last executing test programs: 3m7.327882079s ago: executing program 3 (id=410): syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) r0 = socket(0x18, 0x3, 0x0) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x2, @local, 'tunl0\x00'}}, 0x1e) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x146b, 0x902, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) 3m5.06008357s ago: executing program 3 (id=421): r0 = syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)={0xe000202b}) epoll_pwait(r3, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffff3, 0x0, 0x0) r4 = dup3(r1, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000300)={0x200f}) 3m4.317241743s ago: executing program 3 (id=426): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @local}}}}}}, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe000031f, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) 3m3.849692603s ago: executing program 3 (id=428): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002600)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) inotify_init() r2 = accept$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000006100), 0x49f, 0x0, 0x0) 3m3.298919404s ago: executing program 3 (id=432): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f00000000c0)={[{@dyn}]}) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 3m2.946391333s ago: executing program 3 (id=434): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) lsetxattr$security_capability(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') creat(&(0x7f0000000140)='./file0\x00', 0x0) 2m47.741334503s ago: executing program 32 (id=434): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) lsetxattr$security_capability(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') creat(&(0x7f0000000140)='./file0\x00', 0x0) 1m47.395779822s ago: executing program 0 (id=227): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f00000003c0)="66b9170101c00f320f790ff264d9f0ba4300b85600ef0f01c2b879008ee00f0daa040066b94209000066b80800000066ba000000000f3026d96d0066b8603a00000f23c00f21f8663502000e000f23f8", 0x50}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m27.863701432s ago: executing program 0 (id=227): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f00000003c0)="66b9170101c00f320f790ff264d9f0ba4300b85600ef0f01c2b879008ee00f0daa040066b94209000066b80800000066ba000000000f3026d96d0066b8603a00000f23c00f21f8663502000e000f23f8", 0x50}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m12.959857639s ago: executing program 0 (id=227): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f00000003c0)="66b9170101c00f320f790ff264d9f0ba4300b85600ef0f01c2b879008ee00f0daa040066b94209000066b80800000066ba000000000f3026d96d0066b8603a00000f23c00f21f8663502000e000f23f8", 0x50}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 58.374463887s ago: executing program 0 (id=227): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f00000003c0)="66b9170101c00f320f790ff264d9f0ba4300b85600ef0f01c2b879008ee00f0daa040066b94209000066b80800000066ba000000000f3026d96d0066b8603a00000f23c00f21f8663502000e000f23f8", 0x50}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 42.080311172s ago: executing program 0 (id=227): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f00000003c0)="66b9170101c00f320f790ff264d9f0ba4300b85600ef0f01c2b879008ee00f0daa040066b94209000066b80800000066ba000000000f3026d96d0066b8603a00000f23c00f21f8663502000e000f23f8", 0x50}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14.189888507s ago: executing program 0 (id=227): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f00000003c0)="66b9170101c00f320f790ff264d9f0ba4300b85600ef0f01c2b879008ee00f0daa040066b94209000066b80800000066ba000000000f3026d96d0066b8603a00000f23c00f21f8663502000e000f23f8", 0x50}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.236647648s ago: executing program 4 (id=1341): userfaultfd(0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) rt_sigprocmask(0x5, 0x0, 0x0, 0x0) inotify_init() r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r0, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x2, 0x4, 0x0, 0x7, 0x5, 0x0, 0x70bd29, 0x25dfdbfb, [@sadb_x_nat_t_port={0x1, 0x15, 0x4e22}, @sadb_sa={0x2, 0x1, 0x4d2, 0x2, 0x7, 0x8, 0x4, 0x80000000}]}, 0x28}}, 0x4008000) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) 6.006745269s ago: executing program 4 (id=1344): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r2, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x0) 3.68817259s ago: executing program 4 (id=1355): open$dir(&(0x7f0000000080)='./file0\x00', 0xa440, 0x82) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x3) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x8000}) r3 = dup(r2) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x1010040, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 3.586047733s ago: executing program 1 (id=1356): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) symlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/file0\x00') read$FUSE(r0, &(0x7f000000e280)={0x2020, 0x0, 0x0, 0x0}, 0x2020) fspick(0xffffffffffffff9c, &(0x7f0000000100)='./file0/../file0/file0/file0\x00', 0x1) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x90, 0x0, 0x4, {0x0, 0x0, 0x9d3, 0x3, 0x8, 0x2, {0x5, 0x8000000002, 0x81, 0x7fff, 0xffff, 0x1, 0x1, 0x7ff, 0x60, 0x1000, 0xfffd, r2, 0x0, 0xc7fa, 0x800002}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x90, 0xfffffffffffffffe, 0x5, {0x6, 0x3, 0x2, 0x4, 0x401, 0x10, {0x4, 0x5, 0x5, 0xf4f7, 0x0, 0x2, 0x6, 0x1, 0x7, 0x6000, 0x6791, r2, 0xffffffffffffffff, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.457905484s ago: executing program 5 (id=1357): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000540)=@filter={'filter\x00', 0xe, 0x1, 0x1a8, [], 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"]}, 0x1b2) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x7, 0x6], 0x0, 0x80}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$NFC_CMD_LLC_SDREQ(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x90) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.248779134s ago: executing program 1 (id=1359): r0 = landlock_create_ruleset(&(0x7f0000000080)={0x8601, 0x2}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = syz_io_uring_setup(0x1237, &(0x7f0000000380)={0x0, 0x80fd, 0x80, 0x0, 0x2cc}, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r1, 0x0, 0x0}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) dup2(r5, r1) 3.240128253s ago: executing program 4 (id=1360): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000a61a7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1a01000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000600)={0x24, &(0x7f0000000480)={0x40, 0x19, 0x6, {0x6, 0x3, "6e1bb32e"}}, 0x0, 0x0, 0x0}, 0x0) 3.23914171s ago: executing program 5 (id=1361): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x1a2e, &(0x7f00000002c0)={0x0, 0x4533, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f00000000c0)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) readv(r5, &(0x7f0000000080)=[{&(0x7f0000000140)=""/135, 0x87}], 0x1) 2.931593592s ago: executing program 5 (id=1362): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x8, 0xdd, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 2.830358511s ago: executing program 2 (id=1363): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newtfilter={0x44, 0x28, 0xd27, 0x1004001, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x14, 0x2, [@TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x810}, 0x48c0) 2.664532299s ago: executing program 5 (id=1364): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="0fba3d00000000b00f659d8000c0fe66b893000f00d066f40f791964f0806d8c5b0f232e8158da9ef05bddc4c1216ad0c4c17c50ef", 0x35}], 0x1, 0x4c, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.447968167s ago: executing program 5 (id=1365): syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) syz_io_uring_setup(0x10f, &(0x7f0000000440)={0x0, 0x242, 0x0, 0x2}, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0xe8e80) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) epoll_create1(0x0) r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x10, 0x7fffffff}, 0x0, 0x0) 2.44652334s ago: executing program 2 (id=1366): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 2.22819252s ago: executing program 5 (id=1367): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x498, &(0x7f0000000200)={0x0, 0x7279, 0x0, 0x4, 0x125}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 2.203599841s ago: executing program 2 (id=1368): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_IOCTL(r2, &(0x7f0000000140)={0x7, 0x0, 0x0, {0x80, 0x4, 0x220800, 0x8}}, 0x20) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) 1.946965107s ago: executing program 1 (id=1369): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r2, 0xee01) getpid() read$FUSE(r0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 1.904180063s ago: executing program 2 (id=1370): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local, @remote, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@timestamp_prespec={0x44, 0x4, 0x22, 0x3, 0x9}]}}, {{0xfffc, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 1.362526231s ago: executing program 1 (id=1371): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1}, 0x18) r2 = fcntl$dupfd(r0, 0x406, r0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x106, 0x3}}, 0x20) r3 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7279, 0x0, 0x4, 0x18e}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x100}}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 1.100586738s ago: executing program 4 (id=1372): mkdir(0x0, 0x0) chdir(0x0) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xd, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {0x0, 0x0, 0x0, 0x3, 0x4}}, 0x48) write$UHID_INPUT(r0, &(0x7f0000001300)={0x8, {"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", 0x1000}}, 0x1006) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45a], 0x0, 0x0, 0x1, 0x1}}, 0x40) 520.134422ms ago: executing program 4 (id=1373): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x2, 0x2000) 519.606258ms ago: executing program 2 (id=1374): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_io_uring_setup(0x24fe, &(0x7f0000000300)={0x0, 0xf36e, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/122, 0x7a}], 0x1) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<'], 0x38}}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd_index=0x8, 0xfff, 0x0, 0x6, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) 480.895211ms ago: executing program 1 (id=1375): creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',cache=readahead']) chmod(&(0x7f0000000140)='./file0\x00', 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) 119.850645ms ago: executing program 2 (id=1376): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = userfaultfd(0x801) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) 0s ago: executing program 1 (id=1377): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x207601a}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r2, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xb0, 0x0, 0x0, [{{0x1, 0x0, 0x0, 0x2, 0x0, 0x0, {0x0, 0xce, 0x200, 0x0, 0x0, 0xd, 0x8}}, {0x0, 0x0, 0x2, 0x0, '..^\''}}]}, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.824145][ T7950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.839255][ T7950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.907844][ T1157] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.925914][ T7950] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.936745][ T7950] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.945673][ T7950] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.954798][ T7950] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.066961][ T3505] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.098818][ T3505] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.132833][ T1157] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.181968][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.193683][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.427461][ T1157] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.545885][ T30] audit: type=1326 audit(1746220949.073:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8316 comm="syz.1.628" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f21d538e969 code=0x0 [ 189.999321][ T1157] bridge_slave_1: left allmulticast mode [ 190.016513][ T1157] bridge_slave_1: left promiscuous mode [ 190.022358][ T1157] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.099382][ T1157] bridge_slave_0: left allmulticast mode [ 190.123408][ T1157] bridge_slave_0: left promiscuous mode [ 190.149993][ T1157] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.419798][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 190.433120][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 190.442250][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 190.453939][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 190.463680][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 191.223356][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 191.319232][ T1157] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 191.335728][ T1157] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 191.351758][ T1157] bond0 (unregistering): Released all slaves [ 191.394293][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 191.402149][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 191.426159][ T9] usb 3-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 191.455969][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.515074][ T9] usb 3-1: config 0 descriptor?? [ 191.532259][ T9] usb 3-1: bad CDC descriptors [ 191.545169][ T9] cdc_acm 3-1:0.0: Control and data interfaces are not separated! [ 191.554517][ T9] cdc_acm 3-1:0.0: This needs exactly 3 endpoints [ 191.563568][ T9] cdc_acm 3-1:0.0: probe with driver cdc_acm failed with error -22 [ 191.777846][ T5924] usb 3-1: USB disconnect, device number 6 [ 192.025219][ T8376] net_ratelimit: 10 callbacks suppressed [ 192.025241][ T8376] IPv4: Oversized IP packet from 172.20.20.24 [ 192.039709][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 192.046335][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 192.245900][ T1157] hsr_slave_0: left promiscuous mode [ 192.363652][ T1157] hsr_slave_1: left promiscuous mode [ 192.384893][ T1157] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.432601][ T1157] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.480164][ T1157] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.489064][ T1157] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.514714][ T5826] Bluetooth: hci2: command tx timeout [ 192.605884][ T1157] veth1_macvtap: left promiscuous mode [ 192.630555][ T1157] veth0_macvtap: left promiscuous mode [ 192.665428][ T1157] veth1_vlan: left promiscuous mode [ 192.689609][ T1157] veth0_vlan: left promiscuous mode [ 193.509818][ T8415] kvm: emulating exchange as write [ 193.724856][ T5826] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 193.735029][ T5826] Bluetooth: hci3: Injecting HCI hardware error event [ 193.742756][ T5826] Bluetooth: hci3: hardware error 0x00 [ 193.870922][ T1157] team0 (unregistering): Port device team_slave_1 removed [ 193.967182][ T1157] team0 (unregistering): Port device team_slave_0 removed [ 194.387522][ T8428] loop9: detected capacity change from 0 to 7 [ 194.402605][ T8428] loop9: [POWERTEC] p1 p2 p3 p4 [ 194.415181][ T8428] loop9: p1 start 1600481121 is beyond EOD, truncated [ 194.422608][ T8428] loop9: p2 start 4294910286 is beyond EOD, truncated [ 194.430681][ T8428] loop9: p3 size 1680801792 extends beyond EOD, truncated [ 194.467097][ T8428] loop9: p4 start 131072 is beyond EOD, truncated [ 