last executing test programs: 12.164613352s ago: executing program 2 (id=1489): getpid() r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8, 0xfffffffc}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 12.024403232s ago: executing program 2 (id=1490): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') getpid() r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8, 0xfffffffc}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 11.826213134s ago: executing program 2 (id=1492): socket$inet_sctp(0x2, 0x5, 0x84) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) syz_open_dev$media(&(0x7f0000000400), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$vim2m(0x0, 0x7, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmmsg$sock(r2, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336bef1be8a68a628452b83a7404087d4bcb64f6ecad05459d12595d5b8b2657f2f29656a15e5a18e3168946dcb5faa59f7b404bad393ba06734d170b0513aeb0d051", 0xd5}, {&(0x7f00000004c0)="62c99e05d98775ed1beb5d67431ead896f7060f03e5b8671b283168d0df1573bef271f3a22b9cac06e27c7e87b34a19188d3e10e670bc070f0d3eb88d2f891d242747e0deec4a10609b12d4058b0fbff28bb01e6e49b533b03b11288ff4da1ab3226a2e3ba5fc47969142f1a1a0ca9ba4cece2ac9a5fcd89343de7e57dfcbb6216499555bd04f2fcb91c3c6c72868a3797ec63f8138ab74b5034878812df8b0445704cb33f81bffed93c3e645a206db134f626a59f4fac53fbf23489cf2f45d05d735e64033376671da045df97bcb989bda1d17ba14afbfd19e32a8222ebf934c17fed237b86aef2e830", 0xea}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46493862d9eb11d188464208592330ac482436286448", 0x20000}], 0x3}}], 0x1, 0xf0ffffffffffffff) 11.60464489s ago: executing program 2 (id=1493): socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) pwritev(r0, &(0x7f0000000340)=[{&(0x7f0000000a00)="cd", 0x1}, {0x0}], 0x2, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x2, 0x2, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) (async) syz_io_uring_setup(0x18b0, &(0x7f0000000280), 0x0, 0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0), 0x0, 0x0) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001040)={0x9, {"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", 0x1000}}, 0x1006) (async) socket$nl_audit(0x10, 0x3, 0x9) syz_open_procfs(0x0, &(0x7f00000000c0)='timerslack_ns\x00') (async) pipe(&(0x7f0000000100)) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="7dbf230d000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a0001"], 0x64}}, 0x0) 11.1104919s ago: executing program 2 (id=1494): r0 = socket$packet(0x11, 0x0, 0x300) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed2, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600093582c137153e37080c188009ac0f000300", 0x33fe0}], 0x1}, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000180)=@req3={0xb, 0x7, 0x8000, 0x100}, 0x1c) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000340)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100005994fe33af96db549cf375b24e1040200175ee02000003010902120001000000ed0904000000f6056600"], 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="ca459e37109ecf9d72ff5c26a0d9d149d8ba248706ce1896fd4adb52f3d88f14623b707dd1"], &(0x7f00000004c0)={0x0, 0xa, 0x1}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x6}, 0x0, &(0x7f0000000600)={0x20, 0x3, 0x1}}) r3 = socket$inet_sctp(0x2, 0x4, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) gettid() getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000180)={r5}, &(0x7f0000000300)=0x8) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000280)=ANY=[@ANYBLOB="1000000008140100000000000000000029f3071838079367f1cfa5e496f4f734be417da96597cc0873a2cb3058"], 0x10}}, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000000)={r5, 0xc9, "df894d92364b233d014020729f123f3f5069bc6f2aedb75823d5eae82408bf53bf4a9dcc35955e9fab147f2ea7a3b0cafe912931e6e7481d1431de6268f3fb60931471f7f9e4b5e2c20c099a0b04a82b203222a235eff71de70e3364fe5fa727b02db8f00f6cb349c06a0a46775fa421e9a0f14898f2a1253b25d52e4353ff1a458b9491ecc30be90249a13bdff4c79104947a7ae45e93064b40c9ae05f491e679a6e4fefd1a5eb5199e483b914ae476bed588a919bc729eaff7ccb4936267f66ded2f90d8ea7e2cf0"}, &(0x7f0000000100)=0xd1) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="043e110b07"], 0xfc) syz_usb_connect(0x0, 0x3f, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000954c53400d051b01a46f0000000109022d00010000000009040000000202ff00052406000005240000000d2402", @ANYRESHEX=0x0], 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) r9 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_SMBUS(r9, 0x720, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x0}) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r8, 0x84, 0x19, &(0x7f0000000200)={r7, 0x1}, 0x8) 8.59381476s ago: executing program 2 (id=1498): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x6affffff, 0x3403000b, 0x0, 0x7, 0x210, 0x230, 0x230, 0x210, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00'}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) get_robust_list(0x0, 0x0, 0x0) set_robust_list(&(0x7f0000000740), 0x18) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00003e1000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x200394}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10, r3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket(0x15, 0x5, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r5, 0xff, 0x1, 0x0, &(0x7f00000001c0)) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x5, 0x0, 0x2000000) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.856853772s ago: executing program 3 (id=1509): prlimit64(0x0, 