last executing test programs: 17.839532097s ago: executing program 2 (id=1558): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0xb}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27050200590261ff0602002fb96dbcf706e10500000088fbffff114443052bd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000003c21880b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0xfca6}, {&(0x7f0000001400)="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", 0x45b}], 0x3}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) write$sequencer(r4, &(0x7f0000000000)=[@t={0x81, 0x6, 0x0, 0x0, @generic}], 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x20605) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) writev(r5, &(0x7f0000000340), 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000040), 0x4) listen(0xffffffffffffffff, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0xed4b52970fba8a35) syz_emit_ethernet(0x3a, &(0x7f0000000280)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa08004500002c00000000001190787f000001e0000001000000000018907804000000000200000000000000000000243dc71c61b03b0740630fe8e7"], 0x0) write$binfmt_misc(r5, &(0x7f0000000000)={'syz1'}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x81, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1000000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x43}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 16.507282132s ago: executing program 2 (id=1559): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000540)=0xffffffffffdffffd, 0x12) prctl$PR_CAPBSET_READ(0x17, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x14, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040), 0x10}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_LEDBIT(r4, 0x40045569, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000100)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r4, 0x5501) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r4, 0x5502) 15.158958268s ago: executing program 2 (id=1563): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000d80)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='rdma.current\x00', 0x26e1, 0x0) close(r3) write(r3, &(0x7f00000002c0)="06a948d0358e410e8cfb12cf824eea486bc4bef2c63cbb4abdc19ce86a54b0386d6e10410af6c6fef961f45d981048880c66d5a78d56ae849580d7856ca82a8366c522619cf378023503c490687892267e6c4e0485497de6f11118d39af3c1ce39b7c9bac693ab3b1fd4c06b0d84be9d319376764d1fab653602067557e787d7f56e8df9196b8439ddd23cf3cc991f68fc70999eabd8ec657d640005d18c8928cd7e14c58217d7581c", 0xa9) unshare(0x400) ioctl$SIOCSIFHWADDR(r3, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="0100e1ff0007"}) socket$vsock_stream(0x28, 0x1, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000014001901000008000000000028bc1edcc9"], 0x28}}, 0x0) readv(r4, &(0x7f0000000500)=[{&(0x7f0000004780)=""/175, 0xaf}], 0x1) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000980)={'syztnl0\x00', &(0x7f0000000900)={'ip6tnl0\x00', r2, 0x4, 0x8, 0x20, 0x6, 0x0, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7880, 0x80, 0x2, 0x2}}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000300)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffff4e}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r6}, 0x10) socket(0x11, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000a40)={r0, 0x6, 0x100000000, 0xfffffffffffffff9}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r1, 0xe0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000b00)=[0x0, 0x0, 0x0], &(0x7f0000000b40)=[0x0, 0x0], 0x0, 0x5b, &(0x7f0000000b80)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000bc0), &(0x7f0000000c00), 0x8, 0xaa, 0x8, 0x8, &(0x7f0000000c40)}}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$sock(r10, &(0x7f0000003780)=[{{&(0x7f0000000200)=@in6={0xa, 0x4e23, 0x0, @local}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[@mark={{0x14, 0x1, 0x41, 0x4}}], 0x18}}], 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000200)={'syztnl2\x00', r8, 0x2f, 0x4f, 0x1, 0xffff, 0x25, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2={0xfc, 0x2, '\x00', 0x8}, 0x20, 0x20, 0x7, 0x3f}}) sendmsg$nl_route(r9, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@setneightbl={0x3c, 0x43, 0x1, 0x70bd2d, 0x25dfdbfd, {0xa}, [@NDTA_THRESH2={0x8, 0x3, 0x1}, @NDTA_PARMS={0x20, 0x6, 0x0, 0x1, [@NDTPA_PROXY_QLEN={0x8, 0xe, 0x100}, @NDTPA_MCAST_PROBES={0x8, 0xb, 0x8}, @NDTPA_RETRANS_TIME={0xc, 0x5, 0x3}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44010}, 0x800) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x74, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x460}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x1}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x11}]}}}, @IFLA_CARRIER={0x5}, @IFLA_MASTER={0x8, 0xa, r11}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}, @IFLA_GROUP={0x8, 0x1b, 0x7fff}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x74}}, 0x0) 13.692750907s ago: executing program 2 (id=1568): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4), 0xc) r3 = socket$netlink(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x3091, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2081c80, 0x0) chroot(&(0x7f0000000000)='./file0/file0\x00') move_mount(r4, &(0x7f0000000280)='./file0\x00', r4, &(0x7f00000000c0)='./file0\x00', 0x272) bind$netlink(r3, 0x0, 0x0) open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x0, 0x0, 0x0, {{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@multicast2}, {@in=@broadcast}, @in=@private, {}, {}, {}, 0x0, 0x0, 0x2}}}, 0xf8}}, 0x0) lsetxattr$system_posix_acl(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="0200000001000000", @ANYRES32=0x0, @ANYBLOB="0400000000000000100000000000000020"], 0x2c, 0x0) setsockopt$sock_int(r3, 0x1, 0x0, &(0x7f0000000000), 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x20, r6, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x4e}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4800}, 0x884) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f0000000280)={0x0, @in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x84) socket$nl_generic(0x10, 0x3, 0x10) 12.519114666s ago: executing program 2 (id=1571): creat(&(0x7f0000000240)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x67, 0x7fdf, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r0, &(0x7f0000000380), 0x20000000}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x4, &(0x7f0000000380)={{r0}, &(0x7f0000000240), 0x0}, 0x20) 11.582666625s ago: executing program 2 (id=1578): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r1, 0x0) r2 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r2, 0x10d, 0xa9, 0x0, &(0x7f00000000c0)) 9.849047174s ago: executing program 0 (id=1581): r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001e00)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @dev}, 0x10) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, 0x0, &(0x7f0000000080)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r4, 0x4b4a, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/pid_for_children\x00') r5 = creat(&(0x7f0000001040)='./file0\x00', 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$alg(0x26, 0x5, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r6, 0xc0182101, &(0x7f0000000180)={r7, 0xf86}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000002780)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000000080)={r8, 0x3, r6, 0x5}) syz_emit_ethernet(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x10000}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000240)={r9, 0x2}, 0x8) r10 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0xe) ioctl$TIOCVHANGUP(r10, 0x5437, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000d5000000000014000300626f6e645f736c6176655f300000000008000a"], 0x3c}}, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x15, 0x0, 0x0) 9.550612168s ago: executing program 4 (id=1584): vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = epoll_create1(0x0) r1 = socket(0x1, 0x80802, 0x0) r2 = epoll_create1(0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x20002013}) epoll_pwait(r2, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) close(r2) shutdown(r1, 0x0) close(r0) 8.938881219s ago: executing program 4 (id=1586): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000300)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xffffa}, 0x2f) r2 = openat$cgroup_pressure(r0, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000340)={'full', 0x20, 0x7, 0x20, 0xffff4}, 0x2f) close(r1) close(r2) 8.81649893s ago: executing program 0 (id=1587): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000080)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000000)=[{}, {}], 0x10) close(r0) 8.490471536s ago: executing program 4 (id=1589): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x0, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x90) r0 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x40045702, &(0x7f0000000000)) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f00000000c0)) r1 = openat(0xffffffffffffffff, 0x0, 0x81, 0x24) r2 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="88020000", @ANYRES16=r3, @ANYBLOB="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"], 0x288}, 0x1, 0x0, 0x0, 0x10}, 0x40000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = dup(r6) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="820000000200000071000040"]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000005, 0x10, 0xffffffffffffffff, 0x9d9be000) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$getregset(0x4204, r8, 0x0, 0x0) 7.596693144s ago: executing program 4 (id=1590): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0xee01, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x9, 0xc, 0x0, 0x0, 0xde}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x1810c0, 0x0) fchown(r1, 0xee01, 0x0) 6.890021645s ago: executing program 0 (id=1591): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001600)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_BLACKHOLE={0x4}]}, 0x24}}, 0x0) 6.60502518s ago: executing program 1 (id=1592): gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)) mmap(&(0x7f00008d0000/0x4000)=nil, 0x4000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000340)={0x9, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f000000d000)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000400000002000000000000110400000000000000000000000000000400000000024da7eebfc09f958d007e8c00"], 0x0, 0x54}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="a8"], 0xa8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB]) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCSMAXCID(r5, 0x40047451, &(0x7f0000001880)) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000100)=0x2000004) 6.569673083s ago: executing program 0 (id=1594): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = getpid() r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(r2, 0x8, &(0x7f00000004c0)) r3 = shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ffa000/0x3000)=nil) read$FUSE(0xffffffffffffffff, &(0x7f0000005fc0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)=0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) shmctl$IPC_SET(r3, 0x1, &(0x7f0000000240)={{0x0, 0x0, r4, r6, r8, 0x107, 0xa12d}, 0x2444, 0x9, 0x0, 0xd005, r2, r1, 0x3}) read$FUSE(0xffffffffffffffff, &(0x7f0000001880)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r11 = open(&(0x7f0000000000)='./file0\x00', 0x241c2, 0x0) writev(r11, &(0x7f0000000040)=[{&(0x7f0000000200)="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", 0x1000}, {&(0x7f0000001200)="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", 0x200}], 0x2) r12 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000d00), 0x109001, 0x0) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1}}, {0x6, 0x1b, [0x0]}}]}]}, 0x54}}, 0x0) r14 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r14, 0x1, 0x2f, &(0x7f0000000340)=0xfffffff9, 0x4) setsockopt$inet_tcp_int(r14, 0x6, 0x2, &(0x7f0000000440), 0x49) bind$inet(r14, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(r14, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$sock_int(r14, 0x1, 0x12, &(0x7f0000002180), 0x4) sendto$inet(r14, &(0x7f0000000480)="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", 0xfffffea5, 0xc000, 0x0, 0xfffffcef) setsockopt$inet_tcp_int(r14, 0x6, 0x1, &(0x7f00000031c0)=0x17, 0x4) recvmsg(r14, &(0x7f00000033c0)={&(0x7f00000003c0)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000002040)=[{&(0x7f0000000080)=""/49, 0x31}, {&(0x7f0000000f80)=""/4096, 0xffffffe1}, {0x0}, {&(0x7f0000000100)=""/102, 0x66}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x5, &(0x7f0000001f80)=""/178, 0xb2}, 0x120) lstat(0x0, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="6fd14b5d036705c2bd00f349e9a426fb4f935b4f251215481c87b90ac6dd5116d16adbfd1d1235aa4d2d18a04a47873dd91474de69aafaa9d25ad694caa17cba9245902c058003cc6c0f50f5396391737912acb540a46eeeacb2a0c6d98de870909813f47b6d3e73816330ea12c63a705000daf2334d74b55f48592406a95b3e5da9287894e1541d4c145c53ba82af4288b91dbe5576b2684b185ddad9a37e915b563ef9a04ccb73ab0df9441a514496b491a2026a926fcd11ac086d422226475e956993eb6849536189f1cfecbf428346a427e951831bc1fa91c2439a5d50", 0xdf}, {&(0x7f0000000140)="b4122bdc972e029561e9e30d8712e41abeea300a7d8b98c1f2", 0x19}], 0x2, &(0x7f0000004180)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r12, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRESOCT=r13, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES64=0x0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000002e000000000000000100000011000000", @ANYRES32, @ANYRES32], 0xb8, 0x4040001}}, {{&(0x7f0000000440)=@file={0x1, './bus/file0\x00'}, 0x6e, &(0x7f0000003480)=[{&(0x7f00000004c0)="771d0defacef11b43dd99be98b2162a4130599ce4d6cb56c0f67c77d18eef4e5963118c176f014061a1653617e27524961a56a151ebac6b2e722287f07d353ea752c6b7430449ce6399e18e18c03d1e10edf21a842faec8c076bc95b183d4684feb7b7bf31523499141395aa", 0x6c}, {&(0x7f0000000540)="4d9264f7a529a959f8109a69c2c19084fb3be0e6d28a632b55cadf467acb382a5ffef920727df80bdc689d4c4c292af3739659ad8ad4074477decc6373a1a8b829b50fa7b005", 0x46}, {&(0x7f00000005c0)="f50c2fb2caca1ed26e0047d0f84ed384713ee48307a339c2a3a4bcb58589a1223d7aeb8029625b554c713915bc82796dae09750edc9511db1976bdc8566419885cf79d9ae82cfe648cf8e82c9f1e36cf058e92d3b919d876fde376847b6ead6c1f62be421d4ede8a48de7c51a1394deace99dd0c", 0x74}, {&(0x7f0000000680)="2a58f44e31261c2ae255dd78b56a9eb42e881219c26585aa69adc6ca3d9efa20c6415e3d511a0a1c5d6021313de25c8128e0c9b3b6f6f739cf0b643440aeaece1701a6add7009d170eeff751a6b1f9210ed12a372b476f30ae2a6042daa1e7", 0x5f}, {&(0x7f0000000700)="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", 0xfe}, {&(0x7f00000032c0)="fecf8210973ab106e4472a3c590adc0e901eeeca214597f7a660e4719e46976644a3fd45ba2779f1dc24be52d7ac24b3d726110325449abeda42c520c749259b9dabb6f228cbdaf1006f259109103f3755b450aa890d0e192fb54b4713c63135a199610045579910eaaca14d409c8af61972ec29e37736e6d17e425d48fbd46dc85f23bf6f0c731975655474738b4f54c18082da080881316c18131ad0fdf1ee7154a44cac4e1a505117c248af22665e379afd59877985a5ab03fede0d8be4465d6be68c8d52f181991edc0c11543b6870a823647cb76f1981c4b3c303ef4351aaea158ce39e9b5c", 0xe8}, {&(0x7f0000003400)="3379a5e3edac967dfe20e49552b5eccb55b8ddb43229c7dca2a5262a1034255a2d67745370cce4fad5396123daf5d729a53530a1", 0x34}], 0x7, &(0x7f00000038c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r11, @ANYBLOB="0000008ba0a133c0b91936fcd44511c100"], 0x18, 0x4c080}}, {{&(0x7f00000008c0)=@file={0x0, './bus/file0\x00'}, 0x6e, &(0x7f0000000c40)=[{&(0x7f0000000940)="e2111e367fc3534a2b6b3a167cadfda92e76fb1adbfd31028420d28e87e81346c354f00dc26aeb2ac01b4159356893a3f1f3c176afd31eaebec786c198c0d1f02b99d298ed84dca9d8320762c27d991c65dac6036e87d462b885ac9e09089785a29243931fb6abaf4cceadb23156443bdf4bb884d93b62f6a47727683eca828f27b4a12f4fecfddfb60aa6541464f0d4c92938b53309b3068865846ec7bdbcf00395dd995990cf331102f2516d5ede346869e6bf253bfd53888ec75997239b739924594e9e91bd8397850064", 0xcc}, {&(0x7f0000000a40)="ebbcc0c387278e24e1dbdd4f39a8c11f22c1f74e95d1ea4534d33a2b1411c1e989ea131f1429d7e102cfc8f3a3cc339c35558efb5cfa3486d660d4c1dc2692751f88c217588e957d8256b2a9472ad75dec0917e24141fc56e99bed60cb7b6aef3f770e6b5ad9585d2731f7f7143d719688e289a72dad697f3a2a329e6a5e5e6a3095b5224a8ff61e2ee006045ab0045e217386126aa6ee22c545c5c4b801", 0x9e}, {&(0x7f0000000b00)='qp*w', 0x4}, {&(0x7f0000000b40)="4e0147", 0x3}, {&(0x7f0000000b80)="a614bfdb0f0b79259ed430f5d5d27cac7badb3b62c162f63b354cea30f5c96ccaf423ed5fa25a169c2d5262e8660662e28802e0822c08af00428e3e0bec41a3b90bdcd8a84de04ce01ea31", 0x4b}, {&(0x7f0000000c00)="3aedfd65462e953afcc032068cebd13dd4a35704ceacd3d0cc5073d2fdad8565fd63194239d674c1b52ac86f40585df34e12fc24dc9c36d59c3f94b298418e", 0x3f}], 0x6, &(0x7f0000000e00)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r12, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r13, r14]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00, r15}}}, @cred={{0x1c, 0x1, 0x2, {r10, 0xffffffffffffffff}}}], 0xc8, 0x7c60c9c9566d109}}], 0x3, 0x8) read$FUSE(0xffffffffffffffff, &(0x7f0000004400)={0x2020, 0x0, 0x0, 0x0}, 0x2020) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006480)=[{{&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000400)=[{&(0x7f00000000c0)="f1dbcbd9c9f9d39b6662c25c88ef7cdd2ca9dacc2c81088c750a8f958e498d4373679c14e5b810d3e427dfb76b707f6a533d208ea37b9e83406d9a7d7001159e4c20ea07bf067bac731d26031806db1bc32f7b5b8cd26202cb49bbb636089f12fbe7723c8ca16e100c84", 0x6a}, {&(0x7f0000000240)="7912b535f19b47ade8aee61c3636dbb96ed3b11b80581192f6a4cc127d2daae63faed82ed439fff7e81e671e21b368608ea2bc34fa5c67ed8b7ef1f34040b599db39ae4e57e89069b96701cca69e1a1281b0c7466e5cb57bd1717c3151a91f733904df6a0c3aab46cbd8564325ac4e1b5799537e03a780089873ac2da370aac5ff322ab429feb4ec51660c949702c24b47062f71045dd5f75fb84abe58", 0x9d}, {&(0x7f0000000140)="c8070e3c43fff0a4c0f930b4984ef1abfe1dd8b788e8", 0x16}, {&(0x7f0000000300)="2282f28f33d2b84462756eb1487121dd58296f0964cf9015f17d1eb07b5c41542be3283979ba08c66d83b0c54688b3815b2fb4a90a7a50913f543fc323f9e8dcebe6941c2edc2cc4b8c8156997ccfb0e9795b5afee244d42b2b400db057161822e110a45616dea8cc9924ace3f1c82797f6d6f7be268387dbb30ef6e44bc17a7a7f2d25a63471a4bd265ddcb5b913366e8256fc6abfbce01205ed3aaf84d62513e01ad3cfaaa593f011370da2748162fe78e247c05944685af7ad7267999c3c6377279ee3dcfa11de06d22b67031258eb935870b128077c9d36c", 0xda}, {&(0x7f00000001c0)="0c215eb6506704bce817f70733ddaf2b37c12f40826c0515c3ea5073d74a5d0a489e44f49823bb", 0x27}], 0x5, &(0x7f0000000500)=[@rights={{0x1c, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r0, r0, 0xffffffffffffffff, r0]}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}, @rights={{0x28, 0x1, 0x1, [r0, r0, r0, r0, 0xffffffffffffffff, r0]}}], 0x80}}, {{&(0x7f0000000580)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000900)=[{&(0x7f0000000600)="51fbb5df7096486b3a35aa7f39a3aa390ec91466023d76444838ed041f241a25ad934a05dcef989eba0706e52fd35bb9e36a47e021f0d357112794998e501f56283d81d11c3fd40ce1bc9695004c91b5e5344fd10275ff46453b81a5736f8fd869634017820c69f1ea81f5f12c92d51c763b05c41de2730ee7562942e844e9251fc0a3d575b369dbfddd63ae8398634bdea0", 0x92}, {&(0x7f00000006c0)="8adcda409167a22c216109daca455b", 