last executing test programs: 17.821340118s ago: executing program 2 (id=3549): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x6b, 0x1, 0x1, 0x6}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmmsg(r2, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) r3 = dup(0xffffffffffffffff) write$FUSE_BMAP(r3, 0x0, 0x0) getresuid(0x0, &(0x7f0000000480), 0x0) fstat(r0, 0x0) read$FUSE(r0, &(0x7f0000003500)={0x2020}, 0x2020) getegid() openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) getegid() r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000021c0)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRESDEC=0x0]) syz_fuse_handle_req(r4, &(0x7f0000006e80)="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", 0x2000, 0x0) syz_fuse_handle_req(r4, &(0x7f0000008e80)="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", 0x203b, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x90, 0xfffffffffffffffe, 0x1, {0x5, 0x4, 0x40000000000, 0x400000c, 0x6c6, 0x0, {0xffffffff, 0x5000000000, 0x1, 0x9, 0x5, 0x7e, 0x8, 0xab, 0x8, 0xd000, 0x2, 0x0, 0x0, 0x3, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000880)={{}, {0x1, 0x4}, [{0x2, 0x1, 0xee01}, {0x2, 0x2}, {}, {0x2, 0x5}, {0x2, 0x2}, {0x2, 0x2}, {0x2, 0x2}], {0x4, 0x2}, [{0x8, 0x7}, {}, {0x8, 0x4, 0xee01}], {0x10, 0x4}}, 0x74, 0x2) sendfile(r1, r0, 0x0, 0x578410eb) sendfile(r1, r0, 0x0, 0x100000000) 16.672000214s ago: executing program 2 (id=3552): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r0, 0xffffffffffffffff, 0x0) 16.608132649s ago: executing program 2 (id=3553): r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000000)=0x2) 16.548018977s ago: executing program 2 (id=3554): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "2265d77eca70ffeb", "2a7490afedc2507756cce4cf72480364", "27c800", "00000000000085bc"}, 0x28) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x0, 0x7, 0x401}, 0x14}, 0x1, 0x0, 0x0, 0x48d5}, 0x8010) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffe83) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r4, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)={0x14, 0x3, 0x7, 0x301, 0x0, 0x0, {0x5}}, 0x14}}, 0x4040000) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}}, 0x0) sendto$inet6(r1, &(0x7f0000000340), 0x0, 0x8000, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000004c0)={@multicast, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @echo={0x8, 0x0, 0x0, 0xfff, 0x200}}}}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)={0x78, 0x3, 0x7, 0x0, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x9}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x7f}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x1c0000000000}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x2}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x21e81b9b}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x5}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x7}]}, 0x78}, 0x1, 0x0, 0x0, 0x840}, 0x4040) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001500000000120800030043000000a80016000400dfbfdb2d47782a462c9c801f298225c506000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d9308e56539322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3", 0xd8}], 0x1}, 0x8040) 15.56818428s ago: executing program 2 (id=3558): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x3, 0x100000) capset(0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x48f, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000140)=[{}], 0x1, 0x410) 12.154484432s ago: executing program 2 (id=3570): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x11, 0x8, &(0x7f0000001480)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000280)='kfree\x00', r3, 0x0, 0xfffffffffffffffc}, 0x18) recvmmsg$unix(r0, &(0x7f0000006f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) 6.03655491s ago: executing program 4 (id=3599): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x1c, r1, 0x331, 0x2000, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004844}, 0x0) 5.575764367s ago: executing program 4 (id=3604): socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48}) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f0000000080)={0x0, 0x20000201, 0x40, 0x0, 0x2, 0x2, 0x9}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000140)={{0xa, 0x4, 0x10, 0x9, 'syz0\x00', 0x9}, 0x1, [0x80000001, 0x8000000000000000, 0x10001, 0x1, 0x8000000000000000, 0x5, 0x7, 0x100000001, 0x1, 0x7fff, 0x8, 0xcb, 0x100, 0xa2b8, 0xc, 0xfffffffffffffffd, 0x1, 0x100, 0x79, 0x4, 0x1f, 0x57eb, 0x3, 0xfffffffffffffffb, 0x3, 0x735, 0xfa1, 0x7365a6d3, 0xffffffff, 0x6, 0x7f, 0x9, 0xfffffffffffffff8, 0x303, 0x4, 0x3, 0x25, 0x5, 0x6, 0x9, 0x100000001, 0x7, 0x0, 0x7, 0x123, 0xfffffffffffffff8, 0x7, 0x7, 0xba1, 0x1, 0xf, 0x7fff, 0x9, 0x8001, 0x2, 0x1, 0x80, 0x8, 0xfffffffffffffbff, 0x0, 0xdb, 0x401, 0x1, 0x0, 0xfffffffffffffffa, 0x6, 0x5, 0x2, 0xd, 0x907, 0xfffffffffffffffb, 0x9, 0x7, 0xff, 0x6, 0x5, 0x9, 0xa9, 0x7, 0x4, 0x81, 0x0, 0xbc, 0x7, 0x7fffffffffffffff, 0x8, 0xdea4, 0x500000000, 0x6, 0x2, 0x5, 0x4, 0xff, 0x0, 0x9, 0x33a2, 0x1, 0x9, 0x4, 0x40, 0xd, 0x100, 0x80, 0x5, 0x3, 0x7fffffff, 0x7, 0x2, 0xffff, 0x0, 0x6, 0xa2e, 0x7fffffffffffffff, 0xbb87, 0x2, 0xabfc, 0x1b9d, 0x80000000, 0x4, 0x5, 0xa, 0xfffffffffffffffb, 0x0, 0x8, 0x9, 0x1000000000, 0x7ff, 0x1]}) 3.81708653s ago: executing program 4 (id=3620): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0xe42, &(0x7f00000005c0)={0x0, 0x2119, 0x100, 0x0, 0x15b}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x80000, 0x0, 0x32}, &(0x7f0000000500)='./file0\x00', 0x1d}) io_uring_enter(r2, 0x6f58, 0x0, 0x0, 0x0, 0x0) 2.864282302s ago: executing program 4 (id=3627): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x80}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) 2.686346103s ago: executing program 0 (id=3628): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000240)='kfree\x00', r1, 0x0, 0x20}, 0x18) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100), 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000640)='syzkaller\x00', 0x7, 0xf9, &(0x7f0000000080)=""/249}, 0x94) 2.467790167s ago: executing program 4 (id=3629): socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48}) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f0000000080)={0x0, 0x20000201, 0x40, 0x0, 0x2, 0x2, 0x9}) r2 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x40000) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000140)={{0xa, 0x4, 0x10, 0x9, 'syz0\x00', 0x9}, 0x1, [0x80000001, 0x8000000000000000, 0x10001, 0x1, 0x8000000000000000, 0x5, 0x7, 0x100000001, 0x1, 0x7fff, 0x8, 0xcb, 0x100, 0xa2b8, 0xc, 0xfffffffffffffffd, 0x1, 0x100, 0x79, 0x4, 0x1f, 0x57eb, 0x3, 0xfffffffffffffffb, 0x3, 0x735, 0xfa1, 0x7365a6d3, 0xffffffff, 0x6, 0x7f, 0x9, 0xfffffffffffffff8, 0x303, 0x4, 0x3, 0x25, 0x5, 0x6, 0x9, 0x100000001, 0x7, 0x0, 0x7, 0x123, 0xfffffffffffffff8, 0x7, 0x7, 0xba1, 0x1, 0xf, 0x7fff, 0x9, 0x8001, 0x2, 0x1, 0x80, 0x8, 0xfffffffffffffbff, 0x0, 0xdb, 0x401, 0x1, 0x0, 0xfffffffffffffffa, 0x6, 0x5, 0x2, 0xd, 0x907, 0xfffffffffffffffb, 0x9, 0x7, 0xff, 0x6, 0x5, 0x9, 0xa9, 0x7, 0x4, 0x81, 0x0, 0xbc, 0x7, 0x7fffffffffffffff, 0x8, 0xdea4, 0x500000000, 0x6, 0x2, 0x5, 0x4, 0xff, 0x0, 0x9, 0x33a2, 0x1, 0x9, 0x4, 0x40, 0xd, 0x100, 0x80, 0x5, 0x3, 0x7fffffff, 0x7, 0x2, 0xffff, 0x0, 0x6, 0xa2e, 0x7fffffffffffffff, 0xbb87, 0x2, 0xabfc, 0x1b9d, 0x80000000, 0x4, 0x5, 0xa, 0xfffffffffffffffb, 0x0, 0x8, 0x9, 0x1000000000, 0x7ff, 0x1]}) 2.453120969s ago: executing program 0 (id=3630): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 2.239599876s ago: executing program 0 (id=3631): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000300)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0xc0}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="9e36d448b388dd965f7a33120813", 0x0, 0xbffffffe, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.963979603s ago: executing program 0 (id=3633): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) unshare(0x26000400) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffff7f, 0x48051}, 0x240000c4) 1.823773579s ago: executing program 3 (id=3635): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r3 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f0000000000)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x0, 0x0}) io_uring_enter(r3, 0x3498, 0x969, 0x0, 0x0, 0x0) dup3(r3, r1, 0x80000) 1.722536021s ago: executing program 0 (id=3636): r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, 0x0, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r4, 0x0, 0x4) epoll_wait(r5, &(0x7f0000000340)=[{}], 0x1, 0x80000000) 1.048126664s ago: executing program 3 (id=3638): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f00000007c0)='%', 0x1, 0xe044, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 963.94006ms ago: executing program 1 (id=3639): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000680)={0x18, 0x26, 0x1, 0x70bd2a, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}, 0x18}], 0x1}, 0x0) 850.254898ms ago: executing program 3 (id=3640): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 811.570204ms ago: executing program 1 (id=3641): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r2, 0x8947, &(0x7f0000000040)={'bond0\x00', @ifru_settings={0x10001, 0x4, @fr=0x0}}) 725.737939ms ago: executing program 1 (id=3642): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) read$eventfd(r2, 0x0, 0x0) 602.02058ms ago: executing program 3 (id=3643): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x200000, 0x0, 0x0, 0xffffffff, 0x8003}}}}]}, 0x4c}}, 0x0) 552.07097ms ago: executing program 1 (id=3644): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000080) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 394.181918ms ago: executing program 1 (id=3645): r0 = syz_io_uring_setup(0xbc3, &(0x7f0000000340)={0x0, 0x1060, 0x80, 0x0, 0x264}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x10000000000002a8, 0x8, 0x1, {0x2}}) io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0) 393.481761ms ago: executing program 4 (id=3646): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000005f40)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40000040, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004a40)=[{{&(0x7f0000000100)={0xa, 0x4e23, 0x80, @empty, 0x1}, 0x1c, 0x0}}], 0x5a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="8b3300000000fffff000050000000800", @ANYRES32=0x0], 0x38}}, 0x0) 259.980754ms ago: executing program 3 (id=3647): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000300)=r1}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r3, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) 198.993148ms ago: executing program 1 (id=3648): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000007c0)={{r0}, &(0x7f0000000740), &(0x7f0000000780)='%+9llu \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r0}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x20, &(0x7f0000000200)="df33c9f7b9a60000000000002000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bea100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001fc0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x1, 0x8, 0x9}, 0x10, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x11, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a603f00000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r3], 0x4c}}, 0x0) 79.580932ms ago: executing program 3 (id=3649): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 0s ago: executing program 0 (id=3650): r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) connect$qrtr(r0, &(0x7f0000000000)={0x2a, 0x0, 0x2}, 0xc) bind$qrtr(r0, &(0x7f00000000c0)={0x2a, 0x1}, 0xc) kernel console output (not intermixed with test programs): bcdDevice= 0.00 [ 1955.980207][ T5937] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1956.169786][ T5937] usb 1-1: config 0 descriptor?? [ 1959.959103][ T5937] usbhid 1-1:0.0: can't add hid device: -71 [ 1959.978509][ T5937] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1960.003637][ T5937] usb 1-1: USB disconnect, device number 92 [ 1961.305228][T23516] netlink: 356 bytes leftover after parsing attributes in process `syz.1.2996'. [ 1961.655653][T23534] netlink: 356 bytes leftover after parsing attributes in process `syz.3.3000'. [ 1961.763429][ T5937] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 1962.000714][ T5937] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1962.017331][ T5937] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1962.049909][ T5937] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1962.104211][ T5937] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1962.141276][ T5937] usb 1-1: config 0 descriptor?? [ 1962.383494][ T5937] usbhid 1-1:0.0: can't add hid device: -71 [ 1962.427516][ T5937] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1962.507883][ T5937] usb 1-1: USB disconnect, device number 93 [ 1965.783572][T18992] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 1966.368066][T18992] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1966.379875][T18992] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1966.394544][T18992] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1966.463783][T18992] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1966.497532][T18992] usb 1-1: config 0 descriptor?? [ 1968.995279][T18992] usbhid 1-1:0.0: can't add hid device: -71 [ 1969.105296][T18992] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1969.158068][T18992] usb 1-1: USB disconnect, device number 94 [ 1970.152282][T18992] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 1970.551967][T18992] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1970.564346][T18992] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1970.628396][T18992] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1970.662710][T18992] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1971.076846][T18992] usb 1-1: config 0 descriptor?? [ 1971.498355][T18992] usbhid 1-1:0.0: can't add hid device: -71 [ 1971.504362][T18992] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1971.590107][T18992] usb 1-1: USB disconnect, device number 95 [ 1976.268431][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.274721][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1977.795528][T23691] random: crng reseeded on system resumption [ 1979.468494][ T5923] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1979.711689][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1979.711711][ T30] audit: type=1326 audit(1757684083.122:3104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23703 comm="syz.4.3031" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb66898eba9 code=0x0 [ 1979.969058][ T5923] usb 2-1: Using ep0 maxpacket: 16 [ 1980.109720][ T5923] usb 2-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 1980.296441][T23712] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3031'. [ 1980.441234][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1980.450926][ T5923] usb 2-1: Product: syz [ 1980.455788][ T5923] usb 2-1: Manufacturer: syz [ 1980.460551][ T5923] usb 2-1: SerialNumber: syz [ 1980.486471][ T5923] usb 2-1: config 0 descriptor?? [ 1980.580721][ T5923] as10x_usb: device has been detected [ 1980.592288][ T5923] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 1980.745491][ T5923] usb 2-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 1980.832063][ T5923] as10x_usb: error during firmware upload part1 [ 1980.849240][ T5923] Registered device Sky IT Digital Key (green led) [ 1981.714832][ T30] audit: type=1326 audit(1757684085.112:3105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23719 comm="syz.4.3032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66898eba9 code=0x7ffc0000 [ 1981.842268][ T30] audit: type=1326 audit(1757684085.112:3106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23719 comm="syz.4.3032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66898eba9 code=0x7ffc0000 [ 1982.025324][ T30] audit: type=1326 audit(1757684085.112:3107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23719 comm="syz.4.3032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fb66898eba9 code=0x7ffc0000 [ 1982.109007][T23696] delete_channel: no stack [ 1982.221707][ T5923] usb 2-1: USB disconnect, device number 89 [ 1982.746324][ T5923] Unregistered device Sky IT Digital Key (green led) [ 1982.757842][ T5923] as10x_usb: device has been disconnected [ 1982.795831][T23728] random: crng reseeded on system resumption [ 1983.262776][ T30] audit: type=1326 audit(1757684085.112:3108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23719 comm="syz.4.3032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66898eba9 code=0x7ffc0000 [ 1983.397167][ T30] audit: type=1326 audit(1757684085.112:3109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23719 comm="syz.4.3032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fb66898eba9 