194.576408][ T6011] udevd[6011]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 194.601220][ T5833] Bluetooth: hci2: command tx timeout [ 194.830752][ T8433] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 194.871100][ T8433] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 195.512494][ T8457] io-wq is not configured for unbound workers [ 195.779911][ T8339] chnl_net:caif_netlink_parms(): no params data found [ 195.793351][ T5826] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 196.225072][ T8339] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.256441][ T8339] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.276180][ T8339] bridge_slave_0: entered allmulticast mode [ 196.294762][ T8339] bridge_slave_0: entered promiscuous mode [ 196.315861][ T8339] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.331039][ T8339] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.350249][ T8339] bridge_slave_1: entered allmulticast mode [ 196.382097][ T8339] bridge_slave_1: entered promiscuous mode [ 196.733086][ T5826] Bluetooth: hci2: command tx timeout [ 197.067226][ T8339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.133859][ T8339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.429093][ T8339] team0: Port device team_slave_0 added [ 197.466037][ T8339] team0: Port device team_slave_1 added [ 197.533015][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 197.699491][ T8517] netlink: 4 bytes leftover after parsing attributes in process `syz.1.682'. [ 197.719820][ T10] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 197.773507][ T10] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 197.788279][ T10] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 197.808384][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.849687][ T8500] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 197.880215][ T8511] syzkaller0: entered promiscuous mode [ 197.888210][ T10] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 197.900211][ T8511] syzkaller0: entered allmulticast mode [ 197.932708][ T8339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.968360][ T8339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.026410][ T8339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.115536][ T8339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.122552][ T8339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.146288][ T3076] usb 6-1: USB disconnect, device number 2 [ 198.170638][ T8339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.763101][ T5826] Bluetooth: hci2: command tx timeout [ 199.721258][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.727883][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.816179][ T8524] warning: `syz.4.686' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 201.132714][ T8339] hsr_slave_0: entered promiscuous mode [ 201.152495][ T8339] hsr_slave_1: entered promiscuous mode [ 201.190595][ T8590] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.228689][ T8590] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.476841][ T8598] gtp0: entered promiscuous mode [ 202.816456][ T8649] netlink: 4 bytes leftover after parsing attributes in process `syz.5.705'. [ 202.854566][ T8649] netlink: 12 bytes leftover after parsing attributes in process `syz.5.705'. [ 203.276236][ T8339] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 203.318311][ T8339] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 203.360359][ T8339] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 203.463233][ T8339] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 203.837386][ T8339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.953257][ T8339] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.987005][ T3550] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.994277][ T3550] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.055009][ T3550] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.062255][ T3550] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.212229][ T8339] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 204.230210][ T8339] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 204.920801][ T8339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.415947][ T8339] veth0_vlan: entered promiscuous mode [ 205.444707][ T8339] veth1_vlan: entered promiscuous mode [ 205.610079][ T8339] veth0_macvtap: entered promiscuous mode [ 205.644772][ T8339] veth1_macvtap: entered promiscuous mode [ 205.839259][ T8339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.856816][ T8339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.903073][ T8339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.963445][ T8339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.995125][ T8339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.019151][ T8339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.029768][ T8339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.042271][ T8339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.058632][ T8339] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 206.103639][ T8339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.115602][ T8339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.147610][ T8339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.185219][ T8339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.203058][ T8339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.214096][ T8339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.223994][ T8339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.234562][ T8339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.254978][ T8339] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 206.286348][ T8339] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.308431][ T8339] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.331276][ T8339] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.350208][ T8339] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.539792][ T3505] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.559335][ T3505] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.708084][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.740803][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.913167][ T5833] Bluetooth: hci1: command 0x0406 tx timeout [ 207.221578][ T8756] netlink: 16 bytes leftover after parsing attributes in process `syz.4.733'. [ 207.234197][ T24] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 207.408020][ T24] usb 6-1: config 0 has an invalid interface number: 32 but max is 0 [ 207.455018][ T24] usb 6-1: config 0 has no interface number 0 [ 207.493346][ T24] usb 6-1: too many endpoints for config 0 interface 32 altsetting 32: 32, using maximum allowed: 30 [ 207.517759][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.533722][ T24] usb 6-1: config 0 interface 32 altsetting 32 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 207.574809][ T24] usb 6-1: config 0 interface 32 has no altsetting 0 [ 207.591704][ T24] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 207.616162][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.640759][ T24] usb 6-1: config 0 descriptor?? [ 207.750952][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.877114][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.024727][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.080545][ T24] usb 6-1: string descriptor 0 read error: -71 [ 208.109916][ T24] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 208.150317][ T24] usb 6-1: USB disconnect, device number 3 [ 208.270450][ T36] bridge_slave_1: left allmulticast mode [ 208.276384][ T36] bridge_slave_1: left promiscuous mode [ 208.282157][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.295308][ T36] bridge_slave_0: left allmulticast mode [ 208.301018][ T36] bridge_slave_0: left promiscuous mode [ 208.307347][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.751569][ T8793] loop8: detected capacity change from 0 to 7 [ 208.813210][ T8793] loop8: [CUMANA/ADFS] p1 [ADFS] p1 [ 208.840308][ T8793] loop8: partition table partially beyond EOD, truncated [ 208.884376][ T8793] loop8: p1 size 2916235312 extends beyond EOD, truncated [ 209.066139][ T6011] udevd[6011]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 209.326115][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 209.335992][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 209.358447][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 209.372801][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 209.381920][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 209.507486][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 209.539738][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.571227][ T36] bond0 (unregistering): Released all slaves [ 210.380820][ T8830] netlink: 4 bytes leftover after parsing attributes in process `syz.5.749'. [ 210.441755][ T8832] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7 [ 210.481820][ T8829] netlink: 28 bytes leftover after parsing attributes in process `syz.2.748'. [ 210.493232][ T8829] netlink: 28 bytes leftover after parsing attributes in process `syz.2.748'. [ 210.820172][ T36] hsr_slave_0: left promiscuous mode [ 210.837557][ T36] hsr_slave_1: left promiscuous mode [ 210.861972][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.875232][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.904272][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.915267][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.962244][ T36] veth1_macvtap: left promiscuous mode [ 211.014287][ T36] veth0_macvtap: left promiscuous mode [ 211.020019][ T36] veth1_vlan: left promiscuous mode [ 211.043423][ T36] veth0_vlan: left promiscuous mode [ 211.485924][ T5833] Bluetooth: hci2: command tx timeout [ 212.045655][ T5833] Bluetooth: hci4: command 0x0406 tx timeout [ 213.553350][ T5826] Bluetooth: hci2: command tx timeout [ 213.594457][ T30] audit: type=1804 audit(1746220973.133:51): pid=8892 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.767" name="/newroot/199/bus/file0" dev="overlay" ino=1098 res=1 errno=0 [ 213.840750][ T8896] block nbd4: NBD_DISCONNECT [ 213.846151][ T8896] block nbd4: Disconnected due to user request. [ 213.855239][ T8896] block nbd4: shutting down sockets [ 214.011754][ T36] team0 (unregistering): Port device team_slave_1 removed [ 214.420674][ T36] team0 (unregistering): Port device team_slave_0 removed [ 215.029258][ T8920] af_packet: tpacket_rcv: packet too big, clamped from 54 to 4294967286. macoff=82 [ 215.634169][ T5826] Bluetooth: hci2: command tx timeout [ 216.677621][ T8940] netlink: 24 bytes leftover after parsing attributes in process `syz.5.786'. [ 217.412753][ T8804] chnl_net:caif_netlink_parms(): no params data found [ 217.455392][ T8956] netlink: 256 bytes leftover after parsing attributes in process `syz.2.790'. [ 217.492011][ T8956] unsupported nlmsg_type 40 [ 217.713521][ T5826] Bluetooth: hci2: command tx timeout [ 218.319590][ T8804] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.358805][ T8804] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.367848][ T8804] bridge_slave_0: entered allmulticast mode [ 218.376136][ T8804] bridge_slave_0: entered promiscuous mode [ 218.394336][ T8977] bridge: RTM_NEWNEIGH with invalid ether address [ 218.405558][ T8804] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.433113][ T8804] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.450879][ T8804] bridge_slave_1: entered allmulticast mode [ 218.461669][ T8804] bridge_slave_1: entered promiscuous mode [ 218.683118][ T8804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.051521][ T8804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.634322][ T9005] netlink: 24 bytes leftover after parsing attributes in process `syz.2.801'. [ 219.740398][ T8804] team0: Port device team_slave_0 added [ 219.974151][ T8804] team0: Port device team_slave_1 added [ 220.250913][ T8804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.282376][ T8804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.377565][ T8804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.414286][ T9021] tipc: Started in network mode [ 220.459560][ T9021] tipc: Node identity 4000004, cluster identity 4711 [ 220.511047][ T9021] tipc: Node number set to 67108868 [ 220.562606][ T8804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.611930][ T8804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.730143][ T8804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.043059][ T5873] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 221.100154][ T8804] hsr_slave_0: entered promiscuous mode [ 221.142663][ T8804] hsr_slave_1: entered promiscuous mode [ 221.249291][ T5873] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 221.286254][ T5873] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 221.321623][ T5873] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 221.340021][ T5873] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 221.358003][ T5873] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 221.378199][ T5873] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 221.388669][ T5873] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 221.409101][ T5873] usb 6-1: Product: syz [ 221.415088][ T5873] usb 6-1: Manufacturer: syz [ 221.434033][ T24] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 221.449877][ T5873] cdc_wdm 6-1:1.0: skipping garbage [ 221.475666][ T5873] cdc_wdm 6-1:1.0: skipping garbage [ 221.504922][ T5873] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 221.523461][ T5873] cdc_wdm 6-1:1.0: Unknown control protocol [ 221.614630][ T24] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 221.646631][ T24] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.672235][ T24] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 221.691671][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.749251][ T24] hub 3-1:4.0: USB hub found [ 221.815256][ T9049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.869010][ T9049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.896721][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 221.903643][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 221.911005][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 221.917668][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 221.925570][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 221.932242][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 221.939350][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 221.946009][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 221.953066][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 221.959730][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 221.966421][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 221.973068][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 221.979839][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 221.983286][ T24] hub 3-1:4.0: 12 ports detected [ 221.986469][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 221.987666][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 222.004269][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 222.011460][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 222.018113][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 222.024959][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 222.031605][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 222.043728][ T24] usb 3-1: selecting invalid altsetting 1 [ 222.053565][ T9] usb 6-1: USB disconnect, device number 4 [ 222.053629][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 222.111525][ T24] hub 3-1:4.0: Using single TT (err -22) [ 222.136440][ T24] hub 3-1:4.0: insufficient power available to use all downstream ports [ 222.451882][ T24] usb 3-1: USB disconnect, device number 7 [ 223.214448][ T9083] netlink: 12 bytes leftover after