0xf}, {&(0x7f0000000700)="53d2f513a32c24954e56492e5d", 0xd}, {&(0x7f0000000740)}, {&(0x7f0000000780)="f55b5f8664aa05de1f23fbd276f2aae883a6bb6fb3b151645896c9ba273a37a74844b1244a8ce6b548f64c690131a65a8bb7896759", 0x35}, {&(0x7f00000007c0)="c51ec699e1b0360c3a07d2ac1d779a09138976d83d29a9233c1138ba6639a7", 0x1f}, {&(0x7f0000000800)="ceeae9cdcec7b4375a7a5e759c27c729513908b7524dfd3ccc4336b0110c9e6af7361756b1915ec636faadcf2c2cf7602246622ef7917ad53ac4880f971f7e8109bd75a6f241725ec893968fcdb4181a928f8ef0c96486fe5b7b57b5ae896318f4f826b2d55a62562cd09c0bbc089942f15cc1b30f3a7f83f4e010e8", 0x7c}, {&(0x7f0000000880)="4c6a96b62c4a6a45", 0x8}, {&(0x7f00000008c0)="24b8a4a6b0965204001d465761348143a6469c31d0ee0ab77a954ae69dad180e1d3fef667eccb2", 0x27}], 0x9, &(0x7f0000000bc0)=[@cred={{0x1c}}], 0x20, 0x4}}, {{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000c00)="fa9ef4f3ebbe0edc17c7a385ab8a5cacf8c7d3769e65052efe048beb73e61b2f120c15dbce5ef38acf6604c91420f0ee1dc8c388472a86664dacac252a07cfd5b46b61fd8e7af9d886c720e67a1e3f91ad7502cafc50a4dcab2c4c57903dcd1684c4768f15c975f7aa51727b150902a15fa434b75590d6d7c6decd84aa188029eaffb46653b093b32db9ba8935b2e5b307529c2a", 0x94}, {&(0x7f0000000cc0)="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", 0x800}, {&(0x7f0000001cc0)="857770f23a9ab960c74404127b61c5cb98c2a4ce4002c192a9d1a08a1056e1b60297b35bba6c7e087f129744980e118ab41dfe6b0e335dc97487be2d2f6af2e4144dfaa7ca44c5f0e844c533f2bd8f273ba63db3a95038e9cb666c7a4f0f5924f15c505902c3e4c058f4fe4a1317897693003228a8c384857b95c7bf37e1c828c5d6669763ad56d26dbd7128b5cdc5c84d31815f9288170a4e3a0e17b2b732b593bceba88b8dfa451f73e87177dde3e6be9484a41250f9cebfe1ae7427bd7680967b5716df71336b6af74ba9d2994c23000c38c8c4e6de9944b3234a74087995eb00407653bba8783297939f3461234448d59c", 0xf3}, {&(0x7f0000001dc0)="78f6cb5f2a501d64d86b8c55972df173cafaaad85b6ebefa41f992595f6ec63abe5509e50ef67a5e1a4d6378", 0x2c}, {&(0x7f0000001e00)="c5567ae6808f4f65204f833e1ab2e3a3c66ece100f6262fc0aedd2ff4b5953f306cbc702132b3a8504f5d8b457797f731e3717318eda3fbb67d0e763c5f5d05858c13792def90bd1bbb7d256f34729b2e21d84554f2b5b3c", 0x58}], 0x5, &(0x7f0000004180)=[@rights={{0x28, 0x1, 0x1, [r0, r0, r0, r0, 0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, r0, r0, r0, r0]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r5, r7, r9}}}, @cred={{0x1c}}], 0xf8, 0x40080}}, {{&(0x7f00000042c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000043c0)=[{&(0x7f0000004340)="0562a46668c621fb659b5e67957ffc8998d65203f8a8f0e9296e5715f4fd791cbf0861cec0a1b372b8864cc62f8f1e98c5dfb2737a303df4578721c5d5f1b069a9479c78267a8426d83c548316b219db52fa23edab3aae3d628e73099d002a99162fa5515d17fa4d5d7cbaf020fd8cfa63c51560ea2c371f", 0x78}], 0x1, &(0x7f0000006440)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, r8}}}, @cred={{0x1c, 0x1, 0x2, {r10, r16, 0xee00}}}], 0x40, 0x40801}}], 0x4, 0x400c890) write$UHID_INPUT2(r0, &(0x7f0000000200), 0x6) 5.36869823s ago: executing program 3 (id=1595): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, '{'}]}], {0x14}}, 0x70}}, 0x0) 4.949918869s ago: executing program 3 (id=1596): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r1, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) open_by_handle_at(0xffffffffffffffff, 0x0, 0x400000) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) ioctl$SOUND_PCM_READ_RATE(0xffffffffffffffff, 0x80045002, &(0x7f0000000100)) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$kcm(0x10, 0x3, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB], 0x74}}, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10001100", 0x33fe0}], 0x1}, 0x0) fadvise64(r0, 0x0, 0x5, 0x0) 4.889896724s ago: executing program 4 (id=1597): r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001e00)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @dev}, 0x10) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, 0x0, &(0x7f0000000080)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r4, 0x4b4a, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/pid_for_children\x00') r5 = creat(&(0x7f0000001040)='./file0\x00', 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$alg(0x26, 0x5, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r6, 0xc0182101, &(0x7f0000000180)={r7, 0xf86}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000002780)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000000080)={r8, 0x3, r6, 0x5}) syz_emit_ethernet(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x10000}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000240)={r9, 0x2}, 0x8) r10 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0xe) ioctl$TIOCVHANGUP(r10, 0x5437, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000d5000000000014000300626f6e645f736c6176655f300000000008000a"], 0x3c}}, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x15, 0x0, 0x0) 4.793415417s ago: executing program 1 (id=1598): r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = fsmount(r0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r1, 0x0, 0x0}, 0x20) 4.71878255s ago: executing program 0 (id=1599): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000240)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x1, 0x0, 0x0, &(0x7f0000000700)=""/4096, &(0x7f0000001700)=""/256}) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x800000001ff, 0x2) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3, {0x75e5001e}}, './file0\x00'}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000340)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}}) r5 = dup(r3) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x4, 0x7, 0x0, 0x0, 0x0}) r6 = dup(r2) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r6}) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000100)={0x1, 0x1000}) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000180)={0xfffffc}, 0x10) write(r7, &(0x7f0000000000)="1c0000001a005f0214f9f407000901ff800000000340000300000000", 0x1c) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) ioctl$KVM_CREATE_PIT2(r9, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_PIT(r9, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}]}) socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x30, r10, 0x1, 0x70bd2b, 0x0, {{}, {}, {0x14, 0x18, {0x0, @bearer=@l2={'ib', 0x3a, 'nicvf0\x00'}}}}}, 0x30}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x3c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_ID={0x8}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x84}}, 0x0) socket$unix(0x1, 0x2, 0x0) 3.921398178s ago: executing program 3 (id=1600): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$alg(0x26, 0x5, 0x0) ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, &(0x7f0000000300)) socket$rxrpc(0x21, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x8003, 0x10002) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000040)={0x0}) bind$alg(r0, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) syz_emit_ethernet(0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x58, r6, 0xe17, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x100000}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2a}}}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}]}, 0x58}}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="e8206f15619a4b58d6b6ca5a1ffad434843f62a4dde1a11a0a7a354bad0365425682374f8bc2453100000000", 0x2c) r7 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000000280)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@iv={0x18}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}], 0x1, 0x0) recvfrom$inet_nvme(r7, &(0x7f0000000100)=""/135, 0x87, 0x0, 0x0, 0x0) r8 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r8, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r9 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, 0x0, 0x0) 3.886639379s ago: executing program 1 (id=1601): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x21, 0x4, 0x0, 0x0, 0x84, 0x67, 0x0, 0x0, 0x0, 0x0, @multicast2, @remote, {[@timestamp={0x44, 0x14, 0x0, 0x0, 0x9, [0x401, 0x0, 0x0, 0x4]}, @timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x1, [{@private=0xa010102}, {@multicast1}, {@dev={0xac, 0x14, 0x14, 0xfe}, 0x65c}, {@rand_addr=0x64010100}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x4, 0x0, 0x3, 0x8}, @noop, @noop, @noop, @end, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) 2.827164826s ago: executing program 3 (id=1602): r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r0, 0x89ee, 0x0) 2.483350108s ago: executing program 3 (id=1603): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fchdir(r1) r2 = fanotify_init(0x0, 0x0) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r2, 0x11, 0x8001021, r3, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) rename(0x0, 0x0) sendfile(r4, r0, &(0x7f0000000000)=0x9, 0x8) 2.4190177s ago: executing program 1 (id=1604): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000f1fffff1ff70", @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000021000100000000060000000002000000000000000000000005001600"], 0x30}}, 0x0) 212.343912ms ago: executing program 0 (id=1605): ptrace$getregset(0x4204, 0x0, 0x0, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, 0x0, &(0x7f00000015c0)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r5}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000a, 0x5d032, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000582000/0x2000)=nil, 0x800000}) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x148, 0x1170, 0x1170, 0x148, 0x1170, 0x260, 0x1398, 0x1398, 0x260, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [], [], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x21, 0x0, 0x0, 0x48}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@inet=@multiport={{0x50}}, @common=@unspec=@connlabel={{0x28}}]}, @common=@unspec=@CLASSIFY={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, [], [], 'veth1_to_hsr\x00', 'vlan1\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390) quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f00000003c0)=@nbd={'/dev/nbd', 0x0}, 0x0, 0x0) 207.804178ms ago: executing program 3 (id=1606): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$FUSE_BMAP(r0, &(0x7f0000000040)={0x18, 0x0, 0x0, {0x7fffffffffffffff}}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00001700000000001c0037800b0001006970768a616e00000c00028006001fffffff0000050027"], 0x44}}, 0x0) 179.116768ms ago: executing program 1 (id=1607): syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x13, r0, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000fc0)={'filter\x00', 0x2, [{}, {}]}, 0x48) 168.140702ms ago: executing program 4 (id=1608): gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)) mmap(&(0x7f00008d0000/0x4000)=nil, 0x4000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000340)={0x9, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f000000d000)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000400000002000000000000110400000000000000000000000000000400000000024da7eebfc09f958d007e8c00"], 0x0, 0x54}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="a8"], 0xa8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB]) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCSMAXCID(r5, 0x40047451, &(0x7f0000001880)) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000100)=0x2000004) 0s ago: executing program 1 (id=1609): r0 = io_uring_setup(0x17c3, &(0x7f0000000340)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe) listen(r1, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "a05c7b5d00008023e9c5bcf5ff7700"}) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r1, r3, 0x0) accept4$x25(r4, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.354022][ T7979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.380160][ T7979] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 321.432841][ T7979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.470531][ T7979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.505224][ T7979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.531064][ T7979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.559012][ T7979] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 321.615161][ T7979] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.645833][ T7979] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.666094][ T7979] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.690507][ T7979] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.840261][ T8210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.927922][ T5516] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 321.944903][ T8210] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.994100][ T8238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.025427][ T5571] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.032647][ T5571] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.037736][ T140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.052259][ T140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.077020][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.084204][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.150464][ T5516] usb 3-1: Using ep0 maxpacket: 16 [ 322.170176][ T5516] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 322.175874][ T8238] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.195359][ T5516] usb 3-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 322.207342][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.218639][ T5516] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.234350][ T5516] usb 3-1: Product: syz [ 322.245745][ T5516] usb 3-1: Manufacturer: syz [ 322.248483][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.258245][ T5516] usb 3-1: SerialNumber: syz [ 322.265705][ T5571] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.272928][ T5571] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.279375][ T5516] usb 3-1: config 0 descriptor?? [ 322.291619][ T5516] xbox_remote_probe: Unexpected endpoint_in [ 322.322613][ T5571] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.329803][ T5571] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.393380][ T8210] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 322.653525][ T5516] usb 3-1: USB disconnect, device number 15 [ 323.674539][ T8238] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.792438][ T8210] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.879236][ T8238] veth0_vlan: entered promiscuous mode [ 323.924808][ T8238] veth1_vlan: entered promiscuous mode [ 324.035296][ T8238] veth0_macvtap: entered promiscuous mode [ 324.072819][ T29] audit: type=1326 audit(1723141792.452:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8460 comm="syz.3.926" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f10f1f779f9 code=0x0 [ 324.090587][ T8238] veth1_macvtap: entered promiscuous mode [ 324.151978][ T8238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.191317][ T8238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.211546][ T8238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.233477][ T8238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.266578][ T8238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.287672][ T8238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.309835][ T8238] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.342768][ T8238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.355201][ T8238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.366074][ T8238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.381049][ T8238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.392241][ T8238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.403108][ T8238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.430254][ T8238] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.451549][ T8238] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.462373][ T8238] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.471778][ T8238] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.482587][ T8238] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.675186][ T976] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.679676][ T8210] veth0_vlan: entered promiscuous mode [ 324.701886][ T976] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.820141][ T8210] veth1_vlan: entered promiscuous mode [ 324.877777][ T7308] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.909416][ T7308] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.012257][ T8210] veth0_macvtap: entered promiscuous mode [ 325.060358][ T8210] veth1_macvtap: entered promiscuous mode [ 325.157909][ T8210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.168245][ T5516] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 325.211379][ T8210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.258926][ T8210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.307271][ T8210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.329923][ T8210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.368800][ T8210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.405298][ T5516] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 325.410537][ T8210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.437485][ T5516] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 325.451624][ T8210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.470045][ T8210] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 325.505869][ T5516] usb 1-1: New USB device found, idVendor=2001, idProduct=7d04, bcdDevice=cd.ee [ 325.532169][ T5516] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.568082][ T8210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.598527][ T5516] usb 1-1: Product: syz [ 325.630561][ T5516] usb 1-1: Manufacturer: syz [ 325.635198][ T5516] usb 1-1: SerialNumber: syz [ 325.645550][ T8210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.693631][ T5516] usb 1-1: config 0 descriptor?? [ 325.698802][ T8210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.722530][ T5516] option 1-1:0.0: GSM modem (1-port) converter detected [ 325.736033][ T8210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.771029][ T8508] ieee802154 phy0 wpan0: encryption failed: -90 [ 325.774379][ T8210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.815626][ T8506] binder: 8504:8506 ioctl c00c6211 0 returned -14 [ 325.840023][ T8210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.852759][ T8210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.865824][ T8210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.911508][ T8210] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 325.946490][ T8515] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 325.946490][ T8515] The task syz.1.937 (8515) triggered the difference, watch for misbehavior. [ 326.053640][ T8210] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.089365][ T8210] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.104959][ T8210] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.128423][ T8210] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.528279][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.571335][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.652239][ T8530] Process accounting resumed [ 