code=0x7ffc0000 [ 1983.442416][ T30] audit: type=1326 audit(1757684085.112:3110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23719 comm="syz.4.3032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66898eba9 code=0x7ffc0000 [ 1983.526225][ T30] audit: type=1326 audit(1757684085.112:3111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23719 comm="syz.4.3032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fb66898eba9 code=0x7ffc0000 [ 1983.637724][ T30] audit: type=1326 audit(1757684085.112:3112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23719 comm="syz.4.3032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66898eba9 code=0x7ffc0000 [ 1983.741252][ T30] audit: type=1326 audit(1757684085.112:3113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23719 comm="syz.4.3032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fb66898eba9 code=0x7ffc0000 [ 1989.618638][T23794] random: crng reseeded on system resumption [ 1989.837067][T23796] syz.2.3045 (23796): drop_caches: 2 [ 1991.643453][T23806] netlink: 356 bytes leftover after parsing attributes in process `syz.3.3046'. [ 1992.382893][T23823] random: crng reseeded on system resumption [ 1994.168949][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 1994.168961][ T30] audit: type=1326 audit(1757684097.602:3176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23827 comm="syz.3.3050" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e9b58eba9 code=0x0 [ 1994.416048][ T30] audit: type=1326 audit(1757684097.802:3177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23829 comm="syz.2.3051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad578eba9 code=0x7ffc0000 [ 1994.493914][T23835] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3050'. [ 1995.201542][ T30] audit: type=1326 audit(1757684097.802:3178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23829 comm="syz.2.3051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad578eba9 code=0x7ffc0000 [ 1995.289281][ T30] audit: type=1326 audit(1757684097.812:3179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23829 comm="syz.2.3051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fcad578eba9 code=0x7ffc0000 [ 1995.315978][ T30] audit: type=1326 audit(1757684097.812:3180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23829 comm="syz.2.3051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad578eba9 code=0x7ffc0000 [ 1996.251175][ T30] audit: type=1326 audit(1757684097.812:3181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23829 comm="syz.2.3051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad578eba9 code=0x7ffc0000 [ 1996.638362][ T30] audit: type=1326 audit(1757684097.812:3182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23829 comm="syz.2.3051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fcad578eba9 code=0x7ffc0000 [ 1996.661550][ T30] audit: type=1326 audit(1757684097.812:3183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23829 comm="syz.2.3051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad578eba9 code=0x7ffc0000 [ 1996.684148][ T30] audit: type=1326 audit(1757684097.812:3184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23829 comm="syz.2.3051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad578eba9 code=0x7ffc0000 [ 1997.461514][ T30] audit: type=1326 audit(1757684097.812:3185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23829 comm="syz.2.3051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fcad578eba9 code=0x7ffc0000 [ 1998.161208][T23865] random: crng reseeded on system resumption [ 2000.479167][T23883] netlink: 356 bytes leftover after parsing attributes in process `syz.1.3059'. [ 2000.665488][T23879] random: crng reseeded on system resumption [ 2001.335987][T23890] netlink: 356 bytes leftover after parsing attributes in process `syz.3.3060'. [ 2002.201213][T23896] random: crng reseeded on system resumption [ 2003.056466][T23911] random: crng reseeded on system resumption [ 2009.018492][T23952] random: crng reseeded on system resumption [ 2010.197675][T23967] random: crng reseeded on system resumption [ 2010.546703][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 2010.546723][ T30] audit: type=1326 audit(1757684113.822:3221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23968 comm="syz.4.3074" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb66898eba9 code=0x0 [ 2012.375758][T23984] syz.0.3076 (23984): drop_caches: 2 [ 2015.907755][T24015] random: crng reseeded on system resumption [ 2016.228394][ T5938] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 2016.388531][ T5938] usb 3-1: Using ep0 maxpacket: 16 [ 2016.408026][ T5938] usb 3-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 2016.424119][ T5938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2016.438381][ T5938] usb 3-1: Product: syz [ 2016.445264][ T5938] usb 3-1: Manufacturer: syz [ 2016.454795][ T5938] usb 3-1: SerialNumber: syz [ 2016.464734][ T5938] usb 3-1: config 0 descriptor?? [ 2016.528837][ T5938] as10x_usb: device has been detected [ 2016.558144][ T5938] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 2016.670357][ T5938] usb 3-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 2016.690955][ T5938] as10x_usb: error during firmware upload part1 [ 2016.697272][ T5938] Registered device Sky IT Digital Key (green led) [ 2016.780778][T24003] delete_channel: no stack [ 2016.890240][ T5923] usb 3-1: USB disconnect, device number 105 [ 2016.914214][ T5923] Unregistered device Sky IT Digital Key (green led) [ 2016.917918][ T5923] as10x_usb: device has been disconnected [ 2017.006201][T24031] random: crng reseeded on system resumption [ 2020.632196][T24060] random: crng reseeded on system resumption [ 2023.338812][T24060] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 2026.968472][T13652] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 2027.246402][T13652] usb 3-1: Using ep0 maxpacket: 16 [ 2027.262472][T13652] usb 3-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 2027.273602][T13652] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2027.300548][T13652] usb 3-1: Product: syz [ 2027.304960][T13652] usb 3-1: Manufacturer: syz [ 2027.325129][T13652] usb 3-1: SerialNumber: syz [ 2027.367566][T13652] usb 3-1: config 0 descriptor?? [ 2027.394677][T13652] as10x_usb: device has been detected [ 2027.403472][T13652] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 2028.188941][T13652] usb 3-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 2028.224519][T13652] as10x_usb: error during firmware upload part1 [ 2028.251392][T13652] Registered device Sky IT Digital Key (green led) [ 2029.178680][T16575] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 2029.328543][T24088] delete_channel: no stack [ 2029.341348][T13652] usb 3-1: USB disconnect, device number 106 [ 2029.528498][T16575] usb 4-1: Using ep0 maxpacket: 16 [ 2029.971318][T13652] Unregistered device Sky IT Digital Key (green led) [ 2029.998302][T13652] as10x_usb: device has been disconnected [ 2030.054531][T16575] usb 4-1: too many endpoints for config 0 interface 0 altsetting 4: 255, using maximum allowed: 30 [ 2030.117657][T16575] usb 4-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 2030.268439][T16575] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2030.361856][T16575] usb 4-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.00 [ 2030.395671][T24130] random: crng reseeded on system resumption [ 2030.507337][T16575] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2030.531095][T16575] usb 4-1: config 0 descriptor?? [ 2030.563509][T24119] netlink: 356 bytes leftover after parsing attributes in process `syz.0.3098'. [ 2033.634066][T16575] usbhid 4-1:0.0: can't add hid device: -71 [ 2033.643480][T16575] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2033.668372][ T30] audit: type=1326 audit(1757684137.082:3222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24144 comm="syz.1.3103" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f899578eba9 code=0x0 [ 2033.688550][T16575] usb 4-1: USB disconnect, device number 105 [ 2034.858027][T24172] netlink: 356 bytes leftover after parsing attributes in process `syz.3.3104'. [ 2035.206371][T24178] random: crng reseeded on system resumption [ 2037.759721][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.766032][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 2038.698386][T13652] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 2039.618348][T13652] usb 1-1: Using ep0 maxpacket: 16 [ 2039.950692][T13652] usb 1-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 2040.015011][T13652] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2040.557829][T13652] usb 1-1: Product: syz [ 2040.744655][T13652] usb 1-1: Manufacturer: syz [ 2040.753381][T13652] usb 1-1: SerialNumber: syz [ 2040.777823][T13652] usb 1-1: config 0 descriptor?? [ 2040.954298][T24222] netlink: 356 bytes leftover after parsing attributes in process `syz.4.3114'. [ 2041.809706][T24232] random: crng reseeded on system resumption [ 2042.730724][T24234] random: crng reseeded on system resumption [ 2043.416437][T13652] usb 1-1: can't set config #0, error -71 [ 2043.436824][T13652] usb 1-1: USB disconnect, device number 96 [ 2046.460736][T24279] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3122'. [ 2049.323254][T16575] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 2050.188364][ T24] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 2050.467466][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 2050.497374][ T24] usb 3-1: too many endpoints for config 0 interface 0 altsetting 4: 255, using maximum allowed: 30 [ 2050.561156][ T24] usb 3-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 2050.856243][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2050.900064][ T24] usb 3-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.00 [ 2050.948427][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2050.979599][ T24] usb 3-1: config 0 descriptor?? [ 2051.991962][T24325] random: crng reseeded on system resumption [ 2053.170825][T24340] bond0: option primary_reselect: invalid value (255) [ 2053.424485][ T30] audit: type=1326 audit(1757684156.652:3223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24334 comm="syz.3.3133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9b58eba9 code=0x7ffc0000 [ 2053.821810][ T30] audit: type=1326 audit(1757684156.652:3224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24334 comm="syz.3.3133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9b58eba9 code=0x7ffc0000 [ 2053.844278][ C0] vkms_vblank_simulate: vblank timer overrun [ 2053.984114][ T30] audit: type=1326 audit(1757684156.652:3225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24334 comm="syz.3.3133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f1e9b58eba9 code=0x7ffc0000 [ 2054.127185][ T30] audit: type=1326 audit(1757684156.652:3226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24334 comm="syz.3.3133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9b58eba9 code=0x7ffc0000 [ 2054.220329][ T30] audit: type=1326 audit(1757684156.662:3227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24334 comm="syz.3.3133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9b58eba9 code=0x7ffc0000 [ 2054.648372][ T30] audit: type=1326 audit(1757684156.662:3228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24334 comm="syz.3.3133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f1e9b58eba9 code=0x7ffc0000 [ 2054.745328][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 2054.751592][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2054.769738][ T30] audit: type=1326 audit(1757684156.662:3229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24334 comm="syz.3.3133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9b58eba9 code=0x7ffc0000 [ 2054.831556][ T24] usb 3-1: USB disconnect, device number 107 [ 2054.899785][ T30] audit: type=1326 audit(1757684156.662:3230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24334 comm="syz.3.3133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f1e9b58eba9 code=0x7ffc0000 [ 2055.014738][ T30] audit: type=1326 audit(1757684156.662:3231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24334 comm="syz.3.3133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9b58eba9 code=0x7ffc0000 [ 2055.158382][ T30] audit: type=1326 audit(1757684156.662:3232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24334 comm="syz.3.3133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f1e9b58eba9 code=0x7ffc0000 [ 2055.607945][ T24] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 2057.438336][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 2057.538836][ T24] usb 4-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 2057.558344][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2057.566422][ T24] usb 4-1: Product: syz [ 2057.584843][ T24] usb 4-1: Manufacturer: syz [ 2057.770293][ T24] usb 4-1: SerialNumber: syz [ 2057.797495][ T24] usb 4-1: config 0 descriptor?? [ 2057.815275][ T24] as10x_usb: device has been detected [ 2057.821876][ T24] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 2057.975327][ T24] usb 4-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 2058.186333][ T24] as10x_usb: error during firmware upload part1 [ 2058.206323][ T24] Registered device Sky IT Digital Key (green led) [ 2061.443934][T24352] delete_channel: no stack [ 2061.458975][ T5923] usb 4-1: USB disconnect, device number 106 [ 2061.487995][T24404] random: crng reseeded on system resumption [ 2061.742569][ T5923] Unregistered device Sky IT Digital Key (green led) [ 2061.827963][ T5923] as10x_usb: device has been disconnected [ 2062.670792][T24420] random: crng reseeded on system resumption [ 2063.572541][T24425] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3149'. [ 2065.330310][T24449] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3151'. [ 2066.774420][T24463] netlink: 356 bytes leftover after parsing attributes in process `syz.1.3154'. [ 2069.532452][T24478] random: crng reseeded on system resumption [ 2070.434492][T24493] netlink: 6032 bytes leftover after parsing attributes in process `syz.4.3159'. [ 2072.294747][T24507] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3161'. [ 2072.578193][T24513] random: crng reseeded on system resumption [ 2072.836417][T24504] netlink: 6032 bytes leftover after parsing attributes in process `syz.4.3160'. [ 2074.872014][T24538] syz.3.3166 (24538): drop_caches: 2 [ 2075.025250][T24539] random: crng reseeded on system resumption [ 2075.498531][ T5938] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 2075.690249][ T5938] usb 1-1: Using ep0 maxpacket: 16 [ 2075.720972][ T5938] usb 1-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 2075.732507][ T5938] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2075.741375][ T5938] usb 1-1: Product: syz [ 2075.745612][ T5938] usb 1-1: Manufacturer: syz [ 2075.752395][ T5938] usb 1-1: SerialNumber: syz [ 2075.759120][ T5938] usb 1-1: config 0 descriptor?? [ 2075.781895][ T5938] as10x_usb: device has been detected [ 2075.794850][ T5938] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 2075.831741][ T5938] usb 1-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 2075.853690][ T5938] as10x_usb: error during firmware upload part1 [ 2075.967607][ T5938] Registered device Sky IT Digital Key (green led) [ 2077.568364][ T24] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 2077.818378][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 2077.824420][ T24] usb 5-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 2077.824452][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2077.824473][ T24] usb 5-1: Product: syz [ 2077.824490][ T24] usb 5-1: Manufacturer: syz [ 2077.824505][ T24] usb 5-1: SerialNumber: syz [ 2077.827400][ T24] usb 5-1: config 0 descriptor?? [ 2077.830833][ T24] as10x_usb: device has been detected [ 2077.831296][ T24] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 2077.870359][ T24] usb 5-1: DVB: registering adapter 2 frontend 0 (Sky IT Digital Key (green led))... [ 2077.876550][ T24] as10x_usb: error during firmware upload part1 [ 2077.876588][ T24] Registered device Sky IT Digital Key (green led) [ 2079.345378][T24543] delete_channel: no stack [ 2079.375185][T18992] usb 1-1: USB disconnect, device number 97 [ 2079.574342][T18992] Unregistered device Sky IT Digital Key (green led) [ 2079.575323][T18992] as10x_usb: device has been disconnected [ 2079.745628][T24579] random: crng reseeded on system resumption [ 2083.006854][T24565] delete_channel: no stack [ 2083.036255][ T5923] usb 5-1: USB disconnect, device number 85 [ 2083.095981][ T5923] Unregistered device Sky IT Digital Key (green led) [ 2083.111383][ T5923] as10x_usb: device has been disconnected [ 2084.009190][ T5923] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 2084.214945][ T5923] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2084.239854][ T5923] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2084.291008][ T5923] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2084.420106][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2084.501949][ T5923] usb 4-1: SerialNumber: syz [ 2085.048501][T13652] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 2085.275630][T13652] usb 1-1: Using ep0 maxpacket: 16 [ 2085.298083][T13652] usb 1-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 2085.327708][T13652] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2085.351894][T13652] usb 1-1: Product: syz [ 2085.369444][T13652] usb 1-1: Manufacturer: syz [ 2085.628374][T13652] usb 1-1: SerialNumber: syz [ 2085.634935][T13652] usb 1-1: config 0 descriptor?? [ 2085.692114][T13652] as10x_usb: device has been detected [ 2085.697991][T13652] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 2085.715077][T13652] usb 1-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 2085.725715][T13652] as10x_usb: error during firmware upload part1 [ 2085.732020][T13652] Registered device Sky IT Digital Key (green led) [ 2085.955752][T24615] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3180'. [ 2086.308633][T13652] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 2086.831624][T13652] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2086.881276][T13652] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2087.175627][T13652] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2087.194718][T13652] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2087.227499][ T5923] usb 4-1: 0:2 : does not exist [ 2087.251347][T13652] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2087.278912][ T5923] usb 4-1: USB disconnect, device number 107 [ 2087.301307][T13652] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2087.360406][T13652] usb 2-1: config 0 descriptor?? [ 2087.893541][T24605] delete_channel: no stack [ 2087.910634][ T5938] usb 1-1: USB disconnect, device number 98 [ 2088.021009][ T5938] Unregistered device Sky IT Digital Key (green led) [ 2088.033534][ T5938] as10x_usb: device has been disconnected [ 2088.198336][T18992] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 2088.392209][T24636] netlink: 356 bytes leftover after parsing attributes in process `syz.3.3181'. [ 2088.432920][T13652] plantronics 0003:047F:FFFF.000F: ignoring exceeding usage max [ 2088.874249][T13652] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 2088.900882][T18992] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2089.142321][T18992] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2089.194941][T13652] usb 2-1: USB disconnect, device number 91 [ 2089.229919][T18992] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2089.261120][T18992] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2089.306623][T18992] usb 5-1: SerialNumber: syz [ 2089.410555][T24641] fido_id[24641]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 2089.622060][T24648] random: crng reseeded on system resumption [ 2092.009838][T12208] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 2092.964553][T12208] usb 4-1: Using ep0 maxpacket: 16 [ 2093.005688][T18992] usb 5-1: 0:2 : does not exist [ 2093.052368][T12208] usb 4-1: too many endpoints for config 0 interface 0 altsetting 4: 255, using maximum allowed: 30 [ 2093.151497][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 2093.151514][ T30] audit: type=1326 audit(1757684196.562:3263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24668 comm="syz.0.3189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc98e98eba9 code=0x7ffc0000 [ 2093.396248][T12208] usb 4-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 2093.447604][T18992] usb 5-1: USB disconnect, device number 86 [ 2093.470223][T12208] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2093.505627][T24546] udevd[24546]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2093.543027][T12208] usb 4-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.00 [ 2093.604505][T12208] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2093.637553][T12208] usb 4-1: config 0 descriptor?? [ 2093.826837][T24681] random: crng reseeded on system resumption [ 2093.928424][ T30] audit: type=1326 audit(1757684196.562:3264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24668 comm="syz.0.3189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc98e98eba9 code=0x7ffc0000 [ 2094.042557][ T30] audit: type=1326 audit(1757684196.562:3265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24668 comm="syz.0.3189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fc98e98eba9 code=0x7ffc0000 [ 2094.073325][ T30] audit: type=1326 audit(1757684196.562:3266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24668 comm="syz.0.3189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc98e98eba9 code=0x7ffc0000 [ 2094.096219][ T30] audit: type=1326 audit(1757684196.562:3267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24668 comm="syz.0.3189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc98e98eba9 code=0x7ffc0000 [ 2094.119267][ T30] audit: type=1326 audit(1757684196.562:3268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24668 comm="syz.0.3189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fc98e98eba9 code=0x7ffc0000 [ 2094.148718][ T30] audit: type=1326 audit(1757684196.562:3269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24668 comm="syz.0.3189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc98e98eba9 code=0x7ffc0000 [ 2094.187817][ T30] audit: type=1326 audit(1757684196.562:3270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24668 comm="syz.0.3189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc98e98eba9 code=0x7ffc0000 [ 2094.456641][ T30] audit: type=1326 audit(1757684196.562:3271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24668 comm="syz.0.3189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fc98e98eba9 code=0x7ffc0000 [ 2094.479572][T12208] usb 4-1: can't set config #0, error -71 [ 2094.525458][T12208] usb 4-1: USB disconnect, device number 108 [ 2094.748544][ T30] audit: type=1326 audit(1757684196.562:3272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24668 comm="syz.0.3189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc98e98eba9 code=0x7ffc0000 [ 2099.208757][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2099.215178][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 2100.666618][T24738] random: crng reseeded on system resumption [ 2101.038429][T18992] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 2101.534029][T18992] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2101.627594][T24755] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3202'. [ 2101.761197][T18992] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2101.801808][T18992] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2101.875322][T18992] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2102.043060][T18992] usb 4-1: SerialNumber: syz [ 2103.954070][T24773] random: crng reseeded on system resumption [ 2105.396220][T24788] random: crng reseeded on system resumption [ 2106.396665][T18992] usb 4-1: 0:2 : does not exist [ 2106.421263][T18992] usb 4-1: USB disconnect, device number 109 [ 2106.450947][T24546] udevd[24546]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2108.690409][T24810] random: crng reseeded on system resumption [ 2111.257431][T24841] random: crng reseeded on system resumption [ 2111.316116][ T24] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 2111.481395][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2111.495769][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2111.710434][ T24] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2111.720034][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2111.728016][ T24] usb 1-1: SerialNumber: syz [ 2111.978524][T12208] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 2113.250490][T12208] usb 5-1: Using ep0 maxpacket: 16 [ 2113.500458][T12208] usb 5-1: too many endpoints for config 0 interface 0 altsetting 4: 255, using maximum allowed: 30 [ 2113.544745][T12208] usb 5-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 2113.592799][T12208] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2113.618615][T12208] usb 5-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.00 [ 2113.646786][T12208] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2113.696423][T12208] usb 5-1: config 0 descriptor?? [ 2113.831515][T24860] random: crng reseeded on system resumption [ 2114.107246][T24853] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2114.592862][T12208] usbhid 5-1:0.0: can't add hid device: -71 [ 2114.629753][T12208] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2114.673624][T12208] usb 5-1: USB disconnect, device number 87 [ 2115.074097][ T24] usb 1-1: 0:2 : does not exist [ 2115.138339][ T24] usb 1-1: USB disconnect, device number 99 [ 2115.355127][T24546] udevd[24546]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2118.067209][T18992] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 2118.428530][T18992] usb 3-1: Using ep0 maxpacket: 16 [ 2120.312330][T24914] random: crng reseeded on system resumption [ 2120.670512][T18992] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 2120.678326][T18992] usb 3-1: can't read configurations, error -71 [ 2120.924478][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 2120.924500][ T30] audit: type=1326 audit(1757684224.172:3294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24915 comm="syz.4.3227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66898eba9 code=0x7ffc0000 [ 2121.597599][ T30] audit: type=1326 audit(1757684224.172:3295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24915 comm="syz.4.3227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66898eba9 code=0x7ffc0000 [ 2121.620119][ C1] vkms_vblank_simulate: vblank timer overrun [ 2121.661958][ T30] audit: type=1326 audit(1757684224.172:3296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24915 comm="syz.4.3227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fb66898eba9 code=0x7ffc0000 [ 2121.684403][ C1] vkms_vblank_simulate: vblank timer overrun [ 2121.755797][ T30] audit: type=1326 audit(1757684224.172:3297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24915 comm="syz.4.3227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66898eba9 code=0x7ffc0000 [ 2121.791144][ T30] audit: type=1326 audit(1757684224.172:3298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24915 comm="syz.4.3227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fb66898eba9 code=0x7ffc0000 [ 2121.826426][ T30] audit: type=1326 audit(1757684224.172:3299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24915 comm="syz.4.3227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66898eba9 code=0x7ffc0000 [ 2122.536100][ T30] audit: type=1326 audit(1757684224.172:3300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24915 comm="syz.4.3227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fb66898eba9 code=0x7ffc0000 [ 2122.667646][ T30] audit: type=1326 audit(1757684224.172:3301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24915 comm="syz.4.3227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66898eba9 code=0x7ffc0000 [ 2122.783274][ T30] audit: type=1326 audit(1757684224.172:3302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24915 comm="syz.4.3227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fb66898eba9 code=0x7ffc0000 [ 2122.805688][ C1] vkms_vblank_simulate: vblank timer overrun [ 2122.821905][T24930] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3228'. [ 2122.961699][ T30] audit: type=1326 audit(1757684224.182:3303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24915 comm="syz.4.3227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66898eba9 code=0x7ffc0000 [ 2122.984152][ C1] vkms_vblank_simulate: vblank timer overrun [ 2123.309728][T24944] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3232'. [ 2123.677096][T24946] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2123.788480][T18992] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 2124.153884][T18992] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2124.184921][T18992] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2124.204457][T18992] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2124.235238][T18992] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2125.692586][T18992] usb 3-1: config 0 descriptor?? [ 2125.837010][T18992] usb 3-1: string descriptor 0 read error: -71 [ 2126.120240][T24962] random: crng reseeded on system resumption [ 2126.144870][T18992] usb 3-1: USB disconnect, device number 110 [ 2128.908337][ T5938] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 2129.529655][ T5938] usb 4-1: Using ep0 maxpacket: 16 [ 2130.198636][ T5938] usb 4-1: too many endpoints for config 0 interface 0 altsetting 4: 255, using maximum allowed: 30 [ 2130.254645][ T5938] usb 4-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 2130.288808][ T5938] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2130.328315][ T5938] usb 4-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.00 [ 2130.366814][ T5938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2130.871411][ T5938] usb 4-1: config 0 descriptor?? [ 2131.535949][T25006] random: crng reseeded on system resumption [ 2133.516332][ T5938] usb 4-1: can't set config #0, error -71 [ 2133.569792][ T5938] usb 4-1: USB disconnect, device number 110 [ 2133.971610][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 2133.971629][ T30] audit: type=1326 audit(1757684237.382:3323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25016 comm="syz.1.3245" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f899578eba9 code=0x0 [ 2134.000571][ C1] vkms_vblank_simulate: vblank timer overrun [ 2135.269822][T25034] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2138.620222][T25073] random: crng reseeded on system resumption [ 2143.402772][T25100] bond0: option primary_reselect: invalid value (255) [ 2146.766729][T25121] random: crng reseeded on system resumption [ 2147.897984][T25135] netlink: 6048 bytes leftover after parsing attributes in process `syz.4.3265'. [ 2148.837729][T25141] netlink: 6040 bytes leftover after parsing attributes in process `syz.1.3266'. [ 2150.447021][T25157] random: crng reseeded on system resumption [ 2153.534139][T25183] random: crng reseeded on system resumption [ 2156.508683][ T5938] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 2157.718414][ T5938] usb 4-1: Using ep0 maxpacket: 16 [ 2157.853336][ T5938] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2157.883321][ T5938] usb 4-1: config 0 has no interfaces? [ 2157.897722][ T5938] usb 4-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 2157.909194][ T5938] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2157.935261][ T5938] usb 4-1: Product: syz [ 2157.944841][ T5938] usb 4-1: Manufacturer: syz [ 2157.974734][ T5938] usb 4-1: SerialNumber: syz [ 2158.016753][ T5938] usb 4-1: config 0 descriptor?? [ 2158.043040][T25213] netlink: 6048 bytes leftover after parsing attributes in process `syz.1.3279'. [ 2159.635561][T25224] netlink: 6040 bytes leftover after parsing attributes in process `syz.4.3281'. [ 2160.251512][T25233] random: crng reseeded on system resumption [ 2160.441592][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.447896][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 2161.203888][T25202] delete_channel: no stack [ 2161.223223][ T5923] usb 4-1: USB disconnect, device number 111 [ 2162.808416][ T30] audit: type=1326 audit(1757684266.212:3324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25244 comm="syz.3.3286" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e9b58eba9 code=0x0 [ 2164.871942][ T5923] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 2166.402170][ T5923] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2166.418838][T25285] random: crng reseeded on system resumption [ 2166.461184][ T5923] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2166.475532][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2166.491027][ T5923] usb 3-1: config 0 descriptor?? [ 2166.502623][ T5923] pwc: Askey VC010 type 2 USB webcam detected. [ 2167.089038][ T5923] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2167.240638][ T5923] pwc: recv_control_msg error -32 req 02 val 2700 [ 2167.243950][ T5923] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2167.245799][ T5923] pwc: recv_control_msg error -32 req 04 val 1000 [ 2167.248969][ T5923] pwc: recv_control_msg error -32 req 04 val 1300 [ 2167.272317][ T5923] pwc: recv_control_msg error -32 req 04 val 1400 [ 2167.304094][ T5923] pwc: recv_control_msg error -32 req 02 val 2000 [ 2167.304943][ T5923] pwc: recv_control_msg error -32 req 02 val 2100 [ 2167.305795][ T5923] pwc: recv_control_msg error -32 req 04 val 1500 [ 