x0 [ 167.995264][ T36] wacom 0003:056A:0084.0001: unknown main item tag 0x0 [ 167.995292][ T36] wacom 0003:056A:0084.0001: unknown main item tag 0x0 [ 167.995321][ T36] wacom 0003:056A:0084.0001: unknown main item tag 0x0 [ 167.995348][ T36] wacom 0003:056A:0084.0001: unknown main item tag 0x0 [ 167.995375][ T36] wacom 0003:056A:0084.0001: unknown main item tag 0x0 [ 167.995403][ T36] wacom 0003:056A:0084.0001: unknown main item tag 0x0 [ 167.995430][ T36] wacom 0003:056A:0084.0001: unknown main item tag 0x0 [ 167.995458][ T36] wacom 0003:056A:0084.0001: unknown main item tag 0x0 [ 167.995486][ T36] wacom 0003:056A:0084.0001: unknown main item tag 0x0 [ 168.107078][ T36] usb 1-1: USB disconnect, device number 4 [ 168.110647][ T6432] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.233426][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.233663][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.305203][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.305343][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.762761][ T6432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.751815][ T31] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 171.971984][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 171.982877][ T31] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 172.001404][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 172.001476][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.059276][ T6432] veth0_vlan: entered promiscuous mode [ 172.116184][ T31] usb 2-1: config 0 descriptor?? [ 172.444380][ T6432] veth1_vlan: entered promiscuous mode [ 172.515445][ T31] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 172.562956][ T5723] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 172.724607][ T5723] usb 3-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 172.727052][ T5723] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 172.727180][ T5723] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.995463][ T6432] veth0_macvtap: entered promiscuous mode [ 173.046352][ T6432] veth1_macvtap: entered promiscuous mode [ 173.073586][ T6688] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 173.219343][ T6432] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.298046][ C0] iowarrior 2-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 173.298170][ T5592] usb 2-1: USB disconnect, device number 4 [ 173.550882][ T6432] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.577618][ T5723] qmi_wwan 3-1:1.0: cdc-wdm0: USB WDM device [ 173.868907][ T5723] wwan wwan0: port wwan0qmi0 attached [ 174.322224][ T5596] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 174.428296][ T5723] qmi_wwan 3-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.2-1, WWAN/QMI device, 96:6b:d4:41:35:7a [ 174.441045][ T56] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.483752][ T5596] usb 1-1: Using ep0 maxpacket: 32 [ 174.484789][ T5596] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 174.486405][ T5596] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 174.486430][ T5596] usb 1-1: config 0 has no interface number 0 [ 174.486472][ T5596] usb 1-1: config 0 interface 184 has no altsetting 0 [ 174.490297][ T5596] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.490322][ T5596] usb 1-1: Product: syz [ 174.490337][ T5596] usb 1-1: Manufacturer: syz [ 174.490352][ T5596] usb 1-1: SerialNumber: syz [ 174.568375][ T5596] usb 1-1: config 0 descriptor?? [ 174.615312][ T5723] usb 3-1: USB disconnect, device number 5 [ 174.641385][ T5723] qmi_wwan 3-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.2-1, WWAN/QMI device [ 174.808043][ T6725] netlink: 21 bytes leftover after parsing attributes in process `syz.1.320'. [ 174.923730][ T6726] netlink: 'syz.1.320': attribute type 4 has an invalid length. [ 175.531972][ T31] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 175.733737][ T31] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 175.738681][ T31] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 175.738717][ T31] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 175.738744][ T31] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 175.804319][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.804347][ T31] usb 4-1: Product: syz [ 175.804361][ T31] usb 4-1: Manufacturer: syz [ 175.804376][ T31] usb 4-1: SerialNumber: syz [ 175.810715][ T31] usb 4-1: config 0 descriptor?? [ 175.832465][ T6729] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 175.849883][ T6729] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 175.872480][ T31] usb 4-1: ucan: probing device on interface #0 [ 175.974392][ T5723] wwan wwan0: port wwan0qmi0 disconnected [ 176.121551][ T5596] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 176.121630][ T5596] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 176.127807][ T5596] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 176.127842][ T5596] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 176.127863][ T5596] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 176.127882][ T5596] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 176.128203][ T5596] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 176.213555][ T31] usb 4-1: ucan: device protocol version 0 is not supported [ 176.213581][ T31] usb 4-1: ucan: probe failed; try to update the device firmware [ 176.318909][ T5596] usb 1-1: USB disconnect, device number 5 [ 176.457289][ T10] usb 4-1: USB disconnect, device number 4 [ 177.295901][ T162] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.296090][ T162] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.296131][ T162] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.363670][ T3175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.363686][ T3175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.397950][ T6744] sctp: [Deprecated]: syz.1.328 (pid 6744) Use of struct sctp_assoc_value in delayed_ack socket option. [ 177.397950][ T6744] Use struct sctp_sack_info instead [ 177.597549][ T5723] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 177.721293][ T6744] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.786647][ T5723] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 177.788322][ T5723] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 177.788486][ T5723] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.841402][ T5723] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.841432][ T5723] usb 4-1: Product: syz [ 177.841448][ T5723] usb 4-1: Manufacturer: syz [ 177.841476][ T5723] usb 4-1: SerialNumber: syz [ 177.896197][ T5723] cdc_mbim 4-1:1.0: skipping garbage [ 178.066368][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.066393][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.650645][ T6760] netlink: 8 bytes leftover after parsing attributes in process `syz.1.335'. [ 178.650669][ T6760] netlink: 4 bytes leftover after parsing attributes in process `syz.1.335'. [ 178.987822][ T5723] cdc_mbim 4-1:1.0: bind() failure [ 179.032482][ T5723] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 179.034416][ T5723] cdc_ncm 4-1:1.1: bind() failure [ 179.242924][ T5723] usb 4-1: USB disconnect, device number 5 [ 179.370153][ T149] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.370207][ T149] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.370248][ T149] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.370298][ T149] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.080637][ T6784] Illegal XDP return value 4294967274 on prog (id 36) dev syz_tun, expect packet loss! [ 180.198908][ T6790] netlink: 8 bytes leftover after parsing attributes in process `syz.5.345'. [ 180.902669][ T36] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 181.062738][ T36] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 181.064594][ T36] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 181.064627][ T36] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 181.064672][ T36] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.171875][ T6786] uprobe: syz.3.343:6786 failed to unregister, leaking uprobe [ 181.214650][ T6786] uprobe: syz.3.343:6786 failed to unregister, leaking uprobe [ 181.370717][ T36] usb 2-1: usb_control_msg returned -32 [ 181.370784][ T36] usbtmc 2-1:16.0: can't read capabilities [ 181.527132][ T6803] orangefs_mount: mount request failed with -4 [ 181.784398][ T6820] netlink: 'syz.0.357': attribute type 20 has an invalid length. [ 182.149952][ T10] usb 2-1: USB disconnect, device number 5 [ 183.725085][ T6859] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 183.725106][ T6859] IPv6: NLM_F_CREATE should be set when creating new route [ 185.676479][ T6871] syz.0.376 (6871) used greatest stack depth: 18984 bytes left [ 186.069245][ T5596] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 186.121122][ T6897] 9p: Bad value for 'wfdno' [ 186.212653][ T5596] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 186.212746][ T37] kauditd_printk_skb: 21 callbacks suppressed [ 186.212763][ T37] audit: type=1804 audit(1787180227.479:33): pid=6893 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.0.385" name="/newroot/86/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=205 res=1 errno=0 [ 186.215142][ T5596] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 186.215172][ T5596] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 186.215198][ T5596] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 186.215221][ T5596] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 186.215262][ T5596] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.332364][ T5596] usb 3-1: config 0 descriptor?? [ 187.868129][ T5596] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 189.362184][ T36] usb 3-1: reset high-speed USB device number 6 using dummy_hcd [ 190.346382][ T6961] FAULT_FLAG_ALLOW_RETRY missing 801 [ 190.346414][ T6961] CPU: 1 UID: 0 PID: 6961 Comm: syz.2.410 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 190.346449][ T6961] Tainted: [L]=SOFTLOCKUP [ 190.346457][ T6961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 190.346470][ T6961] Call Trace: [ 190.346478][ T6961] [ 190.346488][ T6961] dump_stack_lvl+0xe8/0x150 [ 190.346530][ T6961] handle_userfault+0x155b/0x1800 [ 190.346580][ T6961] ? __pfx___folio_put+0x10/0x10 [ 190.346618][ T6961] ? __pfx_handle_userfault+0x10/0x10 [ 190.346658][ T6961] ? do_pte_missing+0x26ce/0x28f0 [ 190.346707][ T6961] handle_mm_fault+0xd28/0x13f0 [ 190.346741][ T6961] ? handle_mm_fault+0xe8/0x13f0 [ 190.346769][ T6961] ? __pfx_handle_mm_fault+0x10/0x10 [ 190.346807][ T6961] ? follow_page_pte+0xaf1/0xe80 [ 190.346842][ T6961] ? __pfx_follow_page_pte+0x10/0x10 [ 190.346880][ T6961] __get_user_pages+0x166b/0x2590 [ 190.346951][ T6961] populate_vma_page_range+0x2be/0x3c0 [ 190.346993][ T6961] ? __pfx_populate_vma_page_range+0x10/0x10 [ 190.347030][ T6961] ? vma_wants_writenotify+0xb2/0x340 [ 190.347069][ T6961] ? vma_set_page_prot+0xc3/0x100 [ 190.347095][ T6961] mprotect_fixup+0x9a3/0xb10 [ 190.347132][ T6961] ? __pfx_mprotect_fixup+0x10/0x10 [ 190.347163][ T6961] ? mas_next_slot+0xc94/0xd70 [ 190.347229][ T6961] do_mprotect_pkey+0x9d3/0xcd0 [ 190.347276][ T6961] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 190.347341][ T6961] ? rcu_is_watching+0x16/0xb0 [ 190.347381][ T6961] __x64_sys_mprotect+0x80/0x90 [ 190.347417][ T6961] do_syscall_64+0x166/0x520 [ 190.347440][ T6961] ? trace_irq_disable+0x3b/0x140 [ 190.347463][ T6961] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.347487][ T6961] ? clear_bhb_loop+0x70/0xc0 [ 190.347515][ T6961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.347539][ T6961] RIP: 0033:0x7ff643b0e0d9 [ 190.347561][ T6961] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.347580][ T6961] RSP: 002b:00007ff641d45028 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 190.347604][ T6961] RAX: ffffffffffffffda RBX: 00007ff643d96090 RCX: 00007ff643b0e0d9 [ 190.347622][ T6961] RDX: 000000000000000a RSI: 0000000000c00000 RDI: 0000200000400000 [ 190.347637][ T6961] RBP: 00007ff643ba5024 R08: 0000000000000000 R09: 0000000000000000 [ 190.347651][ T6961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 190.347665][ T6961] R13: 00007ff643d96128 R14: 00007ff643d96090 R15: 00007ffee8a24c08 [ 190.347703][ T6961] [ 190.752335][ T5573] usb 3-1: USB disconnect, device number 6 [ 191.084170][ T6967] faux_driver vgem: [drm] Unknown color mode 6; guessing buffer size. [ 192.043387][ T6975] Process accounting resumed [ 192.990666][ T6987] ohci-platform QEMU0001:00: error -ENXIO: IRQ index 0 not found [ 193.682540][ T36] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 193.859652][ T36] usb 3-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 193.875898][ T36] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 193.908827][ T36] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.908858][ T36] usb 3-1: Product: syz [ 193.908876][ T36] usb 3-1: Manufacturer: syz [ 193.908894][ T36] usb 3-1: SerialNumber: syz [ 194.113175][ T36] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 194.507677][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.507876][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.758140][ T36] gspca_mr97310a: reg write [21] error -71 [ 194.758221][ T36] mr97310a 3-1:1.0: probe with driver mr97310a failed with error -71 [ 194.780032][ T200] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 194.799909][ T36] usb 3-1: USB disconnect, device number 7 [ 194.921835][ T200] usb 6-1: Using ep0 maxpacket: 16 [ 194.922846][ T200] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 194.924886][ T200] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 194.924913][ T200] usb 6-1: config 0 has no interface number 0 [ 194.924969][ T200] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 194.924997][ T200] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 194.928676][ T200] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.928698][ T200] usb 6-1: Product: syz [ 194.928712][ T200] usb 6-1: Manufacturer: syz [ 194.928726][ T200] usb 6-1: SerialNumber: syz [ 195.034394][ T200] usb 6-1: config 0 descriptor?? [ 195.037364][ T7016] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 195.037503][ T7016] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 