326.733680][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.763908][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.048399][ T8542] Bluetooth: Found 0 CAPI controller(s) on device 10:aa:aa:aa:aa:aa [ 327.376721][ T8553] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 327.573606][ T8561] mmap: syz.4.950 (8561) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 327.703913][ T8563] netlink: 8 bytes leftover after parsing attributes in process `syz.1.948'. [ 327.747302][ T5571] usb 1-1: USB disconnect, device number 11 [ 327.923995][ T5571] option 1-1:0.0: device disconnected [ 329.268239][ T8571] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 330.001416][ T941] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 330.067718][ T5516] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 330.261147][ T941] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 330.270418][ T941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.279028][ T941] usb 3-1: Product: syz [ 330.283384][ T941] usb 3-1: Manufacturer: syz [ 330.505906][ T8584] Bluetooth: MGMT ver 1.23 [ 330.516060][ T8584] Bluetooth: hci3: service_discovery: too big uuid_count value 65535 [ 330.934554][ T5516] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.961384][ T941] usb 3-1: SerialNumber: syz [ 330.978470][ T941] usb 3-1: config 0 descriptor?? [ 330.986124][ T5516] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 330.996179][ T5516] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.019272][ T5516] usb 4-1: config 0 descriptor?? [ 331.077290][ T29] audit: type=1326 audit(1723141799.452:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8595 comm="syz.0.958" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcd2cb779f9 code=0x0 [ 331.098088][ C0] vkms_vblank_simulate: vblank timer overrun [ 331.290946][ T8598] netlink: 'syz.0.958': attribute type 5 has an invalid length. [ 331.327791][ T8598] netlink: 16 bytes leftover after parsing attributes in process `syz.0.958'. [ 331.430684][ T5569] usb 3-1: USB disconnect, device number 16 [ 331.456385][ T5516] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 331.475360][ T5516] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0005/input/input10 [ 331.488884][ T8605] netlink: 16 bytes leftover after parsing attributes in process `syz.1.960'. [ 331.488910][ T8605] netlink: 24 bytes leftover after parsing attributes in process `syz.1.960'. [ 331.489086][ T8605] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 331.545877][ T8605] bond1: entered allmulticast mode [ 331.546140][ T8605] 8021q: adding VLAN 0 to HW filter on device bond1 [ 331.599606][ T5516] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 332.125214][ T5569] usb 4-1: USB disconnect, device number 9 [ 332.437720][ T5573] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 332.493359][ T8636] veth0_vlan: entered allmulticast mode [ 332.556941][ T5569] tipc: Resetting bearer [ 332.565932][ T8638] veth0_vlan: left promiscuous mode [ 332.574830][ T8638] veth0_vlan: entered promiscuous mode [ 332.659197][ T5573] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.673032][ T5569] tipc: Resetting bearer [ 332.680049][ T5573] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 332.699661][ T5573] usb 5-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 332.717405][ T5573] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.762597][ T5573] usb 5-1: config 0 descriptor?? [ 332.808929][ T8642] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.818316][ T8642] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.217453][ T5573] lenovo 0003:17EF:6062.0006: hidraw0: USB HID v0.00 Device [HID 17ef:6062] on usb-dummy_hcd.4-1/input0 [ 333.251677][ T5571] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 333.419502][ T941] usb 5-1: USB disconnect, device number 10 [ 333.469362][ T5571] usb 1-1: Using ep0 maxpacket: 8 [ 333.497356][ T5571] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.532572][ T5571] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 333.556840][ T5571] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 333.586852][ T5571] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 333.612557][ T5571] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.693224][ T5571] usb 1-1: config 0 descriptor?? [ 334.755112][ T5571] pyra 0003:1E7D:2C24.0007: item fetching failed at offset 5/7 [ 334.808225][ T5571] pyra 0003:1E7D:2C24.0007: parse failed [ 334.811519][ T8662] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 334.814044][ T5571] pyra 0003:1E7D:2C24.0007: probe with driver pyra failed with error -22 [ 334.914177][ T29] audit: type=1326 audit(1723141803.282:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8659 comm="syz.2.976" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0559d779f9 code=0x0 [ 335.153255][ T8667] netlink: 8 bytes leftover after parsing attributes in process `syz.3.979'. [ 335.368103][ T8642] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.375331][ T8642] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.383009][ T8642] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.391087][ T8642] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.445750][ T8642] bridge0: entered promiscuous mode [ 335.452558][ T8642] bridge0: entered allmulticast mode [ 336.017908][ T5571] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 336.213932][ T5571] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 336.261978][ T5571] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 336.323119][ T5571] usb 2-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=b5.39 [ 336.374615][ T5571] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.387055][ T5571] usb 2-1: Product: syz [ 336.394413][ T5571] usb 2-1: Manufacturer: syz [ 336.399781][ T5571] usb 2-1: SerialNumber: syz [ 336.420435][ T5571] usb 2-1: config 0 descriptor?? [ 336.434790][ T5571] pn533_usb 2-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 336.610520][ T941] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 336.641442][ T8642] 9pnet_fd: p9_fd_create_tcp (8642): problem connecting socket to 127.0.0.1 [ 336.764499][ T5516] usb 2-1: USB disconnect, device number 11 [ 336.807730][ T941] usb 4-1: Using ep0 maxpacket: 32 [ 336.815728][ T941] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 336.837059][ T5608] usb 1-1: USB disconnect, device number 12 [ 336.861648][ T941] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 336.902179][ T941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.932305][ T941] usb 4-1: Product: syz [ 336.937975][ T941] usb 4-1: Manufacturer: syz [ 336.942636][ T941] usb 4-1: SerialNumber: syz [ 336.951311][ T941] usb 4-1: config 0 descriptor?? [ 336.957376][ T8704] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 336.966392][ T941] hub 4-1:0.0: bad descriptor, ignoring hub [ 336.976545][ T941] hub 4-1:0.0: probe with driver hub failed with error -5 [ 337.009440][ T941] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input11 [ 337.310366][ T8719] program syz.4.997 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 337.419482][ T8704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.455854][ T8704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.561458][ T941] usb 4-1: USB disconnect, device number 10 [ 337.561529][ C1] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 337.872358][ T8728] binder: 8726:8728 ioctl c0306201 20001a80 returned -14 [ 338.386441][ T8763] xt_l2tp: invalid flags combination: 0 [ 339.247254][ T5496] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 339.256313][ T5496] Bluetooth: hci3: Injecting HCI hardware error event [ 339.269360][ T5533] Bluetooth: hci3: hardware error 0x00 [ 339.282385][ T5608] kernel read not supported for file /newroot/70/file0 (pid: 5608 comm: kworker/1:5) [ 339.573742][ T8764] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 339.796710][ T8777] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 340.007758][ T5496] Bluetooth: hci0: command 0x0406 tx timeout [ 340.570276][ T8769] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 340.584209][ T5496] Bluetooth: hci0: unexpected event 0x01 length: 6 > 1 [ 340.701238][ T8776] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 341.382618][ T941] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 341.511936][ T5533] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 341.770618][ T941] usb 4-1: Using ep0 maxpacket: 8 [ 342.476625][ T941] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 342.487622][ T941] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 342.497734][ T941] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 342.510025][ T941] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 342.521472][ T941] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 342.534900][ T941] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 342.547383][ T941] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.709922][ T8813] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1024'. [ 342.790501][ T941] usb 4-1: usb_control_msg returned -32 [ 342.828288][ T941] usbtmc 4-1:16.0: can't read capabilities [ 343.074504][ T8827] bio_check_eod: 2 callbacks suppressed [ 343.074523][ T8827] syz.4.1031: attempt to access beyond end of device [ 343.074523][ T8827] nbd4: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 343.080823][ T8834] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1032'. [ 344.521570][ T8852] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1036'. [ 345.697994][ T5623] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 345.843448][ T941] usb 4-1: USB disconnect, device number 11 [ 345.932231][ T5623] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 345.960569][ T5623] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 345.971154][ T5623] usb 3-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 345.980594][ T5623] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.023004][ T5623] usb 3-1: config 0 descriptor?? [ 346.039662][ T5623] smsusb:smsusb_probe: board id=8, interface number 0 [ 346.149403][ T5623] smsusb:smsusb_probe: Device initialized with return code -19 [ 347.101164][ T5575] usb 3-1: USB disconnect, device number 17 [ 347.445596][ T29] audit: type=1326 audit(1723141815.822:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8884 comm="syz.2.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0559d779f9 code=0x7ffc0000 [ 347.506306][ T29] audit: type=1326 audit(1723141815.822:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8884 comm="syz.2.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0559d779f9 code=0x7ffc0000 [ 347.529061][ T29] audit: type=1326 audit(1723141815.852:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8884 comm="syz.2.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f0559d779f9 code=0x7ffc0000 [ 347.562556][ T5533] Bluetooth: hci0: unexpected event for opcode 0x2062 [ 347.580193][ T29] audit: type=1326 audit(1723141815.852:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8884 comm="syz.2.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0559d779f9 code=0x7ffc0000 [ 347.602302][ T29] audit: type=1326 audit(1723141815.852:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8884 comm="syz.2.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0559d779f9 code=0x7ffc0000 [ 347.624751][ T29] audit: type=1326 audit(1723141815.852:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8884 comm="syz.2.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7f0559d779f9 code=0x7ffc0000 [ 347.673472][ T29] audit: type=1326 audit(1723141815.852:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8884 comm="syz.2.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0559d779f9 code=0x7ffc0000 [ 347.689833][ T8889] random: crng reseeded on system resumption [ 347.706323][ T29] audit: type=1326 audit(1723141815.852:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8884 comm="syz.2.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0559d779f9 code=0x7ffc0000 [ 347.780684][ T29] audit: type=1326 audit(1723141815.862:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8884 comm="syz.2.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0559d779f9 code=0x7ffc0000 [ 347.820092][ T29] audit: type=1326 audit(1723141815.862:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8884 comm="syz.2.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0559d779f9 code=0x7ffc0000 [ 347.945313][ T8885] syz.2.1045: attempt to access beyond end of device [ 347.945313][ T8885] nbd2: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 348.000595][ T8885] gfs2: error -5 reading superblock [ 348.457339][ T8894] batman_adv: batadv0: Adding interface: macvtap1 [ 348.466892][ T8894] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.495270][ T8894] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 348.768561][ T8902] ptrace attach of "./syz-executor exec"[8238] was attempted by "./syz-executor exec"[8902] [ 348.785019][ T8902] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 349.177873][ T5571] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 349.464221][ T5571] usb 1-1: Using ep0 maxpacket: 8 [ 349.653822][ T5571] usb 1-1: New USB device found, idVendor=0ab4, idProduct=0014, bcdDevice=c4.18 [ 349.763182][ T5571] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.777369][ T5571] usb 1-1: Product: syz [ 349.805606][ T5571] usb 1-1: Manufacturer: syz [ 349.812724][ T5571] usb 1-1: SerialNumber: syz [ 349.827386][ T5571] usb 1-1: config 0 descriptor?? [ 349.847899][ T5571] esd_usb 1-1:0.0: sending version message failed [ 349.857649][ T5571] esd_usb 1-1:0.0: probe with driver esd_usb failed with error -22 [ 350.122588][ T5575] usb 1-1: USB disconnect, device number 13 [ 350.655730][ T8939] Bluetooth: hci3: invalid length 0, exp 2 for type 19 [ 351.838326][ T5533] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 351.847256][ T5533] Bluetooth: hci0: Injecting HCI hardware error event [ 351.862603][ T5496] Bluetooth: hci0: hardware error 0x00 [ 352.498052][ T8944] Invalid architecture in ELF header: 0 [ 352.919117][ T5608] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 353.082166][ T8970] overlayfs: failed to resolve './file0': -2 [ 353.899033][ T5496] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 355.290482][ T5608] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 355.316674][ T5608] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 355.340588][ T8959] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1072'. [ 355.386958][ T5608] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 355.410767][ T8959] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1072'. [ 355.430019][ T8959] netlink: 'syz.1.1072': attribute type 5 has an invalid length. [ 355.446206][ T5608] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 355.455530][ T5608] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.470790][ T5608] usb 3-1: Product: syz [ 355.482617][ T5608] usb 3-1: Manufacturer: syz [ 355.499676][ T8965] netlink: 'syz.1.1072': attribute type 8 has an invalid length. [ 355.515460][ T5608] usb 3-1: SerialNumber: syz [ 355.536877][ T8959] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1072'. [ 355.581967][ T8965] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1072'. [ 355.693324][ T5608] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 355.734473][ T5608] cdc_ncm 3-1:1.0: bind() failure [ 355.764071][ T5608] usb 3-1: USB disconnect, device number 18 [ 359.843235][ T9053] netlink: 'syz.4.1104': attribute type 1 has an invalid length. [ 359.871929][ T9053] netlink: 'syz.4.1104': attribute type 4 has an invalid length. [ 359.903516][ T9053] netlink: 15334 bytes leftover after parsing attributes in process `syz.4.1104'. [ 360.027424][ T29] kauditd_printk_skb: 73 callbacks suppressed [ 360.027441][ T29] audit: type=1326 audit(1723141828.402:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9054 comm="syz.2.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0559d779f9 code=0x7ffc0000 [ 360.081437][ T29] audit: type=1326 audit(1723141828.432:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9054 comm="syz.2.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0559d779f9 code=0x7ffc0000 [ 360.117376][ T29] audit: type=1326 audit(1723141828.492:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9054 comm="syz.2.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0559d779f9 code=0x7ffc0000 [ 360.245822][ T29] audit: type=1326 audit(1723141828.522:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9054 comm="syz.2.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0559d779f9 code=0x7ffc0000 [ 360.316553][ T29] audit: type=1326 audit(1723141828.522:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9054 comm="syz.2.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0559d779f9 code=0x7ffc0000 [ 360.445673][ T29] audit: type=1326 audit(1723141828.532:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9054 comm="syz.2.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0559d779f9 code=0x7ffc0000 [ 360.526435][ T29] audit: type=1326 audit(1723141828.532:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9054 comm="syz.2.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0559d6e9a7 code=0x7ffc0000 [ 360.555519][ T9070] vlan2: entered promiscuous mode [ 360.560991][ T9070] vlan2: entered allmulticast mode [ 360.566497][ T9070] xfrm0: entered allmulticast mode [ 360.583290][ T29] audit: type=1326 audit(1723141828.532:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9054 comm="syz.2.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0559d13379 code=0x7ffc0000 [ 360.607003][ T9070] xfrm0: entered promiscuous mode [ 360.636034][ T9070] team0: Port device vlan2 added [ 360.654048][ T29] audit: type=1326 audit(1723141828.532:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9054 comm="syz.2.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0559d6e9a7 code=0x7ffc0000 [ 360.677665][ T5608] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 360.695554][ T29] audit: type=1326 audit(1723141828.532:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9054 comm="syz.2.