0xc, &(0x7f0000000140)={0x0, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000400)=ANY=[@ANYBLOB="0000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bf0000000f0a00000000000004000000400000000500000000000000ff03000000000000000000000000000000000000000000000000000000000000070000000500000000000000000000003c1500000000000000000000000000000200"/304]) socket(0x10, 0x3, 0x0) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000006, 0x31, 0xffffffffffffffff, 0xffffc000) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000280), 0x2, 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = userfaultfd(0x1) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0x0, @multicast1}, @ib={0x1b, 0x0, 0x0, {"230963d6ced8bd17e8200000000e00"}}}}, 0x118) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f00000000c0)={0x1, 0x10}, 0x18) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, 0x0, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = shmget$private(0x0, 0x2000, 0x8, &(0x7f0000ffd000/0x2000)=nil) shmat(r5, &(0x7f0000662000/0x1000)=nil, 0xffffffffffffcfff) 5.832444227s ago: executing program 4 (id=1515): syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000bd849d206f1d1000a70a010203010902120001000000000904000000ef040100db22c126afa6b4b18bc983247d8d22865296018e46f7071d4712f92c3ecfd1332507b6a2228c3b311a51fa2090aa00655ee4ac0b8eb6432dfafd5fc4d55385daa9eea15814142f0463419d70505bda80925542"], 0x0) syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x2e0542) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$HIDIOCSREPORT(r2, 0x400c4808, &(0x7f0000000180)={0x1, 0x2, 0x8}) bind$netlink(r1, &(0x7f0000000700)={0x10, 0x0, 0x0, 0x800000}, 0xc) r3 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r3, 0x0, 0x0, 0xc080) connect$inet(r3, &(0x7f0000000280)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) syz_emit_ethernet(0xc6, &(0x7f0000000300)={@multicast, @empty, @val={@void}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "ff690b", 0x8c, 0x2f, 0x0, @rand_addr=' \x01\x00', @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100, 0x44, 0x0, [0x0, 0x0], "50d6073fd24ad9ba1d6486196439cd9785a0f88fe0d4b431081c8100e23498c0b9df091dec652b33ab61c9b16850a7308f131bfd3f6aa90efc27e7cbeb148da3ccc09e8a"}, {0x0, 0x0, 0x0, 0x0, 0x100}}}}}}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="3400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468"], 0x34}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x0, 0x227d, 0x709, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x10, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x1}}}}}]}}]}}, &(0x7f0000000a00)={0x0, 0x0, 0x121, &(0x7f0000000580)={0x5, 0xf, 0x121, 0x4, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfa}, @generic={0xfa, 0x10, 0x0, "42cba3004df6c5201ba9e73ec84156b429aff5383895c292a00a3963338f6c8735096cb242c86384760a80e7d4cdafeb37a62f556c4897bfddc6118ef73f477dd3bbc8d414d9f93e1634d40d5a0f973ac3b2a139cfed4faa604d601f4fae50c2d5f0c5db51978f4674eb5cfe3d62107d34340bbf3d74f6d1024628e2a2d31de1e4777ad9340b304ed3f8e16d2a5f9559605124a88389f801a357421f04ae3b3f9c96cc922fa86da540ca22b870e1b106fb44839d69fe3c43ef83780295f444c993aa256f465bf6362275889b29546ed239f759e7c8ecaa3b9f5c78da1c39674b6e710d27b37fd988933be663fa2c9f2255c4fce723f2b0"}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "cacc046570c6ba0686c9b7091523f820"}]}, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x8001, 0xd, 0x6, 0x3}, {0x7, 0x3, 0x7, 0x6}]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$video(&(0x7f00000010c0), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f0000000200)={0x2, 0x0, 0x0, {0xfd48}}) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x19, &(0x7f0000000080)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "a94d74ec61fe94a03976ac0babac43c8"}]}, 0x4, [{0x0, 0x0}, {0x0, 0x0}, {0x66, &(0x7f0000000100)=@string={0x66, 0x3, "d488f697f34ff948c02b2751ba986aa8647db69d5427cc3884358cfa0e4f32d2f3d15201567bdae0cdb1d5d06e14ed0ff188663ad38ee7b823cccf4a4ca8eab6a0a4bfa36d984600e75cf24e9139e8a6a83a9185d9b61a4f5e20e7aa4a0634021299984d"}}, {0x5f, &(0x7f0000000400)=@string={0x5f, 0x3, "ede0bcc4020ea6a9a75737c8b589c05af6328cf94f0d947928c80af82a4570af9de3738be447c959c0f62a25a7d11a8f8f628c045039a6faaf326ef866e4ee6102fa9b7cdbfc850149c92dd2f90e4d196ab286f0a518714b4f23ba784f"}}]}) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVix:De', 0x0) 5.776830051s ago: executing program 3 (id=1516): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000380)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001140)={0x24, &(0x7f0000000080)=ANY=[@ANYRESDEC=r0, @ANYRES8, @ANYRESOCT=r0], 0x0, 0x0, 0x0}, 0x0) 4.463660762s ago: executing program 1 (id=1525): r0 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x8, 0x0, {0x0, r3}}) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x3c00) 4.39128874s ago: executing program 1 (id=1526): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0xffffff7f}, 0x0) 4.196597671s ago: executing program 1 (id=1527): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x32, 0x4, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1}, {@dev, 0x659}, {@broadcast}, {@empty}, {@multicast1}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x8, [{@dev}, {@multicast2, 0x7}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0xdc, [@private=0xa010102, @rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r1, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r2 = fsopen(&(0x7f0000002200)='erofs\x00', 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='\x00', 0x0) read$FUSE(r3, &(0x7f000000b080)={0x2020}, 