2167.306495][ T5923] pwc: recv_control_msg error -32 req 02 val 2500 [ 2167.307197][ T5923] pwc: recv_control_msg error -32 req 02 val 2400 [ 2167.307910][ T5923] pwc: recv_control_msg error -32 req 02 val 2600 [ 2167.309577][ T5923] pwc: recv_control_msg error -32 req 02 val 2900 [ 2167.310319][ T5923] pwc: recv_control_msg error -71 req 02 val 2800 [ 2167.310977][ T5923] pwc: recv_control_msg error -71 req 04 val 1100 [ 2167.311373][ T5923] pwc: recv_control_msg error -71 req 04 val 1200 [ 2167.313068][ T5923] pwc: Registered as video103. [ 2167.315221][ T5923] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input87 [ 2167.317899][ T5923] usb 3-1: USB disconnect, device number 111 [ 2169.350638][T25317] random: crng reseeded on system resumption [ 2170.186669][T25334] bond0: option primary_reselect: invalid value (255) [ 2170.260739][ T30] audit: type=1326 audit(1757684273.662:3325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25329 comm="syz.1.3299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899578eba9 code=0x7ffc0000 [ 2170.407455][ T30] audit: type=1326 audit(1757684273.662:3326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25329 comm="syz.1.3299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899578eba9 code=0x7ffc0000 [ 2170.480831][ T30] audit: type=1326 audit(1757684273.662:3327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25329 comm="syz.1.3299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f899578eba9 code=0x7ffc0000 [ 2170.503480][T18992] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 2170.587836][ T30] audit: type=1326 audit(1757684273.662:3328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25329 comm="syz.1.3299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899578eba9 code=0x7ffc0000 [ 2170.667088][ T30] audit: type=1326 audit(1757684273.662:3329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25329 comm="syz.1.3299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899578eba9 code=0x7ffc0000 [ 2170.748372][T18992] usb 4-1: Using ep0 maxpacket: 16 [ 2170.770005][ T30] audit: type=1326 audit(1757684273.662:3330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25329 comm="syz.1.3299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f899578eba9 code=0x7ffc0000 [ 2170.915566][T18992] usb 4-1: too many endpoints for config 0 interface 0 altsetting 4: 255, using maximum allowed: 30 [ 2170.941319][T18992] usb 4-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 2170.965231][ T30] audit: type=1326 audit(1757684273.662:3331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25329 comm="syz.1.3299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899578eba9 code=0x7ffc0000 [ 2170.996824][T18992] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2171.013858][T18992] usb 4-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.00 [ 2171.058387][T18992] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2171.066492][ T30] audit: type=1326 audit(1757684273.662:3332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25329 comm="syz.1.3299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899578eba9 code=0x7ffc0000 [ 2171.096164][T18992] usb 4-1: config 0 descriptor?? [ 2171.161578][ T30] audit: type=1326 audit(1757684273.662:3333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25329 comm="syz.1.3299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f899578eba9 code=0x7ffc0000 [ 2171.302611][ T30] audit: type=1326 audit(1757684273.662:3334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25329 comm="syz.1.3299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899578eba9 code=0x7ffc0000 [ 2174.071910][T25354] netlink: 6048 bytes leftover after parsing attributes in process `syz.4.3303'. [ 2176.485599][T18992] usbhid 4-1:0.0: can't add hid device: -32 [ 2176.562085][T18992] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 2177.042638][ T5923] usb 4-1: USB disconnect, device number 112 [ 2177.302497][T25375] random: crng reseeded on system resumption [ 2178.088101][T25378] random: crng reseeded on system resumption [ 2179.718481][T18992] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 2179.878375][T18992] usb 4-1: Using ep0 maxpacket: 16 [ 2179.903142][T18992] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2180.165640][T18992] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2180.211182][T18992] usb 4-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 2180.220855][T18992] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2180.242165][T18992] usb 4-1: Product: syz [ 2180.246332][T18992] usb 4-1: Manufacturer: syz [ 2180.259825][T18992] usb 4-1: SerialNumber: syz [ 2180.283322][T18992] usb 4-1: config 0 descriptor?? [ 2181.032807][T18992] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 2181.499509][T18992] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2181.973003][T18992] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2182.004191][T18992] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2182.054977][T18992] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2182.072245][T18992] usb 3-1: SerialNumber: syz [ 2182.793331][T25393] delete_channel: no stack [ 2183.225420][T12208] usb 4-1: USB disconnect, device number 113 [ 2183.238440][ T5923] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 2183.523991][ T5923] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2183.655924][ T5923] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2183.675820][ T5923] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2183.748209][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2183.756446][ T5923] usb 2-1: SerialNumber: syz [ 2183.804778][T18992] usb 3-1: 0:2 : does not exist [ 2184.028694][T18992] usb 3-1: USB disconnect, device number 112 [ 2184.928359][ T24] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 2185.166796][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2185.287597][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2185.498712][ T24] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2185.554915][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2185.614803][ T24] usb 1-1: SerialNumber: syz [ 2185.981851][T25446] netlink: 6040 bytes leftover after parsing attributes in process `syz.3.3318'. [ 2186.297340][ T5923] usb 2-1: 0:2 : does not exist [ 2186.364312][ T5923] usb 2-1: USB disconnect, device number 92 [ 2186.664016][T25423] udevd[25423]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2187.398455][ T5937] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 2187.552804][ T24] usb 1-1: 0:2 : does not exist [ 2187.600223][ T5937] usb 5-1: Using ep0 maxpacket: 16 [ 2187.975256][ T24] usb 1-1: USB disconnect, device number 100 [ 2188.064313][T25463] random: crng reseeded on system resumption [ 2188.435647][ T5937] usb 5-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 2188.853524][ T5937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2188.884096][ T5937] usb 5-1: Product: syz [ 2188.895051][ T5937] usb 5-1: Manufacturer: syz [ 2189.130677][ T5937] usb 5-1: SerialNumber: syz [ 2189.625463][ T5937] usb 5-1: config 0 descriptor?? [ 2190.288400][T25424] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 2190.598642][T25424] usb 2-1: Using ep0 maxpacket: 16 [ 2190.708402][T25424] usb 2-1: too many endpoints for config 0 interface 0 altsetting 4: 255, using maximum allowed: 30 [ 2190.738342][T25424] usb 2-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 2190.801491][T25424] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2190.822194][T25424] usb 2-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.00 [ 2191.271570][T25424] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2191.309726][T25424] usb 2-1: config 0 descriptor?? [ 2192.003190][ T5937] usb 5-1: can't set config #0, error -71 [ 2192.010631][ T5937] usb 5-1: USB disconnect, device number 88 [ 2192.184256][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 2192.184284][ T30] audit: type=1326 audit(1757684295.612:3364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25486 comm="syz.2.3327" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcad578eba9 code=0x0 [ 2192.416649][T25495] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3327'. [ 2194.558531][ T5923] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 2194.828454][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2194.898563][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2194.913585][T25424] usbhid 2-1:0.0: can't add hid device: -71 [ 2194.987010][T25424] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2195.056182][ T5923] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 2195.067500][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2195.170323][T25424] usb 2-1: USB disconnect, device number 93 [ 2195.222762][ T30] audit: type=1326 audit(1757684298.652:3365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25508 comm="syz.2.3332" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcad578eba9 code=0x0 [ 2195.309251][ T5923] usb 4-1: config 0 descriptor?? [ 2195.350063][T25512] netlink: 120 bytes leftover after parsing attributes in process `syz.2.3332'. [ 2195.575385][ T30] audit: type=1326 audit(1757684299.002:3366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25514 comm="syz.0.3333" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc98e98eba9 code=0x0 [ 2195.752146][T25521] netlink: 120 bytes leftover after parsing attributes in process `syz.0.3333'. [ 2198.402953][ T5923] usbhid 4-1:0.0: can't add hid device: -71 [ 2198.408989][ T5923] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2198.437401][T25544] random: crng reseeded on system resumption [ 2198.706840][ T5923] usb 4-1: USB disconnect, device number 114 [ 2201.054996][ T30] audit: type=1326 audit(1757684304.462:3367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25557 comm="syz.0.3340" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc98e98eba9 code=0x0 [ 2201.183398][T25567] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3340'. [ 2201.270498][ T30] audit: type=1326 audit(1757684304.552:3368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25561 comm="syz.4.3341" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb66898eba9 code=0x0 [ 2201.325570][T25569] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3341'. [ 2201.360460][T25572] bond0: option primary_reselect: invalid value (255) [ 2201.417699][ T30] audit: type=1326 audit(1757684304.822:3369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25563 comm="syz.3.3342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9b58eba9 code=0x7ffc0000 [ 2201.782951][ T30] audit: type=1326 audit(1757684304.822:3370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25563 comm="syz.3.3342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9b58eba9 code=0x7ffc0000 [ 2201.805389][ C0] vkms_vblank_simulate: vblank timer overrun [ 2202.083334][ T30] audit: type=1326 audit(1757684304.822:3371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25563 comm="syz.3.3342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f1e9b58eba9 code=0x7ffc0000 [ 2202.105878][ C0] vkms_vblank_simulate: vblank timer overrun [ 2202.210617][T25580] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3343'. [ 2202.240714][ T30] audit: type=1326 audit(1757684304.822:3372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25563 comm="syz.3.3342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9b58eba9 code=0x7ffc0000 [ 2202.264568][ T30] audit: type=1326 audit(1757684304.822:3373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25563 comm="syz.3.3342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f1e9b58eba9 code=0x7ffc0000 [ 2202.288562][ T30] audit: type=1326 audit(1757684304.822:3374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25563 comm="syz.3.3342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9b58eba9 code=0x7ffc0000 [ 2202.325229][ T30] audit: type=1326 audit(1757684304.822:3375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25563 comm="syz.3.3342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9b58eba9 code=0x7ffc0000 [ 2202.357075][ T30] audit: type=1326 audit(1757684304.822:3376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25563 comm="syz.3.3342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f1e9b58eba9 code=0x7ffc0000 [ 2202.576918][T25587] block device autoloading is deprecated and will be removed. [ 2202.586279][T25587] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 2204.027371][T25600] random: crng reseeded on system resumption [ 2205.795298][T25612] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3349'. [ 2206.304978][T25618] netlink: 112 bytes leftover after parsing attributes in process `syz.2.3350'. [ 2206.318393][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 2206.318417][ T30] audit: type=1326 audit(1757684309.612:3402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25613 comm="syz.2.3350" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcad578eba9 code=0x0 [ 2207.563015][ T5923] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 2207.853771][ T5923] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2207.864092][ T5923] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2207.891770][ T5923] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2207.928958][ T5923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2207.948042][ T5923] usb 1-1: SerialNumber: syz [ 2208.278462][T25645] random: crng reseeded on system resumption [ 2209.372183][ T5923] usb 1-1: 0:2 : does not exist [ 2209.800822][ T5923] usb 1-1: USB disconnect, device number 101 [ 2209.990349][T25423] udevd[25423]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2210.229011][T25657] random: crng reseeded on system resumption [ 2211.753402][T25677] block device autoloading is deprecated and will be removed. [ 2211.772916][T25677] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 2212.511415][T25686] bond0: option primary_reselect: invalid value (255) [ 2212.561842][ T30] audit: type=1326 audit(1757684315.972:3403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25683 comm="syz.1.3362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899578eba9 code=0x7ffc0000 [ 2212.912076][ T30] audit: type=1326 audit(1757684315.972:3404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25683 comm="syz.1.3362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899578eba9 code=0x7ffc0000 [ 2213.061866][ T30] audit: type=1326 audit(1757684315.972:3405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25683 comm="syz.1.3362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f899578eba9 code=0x7ffc0000 [ 2213.158107][ T30] audit: type=1326 audit(1757684315.972:3406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25683 comm="syz.1.3362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899578eba9 code=0x7ffc0000 [ 2213.212190][ T30] audit: type=1326 audit(1757684315.982:3407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25683 comm="syz.1.3362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899578eba9 code=0x7ffc0000 [ 2213.636209][ T30] audit: type=1326 audit(1757684315.982:3408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25683 comm="syz.1.3362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f899578eba9 code=0x7ffc0000 [ 2213.658689][ C1] vkms_vblank_simulate: vblank timer overrun [ 2213.842539][ T30] audit: type=1326 audit(1757684315.982:3409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25683 comm="syz.1.3362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899578eba9 code=0x7ffc0000 [ 2213.916932][ T30] audit: type=1326 audit(1757684315.982:3410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25683 comm="syz.1.3362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899578eba9 code=0x7ffc0000 [ 2214.133082][ T30] audit: type=1326 audit(1757684315.982:3411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25683 comm="syz.1.3362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f899578eba9 code=0x7ffc0000 [ 2214.155443][ C1] vkms_vblank_simulate: vblank timer overrun [ 2214.188415][ T30] audit: type=1326 audit(1757684315.982:3412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25683 comm="syz.1.3362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899578eba9 code=0x7ffc0000 [ 2214.210839][ C1] vkms_vblank_simulate: vblank timer overrun [ 2214.265916][T25706] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2214.321491][T25697] netlink: 6040 bytes leftover after parsing attributes in process `syz.4.3364'. [ 2217.072090][T25732] random: crng reseeded on system resumption [ 2217.996192][T25738] bond0: option primary_reselect: invalid value (255) [ 2218.208392][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 2218.208412][ T30] audit: type=1326 audit(1757684321.422:3434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25735 comm="syz.4.3372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66898eba9 