parsing attributes in process `syz.2.820'. [ 223.364541][ T30] audit: type=1326 audit(1746220982.903:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9086 comm="syz.1.821" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f21d538e969 code=0x0 [ 223.390028][ T8804] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 223.416649][ T8804] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 223.443221][ T8804] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 223.495887][ T8804] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 223.780226][ T8804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.843989][ T8804] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.909759][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.917003][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.951308][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.958587][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.337840][ T9123] netlink: 24 bytes leftover after parsing attributes in process `syz.1.830'. [ 224.878649][ T9140] xt_hashlimit: size too large, truncated to 1048576 [ 224.895997][ T8804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.144302][ T9140] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 225.749767][ T8804] veth0_vlan: entered promiscuous mode [ 225.867676][ T8804] veth1_vlan: entered promiscuous mode [ 226.000856][ T8804] veth0_macvtap: entered promiscuous mode [ 226.022617][ T8804] veth1_macvtap: entered promiscuous mode [ 226.107525][ T8804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.147895][ T8804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.180755][ T8804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.203140][ T3076] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 226.212733][ T8804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.250871][ T8804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.302329][ T8804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.340198][ T8804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.389970][ T8804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.473029][ T3076] usb 6-1: Using ep0 maxpacket: 32 [ 226.474813][ T8804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.492289][ T3076] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 226.865219][ T8804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.876192][ T8804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.883007][ T3076] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 226.886969][ T8804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.953091][ T3076] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 226.983513][ T8804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.032932][ T8804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.037431][ T3076] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 227.072167][ T8804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.103139][ T3076] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 227.193448][ T3076] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 227.213436][ T8804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.238297][ T8804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.327483][ T8804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.331747][ T3076] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 227.441051][ T8804] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.442934][ T3076] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.493198][ T8804] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.497670][ T3076] usb 6-1: config 0 descriptor?? [ 227.516367][ T8804] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.544443][ T8804] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.719366][ T9191] input: syz1 as /devices/virtual/input/input8 [ 227.820600][ T3076] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 227.866603][ T3076] usb 6-1: USB disconnect, device number 5 [ 227.916084][ T3076] usblp0: removed [ 228.364818][ T3550] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.393044][ T3076] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 228.404788][ T3550] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.514009][ T3505] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.555215][ T3505] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.586367][ T3076] usb 6-1: Using ep0 maxpacket: 32 [ 228.631392][ T3076] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 228.644552][ T3076] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 228.675098][ T3076] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 228.692817][ T3076] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 228.729795][ T3076] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 228.760405][ T3076] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 228.804025][ T3076] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 228.831492][ T3076] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.872646][ T3076] usb 6-1: config 0 descriptor?? [ 229.139588][ T3076] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 229.244263][ T3076] usb 6-1: USB disconnect, device number 6 [ 229.303934][ T3076] usblp0: removed [ 229.913398][ T3076] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 230.065270][ T3505] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.196489][ T3076] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 230.238357][ T3076] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.283063][ T3076] usb 5-1: Product: syz [ 230.307095][ T3076] usb 5-1: Manufacturer: syz [ 230.320427][ T3076] usb 5-1: SerialNumber: syz [ 230.346811][ T3076] usb 5-1: config 0 descriptor?? [ 230.393256][ T3076] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 007 [ 230.407539][ T3505] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.440775][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:0c [ 230.458147][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1b [ 230.548849][ T3505] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.629101][ T3505] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.786194][ T3076] (null): failure reading functionality [ 230.828653][ T3076] i2c i2c-1: connected i2c-tiny-usb device [ 230.911579][ T3505] bridge_slave_1: left allmulticast mode [ 230.937952][ T3505] bridge_slave_1: left promiscuous mode [ 230.956940][ T3505] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.972091][ T3505] bridge_slave_0: left allmulticast mode [ 230.980819][ T3505] bridge_slave_0: left promiscuous mode [ 230.987870][ T3505] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.030287][ T9] usb 5-1: USB disconnect, device number 7 [ 232.327363][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 232.338276][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 232.350435][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 232.369918][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 232.378042][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 232.900228][ T3505] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.948427][ T3505] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.990661][ T3505] bond0 (unregistering): Released all slaves [ 233.659404][ T9281] netlink: 4 bytes leftover after parsing attributes in process `syz.1.868'. [ 234.017134][ T3505] hsr_slave_0: left promiscuous mode [ 234.075239][ T3505] hsr_slave_1: left promiscuous mode [ 234.110479][ T3505] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.142477][ T3505] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.177461][ T3505] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.199033][ T3505] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.322970][ T3505] veth1_macvtap: left promiscuous mode [ 234.342308][ T3505] veth0_macvtap: left promiscuous mode [ 234.370413][ T3505] veth1_vlan: left promiscuous mode [ 234.391447][ T3505] veth0_vlan: left promiscuous mode [ 234.443718][ T5826] Bluetooth: hci2: command tx timeout [ 235.554677][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1c [ 236.519188][ T5826] Bluetooth: hci2: command tx timeout [ 237.378476][ T3505] team0 (unregistering): Port device team_slave_1 removed [ 237.548196][ T3505] team0 (unregistering): Port device team_slave_0 removed [ 238.553009][ T3076] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 238.602994][ T5826] Bluetooth: hci2: command tx timeout [ 238.652942][ T5903] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 238.707031][ T9379] Bluetooth: MGMT ver 1.23 [ 238.732065][ T3076] usb 6-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 238.742621][ T3076] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.802152][ T3076] usb 6-1: config 0 descriptor?? [ 238.811790][ T5903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.827372][ T5903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.840307][ T5903] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 238.891472][ T5903] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 238.903523][ T5903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.932383][ T5903] usb 5-1: config 0 descriptor?? [ 239.380778][ T5903] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 239.465372][ T5903] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 239.642425][ T9250] chnl_net:caif_netlink_parms(): no params data found [ 239.706815][ T5873] usb 5-1: USB disconnect, device number 8 [ 239.940411][ T9250] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.959687][ T9250] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.985060][ T9250] bridge_slave_0: entered allmulticast mode [ 240.020226][ T9250] bridge_slave_0: entered promiscuous mode [ 240.060965][ T9250] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.101749][ T9250] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.129253][ T9250] bridge_slave_1: entered allmulticast mode [ 240.158795][ T9250] bridge_slave_1: entered promiscuous mode [ 240.487462][ T3076] pegasus 6-1:0.0: can't reset MAC [ 240.501723][ T3076] pegasus 6-1:0.0: probe with driver pegasus failed with error -5 [ 240.558283][ T3076] usb 6-1: USB disconnect, device number 7 [ 240.616742][ T9250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.669220][ T9250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.687734][ T5826] Bluetooth: hci2: command tx timeout [ 240.752741][ T5232] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 240.853668][ T5232] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 240.972533][ T9439] validate_nla: 42 callbacks suppressed [ 240.972555][ T9439] netlink: 'syz.4.911': attribute type 16 has an invalid length. [ 241.001492][ T9250] team0: Port device team_slave_0 added [ 241.007948][ T9439] netlink: 'syz.4.911': attribute type 3 has an invalid length. [ 241.023140][ T9439] netlink: 'syz.4.911': attribute type 1 has an invalid length. [ 241.061491][ T9439] netlink: 'syz.4.911': attribute type 1 has an invalid length. [ 241.090240][ T9439] netlink: 'syz.4.911': attribute type 2 has an invalid length. [ 241.135969][ T9250] team0: Port device team_slave_1 added [ 241.159883][ T9439] netlink: 64006 bytes leftover after parsing attributes in process `syz.4.911'. [ 241.281686][ T9250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.299585][ T9250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.327376][ T9250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.428029][ T9250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.441305][ T9250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.467373][ C1] vkms_vblank_simulate: vblank timer overrun [ 241.477019][ T9250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 242.308862][ T9250] hsr_slave_0: entered promiscuous mode [ 242.324678][ T9250] hsr_slave_1: entered promiscuous mode [ 242.522982][ T3076] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 242.696019][ T3076] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 242.730931][ T3076] usb 2-1: config 0 has no interfaces? [ 242.753522][ T3076] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 242.788826][ T3076] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.849393][ T3076] usb 2-1: config 0 descriptor?? [ 243.758660][ T9505] binder: 9504:9505 ioctl 4018620d 0 returned -22 [ 244.082533][ T5873] usb 2-1: USB disconnect, device number 4 [ 244.236460][ T9250] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 244.265189][ T9516] netlink: 12 bytes leftover after parsing attributes in process `syz.4.926'. [ 244.291931][ T9250] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 244.358881][ T9250] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 244.399012][ T9250] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 244.806226][ T9527] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 244.937152][ T9250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.019854][ T9250] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.099185][ T3550] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.106463][ T3550] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.179761][ T1157] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.187104][ T1157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.268564][ T9545] netlink: 8 bytes leftover after parsing attributes in process `syz.5.934'. [ 245.580986][ T9556] netlink: 'syz.1.936': attribute type 10 has an invalid length. [ 245.775138][ T9250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.921253][ T9250] veth0_vlan: entered promiscuous mode [ 245.969220][ T9250] veth1_vlan: entered promiscuous mode [ 246.036576][ T9250] veth0_macvtap: entered promiscuous mode [ 246.076442][ T9250] veth1_macvtap: entered promiscuous mode [ 246.116083][ T9250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.137272][ T9250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.159462][ T9250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.190440][ T9250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.210853][ T9250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.232019][ T9250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.252609][ T9250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.263647][ T9250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.276029][ T9250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.300277][ T9250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.328311][ T9250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.339556][ T9250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.350440][ T9250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.363723][ T9250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.375080][ T9250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.385026][ T5873] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 246.395269][ T9250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.416332][ T9250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.438274][ T9250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.485538][ T9250] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.498681][ T9250] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.520813][ T9250] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.529908][ T9250] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.555298][ T5873] usb 6-1: config 0 has no interfaces? [ 246.561116][ T5873] usb 6-1: New USB device found, idVendor=1668, idProduct=0323, bcdDevice=5f.ca [ 246.574054][ T5873] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.608941][ T5873] usb 6-1: config 0 descriptor?? [ 246.850451][ T5873] usb 6-1: USB disconnect, device number 8 [ 247.316952][ T1157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.347713][ T1157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.496016][ T747] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.505898][ T747] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.401902][ T9617] usb usb8: usbfs: process 9617 (syz.1.946) did