last executing test programs: 2m55.477633837s ago: executing program 2 (id=57): r0 = creat(&(0x7f0000000040)='./file0\x00', 0xecf86c37d53048c3) close(r0) execve(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r1 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) renameat2(r2, &(0x7f0000000200)='./bus\x00', r2, &(0x7f0000000280)='./file0\x00', 0x0) renameat2(r2, &(0x7f0000000040)='./bus\x00', r2, &(0x7f0000000080)='./bus\x00', 0x0) 2m21.775429871s ago: executing program 2 (id=57): r0 = creat(&(0x7f0000000040)='./file0\x00', 0xecf86c37d53048c3) close(r0) execve(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r1 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) renameat2(r2, &(0x7f0000000200)='./bus\x00', r2, &(0x7f0000000280)='./file0\x00', 0x0) renameat2(r2, &(0x7f0000000040)='./bus\x00', r2, &(0x7f0000000080)='./bus\x00', 0x0) 1m57.072602363s ago: executing program 2 (id=57): r0 = creat(&(0x7f0000000040)='./file0\x00', 0xecf86c37d53048c3) close(r0) execve(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r1 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) renameat2(r2, &(0x7f0000000200)='./bus\x00', r2, &(0x7f0000000280)='./file0\x00', 0x0) renameat2(r2, &(0x7f0000000040)='./bus\x00', r2, &(0x7f0000000080)='./bus\x00', 0x0) 1m55.338480579s ago: executing program 4 (id=751): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x2}, 0x10) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r4, r5, 0x2, 0x2}, 0x10) socketpair(0x2, 0x2, 0x0, &(0x7f0000000bc0)) 1m55.161929909s ago: executing program 4 (id=752): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001240)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x1b0, 0xc8, 0x8, 0x0, 0x5803, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67442c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x2}}, @common=@inet=@socket1={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @mcast2, [], [], 'macvtap0\x00', 'syzkaller1\x00'}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) 1m54.475307087s ago: executing program 4 (id=754): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000040)={0x3}) 1m21.072986149s ago: executing program 2 (id=57): r0 = creat(&(0x7f0000000040)='./file0\x00', 0xecf86c37d53048c3) close(r0) execve(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r1 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) renameat2(r2, &(0x7f0000000200)='./bus\x00', r2, &(0x7f0000000280)='./file0\x00', 0x0) renameat2(r2, &(0x7f0000000040)='./bus\x00', r2, &(0x7f0000000080)='./bus\x00', 0x0) 1m19.649784225s ago: executing program 4 (id=754): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000040)={0x3}) 49.217674297s ago: executing program 4 (id=754): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000040)={0x3}) 48.482871827s ago: executing program 2 (id=57): r0 = creat(&(0x7f0000000040)='./file0\x00', 0xecf86c37d53048c3) close(r0) execve(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r1 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) renameat2(r2, &(0x7f0000000200)='./bus\x00', r2, &(0x7f0000000280)='./file0\x00', 0x0) renameat2(r2, &(0x7f0000000040)='./bus\x00', r2, &(0x7f0000000080)='./bus\x00', 0x0) 13.870698341s ago: executing program 4 (id=754): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000040)={0x3}) 12.592543332s ago: executing program 2 (id=57): r0 = creat(&(0x7f0000000040)='./file0\x00', 0xecf86c37d53048c3) close(r0) execve(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r1 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) renameat2(r2, &(0x7f0000000200)='./bus\x00', r2, &(0x7f0000000280)='./file0\x00', 0x0) renameat2(r2, &(0x7f0000000040)='./bus\x00', r2, &(0x7f0000000080)='./bus\x00', 0x0) 10.390296678s ago: executing program 0 (id=975): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) r1 = syz_open_dev$sndctrl(&(0x7f0000000140), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f0000000340)={0x1000000, 0x0, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, "3e7f7d4de263989b560ecec7cf00"}) 10.242117062s ago: executing program 0 (id=978): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x24, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x1c, 0xa6, 0x0, 0x0, [0x401, 0x1000, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x34, 0xc0, 0x3, 0x0, [{@multicast1}, {@dev, 0x659}, {@broadcast, 0x8000}, {@empty}, {@multicast1, 0xffd1fc}, {@private}]}, @timestamp_prespec={0x44, 0x1c, 0x0, 0x3, 0x0, [{@multicast1}, {@private=0xa010101}, {@broadcast}]}, @noop, @noop, @lsrr={0x83, 0xb, 0x0, [@private, @rand_addr]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.numa_stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 9.492111649s ago: executing program 0 (id=979): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x80803, 0x88) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x0, 0x1}, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = timerfd_create(0x0, 0x0) timerfd_gettime(r1, &(0x7f0000000000)={{0x0, 0x0}}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRESOCT=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000240)={{{@in=@empty, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xc3c}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in, 0x0, 0x0, 0x0, 0x7}}, 0xe8) sendmmsg(r7, &(0x7f0000000480), 0x2e9, 0xff00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r3}, 0x10) socket$kcm(0x10, 0xa, 0x0) unshare(0x400) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001080)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) getsockopt$sock_cred(r8, 0x1, 0x4d, 0x0, &(0x7f0000cab000)=0x2) socket$nl_generic(0x10, 0x3, 0x10) 8.100301102s ago: executing program 0 (id=980): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/custom0\x00', 0x2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20, @loopback}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x2828}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000001000008500000095000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0xa, 0x1006, &(0x7f0000000880)=""/4102}, 0x90) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setownex(r5, 0xf, 0x0) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_vhci(&(0x7f0000001a00)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0xff, 0xc9, 0xff, 0xfd, "000023ff0f2500"}}}, 0x10) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000140)={0xa, 0xe22, 0x0, @loopback={0xff00000000000000}}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@broadcast, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x8, 0x11, 0x0, @private2, @mcast2, {[], {0x0, 0xe22, 0x8}}}}}}, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000440)='wlan0\x00', 0x10) 3.333736566s ago: executing program 3 (id=986): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61, 0x0, 0x8}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xfe01}, 0x45) 3.143131662s ago: executing program 0 (id=988): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x58}}, 0x0) 3.114311481s ago: executing program 3 (id=989): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_LEN={0x8}, @NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0) 3.050021164s ago: executing program 3 (id=990): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/arp\x00') preadv(r3, &(0x7f0000000080)=[{&(0x7f0000002880)=""/135, 0x87}], 0x1, 0x2, 0x0) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000000)={0x5, 0x78a}) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0x0, 0x1000, 0x0, 0x1}, 0x20) ioctl$BTRFS_IOC_SEND(r3, 0x40489426, &(0x7f0000000100)={{r1}, 0x2, &(0x7f00000000c0)=[0xfc00000000000000, 0x6], 0x4, 0x0, 0x4}) r4 = socket(0x18, 0x3, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f00000002c0)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r4, r1, 0x0, 0x80006) ioctl$int_in(r2, 0x5452, &(0x7f0000000180)) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000001780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/17, 0x11}}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x400, 0x4) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000001c0)=0x1000, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 2.831130142s ago: executing program 0 (id=991): setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x82, &(0x7f0000000040)={0x0, 0xfff}, 0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8}]}, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000180)={0xffffffffffffffff, 0xffff, 0x80000000}) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), 0xffffffffffffffff) r5 = socket(0x10, 0x400000000080803, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) read$FUSE(r6, &(0x7f0000002ac0)={0x2020}, 0x2020) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000440)={&(0x7f0000000340), 0xc, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="39ca1999", @ANYRES16=r4, @ANYBLOB="080025bd7000fbdbdf25000000000800020000000000060006000100000008000700", @ANYRES32=r6, @ANYBLOB="08000500ac1414aa06000600020000000800020001000000"], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x5608, 0x1) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01fddbdf64af319b1240171b5c8b54a2cfd02500f4ffff07000500ac1400000008000900040000000800010000", @ANYBLOB="0800020001000000"], 0x54}, 0x1, 0x0, 0x0, 0x4000090}, 0x4000) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') preadv(r7, &(0x7f0000000b00)=[{&(0x7f0000000300)=""/30, 0x1e}], 0x1, 0x80000001, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x50, 0xeb, 0xad, 0x8, 0x1608, 0x207, 0x438e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8c, 0x66, 0x2e, 0x0, [], [{{0x9, 0x5, 0x3}}, {{0x9, 0x5, 0x2, 0x2}}]}}]}}]}}, 0x0) sendmsg$GTP_CMD_ECHOREQ(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2010110}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x4c, r4, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_VERSION={0x8}, @GTPA_FAMILY={0x5, 0xd, 0x15}, @GTPA_FAMILY={0x5, 0xd, 0x18}, @GTPA_I_TEI={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r7}, @GTPA_LINK={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) openat$dir(0xffffffffffffff9c, &(0x7f0000002a00)='./file0\x00', 0x40, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000018c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setreuid(0x0, 0xee00) read$FUSE(r8, &(0x7f0000008200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f00000008c0)={0x50, 0x0, r9, {0x7, 0x28, 0x0, 0xf0000000, 0x0, 0xfffe}}, 0x50) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_FWMARK={0x8, 0xa, 0x1f}]}, 0x24}}, 0x0) setitimer(0x2, &(0x7f0000000580)={{0x77359400}, {0x0, 0xea60}}, 0x0) 2.520700387s ago: executing program 3 (id=992): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0xb, 0x4, 0x2}, 0x48) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c4159b364a4fd7013f34db173a4fdacf15229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be867a28f09c5877fc2355ecdc9c30dcb2d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff3a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb357b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50265a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x20], [0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa90d]}, 0x45c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioprio_get$uid(0x3, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r2, 0x0, 0x0) set_mempolicy(0x6002, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) mount(&(0x7f0000000540)=@nullb, &(0x7f0000000040)='./file0\x00', &(0x7f00000005c0)='vxfs\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r7 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={0x0, 0x20}}, 0x0) connect$l2tp6(r7, 0x0, 0x0) sendmmsg$inet6(r7, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x18, 0x0, 0x0, 0x0, 0x0, 0xe0}}], 0x17fd147c801ae9ab, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r1}, &(0x7f0000000340), &(0x7f0000000480)=r0}, 0x20) 1.111456656s ago: executing program 3 (id=993): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_NG_TYPE={0x8}]}}}, {0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}}, 0x0) 821.735588ms ago: executing program 3 (id=994): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f00000010c0)=0x1, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f0000000180)=0x8, 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000c80)="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", 0x34000, 0xbcff, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[], 0x10cc}}, 0x0) 523.166806ms ago: executing program 1 (id=995): r0 = syz_open_dev$radio(&(0x7f0000000100), 0x3, 0x2) r1 = syz_io_uring_setup(0x239, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f00000002c0)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) r4 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x2def, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) 340.372987ms ago: executing program 1 (id=996): prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) socket$isdn(0x22, 0x2, 0x26) 224.696233ms ago: executing program 1 (id=997): r0 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000380)={"1b00", 0x0, 0x6, 0x2, 0x0, 0x0, "f7590a012400", '\x00', "0300", "065aa51a", ["8bada940edff000a00", "c2fed6000000006906528640", ' \x00', "0000000000000000000100"]}) 149.46789ms ago: executing program 1 (id=998): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f00000086c0)=[{{&(0x7f00000057c0)=@can, 0x80, 0x0}}, {{&(0x7f0000005940)=@can, 0x80, 0x0}}], 0x2, 0x0) 82.826178ms ago: executing program 1 (id=999): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x1c, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000080000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000a0000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 0s ago: executing program 1 (id=1000): mkdir(0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x88000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window, @mss, @window, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0xc7) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xe8, 0x7) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x20000, 0x0) move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x160) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r4, &(0x7f00000023c0)={0x2020}, 0x2020) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18adb00e0d000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x90) kernel console output (not intermixed with test programs): length. [ 271.664210][ T8098] netlink: 'syz.4.610': attribute type 16 has an invalid length. [ 271.730239][ T8098] netlink: 152 bytes leftover after parsing attributes in process `syz.4.610'. [ 272.151737][ T7851] veth0_vlan: entered promiscuous mode [ 272.444777][ T7851] veth1_vlan: entered promiscuous mode [ 272.542535][ T7851] veth0_macvtap: entered promiscuous mode [ 272.762176][ T7851] veth1_macvtap: entered promiscuous mode [ 273.652551][ T7851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.798973][ T7851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.810577][ T7851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.821837][ T7851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.840438][ T7851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.030039][ T7851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.073741][ T7851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.141936][ T7851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.188541][ T7851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.220490][ T7851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.231248][ T7851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.241888][ T7851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.252536][ T7851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.262503][ T7851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.273091][ T7851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.282976][ T7851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.294397][ T7851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.305471][ T7851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.470225][ T7851] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.511049][ T7851] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.588430][ T7851] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.608822][ T7851] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.867028][ T2974] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.882221][ T2974] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.025473][ T1058] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.046505][ T5222] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 276.070882][ T1058] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.851673][ T5222] usb 4-1: Using ep0 maxpacket: 16 [ 277.992556][ T5222] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.004617][ T5222] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.046801][ T5222] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 278.093877][ T5222] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.175118][ T5222] usb 4-1: config 0 descriptor?? [ 278.233991][ T5274] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 278.401844][ T8182] netlink: 24 bytes leftover after parsing attributes in process `syz.1.630'. [ 278.454205][ T5274] usb 5-1: Using ep0 maxpacket: 16 [ 278.464113][ T5274] usb 5-1: unable to get BOS descriptor or descriptor too short [ 278.482968][ T5274] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 278.509559][ T5274] usb 5-1: config 2 has 1 interface, different from the descriptor's value: 3 [ 278.554716][ T5274] usb 5-1: New USB device found, idVendor=0921, idProduct=1000, bcdDevice=3d.d1 [ 278.583940][ T5274] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.604277][ T5274] usb 5-1: Product: syz [ 278.620329][ T5274] usb 5-1: Manufacturer: syz [ 278.636762][ T5274] usb 5-1: SerialNumber: syz [ 278.678712][ T5222] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 278.712513][ T5222] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 278.734312][ T5222] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 278.768118][ T5222] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 278.768366][ T5222] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 278.773504][ T5222] cp2112 0003:10C4:EA90.000B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 278.811234][ T5274] belkin_sa 5-1:2.0: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 278.812227][ T5274] usb 5-1: bcdDevice: 3dd1, bfc: 0 [ 278.839639][ T5274] usb 5-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0 [ 278.844349][ T5274] usb 5-1: USB disconnect, device number 20 [ 278.856354][ T5274] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0 [ 278.856899][ T5274] belkin_sa 5-1:2.0: device disconnected [ 278.869517][ T5222] cp2112 0003:10C4:EA90.000B: Part Number: 0xE5 Device Version: 0x26 [ 278.913572][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 278.913589][ T29] audit: type=1326 audit(1722849468.740:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8193 comm="syz.0.633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2df4d779f9 code=0x7ffc0000 [ 279.008154][ T29] audit: type=1326 audit(1722849468.740:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8193 comm="syz.0.633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2df4d779f9 code=0x7ffc0000 [ 279.113547][ T29] audit: type=1326 audit(1722849468.760:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8193 comm="syz.0.633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=176 compat=0 ip=0x7f2df4d779f9 code=0x7ffc0000 [ 279.151289][ T29] audit: type=1326 audit(1722849468.760:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8193 comm="syz.0.633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2df4d779f9 code=0x7ffc0000 [ 279.179040][ T29] audit: type=1326 audit(1722849468.760:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8193 comm="syz.0.633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2df4d779f9 code=0x7ffc0000 [ 279.257984][ T29] audit: type=1326 audit(1722849468.760:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8193 comm="syz.0.633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2df4d779f9 code=0x7ffc0000 [ 279.281809][ T5222] cp2112 0003:10C4:EA90.000B: error setting SMBus config [ 279.305984][ T5222] cp2112 0003:10C4:EA90.000B: probe with driver cp2112 failed with error -71 [ 279.315042][ T29] audit: type=1326 audit(1722849468.760:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8193 comm="syz.0.633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2df4d779f9 code=0x7ffc0000 [ 279.355631][ T5222] usb 4-1: USB disconnect, device number 19 [ 279.394285][ T29] audit: type=1326 audit(1722849468.760:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8193 comm="syz.0.633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2df4d779f9 code=0x7ffc0000 [ 279.451166][ T29] audit: type=1326 audit(1722849468.760:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8193 comm="syz.0.633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2df4d779f9 code=0x7ffc0000 [ 279.486488][ T29] audit: type=1326 audit(1722849468.760:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8193 comm="syz.0.633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2df4d779f9 code=0x7ffc0000 [ 279.520074][ T8200] block device autoloading is deprecated and will be removed. [ 281.015936][ T8240] overlayfs: missing 'lowerdir' [ 281.065908][ T8242] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 281.366794][ T2508] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.494193][ T5273] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 281.518152][ T2508] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.592170][ T2508] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.662917][ T2508] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.716869][ T5273] usb 1-1: config index 0 descriptor too short (expected 11076, got 36) [ 281.732942][ T5273] usb 1-1: config 74 has too many interfaces: 179, using maximum allowed: 32 [ 281.743124][ T5273] usb 1-1: config 74 has 1 interface, different from the descriptor's value: 179 [ 281.806469][ T5273] usb 1-1: config 74 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.844045][ T5273] usb 1-1: config 74 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.868003][ T5273] usb 1-1: config 74 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 281.911373][ T2508] bridge_slave_1: left allmulticast mode [ 281.917774][ T5273] usb 1-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 281.921100][ T2508] bridge_slave_1: left promiscuous mode [ 281.943232][ T2508] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.944355][ T5273] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.961449][ T2508] bridge_slave_0: left allmulticast mode [ 281.967422][ T2508] bridge_slave_0: left promiscuous mode [ 281.974228][ T2508] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.627406][ T8263] syz.1.656 (8263): attempted to duplicate a private mapping with mremap. This is not supported. [ 283.009696][ T8260] tipc: Failed to remove unknown binding: 66,1,1/2130706433:2813202728/2813202730 [ 283.424827][ T8260] tipc: Failed to remove unknown binding: 66,1,1/2130706433:2813202728/2813202730 [ 283.457641][ T8260] tipc: Failed to remove unknown binding: 66,1,1/2130706433:2813202728/2813202730 [ 283.468278][ T2508] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 283.545150][ T2508] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 283.586471][ T2508] bond0 (unregistering): Released all slaves [ 283.594195][ T5232] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 283.606572][ T5232] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 283.617206][ T5232] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 283.628591][ T5232] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 283.636605][ T5232] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 283.644507][ T5232] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 284.310512][ T8287] vxfs: WRONG superblock magic 00000000 at 1 [ 284.318164][ T8287] vxfs: WRONG superblock magic 00000000 at 8 [ 284.362755][ T8287] vxfs: can't find superblock. [ 284.368402][ T51] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 284.764852][ T8288] ALSA: seq fatal error: cannot create timer (-22) [ 284.809785][ T5273] usbhid 1-1:74.0: can't add hid device: -71 [ 284.850727][ T5273] usbhid 1-1:74.0: probe with driver usbhid failed with error -71 [ 284.923594][ T5273] usb 1-1: USB disconnect, device number 15 [ 285.204027][ T51] usb 2-1: Using ep0 maxpacket: 16 [ 285.221593][ T51] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.250648][ T51] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.268593][ T51] usb 2-1: New USB device found, idVendor=0458, idProduct=500f, bcdDevice= 0.00 [ 285.302371][ T51] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.332481][ T51] usb 2-1: config 0 descriptor?? [ 285.524038][ T2508] hsr_slave_0: left promiscuous mode [ 285.567786][ T2508] hsr_slave_1: left promiscuous mode [ 285.597986][ T2508] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.633031][ T2508] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.655573][ T2508] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.681029][ T2508] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.694067][ T5232] Bluetooth: hci4: command tx timeout [ 285.778246][ T2508] veth1_macvtap: left promiscuous mode [ 285.807073][ T2508] veth0_macvtap: left promiscuous mode [ 285.815889][ T51] kye 0003:0458:500F.000C: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 285.837535][ T2508] veth1_vlan: left promiscuous mode [ 285.857497][ T2508] veth0_vlan: left promiscuous mode [ 285.866358][ T51] kye 0003:0458:500F.000C: unknown main item tag 0x0 [ 285.903810][ T51] kye 0003:0458:500F.000C: unknown main item tag 0x0 [ 285.927464][ T51] kye 0003:0458:500F.000C: hidraw0: USB HID v0.00 Device [HID 0458:500f] on usb-dummy_hcd.1-1/input0 [ 285.981135][ T51] kye 0003:0458:500F.000C: tablet-enabling feature report not found [ 286.020279][ T51] kye 0003:0458:500F.000C: tablet enabling failed [ 286.068424][ T51] usb 2-1: USB disconnect, device number 16 [ 287.877303][ T5273] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 287.897841][ T5232] Bluetooth: hci4: command tx timeout [ 288.221158][ T5273] usb 1-1: Using ep0 maxpacket: 32 [ 288.261436][ T5273] usb 1-1: config 0 has an invalid interface number: 199 but max is 0 [ 288.284392][ T5273] usb 1-1: config 0 has no interface number 0 [ 288.290622][ T5273] usb 1-1: config 0 interface 199 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 288.357774][ T5273] usb 1-1: config 0 interface 199 altsetting 0 endpoint 0x8 has invalid maxpacket 44400, setting to 1024 [ 288.438126][ T5273] usb 1-1: config 0 interface 199 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1024 [ 288.468795][ T5273] usb 1-1: config 0 interface 199 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 288.504296][ T5273] usb 1-1: config 0 interface 199 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 288.550888][ T5273] usb 1-1: New USB device found, idVendor=1a0a, idProduct=0104, bcdDevice=6b.d5 [ 288.824836][ T5273] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.833061][ T5273] usb 1-1: Product: syz [ 288.837843][ T5273] usb 1-1: Manufacturer: syz [ 288.843514][ T5273] usb 1-1: SerialNumber: syz [ 288.857042][ T5273] usb 1-1: config 0 descriptor?? [ 288.873126][ T8338] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 288.960519][ T8363] netlink: 'syz.3.685': attribute type 1 has an invalid length. [ 289.060206][ T5273] usb_ehset_test 1-1:0.199: probe with driver usb_ehset_test failed with error -32 [ 289.444691][ T5273] usb 1-1: USB disconnect, device number 16 [ 289.935082][ T5232] Bluetooth: hci4: command tx timeout [ 290.124051][ T5273] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 290.224369][ T2508] team0 (unregistering): Port device team_slave_1 removed [ 290.363959][ T5273] usb 5-1: Using ep0 maxpacket: 16 [ 290.405108][ T5273] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 290.432750][ T5273] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 290.507412][ T5273] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 290.561892][ T5273] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 290.574566][ T2508] team0 (unregistering): Port device team_slave_0 removed [ 290.793445][ T5273] usb 5-1: New USB device found, idVendor=04ca, idProduct=9e6d, bcdDevice= 2.c8 [ 290.909845][ T8384] netlink: 'syz.3.692': attribute type 2 has an invalid length. [ 291.513277][ T5273] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.931706][ T5273] usb 5-1: Product: syz [ 291.952048][ T5273] usb 5-1: Manufacturer: syz [ 291.967001][ T5273] usb 5-1: SerialNumber: syz [ 292.000571][ T5273] usb 5-1: config 0 descriptor?? [ 292.123920][ T54] Bluetooth: hci4: command tx timeout [ 292.384463][ T5273] usb 5-1: USB disconnect, device number 21 [ 293.142115][ T8275] chnl_net:caif_netlink_parms(): no params data found [ 293.415271][ T8421] sd 0:0:1:0: device reset [ 293.700027][ T8275] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.727097][ T8275] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.752669][ T8275] bridge_slave_0: entered allmulticast mode [ 293.784814][ T8275] bridge_slave_0: entered promiscuous mode [ 293.850442][ T8275] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.880101][ T8275] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.909188][ T8275] bridge_slave_1: entered allmulticast mode [ 293.913125][ T8434] netlink: 644 bytes leftover after parsing attributes in process `syz.0.705'. [ 293.948238][ T5232] Bluetooth: hci3: command 0x206a tx timeout [ 293.962552][ T8275] bridge_slave_1: entered promiscuous mode [ 294.034992][ T8275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 294.060218][ T8275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 294.139558][ T8441] syz.4.699: attempt to access beyond end of device [ 294.139558][ T8441] loop9: rw=0, sector=0, nr_sectors = 1 limit=0 [ 294.191380][ T8441] FAT-fs (loop9): unable to read boot sector [ 294.255043][ T8275] team0: Port device team_slave_0 added [ 294.309223][ T8275] team0: Port device team_slave_1 added [ 294.315174][ T5274] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 294.521097][ T8275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 294.533997][ T5274] usb 1-1: Using ep0 maxpacket: 16 [ 294.554717][ T8275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.603126][ T5274] usb 1-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=f8.a6 [ 294.652578][ T5274] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.689931][ T5274] usb 1-1: Product: syz [ 294.703653][ T8275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 294.723756][ T5274] usb 1-1: Manufacturer: syz [ 294.740465][ T5274] usb 1-1: SerialNumber: syz [ 294.747872][ T8275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 294.775977][ T5274] usb 1-1: config 0 descriptor?? [ 294.782075][ T8275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.882904][ T8275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 295.247423][ T8275] hsr_slave_0: entered promiscuous mode [ 295.260896][ T8275] hsr_slave_1: entered promiscuous mode [ 295.289027][ T8275] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 295.325143][ T8275] Cannot create hsr debugfs directory [ 296.865586][ T5273] usb 1-1: USB disconnect, device number 17 [ 296.873208][ T8480] [U] [ 296.876324][ T8480] [U] [ 296.879207][ T8480] [U] [ 296.881913][ T8480] [U] [ 297.338029][ T8480] [U] [ 297.340763][ T8480] [U] [ 297.343462][ T8480] [U] [ 297.346160][ T8480] [U] [ 298.129915][ T54] Bluetooth: hci2: unexpected subevent 0x0e length: 244 > 15 [ 298.239297][ T8480] [U] [ 298.242035][ T8480] [U] [ 298.244738][ T8480] [U] [ 298.247446][ T8480] [U] [ 298.250776][ T8480] [U] [ 298.253500][ T8480] [U] [ 298.256165][ T8480] [U] [ 298.258829][ T8480] [U] [ 298.261847][ T8480] [U] [ 298.264562][ T8480] [U] [ 298.267245][ T8480] [U] [ 298.269910][ T8480] [U] [ 298.414968][ T54] Bluetooth: hci2: unexpected event for opcode 0x2006 [ 298.570980][ T8480] [U] [ 298.573727][ T8480] [U] [ 298.576450][ T8480] [U] [ 298.579166][ T8480] [U] [ 298.650824][ T8480] [U] [ 298.653526][ T8480] [U] [ 298.656199][ T8480] [U] [ 298.658863][ T8480] [U] [ 298.754217][ T8480] [U] [ 298.756963][ T8480] [U] [ 298.759675][ T8480] [U] [ 298.762382][ T8480] [U] [ 298.787794][ T8480] [U] [ 298.790532][ T8480] [U] [ 298.793237][ T8480] [U] [ 298.795936][ T8480] [U] [ 298.816857][ T8480] [U] [ 298.819592][ T8480] [U] [ 298.822299][ T8480] [U] [ 298.824997][ T8480] [U] [ 298.843170][ T8480] [U] [ 298.845911][ T8480] [U] [ 298.848608][ T8480] [U] [ 