code=0x7ffc0000 [ 2218.208479][ T30] audit: type=1326 audit(1757684321.432:3435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25735 comm="syz.4.3372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66898eba9 code=0x7ffc0000 [ 2218.208524][ T30] audit: type=1326 audit(1757684321.432:3436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25735 comm="syz.4.3372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fb66898eba9 code=0x7ffc0000 [ 2218.208565][ T30] audit: type=1326 audit(1757684321.432:3437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25735 comm="syz.4.3372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66898eba9 code=0x7ffc0000 [ 2218.208607][ T30] audit: type=1326 audit(1757684321.432:3438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25735 comm="syz.4.3372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66898eba9 code=0x7ffc0000 [ 2218.208649][ T30] audit: type=1326 audit(1757684321.432:3439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25735 comm="syz.4.3372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fb66898eba9 code=0x7ffc0000 [ 2218.208694][ T30] audit: type=1326 audit(1757684321.432:3440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25735 comm="syz.4.3372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66898eba9 code=0x7ffc0000 [ 2218.208742][ T30] audit: type=1326 audit(1757684321.432:3441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25735 comm="syz.4.3372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66898eba9 code=0x7ffc0000 [ 2218.208786][ T30] audit: type=1326 audit(1757684321.432:3442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25735 comm="syz.4.3372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fb66898eba9 code=0x7ffc0000 [ 2218.212870][ T30] audit: type=1326 audit(1757684321.432:3443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25735 comm="syz.4.3372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66898eba9 code=0x7ffc0000 [ 2218.541258][ C1] vkms_vblank_simulate: vblank timer overrun [ 2218.593007][ C1] vkms_vblank_simulate: vblank timer overrun [ 2218.659488][ C1] vkms_vblank_simulate: vblank timer overrun [ 2218.689646][ C1] vkms_vblank_simulate: vblank timer overrun [ 2218.992471][T25743] bond0: option primary_reselect: invalid value (255) [ 2219.416366][T25753] random: crng reseeded on system resumption [ 2221.860535][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.868493][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 2222.537552][T25775] netlink: 6040 bytes leftover after parsing attributes in process `syz.4.3379'. [ 2222.796881][T25784] random: crng reseeded on system resumption [ 2223.191825][T25790] bond0: option primary_reselect: invalid value (255) [ 2223.520984][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 2223.521004][ T30] audit: type=1326 audit(1757684326.692:3488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25783 comm="syz.1.3382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899578eba9 code=0x7ffc0000 [ 2223.521049][ T30] audit: type=1326 audit(1757684326.692:3489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25783 comm="syz.1.3382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899578eba9 code=0x7ffc0000 [ 2223.863156][ T30] audit: type=1326 audit(1757684326.692:3490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25783 comm="syz.1.3382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f899578eba9 code=0x7ffc0000 [ 2224.606560][ T30] audit: type=1326 audit(1757684326.692:3491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25783 comm="syz.1.3382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899578eba9 code=0x7ffc0000 [ 2224.606595][ T30] audit: type=1326 audit(1757684326.692:3492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25783 comm="syz.1.3382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899578eba9 code=0x7ffc0000 [ 2224.606621][ T30] audit: type=1326 audit(1757684326.692:3493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25783 comm="syz.1.3382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f899578eba9 code=0x7ffc0000 [ 2224.606648][ T30] audit: type=1326 audit(1757684326.692:3494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25783 comm="syz.1.3382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899578eba9 code=0x7ffc0000 [ 2224.606673][ T30] audit: type=1326 audit(1757684326.692:3495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25783 comm="syz.1.3382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f899578eba9 code=0x7ffc0000 [ 2224.606701][ T30] audit: type=1326 audit(1757684326.692:3496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25783 comm="syz.1.3382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899578eba9 code=0x7ffc0000 [ 2224.606726][ T30] audit: type=1326 audit(1757684326.692:3497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25783 comm="syz.1.3382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f899578eba9 code=0x7ffc0000 [ 2228.859171][T25836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2228.867853][T25836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2228.875910][T25836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2228.893337][T25836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2228.905027][T25836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2229.039126][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2229.212630][T25841] block device autoloading is deprecated and will be removed. [ 2229.235579][T25841] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 2229.399198][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 2229.399276][ T30] audit: type=1326 audit(1757684332.822:3526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25842 comm="syz.1.3393" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f899578eba9 code=0x0 [ 2229.460992][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2229.551704][T25849] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3393'. [ 2229.613679][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2229.746608][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2229.998666][T25839] chnl_net:caif_netlink_parms(): no params data found [ 2231.021867][T25836] Bluetooth: hci3: command tx timeout [ 2231.143113][T25839] bridge0: port 1(bridge_slave_0) entered blocking state [ 2231.212849][T25839] bridge0: port 1(bridge_slave_0) entered disabled state [ 2231.244265][T25839] bridge_slave_0: entered allmulticast mode [ 2231.270672][T25839] bridge_slave_0: entered promiscuous mode [ 2231.317474][ T36] bridge_slave_1: left allmulticast mode [ 2231.323373][ T36] bridge_slave_1: left promiscuous mode [ 2231.334414][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 2231.447932][ T36] bridge_slave_0: left allmulticast mode [ 2231.500940][ T36] bridge_slave_0: left promiscuous mode [ 2231.528983][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 2232.701015][T25902] netlink: 6040 bytes leftover after parsing attributes in process `syz.2.3396'. [ 2233.125514][T25836] Bluetooth: hci3: command tx timeout [ 2235.184041][T25836] Bluetooth: hci3: command tx timeout [ 2235.382541][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2235.400644][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2235.412024][ T36] bond0 (unregistering): Released all slaves [ 2235.794883][T25839] bridge0: port 2(bridge_slave_1) entered blocking state [ 2235.802344][T25839] bridge0: port 2(bridge_slave_1) entered disabled state [ 2235.810866][T25839] bridge_slave_1: entered allmulticast mode [ 2235.938953][T25839] bridge_slave_1: entered promiscuous mode [ 2236.195984][T25922] random: crng reseeded on system resumption [ 2236.535787][T25839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2236.999325][T25839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2237.258481][T25836] Bluetooth: hci3: command tx timeout [ 2237.401037][T25933] block device autoloading is deprecated and will be removed. [ 2237.415330][T25933] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 2237.785976][T25839] team0: Port device team_slave_0 added [ 2239.034101][T25839] team0: Port device team_slave_1 added [ 2239.146526][T25839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2239.161329][T25839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2239.214793][T25839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2239.312518][T25839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2239.319967][T25839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2239.474511][T25839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2239.983921][T25839] hsr_slave_0: entered promiscuous mode [ 2240.000900][T25839] hsr_slave_1: entered promiscuous mode [ 2240.015097][T25839] debugfs: 'hsr0' already exists in 'hsr' [ 2240.025278][T25839] Cannot create hsr debugfs directory [ 2242.868742][ T24] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 2243.237794][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 2243.464343][ T24] usb 3-1: too many endpoints for config 0 interface 0 altsetting 4: 255, using maximum allowed: 30 [ 2243.494622][ T24] usb 3-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 2243.547279][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2243.698796][ T24] usb 3-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.00 [ 2243.730172][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2243.825296][ T24] usb 3-1: config 0 descriptor?? [ 2246.023277][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 2246.032195][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2246.293012][ T24] usb 3-1: USB disconnect, device number 113 [ 2247.047213][T25839] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2247.108118][T25839] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2247.229497][T26033] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2247.356696][T25839] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2247.377004][T25839] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2249.817530][T25839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2249.930873][T25839] 8021q: adding VLAN 0 to HW filter on device team0 [ 2250.139232][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 2250.147066][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2250.401423][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 2250.408616][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2252.519551][T26085] netlink: 6040 bytes leftover after parsing attributes in process `syz.1.3422'. [ 2252.600846][T25839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2254.127914][T25839] veth0_vlan: entered promiscuous mode [ 2254.262416][ T30] audit: type=1326 audit(1757684357.662:3527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26098 comm="syz.1.3425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899578eba9 code=0x7ffc0000 [ 2254.333785][ T30] audit: type=1326 audit(1757684357.662:3528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26098 comm="syz.1.3425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f899578eba9 code=0x7ffc0000 [ 2254.485532][T25839] veth1_vlan: entered promiscuous mode [ 2254.519883][T25839] veth0_macvtap: entered promiscuous mode [ 2254.529906][T25839] veth1_macvtap: entered promiscuous mode [ 2254.558340][ T30] audit: type=1326 audit(1757684357.662:3529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26098 comm="syz.1.3425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899578eba9 code=0x7ffc0000 [ 2254.759382][ T30] audit: type=1326 audit(1757684357.662:3530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26098 comm="syz.1.3425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f899578eba9 code=0x7ffc0000 [ 2254.785120][ T30] audit: type=1326 audit(1757684357.672:3531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26098 comm="syz.1.3425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899578eba9 code=0x7ffc0000 [ 2254.807869][ T30] audit: type=1326 audit(1757684357.672:3532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26098 comm="syz.1.3425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f899578eba9 code=0x7ffc0000 [ 2254.838752][ T30] audit: type=1326 audit(1757684357.672:3533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26098 comm="syz.1.3425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899578eba9 code=0x7ffc0000 [ 2254.862481][ T30] audit: type=1326 audit(1757684357.672:3534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26098 comm="syz.1.3425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f899578eba9 code=0x7ffc0000 [ 2254.885591][ T30] audit: type=1326 audit(1757684357.672:3535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26098 comm="syz.1.3425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899578eba9 code=0x7ffc0000 [ 2254.987418][ T30] audit: type=1326 audit(1757684357.672:3536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26098 comm="syz.1.3425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899578eba9 code=0x7ffc0000 [ 2255.065557][ T36] hsr_slave_0: left promiscuous mode [ 2255.121815][ T36] hsr_slave_1: left promiscuous mode [ 2255.141223][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2255.217490][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2255.279712][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2255.287149][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2255.450270][T26115] fuse: Bad value for 'group_id' [ 2255.455301][T26115] fuse: Bad value for 'group_id' [ 2255.530373][ T36] veth1_macvtap: left promiscuous mode [ 2255.562166][ T36] veth0_macvtap: left promiscuous mode [ 2255.578534][ T36] veth1_vlan: left promiscuous mode [ 2255.584091][ T36] veth0_vlan: left promiscuous mode [ 2255.848403][T12208] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 2256.748396][T12208] usb 4-1: Using ep0 maxpacket: 16 [ 2257.387731][T12208] usb 4-1: too many endpoints for config 0 interface 0 altsetting 4: 255, using maximum allowed: 30 [ 2257.408115][T12208] usb 4-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 2257.427867][T12208] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2257.434885][T12208] usb 4-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.00 [ 2257.444462][T12208] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2257.463876][T12208] usb 4-1: config 0 descriptor?? [ 2257.463980][ T36] pim6reg (unregistering): left allmulticast mode [ 2259.508059][T12208] usbhid 4-1:0.0: can't add hid device: -71 [ 2259.515280][T12208] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2259.558696][ T36] team0 (unregistering): Port device team_slave_1 removed [ 2259.573570][T12208] usb 4-1: USB disconnect, device number 115 [ 2261.264516][ T36] team0 (unregistering): Port device team_slave_0 removed [ 2262.370590][T26169] random: crng reseeded on system resumption [ 2263.401034][T26175] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3437'. [ 2263.617704][T26178] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3437'. [ 2264.510910][T25839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2264.625194][T25839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2264.677838][T17479] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2264.696048][T17479] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2264.734315][T17479] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2264.747315][T17479] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2265.078750][ T5937] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 2265.267802][ T5937] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2265.295889][ T5937] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 2265.365492][ T5937] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2265.394222][T24859] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2265.405183][T24859] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2265.443589][ T5937] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2265.498466][ T5937] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 2265.524072][ T5937] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2265.554646][ T5937] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2265.597427][ T5937] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2265.605781][ T5937] usb 4-1: Product: syz [ 2265.610224][ T5937] usb 4-1: Manufacturer: syz [ 2265.654059][T26193] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2265.665914][ T5937] cdc_wdm 4-1:1.0: skipping garbage [ 2265.675758][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2265.687802][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2265.718401][ T5937] cdc_wdm 4-1:1.0: skipping garbage [ 2265.749920][ T5937] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 2265.755868][ T5937] cdc_wdm 4-1:1.0: Unknown control protocol [ 2265.868461][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 2265.875225][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 