0x2020) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r4, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x2}, 0x10, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYBLOB="000000000000000000d50d000000006203000601e1dd661b58df28331e"], 0x54}}, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x20605) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) writev(r6, &(0x7f0000000580)=[{&(0x7f0000000000)="1e8292", 0xfff6}], 0x2) landlock_restrict_self(r5, 0x0) landlock_restrict_self(r5, 0x0) syz_open_dev$vim2m(0x0, 0x8000, 0x2) r7 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) socket$inet6_sctp(0xa, 0x0, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, 0x0, 0x0}, 0x90) 4.196354367s ago: executing program 3 (id=1528): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="580000000d04010400000000000000000000000708000540fffffffd080003400000c8180a00020000000400000000000a000200000000050000000005000100010000000a0002000000000401"], 0x58}}, 0x0) 4.080300951s ago: executing program 3 (id=1529): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x4c84, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) accept4(r3, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000840)=@newtclass={0x40, 0x28, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x3}}, [@c_cbq={{0x8}, {0x14, 0x2, [@TCA_CBQ_RATE={0x10, 0x5, {0x7, 0x2, 0x1, 0x400, 0xff, 0x1}}]}}]}, 0x40}}, 0x4c000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000180)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_emit_vhci(&(0x7f00000001c0)=ANY=[], 0x15) syz_pidfd_open(0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) read$FUSE(r4, &(0x7f0000006380)={0x2020}, 0x2020) 4.011683168s ago: executing program 0 (id=1530): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0xfffffd6e}, {&(0x7f0000019740)=""/242}], 0x2, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'sit0\x00', &(0x7f0000019840)={'syztnl1\x00', 0x0, 0x7818, 0x0, 0x0, 0x0, {{0x40, 0x4, 0x0, 0x0, 0x100, 0x65, 0x0, 0x6, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x14, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}, @timestamp={0x44, 0x2c, 0xef, 0x0, 0x2, [0x72a35bda, 0x1, 0x7fff, 0x6, 0x7, 0x8, 0x1, 0x9, 0x181cd3cd, 0x696d]}, @timestamp_prespec={0x44, 0x3c, 0x53, 0x3, 0x0, [{@private=0xa010100}, {@rand_addr=0x64010100}, {@multicast2}, {@private}, {@rand_addr=0x64010102}, {@broadcast}, {@multicast2}]}, @lsrr={0x83, 0x7, 0xc3, [@dev={0xac, 0x14, 0x14, 0x22}]}, @cipso={0x86, 0x44, 0x0, [{0x5, 0x8, "7f9ba4696412"}, {0x0, 0x7, "a8e578de1c"}, {0x1, 0x4, "d4cf"}, {0x5, 0x5, "de673d"}, {0x7, 0x6, "c78ba266"}, {0x6, 0xb, "e039ff8328170f6051"}, {0x6, 0x2}, {0x6, 0x2}, {0x0, 0x11, "13f49695f1da7c8f952a8e69e80a9d"}]}, @noop, @lsrr={0x83, 0xb, 0x0, [@rand_addr, @multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x1911, &(0x7f0000000080)={0x0, 0x570b, 0x200, 0x0, 0x1, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000300)=0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x0, &(0x7f0000000040)}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYRES16=r1], 0x24) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000080)='d', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x11af, 0xdfd2, 0x1, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_setup(0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) 3.9159849s ago: executing program 4 (id=1531): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') getpid() r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8, 0xfffffffc}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3.68956444s ago: executing program 4 (id=1532): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0xdb, 0x9d, 0x1b, 0x8, 0x12d1, 0xfae2, 0x708b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x4, 0x1a}}]}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0x83c0550b, &(0x7f0000000400)) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1977}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000240)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000a00)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) io_uring_setup(0x0, &(0x7f0000000180)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000000)={0x1, 0x4, 0xd4a4, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x2000)=nil, 0x2000, 0x3000000, 0x12, r2, 0x1000) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x7}}, 0x10) bind$tipc(r3, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x10000}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000240)={0x41, 0x8000000}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x41}, 0x10) socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0), 0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) shutdown(0xffffffffffffffff, 0x1) 3.116659804s ago: executing program 3 (id=1533): write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0x58, 0x2, [@TCA_U32_POLICE={0x40, 0x6, [@TCA_POLICE_TBF={0x3c}]}, @TCA_U32_SEL={0x14}]}}]}, 0x84}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x8100) 2.86445567s ago: executing program 0 (id=1534): r0 = socket$inet(0x2, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000340)={'vxcan1\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x48}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c00000010000104000000000800000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000900000000000500200001000000050008000000000006001f00000000000800030004"], 0x7c}}, 0x0) 2.771510245s ago: executing program 1 (id=1535): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="03010000b5"], 0xc8) close_range(r1, 