195.312960][ T7016] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 195.313126][ T7016] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 196.567414][ T200] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 196.567447][ T200] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 196.567723][ T200] asix 6-1:0.34: probe with driver asix failed with error -71 [ 196.579972][ T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 196.627741][ T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 196.649323][ T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 196.657450][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 196.660360][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 196.743064][ T146] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.829501][ T200] usb 6-1: USB disconnect, device number 2 [ 197.761825][ T36] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 197.936444][ T36] usb 3-1: Using ep0 maxpacket: 32 [ 197.944056][ T36] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 197.972292][ T36] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 197.972313][ T36] usb 3-1: config 0 has no interface number 0 [ 197.972346][ T36] usb 3-1: config 0 interface 184 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 255 [ 197.972364][ T36] usb 3-1: config 0 interface 184 has no altsetting 0 [ 198.031446][ T36] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.031467][ T36] usb 3-1: Product: syz [ 198.031478][ T36] usb 3-1: Manufacturer: syz [ 198.031488][ T36] usb 3-1: SerialNumber: syz [ 198.091299][ T36] usb 3-1: config 0 descriptor?? [ 198.101374][ T7055] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 198.348796][ T7055] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 198.387396][ T146] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.034522][ T4900] Bluetooth: hci4: command tx timeout [ 199.286926][ T36] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 199.286959][ T36] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 199.517473][ T146] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.544736][ T36] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 199.544760][ T36] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 199.544775][ T36] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 199.544788][ T36] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 199.545006][ T36] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 199.625098][ T36] usb 3-1: USB disconnect, device number 8 [ 200.209997][ T146] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.101926][ T4900] Bluetooth: hci4: command tx timeout [ 203.182313][ T4900] Bluetooth: hci4: command tx timeout [ 203.670081][ T146] bridge_slave_1: left allmulticast mode [ 203.759576][ T146] bridge_slave_1: left promiscuous mode [ 203.816508][ T146] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.200951][ T146] bridge_slave_0: left allmulticast mode [ 204.200992][ T146] bridge_slave_0: left promiscuous mode [ 204.201271][ T146] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.113947][ T999] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 205.262339][ T4900] Bluetooth: hci4: command tx timeout [ 205.291726][ T999] usb 3-1: Using ep0 maxpacket: 32 [ 205.292753][ T999] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 205.303544][ T999] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.364791][ T999] usb 3-1: config 0 descriptor?? [ 205.447815][ T999] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 206.334989][ T146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.455801][ T146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.497298][ T146] bond0 (unregistering): Released all slaves [ 206.657552][ T5246] 8021q: adding VLAN 0 to HW filter on device eth1 [ 206.833179][ T999] gspca_vc032x: reg_w err -71 [ 206.833213][ T999] gspca_vc032x: I2c Bus Busy Wait 00 [ 206.833224][ T999] gspca_vc032x: I2c Bus Busy Wait 00 [ 206.833233][ T999] gspca_vc032x: I2c Bus Busy Wait 00 [ 206.833242][ T999] gspca_vc032x: I2c Bus Busy Wait 00 [ 206.833251][ T999] gspca_vc032x: I2c Bus Busy Wait 00 [ 206.833260][ T999] gspca_vc032x: I2c Bus Busy Wait 00 [ 206.833269][ T999] gspca_vc032x: I2c Bus Busy Wait 00 [ 206.833277][ T999] gspca_vc032x: I2c Bus Busy Wait 00 [ 206.833285][ T999] gspca_vc032x: I2c Bus Busy Wait 00 [ 206.833294][ T999] gspca_vc032x: I2c Bus Busy Wait 00 [ 206.833302][ T999] gspca_vc032x: I2c Bus Busy Wait 00 [ 206.833312][ T999] gspca_vc032x: I2c Bus Busy Wait 00 [ 206.833320][ T999] gspca_vc032x: I2c Bus Busy Wait 00 [ 206.833329][ T999] gspca_vc032x: I2c Bus Busy Wait 00 [ 206.833338][ T999] gspca_vc032x: I2c Bus Busy Wait 00 [ 206.833347][ T999] gspca_vc032x: I2c Bus Busy Wait 00 [ 206.833356][ T999] gspca_vc032x: I2c Bus Busy Wait 00 [ 206.833364][ T999] gspca_vc032x: I2c Bus Busy Wait 00 [ 206.833378][ T999] gspca_vc032x: Unknown sensor... [ 206.833462][ T999] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 206.956755][ T999] usb 3-1: USB disconnect, device number 9 [ 208.071467][ T7178] bridge0: port 3(syz_tun) entered blocking state [ 208.072064][ T7178] bridge0: port 3(syz_tun) entered disabled state [ 208.073220][ T7178] syz_tun: entered allmulticast mode [ 208.094792][ T7178] syz_tun: entered promiscuous mode [ 208.110374][ T7178] bridge0: port 3(syz_tun) entered blocking state [ 208.110495][ T7178] bridge0: port 3(syz_tun) entered forwarding state [ 208.325974][ T7188] netlink: 148 bytes leftover after parsing attributes in process `syz.3.482'. [ 208.326002][ T7188] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 208.503694][ T999] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 208.666931][ T999] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 208.671225][ T999] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.884059][ T999] usb 6-1: config 0 descriptor?? [ 209.180498][ T999] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 209.377018][ T7040] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.380291][ T7040] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.380701][ T7040] bridge_slave_0: entered allmulticast mode [ 209.408602][ T7040] bridge_slave_0: entered promiscuous mode [ 209.482445][ T999] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 1 [ 209.482593][ T999] [drm] Initialized udl on minor 1 [ 209.725269][ T999] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 209.779343][ T999] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 209.836796][ T999] usb 6-1: USB disconnect, device number 3 [ 209.858755][ T5781] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 210.525674][ T7040] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.526051][ T7040] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.526299][ T7040] bridge_slave_1: entered allmulticast mode [ 210.626263][ T7040] bridge_slave_1: entered promiscuous mode [ 211.274592][ T7040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.324033][ T7040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.981753][ T5573] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 212.137371][ T5573] usb 2-1: unable to get BOS descriptor or descriptor too short [ 212.139052][ T5573] usb 2-1: not running at top speed; connect to a high speed hub [ 212.139092][ T5573] usb 2-1: New USB device found, idVendor=1199, idProduct=6893, bcdDevice=ad.70 [ 212.184212][ T5573] usb 2-1: config 2 has an invalid interface number: 93 but max is 0 [ 212.184254][ T5573] usb 2-1: config 2 has no interface number 0 [ 212.184294][ T5573] usb 2-1: config 2 interface 93 has no altsetting 0 [ 212.197422][ T5573] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.197452][ T5573] usb 2-1: Product: syz [ 212.197469][ T5573] usb 2-1: Manufacturer: syz [ 212.197483][ T5573] usb 2-1: SerialNumber: syz [ 212.556259][ T5573] sierra 2-1:2.93: Sierra USB modem converter detected [ 212.646828][ T5573] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 212.752938][ T5573] usb 2-1: USB disconnect, device number 6 [ 212.814686][ T7040] team0: Port device team_slave_0 added [ 212.817229][ T5246] 8021q: adding VLAN 0 to HW filter on device eth2 [ 212.868302][ T5573] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 212.870907][ T5573] sierra 2-1:2.93: device disconnected [ 212.884390][ T7040] team0: Port device team_slave_1 added [ 213.309584][ T146] hsr_slave_0: left promiscuous mode [ 213.353958][ T146] hsr_slave_1: left promiscuous mode [ 213.439036][ T146] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.439161][ T146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.560090][ T146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 213.560115][ T146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.632810][ T7277] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 214.003930][ T146] veth1_macvtap: left promiscuous mode [ 214.004280][ T146] veth0_macvtap: left promiscuous mode [ 214.009360][ T146] veth1_vlan: left promiscuous mode [ 214.009890][ T146] veth0_vlan: left promiscuous mode [ 217.255133][ T146] team0 (unregistering): Port device team_slave_1 removed [ 217.325438][ T146] team0 (unregistering): Port device team_slave_0 removed [ 219.524379][ T7040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.524396][ T7040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 219.524424][ T7040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.530984][ T7040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.531000][ T7040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 219.531027][ T7040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.104672][ T7040] hsr_slave_0: entered promiscuous mode [ 220.124021][ T7040] hsr_slave_1: entered promiscuous mode [ 220.154087][ T7040] debugfs: 'hsr0' already exists in 'hsr' [ 220.154115][ T7040] Cannot create hsr debugfs directory [ 220.794421][ T7445] netlink: 104 bytes leftover after parsing attributes in process `syz.1.588'. [ 221.546217][ T5596] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 221.791008][ T5596] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 221.833592][ T5596] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.858856][ T5596] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.858888][ T5596] usb 6-1: Product: syz [ 221.858904][ T5596] usb 6-1: Manufacturer: syz [ 221.858919][ T5596] usb 6-1: SerialNumber: syz [ 222.167406][ T5593] Bluetooth: hci1: command 0x0406 tx timeout [ 222.179557][ T5603] Bluetooth: hci0: command 0x0406 tx timeout [ 222.179596][ T5603] Bluetooth: hci2: command 0x0406 tx timeout [ 222.567495][ T7451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.568176][ T7451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.786376][ T5596] cdc_ncm 6-1:1.0: bind() failure [ 222.840648][ T5596] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 222.840711][ T5596] cdc_ncm 6-1:1.1: bind() failure [ 222.904479][ T5596] usb 6-1: USB disconnect, device number 4 [ 224.008084][ T5246] 8021q: adding VLAN 0 to HW filter on device eth3 [ 224.711119][ T7518] netlink: 12 bytes leftover after parsing attributes in process `syz.3.615'. [ 224.711153][ T7518] netlink: 4 bytes leftover after parsing attributes in process `syz.3.615'. [ 225.049867][ T7523] mmap: syz.1.618 (7523) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 225.123227][ T7518] netlink: 12 bytes leftover after parsing attributes in process `syz.3.615'. [ 225.123273][ T7518] netlink: 4 bytes leftover after parsing attributes in process `syz.3.615'. [ 225.138369][ T56] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.138432][ T56] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.138474][ T56] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.138514][ T56] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.404010][ T7040] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 226.769035][ T7040] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 226.770655][ T7040] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 226.933853][ T7040] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 226.951820][ T7040] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 227.128721][ T7040] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 227.141790][ T7040] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 227.223000][ T7040] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 227.331818][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 227.481805][ T10] usb 4-1: device descriptor read/64, error -71 [ 227.762873][ T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 227.891900][ T10] usb 4-1: device descriptor read/64, error -71 [ 228.003068][ T10] usb usb4-port1: attempt power cycle [ 228.178494][ T7040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.313873][ T7040] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.316959][ T5246] 8021q: adding VLAN 0 to HW filter on device eth4 [ 228.370775][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.370916][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.391754][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 228.423209][ T10] usb 4-1: device descriptor read/8, error -71 [ 228.552002][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.552149][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.666636][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 228.686324][ T10] usb 4-1: device descriptor read/8, error -71 [ 228.792234][ T10] usb usb4-port1: unable to enumerate USB device [ 230.384218][ C0] vcan0: j1939_tp_rxtimer: 0xffff888062ac5400: rx timeout, send abort [ 230.388734][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888062ac5400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 230.420128][ T7040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.690920][ T7040] veth0_vlan: entered promiscuous mode [ 231.770081][ T7040] veth1_vlan: entered promiscuous mode [ 232.125450][ T7040] veth0_macvtap: entered promiscuous mode [ 232.212178][ T7040] veth1_macvtap: entered promiscuous mode [ 232.286649][ T7699] netlink: 4 bytes leftover after parsing attributes in process `syz.1.676'. [ 232.344297][ T7040] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.728565][ T7040] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.992158][ T162] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.992363][ T162] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.364675][ T7713] netlink: 4 bytes leftover after parsing attributes in process `syz.3.682'. [ 233.618913][ T1497] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.637023][ T1497] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.347529][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.347551][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.101137][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.101160][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.183380][ T5879] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 236.354855][ T5879] usb 4-1: Using ep0 maxpacket: 32 [ 236.356293][ T5879] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 236.397976][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.398002][ T5879] usb 4-1: Product: syz [ 236.398017][ T5879] usb 4-1: Manufacturer: syz [ 236.398031][ T5879] usb 4-1: SerialNumber: syz [ 236.451380][ T5879] usb 4-1: config 0 descriptor?? [ 236.904844][ T5879] airspy 4-1:0.0: Board ID: 00 [ 236.904868][ T5879] airspy 4-1:0.0: Firmware version: [ 237.061852][ T5781] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 237.221736][ T5781] usb 7-1: Using ep0 maxpacket: 16 [ 237.222720][ T5781] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 237.276151][ T5781] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.276181][ T5781] usb 7-1: Product: syz [ 237.276197][ T5781] usb 7-1: Manufacturer: syz [ 237.276212][ T5781] usb 7-1: SerialNumber: syz [ 238.033713][ T5879] airspy 4-1:0.0: usb_control_msg() failed -71 request 10 [ 238.081875][ T5781] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 238.105769][ T5781] usb 7-1: USB disconnect, device number 2 [ 238.508644][ T5879] airspy 4-1:0.0: Registered as swradio24 [ 238.508670][ T5879] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 238.555498][ T5879] usb 4-1: USB disconnect, device number 10 [ 240.576482][ T7842] jffs2: notice: (7842) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 241.978231][ T7882] netlink: 'syz.1.747': attribute type 21 has an invalid length. [ 241.978256][ T7882] netlink: 'syz.1.747': attribute type 22 has an invalid length. [ 241.978270][ T7882] netlink: 'syz.1.747': attribute type 23 has an invalid length. [ 241.978284][ T7882] netlink: 'syz.1.747': attribute type 25 has an invalid length. [ 241.978297][ T7882] netlink: 96 bytes leftover after parsing attributes in process `syz.1.747'. [ 247.185358][ T8000] ohci-platform QEMU0001:00: error -ENXIO: IRQ index 0 not found [ 251.414082][ T8074] syz.3.811 (8074) used greatest stack depth: 18248 bytes left [ 251.720660][ T8102] netlink: 'syz.6.817': attribute type 3 has an invalid length. [ 251.720680][ T8102] netlink: 8 bytes leftover after parsing attributes in process `syz.6.817'. [ 252.431701][ T5573] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 252.601679][ T5573] usb 4-1: Using ep0 maxpacket: 8 [ 252.602529][ T5573] usb 4-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 252.604140][ T5573] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.604183][ T5573] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 252.604215][ T5573] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 252.604240][ T5573] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 252.609804][ T5573] usb 4-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 252.609831][ T5573] usb 4-1: Product: syz [ 252.609847][ T5573] usb 4-1: Manufacturer: syz [ 252.609862][ T5573] usb 4-1: SerialNumber: syz [ 252.641744][ T5781] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 252.721402][ T5573] usb 4-1: config 0 descriptor?? [ 252.801877][ T5781] usb 2-1: Using ep0 maxpacket: 8 [ 252.803602][ T5781] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 252.850357][ T5781] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.850419][ T5781] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.894602][ T5781] usb 2-1: config 0 descriptor?? [ 252.920738][ T5781] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 252.929717][ T5573] rc_core: IR keymap rc-imon-rsc not found [ 252.929736][ T5573] Registered IR keymap rc-empty [ 253.050961][ T5573] rc rc0: iMON Station as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 253.174383][ T5573] input: iMON Station as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input9 [ 253.498438][ T5573] imon_raw 4-1:0.0: probe with driver imon_raw failed with error -90 [ 254.139525][ T5573] usb 4-1: USB disconnect, device number 11 [ 254.420151][ T5781] gspca_vc032x: reg_w err -71 [ 254.420245][ T5781] vc032x 2-1:0.0: probe with driver vc032x failed with error -71 [ 254.461787][ T5781] usb 2-1: USB disconnect, device number 7 [ 255.907730][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.907804][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.336662][ T5598] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 257.386100][ T5598] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 257.424120][ T5598] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 257.456257][ T5598] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 257.466240][ T5598] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 257.971098][ T1292] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 257.971138][ T1292] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.555270][ T1292] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 259.555309][ T1292] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.592267][ T4900] Bluetooth: hci1: command tx timeout [ 260.121808][ T37] audit: type=1800 audit(1787180301.479:34): pid=8280 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.886" name="idVendor" dev="configfs" ino=18307 res=0 errno=0 [ 260.440262][ T1292] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 260.440300][ T1292] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.672822][ T5573] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 260.781784][ T4900] Bluetooth: hci3: command 0x0406 tx timeout [ 260.832589][ T5573] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 260.834267][ T5573] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.870005][ T5573] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.870035][ T5573] usb 2-1: Product: syz [ 260.870051][ T5573] usb 2-1: Manufacturer: syz [ 260.870066][ T5573] usb 2-1: SerialNumber: syz [ 261.371359][ T8289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.374557][ T8289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.422394][ T5573] cdc_ncm 2-1:1.0: bind() failure [ 261.459356][ T5573] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 261.459403][ T5573] cdc_ncm 2-1:1.1: bind() failure [ 261.528133][ T5573] usb 2-1: USB disconnect, device number 8 [ 261.664884][ T5598] Bluetooth: hci1: command tx timeout [ 261.787310][ T1292] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.787349][ T1292] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.747132][ T5598] Bluetooth: hci1: command tx timeout [ 264.780848][ T146] Bluetooth: hci5: Frame reassembly failed (-90) [ 265.160403][ T36] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 265.322647][ T36] usb 2-1: Using ep0 maxpacket: 16 [ 265.323884][ T36] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 265.325764][ T36] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 265.325788][ T36] usb 2-1: config 0 has no interface number 0 [ 265.325834][ T36] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 265.325862][ T36] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 265.330627][ T36] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.330654][ T36] usb 2-1: Product: syz [ 265.330670][ T36] usb 2-1: Manufacturer: syz [ 265.330686][ T36] usb 2-1: SerialNumber: syz [ 265.415707][ T36] usb 2-1: config 0 descriptor?? [ 265.419284][ T8370] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 265.419688][ T8370] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 265.448303][ T1292] bridge_slave_1: left allmulticast mode [ 265.448337][ T1292] bridge_slave_1: left promiscuous mode [ 265.448627][ T1292] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.665229][ T1292] bridge_slave_0: left allmulticast mode [ 265.665267][ T1292] bridge_slave_0: left promiscuous mode [ 265.700785][ T8370] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 265.701332][ T8370] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 265.718143][ T1292] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.821700][ T4900] Bluetooth: hci1: command tx timeout [ 265.916840][ T36] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 266.783394][ T5598] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 266.793951][ T4900] Bluetooth: hci5: command 0x1003 tx timeout [ 267.197672][ T36] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 267.197703][ T36] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 267.197954][ T36] asix 2-1:0.34: probe with driver asix failed with error -71 [ 267.364470][ T36] usb 2-1: USB disconnect, device number 9 [ 268.390247][ T37] audit: type=1800 audit(1787180309.729:35): pid=8431 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.945" name="addr_trtype" dev="configfs" ino=19728 res=0 errno=0 [ 268.970382][ T1292] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 269.144518][ T1292] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 269.209145][ T1292] bond0 (unregistering): Released all slaves [ 269.616019][ T8221] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.616146][ T8221] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.618025][ T8221] bridge_slave_0: entered allmulticast mode [ 269.691217][ T8221] bridge_slave_0: entered promiscuous mode [ 269.784190][ T8221] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.784320][ T8221] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.784589][ T8221] bridge_slave_1: entered allmulticast mode [ 269.825054][ T8221] bridge_slave_1: entered promiscuous mode [ 270.771661][ T5573] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 270.835352][ T8221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.948034][ T5573] usb 7-1: Using ep0 maxpacket: 32 [ 270.949130][ T5573] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 270.993893][ T5573] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 270.993918][ T5573] usb 7-1: config 0 has no interface number 0 [ 270.993960][ T5573] usb 7-1: config 0 interface 184 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 255 [ 270.993984][ T5573] usb 7-1: config 0 interface 184 has no altsetting 0 [ 271.000821][ T5573] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.000844][ T5573] usb 7-1: Product: syz [ 271.000859][ T5573] usb 7-1: Manufacturer: syz [ 271.000872][ T5573] usb 7-1: SerialNumber: syz [ 271.089248][ T5573] usb 7-1: config 0 descriptor?? [ 271.090756][ T8492] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 271.124394][ T8221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 271.371719][ T8492] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 271.931714][ T8221] team0: Port device team_slave_0 added [ 271.988639][ T8221] team0: Port device team_slave_1 added [ 272.230234][ T5573] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 272.230270][ T5573] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 272.439797][ T5573] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 272.439829][ T5573] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 272.439848][ T5573] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 272.439865][ T5573] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 272.440126][ T5573] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71 [ 272.568774][ T5573] usb 7-1: USB disconnect, device number 3 [ 272.949377][ T5246] 8021q: adding VLAN 0 to HW filter on device eth5 [ 273.194092][ T8221] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.194113][ T8221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 273.194144][ T8221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.202535][ T8221] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.202555][ T8221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 273.202584][ T8221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.606388][ T1292] hsr_slave_0: left promiscuous mode [ 273.663791][ T1292] hsr_slave_1: left promiscuous mode [ 273.667355][ T1292] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.667386][ T1292] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.707728][ T8551] netlink: 28 bytes leftover after parsing attributes in process `syz.1.990'. [ 273.707769][ T8551] netlink: 'syz.1.990': attribute type 7 has an invalid length. [ 273.707785][ T8551] netlink: 'syz.1.990': attribute type 8 has an invalid length. [ 273.707800][ T8551] netlink: 4 bytes leftover after parsing attributes in process `syz.1.990'. [ 273.759761][ T1292] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.759792][ T1292] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.062972][ T1292] veth1_macvtap: left promiscuous mode [ 274.063089][ T1292] veth0_macvtap: left promiscuous mode [ 274.063361][ T1292] veth1_vlan: left promiscuous mode [ 274.068273][ T1292] veth0_vlan: left promiscuous mode [ 275.552479][ T1292] team0 (unregistering): Port device team_slave_1 removed [ 275.628982][ T1292] team0 (unregistering): Port device team_slave_0 removed [ 276.487298][ T8546] vcan1: entered promiscuous mode [ 276.487330][ T8546] vcan1: entered allmulticast mode [ 277.244905][ T8612] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1017'. [ 277.336165][ T8221] hsr_slave_0: entered promiscuous mode [ 277.365526][ T8221] hsr_slave_1: entered promiscuous mode [ 277.366413][ T8221] debugfs: 'hsr0' already exists in 'hsr' [ 277.366435][ T8221] Cannot create hsr debugfs directory [ 277.981777][ T5879] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 278.132991][ T5879] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 278.134594][ T5879] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 278.134619][ T5879] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 278.134642][ T5879] usb 7-1: config 1 has no interface number 0 [ 278.134688][ T5879] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 278.134717][ T5879] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 278.134746][ T5879] usb 7-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 278.134782][ T5879] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 278.134806][ T5879] usb 7-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 278.138036][ T5879] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.138072][ T5879] usb 7-1: Product: syz [ 278.138089][ T5879] usb 7-1: Manufacturer: syz [ 278.138105][ T5879] usb 7-1: SerialNumber: syz [ 278.299609][ T8623] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 278.479978][ T4900] Bluetooth: hci3: command 0x0406 tx timeout [ 278.742447][ T8623] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 279.183794][ T5879] cdc_ncm 7-1:1.1: bind() failure [ 279.327226][ T8646] jffs2: notice: (8646) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 279.423412][ T999] usb 7-1: USB disconnect, device number 4 [ 279.715958][ T5246] 8021q: adding VLAN 0 to HW filter on device eth6 [ 280.980112][ T8221] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 281.006932][ T8221] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 281.008549][ T8221] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 281.049767][ T8221] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 281.066867][ T8221] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 281.144718][ T8221] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 281.148060][ T8221] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 281.202633][ T8221] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 281.375109][ T8221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.468173][ T8221] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.494907][ T1292] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.495043][ T1292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.530364][ T1300] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.530565][ T1300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.653765][ T5246] 8021q: adding VLAN 0 to HW filter on device eth7 [ 282.405715][ T8221] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 282.708766][ T5246] 8021q: adding VLAN 0 to HW filter on device eth8 [ 282.902704][ T8221] veth0_vlan: entered promiscuous mode [ 282.920475][ T8221] veth1_vlan: entered promiscuous mode [ 282.988394][ T8221] veth0_macvtap: entered promiscuous mode [ 283.000707][ T8221] veth1_macvtap: entered promiscuous mode [ 283.074445][ T8221] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 283.098887][ T8221] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 283.460467][ T162] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.463104][ T3177] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.727937][ T1497] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.739583][ T3177] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.894068][ T1231] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.894089][ T1231] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.018326][ T1300] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.018351][ T1300] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.049729][ T8759] loop4: detected capacity change from 0 to 7 [ 285.200753][ T8759] Dev loop4: unable to read RDB block 7 [ 285.200787][ T8759] loop4: AHDI p2 p3 [ 285.200811][ T8759] loop4: partition table partially beyond EOD, truncated [ 285.368625][ T8759] loop4: p3 start 335544320 is beyond EOD, truncated [ 295.351704][ T999] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 295.448172][ T8992] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1126'. [ 295.532144][ T999] usb 8-1: Using ep0 maxpacket: 32 [ 295.555119][ T999] usb 8-1: New USB device found, idVendor=1965, idProduct=0018, bcdDevice=6d.59 [ 295.577663][ T999] usb 8-1: config 14 has an invalid interface number: 225 but max is 0 [ 295.577696][ T999] usb 8-1: config 14 has no interface number 0 [ 295.577746][ T999] usb 8-1: config 14 interface 225 altsetting 254 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 295.577778][ T999] usb 8-1: config 14 interface 225 altsetting 254 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 295.577810][ T999] usb 8-1: config 14 interface 225 altsetting 254 has an invalid descriptor for endpoint zero, skipping [ 295.577835][ T999] usb 8-1: config 14 interface 225 has no altsetting 0 [ 295.648642][ T999] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.648672][ T999] usb 8-1: Product: syz [ 295.648688][ T999] usb 8-1: Manufacturer: syz [ 295.648705][ T999] usb 8-1: SerialNumber: syz [ 296.307665][ T999] usb 8-1: USB disconnect, device number 2 [ 301.651936][ T9151] fuse: Bad value for 'fd' [ 303.691447][ T999] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 303.871716][ T999] usb 8-1: Using ep0 maxpacket: 16 [ 303.874773][ T999] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 303.876857][ T999] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 303.939661][ T999] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.939692][ T999] usb 8-1: Product: syz [ 303.939708][ T999] usb 8-1: Manufacturer: syz [ 303.939724][ T999] usb 8-1: SerialNumber: syz [ 304.071104][ T999] usb 8-1: config 0 descriptor?? [ 304.116354][ T999] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 304.116389][ T999] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 304.727232][ T999] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 305.151439][ T9211] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1187'. [ 305.789370][ T999] em28xx 8-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 305.789404][ T999] em28xx 8-1:0.0: board has no eeprom [ 306.111650][ T999] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 306.111682][ T999] em28xx 8-1:0.0: dvb set to bulk mode. [ 306.113063][ T36] em28xx 8-1:0.0: Binding DVB extension [ 306.253294][ T999] usb 8-1: USB disconnect, device number 3 [ 306.279508][ T999] em28xx 8-1:0.0: Disconnecting em28xx [ 306.742993][ T36] em28xx 8-1:0.0: Registering input extension [ 306.743743][ T999] em28xx 8-1:0.0: Closing input extension [ 307.430666][ T999] em28xx: Freeing device [ 312.478353][ T9353] fuse: Bad value for 'fd' [ 315.964872][ T9425] batadv_slave_1: entered promiscuous mode [ 315.973110][ T9423] batadv_slave_1: left promiscuous mode [ 317.355251][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.355317][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.507867][ T9453] jffs2: notice: (9453) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 319.502126][ T5598] Bluetooth: hci4: command 0x0406 tx timeout [ 323.603587][ T9572] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 325.158801][ T9609] fuse: Bad value for 'fd' [ 325.610337][ T9620] fuse: Bad value for 'fd' [ 328.447686][ T9644] uprobe: syz.5.1325:9644 failed to unregister, leaking uprobe [ 328.476261][ T9644] uprobe: syz.5.1325:9644 failed to unregister, leaking uprobe [ 329.791688][ T5781] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 329.952975][ T5781] usb 2-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00 [ 329.957835][ T5781] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 329.957869][ T5781] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 329.957907][ T5781] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.759459][ T5781] pegasus 2-1:1.0: can't reset MAC [ 331.759820][ T5781] pegasus 2-1:1.0: probe with driver pegasus failed with error -5 [ 331.841361][ T5781] usb 2-1: USB disconnect, device number 10 [ 332.101159][ T9738] netlink: 'syz.5.1360': attribute type 1 has an invalid length. [ 332.866979][ T9738] 8021q: adding VLAN 0 to HW filter on device bond2 [ 333.142384][ T9742] bond2: (slave dummy0): Enslaving as a backup interface with an up link [ 333.191936][ T66] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 333.336119][ T145] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 334.364275][ T9776] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.1378'. [ 336.307575][ T9841] syz_tun: entered allmulticast mode [ 336.455378][ T9841] dvmrp6: entered allmulticast mode [ 336.621022][ T9840] syz_tun: left allmulticast mode [ 338.041013][ T9880] FAULT_INJECTION: forcing a failure. [ 338.041013][ T9880] name fail_futex, interval 1, probability 0, space 0, times 0 [ 338.041066][ T9880] CPU: 1 UID: 0 PID: 9880 Comm: syz.7.1415 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 338.041100][ T9880] Tainted: [L]=SOFTLOCKUP [ 338.041109][ T9880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 338.041136][ T9880] Call Trace: [ 338.041147][ T9880] [ 338.041158][ T9880] dump_stack_lvl+0xe8/0x150 [ 338.041201][ T9880] should_fail_ex+0x46b/0x600 [ 338.041240][ T9880] get_futex_key+0x1b4/0x1580 [ 338.041283][ T9880] ? __pfx_get_futex_key+0x10/0x10 [ 338.041314][ T9880] ? update_se+0x90/0xf30 [ 338.041347][ T9880] futex_wait_setup+0x4a/0x590 [ 338.041393][ T9880] ? __futex_wait+0xe1/0x410 [ 338.041434][ T9880] __futex_wait+0x161/0x410 [ 338.041476][ T9880] ? __pfx___futex_wait+0x10/0x10 [ 338.041515][ T9880] ? __pfx_futex_wake_mark+0x10/0x10 [ 338.041557][ T9880] ? try_to_wake_up+0x843/0x1430 [ 338.041605][ T9880] futex_wait+0x121/0x390 [ 338.041642][ T9880] ? __pfx_futex_wait+0x10/0x10 [ 338.041686][ T9880] ? trace_sched_exit_tp+0x3a/0x130 [ 338.041711][ T9880] ? __schedule+0x16f5/0x5510 [ 338.041747][ T9880] do_futex+0x3e7/0x4e0 [ 338.041782][ T9880] ? __pfx_do_futex+0x10/0x10 [ 338.041823][ T9880] __se_sys_futex+0x3a8/0x450 [ 338.041861][ T9880] ? __pfx___se_sys_futex+0x10/0x10 [ 338.041891][ T9880] ? rcu_is_watching+0x16/0xb0 [ 338.041927][ T9880] ? __x64_sys_futex+0x21/0xf0 [ 338.041961][ T9880] do_syscall_64+0x166/0x520 [ 338.041984][ T9880] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.042008][ T9880] ? clear_bhb_loop+0x70/0xc0 [ 338.042037][ T9880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.042093][ T9880] RIP: 0033:0x7f227ed2e0d9 [ 338.042116][ T9880] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 338.042138][ T9880] RSP: 002b:00007f227cf860e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 338.042165][ T9880] RAX: ffffffffffffffda RBX: 00007f227efb5fa8 RCX: 00007f227ed2e0d9 [ 338.042184][ T9880] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f227efb5fa8 [ 338.042199][ T9880] RBP: 00007f227efb5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 338.042215][ T9880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 338.042230][ T9880] R13: 00007f227efb6038 R14: 00007ffda22cfb70 R15: 00007ffda22cfc58 [ 338.042267][ T9880] [ 338.726475][ T9890] fuse: Bad value for 'fd' [ 341.571866][ T10] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 341.733707][ T10] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 341.735846][ T10] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 341.735908][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 341.740020][ T10] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 341.740051][ T10] usb 8-1: Manufacturer: syz [ 341.798067][ T10] usb 8-1: config 0 descriptor?? [ 341.931444][ T10] rc_core: IR keymap rc-hauppauge not found [ 341.931468][ T10] Registered IR keymap rc-empty [ 341.966425][ T10] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 341.993227][ T10] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input11 [ 342.292281][ C0] igorplugusb 8-1:0.0: receive overflow, at least 3 lost [ 342.292424][ T9948] rc rc0: two consecutive events of type space [ 342.694076][ T999] usb 8-1: USB disconnect, device number 4 [ 343.280075][ T9977] jffs2: notice: (9977) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 344.668240][T10008] af_packet: tpacket_rcv: packet too big, clamped from 28 to 4294967272. macoff=96 [ 345.163921][ T9998] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 347.770514][ T37] audit: type=1400 audit(1787180389.089:36): lsm=SMACK fn=smack_unix_stream_connect action=denied subject="w" object="_" requested=w pid=10059 comm="syz.6.1490" path=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 [ 350.759397][T10135] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 351.714712][T10160] netlink: 'syz.5.1530': attribute type 83 has an invalid length. [ 353.691184][ T37] audit: type=1326 audit(1787180395.079:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10203 comm="syz.5.1550" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54787de0d9 code=0x7ffc0000 [ 353.732650][ T37] audit: type=1326 audit(1787180395.129:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10203 comm="syz.5.1550" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54787de0d9 code=0x7ffc0000 [ 353.732706][ T37] audit: type=1326 audit(1787180395.129:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10203 comm="syz.5.1550" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54787de0d9 code=0x7ffc0000 [ 353.735323][ T37] audit: type=1326 audit(1787180395.119:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10203 comm="syz.5.1550" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54787de0d9 code=0x7ffc0000 [ 353.735484][ T37] audit: type=1326 audit(1787180395.129:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10203 comm="syz.5.1550" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f54787de0d9 code=0x7ffc0000 [ 353.735814][ T37] audit: type=1326 audit(1787180395.129:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10203 comm="syz.5.1550" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54787de0d9 code=0x7ffc0000 [ 353.735866][ T37] audit: type=1326 audit(1787180395.129:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10203 comm="syz.5.1550" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54787de0d9 code=0x7ffc0000 [ 353.802175][ T37] audit: type=1326 audit(1787180395.199:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10203 comm="syz.5.1550" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54787de0d9 code=0x7ffc0000 [ 353.802322][ T37] audit: type=1326 audit(1787180395.199:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10203 comm="syz.5.1550" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54787de0d9 code=0x7ffc0000 [ 353.847108][ T37] audit: type=1326 audit(1787180395.239:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10203 comm="syz.5.1550" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f54787de0d9 