2265.883250][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 2265.889848][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 2265.896089][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 2265.902688][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 2265.909006][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 2265.915669][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 2265.921909][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 2265.928490][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 2265.934724][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 2265.941309][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 2265.947552][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 2265.954141][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 2265.960582][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 2265.967180][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 2265.973888][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 2265.980479][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 2265.989563][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 2265.996172][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 2266.868558][T25424] usb 4-1: USB disconnect, device number 116 [ 2266.874708][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 2268.089143][T11843] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2268.178710][T11843] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2268.186875][T11843] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2268.195326][T11843] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2268.204411][T11843] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2269.202624][ T1011] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2269.891287][ T1011] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2270.150812][ T1011] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2270.264505][ T1011] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2270.378369][T11843] Bluetooth: hci5: command tx timeout [ 2270.508551][ T5937] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 2270.692868][ T5937] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 2270.702070][ T5937] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2270.726779][ T5937] usb 3-1: Product: syz [ 2270.755185][ T5937] usb 3-1: Manufacturer: syz [ 2270.791352][ T5937] usb 3-1: SerialNumber: syz [ 2270.796542][T26232] chnl_net:caif_netlink_parms(): no params data found [ 2270.814626][ T5937] usb 3-1: config 0 descriptor?? [ 2270.839178][ T5937] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 2270.863317][ T1011] bridge_slave_1: left allmulticast mode [ 2270.908502][ T1011] bridge_slave_1: left promiscuous mode [ 2270.914560][ T1011] bridge0: port 2(bridge_slave_1) entered disabled state [ 2270.925563][ T1011] bridge_slave_0: left allmulticast mode [ 2270.975545][ T1011] bridge_slave_0: left promiscuous mode [ 2270.993331][ T1011] bridge0: port 1(bridge_slave_0) entered disabled state [ 2271.324620][ T5937] usb 3-1: USB disconnect, device number 114 [ 2272.458593][T11843] Bluetooth: hci5: command tx timeout [ 2272.918989][T26288] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3460'. [ 2274.024802][ T1011] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2274.037629][ T1011] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2274.052601][ T1011] bond0 (unregistering): Released all slaves [ 2274.105556][T26282] bridge0: port 3(syz_tun) entered blocking state [ 2274.115726][T26282] bridge0: port 3(syz_tun) entered disabled state [ 2274.140400][T26282] syz_tun: entered allmulticast mode [ 2274.151945][T26282] syz_tun: entered promiscuous mode [ 2274.167192][T26282] bridge0: port 3(syz_tun) entered blocking state [ 2274.173991][T26282] bridge0: port 3(syz_tun) entered forwarding state [ 2274.553875][T26232] bridge0: port 1(bridge_slave_0) entered blocking state [ 2274.583708][T11843] Bluetooth: hci5: command tx timeout [ 2274.618416][T26232] bridge0: port 1(bridge_slave_0) entered disabled state [ 2274.633014][T26232] bridge_slave_0: entered allmulticast mode [ 2274.669296][T26232] bridge_slave_0: entered promiscuous mode [ 2275.014671][T26232] bridge0: port 2(bridge_slave_1) entered blocking state [ 2275.034866][T26232] bridge0: port 2(bridge_slave_1) entered disabled state [ 2275.057578][T26232] bridge_slave_1: entered allmulticast mode [ 2275.080362][T26232] bridge_slave_1: entered promiscuous mode [ 2275.477860][T26232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2275.795576][T26232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2276.224134][T26232] team0: Port device team_slave_0 added [ 2276.265942][T26232] team0: Port device team_slave_1 added [ 2276.619945][T11843] Bluetooth: hci5: command tx timeout [ 2276.624961][T26232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2276.691764][T26232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2276.725990][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 2276.726008][ T30] audit: type=1326 audit(1757684380.122:3543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26329 comm="syz.0.3468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46db8eba9 code=0x7ffc0000 [ 2276.754805][ C0] vkms_vblank_simulate: vblank timer overrun [ 2276.756183][T26232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2276.780075][T26336] openvswitch: netlink: Key 6 has unexpected len 143 expected 2 [ 2276.863812][ T30] audit: type=1326 audit(1757684380.122:3544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26329 comm="syz.0.3468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd46db8eba9 code=0x7ffc0000 [ 2276.886205][ C0] vkms_vblank_simulate: vblank timer overrun [ 2276.986159][ T30] audit: type=1326 audit(1757684380.122:3545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26329 comm="syz.0.3468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46db8eba9 code=0x7ffc0000 [ 2277.129957][T26232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2277.181074][ T30] audit: type=1326 audit(1757684380.122:3546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26329 comm="syz.0.3468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd46db8eba9 code=0x7ffc0000 [ 2277.203430][ C0] vkms_vblank_simulate: vblank timer overrun [ 2277.205898][T26232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2277.237098][ T30] audit: type=1326 audit(1757684380.122:3547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26329 comm="syz.0.3468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46db8eba9 code=0x7ffc0000 [ 2277.309471][ T30] audit: type=1326 audit(1757684380.122:3548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26329 comm="syz.0.3468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7fd46db8eba9 code=0x7ffc0000 [ 2277.358536][T26232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2277.458421][ T30] audit: type=1326 audit(1757684380.122:3549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26329 comm="syz.0.3468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46db8eba9 code=0x7ffc0000 [ 2277.483818][ C0] vkms_vblank_simulate: vblank timer overrun [ 2277.493825][ T30] audit: type=1326 audit(1757684380.122:3550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26329 comm="syz.0.3468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fd46db8eba9 code=0x7ffc0000 [ 2277.554714][ T30] audit: type=1326 audit(1757684380.122:3551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26329 comm="syz.0.3468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46db8eba9 code=0x7ffc0000 [ 2277.638445][ T30] audit: type=1326 audit(1757684380.122:3552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26329 comm="syz.0.3468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd46db8eba9 code=0x7ffc0000 [ 2277.795317][T26232] hsr_slave_0: entered promiscuous mode [ 2277.817787][T26232] hsr_slave_1: entered promiscuous mode [ 2277.832261][T26232] debugfs: 'hsr0' already exists in 'hsr' [ 2277.895198][T26232] Cannot create hsr debugfs directory [ 2278.356865][T26355] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3473'. [ 2281.365895][T26232] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2281.767550][T26232] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2281.787853][T26232] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2281.848211][T26232] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2283.262430][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.286041][T26232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2283.298355][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 2283.567036][ T1011] hsr_slave_0: left promiscuous mode [ 2283.581283][ T1011] hsr_slave_1: left promiscuous mode [ 2283.670026][ T1011] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2283.737493][ T1011] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2283.768213][ T1011] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2283.775886][ T1011] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2283.892776][ T1011] veth1_macvtap: left promiscuous mode [ 2283.912069][ T1011] veth0_macvtap: left promiscuous mode [ 2283.925036][ T1011] veth1_vlan: left promiscuous mode [ 2283.940725][ T1011] veth0_vlan: left promiscuous mode [ 2284.482045][ T1011] pim6reg (unregistering): left allmulticast mode [ 2284.912213][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 2284.912230][ T30] audit: type=1326 audit(1757684388.342:3571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26446 comm="syz.4.3487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66898eba9 code=0x7ffc0000 [ 2285.058418][ T30] audit: type=1326 audit(1757684388.342:3572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26446 comm="syz.4.3487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66898eba9 code=0x7ffc0000 [ 2285.161615][ T30] audit: type=1326 audit(1757684388.342:3573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26446 comm="syz.4.3487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7fb66898eba9 code=0x7ffc0000 [ 2285.220551][ T30] audit: type=1326 audit(1757684388.352:3574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26446 comm="syz.4.3487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66898eba9 code=0x7ffc0000 [ 2285.317275][ T30] audit: type=1326 audit(1757684388.352:3575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26446 comm="syz.4.3487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66898eba9 code=0x7ffc0000 [ 2286.757317][ T1011] team0 (unregistering): Port device team_slave_1 removed [ 2287.150406][ T1011] team0 (unregistering): Port device team_slave_0 removed [ 2289.355752][T26481] tipc: Started in network mode [ 2289.369577][T26481] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 2289.394837][T26481] tipc: Enabled bearer , priority 10 [ 2289.535887][T26232] 8021q: adding VLAN 0 to HW filter on device team0 [ 2289.566854][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 2289.574106][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2289.613648][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 2289.620857][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2290.097090][T26232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2290.324032][T26232] veth0_vlan: entered promiscuous mode [ 2290.407968][T26232] veth1_vlan: entered promiscuous mode [ 2290.518225][ T5937] tipc: Node number set to 4269801488 [ 2290.571931][T26232] veth0_macvtap: entered promiscuous mode [ 2290.943040][T26232] veth1_macvtap: entered promiscuous mode [ 2291.053863][T26232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2291.236602][T26232] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2291.314627][ T1115] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2291.341617][ T1115] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2291.393204][ T1115] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2291.438113][ T1115] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2292.034908][ T1115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2292.050388][ T1011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2292.088470][ T1011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2292.108403][ T1115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2293.629321][T25836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2293.640528][T25836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2293.649456][T25836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2293.658749][T25836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2293.666411][T25836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2293.823053][ T1011] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2293.980590][T25836] Bluetooth: hci2: unexpected event for opcode 0x040e [ 2294.248086][ T1011] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2294.488011][ T1011] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2294.815428][ T1011] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2295.337948][T26582] chnl_net:caif_netlink_parms(): no params data found [ 2295.628685][T25424] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 2295.755489][T25836] Bluetooth: hci1: command tx timeout [ 2295.847911][T25424] usb 3-1: config 0 has no interfaces? [ 2295.859220][T25424] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2295.907252][T25424] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2295.922084][ T1011] bridge_slave_1: left allmulticast mode [ 2295.933469][ T1011] bridge_slave_1: left promiscuous mode [ 2295.951765][ T1011] bridge0: port 2(bridge_slave_1) entered disabled state [ 2295.962912][T25424] usb 3-1: Product: syz [ 2295.971994][T25424] usb 3-1: Manufacturer: syz [ 2295.992575][T25424] usb 3-1: SerialNumber: syz [ 2296.017397][ T1011] bridge_slave_0: left allmulticast mode [ 2296.027546][T25424] usb 3-1: config 0 descriptor?? [ 2296.053694][ T1011] bridge_slave_0: left promiscuous mode [ 2296.098921][ T1011] bridge0: port 1(bridge_slave_0) entered disabled state [ 2297.827264][T25836] Bluetooth: hci1: command tx timeout [ 2298.543685][ T5938] usb 3-1: USB disconnect, device number 115 [ 2299.349055][ T5923] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 2299.678423][ T5923] usb 3-1: Using ep0 maxpacket: 16 [ 2299.686085][ T5923] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2299.705209][ T5923] usb 3-1: config 9 has an invalid interface number: 48 but max is 0 [ 2299.768389][ T5923] usb 3-1: config 9 has no interface number 0 [ 2299.970083][T25836] Bluetooth: hci1: command tx timeout [ 2299.985132][ T5923] usb 3-1: config 9 interface 48 has no altsetting 0 [ 2300.005957][ T5923] usb 3-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=f3.7b [ 2300.015062][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2300.023453][ T5923] usb 3-1: Product: syz [ 2300.027640][ T5923] usb 3-1: Manufacturer: syz [ 2300.032618][ T5923] usb 3-1: SerialNumber: syz [ 2300.190398][T26650] syz.1.3527: vmalloc error: size 8294400, failed to allocated page array size 16200, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 2300.218604][T26650] CPU: 0 UID: 0 PID: 26650 Comm: syz.1.3527 Not tainted syzkaller #0 PREEMPT(full) [ 2300.218631][T26650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2300.218653][T26650] Call Trace: [ 2300.218666][T26650] [ 2300.218676][T26650] dump_stack_lvl+0x189/0x250 [ 2300.218807][T26650] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 2300.218942][T26650] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2300.218968][T26650] ? __pfx__printk+0x10/0x10 [ 2300.218998][T26650] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 2300.219052][T26650] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 2300.219085][T26650] warn_alloc+0x214/0x310 [ 2300.219196][T26650] ? __pfx_warn_alloc+0x10/0x10 [ 2300.219237][T26650] ? __get_vm_area_node+0x28f/0x300 [ 2300.219292][T26650] ? vb2_vmalloc_alloc+0xef/0x340 [ 2300.219394][T26650] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 2300.219457][T26650] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2300.219494][T26650] ? __kasan_kmalloc+0x93/0xb0 [ 2300.219597][T26650] vmalloc_user_noprof+0xad/0xf0 [ 2300.219628][T26650] ? vb2_vmalloc_alloc+0xef/0x340 [ 2300.219654][T26650] vb2_vmalloc_alloc+0xef/0x340 [ 2300.219678][T26650] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 2300.219704][T26650] __vb2_queue_alloc+0x9c2/0x15a0 [ 2300.219778][T26650] vb2_core_reqbufs+0xc31/0x1420 [ 2300.219804][T26650] ? kfree+0x18e/0x440 [ 2300.219898][T26650] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 2300.219931][T26650] ? vb2_verify_memory_type+0x1fc/0x570 [ 2300.219956][T26650] vb2_ioctl_reqbufs+0x4c0/0x830 [ 2300.219993][T26650] __video_do_ioctl+0xc9b/0xdb0 [ 2300.220072][T26650] ? __pfx___video_do_ioctl+0x10/0x10 [ 2300.220111][T26650] video_usercopy+0x86e/0x14f0 [ 2300.220147][T26650] ? __pfx___video_do_ioctl+0x10/0x10 [ 