0xffffffffffffffff, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x2d, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bind$netlink(r0, &(0x7f0000000180)={0x10, 0x0, 0x4000000}, 0x15) recvmmsg(0xffffffffffffffff, &(0x7f0000009ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10065, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) 2.391155193s ago: executing program 1 (id=1536): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0081"], 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000200)={0x0, @sliced={0x0, [0x0, 0xd, 0x1, 0x1ff, 0x18, 0x79db, 0x7f, 0x3, 0x3, 0x7, 0x5, 0xc, 0x2, 0x2, 0x0, 0x6, 0x5822, 0x4, 0xff, 0x3, 0x1, 0x2, 0x9, 0x0, 0x0, 0x7, 0x340b, 0x4c, 0xfff, 0xc, 0xe, 0xfffc, 0x5, 0x8001, 0x0, 0x0, 0x9c, 0xa43e, 0x0, 0x8, 0x7fff, 0x7ff, 0x3, 0x0, 0x8000, 0x6, 0xb, 0x1ff], 0x9}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r3, &(0x7f0000000000)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = open_tree(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x89901) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025", 0x1d}], 0x1) pipe2(&(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) r6 = socket$inet(0x2, 0x2, 0x1) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e23, @empty}, 0x10) sendmmsg$inet(r6, 0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7401, 0x7e832, 0xffffffffffffffff, 0x0) r7 = syz_io_uring_setup(0x1e27, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r7, 0x3ad6, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) 1.482906619s ago: executing program 1 (id=1537): memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0x0) syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000001000040"]) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000980)=ANY=[@ANYBLOB="120100001600005015a440001a6776901e60004201000000090400000102090000052406000105240000000d0000"], 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f00000000c0)=@urb_type_interrupt={0x1, {}, 0x4, 0x81, &(0x7f0000000280)="c103fd3dbe2b294fd14deefb5ba69e122c5955551dd5ba8d42ec1dc22ca977ab958fb4a2a477128792d23934ff2270dfdd5ea82d523bc76e25f4b05f7c7918165997ac5a46024a0823a8e3fee6aa2c6d99862db30992250f9fda590a271fb52fa75edf2437f087be4d4328c38fc38ef854509458d8ade8b7cf4361aae6d2c3772c726529161e24373a194c1c0d00df23f3746f72594c5a7165851bc01cf5d760bdb4660be704c5a5048bcb459ccfd319217cba00ab5010c6992f7324917b7dbf5f49cc55d3bb5019fb3b195b17836d7c516f78482e7788b55d552ca8", 0xdc, 0x7, 0xffff8000, 0x0, 0x48ec, 0x8, &(0x7f0000000380)="127dd641599a28ef314002d9ac7f31d9a7ca9924e98cbe4c1ec3f899675f00bd0fb6683537f4405c81c80ecdc6658657c3635c7fa18e2582b9ae8c8784fc2fd7eecce5fa46fb1e46e38b7cdd196695a32a281728fccfb4295b49caf8f037e3278bbfafc52fef3a87070623b84f5af5347cbb22dd86e9e83d68635bb6c9f00cebcc127806659232db737f5a6733045c6660063e52"}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = getpgid(0xffffffffffffffff) ptrace$ARCH_SET_GS(0x1e, r4, &(0x7f0000000040), 0x1001) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ddbd731082057d0085a3001000010902120001000000000904000000932a5325"], 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000080)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000001200)={0x0, 0x3938700}, 0x0) 1.155887649s ago: executing program 3 (id=1538): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000810087406d040e0a759400000001090212000100000000090400200003"], 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$ENABLE_STATS(0x20, &(0x7f0000000300), 0x60) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000000)={0x40, 0xd, 0xd, {0xd, 0x11, "2d01d06f3711276b1ff092"}}, &(0x7f0000000040)={0x0, 0x3, 0xc8, @string={0xc8, 0x3, "a7a2f693c9570e285b70955ea7b8702fbd2a0c9a29d9808c5e8af0b7fe4020d370265e3c095f437f73d65bfe12702398d366dd50f4025e018864eddbfcbb7a6eab44938904296596de1ef1a2ebc0d25f6d04897949d214383ff0827351c4c82639007c789f3d1be3415a06a69ef096dc164d7d6c68b529a87b7f8e694da1218612160d73a4c34d1eb1fe1265144134f8762c6985ddf00faeee85842837c71326e04b784da3131714eeeb4e444648a8fd2bbda9577935980a863df9a4d62f95706f6349a17475"}}, &(0x7f00000001c0)={0x0, 0xf, 0x4e, {0x5, 0xf, 0x4e, 0x4, [@wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0x6, 0x3, 0x7, 0x1}, @ssp_cap={0x20, 0x10, 0xa, 0x81, 0x5, 0x379, 0xf00, 0x8, [0xf, 0x0, 0x30, 0xc0, 0x0]}, @ssp_cap={0x14, 0x10, 0xa, 0xa, 0x2, 0x100, 0x0, 0x3, [0xf, 0x3fc0]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x4, 0x2, 0x6}]}}, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0xfe, 0x3d549ae91fd2d561, 0xf7, 0x3, "09bfd67e", "5fbb49c0"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x2, 0xa, 0x5, 0x7, 0x5, 0xa}}}, &(0x7f0000000800)={0x84, &(0x7f00000008c0)=ANY=[@ANYBLOB="200fa700000095958efdb1a595b2876c0a624c90b95af656c15641bad6752bd70770c9b22c5d208c08a92fb73efce0d591232b3562952e368f87a421a08b63c31e0955545b7661f7e7ec9e6c8e38badde101afec484095abade66d1f9c2ccc80b1271562d12e6448647e2ae6b7076f7acf3aeac3d96938ae604c7c410ebdfcfff23da9a83035609aa5f813eaf104fb0be02cbefdea325f906cd35b7690c8252aaf59b6a50809f354ea80f270c065be409e4597f6b2bc893ff51f2cd344"], &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0xe}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x1c00, 0x20}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x2d}, &(0x7f00000005c0)={0x40, 0xb, 0x2, "a725"}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x91d}, &(0x7f0000000640)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000680)={0x40, 0x17, 0x6, @multicast}, &(0x7f00000006c0)={0x40, 0x19, 0x2, "c03e"}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0xf}, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0xd0}, &(0x7f00000007c0)={0x40, 