code=0x7ffc0000 [ 355.047833][T10230] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 355.384171][T10235] MTD: Couldn't look up 'mtdblock0': -2 [ 360.406462][T10352] capability: warning: `syz.7.1614' uses 32-bit capabilities (legacy support in use) [ 363.809229][T10414] fuse: Bad value for 'fd' [ 368.400685][T10541] kvm: emulating exchange as write [ 368.429605][ T5596] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 368.590251][ T5596] usb 2-1: Using ep0 maxpacket: 16 [ 368.591991][ T5596] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 368.595915][ T5596] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 368.595943][ T5596] usb 2-1: config 0 has no interfaces? [ 368.595978][ T5596] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.720331][ T5596] usb 2-1: config 0 descriptor?? [ 369.004159][ T31] usb 2-1: USB disconnect, device number 11 [ 369.894436][ T999] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 370.056926][ T999] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 370.060870][ T999] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 370.060925][ T999] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.103280][ T999] usb 8-1: config 0 descriptor?? [ 370.449918][ T999] usbhid 8-1:0.0: can't add hid device: -71 [ 370.450112][ T999] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 370.492878][ T999] usb 8-1: USB disconnect, device number 5 [ 371.042400][ T999] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 371.213051][ T999] usb 8-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 371.219187][ T999] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 371.219240][ T999] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.323921][ T999] usb 8-1: config 0 descriptor?? [ 372.217707][ T999] aiptek 8-1:0.0: Aiptek using 400 ms programming speed [ 372.236207][ T999] input: Aiptek as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input12 [ 373.406914][ C1] aiptek 8-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 373.407022][ T999] usb 8-1: USB disconnect, device number 6 [ 373.963266][T10657] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 374.386727][T10669] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1745'. [ 374.386769][T10669] netlink: 'syz.7.1745': attribute type 7 has an invalid length. [ 374.386784][T10669] netlink: 'syz.7.1745': attribute type 8 has an invalid length. [ 374.386800][T10669] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1745'. [ 375.880894][ T5596] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 376.064339][ T5596] usb 2-1: Using ep0 maxpacket: 16 [ 376.068272][ T5596] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 376.110482][ T5596] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.110513][ T5596] usb 2-1: Product: syz [ 376.110529][ T5596] usb 2-1: Manufacturer: syz [ 376.110545][ T5596] usb 2-1: SerialNumber: syz [ 376.766247][ T5596] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 376.781437][ T5596] usb 2-1: USB disconnect, device number 12 [ 376.821679][ T5592] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 376.993839][ T5592] usb 8-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 377.002307][ T5592] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.002349][ T5592] usb 8-1: Product: syz [ 377.002367][ T5592] usb 8-1: Manufacturer: syz [ 377.002388][ T5592] usb 8-1: SerialNumber: syz [ 377.070967][ T5592] usb 8-1: config 0 descriptor?? [ 377.109247][ T5592] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 378.957644][ T5592] gspca_sunplus: reg_r err -71 [ 378.957854][ T5592] sunplus 8-1:0.0: probe with driver sunplus failed with error -71 [ 379.102688][ T5592] usb 8-1: USB disconnect, device number 7 [ 379.986530][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.851745][ T12] rpcbind: server 127.0.0.1 not responding, timed out [ 382.193991][ T4900] Bluetooth: hci1: command 0x0406 tx timeout [ 382.381175][T10831] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 385.580165][ T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 385.750771][ T10] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 385.753224][ T10] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 385.753296][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 385.763050][ T10] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 385.763079][ T10] usb 2-1: Manufacturer: syz [ 385.843785][ T10] usb 2-1: config 0 descriptor?? [ 386.250870][ T10] rc_core: IR keymap rc-hauppauge not found [ 386.250893][ T10] Registered IR keymap rc-empty [ 386.256321][ T10] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 386.320245][ T10] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input13 [ 386.543173][ C0] igorplugusb 2-1:0.0: receive overflow, at least 3 lost [ 387.007793][ T5592] usb 2-1: USB disconnect, device number 13 [ 391.508175][T11031] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 392.494540][T11051] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1900'. [ 393.691428][ T999] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 393.884943][ T999] usb 8-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00 [ 393.887028][ T999] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 393.887072][ T999] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 393.887113][ T999] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.679956][ T999] pegasus 8-1:1.0: can't reset MAC [ 395.680311][ T999] pegasus 8-1:1.0: probe with driver pegasus failed with error -5 [ 395.771939][ T999] usb 8-1: USB disconnect, device number 8 [ 396.278343][T11113] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1926'. [ 399.835734][ T999] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 399.838646][ T10] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 399.883740][T11189] netlink: 'syz.5.1960': attribute type 4 has an invalid length. [ 400.006450][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 400.012205][ T10] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 400.044314][ T999] usb 8-1: not running at top speed; connect to a high speed hub [ 400.044350][ T999] usb 8-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 400.050731][ T999] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 400.050768][ T999] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 6400, setting to 64 [ 400.132903][ T999] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.132934][ T999] usb 8-1: Product: syz [ 400.132949][ T999] usb 8-1: Manufacturer: syz [ 400.132964][ T999] usb 8-1: SerialNumber: syz [ 400.134431][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.134461][ T10] usb 2-1: Product: syz [ 400.134477][ T10] usb 2-1: Manufacturer: syz [ 400.134494][ T10] usb 2-1: SerialNumber: syz [ 400.252780][T11180] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 400.331294][ T10] usb 2-1: config 0 descriptor?? [ 400.360303][ T999] oti6858 8-1:1.0: oti6858 converter detected [ 400.391878][ T999] usb 8-1: oti6858 converter now attached to ttyUSB0 [ 400.413829][ T10] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 400.962604][ T5592] usb 8-1: USB disconnect, device number 9 [ 401.628913][ T5592] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 401.661799][ T5592] oti6858 8-1:1.0: device disconnected [ 402.164243][ T10] gspca_ov534_9: reg_r err -71 [ 402.436769][ T10] gspca_ov534_9: Unknown sensor 0000 [ 402.436881][ T10] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 402.454510][ T10] usb 2-1: USB disconnect, device number 14 [ 403.576431][T11250] netlink: 'syz.1.1988': attribute type 1 has an invalid length. [ 403.789644][T11250] 8021q: adding VLAN 0 to HW filter on device bond1 [ 404.402145][T11253] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 404.494194][T11256] bond1: (slave dummy0): Enslaving as a backup interface with an up link [ 404.577768][ T9812] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 404.834085][ T9833] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 405.437266][T11281] netlink: 'syz.1.1999': attribute type 1 has an invalid length. [ 405.927245][T11286] bond2: (slave veth0_to_bond): making interface the new active one [ 406.066731][T11286] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 407.105636][T11325] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2020'. [ 407.105892][T11325] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2020'. [ 407.138870][T11325] netlink: 'syz.1.2020': attribute type 10 has an invalid length. [ 408.581911][ T4900] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 408.617979][ T4900] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 408.624105][ T4900] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 408.653614][ T4900] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 408.657173][ T4900] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 409.384386][T11372] device-mapper: ioctl: name not supplied when creating device [ 411.185678][ T5598] Bluetooth: hci5: command tx timeout [ 411.496772][T11394] binder: BINDER_SET_CONTEXT_MGR already set [ 411.496806][T11394] binder: 11390:11394 ioctl 4018620d 200000000480 returned -16 [ 411.643297][T11395] binder: 11390:11395 ioctl c0306201 2000000003c0 returned -22 [ 411.719579][T11400] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2047'. [ 411.902300][T11364] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.955308][T11364] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 413.016050][T11364] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 413.405051][ T5598] Bluetooth: hci5: command tx timeout [ 414.332579][T11462] input: syz0 as /devices/virtual/input/input14 [ 415.350829][ T9818] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 415.350870][ T9818] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.350924][ T9818] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 415.350953][ T9818] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.350992][ T9818] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 415.351021][ T9818] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.351060][ T9818] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 415.351090][ T9818] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.528395][T11489] sctp: [Deprecated]: syz.1.2093 (pid 11489) Use of struct sctp_assoc_value in delayed_ack socket option. [ 415.528395][T11489] Use struct sctp_sack_info instead [ 415.639263][ T5598] Bluetooth: hci5: command tx timeout [ 416.794071][ T13] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.853846][ T5598] Bluetooth: hci5: command tx timeout [ 418.831717][ T13] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.345993][T11573] fuse: Bad value for 'fd' [ 419.459896][ T10] libceph: connect (1)[c::]:6789 error -101 [ 419.460116][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 419.735777][ T10] libceph: connect (1)[c::]:6789 error -101 [ 419.800263][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 419.868093][T11563] ceph: No mds server is up or the cluster is laggy [ 420.061121][ T13] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.473615][ T13] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.226225][T11626] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2148'. [ 424.213131][ T5723] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 424.405626][ T5723] usb 2-1: Using ep0 maxpacket: 8 [ 424.406591][ T5723] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 424.410477][ T5723] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 424.410549][ T5723] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 424.410576][ T5723] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 424.410603][ T5723] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 424.410630][ T5723] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 424.410675][ T5723] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.694286][ T4900] Bluetooth: hci0: command 0x0406 tx timeout [ 424.694345][ T5598] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 424.795965][ T5723] usb 2-1: GET_CAPABILITIES returned 0 [ 424.796006][ T5723] usbtmc 2-1:16.0: can't read capabilities [ 425.145694][ T999] usb 2-1: USB disconnect, device number 15 [ 425.154739][ T13] bridge_slave_1: left allmulticast mode [ 425.154835][ T13] bridge_slave_1: left promiscuous mode [ 425.266915][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.586118][ T13] bridge_slave_0: left allmulticast mode [ 425.586160][ T13] bridge_slave_0: left promiscuous mode [ 425.586440][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.020218][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 428.120531][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 428.189526][ T13] bond0 (unregistering): Released all slaves [ 428.302794][T11688] netlink: 168 bytes leftover after parsing attributes in process `syz.5.2175'. [ 428.305178][ T5246] 8021q: adding VLAN 0 to HW filter on device eth9 [ 428.600085][T11778] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2208'. [ 428.743084][T11785] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 430.163051][T11818] netlink: 'syz.5.2223': attribute type 4 has an invalid length. [ 430.221691][T11820] netlink: 'syz.5.2223': attribute type 4 has an invalid length. [ 431.493440][ T999] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 431.665411][ T999] usb 2-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 431.669418][ T999] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 431.669450][ T999] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 431.669492][ T999] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.757756][ T999] spcp8x5 2-1:1.0: SPCP8x5 converter detected [ 431.915388][ T999] usb 2-1: SPCP8x5 converter now attached to ttyUSB0 [ 432.166172][ T5723] usb 2-1: USB disconnect, device number 16 [ 432.249839][ T5723] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 432.263466][ T5723] spcp8x5 2-1:1.0: device disconnected [ 432.489966][T11353] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.490252][T11353] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.490496][T11353] bridge_slave_0: entered allmulticast mode [ 432.493186][T11353] bridge_slave_0: entered promiscuous mode [ 432.534256][ T5246] 8021q: adding VLAN 0 to HW filter on device eth10 [ 