2300.220172][T26650] ? __pfx_video_usercopy+0x10/0x10 [ 2300.220209][T26650] ? __fget_files+0x2a/0x420 [ 2300.220263][T26650] ? __fget_files+0x2a/0x420 [ 2300.220281][T26650] ? __fget_files+0x3a0/0x420 [ 2300.220303][T26650] v4l2_ioctl+0x18d/0x1e0 [ 2300.220328][T26650] ? __pfx_v4l2_ioctl+0x10/0x10 [ 2300.220351][T26650] __se_sys_ioctl+0xfc/0x170 [ 2300.220408][T26650] do_syscall_64+0xfa/0x3b0 [ 2300.220494][T26650] ? lockdep_hardirqs_on+0x9c/0x150 [ 2300.220538][T26650] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2300.220578][T26650] ? clear_bhb_loop+0x60/0xb0 [ 2300.220603][T26650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2300.220628][T26650] RIP: 0033:0x7fcf7738eba9 [ 2300.220652][T26650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2300.220671][T26650] RSP: 002b:00007fcf7812f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2300.220695][T26650] RAX: ffffffffffffffda RBX: 00007fcf775d6180 RCX: 00007fcf7738eba9 [ 2300.220711][T26650] RDX: 00002000000000c0 RSI: 00000000c0145608 RDI: 0000000000000006 [ 2300.220726][T26650] RBP: 00007fcf77411e19 R08: 0000000000000000 R09: 0000000000000000 [ 2300.220740][T26650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2300.220753][T26650] R13: 00007fcf775d6218 R14: 00007fcf775d6180 R15: 00007fcf776ffa28 [ 2300.220793][T26650] [ 2300.220830][T26650] Mem-Info: [ 2300.610839][T26650] active_anon:10025 inactive_anon:0 isolated_anon:0 [ 2300.610839][T26650] active_file:8068 inactive_file:40766 isolated_file:0 [ 2300.610839][T26650] unevictable:768 dirty:156 writeback:16 [ 2300.610839][T26650] slab_reclaimable:7132 slab_unreclaimable:141908 [ 2300.610839][T26650] mapped:34643 shmem:4200 pagetables:1157 [ 2300.610839][T26650] sec_pagetables:0 bounce:0 [ 2300.610839][T26650] kernel_misc_reclaimable:0 [ 2300.610839][T26650] free:1270001 free_pcp:19159 free_cma:0 [ 2300.679965][ T5923] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 2300.792718][T26650] Node 0 active_anon:37136kB inactive_anon:0kB active_file:32272kB inactive_file:162864kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:134520kB dirty:584kB writeback:0kB shmem:15264kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11632kB pagetables:4544kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2300.893638][T26650] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:108kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2300.958761][T26650] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2301.009076][T26650] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 2301.014943][T26650] Node 0 DMA32 free:1180524kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:37752kB inactive_anon:0kB active_file:32272kB inactive_file:161288kB unevictable:1536kB writepending:600kB present:3129332kB managed:2557416kB mlocked:0kB bounce:0kB free_pcp:53408kB local_pcp:25684kB free_cma:0kB [ 2301.130813][T26650] lowmem_reserve[]: 0 0 1 1 1 [ 2301.135679][T26650] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 2301.186255][T26650] lowmem_reserve[]: 0 0 0 0 0 [ 2301.316778][T26650] Node 1 Normal free:3884096kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:26320kB local_pcp:11328kB free_cma:0kB [ 2301.348466][ T5923] gspca_vc032x: reg_r err -71 [ 2301.353362][ T5923] gspca_vc032x: I2c Bus Busy Wait 00 [ 2301.368477][ T5923] gspca_vc032x: I2c Bus Busy Wait 00 [ 2301.392850][ T5923] gspca_vc032x: I2c Bus Busy Wait 00 [ 2301.411425][ T5923] gspca_vc032x: I2c Bus Busy Wait 00 [ 2301.416710][ T5923] gspca_vc032x: I2c Bus Busy Wait 00 [ 2301.438749][ T5923] gspca_vc032x: I2c Bus Busy Wait 00 [ 2301.460636][ T1011] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2301.476066][T26650] lowmem_reserve[]: 0 0 0 0 0 [ 2301.484730][ T5923] gspca_vc032x: I2c Bus Busy Wait 00 [ 2301.494416][ T1011] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2301.513041][ T5923] gspca_vc032x: I2c Bus Busy Wait 00 [ 2301.524933][T26650] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2301.540226][ T5923] gspca_vc032x: I2c Bus Busy Wait 00 [ 2301.560261][ T5923] gspca_vc032x: I2c Bus Busy Wait 00 [ 2301.576843][ T5923] gspca_vc032x: I2c Bus Busy Wait 00 [ 2301.590160][ T5923] gspca_vc032x: I2c Bus Busy Wait 00 [ 2301.601415][ T1011] bond0 (unregistering): Released all slaves [ 2301.614811][ T5923] gspca_vc032x: I2c Bus Busy Wait 00 [ 2301.626810][ T5923] gspca_vc032x: I2c Bus Busy Wait 00 [ 2301.730945][ T5923] gspca_vc032x: I2c Bus Busy Wait 00 [ 2301.731851][T26650] Node 0 DMA32: 3*4kB (UME) [ 2301.743134][ T5923] gspca_vc032x: I2c Bus Busy Wait 00 [ 2301.778241][ T5923] gspca_vc032x: I2c Bus Busy Wait 00 [ 2301.783640][ T5923] gspca_vc032x: I2c Bus Busy Wait 00 [ 2301.789033][ T5923] gspca_vc032x: I2c Bus Busy Wait 00 [ 2301.794394][ T5923] gspca_vc032x: Unknown sensor... [ 2301.799008][T26650] 32*8kB (ME) 42*16kB (UME) 604*32kB (UME) 239*64kB (UME) 107*128kB (UME) 50*256kB (UME) 76*512kB (UME) 14*1024kB (UME) 4*2048kB (UM) 258*4096kB (UM) = 1180268kB [ 2301.799612][ T5923] vc032x 3-1:9.48: probe with driver vc032x failed with error -22 [ 2301.854281][ T5923] usb 3-1: USB disconnect, device number 116 [ 2302.028642][T26650] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 2302.061567][T25836] Bluetooth: hci1: command tx timeout [ 2302.084437][T26650] Node 1 Normal: 174*4kB (UE) 55*8kB (UME) 43*16kB (UME) 65*32kB (UME) 24*64kB (UME) 4*128kB (UME) 5*256kB (UME) 4*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 945*4096kB (M) = 3884096kB [ 2302.226684][T26650] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2302.252686][T26582] bridge0: port 1(bridge_slave_0) entered blocking state [ 2302.274428][T26650] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 2302.294148][T26582] bridge0: port 1(bridge_slave_0) entered disabled state [ 2302.321902][T26650] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2302.321932][T26582] bridge_slave_0: entered allmulticast mode [ 2302.365996][T26582] bridge_slave_0: entered promiscuous mode [ 2302.418172][T26650] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 2302.431677][T26582] bridge0: port 2(bridge_slave_1) entered blocking state [ 2302.440390][T26582] bridge0: port 2(bridge_slave_1) entered disabled state [ 2302.450243][T26582] bridge_slave_1: entered allmulticast mode [ 2302.470139][T26582] bridge_slave_1: entered promiscuous mode [ 2302.476336][T26650] 53357 total pagecache pages [ 2302.504655][T26650] 0 pages in swap cache [ 2302.517869][T26650] Free swap = 124996kB [ 2302.531047][T26650] Total swap = 124996kB [ 2302.542484][T26650] 2097051 pages RAM [ 2302.564337][T26650] 0 pages HighMem/MovableOnly [ 2302.570064][T26650] 425671 pages reserved [ 2302.575777][T26650] 0 pages cma reserved [ 2302.625868][T26582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2302.671184][T26582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2302.962804][T26582] team0: Port device team_slave_0 added [ 2303.019655][T26582] team0: Port device team_slave_1 added [ 2303.311155][T26582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2303.319025][T25424] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 2303.353137][T26582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2303.420738][T26582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2303.468481][T26582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2303.478497][T25424] usb 4-1: Using ep0 maxpacket: 16 [ 2303.492762][T26582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2303.526877][T25424] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2303.568340][T25424] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2303.586986][T25424] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2303.595788][T26582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2303.608246][T25424] usb 4-1: config 0 descriptor?? [ 2303.863114][T26582] hsr_slave_0: entered promiscuous mode [ 2303.894051][T26582] hsr_slave_1: entered promiscuous mode [ 2304.042658][T25424] mcp2221 0003:04D8:00DD.0010: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 2305.524645][T16575] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 2305.741613][T16575] usb 3-1: config 0 has no interfaces? [ 2305.884636][T16575] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2305.899260][T16575] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2305.921876][T16575] usb 3-1: Product: syz [ 2305.937672][T16575] usb 3-1: Manufacturer: syz [ 2305.956868][T16575] usb 3-1: SerialNumber: syz [ 2305.983987][T16575] usb 3-1: config 0 descriptor?? [ 2306.442763][ T5938] usb 4-1: USB disconnect, device number 117 [ 2307.171386][T26582] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2307.253663][T26582] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2307.274888][T26582] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2307.305779][T26582] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2307.378343][ T5923] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 2307.776307][ T5938] usb 3-1: USB disconnect, device number 117 [ 2307.891137][ T5923] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2307.921859][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2307.953477][T26582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2307.975542][ T5923] usb 2-1: Product: syz [ 2307.980733][ T5923] usb 2-1: Manufacturer: syz [ 2307.985354][ T5923] usb 2-1: SerialNumber: syz [ 2308.195887][T26582] 8021q: adding VLAN 0 to HW filter on device team0 [ 2308.234202][ T1011] hsr_slave_0: left promiscuous mode [ 2308.259273][ T1011] hsr_slave_1: left promiscuous mode [ 2308.270857][ T1011] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2308.289536][ T1011] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2308.311139][ T1011] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2308.325288][ T1011] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2308.423332][ T1011] veth1_macvtap: left promiscuous mode [ 2308.440235][ T1011] veth0_macvtap: left promiscuous mode [ 2308.573814][ T1011] veth1_vlan: left promiscuous mode [ 2308.579587][ T1011] veth0_vlan: left promiscuous mode [ 2308.832890][ T5923] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 2308.858357][ T5923] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2308.871960][ T1011] pim6reg (unregistering): left allmulticast mode [ 2308.895798][ T5923] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2308.932073][ T5923] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 2309.758475][T25424] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 2309.802618][ T1011] team0 (unregistering): Port device team_slave_1 removed [ 2309.838659][ T1011] team0 (unregistering): Port device team_slave_0 removed [ 2309.932324][T25424] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2309.941387][T25424] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2309.952624][T25424] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2309.961970][T25424] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 2309.973082][T25424] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 2309.991041][T25424] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2310.002179][T25424] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2310.014186][T25424] usb 1-1: Product: syz [ 2310.018504][T25424] usb 1-1: Manufacturer: syz [ 2310.043877][T25424] cdc_wdm 1-1:1.0: skipping garbage [ 2310.053902][T25424] cdc_wdm 1-1:1.0: skipping garbage [ 2310.061241][T25424] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 2310.067319][T25424] cdc_wdm 1-1:1.0: Unknown control protocol [ 2310.237668][T13652] usb 2-1: USB disconnect, device number 94 [ 2310.273819][T25424] usb 1-1: USB disconnect, device number 102 [ 2310.379476][ T1115] bridge0: port 1(bridge_slave_0) entered blocking state [ 2310.386675][ T1115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2310.426284][T26772] C: renamed from lo (while UP) [ 2310.450895][T26772] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 2310.540835][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 2310.548081][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2310.785388][T26582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2311.195954][T26582] veth0_vlan: entered promiscuous mode [ 2311.249862][T26582] veth1_vlan: entered promiscuous mode [ 2312.053996][T26582] veth0_macvtap: entered promiscuous mode [ 2312.069044][ T5923] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 2312.190673][T26582] veth1_macvtap: entered promiscuous mode [ 2312.304000][ T5923] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2312.354742][ T5923] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2312.411879][T26582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2312.417019][ T5923] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2312.467345][T26582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2312.472443][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2312.527029][T26802] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2312.543829][ T5923] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 2312.596057][ T1011] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2312.604296][ T30] audit: type=1326 audit(1757684416.022:3576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26812 comm="syz.0.3564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46db8eba9 code=0x7ffc0000 [ 2312.649063][ T1011] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2312.657839][ T1011] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2312.764829][T26802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2312.776911][T26802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2312.808100][ T1011] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2312.834375][ T30] audit: type=1326 audit(1757684416.022:3577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26812 comm="syz.0.3564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46db8eba9 code=0x7ffc0000 [ 2313.011179][T26802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2313.021377][T26802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2313.063014][ T30] audit: type=1326 audit(1757684416.052:3578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26812 comm="syz.0.3564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd46db8eba9 code=0x7ffc0000 [ 2313.142436][ T30] audit: type=1326 audit(1757684416.052:3579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26812 comm="syz.0.3564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46db8eba9 code=0x7ffc0000 [ 2313.238379][ T30] audit: type=1326 audit(1757684416.052:3580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26812 comm="syz.0.3564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46db8eba9 code=0x7ffc0000 [ 2313.346885][ T30] audit: type=1326 audit(1757684416.062:3581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26812 comm="syz.0.3564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd46db8eba9 code=0x7ffc0000 [ 2313.395417][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2313.441394][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2313.466512][ T30] audit: type=1326 audit(1757684416.062:3582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26812 comm="syz.0.3564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46db8eba9 code=0x7ffc0000 [ 2313.611292][ T30] audit: type=1326 audit(1757684416.062:3583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26812 comm="syz.0.3564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46db8eba9 code=0x7ffc0000 [ 2313.743708][ T1115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2313.767498][ T1115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2313.861867][ T30] audit: type=1326 audit(1757684416.062:3584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26812 comm="syz.0.3564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7fd46db8eba9 code=0x7ffc0000 [ 2314.008386][ T30] audit: type=1326 audit(1757684416.062:3585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26812 comm="syz.0.3564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46db8eba9 code=0x7ffc0000 [ 2316.116909][ T5937] usb 4-1: USB disconnect, device number 118 [ 2316.424947][T11843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2316.436572][T11843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2316.451784][T11843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2316.482295][T11843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2316.506944][T11843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2317.447481][ T49] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2317.780826][T26879] netlink: 176 bytes leftover after parsing attributes in process `syz.1.3579'. [ 2317.889303][ T49] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2317.900511][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 2317.900523][ T30] audit: type=1326 audit(1757684421.332:3613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26880 