298.851289][ T8480] [U] [ 298.888153][ T8480] [U] [ 298.890874][ T8480] [U] [ 298.893546][ T8480] [U] [ 298.896216][ T8480] [U] [ 298.934733][ T8480] [U] [ 298.937458][ T8480] [U] [ 298.940145][ T8480] [U] [ 298.942808][ T8480] [U] [ 298.968918][ T8480] [U] [ 298.971651][ T8480] [U] [ 298.974354][ T8480] [U] [ 298.977060][ T8480] [U] [ 298.998608][ T8480] [U] [ 299.001346][ T8480] [U] [ 299.004043][ T8480] [U] [ 299.006744][ T8480] [U] [ 299.061673][ T8480] [U] [ 299.064371][ T8480] [U] [ 299.067032][ T8480] [U] [ 299.069694][ T8480] [U] [ 299.112244][ T8480] [U] [ 299.114978][ T8480] [U] [ 299.117687][ T8480] [U] [ 299.120389][ T8480] [U] [ 299.150096][ T8480] [U] [ 299.152821][ T8480] [U] [ 299.155527][ T8480] [U] [ 299.158231][ T8480] [U] [ 299.209780][ T8480] [U] [ 299.212519][ T8480] [U] [ 299.215213][ T8480] [U] [ 299.217896][ T8480] [U] [ 299.249684][ T8480] [U] [ 299.252393][ T8480] [U] [ 299.255168][ T8480] [U] [ 299.257877][ T8480] [U] [ 299.279250][ T8275] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 299.305217][ T8480] [U] [ 299.307958][ T8480] [U] [ 299.310665][ T8480] [U] [ 299.313369][ T8480] [U] [ 299.474860][ T8480] [U] [ 299.477604][ T8480] [U] [ 299.478163][ T8275] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 299.480285][ T8480] [U] [ 299.489640][ T8480] [U] [ 299.529768][ T8480] [U] [ 299.532504][ T8480] [U] [ 299.535208][ T8480] [U] [ 299.537906][ T8480] [U] [ 299.744970][ T8480] [U] [ 299.747715][ T8480] [U] [ 299.750417][ T8480] [U] [ 299.753124][ T8480] [U] [ 299.768346][ T8275] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 299.829001][ T8480] [U] [ 299.831736][ T8480] [U] [ 299.834439][ T8480] [U] [ 299.837137][ T8480] [U] [ 299.858926][ T8275] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 300.094537][ T8480] [U] [ 300.299485][ T8275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.432538][ T8275] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.485466][ T5273] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.492589][ T5273] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.570083][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.577487][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.584013][ T51] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 300.812008][ T51] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.865328][ T51] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 300.884480][ T51] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.904315][ T51] usb 5-1: Product: syz [ 300.908514][ T51] usb 5-1: Manufacturer: syz [ 300.913723][ T51] usb 5-1: SerialNumber: syz [ 300.918714][ T5275] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 301.124780][ T5275] usb 2-1: Using ep0 maxpacket: 16 [ 301.145961][ T5275] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 301.171888][ T5275] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 301.203663][ T5275] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 301.249961][ T8275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.260402][ T5275] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.285574][ T5275] usb 2-1: config 0 descriptor?? [ 301.394909][ T5273] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 301.403936][ T8275] veth0_vlan: entered promiscuous mode [ 301.450354][ T8275] veth1_vlan: entered promiscuous mode [ 301.548034][ T8275] veth0_macvtap: entered promiscuous mode [ 301.580697][ T8275] veth1_macvtap: entered promiscuous mode [ 301.604809][ T5273] usb 4-1: Using ep0 maxpacket: 16 [ 301.618316][ T5273] usb 4-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 301.623788][ T8275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.710543][ T8563] overlayfs: failed to resolve './file0': -2 [ 302.087922][ T5273] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.431924][ T54] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 302.441007][ T54] Bluetooth: hci2: Injecting HCI hardware error event [ 302.451360][ T5232] Bluetooth: hci2: hardware error 0x00 [ 302.469122][ T5273] usb 4-1: Product: syz [ 302.473333][ T5273] usb 4-1: Manufacturer: syz [ 302.478190][ T5273] usb 4-1: SerialNumber: syz [ 302.510106][ T5273] usb 4-1: config 0 descriptor?? [ 302.515975][ T8275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.527882][ T51] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 302.546579][ T51] cdc_ncm 5-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 302.547046][ T5273] ums-onetouch 4-1:0.0: USB Mass Storage device detected [ 302.561730][ T8275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.580761][ T8275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.581039][ T51] cdc_ncm 5-1:1.0: setting rx_max = 2048 [ 302.592162][ T8275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.612269][ T8275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.633082][ T8275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.645627][ T8275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.745136][ T8571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.789009][ T8275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 302.883347][ T8571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.883415][ T5273] usb 4-1: USB disconnect, device number 20 [ 302.940485][ T51] cdc_ncm 5-1:1.0: setting tx_max = 88 [ 302.952835][ T8275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.988591][ T8275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.005465][ T5275] hid-generic 0003:0158:0100.000D: unknown main item tag 0x1 [ 303.021816][ T5275] hid-generic 0003:0158:0100.000D: unexpected long global item [ 303.030028][ T8275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.042080][ T5275] hid-generic 0003:0158:0100.000D: probe with driver hid-generic failed with error -22 [ 303.052443][ T8275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.076369][ T8275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.095469][ T8275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.112503][ T8275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.132081][ T8275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.147837][ T8275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 303.208288][ T51] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 303.233409][ T8275] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.263282][ T51] usb 5-1: USB disconnect, device number 22 [ 303.274626][ T8275] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.302488][ T8534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.314636][ T51] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 303.324175][ T8275] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.333225][ T8534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.367172][ T8275] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.651540][ T3037] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.678631][ T3037] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.779884][ T3037] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.806162][ T3037] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.126415][ T8604] misc userio: Invalid payload size [ 304.481818][ T51] usb 2-1: USB disconnect, device number 17 [ 304.775615][ T8626] netlink: 20 bytes leftover after parsing attributes in process `syz.3.740'. [ 304.896071][ T5232] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 304.974202][ T51] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 305.130781][ T8635] netlink: 'syz.0.742': attribute type 3 has an invalid length. [ 305.139648][ T8635] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.742'. [ 305.165170][ T941] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 305.255303][ T51] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 305.364285][ T941] usb 5-1: Using ep0 maxpacket: 16 [ 305.467484][ T51] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 305.579668][ T941] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 305.664169][ T51] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.672778][ T941] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 305.686451][ T941] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 305.696928][ T51] usb 2-1: config 0 descriptor?? [ 305.726624][ T941] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.788694][ T941] usb 5-1: config 0 descriptor?? [ 305.859316][ T8640] ======================================================= [ 305.859316][ T8640] WARNING: The mand mount option has been deprecated and [ 305.859316][ T8640] and is ignored by this kernel. Remove the mand [ 305.859316][ T8640] option from the mount to silence this warning. [ 305.859316][ T8640] ======================================================= [ 306.108826][ T2508] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.137040][ T8644] overlayfs: overlapping lowerdir path [ 306.144821][ T51] ath6kl: Unsupported hardware version: 0x0 [ 306.152106][ T51] ath6kl: Failed to init ath6kl core: -22 [ 306.197280][ T51] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 306.256529][ T8631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.301825][ T8631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.331083][ T941] hid (null): bogus close delimiter [ 306.342837][ T941] hid-generic 0003:0158:0100.000E: unknown main item tag 0x0 [ 306.386599][ T941] hid-generic 0003:0158:0100.000E: unknown main item tag 0x0 [ 306.409200][ T941] hid-generic 0003:0158:0100.000E: bogus close delimiter [ 306.434979][ T941] hid-generic 0003:0158:0100.000E: item 0 0 2 10 parsing failed [ 306.445778][ T25] usb 2-1: USB disconnect, device number 18 [ 306.461270][ T941] hid-generic 0003:0158:0100.000E: probe with driver hid-generic failed with error -22 [ 306.591588][ T5273] usb 5-1: USB disconnect, device number 23 [ 306.733261][ T2508] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.810709][ T2508] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.880781][ T2508] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.974021][ T5232] Bluetooth: hci2: Opcode 0x206c failed: -110 [ 307.021771][ T2508] bridge_slave_1: left allmulticast mode [ 307.041136][ T2508] bridge_slave_1: left promiscuous mode [ 307.048165][ T2508] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.058920][ T2508] bridge_slave_0: left allmulticast mode [ 307.065442][ T2508] bridge_slave_0: left promiscuous mode [ 307.071121][ T2508] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.731910][ T2508] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 307.770431][ T2508] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 307.786718][ T4614] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 307.787985][ T2508] bond0 (unregistering): Released all slaves [ 307.797943][ T4614] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 307.811619][ T4614] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 307.820900][ T4614] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 307.828816][ T4614] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 307.836578][ T4614] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 308.214085][ T941] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 308.456920][ T941] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.491225][ T941] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.536079][ T941] usb 2-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice=b8.63 [ 308.558594][ T2508] hsr_slave_0: left promiscuous mode [ 308.570516][ T941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.605107][ T941] usb 2-1: config 0 descriptor?? [ 308.623257][ T2508] hsr_slave_1: left promiscuous mode [ 308.755805][ T2508] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 308.763282][ T2508] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 308.783320][ T2508] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 308.801240][ T2508] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 308.909786][ T2508] veth1_macvtap: left promiscuous mode [ 308.924116][ T2508] veth0_macvtap: left promiscuous mode [ 308.939920][ T2508] veth1_vlan: left promiscuous mode [ 308.950219][ T2508] veth0_vlan: left promiscuous mode [ 313.388421][ T4614] Bluetooth: hci4: command tx timeout [ 313.390386][ T4614] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 313.527227][ T5232] Bluetooth: hci2: Opcode 0x2046 failed: -110 [ 313.864731][ T8692] tty tty26: ldisc open failed (-12), clearing slot 25 [ 314.024950][ T941] usbhid 2-1:0.0: can't add hid device: -71 [ 314.030998][ T941] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 314.066683][ T941] usb 2-1: USB disconnect, device number 19 [ 314.402994][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 314.413806][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 314.427874][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 314.454919][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 314.475100][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 314.483314][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 315.098951][ T2508] team0 (unregistering): Port device team_slave_1 removed [ 315.167231][ T2508] team0 (unregistering): Port device team_slave_0 removed [ 315.459139][ T5232] Bluetooth: hci4: command tx timeout [ 316.311906][ T8664] chnl_net:caif_netlink_parms(): no params data found [ 316.365168][ T8704] chnl_net:caif_netlink_parms(): no params data found [ 316.584018][ T5232] Bluetooth: hci0: command tx timeout [ 316.736154][ T8664] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.743317][ T8664] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.805067][ T8664] bridge_slave_0: entered allmulticast mode [ 316.852674][ T8664] bridge_slave_0: entered promiscuous mode [ 317.053565][ T8664] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.307311][ T8664] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.347746][ T8664] bridge_slave_1: entered allmulticast mode [ 318.814422][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.820780][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.833159][ T5232] Bluetooth: hci4: command tx timeout [ 318.843899][ T5232] Bluetooth: hci0: command tx timeout [ 320.905588][ T54] Bluetooth: hci0: command tx timeout [ 320.911066][ T54] Bluetooth: hci4: command tx timeout [ 321.170048][ T8664] bridge_slave_1: entered promiscuous mode [ 321.595574][ T8704] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.602745][ T8704] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.674766][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 321.688210][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 321.699289][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 321.725602][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 321.733464][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 321.745685][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 321.764444][ T8704] bridge_slave_0: entered allmulticast mode [ 321.827802][ T8704] bridge_slave_0: entered promiscuous mode [ 321.892832][ T8764] netlink: 12 bytes leftover after parsing attributes in process `syz.3.768'. [ 321.951643][ T8664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 322.032633][ T8704] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.051105][ T8704] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.073217][ T8704] bridge_slave_1: entered allmulticast mode [ 322.073226][ T8770] input: syz0 as /devices/virtual/input/input15 [ 322.081334][ T8704] bridge_slave_1: entered promiscuous mode [ 322.169309][ T2508] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.219201][ T8664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 322.264177][ T5274] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 322.360643][ T2508] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.436165][ T8704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 322.452451][ T8664] team0: Port device team_slave_0 added [ 322.459863][ T5274] usb 2-1: too many configurations: 65, using maximum allowed: 8 [ 322.468009][ T8664] team0: Port device team_slave_1 added [ 322.476149][ T5274] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 322.488123][ T5274] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 322.500872][ T5274] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 322.514542][ T5274] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 322.526794][ T5274] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 322.528027][ T2508] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.545511][ T5274] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 322.559900][ T5274] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 322.571595][ T5274] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 322.608492][ T8704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 322.619909][ T5274] usb 2-1: New USB device found, idVendor=046d, idProduct=08b8, bcdDevice=ee.8d [ 322.646709][ T5274] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.727477][ T5274] pwc: Logitech QuickCam detected (reserved ID). [ 322.743996][ T5274] pwc: Warning: more than 1 configuration available. [ 322.974118][ T54] Bluetooth: hci0: command tx timeout [ 323.104776][ T2508] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.145497][ T5274] pwc: send_video_command error -71 [ 323.150746][ T5274] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 323.202025][ T5274] Philips webcam 2-1:250.0: probe with driver Philips webcam failed with error -71 [ 323.244222][ T5274] usb 2-1: USB disconnect, device number 20 [ 323.334666][ T8704] team0: Port device team_slave_0 added [ 323.406053][ T8704] team0: Port device team_slave_1 added [ 323.437956][ T8664] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 323.454048][ T8664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.490967][ T8664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 323.506728][ T8664] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 323.513693][ T8664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.544827][ T8664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 323.564031][ T5276] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 323.665442][ T8704] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 323.672410][ T8704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.699257][ T8704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 323.745524][ T8664] hsr_slave_0: entered promiscuous mode [ 323.762734][ T8664] hsr_slave_1: entered promiscuous mode [ 323.804357][ T8664] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 323.813804][ T5276] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.829927][ T8664] Cannot create hsr debugfs directory [ 323.846945][ T5276] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 323.857155][ T54] Bluetooth: hci2: command tx timeout [ 323.875536][ T5276] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 323.888776][ T5276] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 323.899646][ T5276] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.921125][ T5276] usb 4-1: config 0 descriptor?? [ 323.942490][ T8807] misc userio: The device must be registered before sending interrupts [ 323.968461][ T8704] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 323.979878][ T8704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.006982][ T8704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.400928][ T5276] acrux 0003:1A34:0802.000F: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.3-1/input0 [ 324.429199][ T8704] hsr_slave_0: entered promiscuous mode [ 324.457598][ T5276] acrux 0003:1A34:0802.000F: no inputs found [ 324.463627][ T5276] acrux 0003:1A34:0802.000F: Failed to enable force feedback support, error: -19 [ 324.486771][ T8704] hsr_slave_1: entered promiscuous mode [ 324.509017][ T8704] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 324.520398][ T8704] Cannot create hsr debugfs directory [ 324.692601][ T2508] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.821190][ T2508] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.937963][ T2508] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.014294][ T2508] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.029329][ T8759] chnl_net:caif_netlink_parms(): no params data found [ 325.057921][ T8823] tap0: tun_chr_ioctl cmd 1074025677 [ 325.063715][ T8823] tap0: linktype set to 774 [ 325.230622][ T5273] usb 4-1: USB disconnect, device number 21 [ 325.313111][ T8759] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.320625][ T8759] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.329011][ T8759] bridge_slave_0: entered allmulticast mode [ 325.338027][ T8759] bridge_slave_0: entered promiscuous mode [ 325.352891][ T8759] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.360551][ T8759] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.369241][ T8759] bridge_slave_1: entered allmulticast mode [ 325.377633][ T8759] bridge_slave_1: entered promiscuous mode [ 325.528166][ T8759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.688955][ T8759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 325.842487][ T8759] team0: Port device team_slave_0 added [ 325.934096][ T54] Bluetooth: hci2: command tx timeout [ 326.866735][ T8759] team0: Port device team_slave_1 added [ 326.874124][ T2508] gretap0: left allmulticast mode [ 326.879234][ T2508] gretap0: left promiscuous mode [ 326.926109][ T2508] bridge0: port 3(gretap0) entered disabled state [ 326.945810][ T2508] bridge_slave_1: left allmulticast mode [ 326.951664][ T2508] bridge_slave_1: left promiscuous mode [ 326.989836][ T2508] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.021514][ T2508] bridge_slave_0: left allmulticast mode [ 327.032228][ T8856] netlink: 16 bytes leftover after parsing attributes in process `syz.3.783'. [ 327.044016][ T2508] bridge_slave_0: left promiscuous mode [ 327.049768][ T2508] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.097489][ T2508] bridge_slave_1: left allmulticast mode [ 327.103276][ T2508] bridge_slave_1: left promiscuous mode [ 327.119155][ T2508] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.133748][ T2508] bridge_slave_0: left allmulticast mode [ 327.148176][ T2508] bridge_slave_0: left promiscuous mode [ 327.161349][ T2508] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.334003][ T5222] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 327.548375][ T5222] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.585256][ T5222] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 327.605278][ T5222] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 327.643939][ T5222] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 327.679742][ T5222] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 327.696565][ T5222] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 327.738022][ T5222] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.757655][ T5222] usb 4-1: Product: syz [ 327.761854][ T5222] usb 4-1: Manufacturer: syz [ 327.790677][ T5222] usb 4-1: SerialNumber: syz [ 328.015589][ T54] Bluetooth: hci2: command tx timeout [ 328.096009][ T5222] cdc_ncm 4-1:1.0: bind() failure [ 328.106066][ T5222] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 328.112911][ T5222] cdc_ncm 4-1:1.1: bind() failure [ 328.185365][ T5222] usb 4-1: USB disconnect, device number 22 [ 328.416432][ T2508] bridge0 (unregistering): left allmulticast mode [ 328.739063][ T2508] bond0 (unregistering): left promiscuous mode [ 328.745672][ T2508] bond_slave_0: left promiscuous mode [ 328.751703][ T2508] bond_slave_1: left promiscuous mode [ 328.769852][ T2508] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 328.785200][ T2508] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 328.798650][ T2508] bond0 (unregistering): Released all slaves [ 329.173571][ T2508] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 329.184333][ T5276] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 329.212294][ T2508] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 329.239034][ T2508] bond0 (unregistering): Released all slaves [ 329.400386][ T8759] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 329.411065][ T8759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.494148][ T8759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 329.506919][ T5276] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 329.524029][ T5276] usb 4-1: config 1 has no interface number 0 [ 329.543899][ T5276] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 329.569959][ T8759] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 329.586873][ T8759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.613499][ T5276] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 329.641916][ T5276] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 14129, setting to 64 [ 329.665854][ T5276] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 329.678558][ T5276] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.688696][ T8759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 329.707531][ T5276] usb 4-1: Product: syz [ 329.716362][ T2508] tipc: Left network mode [ 329.744177][ T5276] usb 4-1: Manufacturer: syz [ 329.748817][ T5276] usb 4-1: SerialNumber: syz [ 329.783369][ T2508] tipc: Disabling bearer [ 329.812541][ T2508] tipc: Left network mode [ 329.998917][ T8759] hsr_slave_0: entered promiscuous mode [ 330.065321][ T8759] hsr_slave_1: entered promiscuous mode [ 330.082942][ T8759] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 330.104488][ T54] Bluetooth: hci2: command tx timeout [ 330.111565][ T8759] Cannot create hsr debugfs directory [ 330.447292][ T8664] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 330.469677][ T8664] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 330.606832][ T8664] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 330.629331][ T8664] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 330.669848][ T5276] cdc_ncm 4-1:1.1: bind() failure [ 330.949295][ T5276] usb 4-1: USB disconnect, device number 23 [ 331.307080][ T2508] dummy0: left promiscuous mode [ 331.396408][ T2508] hsr_slave_0: left promiscuous mode [ 331.419428][ T2508] hsr_slave_1: left promiscuous mode [ 331.437209][ T2508] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 331.464179][ T2508] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 331.512499][ T2508] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 331.553925][ T2508] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 331.607489][ T2508] hsr_slave_0: left promiscuous mode [ 331.620656][ T2508] hsr_slave_1: left promiscuous mode [ 331.634608][ T2508] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 331.652146][ T2508] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 331.661036][ T2508] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 331.680556][ T2508] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 331.775496][ T2508] veth1_macvtap: left promiscuous mode [ 331.781069][ T2508] veth0_macvtap: left promiscuous mode [ 331.787528][ T2508] veth1_vlan: left promiscuous mode [ 331.792884][ T2508] veth0_vlan: left promiscuous mode [ 331.800847][ T2508] veth1_macvtap: left promiscuous mode [ 331.816151][ T2508] veth0_macvtap: left promiscuous mode [ 331.827975][ T2508] veth1_vlan: left promiscuous mode [ 331.833413][ T2508] veth0_vlan: left promiscuous mode [ 332.470738][ T2508] team0 (unregistering): Port device team_slave_1 removed [ 332.518665][ T2508] team0 (unregistering): Port device team_slave_0 removed [ 333.347890][ T2508] team0 (unregistering): Port device team_slave_1 removed [ 333.392569][ T2508] team0 (unregistering): Port device team_slave_0 removed [ 334.130968][ T8704] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 334.364691][ T8704] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 334.537584][ T8704] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 334.586692][ T8704] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 334.800070][ T8913] qrtr: Invalid version 48 [ 334.835714][ T5232] Bluetooth: hci1: unexpected event for opcode 0x200f [ 334.936963][ T8664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.035645][ T8664] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.085167][ T5222] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.092268][ T5222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.105511][ T5222] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.112624][ T5222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.126331][ T8704] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.196371][ T8759] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 335.233428][ T8704] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.278181][ T8759] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 335.363628][ T8664] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 335.387982][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 335.387999][ T29] audit: type=1326 audit(1722850038.220:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8916 comm="syz.3.794" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa6ac9779f9 code=0x0 [ 335.420987][ T8664] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 335.455680][ T5222] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.462810][ T5222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.483731][ T5222] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.490906][ T5222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.520113][ T2508] IPVS: stop unused estimator thread 0... [ 335.536538][ T8759] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 335.558961][ T2508] IPVS: stop unused estimator thread 0... [ 335.754704][ T8759] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 336.576570][ T5232] Bluetooth: hci2: command 0x0405 tx timeout [ 336.940106][ T8936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.796'. [ 337.250294][ T8664] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 337.522379][ T8949] vivid-006: disconnect [ 338.038763][ T8939] vivid-006: reconnect [ 338.137427][ T8759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.219722][ T8704] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 338.257839][ T8759] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.282418][ T8664] veth0_vlan: entered promiscuous mode [ 338.415344][ T8664] veth1_vlan: entered promiscuous mode [ 338.443504][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.450706][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.493726][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.500932][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.706907][ T4614] Bluetooth: hci2: command 0x0405 tx timeout [ 338.895269][ T4614] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 338.904115][ T4614] Bluetooth: hci1: Injecting HCI hardware error event [ 338.925939][ T54] Bluetooth: hci1: hardware error 0x00 [ 339.208193][ T8664] veth0_macvtap: entered promiscuous mode [ 339.312223][ T8664] veth1_macvtap: entered promiscuous mode [ 339.430655][ T8664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.481650][ T8664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.514295][ T8664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.546653][ T8664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.583019][ T8664] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 339.685656][ T8664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.734761][ T8664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.781848][ T8664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.812001][ T8664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.957276][ T8664] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 340.373817][ T8664] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.444059][ T8664] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.494846][ T8664] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.503585][ T8664] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.756610][ T8704] veth0_vlan: entered promiscuous mode [ 340.769780][ T2480] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.790043][ T8759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 340.797575][ T2480] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.811842][ T8704] veth1_vlan: entered promiscuous mode [ 340.937481][ T5276] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 340.947033][ T2480] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.970413][ T2480] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.995918][ T8704] veth0_macvtap: entered promiscuous mode [ 341.022252][ T8759] veth0_vlan: entered promiscuous mode [ 341.054566][ T54] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 341.068643][ T8997] bridge: RTM_NEWNEIGH with invalid ether address [ 341.086464][ T8704] veth1_macvtap: entered