432.537687][T11353] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.537869][T11353] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.538083][T11353] bridge_slave_1: entered allmulticast mode [ 432.623340][T11353] bridge_slave_1: entered promiscuous mode [ 432.951081][T11353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 433.198568][ T13] hsr_slave_0: left promiscuous mode [ 433.241967][ T13] hsr_slave_1: left promiscuous mode [ 433.243347][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 433.243375][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 433.305863][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 433.305894][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 433.687455][ T13] veth1_macvtap: left promiscuous mode [ 433.687577][ T13] veth0_macvtap: left promiscuous mode [ 433.687849][ T13] veth1_vlan: left promiscuous mode [ 433.688042][ T13] veth0_vlan: left promiscuous mode [ 433.711685][ T5846] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 433.995115][ T5846] usb 8-1: Using ep0 maxpacket: 8 [ 433.996406][ T5846] usb 8-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 434.000170][ T5846] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 434.000232][ T5846] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.092561][ T5846] usb 8-1: config 0 descriptor?? [ 434.209941][ T5846] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 435.499372][ T5846] gspca_vc032x: reg_w err -71 [ 435.499455][ T5846] vc032x 8-1:0.0: probe with driver vc032x failed with error -71 [ 435.541438][ T5846] usb 8-1: USB disconnect, device number 10 [ 436.091343][ T13] team0 (unregistering): Port device team_slave_1 removed [ 436.209109][ T13] team0 (unregistering): Port device team_slave_0 removed [ 437.199966][T11353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 437.749984][T11353] team0: Port device team_slave_0 added [ 437.856248][T11353] team0: Port device team_slave_1 added [ 438.131544][T11353] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 438.131565][T11353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 438.131594][T11353] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 438.137591][T11353] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 438.137610][T11353] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 438.137640][T11353] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 438.625054][T11353] hsr_slave_0: entered promiscuous mode [ 438.631086][T11353] hsr_slave_1: entered promiscuous mode [ 438.632115][T11353] debugfs: 'hsr0' already exists in 'hsr' [ 438.632157][T11353] Cannot create hsr debugfs directory [ 440.793208][ T5246] 8021q: adding VLAN 0 to HW filter on device eth11 [ 442.761962][ T5246] 8021q: adding VLAN 0 to HW filter on device eth12 [ 443.287932][T11353] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 443.331121][T11353] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 443.332657][T11353] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 443.364769][ T4900] Bluetooth: hci3: unexpected event for opcode 0x1005 [ 443.369896][ T4900] Bluetooth: hci3: unexpected event 0x04 length: 9 < 10 [ 443.369991][ T4900] Bluetooth: hci3: unexpected event 0x03 length: 10 < 11 [ 443.597277][T11353] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 444.296887][T11353] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 444.438925][T11353] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 444.519786][T11353] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 444.648501][T11353] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 445.674167][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.197630][ T5598] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 446.272568][ T5598] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 446.275632][ T5598] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 446.277148][ T5598] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 446.289670][ T5598] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 447.742450][T11353] 8021q: adding VLAN 0 to HW filter on device bond0 [ 447.902792][T11353] 8021q: adding VLAN 0 to HW filter on device team0 [ 448.227731][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.235320][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 448.302141][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.302282][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 448.643914][ T5598] Bluetooth: hci2: command tx timeout [ 450.868021][ T5598] Bluetooth: hci2: command tx timeout [ 451.677876][ T149] bridge_slave_1: left allmulticast mode [ 451.677913][ T149] bridge_slave_1: left promiscuous mode [ 451.686148][ T149] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.860949][ T149] bridge_slave_0: left allmulticast mode [ 451.860987][ T149] bridge_slave_0: left promiscuous mode [ 451.861278][ T149] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.078237][ T149] dvmrp6: left allmulticast mode [ 452.931293][ T149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 452.993153][ T149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 453.047764][ T149] bond0 (unregistering): Released all slaves [ 453.088593][ T5598] Bluetooth: hci2: command tx timeout [ 453.122543][ T149] bond1 (unregistering): (slave veth3): Releasing backup interface [ 453.363285][ T149] bond1 (unregistering): (slave dummy0): Releasing backup interface [ 453.405157][ T149] bond1 (unregistering): Released all slaves [ 453.489596][ T149] bond2 (unregistering): (slave veth0_to_bond): Releasing active interface [ 453.554164][ T149] bond2 (unregistering): Released all slaves [ 453.837204][ T5246] 8021q: adding VLAN 0 to HW filter on device eth13 [ 454.584105][T11353] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 455.312785][ T5598] Bluetooth: hci2: command tx timeout [ 455.510775][ T6432] bridge0: port 3(syz_tun) entered disabled state [ 455.833907][ T6432] syz_tun (unregistering): left allmulticast mode [ 455.833935][ T6432] syz_tun (unregistering): left promiscuous mode [ 455.834030][ T6432] bridge0: port 3(syz_tun) entered disabled state [ 457.022250][ T5246] 8021q: adding VLAN 0 to HW filter on device eth14 [ 457.217520][T12109] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.217828][T12109] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.218095][T12109] bridge_slave_0: entered allmulticast mode [ 457.246505][T12109] bridge_slave_0: entered promiscuous mode [ 457.349673][T12109] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.349868][T12109] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.350109][T12109] bridge_slave_1: entered allmulticast mode [ 457.365346][T12109] bridge_slave_1: entered promiscuous mode [ 457.376636][T12322] lo speed is unknown, defaulting to 1000 [ 457.377214][T12322] lo speed is unknown, defaulting to 1000 [ 457.390845][T12322] lo speed is unknown, defaulting to 1000 [ 457.398884][T12322] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 457.398995][T12322] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 457.399133][T12322] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 457.416021][T12322] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 457.468301][T12322] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 457.576792][T12322] lo speed is unknown, defaulting to 1000 [ 457.582133][T12322] lo speed is unknown, defaulting to 1000 [ 457.585349][T12322] lo speed is unknown, defaulting to 1000 [ 457.593701][T12322] lo speed is unknown, defaulting to 1000 [ 457.608706][T12322] lo speed is unknown, defaulting to 1000 [ 457.615666][T12322] lo speed is unknown, defaulting to 1000 [ 457.628517][T12322] lo speed is unknown, defaulting to 1000 [ 458.144367][T12109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 458.259722][T12109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 458.743287][T12109] team0: Port device team_slave_0 added [ 458.835206][ T4900] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 458.850865][ T4900] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 458.855035][ T4900] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 458.861414][ T36] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 458.950537][ T4900] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 458.953411][ T4900] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 459.072056][ T36] usb 8-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.00 [ 459.074910][ T36] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 459.074945][ T36] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 459.074988][ T36] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.234826][ T149] hsr_slave_0: left promiscuous mode [ 459.293849][ T149] hsr_slave_1: left promiscuous mode [ 459.294744][ T149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 459.383770][ T149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 459.656070][ T5598] Bluetooth: hci4: urb ffff888039c6f400 submission failed (90) [ 460.789262][ T149] team0 (unregistering): Port device team_slave_1 removed [ 460.877483][ T149] team0 (unregistering): Port device team_slave_0 removed [ 461.299099][ T5598] Bluetooth: hci3: command tx timeout [ 461.882575][T12109] team0: Port device team_slave_1 added [ 462.425064][T12109] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 462.425083][T12109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 462.425113][T12109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 462.630634][T12109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 462.630653][T12109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 462.630681][T12109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.285746][T12402] bridge_slave_0: left allmulticast mode [ 463.285786][T12402] bridge_slave_0: left promiscuous mode [ 463.351606][T12402] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.523116][ T5598] Bluetooth: hci3: command tx timeout [ 463.613045][T12402] bridge_slave_1: left allmulticast mode [ 463.613081][T12402] bridge_slave_1: left promiscuous mode [ 463.613346][T12402] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.011097][T12402] bond0: (slave bond_slave_0): Releasing backup interface [ 464.102379][T12402] bond0: (slave bond_slave_1): Releasing backup interface [ 464.193935][T12402] team0: Port device team_slave_0 removed [ 464.302188][T12402] team0: Port device team_slave_1 removed [ 464.310803][T12402] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 464.310833][T12402] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 464.359741][T12402] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 464.359772][T12402] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 464.422950][T12402] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 464.632522][T11353] veth0_vlan: entered promiscuous mode [ 464.666176][ T10] lo speed is unknown, defaulting to 1000 [ 464.832862][ T5246] 8021q: adding VLAN 0 to HW filter on device eth15 [ 465.188404][T12109] hsr_slave_0: entered promiscuous mode [ 465.198127][T12109] hsr_slave_1: entered promiscuous mode [ 465.214618][T12109] debugfs: 'hsr0' already exists in 'hsr' [ 465.214647][T12109] Cannot create hsr debugfs directory [ 465.756921][ T5598] Bluetooth: hci3: command tx timeout [ 465.883777][T11353] veth1_vlan: entered promiscuous mode [ 466.080749][T12448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.081527][T12448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.381417][T12346] lo speed is unknown, defaulting to 1000 [ 467.193345][ T5723] usb 8-1: USB disconnect, device number 11 [ 467.400029][T11353] veth0_macvtap: entered promiscuous mode [ 467.982293][ T5598] Bluetooth: hci3: command tx timeout [ 468.946189][ T149] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.148633][ T5246] 8021q: adding VLAN 0 to HW filter on device eth16 [ 469.152436][T11353] veth1_macvtap: entered promiscuous mode [ 469.607428][T11353] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 469.923039][ T149] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.229542][T11353] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 470.585419][ T149] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.484509][ T149] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.842738][T12109] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 471.910092][T12109] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 471.957896][T12109] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 472.152800][T12109] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 472.325904][T12109] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 472.562926][T12109] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 472.762626][T12109] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 472.872973][T12109] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 472.956970][ T4900] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 472.969535][ T4900] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 473.024846][ T4900] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 473.066574][ T4900] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 473.111264][ T4900] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 473.405206][T12346] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.405340][T12346] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.405592][T12346] bridge_slave_0: entered allmulticast mode [ 473.504640][T12346] bridge_slave_0: entered promiscuous mode [ 473.546737][T12346] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.546886][T12346] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.547142][T12346] bridge_slave_1: entered allmulticast mode [ 473.607322][T12346] bridge_slave_1: entered promiscuous mode [ 473.981983][T12346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 474.199847][T12346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 474.721665][T12346] team0: Port device team_slave_0 added [ 474.787938][T12346] team0: Port device team_slave_1 added [ 475.146858][T12346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 475.146877][T12346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 475.146909][T12346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 475.235425][T12346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 