comm="syz.0.3580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46db8eba9 code=0x7ffc0000 [ 2317.999411][ T30] audit: type=1326 audit(1757684421.362:3614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26880 comm="syz.0.3580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46db8eba9 code=0x7ffc0000 [ 2318.096712][ T30] audit: type=1326 audit(1757684421.362:3615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26880 comm="syz.0.3580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd46db8eba9 code=0x7ffc0000 [ 2318.163476][ T49] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2318.174748][ T30] audit: type=1326 audit(1757684421.372:3616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26880 comm="syz.0.3580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46db8eba9 code=0x7ffc0000 [ 2318.241280][ T30] audit: type=1326 audit(1757684421.372:3617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26880 comm="syz.0.3580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd46db8eba9 code=0x7ffc0000 [ 2318.299068][ T30] audit: type=1326 audit(1757684421.372:3618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26880 comm="syz.0.3580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46db8eba9 code=0x7ffc0000 [ 2318.329430][ T30] audit: type=1326 audit(1757684421.372:3619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26880 comm="syz.0.3580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd46db8eba9 code=0x7ffc0000 [ 2318.376129][ T30] audit: type=1326 audit(1757684421.372:3620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26880 comm="syz.0.3580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46db8eba9 code=0x7ffc0000 [ 2318.403661][ T30] audit: type=1326 audit(1757684421.372:3621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26880 comm="syz.0.3580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd46db8eba9 code=0x7ffc0000 [ 2318.427980][ T30] audit: type=1326 audit(1757684421.372:3622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26880 comm="syz.0.3580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46db8eba9 code=0x7ffc0000 [ 2318.489444][ T49] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2318.542363][T25836] Bluetooth: hci2: command tx timeout [ 2318.858158][T26901] batadv1: entered promiscuous mode [ 2319.353320][T26913] qrtr: Invalid version 183 [ 2319.391585][ T49] bridge_slave_1: left allmulticast mode [ 2319.397689][ T49] bridge_slave_1: left promiscuous mode [ 2319.406246][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 2319.421725][ T49] bridge_slave_0: left allmulticast mode [ 2319.441588][ T49] bridge_slave_0: left promiscuous mode [ 2319.459630][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 2320.700037][T25836] Bluetooth: hci2: command tx timeout [ 2321.364482][T26977] IPv6: Can't replace route, no match found [ 2321.447158][T26977] netlink: 'syz.1.3610': attribute type 10 has an invalid length. [ 2322.352560][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2322.372696][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2322.383222][ T49] bond0 (unregistering): Released all slaves [ 2322.405532][T26866] chnl_net:caif_netlink_parms(): no params data found [ 2322.435198][T26977] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 2322.448052][T26987] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 2322.788947][T25836] Bluetooth: hci2: command tx timeout [ 2322.881826][T27002] veth0_to_team: entered promiscuous mode [ 2323.025856][T26866] bridge0: port 1(bridge_slave_0) entered blocking state [ 2323.060841][T26866] bridge0: port 1(bridge_slave_0) entered disabled state [ 2323.087113][T26866] bridge_slave_0: entered allmulticast mode [ 2323.111987][T26866] bridge_slave_0: entered promiscuous mode [ 2323.153540][T26866] bridge0: port 2(bridge_slave_1) entered blocking state [ 2323.189540][T26866] bridge0: port 2(bridge_slave_1) entered disabled state [ 2323.208106][T26866] bridge_slave_1: entered allmulticast mode [ 2323.234499][T27020] program syz.0.3625 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2323.269987][T27020] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 2323.274901][T26866] bridge_slave_1: entered promiscuous mode [ 2323.791591][T26866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2323.833645][T26996] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3619'. [ 2324.029400][T26866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2324.076294][T27047] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3632'. [ 2324.298133][T26866] team0: Port device team_slave_0 added [ 2324.383155][T26866] team0: Port device team_slave_1 added [ 2324.662094][T26866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2324.766796][T26866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2324.875717][T26866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2324.889082][T25836] Bluetooth: hci2: command tx timeout [ 2325.213257][T26866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2325.241027][T26866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2325.298092][T26866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2325.836413][T26866] hsr_slave_0: entered promiscuous mode [ 2325.876575][T26866] hsr_slave_1: entered promiscuous mode [ 2325.893441][T26866] debugfs: 'hsr0' already exists in 'hsr' [ 2325.928384][T26866] Cannot create hsr debugfs directory [ 2326.133588][T27089] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2326.140903][T27089] IPv6: NLM_F_CREATE should be set when creating new route [ 2326.148144][T27089] IPv6: NLM_F_CREATE should be set when creating new route [ 2326.207412][T27089] ------------[ cut here ]------------ [ 2326.213448][T27089] WARNING: CPU: 0 PID: 27089 at drivers/net/netdevsim/fib.c:831 nsim_fib_event_nb+0xed8/0x1080 [ 2326.224170][T27089] Modules linked in: [ 2326.228338][T27089] CPU: 0 UID: 0 PID: 27089 Comm: syz.1.3648 Not tainted syzkaller #0 PREEMPT(full) [ 2326.237717][T27089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2326.247917][T27089] RIP: 0010:nsim_fib_event_nb+0xed8/0x1080 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2326.253906][T27089] Code: fa be 02 00 00 00 eb 0a e8 85 e1 a7 fa be 01 00 00 00 4c 89 f7 e8 98 8b b0 fd 4c 8b 64 24 08 e9 91 f4 ff ff e8 69 e1 a7 fa 90 <0f> 0b 90 e9 70 fb ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 35 [ 2326.273643][T27089] RSP: 0018:ffffc9000406f008 EFLAGS: 00010287 [ 2326.280473][T27089] RAX: ffffffff8717dd97 RBX: 0000000000000002 RCX: 0000000000080000 [ 2326.289815][T27089] RDX: ffffc9000db6f000 RSI: 0000000000007917 RDI: 0000000000007918 [ 2326.299213][T27089] RBP: dffffc0000000000 R08: ffff888036a1682f R09: 1ffff11006d42d05 [ 2326.307212][T27089] R10: dffffc0000000000 R11: ffffed1006d42d06 R12: ffff8880343c6000 [ 2326.315288][T27089] R13: ffffc9000406f180 R14: 0000000000000001 R15: ffffc9000406f198 [ 2326.323318][T27089] FS: 00007fcf781716c0(0000) GS:ffff888125c15000(0000) knlGS:0000000000000000 [ 2326.332345][T27089] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2326.338968][T27089] CR2: 00007fd46ddd7dac CR3: 000000007bcb8000 CR4: 00000000003526f0 [ 2326.346955][T27089] Call Trace: [ 2326.350298][T27089] [ 2326.353250][T27089] notifier_call_chain+0x1b3/0x3e0 [ 2326.358566][T27089] ? atomic_notifier_call_chain+0x26/0x180 [ 2326.364701][T27089] atomic_notifier_call_chain+0xda/0x180 [ 2326.370445][T27089] call_fib_notifiers+0x31/0x60 [ 2326.375420][T27089] call_fib6_multipath_entry_notifiers+0xe6/0x150 [ 2326.381986][T27089] ? __pfx_call_fib6_multipath_entry_notifiers+0x10/0x10 [ 2326.390597][T27089] ? inet6_rtm_newroute+0xe8b/0x18c0 [ 2326.395911][T27089] inet6_rtm_newroute+0x12f5/0x18c0 [ 2326.402133][T27089] ? nlmon_xmit+0xb0/0x100 [ 2326.406671][T27089] ? kmem_cache_free+0x18f/0x400 [ 2326.411693][T27089] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 2326.417270][T27089] ? __local_bh_enable_ip+0x12d/0x1c0 [ 2326.422829][T27089] ? __dev_queue_xmit+0x27b/0x3b50 [ 2326.428053][T27089] ? __dev_queue_xmit+0x1d79/0x3b50 [ 2326.433356][T27089] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 2326.438972][T27089] rtnetlink_rcv_msg+0x7cf/0xb70 [ 2326.443988][T27089] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 2326.449175][T27089] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2326.454644][T27089] ? ref_tracker_free+0x63a/0x7d0 [ 2326.459819][T27089] ? __asan_memcpy+0x40/0x70 [ 2326.464477][T27089] ? __pfx_ref_tracker_free+0x10/0x10 [ 2326.469910][T27089] ? __skb_clone+0x63/0x7a0 [ 2326.474509][T27089] netlink_rcv_skb+0x205/0x470 [ 2326.479406][T27089] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2326.484886][T27089] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2326.491549][T27089] ? netlink_deliver_tap+0x2e/0x1b0 [ 2326.496779][T27089] netlink_unicast+0x82c/0x9e0 [ 2326.502567][T27089] ? __pfx_netlink_unicast+0x10/0x10 [ 2326.507888][T27089] ? netlink_sendmsg+0x642/0xb30 [ 2326.512883][T27089] ? skb_put+0x11b/0x210 [ 2326.517147][T27089] netlink_sendmsg+0x805/0xb30 [ 2326.522019][T27089] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2326.527327][T27089] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2326.532457][T27089] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2326.537843][T27089] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2326.543244][T27089] __sock_sendmsg+0x21c/0x270 [ 2326.548008][T27089] ____sys_sendmsg+0x505/0x830 [ 2326.552909][T27089] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2326.558223][T27089] ? import_iovec+0x74/0xa0 [ 2326.563529][T27089] ___sys_sendmsg+0x21f/0x2a0 [ 2326.568224][T27089] ? __pfx____sys_sendmsg+0x10/0x10 [ 2326.573532][T27089] ? __fget_files+0x2a/0x420 [ 2326.578134][T27089] ? __fget_files+0x3a0/0x420 [ 2326.582903][T27089] __x64_sys_sendmsg+0x19b/0x260 [ 2326.587863][T27089] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2326.595134][T27089] ? rcu_is_watching+0x15/0xb0 [ 2326.600923][T27089] ? do_syscall_64+0xbe/0x3b0 [ 2326.605647][T27089] do_syscall_64+0xfa/0x3b0 [ 2326.610419][T27089] ? lockdep_hardirqs_on+0x9c/0x150 [ 2326.615712][T27089] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2326.622122][T27089] ? clear_bhb_loop+0x60/0xb0 [ 2326.626820][T27089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2326.632773][T27089] RIP: 0033:0x7fcf7738eba9 [ 2326.637204][T27089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2326.657107][T27089] RSP: 002b:00007fcf78171038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2326.665666][T27089] RAX: ffffffffffffffda RBX: 00007fcf775d5fa0 RCX: 00007fcf7738eba9 [ 2326.673699][T27089] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 2326.681747][T27089] RBP: 00007fcf77411e19 R08: 0000000000000000 R09: 0000000000000000 [ 2326.689783][T27089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2326.699188][T27089] R13: 00007fcf775d6038 R14: 00007fcf775d5fa0 R15: 00007fcf776ffa28 [ 2326.707197][T27089] [ 2326.711424][T27089] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2326.718715][T27089] CPU: 0 UID: 0 PID: 27089 Comm: syz.1.3648 Not tainted syzkaller #0 PREEMPT(full) [ 2326.728096][T27089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2326.738156][T27089] Call Trace: [ 2326.741431][T27089] [ 2326.744353][T27089] dump_stack_lvl+0x99/0x250 [ 2326.748944][T27089] ? __asan_memcpy+0x40/0x70 [ 2326.753537][T27089] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2326.758729][T27089] ? __pfx__printk+0x10/0x10 [ 2326.763331][T27089] vpanic+0x281/0x750 [ 2326.767314][T27089] ? __pfx__printk+0x10/0x10 [ 2326.771903][T27089] ? __pfx_vpanic+0x10/0x10 [ 2326.776402][T27089] ? is_bpf_text_address+0x26/0x2b0 [ 2326.781727][T27089] panic+0xb9/0xc0 [ 2326.785445][T27089] ? __pfx_panic+0x10/0x10 [ 2326.789866][T27089] __warn+0x31b/0x4b0 [ 2326.793841][T27089] ? nsim_fib_event_nb+0xed8/0x1080 [ 2326.799040][T27089] ? nsim_fib_event_nb+0xed8/0x1080 [ 2326.804243][T27089] report_bug+0x2be/0x4f0 [ 2326.808641][T27089] ? nsim_fib_event_nb+0xed8/0x1080 [ 2326.813837][T27089] ? nsim_fib_event_nb+0xed8/0x1080 [ 2326.819031][T27089] ? nsim_fib_event_nb+0xeda/0x1080 [ 2326.824235][T27089] handle_bug+0x84/0x160 [ 2326.828477][T27089] exc_invalid_op+0x1a/0x50 [ 2326.832979][T27089] asm_exc_invalid_op+0x1a/0x20 [ 2326.837821][T27089] RIP: 0010:nsim_fib_event_nb+0xed8/0x1080 [ 2326.843620][T27089] Code: fa be 02 00 00 00 eb 0a e8 85 e1 a7 fa be 01 00 00 00 4c 89 f7 e8 98 8b b0 fd 4c 8b 64 24 08 e9 91 f4 ff ff e8 69 e1 a7 fa 90 <0f> 0b 90 e9 70 fb ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 35 [ 2326.863226][T27089] RSP: 0018:ffffc9000406f008 EFLAGS: 00010287 [ 2326.869290][T27089] RAX: ffffffff8717dd97 RBX: 0000000000000002 RCX: 0000000000080000 [ 2326.877248][T27089] RDX: ffffc9000db6f000 RSI: 0000000000007917 RDI: 0000000000007918 [ 2326.885210][T27089] RBP: dffffc0000000000 R08: ffff888036a1682f R09: 1ffff11006d42d05 [ 2326.893169][T27089] R10: dffffc0000000000 R11: ffffed1006d42d06 R12: ffff8880343c6000 [ 2326.901134][T27089] R13: ffffc9000406f180 R14: 0000000000000001 R15: ffffc9000406f198 [ 2326.909105][T27089] ? nsim_fib_event_nb+0xed7/0x1080 [ 2326.914305][T27089] ? nsim_fib_event_nb+0xed7/0x1080 [ 2326.919500][T27089] notifier_call_chain+0x1b3/0x3e0 [ 2326.924606][T27089] ? atomic_notifier_call_chain+0x26/0x180 [ 2326.930404][T27089] atomic_notifier_call_chain+0xda/0x180 [ 2326.936026][T27089] call_fib_notifiers+0x31/0x60 [ 2326.940872][T27089] call_fib6_multipath_entry_notifiers+0xe6/0x150 [ 2326.947286][T27089] ? __pfx_call_fib6_multipath_entry_notifiers+0x10/0x10 [ 2326.954308][T27089] ? inet6_rtm_newroute+0xe8b/0x18c0 [ 2326.959591][T27089] inet6_rtm_newroute+0x12f5/0x18c0 [ 2326.964785][T27089] ? nlmon_xmit+0xb0/0x100 [ 2326.969195][T27089] ? kmem_cache_free+0x18f/0x400 [ 2326.974129][T27089] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 2326.979669][T27089] ? __local_bh_enable_ip+0x12d/0x1c0 [ 2326.985044][T27089] ? __dev_queue_xmit+0x27b/0x3b50 [ 2326.990161][T27089] ? __dev_queue_xmit+0x1d79/0x3b50 [ 2326.995395][T27089] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 2327.000955][T27089] rtnetlink_rcv_msg+0x7cf/0xb70 [ 2327.005891][T27089] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 2327.011000][T27089] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2327.016451][T27089] ? ref_tracker_free+0x63a/0x7d0 [ 2327.021466][T27089] ? __asan_memcpy+0x40/0x70 [ 2327.026051][T27089] ? __pfx_ref_tracker_free+0x10/0x10 [ 2327.031412][T27089] ? __skb_clone+0x63/0x7a0 [ 2327.035935][T27089] netlink_rcv_skb+0x205/0x470 [ 2327.040698][T27089] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2327.046154][T27089] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2327.051438][T27089] ? netlink_deliver_tap+0x2e/0x1b0 [ 2327.056635][T27089] netlink_unicast+0x82c/0x9e0 [ 2327.061404][T27089] ? __pfx_netlink_unicast+0x10/0x10 [ 2327.066687][T27089] ? netlink_sendmsg+0x642/0xb30 [ 2327.071611][T27089] ? skb_put+0x11b/0x210 [ 2327.075848][T27089] netlink_sendmsg+0x805/0xb30 [ 2327.080610][T27089] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2327.085887][T27089] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2327.090818][T27089] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2327.096096][T27089] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2327.101374][T27089] __sock_sendmsg+0x21c/0x270 [ 2327.106054][T27089] ____sys_sendmsg+0x505/0x830 [ 2327.110907][T27089] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2327.116207][T27089] ? import_iovec+0x74/0xa0 [ 2327.120708][T27089] ___sys_sendmsg+0x21f/0x2a0 [ 2327.125377][T27089] ? __pfx____sys_sendmsg+0x10/0x10 [ 2327.130597][T27089] ? __fget_files+0x2a/0x420 [ 2327.135171][T27089] ? __fget_files+0x3a0/0x420 [ 2327.139848][T27089] __x64_sys_sendmsg+0x19b/0x260 [ 2327.144781][T27089] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2327.150243][T27089] ? rcu_is_watching+0x15/0xb0 [ 2327.155000][T27089] ? do_syscall_64+0xbe/0x3b0 [ 2327.159672][T27089] do_syscall_64+0xfa/0x3b0 [ 2327.164182][T27089] ? lockdep_hardirqs_on+0x9c/0x150 [ 2327.169388][T27089] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2327.175453][T27089] ? clear_bhb_loop+0x60/0xb0 [ 2327.180127][T27089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2327.186014][T27089] RIP: 0033:0x7fcf7738eba9 [ 2327.190421][T27089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2327.210021][T27089] RSP: 002b:00007fcf78171038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2327.218437][T27089] RAX: ffffffffffffffda RBX: 00007fcf775d5fa0 RCX: 00007fcf7738eba9 [ 2327.226403][T27089] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 2327.234369][T27089] RBP: 00007fcf77411e19 R08: 0000000000000000 R09: 0000000000000000 [ 2327.242330][T27089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2327.250290][T27089] R13: 00007fcf775d6038 R14: 00007fcf775d5fa0 R15: 00007fcf776ffa28 [ 2327.258271][T27089] [ 2327.261558][T27089] Kernel Offset: disabled [ 2327.265863][T27089] Rebooting in 86400 seconds..