promiscuous mode [ 341.112358][ T8759] veth1_vlan: entered promiscuous mode [ 341.173670][ T8704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 341.197837][ T5276] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 341.215424][ T8704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.230019][ T5276] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 341.248379][ T8704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 341.259344][ T5276] usb 4-1: config 1 has no interface number 0 [ 341.266458][ T5276] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 341.280005][ T8704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.290208][ T8704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 341.302249][ T8704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.332788][ T5276] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 341.344990][ T8704] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 341.353159][ T5276] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.362066][ T5276] usb 4-1: Product: syz [ 341.367438][ T5276] usb 4-1: Manufacturer: syz [ 341.372099][ T5276] usb 4-1: SerialNumber: syz [ 341.389214][ T5276] usb 4-1: selecting invalid altsetting 1 [ 341.451421][ T8704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.482994][ T8704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.496696][ T8704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.507838][ T8704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.518317][ T8704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.529444][ T8704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.545615][ T8704] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 341.577242][ T8704] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.587034][ T8704] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.596311][ T8704] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.605094][ T8704] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.700941][ T8759] veth0_macvtap: entered promiscuous mode [ 341.759754][ T8759] veth1_macvtap: entered promiscuous mode [ 341.771612][ T54] Bluetooth: hci3: unexpected event 0x2f length: 763 > 260 [ 341.820216][ T5276] cdc_ncm 4-1:1.1: bind() failure [ 341.840515][ T5276] usb 4-1: USB disconnect, device number 24 [ 341.908372][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.926931][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.961712][ T8759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 341.988422][ T8759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.020400][ T8759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.044248][ T8759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.058729][ T8759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.083968][ T8759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.124198][ T8759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.147607][ T8759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.176702][ T8759] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 342.316822][ T2480] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.338579][ T8759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.350680][ T8759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.360794][ T8759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.372097][ T8759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.382084][ T8759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.393534][ T8759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.403501][ T8759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.419557][ T8759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.431199][ T8759] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 342.483063][ T8759] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.508577][ T8759] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.517542][ T8759] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.529819][ T8759] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.578347][ T3037] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.586802][ T3037] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.645363][ T2480] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.756097][ T2480] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.922840][ T2480] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.950408][ T2974] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.968086][ T2974] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.033080][ T3037] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.048314][ T3037] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.228711][ T2480] bridge_slave_1: left allmulticast mode [ 343.241987][ T2480] bridge_slave_1: left promiscuous mode [ 343.248896][ T2480] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.266794][ T2480] bridge_slave_0: left allmulticast mode [ 343.272907][ T2480] bridge_slave_0: left promiscuous mode [ 343.287629][ T2480] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.300676][ T4614] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 344.321205][ T4614] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 344.331547][ T4614] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 344.341163][ T4614] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 344.349118][ T4614] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 344.357441][ T4614] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 344.828045][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 344.838344][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 344.848479][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 344.866135][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 344.882996][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 344.892649][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 345.060073][ T2480] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 345.111524][ T2480] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 345.148393][ T2480] bond0 (unregistering): Released all slaves [ 347.339902][ T54] Bluetooth: hci0: command tx timeout [ 347.339904][ T4614] Bluetooth: hci4: command tx timeout [ 348.230333][ T9126] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 348.784701][ T9133] tmpfs: Bad value for 'nr_inodes' [ 348.893043][ T54] Bluetooth: hci2: unexpected event for opcode 0x0c05 [ 349.334068][ T2480] hsr_slave_0: left promiscuous mode [ 349.366924][ T2480] hsr_slave_1: left promiscuous mode [ 349.374996][ T54] Bluetooth: hci4: command tx timeout [ 349.385679][ T54] Bluetooth: hci0: command tx timeout [ 349.409064][ T2480] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 349.431438][ T2480] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 349.463749][ T2480] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 349.486179][ T2480] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 349.555981][ T2480] veth1_macvtap: left promiscuous mode [ 349.563248][ T2480] veth0_macvtap: left promiscuous mode [ 349.574762][ T2480] veth1_vlan: left promiscuous mode [ 349.589213][ T2480] veth0_vlan: left promiscuous mode [ 349.614204][ T51] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 349.804062][ T51] usb 2-1: Using ep0 maxpacket: 8 [ 349.821022][ T51] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 349.857066][ T51] usb 2-1: config 179 has no interface number 0 [ 349.883425][ T51] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 349.918602][ T51] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 349.950719][ T51] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 349.964744][ T51] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 349.988964][ T51] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 350.029268][ T51] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 350.038842][ T51] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.070939][ T9149] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 350.466670][ T51] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input16 [ 351.770455][ T54] Bluetooth: hci0: command tx timeout [ 351.776019][ T54] Bluetooth: hci4: command tx timeout [ 351.785913][ T25] usb 2-1: USB disconnect, device number 21 [ 351.791830][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 351.791854][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 351.847126][ T25] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 351.933014][ T9161] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 351.973060][ T9159] overlay: filesystem on ./file1 not supported [ 352.379527][ T2480] team0 (unregistering): Port device team_slave_1 removed [ 352.528455][ T2480] team0 (unregistering): Port device team_slave_0 removed [ 352.828535][ T9180] tmpfs: Unknown parameter 'nr_ino' [ 353.068454][ T9] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 353.275725][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 353.292448][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 895 [ 353.329531][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 353.341524][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 1024 [ 353.354796][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 1024 [ 353.410747][ T9] usb 4-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice= 0.00 [ 353.441871][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 353.474002][ T9] usb 4-1: SerialNumber: syz [ 353.492251][ T9] usb 4-1: config 0 descriptor?? [ 353.505346][ T9181] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 353.521821][ T9181] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 353.571285][ T9088] chnl_net:caif_netlink_parms(): no params data found [ 353.580864][ C0] port100 4-1:0.0: NFC: Urb failure (status -71) [ 353.595359][ C0] port100 4-1:0.0: NFC: Urb failure (status -71) [ 353.621789][ T9] port100 4-1:0.0: NFC: Could not get supported command types [ 353.722925][ T9072] chnl_net:caif_netlink_parms(): no params data found [ 353.867336][ T4614] Bluetooth: hci4: command tx timeout [ 353.872803][ T4614] Bluetooth: hci0: command tx timeout [ 353.978195][ T6946] usb 4-1: USB disconnect, device number 25 [ 354.005825][ T9204] 9pnet_fd: Insufficient options for proto=fd [ 354.262067][ T9088] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.274378][ T9088] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.293167][ T9088] bridge_slave_0: entered allmulticast mode [ 354.349945][ T9088] bridge_slave_0: entered promiscuous mode [ 354.375920][ T9088] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.399450][ T9088] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.426974][ T9088] bridge_slave_1: entered allmulticast mode [ 354.449370][ T9088] bridge_slave_1: entered promiscuous mode [ 355.196721][ T9072] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.208125][ T9072] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.236905][ T9072] bridge_slave_0: entered allmulticast mode [ 355.254356][ T9072] bridge_slave_0: entered promiscuous mode [ 355.420526][ T9088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 355.485791][ T9072] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.495350][ T9072] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.525644][ T9072] bridge_slave_1: entered allmulticast mode [ 355.542042][ T9072] bridge_slave_1: entered promiscuous mode [ 355.633541][ T9088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 355.715703][ T9072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 355.916129][ T9072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 356.076561][ T2480] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.125428][ T9088] team0: Port device team_slave_0 added [ 356.247161][ T9072] team0: Port device team_slave_0 added [ 356.297641][ T9072] team0: Port device team_slave_1 added [ 356.346910][ T9088] team0: Port device team_slave_1 added [ 356.499429][ T2480] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.751025][ T9273] rtc_cmos 00:00: Alarms can be up to one day in the future [ 357.299858][ T2480] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.333362][ T9072] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 357.471854][ T9072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 357.582961][ T9072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 357.633983][ T9072] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 357.674675][ T9072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 357.748407][ T9072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 357.801352][ T9088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 357.824120][ T9088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 357.944031][ T9088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 357.988161][ T9088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.006030][ T9088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.074782][ T9088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.167632][ T2480] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.484121][ T9088] hsr_slave_0: entered promiscuous mode [ 358.522242][ T9088] hsr_slave_1: entered promiscuous mode [ 358.668283][ T9072] hsr_slave_0: entered promiscuous mode [ 358.721999][ T9072] hsr_slave_1: entered promiscuous mode [ 358.739131][ T9072] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 358.765283][ T9072] Cannot create hsr debugfs directory [ 359.309603][ T2480] bridge_slave_1: left allmulticast mode [ 359.315536][ T2480] bridge_slave_1: left promiscuous mode [ 359.321537][ T2480] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.332541][ T2480] bridge_slave_0: left allmulticast mode [ 359.339180][ T2480] bridge_slave_0: left promiscuous mode [ 359.345438][ T2480] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.452001][ T51] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 359.644001][ T51] usb 2-1: Using ep0 maxpacket: 8 [ 359.656954][ T51] usb 2-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 359.667204][ T51] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.675417][ T51] usb 2-1: Product: syz [ 359.688979][ T51] usb 2-1: Manufacturer: syz [ 359.693591][ T51] usb 2-1: SerialNumber: syz [ 359.709660][ T51] usb 2-1: config 0 descriptor?? [ 359.726185][ T51] radio-usb-si4713 2-1:0.0: Si4713 development board discovered: (10C4:8244) [ 359.821054][ T2480] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 359.832635][ T2480] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 359.845115][ T2480] bond0 (unregistering): Released all slaves [ 360.348072][ T51] radio-usb-si4713 2-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 360.366222][ T51] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 360.385743][ T51] usb 2-1: USB disconnect, device number 22 [ 360.550054][ T2480] hsr_slave_0: left promiscuous mode [ 360.583457][ T2480] hsr_slave_1: left promiscuous mode [ 360.617245][ T2480] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 360.651687][ T2480] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 360.659438][ T6946] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 360.679500][ T2480] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 360.706429][ T2480] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 360.780971][ T2480] veth1_macvtap: left promiscuous mode [ 360.794928][ T2480] veth0_macvtap: left promiscuous mode [ 360.806028][ T2480] veth1_vlan: left promiscuous mode [ 360.814329][ T2480] veth0_vlan: left promiscuous mode [ 360.894951][ T6946] usb 4-1: config 0 has an invalid interface number: 18 but max is 0 [ 360.913275][ T6946] usb 4-1: config 0 has no interface number 0 [ 360.943265][ T6946] usb 4-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 360.989065][ T6946] usb 4-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 361.038393][ T6946] usb 4-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 364.883939][ T6946] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 364.891980][ T6946] usb 4-1: Manufacturer: syz [ 364.945505][ T6946] usb 4-1: config 0 descriptor?? [ 364.960430][ T6946] usb 4-1: can't set config #0, error -71 [ 364.996448][ T6946] usb 4-1: USB disconnect, device number 26 [ 365.744201][ T51] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 365.999445][ T51] usb 2-1: Using ep0 maxpacket: 16 [ 366.039348][ T51] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 366.179084][ T51] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 366.188648][ T51] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.204825][ T51] usb 2-1: config 0 descriptor?? [ 366.217728][ T51] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 366.456821][ T2480] team0 (unregistering): Port device team_slave_1 removed [ 366.508259][ T2480] team0 (unregistering): Port device team_slave_0 removed [ 366.984312][ T9345] netlink: 8 bytes leftover after parsing attributes in process `syz.3.873'. [ 366.993150][ T9345] netlink: 24 bytes leftover after parsing attributes in process `syz.3.873'. [ 367.007917][ T9345] gtp0: entered promiscuous mode [ 367.012908][ T9345] gtp0: entered allmulticast mode [ 367.621957][ T9088] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 367.655940][ T9088] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 367.688243][ T9088] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 367.739354][ T9088] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 368.236375][ T9088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 368.312278][ T9088] 8021q: adding VLAN 0 to HW filter on device team0 [ 368.379252][ T6946] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.386488][ T6946] bridge0: port 1(bridge_slave_0) entered forwarding state [ 368.430440][ T5222] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.437652][ T5222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 368.480158][ T9072] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 368.503803][ T9072] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 368.530953][ T9072] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 368.561865][ T9072] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 368.665626][ T25] usb 2-1: USB disconnect, device number 23 [ 369.143013][ T9402] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 369.855252][ T9405] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 369.887670][ T9405] syz.1.881 (9405) used greatest stack depth: 18272 bytes left [ 370.018971][ T9072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.148868][ T9072] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.226575][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.233722][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 370.268271][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.275468][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 370.354270][ T51] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 370.393587][ T9088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 370.585226][ T51] usb 2-1: Using ep0 maxpacket: 16 [ 370.596301][ T51] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 370.627731][ T51] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 370.651112][ T51] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x3 has invalid wMaxPacketSize 0 [ 370.684715][ T51] usb 2-1: config 1 interface 0 altsetting 255 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 370.732272][ T51] usb 2-1: config 1 interface 0 has no altsetting 0 [ 370.759601][ T51] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 370.783664][ T51] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 370.813244][ T51] usb 2-1: SerialNumber: syz [ 370.992708][ T9072] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 371.050116][ T9088] veth0_vlan: entered promiscuous mode [ 371.066543][ T51] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 371.116882][ T51] usb 2-1: USB disconnect, device number 24 [ 371.133652][ T9088] veth1_vlan: entered promiscuous mode [ 371.209111][ T9072] veth0_vlan: entered promiscuous mode [ 371.262121][ T9088] veth0_macvtap: entered promiscuous mode [ 371.291547][ T9072] veth1_vlan: entered promiscuous mode [ 371.302946][ T9088] veth1_macvtap: entered promiscuous mode [ 371.319113][ T9445] netlink: 'syz.3.886': attribute type 5 has an invalid length. [ 371.359414][ T9088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.380930][ T9088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.391480][ T9088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.402865][ T9447] syz.3.887[9447] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 371.405153][ T6946] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 371.426911][ T9088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.444202][ T9088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.456703][ T9088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.468447][ T9088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 371.500924][ T9088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.515492][ T9088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.515510][ T9088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.515524][ T9088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.515540][ T9088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.515551][ T9088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.518253][ T9088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 371.547785][ T9088] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.547811][ T9088] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.547827][ T9088] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.547843][ T9088] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.572896][ T9072] veth0_macvtap: entered promiscuous mode [ 371.597181][ T9072] veth1_macvtap: entered promiscuous mode [ 371.682897][ T6946] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 371.721076][ T6946] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 371.759288][ T9072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.770095][ T6946] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.40 [ 371.793419][ T6946] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 371.803168][ T6946] usb 1-1: Manufacturer: syz [ 371.814275][ T9072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.839959][ T9072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.844003][ T6946] usb 1-1: bad CDC descriptors [ 371.872067][ T9072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.893305][ T9454] netlink: 80 bytes leftover after parsing attributes in process `syz.1.890'. [ 371.894373][ T9072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.917877][ T9072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.927855][ T9072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.940072][ T9072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.957291][ T9072] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 372.278711][ T6946] usb 1-1: USB disconnect, device number 18 [ 372.645261][ T2480] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.653095][ T2480] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.757274][ T9072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.768803][ T9072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.783886][ T9072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.796071][ T9072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.807929][ T9072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.819007][ T9072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.830787][ T9072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.841391][ T9072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.875352][ T9072] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 372.918383][ T9460] netlink: 'syz.3.892': attribute type 1 has an invalid length. [ 372.924235][ T9072] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.935029][ T9460] netlink: 9236 bytes leftover after parsing attributes in process `syz.3.892'. [ 372.944834][ T9462] vxcan1: tx address claim with dest, not broadcast [ 372.954060][ T9460] netlink: 'syz.3.892': attribute type 1 has an invalid length. [ 372.966855][ T9072] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.984002][ T9460] netlink: 'syz.3.892': attribute type 2 has an invalid length. [ 372.998936][ T9072] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.023672][ T9072] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.061508][ T9466] syz.0.895: attempt to access beyond end of device [ 373.061508][ T9466] nbd0: rw=0, sector=2, nr_sectors = 2 limit=0 [ 373.070224][ T2508] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.116352][ T2508] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.122373][ T9466] MINIX-fs: unable to read superblock [ 373.316927][ T9470] netlink: 12 bytes leftover after parsing attributes in process `syz.3.897'. [ 373.375623][ T3037] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.413664][ T3037] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.481657][ T9478] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 373.668529][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.709417][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.119111][ T3003] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.343796][ T3003] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.472188][ T3003] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.805901][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 374.816548][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 374.825320][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 374.836420][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 374.844738][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 374.853135][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 374.922444][ T3003] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.201366][ T9506] chnl_net:caif_netlink_parms(): no params data found [ 375.236983][ T3003] bridge_slave_1: left allmulticast mode [ 375.242658][ T3003] bridge_slave_1: left promiscuous mode [ 375.262555][ T3003] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.285880][ T3003] bridge_slave_0: left allmulticast mode [ 375.291567][ T3003] bridge_slave_0: left promiscuous mode [ 375.298598][ T3003] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.795479][ T3003] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 375.808074][ T3003] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 375.818810][ T3003] bond0 (unregistering): Released all slaves [ 375.963201][ T9506] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.970659][ T9506] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.979230][ T9506] bridge_slave_0: entered allmulticast mode [ 375.988778][ T9506] bridge_slave_0: entered promiscuous mode [ 376.105446][ T9506] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.113646][ T9534] netlink: 4 bytes leftover after parsing attributes in process `syz.1.907'. [ 376.122970][ T9506] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.145268][ T9506] bridge_slave_1: entered allmulticast mode [ 376.152646][ T9506] bridge_slave_1: entered promiscuous mode [ 376.903435][ T4614] Bluetooth: hci0: command tx timeout [ 377.655409][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 377.680395][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 377.689798][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 377.703197][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 377.712566][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 377.720517][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 378.627045][ T9506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 378.640769][ T9506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 378.711035][ T3003] hsr_slave_0: left promiscuous mode [ 378.730095][ T3003] hsr_slave_1: left promiscuous mode [ 378.774163][ T3003] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 378.781749][ T3003] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 378.835963][ T3003] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 378.864426][ T3003] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 378.898420][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.905043][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.957180][ T3003] veth1_macvtap: left promiscuous mode [ 378.974210][ T4614] Bluetooth: hci0: command tx timeout [ 379.011063][ T3003] veth0_macvtap: left promiscuous mode [ 379.017337][ T3003] veth1_vlan: left promiscuous mode [ 379.022908][ T3003] veth0_vlan: left promiscuous mode [ 379.775140][ T4614] Bluetooth: hci4: command tx timeout [ 379.826826][ T3003] team0 (unregistering): Port device team_slave_1 removed [ 379.894698][ T3003] team0 (unregistering): Port device team_slave_0 removed [ 380.748028][ T9506] team0: Port device team_slave_0 added [ 380.777971][ T9506] team0: Port device team_slave_1 added [ 381.055423][ T4614] Bluetooth: hci0: command tx timeout [ 381.106781][ T9506] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.113766][ T9506] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.205984][ T9506] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 381.244110][ T9506] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 381.251090][ T9506] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.283539][ T9506] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.469761][ T9506] hsr_slave_0: entered promiscuous mode [ 381.512420][ T9506] hsr_slave_1: entered promiscuous mode [ 381.854136][ T4614] Bluetooth: hci4: command tx timeout [ 382.101008][ T3003] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.181105][ T9557] chnl_net:caif_netlink_parms(): no params data found [ 382.547150][ T9624] xt_CT: No such helper "syz0" [ 383.204209][ T4614] Bluetooth: hci0: command tx timeout [ 383.516084][ T3003] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.886166][ T3003] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.944045][ T4614] Bluetooth: hci4: command tx timeout [ 383.970694][ T9646] syz_tun: entered promiscuous mode [ 384.016945][ T9646] syz_tun: left promiscuous mode [ 384.138632][ T9650] netlink: 48 bytes leftover after parsing attributes in process `syz.0.938'. [ 384.306590][ T3003] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.834392][ T9557] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.841594][ T9557] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.975930][ T9557] bridge_slave_0: entered allmulticast mode [ 385.000305][ T9557] bridge_slave_0: entered promiscuous mode [ 385.039451][ T9557] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.067694][ T9557] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.088235][ T9557] bridge_slave_1: entered allmulticast mode [ 385.107612][ T9557] bridge_slave_1: entered promiscuous mode [ 385.289216][ T9557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 385.465370][ T9557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 385.785327][ T3003] bridge_slave_1: left allmulticast mode [ 385.804158][ T3003] bridge_slave_1: left promiscuous mode [ 385.816701][ T3003] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.871031][ T3003] bridge_slave_0: left allmulticast mode [ 385.897968][ T3003] bridge_slave_0: left promiscuous mode [ 385.917939][ T3003] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.015087][ T4614] Bluetooth: hci4: command tx timeout [ 386.569089][ T3003] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 386.592926][ T3003] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 386.611644][ T3003] bond0 (unregistering): Released all slaves [ 386.648902][ T9673] mac80211_hwsim hwsim33 wlan1: entered allmulticast mode [ 386.719141][ T9557] team0: Port device team_slave_0 added [ 386.765815][ T9557] team0: Port device team_slave_1 added [ 386.839510][ T9506] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 386.878308][ T9506] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 387.056573][ T9557] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 387.086719][ T9557] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 387.142816][ T9557] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 387.162101][ T9506] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 387.181983][ T9506] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 387.299236][ T9557] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 387.313345][ T9557] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 387.356874][ T9557] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 387.624429][ T3003] hsr_slave_0: left promiscuous mode [ 387.676733][ T3003] hsr_slave_1: left promiscuous mode [ 387.717465][ T3003] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 387.737166][ T3003] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 387.843388][ T3003] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 387.880172][ T3003] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 387.966990][ T3003] veth1_macvtap: left promiscuous mode [ 387.983986][ T3003] veth0_macvtap: left promiscuous mode [ 387.998312][ T3003] veth1_vlan: left promiscuous mode [ 388.020193][ T3003] veth0_vlan: left promiscuous mode [ 388.930153][ T9751] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 388.984104][ T9751] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 395.442445][ T3003] team0 (unregistering): Port device team_slave_1 removed [ 395.490582][ T3003] team0 (unregistering): Port device team_slave_0 removed [ 397.012705][ T9557] hsr_slave_0: entered promiscuous mode [ 397.063421][ T9557] hsr_slave_1: entered promiscuous mode [ 397.090153][ T9557] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 397.114375][ T9557] Cannot create hsr debugfs directory [ 397.265657][ T9822] syzkaller1: entered promiscuous mode [ 397.271249][ T9822] syzkaller1: entered allmulticast mode [ 397.374248][ T941] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 397.702290][ T941] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 397.735699][ T941] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 398.263201][ T9506] 8021q: adding VLAN 0 to HW filter on device bond0 [ 398.548228][ T9506] 8021q: adding VLAN 0 to HW filter on device team0 [ 398.702530][ T9506] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 398.740729][ T9506] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 398.854453][ T5274] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.861621][ T5274] bridge0: port 1(bridge_slave_0) entered forwarding state [ 398.870070][ T941] usb 2-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 398.889647][ T941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.897970][ T5274] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.905165][ T5274] bridge0: port 2(bridge_slave_1) entered forwarding state [ 398.915414][ T941] usb 2-1: config 0 descriptor?? [ 398.923734][ T941] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 401.711457][ T9857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.958'. [ 401.720343][ T9857] netlink: 24 bytes leftover after parsing attributes in process `syz.0.958'. [ 401.731973][ T9857] gtp0: entered promiscuous mode [ 401.736980][ T9857] gtp0: entered allmulticast mode [ 402.138943][ T9506] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 402.234704][ T5275] usb 2-1: USB disconnect, device number 25 [ 402.242597][ T9557] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 402.332306][ T9557] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 402.393613][ T9557] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 402.454643][ T9557] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 403.037508][ T9557] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.131581][ T9557] 8021q: adding VLAN 0 to HW filter on device team0 [ 403.209091][ T6946] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.216299][ T6946] bridge0: port 1(bridge_slave_0) entered forwarding state [ 404.165898][ T6946] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.173098][ T6946] bridge0: port 2(bridge_slave_1) entered forwarding state [ 404.256606][ T29] audit: type=1326 audit(1722850107.090:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9863 comm="syz.1.960" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff38cd779f9 code=0x0 [ 404.287783][ T9557] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 404.360888][ T9557] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 404.631099][ T9506] veth0_vlan: entered promiscuous mode [ 404.668029][ T9893] autofs: Bad value for 'fd' [ 404.706233][ T9506] veth1_vlan: entered promiscuous mode [ 404.755211][ T9895] netlink: 'syz.1.964': attribute type 1 has an invalid length. [ 404.774624][ T9895] netlink: 20 bytes leftover after parsing attributes in process `syz.1.964'. [ 404.842575][ T9506] veth0_macvtap: entered promiscuous mode [ 404.883609][ T9506] veth1_macvtap: entered promiscuous mode [ 404.952203][ T9506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.003595][ T9506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.284094][ T9506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.054655][ T5275] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 406.079900][ T9506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.107743][ T9506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.230492][ T9506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.309322][ T5275] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 406.682363][ T5275] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 406.696033][ T5275] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 406.707410][ T5275] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.976435][ T5275] usb 2-1: config 0 descriptor?? [ 407.063301][ T9506] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 407.126164][ T9506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.294021][ T9506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.369956][ T9506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.380848][ T9506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.391338][ T9506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.402013][ T9506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.413450][ T9506] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 407.449606][ T9911] netlink: 'syz.0.969': attribute type 10 has an invalid length. [ 407.506668][ T9911] batman_adv: batadv0: Adding interface: team0 [ 407.520536][ T9911] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.561202][ T9911] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 407.592526][ T9913] netlink: 'syz.0.969': attribute type 10 has an invalid length. [ 407.606590][ T9913] netlink: 2 bytes leftover after parsing attributes in process `syz.0.969'. [ 407.622136][ T9913] team0: entered promiscuous mode [ 407.628215][ T9913] team_slave_0: entered promiscuous mode [ 407.644399][ T9913] team_slave_1: entered promiscuous mode [ 407.662142][ T9913] 8021q: adding VLAN 0 to HW filter on device team0 [ 407.673432][ T9913] batman_adv: batadv0: Interface activated: team0 [ 407.688794][ T9913] batman_adv: batadv0: Interface deactivated: team0 [ 407.696100][ T9913] batman_adv: batadv0: Removing interface: team0 [ 407.707079][ T9913] bridge0: port 3(team0) entered blocking state [ 407.716139][ T9913] bridge0: port 3(team0) entered disabled state [ 407.729251][ T9913] team0: entered allmulticast mode [ 407.735723][ T9913] team_slave_0: entered allmulticast mode [ 407.744457][ T9913] team_slave_1: entered allmulticast mode [ 407.772321][ T9913] bridge0: port 3(team0) entered blocking state [ 407.778732][ T9913] bridge0: port 3(team0) entered forwarding state [ 407.826429][ T9506] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.853158][ T9506] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.870463][ T9506] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.896113][ T9506] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.968819][ T9557] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 408.138425][ T3037] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.160275][ T3037] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.230913][ T9557] veth0_vlan: entered promiscuous mode [ 408.245409][ T5271] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 408.258045][ T2918] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.277531][ T2918] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.289645][ T9557] veth1_vlan: entered promiscuous mode [ 408.376367][ T9557] veth0_macvtap: entered promiscuous mode [ 408.405767][ T9557] veth1_macvtap: entered promiscuous mode [ 408.454099][ T5271] usb 1-1: Using ep0 maxpacket: 8 [ 408.475790][ T5271] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 408.483083][ T9557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.496846][ T9557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.505049][ T5271] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 408.507569][ T9557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.539051][ T5271] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 408.544219][ T9557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.554286][ T5271] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 408.562998][ T9557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.576669][ T5271] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 408.580342][ T9557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.602684][ T9557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.613326][ T5271] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 408.614815][ T9557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.630373][ T5271] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.635455][ T9557] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 408.671211][ T9557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.708071][ T5275] uclogic 0003:256C:006D.0010: interface is invalid, ignoring [ 408.713922][ T9557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.736820][ T9557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.755188][ T9557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.776225][ T9557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.795466][ T9557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.813530][ T9557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.830780][ T9557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.868083][ T9557] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 408.902783][ T5271] usb 1-1: usb_control_msg returned -32 [ 408.910870][ T5271] usbtmc 1-1:16.0: can't read capabilities [ 408.970085][ T5275] usb 2-1: USB disconnect, device number 26 [ 408.995142][ T9557] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.005109][ T9557] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.013793][ T9557] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.022914][ T9557] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.115729][ T2508] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.143453][ T2508] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.211194][ T2918] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.308642][ T3037] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.340664][ T3037] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.516211][ T2918] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.597058][ T2918] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.662913][ T9933] usbtmc 1-1:16.0: usb_control_msg returned -32 [ 409.708902][ T2918] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.869052][ T2918] bridge_slave_1: left allmulticast mode [ 409.878910][ T5273] usb 1-1: USB disconnect, device number 19 [ 409.964891][ T2918] bridge_slave_1: left promiscuous mode [ 409.994649][ T2918] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.076543][ T2918] bridge_slave_0: left allmulticast mode [ 410.112064][ T2918] bridge_slave_0: left promiscuous mode [ 410.124097][ T2918] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.345149][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 411.356756][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 411.365054][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 411.373056][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 411.391699][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 411.404233][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 411.702439][ T2918] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 411.713555][ T2918] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 411.727865][ T2918] bond0 (unregistering): Released all slaves [ 412.134828][ T2918] hsr_slave_0: left promiscuous mode [ 412.141337][ T2918] hsr_slave_1: left promiscuous mode [ 412.155279][ T2918] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 412.162709][ T2918] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 412.182255][ T2918] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 412.201717][ T2918] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 412.240486][ T2918] veth1_macvtap: left promiscuous mode [ 412.252467][ T2918] veth0_macvtap: left promiscuous mode [ 412.260163][ T2918] veth1_vlan: left promiscuous mode [ 412.272009][ T2918] veth0_vlan: left promiscuous mode [ 413.063999][ T5275] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 413.126178][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 413.136949][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 413.146900][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 413.170394][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 413.178599][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 413.179061][ T2918] team0 (unregistering): Port device team_slave_1 removed [ 413.195130][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 413.244094][ T5275] usb 2-1: Using ep0 maxpacket: 32 [ 413.253704][ T5275] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 413.263239][ T5275] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.271625][ T5275] usb 2-1: Product: syz [ 413.276463][ T5275] usb 2-1: Manufacturer: syz [ 413.294004][ T5275] usb 2-1: SerialNumber: syz [ 413.301215][ T5275] usb 2-1: config 0 descriptor?? [ 413.344829][ T2918] team0 (unregistering): Port device team_slave_0 removed [ 413.457210][ T4614] Bluetooth: hci0: command tx timeout [ 413.555398][ T5275] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: version d4.15 found at bus 002 address 027 [ 413.598429][ T29] audit: type=1326 audit(1722850116.430:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9992 comm="syz.0.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3621779f9 code=0x7ffc0000 [ 413.643454][ T29] audit: type=1326 audit(1722850116.450:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9992 comm="syz.0.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3621779f9 code=0x7ffc0000 [ 413.796662][ T29] audit: type=1326 audit(1722850116.450:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9992 comm="syz.0.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fb3621779f9 code=0x7ffc0000 [ 413.819130][ T29] audit: type=1326 audit(1722850116.450:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9992 comm="syz.0.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3621779f9 code=0x7ffc0000 [ 413.841739][ T29] audit: type=1326 audit(1722850116.450:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9992 comm="syz.0.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7fb3621779f9 code=0x7ffc0000 [ 413.863780][ T29] audit: type=1326 audit(1722850116.450:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9992 comm="syz.0.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3621779f9 code=0x7ffc0000 [ 414.301604][ T29] audit: type=1326 audit(1722850116.450:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9992 comm="syz.0.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3621779f9 code=0x7ffc0000 [ 414.325078][ T29] audit: type=1326 audit(1722850116.450:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9992 comm="syz.0.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb3621779f9 code=0x7ffc0000 [ 414.401477][ T29] audit: type=1326 audit(1722850116.450:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9992 comm="syz.0.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3621779f9 code=0x7ffc0000 [ 414.636248][ T29] audit: type=1326 audit(1722850116.470:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9992 comm="syz.0.