not claim interface 0 before use [ 248.868897][ T9640] netlink: 24 bytes leftover after parsing attributes in process `syz.4.953'. [ 249.062046][ T747] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.301346][ T747] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.430991][ T747] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.567918][ T747] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.770469][ T747] bridge_slave_1: left allmulticast mode [ 249.779665][ T747] bridge_slave_1: left promiscuous mode [ 249.790075][ T747] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.806676][ T747] bridge_slave_0: left allmulticast mode [ 249.812391][ T747] bridge_slave_0: left promiscuous mode [ 249.819761][ T747] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.162280][ T9669] netlink: 12 bytes leftover after parsing attributes in process `syz.1.954'. [ 251.183003][ T10] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 251.347632][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 251.358413][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 251.365843][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 251.374197][ T10] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 251.397284][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 251.401906][ T10] usb 6-1: config 0 has no interface number 0 [ 251.417513][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 251.420723][ T10] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 251.448204][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 251.487583][ T747] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 251.499276][ T10] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 251.516773][ T747] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 251.526810][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.535407][ T10] usb 6-1: Product: syz [ 251.541543][ T747] bond0 (unregistering): Released all slaves [ 251.548373][ T10] usb 6-1: Manufacturer: syz [ 251.568438][ T10] usb 6-1: SerialNumber: syz [ 251.584203][ T10] usb 6-1: config 0 descriptor?? [ 251.615632][ T10] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 251.651771][ T10] em28xx 6-1:0.132: Video interface 132 found: [ 252.007440][ T10] em28xx 6-1:0.132: unknown em28xx chip ID (0) [ 252.161860][ T747] hsr_slave_0: left promiscuous mode [ 252.175410][ T747] hsr_slave_1: left promiscuous mode [ 252.185529][ T747] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.213334][ T747] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.234840][ T747] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.245122][ T747] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.275416][ T747] veth1_macvtap: left promiscuous mode [ 252.281139][ T747] veth0_macvtap: left promiscuous mode [ 252.287472][ T747] veth1_vlan: left promiscuous mode [ 252.293431][ T747] veth0_vlan: left promiscuous mode [ 252.303026][ T5924] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 252.438738][ T10] em28xx 6-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 252.496971][ T10] em28xx 6-1:0.132: board has no eeprom [ 252.509659][ T5924] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 252.543599][ T5924] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.576353][ T5924] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 252.601903][ T5924] usb 5-1: New USB device strings: Mfr=145, Product=0, SerialNumber=0 [ 252.613021][ T10] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 252.620977][ T10] em28xx 6-1:0.132: analog set to bulk mode. [ 252.634003][ T5924] usb 5-1: Manufacturer: syz [ 252.650769][ T5924] usb 5-1: config 0 descriptor?? [ 252.659586][ T5873] em28xx 6-1:0.132: Registering V4L2 extension [ 252.694236][ T5924] hub 5-1:0.0: USB hub found [ 252.721907][ T10] usb 6-1: USB disconnect, device number 9 [ 252.752549][ T10] em28xx 6-1:0.132: Disconnecting em28xx [ 252.892331][ T5924] hub 5-1:0.0: 1 port detected [ 253.025265][ T5873] em28xx 6-1:0.132: Config register raw data: 0xffffffed [ 253.032782][ T5873] em28xx 6-1:0.132: AC97 chip type couldn't be determined [ 253.042215][ T5873] em28xx 6-1:0.132: No AC97 audio processor [ 253.104397][ T5873] usb 6-1: Decoder not found [ 253.109056][ T5873] em28xx 6-1:0.132: failed to create media graph [ 253.142934][ T5873] em28xx 6-1:0.132: V4L2 device video103 deregistered [ 253.224801][ T5873] em28xx 6-1:0.132: Remote control support is not available for this card. [ 253.270622][ T10] em28xx 6-1:0.132: Closing input extension [ 253.527154][ T5924] hub 5-1:0.0: activate --> -90 [ 253.553694][ T5826] Bluetooth: hci2: command tx timeout [ 253.686470][ T10] em28xx 6-1:0.132: Freeing device [ 254.217490][ T747] team0 (unregistering): Port device team_slave_1 removed [ 254.311792][ T747] team0 (unregistering): Port device team_slave_0 removed [ 254.348476][ T5232] usb 5-1: USB disconnect, device number 9 [ 254.354162][ T5924] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 254.361423][ T5924] usb 5-1-port1: connect-debounce failed [ 255.239115][ T9759] netlink: 'syz.2.972': attribute type 2 has an invalid length. [ 255.633420][ T5826] Bluetooth: hci2: command tx timeout [ 255.662218][ T9784] tipc: Failed to remove unknown binding: 66,1,1/67108868:3274048147/3274048149 [ 255.766727][ T9699] chnl_net:caif_netlink_parms(): no params data found [ 256.021531][ T9801] netlink: 4 bytes leftover after parsing attributes in process `syz.2.985'. [ 256.242473][ T9699] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.271060][ T9699] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.293772][ T9699] bridge_slave_0: entered allmulticast mode [ 256.310136][ T9699] bridge_slave_0: entered promiscuous mode [ 256.335295][ T9699] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.354004][ T9699] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.361349][ T9699] bridge_slave_1: entered allmulticast mode [ 256.371999][ T9699] bridge_slave_1: entered promiscuous mode [ 256.467621][ T9699] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.496503][ T9699] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.614920][ T9699] team0: Port device team_slave_0 added [ 256.649637][ T9699] team0: Port device team_slave_1 added [ 256.815461][ T9699] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.822459][ T9699] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.921220][ T9699] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.983040][ T9699] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.990040][ T9699] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.085581][ T9699] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.402322][ T9699] hsr_slave_0: entered promiscuous mode [ 257.431118][ T9699] hsr_slave_1: entered promiscuous mode [ 257.713061][ T5826] Bluetooth: hci2: command tx timeout [ 259.097166][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807d4d9400: rx timeout, send abort [ 259.107933][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807d4d9400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 259.523218][ T24] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 259.712979][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 259.734593][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 259.755594][ T24] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 259.791101][ T9699] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 259.798847][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.803922][ T5826] Bluetooth: hci2: command tx timeout [ 259.839855][ T24] usb 2-1: Product: syz [ 259.867986][ T24] usb 2-1: Manufacturer: syz [ 259.868094][ T9699] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 259.872627][ T24] usb 2-1: SerialNumber: syz [ 259.914076][ T24] usb 2-1: config 0 descriptor?? [ 259.931844][ T9699] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 259.947500][ T24] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 259.978718][ T9699] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 259.984230][ T24] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 260.329993][ T9699] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.417902][ T9699] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.457850][ T747] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.465179][ T747] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.506615][ T6970] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.513839][ T6970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.548395][ T24] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 260.604521][ T3076] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 260.793517][ T3076] usb 6-1: Using ep0 maxpacket: 16 [ 260.814873][ T3076] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 260.836165][ T3076] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 260.877538][ T3076] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 260.896988][ T3076] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.930577][ T3076] usb 6-1: Product: syz [ 260.948434][ T3076] usb 6-1: Manufacturer: syz [ 260.973108][ T3076] usb 6-1: SerialNumber: syz [ 261.079606][ T9699] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.161345][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.168135][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.204075][ T3076] usb 6-1: 0:2 : does not exist [ 261.218634][ T9699] veth0_vlan: entered promiscuous mode [ 261.236932][ T3076] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 261.277889][ T9699] veth1_vlan: entered promiscuous mode [ 261.305964][ T3076] usb 6-1: USB disconnect, device number 10 [ 261.367764][ T24] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 261.382585][ T24] em28xx 2-1:0.0: board has no eeprom [ 261.430262][ T9699] veth0_macvtap: entered promiscuous mode [ 261.443473][ T6136] udevd[6136]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 261.483352][ T24] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 261.495609][ T9699] veth1_macvtap: entered promiscuous mode [ 261.523016][ T24] em28xx 2-1:0.0: dvb set to bulk mode. [ 261.548696][ T5903] em28xx 2-1:0.0: Binding DVB extension [ 261.581649][ T9699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.588552][ T24] usb 2-1: USB disconnect, device number 5 [ 261.609198][ T9699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.625781][ T24] em28xx 2-1:0.0: Disconnecting em28xx [ 261.646055][ T9699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.667842][ T9699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.676759][ T5903] em28xx 2-1:0.0: Registering input extension [ 261.678114][ T9699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.694845][ T24] em28xx 2-1:0.0: Closing input extension [ 261.697600][ T9699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.711273][ T9699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.726532][ T9699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.727861][ T24] em28xx 2-1:0.0: Freeing device [ 261.738434][ T9699] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.783484][ T5232] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 261.837882][ T9699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.861497][ T9699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.899869][ T9699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.919796][ T9699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.930161][ T9699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.940812][ T9699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.976589][ T9699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.989722][ T5232] usb 3-1: config 0 interface 0 has no altsetting 0 [ 262.003645][ T5232] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 262.013250][ T9699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.029469][ T5232] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.054849][ T9699] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.067401][ T5232] usb 3-1: config 0 descriptor?? [ 262.146985][ T10] IPVS: starting estimator thread 0... [ 262.158345][ T9699] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.232987][ T9699] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.241756][ T9699] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.263671][ T9957] IPVS: using max 27 ests per chain, 64800 per kthread [ 262.291931][ T9699] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.701020][ T3550] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.739509][ T3550] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.913687][ T6970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.964996][ T6970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.096250][ T5232] radio-keene 3-1:0.0: V4L2 device registered as radio48 [ 263.335547][ T5903] usb 3-1: USB disconnect, device number 8 [ 263.770491][ T747] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.926292][ T747] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.048081][ T747] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.138499][ T747] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.378666][ T747] bridge_slave_1: left allmulticast mode [ 264.388921][ T747] bridge_slave_1: left promiscuous mode [ 264.394998][ T747] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.408779][ T747] bridge_slave_0: left allmulticast mode [ 264.423598][ T747] bridge_slave_0: left promiscuous mode [ 264.429433][ T747] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.568566][ T747] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 265.681864][ T747] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 265.711586][ T747] bond0 (unregistering): Released all slaves [ 266.190394][T10041] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 266.198194][T10041] IPv6: NLM_F_CREATE should be set when creating new route [ 266.299298][ T30] audit: type=1326 audit(1746221025.833:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10047 comm="syz.1.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21d538e969 code=0x7ffc0000 [ 266.418721][ T30] audit: type=1326 audit(1746221025.863:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10047 comm="syz.1.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f21d538e969 code=0x7ffc0000 [ 266.441054][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 266.459000][ T30] audit: type=1326 audit(1746221025.863:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10047 comm="syz.1.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21d538e969 code=0x7ffc0000 [ 266.488361][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 266.497069][ T30] audit: type=1326 audit(1746221025.863:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10047 comm="syz.1.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f21d538e969 code=0x7ffc0000 [ 266.521768][ T30] audit: type=1326 audit(1746221025.863:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10047 comm="syz.1.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21d538e969 code=0x7ffc0000 [ 266.543715][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 266.551203][ T30] audit: type=1326 audit(1746221025.863:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10047 comm="syz.1.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f21d538e969 code=0x7ffc0000 [ 266.574069][ T30] audit: type=1326 audit(1746221025.863:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10047 comm="syz.1.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21d538e969 code=0x7ffc0000 [ 266.596910][ T30] audit: type=1326 audit(1746221025.863:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10047 comm="syz.1.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f21d538e969 code=0x7ffc0000 [ 266.619105][ T30] audit: type=1326 audit(1746221025.863:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10047 comm="syz.1.