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0559d13379 code=0x7ffc0000 [ 360.887618][ T5608] usb 3-1: Using ep0 maxpacket: 8 [ 360.904402][ T5608] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 360.928694][ T5608] usb 3-1: New USB device found, idVendor=05ac, idProduct=024c, bcdDevice= 0.40 [ 360.940210][ T5608] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.955837][ T5608] usb 3-1: Product: syz [ 360.960320][ T5608] usb 3-1: Manufacturer: syz [ 360.964987][ T5608] usb 3-1: SerialNumber: syz [ 360.987645][ T5623] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 361.002218][ T5608] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input13 [ 361.257070][ T4654] bcm5974 3-1:1.0: could not read from device [ 361.276221][ T5623] usb 2-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50 [ 361.297719][ T5623] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.298075][ T4654] bcm5974 3-1:1.0: could not read from device [ 362.280140][ T5608] usb 3-1: USB disconnect, device number 19 [ 362.285679][ T4654] bcm5974 3-1:1.0: could not read from device [ 362.288577][ T5623] usb 2-1: Product: syz [ 362.296427][ T5623] usb 2-1: Manufacturer: syz [ 362.306809][ T5623] usb 2-1: SerialNumber: syz [ 362.346893][ T5623] usb 2-1: config 0 descriptor?? [ 362.377154][ T5623] usb 2-1: Waiting for MOTU Microbook II to boot up... [ 362.397378][ T5623] usb 2-1: failed setting the sample rate for Motu MicroBook II: -22 [ 362.397490][ T5623] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 362.952837][ T5608] usb 2-1: USB disconnect, device number 12 [ 363.027812][ T5571] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 363.562830][ T5571] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 363.804774][ T5571] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 363.843719][ T5571] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 363.882028][ T5571] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.908266][ T5571] usb 3-1: config 0 descriptor?? [ 364.203113][ T9114] qrtr: Invalid version 48 [ 364.239707][ T9114] ip6t_srh: unknown srh match flags 4000 [ 364.367196][ T5571] lg-g15 0003:046D:C222.0008: unknown main item tag 0x0 [ 364.383268][ T5571] lg-g15 0003:046D:C222.0008: unknown main item tag 0x0 [ 364.406308][ T5571] lg-g15 0003:046D:C222.0008: unknown main item tag 0x0 [ 364.424743][ T5571] lg-g15 0003:046D:C222.0008: unknown main item tag 0x0 [ 364.459251][ T5571] lg-g15 0003:046D:C222.0008: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.2-1/input0 [ 364.664479][ T52] usb 3-1: USB disconnect, device number 20 [ 365.157685][ T5623] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 366.869663][ T5623] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 366.897723][ T5623] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.029129][ T5623] usb 2-1: config 0 descriptor?? [ 367.067123][ T5623] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 368.838888][ T5608] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 370.710658][ T5623] gp8psk: usb in 128 operation failed. [ 371.514071][ T5608] usb 3-1: Using ep0 maxpacket: 16 [ 371.699184][ T5516] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 371.718962][ T5623] gp8psk: usb in 137 operation failed. [ 373.208185][ T5623] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-22) [ 373.217211][ T5623] dvb_usb_gp8psk 2-1:0.0: probe with driver dvb_usb_gp8psk failed with error -22 [ 373.330636][ T5623] usb 2-1: USB disconnect, device number 13 [ 373.667906][ T5608] usb 3-1: device descriptor read/all, error -71 [ 374.027736][ T5623] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 374.278467][ T5623] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 374.317450][ T5623] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 374.350328][ T5623] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.400333][ T5623] usb 2-1: config 0 descriptor?? [ 374.848469][ T5623] keytouch 0003:0926:3333.0009: fixing up Keytouch IEC report descriptor [ 374.903146][ T5623] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0009/input/input14 [ 375.083462][ T9166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1144'. [ 375.126865][ T5623] keytouch 0003:0926:3333.0009: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 375.838645][ T5623] usb 2-1: USB disconnect, device number 14 [ 376.002524][ T9191] REISERFS warning (device nullb0): super-6502 reiserfs_getopt: unknown mount option "l~^[ MˆaJ©Æ·§‰…c‘×-*£\ynSŸ¥nºYefÓNìoã´X+“%´ç+¥BO" [ 376.201038][ T9195] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 376.219483][ T9194] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 376.967923][ T5569] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 377.179081][ T5569] usb 1-1: Using ep0 maxpacket: 16 [ 377.204129][ T5569] usb 1-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=ec.c1 [ 377.226961][ T5569] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.245594][ T5569] usb 1-1: Product: syz [ 377.252592][ T5569] usb 1-1: Manufacturer: syz [ 377.257323][ T5569] usb 1-1: SerialNumber: syz [ 377.268159][ T5569] usb 1-1: config 0 descriptor?? [ 377.276996][ T5569] powermate 1-1:0.0: probe with driver powermate failed with error -22 [ 377.795840][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 377.795858][ T29] audit: type=1326 audit(1723141846.172:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9227 comm="syz.4.1163" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f64ce1779f9 code=0x0 [ 377.823006][ C0] vkms_vblank_simulate: vblank timer overrun [ 378.117457][ T9243] netlink: 'syz.1.1165': attribute type 12 has an invalid length. [ 378.688055][ T9258] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1170'. [ 378.697224][ T9258] netlink: 'syz.4.1170': attribute type 12 has an invalid length. [ 378.705732][ T9258] netlink: 'syz.4.1170': attribute type 13 has an invalid length. [ 378.721764][ T9258] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.730653][ T9258] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.739482][ T9258] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.748229][ T9258] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.787806][ T9258] vxlan0: entered promiscuous mode [ 378.865586][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.882890][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.347903][ T5569] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 379.554615][ T9275] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1177'. [ 379.567685][ T5569] usb 2-1: New USB device found, idVendor=04b4, idProduct=6830, bcdDevice=86.cf [ 379.577862][ T5569] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.615127][ T5569] ums-cypress 2-1:1.0: USB Mass Storage device detected [ 379.733083][ T52] usb 1-1: USB disconnect, device number 14 [ 379.915331][ T9268] netlink: 'syz.1.1174': attribute type 12 has an invalid length. [ 380.088849][ T52] usb 2-1: USB disconnect, device number 15 [ 381.936515][ T9305] netlink: 'syz.0.1186': attribute type 10 has an invalid length. [ 381.949143][ T9304] Process accounting resumed [ 382.020846][ T9305] 8021q: adding VLAN 0 to HW filter on device team0 [ 382.036301][ T9305] bond0: (slave team0): Enslaving as an active interface with an up link [ 382.914554][ T29] audit: type=1326 audit(1723141851.292:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9318 comm="syz.1.1192" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f89661779f9 code=0x0 [ 385.467755][ T5575] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 385.537723][ T52] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 385.617853][ T5575] usb 2-1: device descriptor read/64, error -71 [ 385.729771][ T52] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 15399, setting to 1024 [ 385.741116][ T52] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 385.751265][ T52] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 385.760352][ T52] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.771476][ T52] usb 4-1: config 0 descriptor?? [ 385.777094][ T9354] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 385.910574][ T5575] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 386.087820][ T5575] usb 2-1: device descriptor read/64, error -71 [ 386.208364][ T5575] usb usb2-port1: attempt power cycle [ 386.663224][ T5575] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 386.722498][ T5575] usb 2-1: device descriptor read/8, error -71 [ 387.027693][ T5575] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 387.083238][ T5575] usb 2-1: device descriptor read/8, error -71 [ 387.237389][ T5575] usb usb2-port1: unable to enumerate USB device [ 388.158363][ T5533] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 388.170977][ T5533] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 388.179262][ T5533] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 388.191514][ T5533] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 388.199352][ T5533] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 388.214859][ T5533] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 388.448486][ T1064] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.097782][ T5623] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 390.258045][ T9391] syz.1.1223: attempt to access beyond end of device [ 390.258045][ T9391] nbd1: rw=4096, sector=0, nr_sectors = 2 limit=0 [ 390.258480][ T1064] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.317633][ T5623] usb 5-1: Using ep0 maxpacket: 16 [ 390.317951][ T5533] Bluetooth: hci0: command tx timeout [ 390.387765][ T5623] usb 5-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=f8.a6 [ 390.446989][ T5623] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.475248][ T5623] usb 5-1: Product: syz [ 390.493857][ T5623] usb 5-1: Manufacturer: syz [ 390.503885][ T1064] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.504557][ T5623] usb 5-1: SerialNumber: syz [ 390.586893][ T5623] usb 5-1: config 0 descriptor?? [ 390.828084][ T1064] batman_adv: batadv0: Removing interface: macvtap1 [ 390.886272][ T1064] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.507954][ T1064] bridge_slave_1: left allmulticast mode [ 391.527267][ T1064] bridge_slave_1: left promiscuous mode [ 391.541514][ T1064] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.593494][ T1064] bridge_slave_0: left allmulticast mode [ 391.633595][ T1064] bridge_slave_0: left promiscuous mode [ 391.657465][ T1064] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.008240][ T5623] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 392.178190][ T5569] usb 5-1: USB disconnect, device number 12 [ 392.389880][ T5533] Bluetooth: hci0: command tx timeout [ 392.899709][ T9420] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1216'. [ 392.954249][ T9420] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1216'. [ 393.004081][ T9420] netlink: 'syz.4.1216': attribute type 5 has an invalid length. [ 393.008431][ T9425] netlink: 'syz.4.1216': attribute type 8 has an invalid length. [ 393.059161][ T9420] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1216'. [ 393.099741][ T9425] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1216'. [ 394.622120][ T5533] Bluetooth: hci0: command tx timeout [ 395.240109][ T1064] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 395.268709][ T5623] usb 2-1: unable to get BOS descriptor or descriptor too short [ 395.292703][ T5623] usb 2-1: too many configurations: 233, using maximum allowed: 8 [ 395.292994][ T1064] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 395.330238][ T5623] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 395.347796][ T5623] usb 2-1: can't read configurations, error -71 [ 395.405924][ T1064] bond0 (unregistering): Released all slaves [ 395.431077][ T5496] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 395.442996][ T5496] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 395.453675][ T5496] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 395.462016][ T5496] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 395.471154][ T5496] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 395.478621][ T5496] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 395.544736][ T9441] unknown channel width for channel at 909000KHz? [ 395.609481][ T9380] chnl_net:caif_netlink_parms(): no params data found [ 395.689851][ T1064] tipc: Disabling bearer [ 395.748063][ T1064] tipc: Left network mode [ 396.697813][ T5533] Bluetooth: hci0: command tx timeout [ 397.580950][ T5533] Bluetooth: hci4: command tx timeout [ 397.650125][ T9380] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.690497][ T9380] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.739517][ T9380] bridge_slave_0: entered allmulticast mode [ 397.747367][ T9380] bridge_slave_0: entered promiscuous mode [ 397.787824][ T9380] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.607906][ T9380] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.615139][ T9380] bridge_slave_1: entered allmulticast mode [ 398.622618][ T9380] bridge_slave_1: entered promiscuous mode [ 399.414938][ T9498] netlink: 'syz.3.1230': attribute type 3 has an invalid length. [ 399.432111][ T9498] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.1230'. [ 399.473236][ T1064] hsr_slave_0: left promiscuous mode [ 399.523517][ T1064] hsr_slave_1: left promiscuous mode [ 399.567990][ T1064] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 399.575469][ T1064] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 399.638517][ T1064] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 399.657977][ T5533] Bluetooth: hci4: command tx timeout [ 399.667927][ T1064] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 399.720068][ T9503] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1233'. [ 399.750276][ T1064] veth1_macvtap: left promiscuous mode [ 399.762631][ T1064] veth0_macvtap: left promiscuous mode [ 399.775081][ T1064] veth1_vlan: left promiscuous mode [ 401.243708][ T1064] team0 (unregistering): Port device team_slave_1 removed [ 401.337350][ T1064] team0 (unregistering): Port device team_slave_0 removed [ 401.738238][ T5533] Bluetooth: hci4: command tx timeout [ 402.311484][ T9380] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 402.410726][ T9380] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 402.845993][ T9380] team0: Port device team_slave_0 added [ 402.896568][ T9380] team0: Port device team_slave_1 added [ 402.931843][ T9442] chnl_net:caif_netlink_parms(): no params data found [ 403.282413][ T9380] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 403.317654][ T9380] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 403.459854][ T9380] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 403.554708][ T9380] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 403.562575][ T9380] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 403.588502][ C0] vkms_vblank_simulate: vblank timer overrun [ 403.598465][ T9380] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 403.825159][ T5533] Bluetooth: hci4: command tx timeout [ 404.153607][ T9380] hsr_slave_0: entered promiscuous mode [ 404.198283][ T9380] hsr_slave_1: entered promiscuous mode [ 404.247760][ T9380] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 404.275527][ T9380] Cannot create hsr debugfs directory [ 404.358987][ T9442] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.366160][ T9442] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.410551][ T9442] bridge_slave_0: entered allmulticast mode [ 404.438295][ T9442] bridge_slave_0: entered promiscuous mode [ 404.538515][ T9442] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.545683][ T9442] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.607939][ T9442] bridge_slave_1: entered allmulticast mode [ 404.615296][ T9442] bridge_slave_1: entered promiscuous mode [ 405.733889][ T9442] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 405.859265][ T9442] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.095090][ T9442] team0: Port device team_slave_0 added [ 406.139995][ T9442] team0: Port device team_slave_1 added [ 406.248107][ T9571] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xf [ 406.327176][ T9442] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 406.365100][ T9442] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 406.391096][ C0] vkms_vblank_simulate: vblank timer overrun [ 406.495414][ T9442] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 406.677046][ T9442] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 406.695843][ T9442] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 406.721785][ C0] vkms_vblank_simulate: vblank timer overrun [ 406.844912][ T9442] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 407.436288][ T9442] hsr_slave_0: entered promiscuous mode [ 407.446290][ T9442] hsr_slave_1: entered promiscuous mode [ 407.460951][ T9597] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 407.472162][ T9442] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 407.494136][ T9442] Cannot create hsr debugfs directory [ 408.259776][ T9600] ubi0: attaching mtd0 [ 408.308096][ T9600] ubi0: scanning is finished [ 408.313275][ T9600] ubi0: empty MTD device detected [ 408.391466][ T9380] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 408.541108][ T9442] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 408.574821][ T9442] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.638256][ T9380] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 408.680989][ T9600] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 408.688915][ T9600] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 408.700027][ T9600] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 408.721504][ T9380] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 408.727636][ T5569] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 408.741758][ T9600] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 408.763005][ T9600] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 408.787040][ T9600] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 408.808156][ T9380] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 408.815493][ T9600] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2711821191 [ 408.835341][ T9600] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 408.852400][ T9617] ubi0: background thread "ubi_bgt0d" started, PID 9617 [ 408.916434][ T9442] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 408.935947][ T9442] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.957801][ T5569] usb 5-1: Using ep0 maxpacket: 16 [ 408.970634][ T5569] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 408.985222][ T5569] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 408.996191][ T5569] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 409.011319][ T5569] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 409.023877][ T5569] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 409.044316][ T5569] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 409.083626][ T9442] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 409.099549][ T9442] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.120390][ T5569] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 409.132927][ T5569] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.145003][ T5569] usb 5-1: Product: syz [ 409.158634][ T5569] usb 5-1: Manufacturer: syz [ 409.163438][ T5569] usb 5-1: SerialNumber: syz [ 409.197440][ T5569] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 409.226939][ T5569] cdc_ncm 5-1:1.0: bind() failure [ 409.303683][ T5569] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 409.326644][ T5569] cdc_ncm 5-1:1.1: bind() failure [ 409.375647][ T9442] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 409.427743][ T9442] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.610350][ T5569] usb 5-1: USB disconnect, device number 13 [ 409.846943][ T9632] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1262'. [ 409.866491][ T9632] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 409.981438][ T9380] 8021q: adding VLAN 0 to HW filter on device bond0 [ 410.083277][ T9380] 8021q: adding VLAN 0 to HW filter on device team0 [ 410.119376][ T9637] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1263'. [ 410.147868][ T9442] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 