475.235443][T12346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 475.235474][T12346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 475.399140][T12511] lo speed is unknown, defaulting to 1000 [ 475.542210][ T149] bridge_slave_1: left allmulticast mode [ 475.542251][ T149] bridge_slave_1: left promiscuous mode [ 475.542534][ T149] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.581561][ T5598] Bluetooth: hci4: command tx timeout [ 475.723068][ T149] bridge_slave_0: left allmulticast mode [ 475.723097][ T149] bridge_slave_0: left promiscuous mode [ 475.723330][ T149] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.952441][ T149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 477.039420][ T149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 477.061636][ T149] bond0 (unregistering): Released all slaves [ 477.077419][ T149] bond1 (unregistering): Released all slaves [ 477.129332][ T149] bond2 (unregistering): (slave dummy0): Removing an active aggregator [ 477.130336][ T149] bond2 (unregistering): (slave dummy0): Releasing backup interface [ 477.180634][ T149] bond2 (unregistering): Released all slaves [ 477.465455][T12346] hsr_slave_0: entered promiscuous mode [ 477.466502][T12346] hsr_slave_1: entered promiscuous mode [ 477.467214][T12346] debugfs: 'hsr0' already exists in 'hsr' [ 477.467240][T12346] Cannot create hsr debugfs directory [ 477.808654][ T5598] Bluetooth: hci4: command tx timeout [ 478.852135][T12109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 479.109646][ T149] hsr_slave_0: left promiscuous mode [ 479.133937][ T149] hsr_slave_1: left promiscuous mode [ 479.134782][ T149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 479.134803][ T149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 479.177038][ T149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 479.177073][ T149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 479.256236][ T149] veth1_macvtap: left promiscuous mode [ 479.256314][ T149] veth0_macvtap: left promiscuous mode [ 479.256504][ T149] veth1_vlan: left promiscuous mode [ 479.256635][ T149] veth0_vlan: left promiscuous mode [ 480.028836][ T5598] Bluetooth: hci4: command tx timeout [ 480.244100][ T149] team0 (unregistering): Port device team_slave_1 removed [ 480.297928][ T149] team0 (unregistering): Port device team_slave_0 removed [ 480.995198][T12109] 8021q: adding VLAN 0 to HW filter on device team0 [ 481.539349][ T9833] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.539467][ T9833] bridge0: port 1(bridge_slave_0) entered forwarding state [ 481.595691][ T5246] 8021q: adding VLAN 0 to HW filter on device eth17 [ 481.770262][ T9833] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.770416][ T9833] bridge0: port 2(bridge_slave_1) entered forwarding state [ 481.964856][T12511] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.964969][T12511] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.965171][T12511] bridge_slave_0: entered allmulticast mode [ 481.967196][T12511] bridge_slave_0: entered promiscuous mode [ 481.971456][T12511] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.971558][T12511] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.971733][T12511] bridge_slave_1: entered allmulticast mode [ 481.974131][T12511] bridge_slave_1: entered promiscuous mode [ 482.095409][T12511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 482.130850][T12511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 482.253269][ T5598] Bluetooth: hci4: command tx timeout [ 482.580890][T12511] team0: Port device team_slave_0 added [ 482.622507][T12511] team0: Port device team_slave_1 added [ 482.708042][T12511] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 482.708056][T12511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 482.708077][T12511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 482.760790][T12511] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 482.760809][T12511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 482.760841][T12511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 483.070162][T12511] hsr_slave_0: entered promiscuous mode [ 483.084363][T12511] hsr_slave_1: entered promiscuous mode [ 483.088541][T12511] debugfs: 'hsr0' already exists in 'hsr' [ 483.088622][T12511] Cannot create hsr debugfs directory [ 484.936675][ T9818] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.976799][T12346] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 485.013804][T12346] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 485.410369][ T149] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.520090][T12346] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 485.571409][T12346] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 485.574486][T12346] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 485.624180][T12346] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 485.630151][T12346] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 485.679045][T12346] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 485.721775][T12109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 486.361795][T12346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 486.388053][T12346] 8021q: adding VLAN 0 to HW filter on device team0 [ 486.421279][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.437934][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 486.516147][ T9813] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.516244][ T9813] bridge0: port 2(bridge_slave_1) entered forwarding state [ 487.074439][ T149] bridge_slave_1: left allmulticast mode [ 487.074471][ T149] bridge_slave_1: left promiscuous mode [ 487.074681][ T149] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.192894][ T149] bridge_slave_0: left allmulticast mode [ 487.192926][ T149] bridge_slave_0: left promiscuous mode [ 487.193184][ T149] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.209372][ T149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 488.294492][ T149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 488.317047][ T149] bond0 (unregistering): Released all slaves [ 488.388500][T12109] veth0_vlan: entered promiscuous mode [ 488.806119][T12109] veth1_vlan: entered promiscuous mode [ 488.971163][ T149] hsr_slave_0: left promiscuous mode [ 489.010645][ T149] hsr_slave_1: left promiscuous mode [ 489.011543][ T149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 489.011564][ T149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 489.053082][ T149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 489.053112][ T149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 489.160704][ T149] veth1_macvtap: left promiscuous mode [ 489.160783][ T149] veth0_macvtap: left promiscuous mode [ 489.160959][ T149] veth1_vlan: left promiscuous mode [ 489.161085][ T149] veth0_vlan: left promiscuous mode [ 490.003956][ T149] team0 (unregistering): Port device team_slave_1 removed [ 490.046761][ T149] team0 (unregistering): Port device team_slave_0 removed [ 490.500544][T12109] veth0_macvtap: entered promiscuous mode [ 490.537985][T12109] veth1_macvtap: entered promiscuous mode [ 490.942388][T12109] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 491.048041][T12109] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 491.075997][ T9833] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.372717][ T9812] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.664729][ T9833] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 492.664751][ T9833] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.702758][T12346] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 493.070291][ T9818] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.082993][ T9682] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.091932][ T9818] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.092043][ T9818] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.081689][T12511] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 494.190136][T12511] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 494.210423][T12511] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 494.350844][T12511] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 494.441471][T12511] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 494.649969][T12511] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 494.697823][T12511] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 494.815575][T12511] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 495.014435][T12346] veth0_vlan: entered promiscuous mode [ 495.085959][T12346] veth1_vlan: entered promiscuous mode [ 495.250437][T12346] veth0_macvtap: entered promiscuous mode [ 495.273148][T12346] veth1_macvtap: entered promiscuous mode [ 495.410069][T12346] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 495.584918][T12511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 495.590475][T12346] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 495.729218][T12511] 8021q: adding VLAN 0 to HW filter on device team0 [ 495.777710][ T9817] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.778728][ T9817] bridge0: port 1(bridge_slave_0) entered forwarding state [ 496.735109][T12689] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.735265][T12689] bridge0: port 2(bridge_slave_1) entered forwarding state [ 496.933336][T12690] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.933813][T12690] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.934224][T12690] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.762196][T12725] bridge_slave_0: left allmulticast mode [ 497.762231][T12725] bridge_slave_0: left promiscuous mode [ 497.762504][T12725] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.952266][T12725] bridge_slave_1: left allmulticast mode [ 497.952299][T12725] bridge_slave_1: left promiscuous mode [ 497.953185][T12725] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.207393][T12725] bond0: (slave bond_slave_0): Releasing backup interface [ 498.289891][T12725] bond0: (slave bond_slave_1): Releasing backup interface [ 498.415973][T12725] team0: Port device team_slave_0 removed [ 498.535918][T12725] team0: Port device team_slave_1 removed [ 498.538451][T12725] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 498.538470][T12725] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 498.604343][T12725] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 498.604374][T12725] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 498.645957][T12725] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 498.983254][T12710] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.983278][T12710] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.525066][T12697] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.525090][T12697] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.678583][ T37] kauditd_printk_skb: 29 callbacks suppressed [ 499.678600][ T37] audit: type=1326 audit(1787180532.153:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12770 comm="syz.9.2469" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f949c95eec9 code=0x7ffc0000 [ 499.678644][ T37] audit: type=1326 audit(1787180532.153:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12770 comm="syz.9.2469" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f949c91ae3b code=0x7ffc0000 [ 499.678683][ T37] audit: type=1326 audit(1787180532.153:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12770 comm="syz.9.2469" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f949c95e0d9 code=0x7ffc0000 [ 499.678724][ T37] audit: type=1326 audit(1787180532.153:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12770 comm="syz.9.2469" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f949c95e0d9 code=0x7ffc0000 [ 499.685311][ T37] audit: type=1326 audit(1787180532.135:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12770 comm="syz.9.2469" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f949c95e0d9 code=0x7ffc0000 [ 499.685358][ T37] audit: type=1326 audit(1787180532.153:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12770 comm="syz.9.2469" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f949c95e0d9 code=0x7ffc0000 [ 499.693036][ T37] audit: type=1326 audit(1787180532.163:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12770 comm="syz.9.2469" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f949c91a52c code=0x7ffc0000 [ 499.703322][ T37] audit: type=1326 audit(1787180532.181:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12770 comm="syz.9.2469" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f949c91a58e code=0x7ffc0000 [ 499.703375][ T37] audit: type=1326 audit(1787180532.181:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12770 comm="syz.9.2469" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f949c95dd6b code=0x7ffc0000 [ 499.703422][ T37] audit: type=1326 audit(1787180532.181:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12770 comm="syz.9.2469" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f949c95e0d9 code=0x7ffc0000 [ 500.213453][ T9818] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.913106][T12511] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 504.556573][T12511] veth0_vlan: entered promiscuous mode [ 504.616534][T12511] veth1_vlan: entered promiscuous mode [ 504.955009][T12511] veth0_macvtap: entered promiscuous mode [ 505.101347][T12511] veth1_macvtap: entered promiscuous mode [ 505.194578][ T5596] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 505.339775][T12511] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 505.356697][ T5596] usb 10-1: Using ep0 maxpacket: 16 [ 505.357552][ T5596] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 505.388608][ T5596] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 505.388644][ T5596] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 505.393729][ T5596] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.393759][ T5596] usb 10-1: Product: syz [ 505.393776][ T5596] usb 10-1: Manufacturer: syz [ 505.393792][ T5596] usb 10-1: SerialNumber: syz [ 505.480562][ T5596] usb 10-1: config 0 descriptor?? [ 505.520497][ T5596] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 505.520549][ T5596] em28xx 10-1:0.0: Audio interface 0 found (Vendor Class) [ 