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21d538e969 code=0x7ffc0000 [ 266.654343][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 266.669514][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 266.904443][ T747] hsr_slave_0: left promiscuous mode [ 266.923957][ T747] hsr_slave_1: left promiscuous mode [ 266.931624][ T747] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 266.946465][ T747] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 266.972039][ T747] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 266.989593][ T747] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.067429][ T747] veth1_macvtap: left promiscuous mode [ 267.084204][ T5903] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 267.107604][ T747] veth0_macvtap: left promiscuous mode [ 267.127346][ T747] veth1_vlan: left promiscuous mode [ 267.139985][ T747] veth0_vlan: left promiscuous mode [ 267.264877][ T5903] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 267.297082][ T5903] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 267.314379][ T5903] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 267.342130][ T5903] usb 3-1: config 0 interface 0 has no altsetting 0 [ 267.377849][ T5903] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 267.403922][ T5903] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 267.449401][ T5903] usb 3-1: config 0 interface 0 has no altsetting 0 [ 267.481544][ T5903] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 267.523069][ T5903] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 267.544975][ T5903] usb 3-1: config 0 interface 0 has no altsetting 0 [ 267.590458][ T5903] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 267.628007][ T5903] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 267.662170][ T5903] usb 3-1: config 0 interface 0 has no altsetting 0 [ 267.710028][ T5903] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 267.734317][ T5903] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 267.767973][ T5903] usb 3-1: config 0 interface 0 has no altsetting 0 [ 267.790559][ T5903] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 267.801494][ T5903] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 267.819094][ T5903] usb 3-1: config 0 interface 0 has no altsetting 0 [ 267.828516][ T5903] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 267.842028][ T5903] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 267.857482][ T5903] usb 3-1: config 0 interface 0 has no altsetting 0 [ 267.868494][ T5903] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 267.880473][ T5903] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 267.895012][ T5903] usb 3-1: config 0 interface 0 has no altsetting 0 [ 267.904771][ T5903] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 267.917109][ T5903] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 267.927388][ T5903] usb 3-1: Product: syz [ 267.931858][ T5903] usb 3-1: Manufacturer: syz [ 267.937122][ T5903] usb 3-1: SerialNumber: syz [ 267.947925][ T5903] usb 3-1: config 0 descriptor?? [ 268.009290][ T5903] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 268.303327][ C1] usb 3-1: yurex_control_callback - control failed: -71 [ 268.311988][ T10] usb 3-1: USB disconnect, device number 9 [ 268.345616][ T10] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 268.408510][ T747] team0 (unregistering): Port device team_slave_1 removed [ 268.451274][ T747] team0 (unregistering): Port device team_slave_0 removed [ 268.756993][ T5826] Bluetooth: hci2: command tx timeout [ 268.940574][T10076] bridge_slave_0: left allmulticast mode [ 268.951329][T10076] bridge_slave_0: left promiscuous mode [ 268.967919][T10076] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.991168][T10076] bridge_slave_1: left allmulticast mode [ 268.997411][T10076] bridge_slave_1: left promiscuous mode [ 269.003515][T10076] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.021220][T10076] bond0: (slave bond_slave_0): Releasing backup interface [ 269.039357][T10076] bond0: (slave bond_slave_1): Releasing backup interface [ 269.068394][T10076] team0: Port device team_slave_0 removed [ 269.083588][T10076] team0: Port device team_slave_1 removed [ 269.090597][T10076] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.098330][T10076] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 269.107845][T10076] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 269.117189][T10076] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 269.810965][T10050] chnl_net:caif_netlink_parms(): no params data found [ 270.406063][T10050] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.437223][T10050] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.454069][T10050] bridge_slave_0: entered allmulticast mode [ 270.461800][T10050] bridge_slave_0: entered promiscuous mode [ 270.508190][T10050] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.516459][T10050] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.528567][T10050] bridge_slave_1: entered allmulticast mode [ 270.545003][T10050] bridge_slave_1: entered promiscuous mode [ 270.647590][T10050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.681711][T10050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.833312][ T5826] Bluetooth: hci2: command tx timeout [ 270.891958][T10050] team0: Port device team_slave_0 added [ 270.947836][T10050] team0: Port device team_slave_1 added [ 271.124664][T10050] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.151609][T10050] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.239964][T10050] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.285119][T10050] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.292128][T10050] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.410350][T10050] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.752613][T10050] hsr_slave_0: entered promiscuous mode [ 271.775656][T10050] hsr_slave_1: entered promiscuous mode [ 272.772284][T10205] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 272.779176][T10205] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 272.797765][T10211] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 272.811368][T10205] vhci_hcd vhci_hcd.0: Device attached [ 272.822105][T10211] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(8) [ 272.828686][T10211] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 272.844888][T10211] vhci_hcd vhci_hcd.0: Device attached [ 272.860001][T10205] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(5) [ 272.866583][T10205] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 272.878533][T10205] vhci_hcd vhci_hcd.0: Device attached [ 272.899119][T10205] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(11) [ 272.905787][T10205] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 272.914943][ T5826] Bluetooth: hci2: command tx timeout [ 272.925202][T10205] vhci_hcd vhci_hcd.0: Device attached [ 272.967925][T10211] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(14) [ 272.974598][T10211] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 272.983073][ T9] vhci_hcd: vhci_device speed not set [ 272.999960][T10211] vhci_hcd vhci_hcd.0: Device attached [ 273.039188][T10205] vhci_hcd vhci_hcd.0: pdev(1) rhport(6) sockfd(13) [ 273.045888][T10205] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 273.053607][ T9] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 273.086158][T10205] vhci_hcd vhci_hcd.0: Device attached [ 273.126819][T10211] vhci_hcd vhci_hcd.0: pdev(1) rhport(7) sockfd(17) [ 273.133495][T10211] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 273.163375][T10211] vhci_hcd vhci_hcd.0: Device attached [ 273.179869][T10218] vhci_hcd: connection closed [ 273.181724][T10216] vhci_hcd: connection closed [ 273.182727][T10207] vhci_hcd: connection reset by peer [ 273.190275][T10214] vhci_hcd: connection closed [ 273.200197][T10212] vhci_hcd: connection closed [ 273.208690][ T64] vhci_hcd: stop threads [ 273.231424][T10221] vhci_hcd: connection closed [ 273.243693][ T64] vhci_hcd: release socket [ 273.283200][ T64] vhci_hcd: disconnect device [ 273.319353][ T64] vhci_hcd: stop threads [ 273.338569][ T64] vhci_hcd: release socket [ 273.359384][T10224] vhci_hcd: connection closed [ 273.360792][ T64] vhci_hcd: disconnect device [ 273.383145][ T64] vhci_hcd: stop threads [ 273.387449][ T64] vhci_hcd: release socket [ 273.417899][ T64] vhci_hcd: disconnect device [ 273.441066][ T64] vhci_hcd: stop threads [ 273.470560][ T64] vhci_hcd: release socket [ 273.486279][ T64] vhci_hcd: disconnect device [ 273.505161][ T64] vhci_hcd: stop threads [ 273.521847][ T64] vhci_hcd: release socket [ 273.530968][T10050] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 273.539584][ T64] vhci_hcd: disconnect device [ 273.554272][ T64] vhci_hcd: stop threads [ 273.558668][ T64] vhci_hcd: release socket [ 273.576270][ T64] vhci_hcd: disconnect device [ 273.582814][ T64] vhci_hcd: stop threads [ 273.601166][T10050] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 273.608622][ T64] vhci_hcd: release socket [ 273.620469][ T64] vhci_hcd: disconnect device [ 273.650240][T10050] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 273.676716][T10050] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 274.049010][T10050] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.111081][T10050] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.167303][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.174566][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.202137][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.209385][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.628330][T10259] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1089'. [ 274.808686][T10050] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 274.967614][T10050] veth0_vlan: entered promiscuous mode [ 274.993445][ T5826] Bluetooth: hci2: command tx timeout [ 275.015339][T10050] veth1_vlan: entered promiscuous mode [ 275.084903][T10050] veth0_macvtap: entered promiscuous mode [ 275.117646][T10050] veth1_macvtap: entered promiscuous mode [ 275.176435][T10050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.202289][T10050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.245236][T10050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.265208][T10050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.280510][T10050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.293905][T10050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.311363][T10050] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.331242][T10050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.364632][T10050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.385026][T10050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.420079][T10050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.451549][T10050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.489551][T10050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.527466][T10050] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.701547][T10050] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.751348][T10050] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.772750][T10050] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.819304][T10050] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.529719][ T747] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.560748][ T747] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.768882][ T3505] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.792703][ T3505] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.823906][ T30] audit: type=1326 audit(1746221036.353:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10279 comm="syz.2.1093" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe245d8e969 code=0x0 [ 278.183160][ T9] vhci_hcd: vhci_device speed not set [ 278.372986][ T5873] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 278.521755][ T1157] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.648890][ T5873] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 278.694041][ T5873] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 278.743653][ T5873] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 278.771028][ T5873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 278.813005][ T5873] usb 2-1: SerialNumber: syz [ 278.879575][ T1157] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.034960][ T1157] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.068799][ T5873] usb 2-1: 0:2 : does not exist [ 279.098897][ T5873] usb 2-1: USB disconnect, device number 6 [ 279.148032][ T6011] udevd[6011]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 279.184984][ T1157] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.368962][ T1157] bridge_slave_1: left allmulticast mode [ 279.378081][ T1157] bridge_slave_1: left promiscuous mode [ 279.387193][ T1157] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.400774][ T1157] bridge_slave_0: left allmulticast mode [ 279.407434][ T1157] bridge_slave_0: left promiscuous mode [ 279.413937][ T1157] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.548190][ T3076] usb usb36-port8: attempt power cycle [ 279.752298][ T1157] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 279.767090][ T1157] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 279.777456][ T1157] bond0 (unregistering): Released all slaves [ 279.993345][ T30] audit: type=1326 audit(1746221039.523:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10366 comm="syz.2.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe245d8e969 code=0x7ffc0000 [ 280.033637][T10370] netlink: 'syz.1.1110': attribute type 4 has an invalid length. [ 280.058115][ T30] audit: type=1326 audit(1746221039.523:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10366 comm="syz.2.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe245d8e969 code=0x7ffc0000 [ 280.124363][ T3076] usb usb36-port8: unable to enumerate USB device [ 280.126007][ T30] audit: type=1326 audit(1746221039.563:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10366 comm="syz.2.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fe245d8e969 code=0x7ffc0000 [ 280.248502][ T30] audit: type=1326 audit(1746221039.563:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10366 comm="syz.2.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe245d8e969 code=0x7ffc0000 [ 280.350247][ T30] audit: type=1326 audit(1746221039.563:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10366 comm="syz.2.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe245d8e969 code=0x7ffc0000 [ 280.382339][ T30] audit: type=1326 audit(1746221039.563:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10366 comm="syz.2.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fe245d8e969 code=0x7ffc0000 [ 280.475092][ T30] audit: type=1326 audit(1746221039.563:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10366 comm="syz.2.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe245d8e969 code=0x7ffc0000 [ 280.518605][ T1157] hsr_slave_0: left promiscuous mode [ 280.541609][ T1157] hsr_slave_1: left promiscuous mode [ 280.571177][ T1157] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 280.581131][ T30] audit: type=1326 audit(1746221039.563:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10366 comm="syz.2.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe245d8e969 code=0x7ffc0000 [ 280.601713][ T1157] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 280.615119][ T30] audit: type=1326 audit(1746221039.563:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10366 comm="syz.2.