0x21, 0x1}}) 1.06490812s ago: executing program 0 (id=1539): r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x0, 0x2}, 0x10, 0x0) syz_emit_vhci(&(0x7f0000000740)=ANY=[@ANYRES64=0x0, @ANYRES32=0x0, @ANYRESOCT, @ANYRES8, @ANYRES64=r0, @ANYRES8, @ANYBLOB="2076394449ef5c03d9faa979"], 0xfb) process_madvise(0xffffffffffffffff, &(0x7f0000000200), 0x1000000000000276, 0xc00000000000000, 0x0) 978.102998ms ago: executing program 0 (id=1540): r0 = signalfd(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000100)={@local, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@dev, 0x0, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@local, 0x800, 0x0, 0x3, 0x3}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@local, 0x800, 0x0, 0x3, 0x3}, 0x20) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}]}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x900, 0x0) read$FUSE(r2, &(0x7f0000002300)={0x2020}, 0x2020) (async) read$FUSE(r2, &(0x7f0000002300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f00000001c0)={0x50, 0x0, r4}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000004340)="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", 0x2000, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x78, 0x0, 0x0, {0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r2, &(0x7f0000004340)="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", 0x2000, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x78, 0x0, 0x0, {0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INTERRUPT(r0, &(0x7f0000000080)={0x10, 0x0, r4}, 0x10) (async) write$FUSE_INTERRUPT(r0, &(0x7f0000000080)={0x10, 0x0, r4}, 0x10) fstat(r3, &(0x7f0000001ac0)) 691.524553ms ago: executing program 0 (id=1541): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8, 0xfffffffc}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 512.80986ms ago: executing program 4 (id=1542): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f00000001c0)=0x47b4, 0x4) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e25, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) write(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r1, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4008af14, &(0x7f0000000000)={0x2, 0x9}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000009c0)='./file0\x00', r4, &(0x7f0000000a00)='./file0\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x1c, &(0x7f0000000600)=@raw=[@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @exit], 0x0, 0x100, 0x9e, &(0x7f0000000700)=""/158, 0x41100, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000007c0)={0x6, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000840)=[r4], &(0x7f0000000880)=[{0x3, 0x4, 0xe, 0x5}, {0x3, 0x3, 0x4, 0xa}, {0x0, 0x4, 0xb, 0xa}, {0x3, 0x1, 0x10, 0xb}, {0x0, 0x0, 0xe, 0x3}, {0x0, 0x3, 0x7}, {0x4, 0x5, 0x3, 0x1}], 0x10, 0x7}, 0x90) mknodat(r4, &(0x7f0000000a40)='./file0\x00', 0x200, 0x7) ioctl$SG_SET_KEEP_ORPHAN(r4, 0x2287, &(0x7f0000000040)=0x8001) getsockopt$SO_BINDTODEVICE(r3, 0x88, 0x68, 0x0, 0x20000000) 415.501056ms ago: executing program 4 (id=1543): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000080)={@local, @remote, 0x0}, &(0x7f00000000c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wg1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wg1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x7800, 0x7800, 0x1, 0x6, {{0xe, 0x4, 0x3, 0x7, 0x38, 0x64, 0x0, 0x9, 0x29, 0x0, @remote, @local, {[@timestamp_addr={0x44, 0x24, 0x7c, 0x1, 0x7, [{@remote, 0x2}, {@empty, 0x5}, {@rand_addr=0x64010102, 0xf2c9}, {@private=0xa010101, 0x10000}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000240)={'gre0\x00', 0x0, 0x8, 0xeba7ef9171470f99, 0x2, 0xc, {{0x17, 0x4, 0x3, 0x0, 0x5c, 0x65, 0x0, 0x59, 0x4, 0x0, @multicast2, @multicast2, {[@rr={0x7, 0xf, 0x9d, [@loopback, @remote, @rand_addr=0x64010101]}, @lsrr={0x83, 0xb, 0x78, [@loopback, @remote]}, @timestamp_addr={0x44, 0x2c, 0xdb, 0x1, 0x8, [{@local, 0x5}, {@local, 0x10}, {@loopback, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xefa0}, {@loopback, 0x4}]}]}}}}}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r1, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_PAUSE_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x400c000) truncate(&(0x7f0000000400)='./file0\x00', 0x9) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x34, r7, 0x800, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x32}, @val={0x8}, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x61}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20044000) set_mempolicy(0x3, &(0x7f00000005c0)=0xfff, 0x0) r9 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = syz_open_dev$cec(&(0x7f0000000600), 0x0, 0x105000) ioctl$CEC_ADAP_S_LOG_ADDRS(r10, 0xc05c6104, &(0x7f0000000640)={"dba84d82", 0x7, 0xd9, 0x43, 0xce5f, 0x80, "51eb69928318cb692384265566df3a", "84cec943", "62b2f51f", "83acc979", ["b99b6007aa0a9149e7e14a3c", "c7fe27073b0c093938cb5211", "8e0cd2d0baa62c15ddf327a2", "d1caf0e283125543ff93b67f"]}) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) r12 = syz_open_dev$evdev(&(0x7f00000006c0), 0xd, 0xa000) ioctl$EVIOCGRAB(r12, 0x40044590, &(0x7f0000000700)=0x401) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r11, 0x8983, &(0x7f0000000740)={0x6, 'rose0\x00', {0xffffff49}, 0xd}) r13 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000780)={'wlan0\x00'}) bind$can_raw(r13, &(0x7f00000007c0), 0x10) socket$inet_udplite(0x2, 0x2, 0x88) r14 = add_key$fscrypt_provisioning(&(0x7f0000000800), &(0x7f0000000840)={'syz', 