410.197315][ T9442] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 410.233212][ T5569] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.240397][ T5569] bridge0: port 1(bridge_slave_0) entered forwarding state [ 410.314905][ T9442] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 410.374381][ T5571] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.381569][ T5571] bridge0: port 2(bridge_slave_1) entered forwarding state [ 410.471566][ T9442] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 410.997052][ T9646] Bluetooth: MGMT ver 1.23 [ 411.196601][ T9442] 8021q: adding VLAN 0 to HW filter on device bond0 [ 411.326328][ T9442] 8021q: adding VLAN 0 to HW filter on device team0 [ 411.507461][ T5573] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.514650][ T5573] bridge0: port 1(bridge_slave_0) entered forwarding state [ 411.600174][ T5573] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.607254][ T5573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 411.657685][ T5496] Bluetooth: hci1: command 0x0406 tx timeout [ 411.777746][ T9437] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 411.792242][ T9380] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 411.912158][ T9442] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 411.999538][ T9437] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 412.052104][ T9437] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 412.132242][ T9437] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 412.187059][ T9437] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 412.215923][ T9380] veth0_vlan: entered promiscuous mode [ 412.237882][ T9437] usb 2-1: Manufacturer: syz [ 412.280814][ T9437] usb 2-1: config 0 descriptor?? [ 412.308582][ T29] audit: type=1326 audit(1723141880.682:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9684 comm="syz.3.1272" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f10f1f779f9 code=0x0 [ 412.324012][ T9380] veth1_vlan: entered promiscuous mode [ 412.465979][ T9690] netlink: 22 bytes leftover after parsing attributes in process `syz.3.1272'. [ 412.511755][ T9380] veth0_macvtap: entered promiscuous mode [ 412.537839][ T9380] veth1_macvtap: entered promiscuous mode [ 412.559593][ T9437] rc_core: IR keymap rc-hauppauge not found [ 412.594705][ T9437] Registered IR keymap rc-empty [ 412.627074][ T9380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 412.649745][ T9437] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 412.705865][ T9380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.716564][ T9437] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input17 [ 412.753568][ T9380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 412.789024][ T9380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.937780][ T9380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 413.018457][ T9380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.066378][ T9380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 413.080106][ T9380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.141941][ T9380] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 413.543050][ T5571] usb 2-1: USB disconnect, device number 22 [ 413.624953][ T9380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 413.877755][ T9380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.937050][ T9380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.005154][ T9380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.055065][ T9380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.092955][ T9380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.142849][ T9380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.214308][ T9380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.257485][ T9380] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 414.371744][ T9380] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.411764][ T9380] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.468438][ T9380] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.510147][ T9380] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.713432][ T9442] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 415.033875][ T9724] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1278'. [ 415.044843][ T976] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.053809][ T9442] veth0_vlan: entered promiscuous mode [ 415.085541][ T976] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.109307][ T9724] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1278'. [ 415.206642][ T9733] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1278'. [ 415.356008][ T9442] veth1_vlan: entered promiscuous mode [ 415.401015][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.463717][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.583554][ T9442] veth0_macvtap: entered promiscuous mode [ 415.629181][ T9442] veth1_macvtap: entered promiscuous mode [ 416.950758][ T9442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.028976][ T9442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.087010][ T9442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.107996][ T9750] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 417.184155][ T9442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.274277][ T9442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.446608][ T9442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.501516][ T9442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.532016][ T25] IPVS: starting estimator thread 0... [ 417.607597][ T9442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.639424][ T9442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.652608][ T9442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.671376][ T9767] IPVS: using max 19 ests per chain, 45600 per kthread [ 417.704368][ T9442] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 417.973455][ T9779] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 925 (only 8 groups) [ 418.025225][ T9442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.069339][ T9442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.080408][ T9442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.091111][ T9442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.107602][ T9442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.131401][ T9442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.151729][ T9442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.181269][ T9442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.201554][ T9442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.212804][ T9442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.255149][ T9442] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 418.332970][ T9442] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.352011][ T9442] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.363945][ T9442] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.383902][ T9442] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.517812][ T9787] input: syz1 as /devices/virtual/input/input18 [ 419.559941][ T5571] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 419.801790][ T9796] macvlan2: entered promiscuous mode [ 419.809556][ T5571] usb 5-1: Using ep0 maxpacket: 32 [ 419.840739][ T5571] usb 5-1: config 0 has an invalid interface number: 250 but max is 1 [ 419.868833][ T9796] vlan1: entered promiscuous mode [ 419.877705][ T5571] usb 5-1: config 0 has no interface number 1 [ 419.899181][ T5571] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 419.920540][ T5533] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 419.950513][ T9796] team0: Port device macvlan2 added [ 419.977367][ T5571] usb 5-1: New USB device found, idVendor=0408, idProduct=3090, bcdDevice=a6.3f [ 420.029474][ T5571] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.081267][ T5571] usb 5-1: Product: syz [ 420.104071][ T5571] usb 5-1: Manufacturer: syz [ 420.124463][ T5571] usb 5-1: SerialNumber: syz [ 420.170960][ T5571] usb 5-1: config 0 descriptor?? [ 420.189211][ T1064] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.225834][ T1064] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.461995][ T1064] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.488464][ T5571] usb 5-1: Found UVC 0.00 device syz (0408:3090) [ 420.507627][ T1064] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.518425][ T5571] usb 5-1: No valid video chain found. [ 420.822460][ T5571] usb 5-1: USB disconnect, device number 14 [ 420.908058][ T9819] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1217'. [ 420.917056][ T9819] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1217'. [ 421.617633][ T5571] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 421.810181][ T5571] usb 2-1: Using ep0 maxpacket: 8 [ 421.817775][ T5533] Bluetooth: hci1: command 0x0406 tx timeout [ 421.838049][ T5571] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 421.898274][ T5571] usb 2-1: config 0 interface 0 altsetting 253 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 421.960789][ T5571] usb 2-1: config 0 interface 0 has no altsetting 0 [ 422.001980][ T5571] usb 2-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.00 [ 422.057777][ T5571] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.115302][ T5571] usb 2-1: config 0 descriptor?? [ 422.162764][ T5571] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input19 [ 422.423451][ T4654] bcm5974 2-1:0.0: could not read from device [ 422.569547][ T4654] bcm5974 2-1:0.0: could not read from device [ 422.618602][ T5571] usb 2-1: USB disconnect, device number 23 [ 422.624874][ T4654] bcm5974 2-1:0.0: could not read from device [ 429.584386][ T9888] netlink: 'syz.4.1311': attribute type 10 has an invalid length. [ 430.379142][ T9888] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 430.756408][ T5575] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 430.894962][ T9902] binder: 9897:9902 ioctl c0306201 200003c0 returned -22 [ 431.069627][ T5575] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 431.233226][ T5575] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 431.375231][ T5575] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.642120][ T5575] usb 5-1: config 0 descriptor?? [ 431.676747][ T5575] pwc: Askey VC010 type 2 USB webcam detected. [ 432.039080][ T5575] pwc: send_video_command error -71 [ 432.068986][ T5575] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 432.112481][ T5575] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 432.266569][ T5575] usb 5-1: USB disconnect, device number 15 [ 432.456166][ T9916] vhci_hcd: vhci_device speed not set [ 432.798053][ T5575] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 433.289560][ T5575] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 433.451245][ T5575] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 433.540129][ T5575] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.621850][ T5575] usb 5-1: config 0 descriptor?? [ 433.698899][ T9925] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 433.725129][ T5575] usb 5-1: can't set config #0, error -71 [ 433.795427][ T5575] usb 5-1: USB disconnect, device number 16 [ 434.218326][ T5575] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 434.430395][ T5496] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 434.447633][ T5496] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 434.459482][ T5496] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 434.468424][ T5496] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 434.483295][ T5496] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 434.491359][ T5496] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 434.497707][ T5575] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 434.638372][ T5575] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 434.648226][ T5575] usb 5-1: New USB device found, idVendor=056a, idProduct=00f8, bcdDevice= 0.00 [ 434.657379][ T5575] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.677597][ T5575] usb 5-1: config 0 descriptor?? [ 437.345435][ T5533] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 437.354658][ T5533] Bluetooth: hci1: Injecting HCI hardware error event [ 437.365343][ T5533] Bluetooth: hci1: hardware error 0x00 [ 437.376431][ T5575] wacom 0003:056A:00F8.000A: hidraw0: USB HID v0.00 Device [HID 056a:00f8] on usb-dummy_hcd.4-1/input0 [ 437.446807][ T5575] usb 5-1: USB disconnect, device number 17 [ 437.456385][ T9948] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1323'. [ 437.866243][ T9951] vlan2: entered promiscuous mode [ 438.093022][ T9948] mkiss: ax0: crc mode is auto. [ 438.538300][ T5496] Bluetooth: hci6: command tx timeout [ 439.213492][ T2501] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.658805][ T5533] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 439.794001][ T2501] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.983264][ T2501] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.303987][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.310714][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.415659][ T2501] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.625699][ T5533] Bluetooth: hci6: command tx timeout [ 440.812908][ T9937] chnl_net:caif_netlink_parms(): no params data found [ 441.098168][ T2501] bridge_slave_1: left allmulticast mode [ 441.103856][ T2501] bridge_slave_1: left promiscuous mode [ 441.151473][ T2501] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.255381][ T2501] bridge_slave_0: left allmulticast mode [ 441.278880][ T2501] bridge_slave_0: left promiscuous mode [ 441.319147][ T2501] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.393670][T10000] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1334'. [ 442.698307][ T5496] Bluetooth: hci6: command tx timeout [ 444.089472][T10060] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1339'. [ 444.620347][ T5496] Bluetooth: hci2: command 0x0406 tx timeout [ 444.778598][ T5533] Bluetooth: hci6: command tx timeout [ 445.168528][ T5496] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 445.178922][ T5496] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 445.187091][ T5496] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 445.196003][ T5496] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 445.203845][ T5496] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 445.236429][ T5496] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 445.759336][T10079] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1343'. [ 446.139120][ T2501] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 446.209506][ T2501] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 446.257875][ T2501] bond0 (unregistering): Released all slaves [ 447.347752][ T5496] Bluetooth: hci4: command tx timeout [ 447.957317][ T9937] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.004372][ T9937] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.049606][ T9937] bridge_slave_0: entered allmulticast mode [ 448.100180][ T9937] bridge_slave_0: entered promiscuous mode [ 448.156716][ T9937] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.212106][ T9937] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.227853][ T9937] bridge_slave_1: entered allmulticast mode [ 448.267748][ T9937] bridge_slave_1: entered promiscuous mode [ 448.401396][T10117] netlink: 'syz.3.1353': attribute type 1 has an invalid length. [ 448.744552][T10119] bond1: (slave gretap1): making interface the new active one [ 448.879043][T10119] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 449.071886][ T9937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 449.247833][ T2501] hsr_slave_0: left promiscuous mode [ 449.330566][ T2501] hsr_slave_1: left promiscuous mode [ 449.380351][ T2501] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 449.417938][ T5496] Bluetooth: hci4: command tx timeout [ 449.423491][ T2501] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 449.493815][ T2501] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 449.543589][ T2501] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 449.652956][ T2501] veth1_macvtap: left promiscuous mode [ 449.679988][ T2501] veth0_macvtap: left promiscuous mode [ 449.686269][ T2501] veth1_vlan: left promiscuous mode [ 449.691520][T10131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 449.721478][ T2501] veth0_vlan: left promiscuous mode [ 449.793240][T10131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 449.879482][T10136] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1357'. [ 451.497848][ T5496] Bluetooth: hci4: command tx timeout [ 452.130784][ T2501] team0 (unregistering): Port device team_slave_1 removed [ 452.350182][ T2501] team0 (unregistering): Port device team_slave_0 removed [ 453.482036][ T9937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 453.607707][ T5496] Bluetooth: hci4: command tx timeout [ 453.862448][T10142] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1359'. [ 453.900808][ T9937] team0: Port device team_slave_0 added [ 453.929016][ T9937] team0: Port device team_slave_1 added [ 454.258416][ T9937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 454.265408][ T9937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 454.345532][ T9937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 455.156338][ T9937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 455.408920][ T9937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.577015][ T9937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 456.637749][ T5569] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 456.773231][ T2501] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.868097][ T5569] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 456.899236][ T5569] usb 3-1: config 0 has no interfaces? [ 456.906543][ T9937] hsr_slave_0: entered promiscuous mode [ 456.912662][ T5569] usb 3-1: New USB device found, idVendor=0bda, idProduct=818a, bcdDevice=e2.d8 [ 456.939888][ T9937] hsr_slave_1: entered promiscuous mode [ 456.955142][ T5569] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.965306][ T9937] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 456.985483][ T5569] usb 3-1: config 0 descriptor?? [ 456.993981][ T9937] Cannot create hsr debugfs directory [ 457.058355][ T2501] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.094121][T10073] chnl_net:caif_netlink_parms(): no params data found [ 457.305866][ T2501] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.645528][ T2501] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.179479][T10073] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.211716][T10073] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.249659][T10073] bridge_slave_0: entered allmulticast mode [ 458.279582][T10073] bridge_slave_0: entered promiscuous mode [ 458.322094][T10073] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.352835][T10073] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.382897][T10073] bridge_slave_1: entered allmulticast mode [ 458.414614][T10073] bridge_slave_1: entered promiscuous mode [ 458.752695][T10073] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 458.765445][ T5569] usb 3-1: USB disconnect, device number 23 [ 458.838413][T10073] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 459.519527][T10073] team0: Port device team_slave_0 added [ 459.540264][ T2501] bridge_slave_1: left allmulticast mode [ 459.565304][ T2501] bridge_slave_1: left promiscuous mode [ 459.577718][ T2501] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.640514][ T2501] bridge_slave_0: left allmulticast mode [ 459.654864][ T2501] bridge_slave_0: left promiscuous mode [ 459.665178][ T2501] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.998357][ T2501] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 463.078215][ T2501] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 463.113906][ T2501] bond0 (unregistering): Released all slaves [ 463.567126][ T2501] bond1 (unregistering): Released all slaves [ 463.884678][T10073] team0: Port device team_slave_1 added [ 464.745530][T10073] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 464.777947][T10073] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 464.815037][ T8] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 464.884440][T10073] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 464.938990][T10073] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 464.945968][T10073] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.063972][T10073] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 465.086372][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 465.107312][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 465.139046][T10257] netlink: 'syz.2.1379': attribute type 8 has an invalid length. [ 465.160192][ T8] usb 3-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 465.186456][T10257] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 465.228687][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.266923][ T8] usb 3-1: config 0 descriptor?? [ 465.848461][ T2501] hsr_slave_0: left promiscuous mode [ 465.866730][ T2501] hsr_slave_1: left promiscuous mode [ 465.907269][ T2501] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 465.915131][ T2501] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 465.945349][ T2501] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 465.957134][ T2501] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 466.017169][ T8] usbhid 3-1:0.0: can't add hid device: -71 [ 466.027723][ T8] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 466.063206][ T2501] veth1_macvtap: left promiscuous mode [ 466.086050][ T8] usb 3-1: USB disconnect, device number 24 [ 466.097299][ T2501] veth0_macvtap: left promiscuous mode [ 466.125337][ T2501] veth1_vlan: left promiscuous mode [ 466.159966][ T2501] veth0_vlan: left promiscuous mode [ 467.201173][T10276] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 468.536957][ T29] audit: type=1326 audit(1723141936.912:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10281 comm="syz.4.