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fe245d8e969 code=0x7ffc0000 [ 280.661432][ T1157] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 280.688946][ T1157] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.755734][ T1157] veth1_macvtap: left promiscuous mode [ 280.773831][ T1157] veth0_macvtap: left promiscuous mode [ 280.792172][ T1157] veth1_vlan: left promiscuous mode [ 280.809447][ T1157] veth0_vlan: left promiscuous mode [ 280.880927][T10395] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1118'. [ 280.968148][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 280.981364][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 280.990735][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 281.008940][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 281.018453][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 281.333111][ T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 281.495014][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 281.508352][ T10] usb 3-1: config 0 has no interfaces? [ 281.515203][ T10] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 281.528254][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.561431][ T10] usb 3-1: config 0 descriptor?? [ 281.636282][ T1157] team0 (unregistering): Port device team_slave_1 removed [ 281.688511][ T1157] team0 (unregistering): Port device team_slave_0 removed [ 281.795944][T10403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.815061][T10403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.835663][T10403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.851924][T10403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.875148][ T5902] usb 3-1: USB disconnect, device number 10 [ 282.333159][ T5902] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 282.504495][ T5902] usb 3-1: Using ep0 maxpacket: 16 [ 282.573020][ T5902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.623982][ T5902] usb 3-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice= 0.40 [ 282.664970][ T5902] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.732716][ T5902] usb 3-1: config 0 descriptor?? [ 282.795529][ T5902] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 283.001731][T10399] chnl_net:caif_netlink_parms(): no params data found [ 283.072976][ T5826] Bluetooth: hci2: command tx timeout [ 283.786445][ T5902] input: gspca_pac7302 as /devices/platform/dummy_hcd.2/usb3/3-1/input/input10 [ 283.919906][ C1] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 283.927045][ C1] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 283.933957][ C1] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 283.940878][ C1] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 283.947800][ C1] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 283.954880][ C1] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 283.962490][ C1] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 283.969461][ C1] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 283.976382][ C1] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 283.983298][ C1] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 283.990200][ C1] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 283.997131][ C1] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 284.005003][ C1] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 284.011965][ C1] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 284.018893][ C1] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 284.025873][ C1] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 284.032812][ C1] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 284.039738][ C1] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 284.046617][ C1] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 284.053502][ C1] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 284.060375][ C1] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 284.073328][ C1] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 284.080526][T10399] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.080625][ C1] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 284.099560][ C1] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 284.106695][ T5902] usb 3-1: USB disconnect, device number 11 [ 284.112919][ C1] gspca_pac7302 3-1:0.0: URB error -71, resubmitting [ 284.119662][ C1] gspca_main: Resubmit URB failed with error -19 [ 284.179099][T10399] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.203485][T10399] bridge_slave_0: entered allmulticast mode [ 284.224807][T10399] bridge_slave_0: entered promiscuous mode [ 284.250707][T10399] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.290393][T10399] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.345401][T10399] bridge_slave_1: entered allmulticast mode [ 284.357416][T10457] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1130'. [ 284.409519][T10399] bridge_slave_1: entered promiscuous mode [ 284.670003][T10399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.732743][T10399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.155123][ T5826] Bluetooth: hci2: command tx timeout [ 285.409232][T10399] team0: Port device team_slave_0 added [ 285.525339][T10399] team0: Port device team_slave_1 added [ 285.951212][T10399] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.963649][T10399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.018182][T10399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 286.059487][T10399] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 286.077147][T10399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.177820][T10399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.210395][T10500] syz_tun: entered allmulticast mode [ 286.223924][T10498] syz_tun: left allmulticast mode [ 286.382045][T10399] hsr_slave_0: entered promiscuous mode [ 286.541500][T10399] hsr_slave_1: entered promiscuous mode [ 287.233426][ T5826] Bluetooth: hci2: command tx timeout [ 287.374240][T10523] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1146'. [ 287.603162][ T9] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 287.894850][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 288.133122][ T9] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 288.141286][ T9] usb 6-1: config 0 has no interface number 0 [ 288.168354][ T9] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 288.200752][ T9] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 288.321515][ T9] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 288.384537][ T9] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 288.436967][ T9] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 288.472186][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.508327][ T9] usb 6-1: config 0 descriptor?? [ 288.563469][ T9] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 288.731368][ T30] kauditd_printk_skb: 94 callbacks suppressed [ 288.731387][ T30] audit: type=1804 audit(1746221048.263:166): pid=10544 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.1152" name="/newroot/278/file0" dev="tmpfs" ino=1545 res=1 errno=0 [ 288.805413][ T9] usb 6-1: USB disconnect, device number 11 [ 288.887431][ T9] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 289.258483][T10399] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 289.294373][T10399] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 289.312135][T10399] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 289.320893][ T5826] Bluetooth: hci2: command tx timeout [ 289.362061][T10399] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 289.861572][T10399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.008098][T10399] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.077515][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.084767][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.135919][ T1157] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.143348][ T1157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.291121][ T53] Bluetooth: hci5: Frame reassembly failed (-84) [ 290.360505][T10582] Bluetooth: hci5: Frame reassembly failed (-84) [ 290.412447][T10585] Bluetooth: hci5: Frame reassembly failed (-84) [ 290.536652][ T30] audit: type=1804 audit(1746221050.063:167): pid=10593 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.5.1162" name="/newroot/145/file1" dev="fuse" ino=1 res=1 errno=0 [ 291.256636][T10399] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.471410][T10399] veth0_vlan: entered promiscuous mode [ 291.560787][T10399] veth1_vlan: entered promiscuous mode [ 291.676815][T10399] veth0_macvtap: entered promiscuous mode [ 291.865271][T10399] veth1_macvtap: entered promiscuous mode [ 291.909836][T10399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.935990][T10399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.960232][T10399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.991479][T10399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.013769][T10399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.042128][T10399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.068328][T10399] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 292.159765][T10399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.209430][T10399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.248990][T10399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.283402][ T5826] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 292.289896][ T55] Bluetooth: hci5: command 0x1003 tx timeout [ 292.324293][T10399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.692985][T10399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.890931][T10399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.313304][T10399] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 293.416420][T10399] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.464345][T10399] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.484213][T10399] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.496962][T10399] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.956625][ T5826] Bluetooth: hci0: command 0x0406 tx timeout [ 293.996434][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.012142][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.094487][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.131617][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.143343][ T24] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 294.143659][T10668] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1179'. [ 294.335863][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.400234][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.455435][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 294.541225][ T24] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 294.553039][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.567295][ T24] usb 5-1: config 0 descriptor?? [ 294.935484][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.058732][ T24] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 295.203992][ T24] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 295.286878][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.348887][ T24] usb 5-1: USB disconnect, device number 10 [ 295.601281][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.691553][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.895469][ T13] bridge_slave_1: left allmulticast mode [ 295.901300][ T13] bridge_slave_1: left promiscuous mode [ 295.908644][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.920304][ T13] bridge_slave_0: left allmulticast mode [ 295.926306][ T13] bridge_slave_0: left promiscuous mode [ 295.932015][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.238308][ T30] audit: type=1326 audit(1746221055.773:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10707 comm="syz.1.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21d538e969 code=0x7ffc0000 [ 296.306333][ T30] audit: type=1326 audit(1746221055.773:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10707 comm="syz.1.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21d538e969 code=0x7ffc0000 [ 296.339163][ T30] audit: type=1326 audit(1746221055.803:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10707 comm="syz.1.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f21d538e969 code=0x7ffc0000 [ 296.392986][ T30] audit: type=1326 audit(1746221055.803:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10707 comm="syz.1.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21d538e969 code=0x7ffc0000 [ 296.415946][ T30] audit: type=1326 audit(1746221055.803:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10707 comm="syz.1.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21d538e969 code=0x7ffc0000 [ 296.458102][ T30] audit: type=1326 audit(1746221055.823:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10707 comm="syz.1.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f21d538e969 code=0x7ffc0000 [ 296.542072][ T30] audit: type=1326 audit(1746221055.823:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10707 comm="syz.1.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21d538e969 code=0x7ffc0000 [ 296.605272][ T30] audit: type=1326 audit(1746221055.823:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10707 comm="syz.1.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21d538e969 code=0x7ffc0000 [ 296.682999][ T30] audit: type=1326 audit(1746221055.823:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10707 comm="syz.1.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f21d538e969 code=0x7ffc0000 [ 296.753712][ T30] audit: type=1326 audit(1746221055.823:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10707 comm="syz.1.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21d538e969 code=0x7ffc0000 [ 297.936639][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 297.987908][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 298.025263][ T5826] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 298.038701][ T13] bond0 (unregistering): Released all slaves [ 298.045474][ T5826] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 298.054428][ T5826] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 298.066867][ T5826] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 298.080241][ T5826] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 298.745341][ T5924] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 298.917668][ T5924] usb 5-1: Using ep0 maxpacket: 16 [ 298.926880][ T5924] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 298.946061][ T5924] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 298.979444][ T5924] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 298.999335][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.120093][ T5924] usb 5-1: Product: syz [ 299.203081][ T5924] usb 5-1: Manufacturer: syz [ 299.238282][ T5924] usb 5-1: SerialNumber: syz [ 299.477461][ T5924] usb 5-1: 0:2 : does not exist [ 299.507718][ T5924] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 299.558821][ T5924] usb 5-1: USB disconnect, device number 11 [ 299.661992][ T6011] udevd[6011]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 300.123122][ T5826] Bluetooth: hci2: command tx timeout [ 302.197213][ T5826] Bluetooth: hci2: command tx timeout [ 302.912305][T10771] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1204'. [ 303.360251][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 303.360271][ T30] audit: type=1804 audit(1746221062.883:190): pid=10795 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.1214" name="/newroot/293/file0" dev="tmpfs" ino=1631 res=1 errno=0 [ 303.416970][T10795] ref_ctr_offset mismatch. inode: 0x65f offset: 0x0 ref_ctr_offset(old): 0x200000000600 ref_ctr_offset(new): 0x0 [ 303.468482][T10795] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: 0, delta: -1 [ 303.485125][T10795] ref_ctr decrement failed for inode: 0x65f offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88807b650000 [ 303.538887][T10795] uprobe: syz.4.1214:10795 failed to unregister, leaking uprobe [ 304.272954][ T5826] Bluetooth: hci2: command tx timeout [ 304.298809][ T13] hsr_slave_0: left promiscuous mode [ 304.337878][ T13] hsr_slave_1: left promiscuous mode [ 304.347925][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 