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb3621779f9 code=0x7ffc0000 [ 415.221232][ T9980] netlink: 8 bytes leftover after parsing attributes in process `syz.3.977'. [ 415.239543][ T941] usb 2-1: USB disconnect, device number 27 [ 415.294717][ T4614] Bluetooth: hci4: command tx timeout [ 415.309576][ T9952] chnl_net:caif_netlink_parms(): no params data found [ 415.533993][ T4614] Bluetooth: hci0: command tx timeout [ 415.736294][ T5273] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 415.750200][ T9952] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.772690][ T9952] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.796298][ T9952] bridge_slave_0: entered allmulticast mode [ 415.803557][ T9952] bridge_slave_0: entered promiscuous mode [ 415.852027][ T9952] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.878868][ T9952] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.894261][ T9952] bridge_slave_1: entered allmulticast mode [ 415.915489][ T9952] bridge_slave_1: entered promiscuous mode [ 415.954439][ T5273] usb 4-1: Using ep0 maxpacket: 16 [ 415.970660][ T5273] usb 4-1: config 0 has no interfaces? [ 416.007121][ T5273] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=d8.08 [ 416.038746][ T5273] usb 4-1: New USB device strings: Mfr=40, Product=98, SerialNumber=3 [ 416.094123][ T5273] usb 4-1: Product: syz [ 416.098330][ T5273] usb 4-1: Manufacturer: syz [ 416.102938][ T5273] usb 4-1: SerialNumber: syz [ 416.165997][ T5273] usb 4-1: config 0 descriptor?? [ 416.306906][ T9952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 416.336967][ T9952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 416.506965][T10002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.564364][T10002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.631831][ T5222] usb 4-1: USB disconnect, device number 27 [ 416.671504][ T2918] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.916243][ T2918] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.112086][ T2918] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.290676][ T2918] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.612433][ T4614] Bluetooth: hci4: command tx timeout [ 417.624144][ T4614] Bluetooth: hci0: command tx timeout [ 419.594735][ T9952] team0: Port device team_slave_0 added [ 419.674693][ T9989] chnl_net:caif_netlink_parms(): no params data found [ 419.694211][ T4614] Bluetooth: hci0: command tx timeout [ 419.694261][ T54] Bluetooth: hci4: command tx timeout [ 419.741728][ T9952] team0: Port device team_slave_1 added [ 419.940682][T10044] netlink: 'syz.1.987': attribute type 5 has an invalid length. [ 420.044859][ T9952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 420.051872][ T9952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.080258][ T9952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 420.127483][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 420.127501][ T29] audit: type=1326 audit(1722850122.960:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10043 comm="syz.1.987" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff38cd779f9 code=0x0 [ 420.233811][T10049] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 420.240456][T10049] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 420.285496][ T9952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 420.292650][ T9952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.367298][T10049] vhci_hcd vhci_hcd.0: Device attached [ 420.436941][ T9952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 420.564086][ T941] vhci_hcd: vhci_device speed not set [ 420.634002][ T941] usb 11-1: new full-speed USB device number 2 using vhci_hcd [ 420.653450][ T9989] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.688910][ T9989] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.824356][ T9989] bridge_slave_0: entered allmulticast mode [ 420.845514][ T9989] bridge_slave_0: entered promiscuous mode [ 420.992353][T10076] vxfs: WRONG superblock magic 00000000 at 1 [ 420.999969][T10076] vxfs: WRONG superblock magic 00000000 at 8 [ 421.006527][T10076] vxfs: can't find superblock. [ 421.649562][ T9952] hsr_slave_0: entered promiscuous mode [ 421.684412][ T9952] hsr_slave_1: entered promiscuous mode [ 421.787656][ T54] Bluetooth: hci4: command tx timeout [ 421.879927][ T5274] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 421.914908][T10060] vhci_hcd: connection closed [ 421.920891][T10049] netlink: 'syz.1.987': attribute type 1 has an invalid length. [ 421.927786][ T2508] vhci_hcd: stop threads [ 421.948445][T10049] netlink: 4 bytes leftover after parsing attributes in process `syz.1.987'. [ 421.990827][ T2508] vhci_hcd: release socket [ 421.997398][T10049] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 422.009280][ T2508] vhci_hcd: disconnect device [ 422.026528][T10049] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 422.058481][T10049] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 422.084153][T10049] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 422.094021][ T5274] usb 1-1: Using ep0 maxpacket: 8 [ 422.101306][ T5274] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 422.143911][ T5274] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 422.186990][ T9989] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.194381][ T5274] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 422.224228][ T9989] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.231483][ T5274] usb 1-1: New USB device found, idVendor=1608, idProduct=0207, bcdDevice=43.8e [ 422.234468][ T9989] bridge_slave_1: entered allmulticast mode [ 422.263951][ T5274] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.283206][ T5274] usb 1-1: config 0 descriptor?? [ 422.288324][ T9989] bridge_slave_1: entered promiscuous mode [ 422.322382][ T5274] io_ti 1-1:0.0: required endpoints missing [ 422.463381][ T2918] bridge_slave_1: left allmulticast mode [ 422.476425][ T2918] bridge_slave_1: left promiscuous mode [ 422.486846][ T2918] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.510538][ T2918] bridge_slave_0: left allmulticast mode [ 422.521105][ T2918] bridge_slave_0: left promiscuous mode [ 422.531177][ T2918] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.629357][ T5274] usb 1-1: USB disconnect, device number 20 [ 422.720740][T10092] delete_channel: no stack [ 423.038570][T10100] ================================================================== [ 423.046685][T10100] BUG: KASAN: slab-use-after-free in uprobe_mmap+0xb9a/0x11a0 [ 423.054170][T10100] Read of size 8 at addr ffff88802bcdb830 by task syz.1.1000/10100 [ 423.062067][T10100] [ 423.064403][T10100] CPU: 1 UID: 0 PID: 10100 Comm: syz.1.1000 Not tainted 6.11.0-rc2-syzkaller #0 [ 423.073431][T10100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 423.083657][T10100] Call Trace: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 423.086923][T10100] [ 423.089843][T10100] dump_stack_lvl+0x241/0x360 [ 423.094544][T10100] ? __pfx_dump_stack_lvl+0x10/0x10 [ 423.099769][T10100] ? __pfx__printk+0x10/0x10 [ 423.104643][T10100] ? _printk+0xd5/0x120 [ 423.108814][T10100] ? __virt_addr_valid+0x183/0x530 [ 423.113933][T10100] ? __virt_addr_valid+0x183/0x530 [ 423.119050][T10100] print_report+0x169/0x550 [ 423.123567][T10100] ? __virt_addr_valid+0x183/0x530 [ 423.128698][T10100] ? __virt_addr_valid+0x183/0x530 [ 423.133819][T10100] ? __virt_addr_valid+0x45f/0x530 [ 423.138938][T10100] ? __phys_addr+0xba/0x170 [ 423.143449][T10100] ? uprobe_mmap+0xb9a/0x11a0 [ 423.148133][T10100] kasan_report+0x143/0x180 [ 423.152634][T10100] ? uprobe_mmap+0xb9a/0x11a0 [ 423.157302][T10100] uprobe_mmap+0xb9a/0x11a0 [ 423.161817][T10100] ? __pfx_uprobe_mmap+0x10/0x10 [ 423.166758][T10100] mmap_region+0x1891/0x2090 [ 423.171348][T10100] ? mark_lock+0x9a/0x350 [ 423.175685][T10100] ? __pfx_mmap_region+0x10/0x10 [ 423.180707][T10100] ? mm_get_unmapped_area+0xa5/0xd0 [ 423.185906][T10100] ? shmem_get_unmapped_area+0x2a7/0x8f0 [ 423.191535][T10100] ? cap_mmap_addr+0x163/0x2c0 [ 423.196299][T10100] ? __get_unmapped_area+0x2f0/0x360 [ 423.201574][T10100] do_mmap+0x8f9/0x1010 [ 423.205726][T10100] ? __pfx_do_mmap+0x10/0x10 [ 423.210300][T10100] ? __pfx_down_write_killable+0x10/0x10 [ 423.215914][T10100] ? __pfx_ima_file_mmap+0x10/0x10 [ 423.221015][T10100] ? security_mmap_file+0x178/0x1a0 [ 423.226204][T10100] vm_mmap_pgoff+0x1dd/0x3d0 [ 423.230781][T10100] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 423.235879][T10100] ? __fget_files+0x29/0x470 [ 423.240453][T10100] ? __fget_files+0x3f6/0x470 [ 423.245119][T10100] ksys_mmap_pgoff+0x4f1/0x720 [ 423.249869][T10100] ? __x64_sys_mmap+0x7f/0x140 [ 423.254635][T10100] do_syscall_64+0xf3/0x230 [ 423.259130][T10100] ? clear_bhb_loop+0x35/0x90 [ 423.263793][T10100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.269694][T10100] RIP: 0033:0x7ff38cd779f9 [ 423.274104][T10100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 423.293711][T10100] RSP: 002b:00007ff38db2e048 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 423.302300][T10100] RAX: ffffffffffffffda RBX: 00007ff38cf05f80 RCX: 00007ff38cd779f9 [ 423.310266][T10100] RDX: 0000000000000001 RSI: 0000000000003000 RDI: 0000000020000000 [ 423.318222][T10100] RBP: 00007ff38cde58ee R08: 0000000000000005 R09: 0000000000000000 [ 423.326183][T10100] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000000 [ 423.334140][T10100] R13: 000000000000000b R14: 00007ff38cf05f80 R15: 00007ffee54a81b8 [ 423.342106][T10100] [ 423.345113][T10100] [ 423.347423][T10100] Allocated by task 9506: [ 423.351817][T10100] kasan_save_track+0x3f/0x80 [ 423.356486][T10100] __kasan_kmalloc+0x98/0xb0 [ 423.361062][T10100] __kmalloc_node_track_caller_noprof+0x225/0x440 [ 423.367554][T10100] kmemdup_noprof+0x2a/0x60 [ 423.372043][T10100] sctp_addr_wq_mgmt+0x2f8/0x720 [ 423.376967][T10100] sctp_inetaddr_event+0x41c/0x600 [ 423.382066][T10100] notifier_call_chain+0x19f/0x3e0 [ 423.387167][T10100] blocking_notifier_call_chain+0x69/0x90 [ 423.392873][T10100] __inet_insert_ifa+0x9d4/0xc30 [ 423.397801][T10100] inet_rtm_newaddr+0xbda/0x1af0 [ 423.402726][T10100] rtnetlink_rcv_msg+0x73f/0xcf0 [ 423.407655][T10100] netlink_rcv_skb+0x1e3/0x430 [ 423.412408][T10100] netlink_unicast+0x7f0/0x990 [ 423.417161][T10100] netlink_sendmsg+0x8e4/0xcb0 [ 423.421908][T10100] __sock_sendmsg+0x221/0x270 [ 423.426575][T10100] __sys_sendto+0x3a4/0x4f0 [ 423.431062][T10100] __x64_sys_sendto+0xde/0x100 [ 423.435809][T10100] do_syscall_64+0xf3/0x230 [ 423.440299][T10100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.446185][T10100] [ 423.448491][T10100] Freed by task 9893: [ 423.452458][T10100] kasan_save_track+0x3f/0x80 [ 423.457121][T10100] kasan_save_free_info+0x40/0x50 [ 423.462134][T10100] poison_slab_object+0xe0/0x150 [ 423.467057][T10100] __kasan_slab_free+0x37/0x60 [ 423.471804][T10100] kfree+0x149/0x360 [ 423.475686][T10100] sctp_addr_wq_timeout_handler+0x2e6/0x470 [ 423.481653][T10100] call_timer_fn+0x18e/0x650 [ 423.486231][T10100] __run_timer_base+0x66a/0x8e0 [ 423.491075][T10100] run_timer_softirq+0xb7/0x170 [ 423.495913][T10100] handle_softirqs+0x2c4/0x970 [ 423.500663][T10100] __irq_exit_rcu+0xf4/0x1c0 [ 423.505240][T10100] irq_exit_rcu+0x9/0x30 [ 423.509471][T10100] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 423.515093][T10100] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 423.521059][T10100] [ 423.523375][T10100] The buggy address belongs to the object at ffff88802bcdb800 [ 423.523375][T10100] which belongs to the cache kmalloc-64 of size 64 [ 423.537245][T10100] The buggy address is located 48 bytes inside of [ 423.537245][T10100] freed 64-byte region [ffff88802bcdb800, ffff88802bcdb840) [ 423.550853][T10100] [ 423.553161][T10100] The buggy address belongs to the physical page: [ 423.559582][T10100] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88802bcdbc80 pfn:0x2bcdb [ 423.569729][T10100] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff) [ 423.577804][T10100] page_type: 0xfdffffff(slab) [ 423.582487][T10100] raw: 00fff00000000200 ffff8880154418c0 ffffea0000af37d0 ffffea000073ca90 [ 423.591066][T10100] raw: ffff88802bcdbc80 0000000000200014 00000001fdffffff 0000000000000000 [ 423.599724][T10100] page dumped because: kasan: bad access detected [ 423.606133][T10100] page_owner tracks the page as allocated [ 423.611828][T10100] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 3003, tgid 3003 (kworker/u8:14), ts 12066575423, free_ts 0 [ 423.630308][T10100] post_alloc_hook+0x1f3/0x230 [ 423.635063][T10100] get_page_from_freelist+0x2e4c/0x2f10 [ 423.640597][T10100] __alloc_pages_noprof+0x256/0x6c0 [ 423.645874][T10100] alloc_slab_page+0x5f/0x120 [ 423.650538][T10100] allocate_slab+0x5a/0x2f0 [ 423.655025][T10100] ___slab_alloc+0xcd1/0x14b0 [ 423.659692][T10100] __slab_alloc+0x58/0xa0 [ 423.664008][T10100] __kmalloc_cache_node_noprof+0x20c/0x300 [ 423.669803][T10100] __get_vm_area_node+0x113/0x270 [ 423.674817][T10100] __vmalloc_node_range_noprof+0x3bc/0x1460 [ 423.680701][T10100] dup_task_struct+0x444/0x8c0 [ 423.685476][T10100] copy_process+0x5d1/0x3dc0 [ 423.690053][T10100] kernel_clone+0x223/0x870 [ 423.694546][T10100] user_mode_thread+0x132/0x1a0 [ 423.699388][T10100] call_usermodehelper_exec_work+0x5c/0x230 [ 423.705275][T10100] process_scheduled_works+0xa2c/0x1830 [ 423.710808][T10100] page_owner free stack trace missing [ 423.716157][T10100] [ 423.718464][T10100] Memory state around the buggy address: [ 423.724073][T10100] ffff88802bcdb700: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 423.732114][T10100] ffff88802bcdb780: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 423.740156][T10100] >ffff88802bcdb800: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 423.748212][T10100] ^ [ 423.753836][T10100] ffff88802bcdb880: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 423.761895][T10100] ffff88802bcdb900: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 423.769937][T10100] ================================================================== [ 423.799947][T10100] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 423.807171][T10100] CPU: 1 UID: 0 PID: 10100 Comm: syz.1.1000 Not tainted 6.11.0-rc2-syzkaller #0 [ 423.816202][T10100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 423.826268][T10100] Call Trace: [ 423.829556][T10100] [ 423.832493][T10100] dump_stack_lvl+0x241/0x360 [ 423.837193][T10100] ? __pfx_dump_stack_lvl+0x10/0x10 [ 423.842421][T10100] ? __pfx__printk+0x10/0x10 [ 423.847041][T10100] ? preempt_schedule+0xe1/0xf0 [ 423.851904][T10100] ? vscnprintf+0x5d/0x90 [ 423.856247][T10100] panic+0x349/0x860 [ 423.860162][T10100] ? check_panic_on_warn+0x21/0xb0 [ 423.865283][T10100] ? __pfx_panic+0x10/0x10 [ 423.869717][T10100] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 423.875705][T10100] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 423.882048][T10100] ? print_report+0x502/0x550 [ 423.886740][T10100] check_panic_on_warn+0x86/0xb0 [ 423.891694][T10100] ? uprobe_mmap+0xb9a/0x11a0 [ 423.896382][T10100] end_report+0x77/0x160 [ 423.900642][T10100] kasan_report+0x154/0x180 [ 423.905159][T10100] ? uprobe_mmap+0xb9a/0x11a0 [ 423.909830][T10100] uprobe_mmap+0xb9a/0x11a0 [ 423.914327][T10100] ? __pfx_uprobe_mmap+0x10/0x10 [ 423.919251][T10100] mmap_region+0x1891/0x2090 [ 423.923828][T10100] ? mark_lock+0x9a/0x350 [ 423.928159][T10100] ? __pfx_mmap_region+0x10/0x10 [ 423.933083][T10100] ? mm_get_unmapped_area+0xa5/0xd0 [ 423.938270][T10100] ? shmem_get_unmapped_area+0x2a7/0x8f0 [ 423.943888][T10100] ? cap_mmap_addr+0x163/0x2c0 [ 423.948642][T10100] ? __get_unmapped_area+0x2f0/0x360 [ 423.953921][T10100] do_mmap+0x8f9/0x1010 [ 423.958080][T10100] ? __pfx_do_mmap+0x10/0x10 [ 423.962658][T10100] ? __pfx_down_write_killable+0x10/0x10 [ 423.968277][T10100] ? __pfx_ima_file_mmap+0x10/0x10 [ 423.973418][T10100] ? security_mmap_file+0x178/0x1a0 [ 423.978615][T10100] vm_mmap_pgoff+0x1dd/0x3d0 [ 423.983199][T10100] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 423.988302][T10100] ? __fget_files+0x29/0x470 [ 423.992878][T10100] ? __fget_files+0x3f6/0x470 [ 423.997546][T10100] ksys_mmap_pgoff+0x4f1/0x720 [ 424.002304][T10100] ? __x64_sys_mmap+0x7f/0x140 [ 424.007064][T10100] do_syscall_64+0xf3/0x230 [ 424.011559][T10100] ? clear_bhb_loop+0x35/0x90 [ 424.016221][T10100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.022108][T10100] RIP: 0033:0x7ff38cd779f9 [ 424.026513][T10100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 424.046194][T10100] RSP: 002b:00007ff38db2e048 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 424.054595][T10100] RAX: ffffffffffffffda RBX: 00007ff38cf05f80 RCX: 00007ff38cd779f9 [ 424.062562][T10100] RDX: 0000000000000001 RSI: 0000000000003000 RDI: 0000000020000000 [ 424.070520][T10100] RBP: 00007ff38cde58ee R08: 0000000000000005 R09: 0000000000000000 [ 424.078474][T10100] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000000 [ 424.086434][T10100] R13: 000000000000000b R14: 00007ff38cf05f80 R15: 00007ffee54a81b8 [ 424.094401][T10100] [ 424.097629][T10100] Kernel Offset: disabled [ 424.101936][T10100] Rebooting in 86400 seconds..