505.926117][T12511] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 506.168164][ T5596] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 506.191484][ T5596] em28xx 10-1:0.0: Config register raw data: 0xfffffffb [ 506.413287][T12470] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 506.440079][ T9818] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.442756][T12708] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.443302][T12708] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.808450][T12470] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 506.861450][T12470] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.040892][T12470] usb 8-1: config 0 descriptor?? [ 507.340307][ T5596] em28xx 10-1:0.0: Unknown AC97 audio processor detected! [ 507.340757][ T5596] em28xx 10-1:0.0: couldn't setup AC97 register 2 [ 507.342591][ T5596] em28xx 10-1:0.0: couldn't setup AC97 register 4 [ 507.366745][ T5596] em28xx 10-1:0.0: couldn't setup AC97 register 6 [ 507.367226][ T5596] em28xx 10-1:0.0: couldn't setup AC97 register 54 [ 507.367684][ T5596] em28xx 10-1:0.0: couldn't setup AC97 register 56 [ 507.535739][ T5596] usb 10-1: USB disconnect, device number 2 [ 507.539071][T12470] cp210x 8-1:0.0: cp210x converter detected [ 507.766790][T12470] cp210x 8-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 508.415057][T12470] usb 8-1: cp210x converter now attached to ttyUSB0 [ 508.536704][T12470] usb 8-1: USB disconnect, device number 12 [ 508.762184][T12470] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 509.193480][T12470] cp210x 8-1:0.0: device disconnected [ 509.771272][T12697] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.201644][T12970] netlink: 'syz.5.2521': attribute type 4 has an invalid length. [ 510.248372][T12972] netlink: 'syz.5.2521': attribute type 4 has an invalid length. [ 510.942159][T12702] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.942184][T12702] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 511.355483][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 512.165155][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 512.165178][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 513.502974][ T200] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 514.456354][ T200] usb 10-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 514.456421][ T200] usb 10-1: no configurations [ 514.456436][ T200] usb 10-1: can't read configurations, error -22 [ 514.680290][ T999] kernel read not supported for file /trace_pipe (pid: 999 comm: kworker/1:2) [ 517.189504][ T5723] usb 8-1: new full-speed USB device number 13 using dummy_hcd [ 517.867847][ T5723] usb 8-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 517.867903][ T5723] usb 8-1: no configurations [ 517.867915][ T5723] usb 8-1: can't read configurations, error -22 [ 518.341094][T13128] bridge_slave_0: left allmulticast mode [ 518.341130][T13128] bridge_slave_0: left promiscuous mode [ 518.341395][T13128] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.085794][T13128] bridge_slave_1: left allmulticast mode [ 519.085827][T13128] bridge_slave_1: left promiscuous mode [ 519.085991][T13128] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.368576][ T999] libceph: connect (1)[c::]:6789 error -101 [ 519.368777][ T999] libceph: mon0 (1)[c::]:6789 connect error [ 519.373834][ T999] libceph: connect (1)[c::]:6789 error -101 [ 519.426152][ T999] libceph: mon0 (1)[c::]:6789 connect error [ 519.704962][ T5781] libceph: connect (1)[c::]:6789 error -101 [ 519.705172][ T5781] libceph: mon0 (1)[c::]:6789 connect error [ 519.710827][T13128] bond0: (slave bond_slave_0): Releasing backup interface [ 519.831115][T13128] bond0: (slave bond_slave_1): Releasing backup interface [ 520.004425][T13128] team0: Port device team_slave_0 removed [ 520.053421][T13128] team0: Port device team_slave_1 removed [ 520.061889][T13128] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 520.061921][T13128] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 520.085744][T13128] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 520.085775][T13128] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 520.127858][T13143] ceph: No mds server is up or the cluster is laggy [ 520.148461][T13128] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 520.257927][ T5573] libceph: connect (1)[c::]:6789 error -101 [ 520.258111][ T5573] libceph: mon0 (1)[c::]:6789 connect error [ 521.765085][ T5781] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 521.991253][ T5781] usb 9-1: Using ep0 maxpacket: 32 [ 521.993956][ T5781] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 522.016454][ T5781] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 522.042491][ T5781] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 522.042522][ T5781] usb 9-1: Product: syz [ 522.042538][ T5781] usb 9-1: Manufacturer: syz [ 522.042555][ T5781] usb 9-1: SerialNumber: syz [ 522.219304][ T5781] usb 9-1: config 0 descriptor?? [ 522.220190][T13188] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 522.249264][ T5781] hub 9-1:0.0: bad descriptor, ignoring hub [ 522.251194][ T5781] hub 9-1:0.0: probe with driver hub failed with error -5 [ 524.125059][ T12] raw-gadget.0 gadget.8: failed to queue suspend event [ 524.202762][T13188] raw-gadget.0 gadget.8: failed to queue resume event [ 524.238691][T12700] raw-gadget.0 gadget.8: failed to queue suspend event [ 524.327508][T13188] raw-gadget.0 gadget.8: failed to queue resume event [ 524.363721][T12697] raw-gadget.0 gadget.8: failed to queue suspend event [ 524.438328][T13188] raw-gadget.0 gadget.8: failed to queue resume event [ 524.467310][T12697] raw-gadget.0 gadget.8: failed to queue suspend event [ 524.566100][T13188] raw-gadget.0 gadget.8: failed to queue resume event [ 524.604633][ T12] raw-gadget.0 gadget.8: failed to queue suspend event [ 524.630600][T13188] raw-gadget.0 gadget.8: failed to queue disconnect event [ 524.748053][ T31] usb 9-1: USB disconnect, device number 2 [ 524.890670][T13207] 9pnet: p9_errstr2errno: server reported unknown error 0x00000 [ 525.213357][T13208] bridge_slave_0: left allmulticast mode [ 525.213392][T13208] bridge_slave_0: left promiscuous mode [ 525.216040][T13208] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.873150][T13208] bridge_slave_1: left allmulticast mode [ 525.873186][T13208] bridge_slave_1: left promiscuous mode [ 525.873446][T13208] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.309620][T13208] bond0: (slave bond_slave_0): Releasing backup interface [ 526.454336][T13208] bond0: (slave bond_slave_1): Releasing backup interface [ 526.622307][T13208] team0: Port device team_slave_0 removed [ 526.710643][T13208] team0: Port device team_slave_1 removed [ 526.720730][T13208] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 526.720761][T13208] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 526.847769][T13208] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 526.847798][T13208] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 526.875908][ T5592] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 527.043906][T13208] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 527.065982][ T5592] usb 10-1: Using ep0 maxpacket: 32 [ 527.076185][ T5592] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 527.091108][ T5592] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 527.142763][ T5592] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 527.142806][ T5592] usb 10-1: Product: syz [ 527.142822][ T5592] usb 10-1: Manufacturer: syz [ 527.142838][ T5592] usb 10-1: SerialNumber: syz [ 527.237083][ T5592] usb 10-1: config 0 descriptor?? [ 527.241673][T13233] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 527.271793][ T5592] hub 10-1:0.0: bad descriptor, ignoring hub [ 527.271835][ T5592] hub 10-1:0.0: probe with driver hub failed with error -5 [ 527.580092][T13252] loop0: detected capacity change from 0 to 4096 [ 527.739298][T13253] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 527.739325][T13253] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 527.739472][T13253] loop0: [ 530.233342][T12536] usb 10-1: USB disconnect, device number 5 [ 533.497564][ T5598] Bluetooth: hci3: command 0x2016 tx timeout [ 536.315033][ T4900] Bluetooth: hci3: command 0x2016 tx timeout [ 540.679539][T12536] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 540.861673][T12536] usb 6-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 540.864524][T12536] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 540.864586][T12536] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.195118][T12536] as10x_usb: device has been detected [ 541.222021][T12536] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 541.260213][T13439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 541.328846][T13439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.571210][T12536] usb 6-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 543.145210][T13472] INFO: trying to register non-static key. [ 543.145233][T13472] The code is fine but needs lockdep annotation, or maybe [ 543.145244][T13472] you didn't initialize this object before use? [ 543.145281][T13472] turning off the locking correctness validator. [ 543.145306][T13472] CPU: 1 UID: 0 PID: 13472 Comm: syz.5.2692 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 543.145338][T13472] Tainted: [L]=SOFTLOCKUP [ 543.145347][T13472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 543.145366][T13472] Call Trace: [ 543.145404][T13472] [ 543.145442][T13472] dump_stack_lvl+0xe8/0x150 [ 543.145635][T13472] assign_lock_key+0x133/0x150 [ 543.145708][T13472] register_lock_class+0xcc/0x2e0 [ 543.145731][T13472] ? __schedule+0x16f5/0x5510 [ 543.145888][T13472] __lock_acquire+0xab/0x2ce0 [ 543.145916][T13472] ? __lock_acquire+0x683/0x2ce0 [ 543.145947][T13472] ? as102_stream_ctrl+0x27/0xc0 [ 543.146037][T13472] lock_acquire+0x106/0x350 [ 543.146060][T13472] ? as102_stream_ctrl+0x27/0xc0 [ 543.146089][T13472] ? as102_stream_ctrl+0x27/0xc0 [ 543.146117][T13472] ? as102_stream_ctrl+0x27/0xc0 [ 543.146142][T13472] mutex_lock_interruptible_nested+0x5a/0x1d0 [ 543.146212][T13472] ? as102_stream_ctrl+0x27/0xc0 [ 543.146242][T13472] as102_stream_ctrl+0x27/0xc0 [ 543.146270][T13472] __dvb_frontend_open+0x2ef/0xc40 [ 543.146339][T13472] ? __pfx_dvb_frontend_open+0x10/0x10 [ 543.146370][T13472] ? __pfx_dvb_frontend_open+0x10/0x10 [ 543.146396][T13472] dvb_device_open+0x258/0x350 [ 543.146451][T13472] chrdev_open+0x4dc/0x600 [ 543.146529][T13472] ? __pfx_chrdev_open+0x10/0x10 [ 543.146550][T13472] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0 [ 543.146637][T13472] ? __pfx_chrdev_open+0x10/0x10 [ 543.146658][T13472] do_dentry_open+0x849/0x1420 [ 543.146711][T13472] vfs_open+0x3b/0x350 [ 543.146731][T13472] ? path_openat+0x142d/0x1d60 [ 543.146799][T13472] path_openat+0x1448/0x1d60 [ 543.146840][T13472] do_file_open+0x23e/0x4a0 [ 543.146875][T13472] ? __pfx_do_file_open+0x10/0x10 [ 543.146920][T13472] ? alloc_fd+0x654/0x6d0 [ 543.146980][T13472] do_sys_openat2+0x115/0x200 [ 543.147031][T13472] ? __pfx_do_sys_openat2+0x10/0x10 [ 543.147059][T13472] ? rcu_is_watching+0x16/0xb0 [ 543.147147][T13472] __x64_sys_openat+0x138/0x170 [ 543.147185][T13472] do_syscall_64+0x166/0x520 [ 543.147208][T13472] ? trace_irq_disable+0x3b/0x140 [ 543.147275][T13472] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.147314][T13472] ? clear_bhb_loop+0x70/0xc0 [ 543.147341][T13472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.147370][T13472] RIP: 0033:0x7f296301e90e [ 543.147398][T13472] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 543.147420][T13472] RSP: 002b:00007f2960a2db28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 543.147473][T13472] RAX: ffffffffffffffda RBX: 00007f2960a2e6c0 RCX: 00007f296301e90e [ 543.147491][T13472] RDX: 0000000000000802 RSI: 00007f2960a2dc00 RDI: ffffffffffffff9c [ 543.147509][T13472] RBP: 00007f2960a2dc00 R08: 0000000000000000 R09: 0000000000000000 [ 543.147524][T13472] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 543.147540][T13472] R13: 00007f29632e63f8 R14: 00007f29632e6360 R15: 00007fffdf9bc368 [ 543.147567][T13472] [ 543.493429][T12536] as10x_usb: error during firmware upload part1 [ 543.505802][T12536] Registered device Abilis Systems DVB-Titan [ 543.597779][T12536] usb 6-1: USB disconnect, device number 5 [ 543.751601][T12536] Unregistered device Abilis Systems DVB-Titan [ 543.832855][T12536] as10x_usb: device has been disconnected [ 546.153586][ T9826] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.419166][ T9826] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.643846][ T9826] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.878513][ T9826] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.799656][ T9826] bond0 (unregistering): Released all slaves [ 547.820016][ T5246] 8021q: adding VLAN 0 to HW filter on device eth17 [ 548.301795][ T5246] 8021q: adding VLAN 0 to HW filter on device eth18 [ 548.773944][ T5246] 8021q: adding VLAN 0 to HW filter on device eth19 [ 549.222704][ T5246] 8021q: adding VLAN 0 to HW filter on device eth20 [ 549.507184][ T9826] hsr_slave_0: left promiscuous mode [ 549.549923][ T9826] hsr_slave_1: left promiscuous mode [ 549.573241][ T9826] veth1_macvtap: left promiscuous mode [ 549.573289][ T9826] veth0_macvtap: left promiscuous mode [ 549.573385][ T9826] veth1_vlan: left promiscuous mode [ 549.573453][ T9826] veth0_vlan: left promiscuous mode [ 550.203061][T12695] smbdirect: ib_dev[syz2] removed [ 550.204530][ T5596] lo speed is unknown, defaulting to 1000 [ 550.204564][ T5596] syz2: Port: 1 Link DOWN [ 551.224943][ T9826] sctp: sctp_close: sk:ffff888032d12280, timeout:0 [ 551.224974][ T9826] sctp: sctp_destroy_sock: sk:ffff888032d12280 [ 551.593355][T12710] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.838897][T12710] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.074177][T12710] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.309300][T12710] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.750495][T12710] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.866201][ T5246] 8021q: adding VLAN 0 to HW filter on device eth21 [ 553.060490][T12710] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0