304.373165][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 304.419030][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 304.464856][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 304.504399][ T13] veth1_macvtap: left promiscuous mode [ 304.510211][ T13] veth0_macvtap: left promiscuous mode [ 304.516453][ T13] veth1_vlan: left promiscuous mode [ 304.521981][ T13] veth0_vlan: left promiscuous mode [ 304.545864][ T30] audit: type=1804 audit(1746221064.083:191): pid=10816 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.1218" name="/newroot/291/file0" dev="tmpfs" ino=1605 res=1 errno=0 [ 304.596512][T10816] ref_ctr_offset mismatch. inode: 0x645 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 304.613140][T10816] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: 0, delta: -1 [ 304.622771][T10816] ref_ctr decrement failed for inode: 0x645 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff8880319d0a00 [ 304.658191][T10816] uprobe: syz.2.1218:10816 failed to unregister, leaking uprobe [ 304.679165][ T5924] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 304.833458][ T5924] usb 5-1: Using ep0 maxpacket: 32 [ 304.852662][ T5924] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.918544][ T5924] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 304.949335][ T5924] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 304.981047][ T5924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.025873][ T5924] usb 5-1: config 0 descriptor?? [ 305.053493][ T5924] hub 5-1:0.0: USB hub found [ 305.244696][ T5924] hub 5-1:0.0: 1 port detected [ 305.874546][ T5924] hub 5-1:0.0: activate --> -90 [ 306.166441][ T13] team0 (unregistering): Port device team_slave_1 removed [ 306.233876][ T13] team0 (unregistering): Port device team_slave_0 removed [ 306.296004][ T3076] usb 5-1: USB disconnect, device number 12 [ 306.363149][ T5826] Bluetooth: hci2: command tx timeout [ 306.513099][ T5924] usb 5-1-port1: config error [ 306.965270][T10832] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1222'. [ 307.110049][T10871] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.552960][ T3076] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 307.733605][ T3076] usb 2-1: Using ep0 maxpacket: 16 [ 307.819514][ T3076] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 307.933177][ T3076] usb 2-1: config 0 has no interface number 0 [ 308.001874][ T3076] usb 2-1: New USB device found, idVendor=1a0a, idProduct=0108, bcdDevice=da.32 [ 308.024430][T10740] chnl_net:caif_netlink_parms(): no params data found [ 308.031645][ T3076] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.050950][ T3076] usb 2-1: Product: syz [ 308.066014][ T3076] usb 2-1: Manufacturer: syz [ 308.082316][ T3076] usb 2-1: SerialNumber: syz [ 308.119486][ T3076] usb 2-1: config 0 descriptor?? [ 308.153209][ T3076] usb_ehset_test 2-1:0.255: probe with driver usb_ehset_test failed with error -32 [ 308.403659][T10740] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.421154][ T3076] usb 2-1: USB disconnect, device number 7 [ 308.460144][T10740] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.499033][T10740] bridge_slave_0: entered allmulticast mode [ 308.532673][T10740] bridge_slave_0: entered promiscuous mode [ 308.691522][T10909] syzkaller0: entered promiscuous mode [ 308.713035][T10909] syzkaller0: entered allmulticast mode [ 308.742049][T10907] tipc: Started in network mode [ 308.753359][T10907] tipc: Node identity 76fae3af2612, cluster identity 4711 [ 308.772629][T10907] tipc: Enabled bearer , priority 0 [ 308.783075][T10740] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.798025][T10740] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.811836][T10740] bridge_slave_1: entered allmulticast mode [ 308.843323][T10740] bridge_slave_1: entered promiscuous mode [ 308.870061][T10902] tipc: Resetting bearer [ 309.873840][ T3076] tipc: Node number set to 1357439919 [ 310.290452][T10933] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1248'. [ 311.158946][T10902] tipc: Disabling bearer [ 311.321125][T10740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.386183][T10740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.609353][T10740] team0: Port device team_slave_0 added [ 311.677996][T10740] team0: Port device team_slave_1 added [ 311.861267][T10960] netlink: 277 bytes leftover after parsing attributes in process `syz.1.1257'. [ 311.889947][T10740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.898163][T10740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.944070][ T30] audit: type=1326 audit(1746221071.483:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10961 comm="syz.4.1258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2196f8e969 code=0x7ffc0000 [ 311.988990][T10740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.025272][T10740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.032280][T10740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.060577][ T30] audit: type=1326 audit(1746221071.503:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10961 comm="syz.4.1258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7f2196f8e969 code=0x7ffc0000 [ 312.099829][ T30] audit: type=1326 audit(1746221071.503:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10961 comm="syz.4.1258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2196f8e969 code=0x7ffc0000 [ 312.127042][T10740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.138258][ T30] audit: type=1326 audit(1746221071.503:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10961 comm="syz.4.1258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2196f8e969 code=0x7ffc0000 [ 312.159843][ C0] vkms_vblank_simulate: vblank timer overrun [ 312.426982][ T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 312.583309][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 312.590844][ T9] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 312.606583][ T9] usb 5-1: config 0 has no interface number 0 [ 312.681636][ T9] usb 5-1: config 0 interface 12 has no altsetting 0 [ 312.715506][ T9] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 312.729311][T10740] hsr_slave_0: entered promiscuous mode [ 312.746851][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.767655][ T9] usb 5-1: Product: syz [ 312.782091][ T9] usb 5-1: Manufacturer: syz [ 312.787529][T10740] hsr_slave_1: entered promiscuous mode [ 312.797076][ T9] usb 5-1: SerialNumber: syz [ 312.831215][ T9] usb 5-1: config 0 descriptor?? [ 313.333074][ T5903] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 313.583392][ T5903] usb 2-1: Using ep0 maxpacket: 8 [ 313.607117][ T5903] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 313.633366][ T5903] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.662080][ T5903] usb 2-1: Product: syz [ 313.704889][ T5903] usb 2-1: Manufacturer: syz [ 313.709558][ T5903] usb 2-1: SerialNumber: syz [ 313.762122][ T5903] usb 2-1: config 0 descriptor?? [ 314.012621][ T5903] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 314.503153][ T24] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 314.517921][T10740] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 314.533691][T10740] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 314.556379][T10740] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 314.574968][T10740] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 314.659074][ T5903] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 314.676526][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 314.692184][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.735992][ T5903] usb 2-1: USB disconnect, device number 8 [ 314.744063][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.780320][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 314.782219][ T9] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 314.805533][ T24] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 314.826922][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.837010][ T9] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 314.859066][ T9] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 314.870741][ T24] usb 3-1: config 0 descriptor?? [ 314.890919][ T9] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 314.940397][T10740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.951209][ T9] usb 5-1: USB disconnect, device number 13 [ 315.030165][T10740] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.051287][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.058601][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.133915][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.141215][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.300741][ T24] microsoft 0003:045E:07DA.0007: report is too long [ 315.326632][ T24] microsoft 0003:045E:07DA.0007: item 0 4 0 8 parsing failed [ 315.351580][ T24] microsoft 0003:045E:07DA.0007: parse failed [ 315.372298][ T24] microsoft 0003:045E:07DA.0007: probe with driver microsoft failed with error -22 [ 315.504912][ T24] usb 3-1: USB disconnect, device number 12 [ 316.413564][T10740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 316.697026][T10740] veth0_vlan: entered promiscuous mode [ 316.709946][T10740] veth1_vlan: entered promiscuous mode [ 316.767078][T10740] veth0_macvtap: entered promiscuous mode [ 316.810634][T10740] veth1_macvtap: entered promiscuous mode [ 316.920821][T10740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.962329][T10740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.012052][T10740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.036362][T10740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.067576][T10740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.130511][T10740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.217305][T10740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 317.291192][T10740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.330754][T10740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.368596][T10740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.408806][T10740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.444158][T10740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.589819][T10740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.625431][T10740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 317.961228][T10740] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.023461][T10740] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.042094][T10740] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.060561][T11085] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1285'. [ 318.062089][T10740] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.276170][T11085] bond0: (slave bond_slave_1): Releasing backup interface [ 318.335995][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 318.505265][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 318.522038][ T9] usb 3-1: config 1 interface 0 altsetting 64 bulk endpoint 0x82 has invalid maxpacket 32 [ 318.557076][ T9] usb 3-1: config 1 interface 0 has no altsetting 0 [ 318.578834][ T9] usb 3-1: string descriptor 0 read error: -22 [ 318.597608][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 318.617933][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.648903][T11084] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 318.901641][ T9] usblp 3-1:1.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 64 proto 2 vid 0x0525 pid 0xA4A8 [ 319.485630][ T30] audit: type=1800 audit(1746221079.013:196): pid=11123 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.1292" name="/" dev="9p" ino=2 res=0 errno=0 [ 319.843321][ C1] usblp0: nonzero read bulk status received: -71 [ 319.877573][T11129] usblp0: error -71 reading from printer [ 319.899270][ C1] usblp0: nonzero read bulk status received: -71 [ 321.073587][ T5903] usb 3-1: USB disconnect, device number 13 [ 321.095710][ T5903] usblp0: removed [ 321.636155][T11138] tipc: Enabled bearer , priority 0 [ 321.656760][T11140] syzkaller0: MTU too low for tipc bearer [ 321.662564][T11140] tipc: Disabling bearer [ 321.940091][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.956042][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.977445][ T30] audit: type=1326 audit(1746221081.513:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11148 comm="syz.1.1300" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f21d538e969 code=0x0 [ 322.025341][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.046248][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.487576][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.596845][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.610508][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.717408][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.839176][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.050879][ T13] bridge_slave_1: left allmulticast mode [ 323.061075][ T13] bridge_slave_1: left promiscuous mode [ 323.067674][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.083195][ T13] bridge_slave_0: left allmulticast mode [ 323.088876][ T13] bridge_slave_0: left promiscuous mode [ 323.095184][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.432042][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 323.446357][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 323.456784][ T13] bond0 (unregistering): Released all slaves [ 323.772488][ T13] hsr_slave_0: left promiscuous mode [ 323.778693][ T13] hsr_slave_1: left promiscuous mode [ 323.789441][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 323.801581][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 323.813104][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 323.821386][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 323.865645][ T13] veth1_macvtap: left promiscuous mode [ 323.872713][ T13] veth0_macvtap: left promiscuous mode [ 323.886537][ T13] veth1_vlan: left promiscuous mode [ 323.892010][ T13] veth0_vlan: left promiscuous mode [ 324.568335][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 324.591176][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 324.601424][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 324.614109][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 324.626600][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 324.908579][ T13] team0 (unregistering): Port device team_slave_1 removed [ 325.006375][ T13] team0 (unregistering): Port device team_slave_0 removed [ 325.077152][ T30] audit: type=1804 audit(1746221084.613:198): pid=11199 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.5.1312" name="/newroot/180/file0" dev="tmpfs" ino=1037 res=1 errno=0 [ 325.293053][ T10] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 325.445052][ T10] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 325.459943][ T10] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 325.471920][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.506632][ T10] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 326.177869][T11218] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1317'. [ 326.605854][ T10] stv0680 5-1:4.0: STV(e): camera ping failed!! [ 326.629080][ T10] stv0680 5-1:4.0: last error: 20, command = 0x55 [ 326.674031][ T5826] Bluetooth: hci2: command tx timeout [ 326.841260][ T10] usb 5-1: USB disconnect, device number 14 [ 327.207707][T11192] chnl_net:caif_netlink_parms(): no params data found [ 327.556951][ T5826] Bluetooth: hci1: unexpected event for opcode 0x041b [ 327.795730][T11192] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.804376][T11192] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.813599][T11192] bridge_slave_0: entered allmulticast mode [ 327.854740][T11192] bridge_slave_0: entered promiscuous mode [ 327.884548][T11192] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.913114][T11192] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.920396][T11192] bridge_slave_1: entered allmulticast mode [ 327.979638][T11192] bridge_slave_1: entered promiscuous mode [ 328.234834][T11192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 328.279529][T11192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 328.762174][ T5826] Bluetooth: hci2: command tx timeout [ 328.971279][T11192] team0: Port device team_slave_0 added [ 329.067921][T11192] team0: Port device team_slave_1 added [ 329.245214][T11192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 329.285691][T11192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.351436][T11192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 329.407880][T11192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 329.430384][T11192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.475637][T11192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 329.669813][T11192] hsr_slave_0: entered promiscuous mode [ 329.694008][T11192] hsr_slave_1: entered promiscuous mode [ 330.833175][ T5826] Bluetooth: hci2: command tx timeout [ 331.479175][T11192] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 331.534382][T11192] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 331.586676][T11192] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 331.661648][T11192] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 331.756658][T11342] overlayfs: failed to clone upperpath [ 331.963326][ T5903] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 332.207846][ T5903] usb 3-1: config 0 has no interfaces? [ 332.222948][ T5903] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 332.305944][ T5903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.379587][ T5903] usb 3-1: config 0 descriptor?? [ 332.499971][T11192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.577844][T11192] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.625136][ T5903] usb 3-1: USB disconnect, device number 14 [ 332.657502][ T747] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.664725][ T747] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.709351][ T747] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.716567][ T747] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.913227][ T5826] Bluetooth: hci2: command tx timeout [ 333.049051][T11192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 333.795593][ T9] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 333.817738][T11192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 333.954459][T11396] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1363'. [ 333.975743][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.991438][T11192] veth0_vlan: entered promiscuous mode [ 334.001436][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 334.048295][ T9] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 334.076457][T11192] veth1_vlan: entered promiscuous mode [ 334.093067][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.139272][ T9] usb 5-1: config 0 descriptor?? [ 334.220894][T11192] veth0_macvtap: entered promiscuous mode [ 334.259972][T11192] veth1_macvtap: entered promiscuous mode [ 334.336023][T11192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.363087][T11192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.403605][T11192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.431984][T11192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.449600][T11192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.461145][T11192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.485862][T11192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 334.536959][T11192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.672541][ T9] hid-steam 0003:28DE:1142.0008: item fetching failed at offset 3/5 [ 334.683105][T11192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.693901][ T9] hid-steam 0003:28DE:1142.0008: steam_probe:parse of hid interface failed [ 334.702605][ T9] hid-steam 0003:28DE:1142.0008: probe with driver hid-steam failed with error -22 [ 334.719866][T11192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.747364][T11192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.772883][T11192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.846654][T11192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.882483][ T3076] usb 5-1: USB disconnect, device number 15 [ 335.116466][T11192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.357858][T11192] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.393053][T11192] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.401851][T11192] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.487796][T11192] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.764260][ T30] audit: type=1804 audit(1746221095.263:199): pid=11432 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.1372" name="/newroot/326/file0" dev="tmpfs" ino=1805 res=1 errno=0 [ 336.153771][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.161625][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.466543][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.496911][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.665597][T11192] ================================================================== [ 336.673692][T11192] BUG: KASAN: slab-use-after-free in binder_add_device+0x5f/0xa0 [ 336.681429][T11192] Write of size 8 at addr ffff88807ac30c08 by task syz-executor/11192 [ 336.689583][T11192] [ 336.691919][T11192] CPU: 1 UID: 0 PID: 11192 Comm: syz-executor Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(full) [ 336.691939][T11192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 336.691952][T11192] Call Trace: [ 336.691958][T11192] [ 336.691968][T11192] dump_stack_lvl+0x189/0x250 [ 336.691994][T11192] ? __kasan_check_byte+0x12/0x40 [ 336.692021][T11192] ? __pfx_dump_stack_lvl+0x10/0x10 [ 336.692040][T11192] ? lock_release+0x4b/0x3e0 [ 336.692057][T11192] ? lock_release+0x4b/0x3e0 [ 336.692077][T11192] ? __virt_addr_valid+0x469/0x540 [ 336.692096][T11192] print_report+0xb4/0x290 [ 336.692112][T11192] ? binder_add_device+0x5f/0xa0 [ 336.692132][T11192] kasan_report+0x118/0x150 [ 336.692154][T11192] ? binder_add_device+0x5f/0xa0 [ 336.692174][T11192] binder_add_device+0x5f/0xa0 [ 336.692192][T11192] binderfs_binder_device_create+0x8b7/0xaf0 [ 336.692213][T11192] binderfs_fill_super+0xa0e/0xe90 [ 336.692233][T11192] ? __pfx_binderfs_fill_super+0x10/0x10 [ 336.692260][T11192] ? shrinker_register+0x16b/0x230 [ 336.692278][T11192] ? sget_fc+0x962/0xa40 [ 336.692296][T11192] ? __pfx_set_anon_super_fc+0x10/0x10 [ 336.692320][T11192] ? __pfx_binderfs_fill_super+0x10/0x10 [ 336.692336][T11192] get_tree_nodev+0xb8/0x150 [ 336.692355][T11192] vfs_get_tree+0x8f/0x2b0 [ 336.692375][T11192] do_new_mount+0x24a/0xa40 [ 336.692400][T11192] __se_sys_mount+0x317/0x410 [ 336.692424][T11192] ? __pfx___se_sys_mount+0x10/0x10 [ 336.692446][T11192] ? do_syscall_64+0xba/0x210 [ 336.692462][T11192] ? __x64_sys_mount+0x20/0xc0 [ 336.692484][T11192] do_syscall_64+0xf6/0x210 [ 336.692500][T11192] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 336.692515][T11192] ? clear_bhb_loop+0x45/0xa0 [ 336.692531][T11192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.692545][T11192] RIP: 0033:0x7faa4e39010a [ 336.692565][T11192] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 336.692577][T11192] RSP: 002b:00007ffe9974b358 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 336.692593][T11192] RAX: ffffffffffffffda RBX: 00007faa4e410e74 RCX: 00007faa4e39010a [ 336.692603][T11192] RDX: 00007faa4e4208cb RSI: 00007faa4e410e74 RDI: 00007faa4e4208cb [ 336.692614][T11192] RBP: 00007faa4e4110bd R08: 0000000000000000 R09: 00007faa4e5b6738 [ 336.692624][T11192] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faa4e3ec1a8 [ 336.692633][T11192] R13: 00007faa4e3ec180 R14: 0000000000000009 R15: 0000000000000000 [ 336.692649][T11192] [ 336.692654][T11192] [ 336.942377][T11192] Allocated by task 7950: [ 336.946704][T11192] kasan_save_track+0x3e/0x80 [ 336.951386][T11192] __kasan_kmalloc+0x93/0xb0 [ 336.955984][T11192] __kmalloc_cache_noprof+0x230/0x3d0 [ 336.961364][T11192] binderfs_binder_device_create+0x17f/0xaf0 [ 336.967568][T11192] binderfs_fill_super+0xa0e/0xe90 [ 336.972713][T11192] get_tree_nodev+0xb8/0x150 [ 336.977313][T11192] vfs_get_tree+0x8f/0x2b0 [ 336.981739][T11192] do_new_mount+0x24a/0xa40 [ 336.986274][T11192] __se_sys_mount+0x317/0x410 [ 336.990998][T11192] do_syscall_64+0xf6/0x210 [ 336.995512][T11192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.001438][T11192] [ 337.003765][T11192] Freed by task 5903: [ 337.007743][T11192] kasan_save_track+0x3e/0x80 [ 337.012441][T11192] kasan_save_free_info+0x46/0x50 [ 337.017474][T11192] __kasan_slab_free+0x62/0x70 [ 337.022250][T11192] kfree+0x193/0x440 [ 337.026157][T11192] binder_proc_dec_tmpref+0x228/0x4f0 [ 337.031550][T11192] binder_deferred_func+0x13a5/0x1520 [ 337.036925][T11192] process_scheduled_works+0xadb/0x17a0 [ 337.042484][T11192] worker_thread+0x8a0/0xda0 [ 337.047091][T11192] kthread+0x70e/0x8a0 [ 337.051164][T11192] ret_from_fork+0x4b/0x80 [ 337.055664][T11192] ret_from_fork_asm+0x1a/0x30 [ 337.060443][T11192] [ 337.062776][T11192] The buggy address belongs to the object at ffff88807ac30c00 [ 337.062776][T11192] which belongs to the cache kmalloc-512 of size 512 [ 337.076859][T11192] The buggy address is located 8 bytes inside of [ 337.076859][T11192] freed 512-byte region [ffff88807ac30c00, ffff88807ac30e00) [ 337.090489][T11192] [ 337.092829][T11192] The buggy address belongs to the physical page: [ 337.099255][T11192] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7ac30 [ 337.108117][T11192] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 337.116624][T11192] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 337.124177][T11192] page_type: f5(slab) [ 337.128157][T11192] raw: 00fff00000000040 ffff88801a041c80 ffffea0001ee6400 dead000000000002 [ 337.136747][T11192] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 337.145440][T11192] head: 00fff00000000040 ffff88801a041c80 ffffea0001ee6400 dead000000000002 [ 337.154136][T11192] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 337.162844][T11192] head: 00fff00000000002 ffffea0001eb0c01 00000000ffffffff 00000000ffffffff [ 337.171535][T11192] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 337.180204][T11192] page dumped because: kasan: bad access detected [ 337.186624][T11192] page_owner tracks the page as allocated [ 337.192352][T11192] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5816, tgid 5816 (syz-executor), ts 86732439113, free_ts 86422023839 [ 337.213723][T11192] post_alloc_hook+0x1d8/0x230 [ 337.218503][T11192] get_page_from_freelist+0x21c7/0x22a0 [ 337.224084][T11192] __alloc_frozen_pages_noprof+0x181/0x370 [ 337.229911][T11192] alloc_pages_mpol+0x232/0x4a0 [ 337.234773][T11192] allocate_slab+0x8a/0x3b0 [ 337.239276][T11192] ___slab_alloc+0xbfc/0x1480 [ 337.243990][T11192] __kmalloc_cache_noprof+0x296/0x3d0 [ 337.249376][T11192] inetdev_init+0x7d/0x500 [ 337.253793][T11192] inetdev_event+0x301/0x15b0 [ 337.258469][T11192] notifier_call_chain+0x1b3/0x3e0 [ 337.263589][T11192] register_netdevice+0x1608/0x1af0 [ 337.268791][T11192] veth_newlink+0x5cc/0xa50 [ 337.273296][T11192] rtnl_newlink_create+0x305/0xaf0 [ 337.278406][T11192] rtnl_newlink+0x16d6/0x1c70 [ 337.283080][T11192] rtnetlink_rcv_msg+0x7cc/0xb70 [ 337.288074][T11192] netlink_rcv_skb+0x219/0x490 [ 337.292855][T11192] page last free pid 5823 tgid 5823 stack trace: [ 337.299192][T11192] __free_frozen_pages+0xb05/0xcd0 [ 337.304319][T11192] __put_partials+0x161/0x1c0 [ 337.308994][T11192] put_cpu_partial+0x17c/0x250 [ 337.313762][T11192] __slab_free+0x2f7/0x400 [ 337.318613][T11192] qlist_free_all+0x9a/0x140 [ 337.323201][T11192] kasan_quarantine_reduce+0x148/0x160 [ 337.328668][T11192] __kasan_slab_alloc+0x22/0x80 [ 337.333527][T11192] __kmalloc_cache_noprof+0x1be/0x3d0 [ 337.338913][T11192] ref_tracker_alloc+0x133/0x460 [ 337.343853][T11192] netdev_queue_update_kobjects+0x1d1/0x6c0 [ 337.349761][T11192] netdev_register_kobject+0x236/0x2f0 [ 337.355238][T11192] register_netdevice+0x126c/0x1af0 [ 337.360440][T11192] xfrmi_newlink+0x49b/0x7b0 [ 337.365033][T11192] rtnl_newlink_create+0x305/0xaf0 [ 337.370144][T11192] rtnl_newlink+0x16d6/0x1c70 [ 337.374822][T11192] rtnetlink_rcv_msg+0x7cc/0xb70 [ 337.379759][T11192] [ 337.382078][T11192] Memory state around the buggy address: [ 337.387714][T11192] ffff88807ac30b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 337.395786][T11192] ffff88807ac30b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 337.403847][T11192] >ffff88807ac30c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 337.411902][T11192] ^ [ 337.416225][T11192] ffff88807ac30c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 337.424287][T11192] ffff88807ac30d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 337.432342][T11192] ================================================================== [ 337.548384][T11192] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 337.555636][T11192] CPU: 1 UID: 0 PID: 11192 Comm: syz-executor Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(full) [ 337.567881][T11192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 337.577943][T11192] Call Trace: [ 337.581227][T11192] [ 337.584164][T11192] dump_stack_lvl+0x99/0x250 [ 337.588851][T11192] ? __asan_memcpy+0x40/0x70 [ 337.593446][T11192] ? __pfx_dump_stack_lvl+0x10/0x10 [ 337.598654][T11192] ? __pfx__printk+0x10/0x10 [ 337.603262][T11192] panic+0x2db/0x790 [ 337.607164][T11192] ? __pfx_preempt_schedule+0x10/0x10 [ 337.612537][T11192] ? __pfx_panic+0x10/0x10 [ 337.616965][T11192] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 337.622880][T11192] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 337.629233][T11192] ? binder_add_device+0x5f/0xa0 [ 337.634180][T11192] check_panic_on_warn+0x89/0xb0 [ 337.639127][T11192] ? binder_add_device+0x5f/0xa0 [ 337.644070][T11192] end_report+0x78/0x160 [ 337.648322][T11192] kasan_report+0x129/0x150 [ 337.652845][T11192] ? binder_add_device+0x5f/0xa0 [ 337.657806][T11192] binder_add_device+0x5f/0xa0 [ 337.662578][T11192] binderfs_binder_device_create+0x8b7/0xaf0 [ 337.668570][T11192] binderfs_fill_super+0xa0e/0xe90 [ 337.673691][T11192] ? __pfx_binderfs_fill_super+0x10/0x10 [ 337.679344][T11192] ? shrinker_register+0x16b/0x230 [ 337.684470][T11192] ? sget_fc+0x962/0xa40 [ 337.688715][T11192] ? __pfx_set_anon_super_fc+0x10/0x10 [ 337.694178][T11192] ? __pfx_binderfs_fill_super+0x10/0x10 [ 337.699813][T11192] get_tree_nodev+0xb8/0x150 [ 337.704409][T11192] vfs_get_tree+0x8f/0x2b0 [ 337.708832][T11192] do_new_mount+0x24a/0xa40 [ 337.713348][T11192] __se_sys_mount+0x317/0x410 [ 337.718043][T11192] ? __pfx___se_sys_mount+0x10/0x10 [ 337.723258][T11192] ? do_syscall_64+0xba/0x210 [ 337.727942][T11192] ? __x64_sys_mount+0x20/0xc0 [ 337.732719][T11192] do_syscall_64+0xf6/0x210 [ 337.737229][T11192] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 337.743392][T11192] ? clear_bhb_loop+0x45/0xa0 [ 337.748074][T11192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.753969][T11192] RIP: 0033:0x7faa4e39010a [ 337.758392][T11192] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 337.778003][T11192] RSP: 002b:00007ffe9974b358 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 337.786422][T11192] RAX: ffffffffffffffda RBX: 00007faa4e410e74 RCX: 00007faa4e39010a [ 337.794397][T11192] RDX: 00007faa4e4208cb RSI: 00007faa4e410e74 RDI: 00007faa4e4208cb [ 337.802370][T11192] RBP: 00007faa4e4110bd R08: 0000000000000000 R09: 00007faa4e5b6738 [ 337.810355][T11192] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faa4e3ec1a8 [ 337.818330][T11192] R13: 00007faa4e3ec180 R14: 0000000000000009 R15: 0000000000000000 [ 337.826317][T11192] [ 337.829489][T11192] Kernel Offset: disabled [ 337.833818][T11192] Rebooting in 86400 seconds..