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64ce1779f9 code=0x7ffc0000 [ 468.580241][ T29] audit: type=1326 audit(1723141936.912:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10281 comm="syz.4.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64ce1779f9 code=0x7ffc0000 [ 468.653593][ T29] audit: type=1326 audit(1723141936.912:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10281 comm="syz.4.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7f64ce1779f9 code=0x7ffc0000 [ 468.720900][ T2501] team0 (unregistering): Port device team_slave_1 removed [ 468.762337][ T29] audit: type=1326 audit(1723141936.912:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10281 comm="syz.4.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64ce1779f9 code=0x7ffc0000 [ 468.816006][ T29] audit: type=1326 audit(1723141936.912:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10281 comm="syz.4.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64ce1779f9 code=0x7ffc0000 [ 468.913166][ T2501] team0 (unregistering): Port device team_slave_0 removed [ 469.026655][ T8] kernel write not supported for file /media0 (pid: 8 comm: kworker/0:0) [ 470.088957][T10073] hsr_slave_0: entered promiscuous mode [ 470.097467][T10073] hsr_slave_1: entered promiscuous mode [ 470.135140][T10073] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 470.144260][T10073] Cannot create hsr debugfs directory [ 470.255433][T10280] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 471.575532][ T9937] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 471.828335][ T9937] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 471.873079][ T9937] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 471.942561][ T9937] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 472.707675][T10328] tap0: tun_chr_ioctl cmd 1074025677 [ 472.713172][T10328] tap0: linktype set to 780 [ 473.837138][ T9937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 473.854156][T10338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 473.961284][T10338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 473.965520][ T9937] 8021q: adding VLAN 0 to HW filter on device team0 [ 474.025329][ T5516] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.032540][ T5516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 474.119565][ T5572] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.126703][ T5572] bridge0: port 2(bridge_slave_1) entered forwarding state [ 474.522687][ T9937] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 474.594085][ T9937] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 474.736215][T10073] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 474.782112][T10357] netlink: 'syz.3.1399': attribute type 27 has an invalid length. [ 474.811591][T10073] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 474.928298][T10073] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 474.973794][T10073] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 475.046093][T10364] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 475.129528][T10364] overlayfs: missing 'lowerdir' [ 475.244323][T10073] 8021q: adding VLAN 0 to HW filter on device bond0 [ 475.525750][T10073] 8021q: adding VLAN 0 to HW filter on device team0 [ 475.813337][T10377] netlink: 'syz.2.1401': attribute type 1 has an invalid length. [ 475.821415][T10377] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.1401'. [ 475.831459][T10377] netlink: 'syz.2.1401': attribute type 1 has an invalid length. [ 476.798686][ T5573] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.805841][ T5573] bridge0: port 1(bridge_slave_0) entered forwarding state [ 476.820259][ T5573] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.827405][ T5573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 477.016135][ T9937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 477.270175][ T29] audit: type=1326 audit(1723141945.642:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10394 comm="syz.4.1407" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f64ce1779f9 code=0x0 [ 477.357609][ T5573] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 478.563167][T10073] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 478.594560][T10073] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 478.761771][ T5573] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 478.828115][ T9937] veth0_vlan: entered promiscuous mode [ 478.835489][ T5573] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 478.883938][ T9937] veth1_vlan: entered promiscuous mode [ 478.895181][ T5573] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 478.957645][ T5573] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 479.034983][ T5573] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 479.065259][ T9937] veth0_macvtap: entered promiscuous mode [ 479.091605][ T5573] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.130648][ T9937] veth1_macvtap: entered promiscuous mode [ 479.180213][ T5573] usb 3-1: config 0 descriptor?? [ 479.186033][T10390] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 479.223140][ T9937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 479.263154][ T9937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.297258][ T9937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 479.327548][ T9937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.358558][ T9937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 479.385564][ T9937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.429718][ T9937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 479.464928][ T9937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.499805][ T9937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 479.600891][T10073] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 479.675214][ T9937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 479.690083][ T5573] plantronics 0003:047F:FFFF.000B: unknown main item tag 0xd [ 479.728369][ T5573] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 479.741151][ T9937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.772243][ T9937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 479.818932][ T5573] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 479.855505][ T9937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.887524][ T9937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 479.930901][ T9937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.945625][T10436] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1412'. [ 479.981534][ T9937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 480.026087][ T9937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.071604][ T9937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 480.103855][ T9937] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.154905][ T9937] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.194137][ T9937] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.207617][ T25] usb 3-1: USB disconnect, device number 25 [ 480.222433][ T9937] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.291736][T10431] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1412'. [ 480.733931][ T5573] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 480.764856][ T5573] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 480.807173][ T5573] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 480.815819][ T5573] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 480.842646][ T5573] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 480.892029][ T5573] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 480.913834][ T5573] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 480.931661][ T5573] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 480.964866][ T5573] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 481.011943][ T5573] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 481.072324][ T5573] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 481.117548][ T5573] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 481.174456][ T5573] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 481.211630][ T5573] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 481.237922][ T5573] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 481.273610][ T5573] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 481.303086][ T5573] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 481.328375][ T5573] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 481.362922][ T5573] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 481.418335][ T5573] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 481.455455][ T5573] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 481.530704][ T5573] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 481.579084][ T5573] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 481.586523][ T5573] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 481.693703][ T5573] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 481.727463][ T5573] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 481.731238][ T29] audit: type=1326 audit(1723141950.112:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10470 comm="syz.4.1420" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f64ce1779f9 code=0x0 [ 481.744605][T10073] veth0_vlan: entered promiscuous mode [ 481.786143][ T5573] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 481.805683][ T5573] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 481.825116][ T5573] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 481.845601][ T2501] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.855033][T10073] veth1_vlan: entered promiscuous mode [ 481.871870][ T5573] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 481.884154][ T2501] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.886802][ T5573] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 481.924016][ T5573] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 481.927579][ T5608] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 481.960086][ T5573] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz0] on syz0 [ 482.057141][T10044] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.086407][T10044] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.108939][T10073] veth0_macvtap: entered promiscuous mode [ 482.158717][ T5608] usb 3-1: Using ep0 maxpacket: 8 [ 482.161468][T10073] veth1_macvtap: entered promiscuous mode [ 482.166073][ T5608] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 482.227016][ T5608] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 482.232624][T10073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.267140][ T5608] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.274205][T10073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.287615][ T5608] usb 3-1: Product: syz [ 482.302226][ T5608] usb 3-1: Manufacturer: syz [ 482.315696][T10073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.317564][ T5608] usb 3-1: SerialNumber: syz [ 482.326401][T10073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.348923][T10073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.365595][T10073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.388931][T10073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.415329][T10073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.452746][T10073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.476760][T10073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.501088][T10073] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 482.541534][T10073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.563518][T10073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.579255][T10073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.593843][ T5571] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 482.626134][T10073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.651227][T10073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.665323][T10073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.679317][T10073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.721584][T10073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.750184][T10073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.774221][T10073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.797626][ T5571] usb 1-1: Using ep0 maxpacket: 32 [ 482.805878][ T5571] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 482.822481][ T5571] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 482.832400][T10073] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 482.859947][ T5571] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 482.888186][T10073] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.907140][ T5571] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 482.918498][T10073] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.927221][T10073] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.943986][ T5571] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 482.965240][ T5571] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 482.985259][T10073] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.004843][ T5571] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 483.035102][ T5571] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.087170][T10469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.099435][ T5571] usb 1-1: config 0 descriptor?? [ 483.128141][T10469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.294574][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.337263][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.357291][ T5571] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 15 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 483.424605][ T5623] usb 3-1: USB disconnect, device number 26 [ 483.430284][T10044] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.456043][T10044] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.690028][ C1] usblp0: nonzero read bulk status received: -71 [ 483.699822][ T5623] usb 1-1: USB disconnect, device number 15 [ 483.923433][T10481] usblp0: removed [ 484.130536][T10512] netlink: 'syz.3.1423': attribute type 5 has an invalid length. [ 485.161323][T10541] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 486.449199][T10544] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1430'. [ 488.911621][T10581] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 490.946739][T10588] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 925 (only 8 groups) [ 491.412483][T10607] netlink: 'syz.2.1443': attribute type 2 has an invalid length. [ 491.432592][T10607] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1443'. [ 491.818231][T10615] overlayfs: failed to decode file handle (len=2, type=1, flags=0, err=-22) [ 491.853209][T10621] input: syz1 as /devices/virtual/input/input24 [ 492.801702][ T5533] Bluetooth: hci3: command 0x1003 tx timeout [ 493.530915][ T5496] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 493.878766][ T5533] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 493.890741][ T5533] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 493.900275][ T5533] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 493.910929][ T5533] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 493.919647][ T5533] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 493.928286][ T5533] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 494.418133][ T5571] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 494.627543][ T5571] usb 3-1: Using ep0 maxpacket: 16 [ 494.645699][ T5571] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 494.681569][ T5571] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 494.726303][T10639] chnl_net:caif_netlink_parms(): no params data found [ 494.747695][ T5571] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 494.834372][ T5571] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.229549][ T5571] usb 3-1: config 0 descriptor?? [ 495.674431][ T5571] konepure 0003:1E7D:2DB4.000D: unknown main item tag 0x0 [ 495.699885][ T5571] konepure 0003:1E7D:2DB4.000D: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.2-1/input0 [ 495.807686][ T5569] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 495.878730][T10639] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.885895][T10639] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.950639][ T5571] usb 3-1: USB disconnect, device number 27 [ 495.962275][T10639] bridge_slave_0: entered allmulticast mode [ 495.980770][ T5496] Bluetooth: hci3: command tx timeout [ 496.019458][ T5569] usb 2-1: Using ep0 maxpacket: 32 [ 496.034607][ T5569] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 496.038135][T10639] bridge_slave_0: entered promiscuous mode [ 496.055836][ T5569] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 496.072463][ T5569] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 496.082095][ T5569] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.119304][T10671] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1463'. [ 496.179991][ T5569] usb 2-1: config 0 descriptor?? [ 496.189562][T10639] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.189737][T10676] smc: net device ip6_vti0 applied user defined pnetid SYZ0 [ 496.219163][T10639] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.252727][T10639] bridge_slave_1: entered allmulticast mode [ 496.280718][T10639] bridge_slave_1: entered promiscuous mode [ 496.435009][T10639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 496.488440][T10639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 496.626648][ T5569] ft260 0003:0403:6030.000E: item fetching failed at offset 0/2 [ 496.670577][ T5569] ft260 0003:0403:6030.000E: failed to parse HID [ 496.692435][ T5569] ft260 0003:0403:6030.000E: probe with driver ft260 failed with error -22 [ 496.703958][T10639] team0: Port device team_slave_0 added [ 496.784642][T10639] team0: Port device team_slave_1 added [ 496.930691][T10639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 496.974092][T10639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 497.651734][ T5571] usb 2-1: USB disconnect, device number 24 [ 497.815381][T10639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 497.878302][T10639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 497.904889][T10639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 498.007740][T10639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 498.060454][ T5496] Bluetooth: hci3: command tx timeout [ 498.323886][T10639] hsr_slave_0: entered promiscuous mode [ 498.434578][T10639] hsr_slave_1: entered promiscuous mode [ 498.493986][T10639] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 498.519550][T10639] Cannot create hsr debugfs directory [ 499.347972][ T5608] usb 3-1: new low-speed USB device number 28 using dummy_hcd [ 499.470703][T10639] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 499.517696][T10639] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.608221][ T5608] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 499.627914][ T5608] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 499.636024][ T5608] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 499.713947][ T5608] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 499.766974][ T5608] usb 3-1: string descriptor 0 read error: -22 [ 499.773533][ T5608] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 499.792035][T10730] gfs2: gfs2 mount does not exist [ 499.808183][ T5608] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.825506][T10639] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 499.859305][ T5608] usb 3-1: config 0 descriptor?? [ 499.879133][T10716] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 499.894300][ T5608] hub 3-1:0.0: bad descriptor, ignoring hub [ 499.896744][T10639] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.924930][ T5608] hub 3-1:0.0: probe with driver hub failed with error -5 [ 499.978728][ T5608] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input25 [ 500.061458][ C0] usb_acecad 3-1:0.0: can't resubmit intr, dummy_hcd.2-1/input0, status -1 [ 500.100104][T10639] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 500.138022][ T5496] Bluetooth: hci3: command tx timeout [ 500.169094][T10639] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.220796][ C1] usb_acecad 3-1:0.0: can't resubmit intr, dummy_hcd.2-1/input0, status -1 [ 500.397130][ T5608] usb 3-1: USB disconnect, device number 28 [ 500.397194][ C1] usb_acecad 3-1:0.0: can't resubmit intr, dummy_hcd.2-1/input0, status -19 [ 500.653404][T10639] bond0: (slave netdevsim0): Releasing backup interface [ 500.713610][T10639] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 500.761758][T10639] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.240344][T10639] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 501.465240][T10639] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 501.638473][T10639] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 501.819474][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.829542][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.927640][ T5573] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 502.205518][T10639] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 502.218339][ T5496] Bluetooth: hci3: command tx timeout [ 502.316819][ T5573] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 502.406522][ T5573] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.451093][ T5573] usb 2-1: Product: syz [ 502.455300][ T5573] usb 2-1: Manufacturer: syz [ 502.507652][ T5573] usb 2-1: SerialNumber: syz [ 502.617927][ T5573] r8152-cfgselector 2-1: Unknown version 0x0000 [ 502.667738][ T5573] r8152-cfgselector 2-1: config 0 descriptor?? [ 503.057689][T10768] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 503.347136][T10639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 503.664427][T10639] 8021q: adding VLAN 0 to HW filter on device team0 [ 503.722823][ T5573] r8152-cfgselector 2-1: USB disconnect, device number 25 [ 503.778350][ T9437] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.785535][ T9437] bridge0: port 1(bridge_slave_0) entered forwarding state [ 503.863081][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.870294][ T5608] bridge0: port 2(bridge_slave_1) entered forwarding state [ 503.988295][ T5572] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 504.049818][T10639] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 504.139902][T10783] input: syz1 as /devices/virtual/input/input26 [ 504.187765][ T5572] usb 3-1: Using ep0 maxpacket: 16 [ 504.433229][ T5572] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 505.008998][ T5572] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 505.037961][ T5572] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.058708][ T5572] usb 3-1: config 0 descriptor?? [ 505.143177][T10792] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 505.854179][T10639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 505.883217][T10790] Bluetooth: MGMT ver 1.23 [ 506.009551][T10768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.043307][T10768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.102499][ T5572] hid (null): invalid report_count 983040256 [ 506.126306][ T5572] hid (null): unknown global tag 0xc [ 506.173385][ T5572] hid-generic 0003:0158:0100.000F: unknown main item tag 0x0 [ 506.227547][ T5572] hid-generic 0003:0158:0100.000F: invalid report_count 983040256 [ 506.235413][ T5572] hid-generic 0003:0158:0100.000F: item 0 4 1 9 parsing failed [ 506.288341][ T5572] hid-generic 0003:0158:0100.000F: probe with driver hid-generic failed with error -22 [ 506.339519][ T5572] usb 3-1: USB disconnect, device number 29 [ 506.865550][T10639] veth0_vlan: entered promiscuous mode [ 506.936002][T10639] veth1_vlan: entered promiscuous mode [ 507.090673][T10639] veth0_macvtap: entered promiscuous mode [ 507.135521][T10639] veth1_macvtap: entered promiscuous mode [ 507.186700][T10639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 507.216413][T10639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.226638][T10639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 507.265045][T10639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.288739][T10639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 507.330091][T10639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.372750][T10639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 507.414120][T10639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.444911][T10639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 507.475007][T10639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.499811][T10826] 9pnet: Could not find request transport: @Uú|¶Õ§Tq^fd [ 507.676877][T10639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 507.738121][T10639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.749948][T10639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 507.794250][T10639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.062672][T10639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.112291][T10639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.227594][T10639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.237450][T10639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.307751][T10639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.329270][T10639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.379531][T10639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.417739][T10639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.454565][T10639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.485022][T10639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.537614][T10639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.575589][T10639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 508.636957][T10639] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.667912][T10639] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.699570][T10639] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.738849][T10639] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.207728][ T976] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 512.215660][ T976] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 512.511551][T10044] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 512.536481][T10044] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.057706][ T5533] Bluetooth: hci0: command 0x0406 tx timeout [ 515.226001][T10912] input: syz1 as /devices/virtual/input/input27 [ 515.227416][T10917] vhci_hcd: vhci_device speed not set [ 515.878612][T10934] trusted_key: encrypted_key: insufficient parameters specified [ 516.168020][T10915] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.176787][T10915] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.775809][T10915] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 516.841529][T10915] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 517.318460][T10915] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.344925][T10915] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.377550][T10915] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.414650][T10915] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.842488][T10929] netlink: 'syz.4.1533': attribute type 4 has an invalid length. [ 517.895992][T10929] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1533'. [ 517.943180][T10939] ip6gretap0: entered promiscuous mode [ 517.953616][T10939] macsec1: entered promiscuous mode [ 517.974619][T10939] macsec1: entered allmulticast mode [ 517.997605][T10939] ip6gretap0: entered allmulticast mode [ 518.072086][T10939] ip6gretap0: left allmulticast mode [ 518.090159][T10939] ip6gretap0: left promiscuous mode [ 518.163399][ T29] audit: type=1400 audit(1723141986.542:248): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10958 comm="syz.1.1540" name="32" dev="tmpfs" ino=191 [ 518.215604][ T29] audit: type=1400 audit(1723141986.542:249): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10958 comm="syz.1.1540" name="32" dev="tmpfs" ino=191 [ 518.237330][T10639] audit: audit_backlog=65 > audit_backlog_limit=64 [ 518.247096][ T29] audit: type=1400 audit(1723141986.542:250): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10958 comm="syz.1.1540" name="newroot" dev="tmpfs" ino=2 [ 518.277496][T10639] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 518.287980][ T9380] audit: audit_backlog=65 > audit_backlog_limit=64 [ 518.294517][ T9380] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 518.297618][T10639] audit: backlog limit exceeded [ 518.307013][T10639] audit: audit_backlog=65 > audit_backlog_limit=64 [ 518.307421][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 518.575412][T10966] ISOFS: Unable to identify CD-ROM format. [ 520.192444][T10991] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1552'. [ 520.219464][T10991] bridge_slave_1: left allmulticast mode [ 520.234452][T10991] bridge_slave_1: left promiscuous mode [ 520.244835][T10991] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.301171][T10991] bridge_slave_0: left allmulticast mode [ 520.315021][T10991] bridge_slave_0: left promiscuous mode [ 520.345619][T10991] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.430317][T10997] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1554'. [ 520.648854][T11003] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1557'. [ 520.712327][T10997] mkiss: ax0: crc mode is auto. [ 520.715885][T10996] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 520.862607][T11003] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1557'. [ 520.999621][T11003] x_tables: duplicate underflow at hook 1 [ 522.665640][T11017] input: syz1 as /devices/virtual/input/input28 [ 523.174651][ T29] kauditd_printk_skb: 13736 callbacks suppressed [ 523.188429][ T29] audit: type=1400 audit(1723141991.552:6979): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4669 comm="udevd" name="loop4" dev="sysfs" ino=15183 [ 523.377363][T11021] audit: audit_backlog=65 > audit_backlog_limit=64 [ 523.384215][ T4669] audit: audit_backlog=65 > audit_backlog_limit=64 [ 523.391050][ T4669] audit: audit_lost=2340 audit_rate_limit=0 audit_backlog_limit=64 [ 523.399032][ T4669] audit: backlog limit exceeded [ 523.404043][ T4669] audit: audit_backlog=65 > audit_backlog_limit=64 [ 523.410795][ T4669] audit: audit_lost=2341 audit_rate_limit=0 audit_backlog_limit=64 [ 523.418940][ T4669] audit: backlog limit exceeded [ 523.419305][T11021] audit: audit_lost=2342 audit_rate_limit=0 audit_backlog_limit=64 [ 523.423806][ T4669] audit: audit_backlog=65 > audit_backlog_limit=64 [ 524.757751][T11030] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1561'. [ 525.467630][T10943] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 526.419536][T10943] usb 2-1: Using ep0 maxpacket: 8 [ 526.513587][T10943] usb 2-1: device descriptor read/all, error -71 [ 528.178305][ T29] kauditd_printk_skb: 14625 callbacks suppressed [ 528.178344][ T29] audit: type=1400 audit(1723141996.552:12532): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7978 comm="udevd" name="virtual" dev="sysfs" ino=1343 [ 528.275182][ T7978] audit: audit_backlog=65 > audit_backlog_limit=64 [ 528.300988][ T4669] audit: audit_backlog=66 > audit_backlog_limit=64 [ 528.308585][ T8012] audit: audit_backlog=66 > audit_backlog_limit=64 [ 528.379758][ T7978] audit: audit_lost=5381 audit_rate_limit=0 audit_backlog_limit=64 [ 528.393914][ T8012] audit: audit_lost=5382 audit_rate_limit=0 audit_backlog_limit=64 [ 528.402215][ T4669] audit: audit_lost=5383 audit_rate_limit=0 audit_backlog_limit=64 [ 528.475790][ T7978] audit: backlog limit exceeded [ 528.481033][ T8012] audit: backlog limit exceeded [ 528.491894][ T4669] audit: backlog limit exceeded [ 529.351461][T11078] bond0: (slave bond_slave_0): Releasing backup interface [ 529.737697][T10945] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 529.958145][T10945] usb 2-1: Using ep0 maxpacket: 32 [ 529.978152][T10945] usb 2-1: too many configurations: 16, using maximum allowed: 8 [ 530.027674][T10945] usb 2-1: config 20 has too many interfaces: 33, using maximum allowed: 32 [ 530.036415][T10945] usb 2-1: config 20 has an invalid descriptor of length 242, skipping remainder of the config [ 530.118753][T10945] usb 2-1: config 20 has 0 interfaces, different from the descriptor's value: 33 [ 530.150727][T10945] usb 2-1: config 20 has too many interfaces: 33, using maximum allowed: 32 [ 530.167532][T10945] usb 2-1: config 20 has an invalid descriptor of length 242, skipping remainder of the config [ 530.179064][ T5533] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 530.195669][T10945] usb 2-1: config 20 has 0 interfaces, different from the descriptor's value: 33 [ 530.226162][ T5533] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 530.238386][ T5533] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 530.250210][ T5533] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 530.287793][ T5533] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 530.295509][T10945] usb 2-1: config 20 has too many interfaces: 33, using maximum allowed: 32 [ 530.300232][ T5533] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 530.336868][T10945] usb 2-1: config 20 has an invalid descriptor of length 242, skipping remainder of the config [ 530.399777][T10945] usb 2-1: config 20 has 0 interfaces, different from the descriptor's value: 33 [ 530.444708][T10945] usb 2-1: config 20 has too many interfaces: 33, using maximum allowed: 32 [ 530.474150][T10945] usb 2-1: config 20 has an invalid descriptor of length 242, skipping remainder of the config [ 530.501652][T10945] usb 2-1: config 20 has 0 interfaces, different from the descriptor's value: 33 [ 530.541541][T10945] usb 2-1: config 20 has too many interfaces: 33, using maximum allowed: 32 [ 530.567661][T10945] usb 2-1: config 20 has an invalid descriptor of length 242, skipping remainder of the config [ 530.597662][T10945] usb 2-1: config 20 has 0 interfaces, different from the descriptor's value: 33 [ 530.629296][T10945] usb 2-1: config 20 has too many interfaces: 33, using maximum allowed: 32 [ 530.657667][T10945] usb 2-1: config 20 has an invalid descriptor of length 242, skipping remainder of the config [ 530.687730][T10945] usb 2-1: config 20 has 0 interfaces, different from the descriptor's value: 33 [ 530.736463][T10945] usb 2-1: config 20 has too many interfaces: 33, using maximum allowed: 32 [ 530.767521][T10945] usb 2-1: config 20 has an invalid descriptor of length 242, skipping remainder of the config [ 530.807556][T10945] usb 2-1: config 20 has 0 interfaces, different from the descriptor's value: 33 [ 530.861107][T10945] usb 2-1: config 20 has too many interfaces: 33, using maximum allowed: 32 [ 530.887507][T10945] usb 2-1: config 20 has an invalid descriptor of length 242, skipping remainder of the config [ 530.924106][T10945] usb 2-1: config 20 has 0 interfaces, different from the descriptor's value: 33 [ 530.956669][T10945] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 530.986463][T10945] usb 2-1: New USB device strings: Mfr=1, Product=1, SerialNumber=128 [ 531.015158][T10945] usb 2-1: Product: syz [ 531.031757][T10945] usb 2-1: Manufacturer: syz [ 531.041969][T10945] usb 2-1: SerialNumber: syz [ 531.290734][T11084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 531.338085][T11084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 531.486025][T10945] usb 2-1: USB disconnect, device number 28 [ 531.564859][T10054] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 531.605791][T10054] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 531.647386][T10054] bond0 (unregistering): Released all slaves [ 531.747621][T11100] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1588'. [ 532.470280][ T5496] Bluetooth: hci0: command tx timeout [ 532.963737][T11122] netlink: 'syz.0.1594': attribute type 27 has an invalid length. [ 533.197253][ T29] kauditd_printk_skb: 11901 callbacks suppressed [ 533.197273][ T29] audit: type=1400 audit(1723142001.352:21370): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9444 comm="udevd" name="/" dev="devtmpfs" ino=1 [ 533.243529][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 533.250095][ C0] audit: audit_lost=6419 audit_rate_limit=0 audit_backlog_limit=64 [ 533.258022][ C0] audit: backlog limit exceeded [ 533.259277][T11125] audit: audit_backlog=65 > audit_backlog_limit=64 [ 533.263092][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 533.275170][ T4669] audit: audit_backlog=65 > audit_backlog_limit=64 [ 533.275930][ C0] audit: audit_lost=6420 audit_rate_limit=0 audit_backlog_limit=64 [ 533.283550][ T9444] audit: audit_backlog=66 > audit_backlog_limit=64 [ 533.290391][ C0] audit: backlog limit exceeded [ 534.009371][T10054] hsr_slave_0: left promiscuous mode [ 534.044200][T10054] hsr_slave_1: left promiscuous mode [ 534.428977][T11144] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1596'. [ 534.439194][T11144] openvswitch: netlink: Tunnel attr 0 has unexpected len 13 expected 8 [ 534.548498][ T5496] Bluetooth: hci0: command tx timeout [ 534.586682][T10054] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 534.710745][T10054] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 536.628010][ T5496] Bluetooth: hci0: command tx timeout [ 537.144629][T10054] team0 (unregistering): Port device team_slave_1 removed [ 537.250796][T10054] team0 (unregistering): Port device team_slave_0 removed [ 538.346082][T11160] bond0: (slave bond_slave_0): Releasing backup interface [ 538.368677][ T29] kauditd_printk_skb: 9139 callbacks suppressed [ 538.368694][ T29] audit: type=1400 audit(1723142006.752:27330): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4669 comm="udevd" name="/" dev="sda1" ino=2 [ 538.372188][T11180] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1604'. [ 538.376494][ T29] audit: type=1400 audit(1723142006.752:27331): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4669 comm="udevd" name="/" dev="sysfs" ino=1 [ 538.443874][ T9444] audit: audit_backlog=65 > audit_backlog_limit=64 [ 538.447191][ T4651] audit: audit_backlog=65 > audit_backlog_limit=64 [ 538.451070][ T4669] audit: audit_backlog=65 > audit_backlog_limit=64 [ 538.477491][ T9444] audit: audit_lost=7495 audit_rate_limit=0 audit_backlog_limit=64 [ 538.485420][ T9444] audit: backlog limit exceeded [ 538.488504][ T4651] audit: audit_lost=7496 audit_rate_limit=0 audit_backlog_limit=64 [ 538.514779][ T9937] audit: audit_backlog=65 > audit_backlog_limit=64 [ 538.515843][ T4669] audit: audit_lost=7497 audit_rate_limit=0 audit_backlog_limit=64 [ 538.700984][ T5496] Bluetooth: hci0: command tx timeout [ 538.858307][ T30] INFO: task udevd:8013 blocked for more than 143 seconds. [ 538.866754][ T30] Not tainted 6.11.0-rc2-syzkaller-00027-g6a0e38264012 #0 [ 538.917732][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 538.960100][ T30] task:udevd state:D stack:23504 pid:8013 tgid:8013 ppid:4669 flags:0x00004002 [ 539.054727][ T30] Call Trace: [ 539.058203][ T30] [ 539.061164][ T30] __schedule+0x17ae/0x4a10 [ 539.065727][ T30] ? __pfx___schedule+0x10/0x10 [ 539.080592][ T30] ? __pfx_lock_release+0x10/0x10 [ 539.854595][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 539.873500][ T30] ? kasan_check_range+0x1b8/0x290 [ 539.897798][ T30] ? schedule+0x90/0x320 [ 539.928827][ T30] schedule+0x14b/0x320 [ 539.943322][ T30] schedule_preempt_disabled+0x13/0x30 [ 539.966477][ T30] __mutex_lock+0x6a4/0xd70 [ 539.987981][ T30] ? __mutex_lock+0x527/0xd70 [ 540.014315][ T30] ? uevent_show+0x17d/0x340 [ 540.035399][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 540.067719][ T30] ? __kasan_kmalloc+0x98/0xb0 [ 540.072552][ T30] ? uevent_show+0x163/0x340 [ 540.077180][ T30] uevent_show+0x17d/0x340 [ 540.094636][ T30] dev_attr_show+0x55/0xc0 [ 540.101436][ T30] ? __pfx_dev_attr_show+0x10/0x10 [ 540.106589][ T30] sysfs_kf_seq_show+0x331/0x4c0 [ 540.140784][ T30] seq_read_iter+0x445/0xd60 [ 540.145454][ T30] vfs_read+0x9bd/0xbc0 [ 540.157516][ T30] ? __might_fault+0xaa/0x120 [ 540.162285][ T30] ? __pfx_vfs_read+0x10/0x10 [ 540.166991][ T30] ? vfs_fstatat+0xfd/0x190 [ 540.174878][ T30] ? __rseq_handle_notify_resume+0x353/0x14e0 [ 540.184340][ T30] ksys_read+0x1a0/0x2c0 [ 540.193167][ T30] ? __pfx_ksys_read+0x10/0x10 [ 540.201423][ T30] ? do_syscall_64+0x100/0x230 [ 540.206237][ T30] ? do_syscall_64+0xb6/0x230 [ 540.215427][ T30] do_syscall_64+0xf3/0x230 [ 540.226162][ T30] ? clear_bhb_loop+0x35/0x90 [ 540.231038][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.247301][ T30] RIP: 0033:0x7fc78157ab6a [ 540.252847][ T30] RSP: 002b:00007ffc9431fe88 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 540.267508][ T30] RAX: ffffffffffffffda RBX: 0000558f1b969c60 RCX: 00007fc78157ab6a [ 540.275522][ T30] RDX: 0000000000001000 RSI: 0000558f1b95a930 RDI: 0000000000000008 [ 540.291310][ T30] RBP: 0000558f1b969c60 R08: 0000000000000008 R09: 0000000000000000 [ 540.307595][ T30] R10: 000000000000010f R11: 0000000000000246 R12: 0000000000000000 [ 540.317652][ T30] R13: 0000000000003fff R14: 00007ffc94320368 R15: 000000000000000a [ 540.325681][ T30] [ 540.340787][ T30] [ 540.340787][ T30] Showing all locks held in the system: [ 540.357229][T11184] netlink: 'syz.3.1606': attribute type 1 has an invalid length. [ 540.400635][ T30] 1 lock held by khungtaskd/30: [ 540.405274][T11184] netlink: 'syz.3.1606': attribute type 2 has an invalid length. [ 540.405507][ T30] #0: ffffffff8e7382a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 540.520736][ T30] 5 locks held by kworker/1:1/52: [ 540.525842][ T30] 2 locks held by getty/4965: [ 540.708047][ T30] #0: ffff88802ae040a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 540.744120][ T30] #1: ffffc900034b32f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 [ 540.790744][ T30] 4 locks held by udevd/8013: [ 540.795474][ T30] #0: ffff88806a4a1418 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xb7/0xd60 [ 540.827572][ T30] #1: ffff88802b7b8488 (&of->mutex#2){+.+.}-{3:3}, at: kernfs_seq_start+0x53/0x3b0 [ 540.837070][ T30] #2: ffff88802e8cb968 (kn->active#5){++++}-{0:0}, at: kernfs_seq_start+0x72/0x3b0 [ 540.871978][ T30] #3: ffff888023b1d190 (&dev->mutex){....}-{3:3}, at: uevent_show+0x17d/0x340 [ 540.906840][ T30] 5 locks held by kworker/u8:15/10054: [ 540.917513][ T30] #0: ffff8880162e3148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 540.939936][T11092] chnl_net:caif_netlink_parms(): no params data found [ 540.947567][ T30] #1: ffffc90012847d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 540.987543][ T30] #2: ffffffff8fa629d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 540.997036][ T30] #3: ffff88805d889428 (&wg->device_update_lock){+.+.}-{3:3}, at: wg_destruct+0x110/0x2e0 [ 541.041641][ T30] #4: ffffffff8e73d678 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 541.077492][ T30] 1 lock held by syz.4.1420/10475: [ 541.082649][ T30] #0: ffff888023946190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x156/0x780 [ 541.116984][ T30] 2 locks held by kworker/0:10/10949: [ 541.123757][ T30] #0: ffff8880b923e9d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb0/0x140 [ 541.134086][ T30] #1: ffff8880b9228948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x441/0x770 [ 541.154519][ T30] 2 locks held by syz-executor/11092: [ 541.160852][ T30] #0: ffffffff8fa6f548 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 541.184159][ T30] #1: ffffffff8e73d678 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 541.206857][ T30] 1 lock held by cmp/11212: [ 541.215199][ T30] [ 541.256222][ T30] ============================================= [ 541.256222][ T30] [ 541.297430][ T30] NMI backtrace for cpu 0 [ 541.301814][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc2-syzkaller-00027-g6a0e38264012 #0 [ 541.312344][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 541.322504][ T30] Call Trace: [ 541.325802][ T30] [ 541.328750][ T30] dump_stack_lvl+0x241/0x360 [ 541.333457][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 541.338683][ T30] ? __pfx__printk+0x10/0x10 [ 541.343386][ T30] ? vprintk_emit+0x631/0x770 [ 541.348089][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 541.353144][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 541.358107][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 541.363587][ T30] ? _printk+0xd5/0x120 [ 541.367856][ T30] ? __pfx__printk+0x10/0x10 [ 541.372474][ T30] ? __wake_up_klogd+0xcc/0x110 [ 541.377350][ T30] ? __pfx__printk+0x10/0x10 [ 541.381962][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 541.387009][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 541.393014][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 541.399021][ T30] watchdog+0xfee/0x1030 [ 541.403287][ T30] ? watchdog+0x1ea/0x1030 [ 541.407730][ T30] ? __pfx_watchdog+0x10/0x10 [ 541.412423][ T30] kthread+0x2f0/0x390 [ 541.416514][ T30] ? __pfx_watchdog+0x10/0x10 [ 541.421210][ T30] ? __pfx_kthread+0x10/0x10 [ 541.425822][ T30] ret_from_fork+0x4b/0x80 [ 541.430257][ T30] ? __pfx_kthread+0x10/0x10 [ 541.434864][ T30] ret_from_fork_asm+0x1a/0x30 [ 541.439665][ T30] [ 541.444696][ T30] Sending NMI from CPU 0 to CPUs 1: [ 541.450823][ C1] NMI backtrace for cpu 1 [ 541.450836][ C1] CPU: 1 UID: 0 PID: 52 Comm: kworker/1:1 Not tainted 6.11.0-rc2-syzkaller-00027-g6a0e38264012 #0 [ 541.450854][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 541.450864][ C1] Workqueue: usb_hub_wq hub_event [ 541.450887][ C1] RIP: 0010:native_apic_msr_write+0x39/0x50 [ 541.450905][ C1] Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 c3 cc cc cc cc f3 0f 1e fa 89 f6 31 d2 e9 b3 9c a2 03 0f 1f [ 541.450918][ C1] RSP: 0018:ffffc90000a18e68 EFLAGS: 00000046 [ 541.450930][ C1] RAX: 00000000000025b8 RBX: 0000000000000020 RCX: 0000000000000838 [ 541.450941][ C1] RDX: 0000000000000000 RSI: 00000000000025b8 RDI: 0000000000000838 [ 541.450950][ C1] RBP: 00000000000025b8 R08: ffffffff8183f389 R09: 1ffffffff1fed31d [ 541.450961][ C1] R10: dffffc0000000000 R11: ffffffff813e6570 R12: 0000000000025b74 [ 541.450975][ C1] R13: dffffc0000000000 R14: 0000000010007dd4 R15: ffff8880b9328340 [ 541.450986][ C1] FS: 0000000000000000(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 541.450999][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 541.451010][ C1] CR2: 00007ff486540440 CR3: 000000001240e000 CR4: 00000000003506f0 [ 541.451024][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 541.451033][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 541.451043][ C1] Call Trace: [ 541.451049][ C1] [ 541.451055][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 541.451072][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 541.451093][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 541.451109][ C1] ? nmi_handle+0x2a/0x5a0 [ 541.451132][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 541.451150][ C1] ? nmi_handle+0x14f/0x5a0 [ 541.451164][ C1] ? nmi_handle+0x2a/0x5a0 [ 541.451179][ C1] ? native_apic_msr_write+0x39/0x50 [ 541.451194][ C1] ? default_do_nmi+0x63/0x160 [ 541.451211][ C1] ? exc_nmi+0x123/0x1f0 [ 541.451226][ C1] ? end_repeat_nmi+0xf/0x53 [ 541.451252][ C1] ? __pfx_lapic_next_event+0x10/0x10 [ 541.451273][ C1] ? clockevents_program_event+0x189/0x350 [ 541.451293][ C1] ? native_apic_msr_write+0x39/0x50 [ 541.451309][ C1] ? native_apic_msr_write+0x39/0x50 [ 541.451326][ C1] ? native_apic_msr_write+0x39/0x50 [ 541.451342][ C1] [ 541.451347][ C1] [ 541.451352][ C1] lapic_next_event+0x11/0x20 [ 541.451375][ C1] clockevents_program_event+0x1c1/0x350 [ 541.451395][ C1] hrtimer_interrupt+0x54a/0x990 [ 541.451424][ C1] __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 541.451446][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 541.451465][ C1] [ 541.451470][ C1] [ 541.451476][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 541.451491][ C1] RIP: 0010:unwind_next_frame+0x668/0x2a00 [ 541.451511][ C1] Code: e8 2d 6c b6 00 eb a9 e8 b6 58 52 00 48 8b 6c 24 08 48 c7 c0 7c 7e 03 90 48 29 c3 48 c7 c1 38 4e 76 90 48 c1 fb 02 4c 8d 3c 5b <4d> 01 ff 49 01 cf 0f 84 82 00 00 00 49 89 ee e8 84 58 52 00 49 8d [ 541.451523][ C1] RSP: 0018:ffffc90000bc64c8 EFLAGS: 00000246 [ 541.451535][ C1] RAX: ffffffff81411c9e RBX: 0000000000000000 RCX: ffffffff907f70be [ 541.451545][ C1] RDX: ffffc900164e8000 RSI: 00000000000fffff RDI: 0000000000100000 [ 541.451555][ C1] RBP: 1ffff92000178cb4 R08: ffffffff81411c60 R09: ffffc90000bc6690 [ 541.451565][ C1] R10: 0000000000000003 R11: ffffffff817f1c90 R12: ffffffff90099580 [ 541.451575][ C1] R13: dffffc0000000000 R14: ffffffff817f1bc7 R15: 0000000000000000 [ 541.451586][ C1] ? stack_trace_save+0x117/0x1d0 [ 541.451605][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 541.451622][ C1] ? unwind_next_frame+0x510/0x2a00 [ 541.451641][ C1] ? unwind_next_frame+0x54e/0x2a00 [ 541.451664][ C1] ? unwind_next_frame+0x54e/0x2a00 [ 541.451685][ C1] ? stack_trace_save+0x117/0x1d0 [ 541.451702][ C1] ? __unwind_start+0x6af/0x7c0 [ 541.451720][ C1] ? stack_trace_save+0x118/0x1d0 [ 541.451736][ C1] ? stack_trace_save+0x118/0x1d0 [ 541.451752][ C1] ? __kernel_text_address+0xd/0x40 [ 541.451766][ C1] ? stack_trace_save+0x118/0x1d0 [ 541.451782][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 541.451800][ C1] arch_stack_walk+0x151/0x1b0 [ 541.451818][ C1] ? stack_trace_save+0x118/0x1d0 [ 541.451837][ C1] stack_trace_save+0x118/0x1d0 [ 541.451855][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 541.451873][ C1] ? mark_lock+0x9a/0x350 [ 541.451894][ C1] ? __lock_acquire+0x137a/0x2040 [ 541.451914][ C1] kasan_save_track+0x3f/0x80 [ 541.451958][ C1] __kasan_slab_alloc+0x66/0x80 [ 541.451974][ C1] ? __alloc_skb+0x1c3/0x440 [ 541.451989][ C1] kmem_cache_alloc_node_noprof+0x16b/0x320 [ 541.452012][ C1] __alloc_skb+0x1c3/0x440 [ 541.452030][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 541.452045][ C1] ? print_irqtrace_events+0x1b0/0x220 [ 541.452066][ C1] __netdev_alloc_skb+0x104/0xa10 [ 541.452082][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 541.452101][ C1] ? __pfx___netdev_alloc_skb+0x10/0x10 [ 541.452121][ C1] ath6kl_usb_post_recv_transfers+0x218/0x6c0 [ 541.452146][ C1] ath6kl_usb_power_on+0x6d/0x280 [ 541.452161][ C1] ath6kl_core_init+0x1c3/0x1140 [ 541.452181][ C1] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 541.452202][ C1] ? __kasan_kmalloc+0x98/0xb0 [ 541.452218][ C1] ? __pfx_ath6kl_core_init+0x10/0x10 [ 541.452236][ C1] ? ath6kl_core_create+0x7d8/0x950 [ 541.452260][ C1] ath6kl_usb_probe+0x129b/0x1390 [ 541.452289][ C1] usb_probe_interface+0x645/0xbb0 [ 541.452314][ C1] ? __pfx_usb_probe_interface+0x10/0x10 [ 541.452333][ C1] really_probe+0x2b8/0xad0 [ 541.452355][ C1] __driver_probe_device+0x1a2/0x390 [ 541.452378][ C1] driver_probe_device+0x50/0x430 [ 541.452396][ C1] __device_attach_driver+0x2d6/0x530 [ 541.452415][ C1] bus_for_each_drv+0x24e/0x2e0 [ 541.452435][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 541.452452][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 541.452476][ C1] __device_attach+0x333/0x520 [ 541.452491][ C1] ? __pfx_lock_release+0x10/0x10 [ 541.452512][ C1] ? __pfx___device_attach+0x10/0x10 [ 541.452528][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 541.452549][ C1] bus_probe_device+0x189/0x260 [ 541.452570][ C1] device_add+0x856/0xbf0 [ 541.452588][ C1] usb_set_configuration+0x1976/0x1fb0 [ 541.452619][ C1] usb_generic_driver_probe+0x88/0x140 [ 541.452638][ C1] usb_probe_device+0x1b8/0x380 [ 541.452659][ C1] ? __pfx_usb_probe_device+0x10/0x10 [ 541.452676][ C1] really_probe+0x2b8/0xad0 [ 541.452697][ C1] __driver_probe_device+0x1a2/0x390 [ 541.452715][ C1] driver_probe_device+0x50/0x430 [ 541.452733][ C1] __device_attach_driver+0x2d6/0x530 [ 541.452752][ C1] bus_for_each_drv+0x24e/0x2e0 [ 541.452770][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 541.452787][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 541.452811][ C1] __device_attach+0x333/0x520 [ 541.452830][ C1] ? __pfx___device_attach+0x10/0x10 [ 541.452851][ C1] bus_probe_device+0x189/0x260 [ 541.452872][ C1] device_add+0x856/0xbf0 [ 541.452890][ C1] usb_new_device+0x104a/0x19a0 [ 541.452917][ C1] ? __pfx_usb_new_device+0x10/0x10 [ 541.452936][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 541.452952][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 541.452972][ C1] hub_event+0x2d6a/0x5150 [ 541.453017][ C1] ? __pfx_hub_event+0x10/0x10 [ 541.453037][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 541.453055][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 541.453076][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 541.453100][ C1] ? process_scheduled_works+0x945/0x1830 [ 541.453119][ C1] process_scheduled_works+0xa2c/0x1830 [ 541.453151][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 541.453174][ C1] ? assign_work+0x364/0x3d0 [ 541.453194][ C1] worker_thread+0x86d/0xd40 [ 541.453220][ C1] ? __kthread_parkme+0x169/0x1d0 [ 541.453240][ C1] ? __pfx_worker_thread+0x10/0x10 [ 541.453258][ C1] kthread+0x2f0/0x390 [ 541.453276][ C1] ? __pfx_worker_thread+0x10/0x10 [ 541.453293][ C1] ? __pfx_kthread+0x10/0x10 [ 541.453312][ C1] ret_from_fork+0x4b/0x80 [ 541.453330][ C1] ? __pfx_kthread+0x10/0x10 [ 541.453350][ C1] ret_from_fork_asm+0x1a/0x30 [ 541.453381][ C1] [ 542.465287][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 542.472186][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc2-syzkaller-00027-g6a0e38264012 #0 [ 542.482793][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 542.492873][ T30] Call Trace: [ 542.496187][ T30] [ 542.499144][ T30] dump_stack_lvl+0x241/0x360 [ 542.503849][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 542.509081][ T30] ? __pfx__printk+0x10/0x10 [ 542.513684][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 542.519694][ T30] ? vscnprintf+0x5d/0x90 [ 542.524041][ T30] panic+0x349/0x860 [ 542.527960][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 542.534128][ T30] ? __pfx_panic+0x10/0x10 [ 542.538560][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 542.543947][ T30] ? __irq_work_queue_local+0x137/0x410 [ 542.549512][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 542.555066][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 542.561234][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 542.567407][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 542.573577][ T30] watchdog+0x102d/0x1030 [ 542.577926][ T30] ? watchdog+0x1ea/0x1030 [ 542.582364][ T30] ? __pfx_watchdog+0x10/0x10 [ 542.587056][ T30] kthread+0x2f0/0x390 [ 542.591149][ T30] ? __pfx_watchdog+0x10/0x10 [ 542.595847][ T30] ? __pfx_kthread+0x10/0x10 [ 542.600457][ T30] ret_from_fork+0x4b/0x80 [ 542.604893][ T30] ? __pfx_kthread+0x10/0x10 [ 542.609502][ T30] ret_from_fork_asm+0x1a/0x30 [ 542.614300][ T30] [ 542.617608][ T30] Kernel Offset: disabled [ 542.621928][ T30] Rebooting in 86400 seconds..