0x3}, &(0x7f0000000880)={0x0, 0x0, @c}, 0x29, 0xfffffffffffffffb) keyctl$search(0xa, r14, &(0x7f00000008c0)='keyring\x00', &(0x7f0000000900)={'syz', 0x1}, 0xfffffffffffffffd) socket$l2tp(0x2, 0x2, 0x73) openat$tun(0xffffffffffffff9c, &(0x7f0000000940), 0x200000, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r13, 0x8008f511, &(0x7f0000000980)) 395.177459ms ago: executing program 0 (id=1544): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="2c385a4706", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000a40)=""/136, 0x88}], 0x1}}, {{&(0x7f00000001c0), 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000bc0)=""/243, 0xf3}, {&(0x7f0000000240)=""/96, 0x60}, {&(0x7f0000000480)=""/181, 0xb5}, {&(0x7f0000000140)=""/2, 0x2}], 0x4, &(0x7f0000000540)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000000580), 0x6e, &(0x7f00000009c0)=[{&(0x7f0000000640)=""/66, 0x42}, {&(0x7f00000006c0)=""/167, 0xa7}, {&(0x7f0000000780)}, {&(0x7f00000007c0)=""/224, 0xe0}, {&(0x7f00000008c0)=""/10, 0xa}, {&(0x7f0000001280)=""/4096, 0x1000}, {&(0x7f0000000900)=""/117, 0x75}], 0x7}}], 0x3, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r3 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001240)=ANY=[@ANYBLOB="500100001a0001000000000002000000020000000000c808ffffffea0800", @ANYRES32=r4, @ANYBLOB="06"], 0x150}}, 0x0) ioctl$CAPI_REGISTER(0xffffffffffffffff, 0x400c4301, &(0x7f0000000080)={0x7, 0xffff, 0x400}) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="043e1f0a00"], 0x22) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c90012000e00"], 0x17) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x400001, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000040)=0x13) 0s ago: executing program 4 (id=1546): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001340)=ANY=[@ANYBLOB="03011400ff1e430000028900ad0001140000002f2500ac14141fe000e502808a8972bd0f72e401010c520f068c3f1fe4fdfe4b449430ebb52997e36e039b1c598825f80100a3c06376c3304176a167d50261a67a34a09e5fe2bb07b6f158f918a54bf8"], 0xdd12}], 0x1}, 0x0) kernel console output (not intermixed with test programs): port 2(bridge_slave_1) entered blocking state [ 274.405780][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.452792][ T9406] veth0_macvtap: entered promiscuous mode [ 274.519287][ T1118] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.700317][ T1118] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.717452][ T5110] Bluetooth: hci4: command tx timeout [ 274.731009][ T9406] veth1_macvtap: entered promiscuous mode [ 274.737964][ T5103] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 274.893562][ T9406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.905330][ T9406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.918816][ T9406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.930185][ T9406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.959308][ T5103] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 274.964223][ T9406] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.977906][ T5103] usb 3-1: New USB device found, idVendor=0421, idProduct=026c, bcdDevice=1f.2f [ 274.991891][ T5103] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.012535][ T9406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.025163][ T5103] usb 3-1: config 0 descriptor?? [ 275.028424][ T9406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.054886][ T9406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.055909][ T5103] rndis_host 3-1:0.0: probe with driver rndis_host failed with error -22 [ 275.072056][ T9406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.089058][ T9406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.106156][ T9406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.118714][ T5103] cdc_acm 3-1:0.0: Control and data interfaces are not separated! [ 275.147390][ T5103] cdc_acm 3-1:0.0: This needs exactly 3 endpoints [ 275.148426][ T9406] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.159433][ T5103] cdc_acm 3-1:0.0: probe with driver cdc_acm failed with error -22 [ 275.212086][ T9406] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.259450][ T9406] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.284046][ T9406] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.310636][ T9406] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.338078][ T46] usb 3-1: USB disconnect, device number 25 [ 275.483087][ T1118] bridge_slave_1: left allmulticast mode [ 275.499055][ T1118] bridge_slave_1: left promiscuous mode [ 275.517274][ T1118] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.543213][ T1118] bridge_slave_0: left allmulticast mode [ 275.549150][ T1118] bridge_slave_0: left promiscuous mode [ 275.556130][ T1118] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.656790][ T5154] usb 5-1: USB disconnect, device number 40 [ 276.014393][ T9816] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1051'. [ 276.559052][ T1118] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 276.569959][ T1118] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 276.581689][ T1118] bond0 (unregistering): Released all slaves [ 276.788807][ T5110] Bluetooth: hci4: command tx timeout [ 276.862402][ T9350] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.886180][ T9350] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.937008][ T9582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.020224][ T5110] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 277.140723][ T1118] hsr_slave_0: left promiscuous mode [ 277.166928][ T1118] hsr_slave_1: left promiscuous mode [ 277.183943][ T1118] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 277.208548][ T1118] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.228624][ T1118] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 277.236522][ T1118] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.275931][ T1118] veth1_macvtap: left promiscuous mode [ 277.288111][ T1118] veth0_macvtap: left promiscuous mode [ 277.293768][ T1118] veth1_vlan: left promiscuous mode [ 277.306995][ T1118] veth0_vlan: left promiscuous mode [ 277.364737][ T9851] fuse: Bad value for 'group_id' [ 277.380503][ T9851] fuse: Bad value for 'group_id' [ 277.414456][ T9854] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1057'. [ 277.941553][ T1118] team0 (unregistering): Port device team_slave_1 removed [ 277.981242][ T1118] team0 (unregistering): Port device team_slave_0 removed [ 278.340625][ T9350] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.366452][ T9350] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.491942][ T9582] veth0_vlan: entered promiscuous mode [ 278.624757][ T9582] veth1_vlan: entered promiscuous mode [ 278.707951][ T9705] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 278.753489][ T9705] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 278.766468][ T4516] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 278.817806][ T9705] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 278.866108][ T9705] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 278.874224][ T5110] Bluetooth: hci4: command tx timeout [ 278.929369][ T9582] veth0_macvtap: entered promiscuous mode [ 278.956521][ T4516] usb 3-1: Using ep0 maxpacket: 32 [ 278.977210][ T9582] veth1_macvtap: entered promiscuous mode [ 278.993341][ T4516] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 279.018770][ T4516] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.047474][ T4516] usb 3-1: Product: syz [ 279.051669][ T4516] usb 3-1: Manufacturer: syz [ 279.097922][ T4516] usb 3-1: SerialNumber: syz [ 279.115688][ T4516] usb 3-1: config 0 descriptor?? [ 279.123245][ T9582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.128847][ T4516] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 279.140940][ T9582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.172923][ T9582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.203355][ T9582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.225791][ T9582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.285366][ T9582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.310988][ T9582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.323511][ T9582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.336419][ T5152] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 279.352095][ T9582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.363481][ T9582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.380487][ T9582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.393431][ T9582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.419374][ T9582] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.432458][ T9582] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.441745][ T9582] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.451643][ T9582] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.526793][ T5152] usb 5-1: Using ep0 maxpacket: 32 [ 279.543921][ T5152] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 279.563097][ T5152] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 279.585125][ T9705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.603545][ T5152] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 279.636832][ T5152] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 279.661813][ T9705] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.673107][ T5152] usb 5-1: config 1 has no interface number 0 [ 279.679364][ T1118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.696179][ T5152] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 279.700532][ T1118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.735366][ T5153] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.742565][ T5153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.747045][ T5152] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 279.786410][ T5152] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.816768][ T5153] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.823920][ T5153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.831255][ T5152] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 279.855540][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.871820][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.993899][ T9705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.029857][ T5152] snd_usb_pod 5-1:1.1: endpoint not available, using fallback values [ 280.071772][ T5152] snd_usb_pod 5-1:1.1: invalid control EP [ 280.095239][ T5152] snd_usb_pod 5-1:1.1: cannot start listening: -22 [ 280.121540][ T5152] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 280.144363][ T5152] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 280.198998][ T9705] veth0_vlan: entered promiscuous mode [ 280.261346][ T9705] veth1_vlan: entered promiscuous mode [ 280.412502][ T9705] veth0_macvtap: entered promiscuous mode [ 280.463375][ T9705] veth1_macvtap: entered promiscuous mode [ 280.550784][ T9705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.619133][ T9705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.663715][ T9705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.696807][ T9705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.739622][ T9705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.772116][ T9705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.815180][ T9705] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.872510][ T9705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.928178][ T9705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.992961][ T9705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.086308][ T9705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.113684][ T9705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.144786][ T9705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.190320][ T9705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.224254][ T9705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.264325][ T9705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.354355][ T9705] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.382626][ T9705] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.412643][ T9705] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.433794][ T9705] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.466113][ T4516] gspca_stk1135: reg_w 0x2ff err -71 [ 281.482299][ T4516] gspca_stk1135: serial bus timeout: status=0x00 [ 281.521133][ T4516] gspca_stk1135: Sensor write failed [ 281.548782][ T4516] gspca_stk1135: serial bus timeout: status=0x00 [ 281.581783][ T4516] gspca_stk1135: Sensor write failed [ 281.601871][ T4516] gspca_stk1135: serial bus timeout: status=0x00 [ 281.616937][ T4516] gspca_stk1135: Sensor read failed [ 281.630963][ T4516] gspca_stk1135: serial bus timeout: status=0x00 [ 281.692943][ T4516] gspca_stk1135: Sensor read failed [ 281.716304][ T4516] gspca_stk1135: Detected sensor type unknown (0x0) [ 281.755675][ T9350] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.769328][ T4516] gspca_stk1135: serial bus timeout: status=0x00 [ 281.832065][ T9350] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.842420][ T4516] gspca_stk1135: Sensor read failed [ 281.880754][ T4516] gspca_stk1135: serial bus timeout: status=0x00 [ 281.965098][ T4516] gspca_stk1135: Sensor read failed [ 282.001436][ T4516] gspca_stk1135: serial bus timeout: status=0x00 [ 282.017439][ T2901] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.031150][ T4516] gspca_stk1135: Sensor write failed [ 282.064732][ T4516] gspca_stk1135: serial bus timeout: status=0x00 [ 282.076956][ T2901] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.087835][ T4516] gspca_stk1135: Sensor write failed [ 282.116947][ T4516] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 282.181787][ T4516] usb 3-1: USB disconnect, device number 26 [ 282.247300][ T9952] FAULT_INJECTION: forcing a failure. [ 282.247300][ T9952] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 282.296405][ T9952] CPU: 1 PID: 9952 Comm: syz.2.1069 Not tainted 6.10.0-syzkaller-11185-g2c9b3512402e #0 [ 282.306131][ T9952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 282.316170][ T9952] Call Trace: [ 282.319434][ T9952] [ 282.322349][ T9952] dump_stack_lvl+0x241/0x360 [ 282.327019][ T9952] ? __pfx_dump_stack_lvl+0x10/0x10 [ 282.332202][ T9952] ? __pfx__printk+0x10/0x10 [ 282.336789][ T9952] ? __pfx_lock_release+0x10/0x10 [ 282.341802][ T9952] should_fail_ex+0x3b0/0x4e0 [ 282.346475][ T9952] _copy_from_iter+0x43a/0x1960 [ 282.351336][ T9952] ? __pfx__copy_from_iter+0x10/0x10 [ 282.356607][ T9952] ? arch_stack_walk+0x16d/0x1b0 [ 282.361529][ T9952] ? mark_lock+0x9a/0x350 [ 282.365952][ T9952] tun_get_user+0x25f/0x4720 [ 282.370560][ T9952] ? __lock_acquire+0x137a/0x2040 [ 282.375576][ T9952] ? __pfx_tun_get_user+0x10/0x10 [ 282.380597][ T9952] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 282.386041][ T9952] ? tun_get+0x1e/0x2f0 [ 282.390183][ T9952] ? __pfx_lock_release+0x10/0x10 [ 282.395197][ T9952] ? tun_get+0x1e/0x2f0 [ 282.399340][ T9952] ? tun_get+0x27d/0x2f0 [ 282.403654][ T9952] tun_chr_write_iter+0x113/0x1f0 [ 282.408663][ T9952] do_iter_readv_writev+0x60a/0x890 [ 282.413844][ T9952] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 282.419545][ T9952] ? bpf_lsm_file_permission+0x9/0x10 [ 282.424898][ T9952] ? security_file_permission+0x7f/0xa0 [ 282.430426][ T9952] ? rw_verify_area+0x1d2/0x6b0 [ 282.435263][ T9952] vfs_writev+0x37c/0xbb0 [ 282.439589][ T9952] ? __pfx_lock_acquire+0x10/0x10 [ 282.444595][ T9952] ? __pfx_vfs_writev+0x10/0x10 [ 282.449430][ T9952] ? vfs_write+0x7c4/0xc90 [ 282.453833][ T9952] ? __fget_files+0x29/0x470 [ 282.458412][ T9952] do_writev+0x1b1/0x350 [ 282.462637][ T9952] ? __pfx_do_writev+0x10/0x10 [ 282.467382][ T9952] ? do_syscall_64+0x100/0x230 [ 282.472131][ T9952] ? do_syscall_64+0xb6/0x230 [ 282.476792][ T9952] do_syscall_64+0xf3/0x230 [ 282.481275][ T9952] ? clear_bhb_loop+0x35/0x90 [ 282.485934][ T9952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.491810][ T9952] RIP: 0033:0x7fe852575b59 [ 282.496204][ T9952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.515803][ T9952] RSP: 002b:00007fe853411048 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 282.524196][ T9952] RAX: ffffffffffffffda RBX: 00007fe852705f60 RCX: 00007fe852575b59 [ 282.532148][ T9952] RDX: 1000000000000041 RSI: 00000000200002c0 RDI: 0000000000000006 [ 282.540097][ T9952] RBP: 00007fe8534110a0 R08: 0000000000000000 R09: 0000000000000000 [ 282.548049][ T9952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.555998][ T9952] R13: 000000000000000b R14: 00007fe852705f60 R15: 00007fe85282fa78 [ 282.563960][ T9952] [ 282.567068][ C1] vkms_vblank_simulate: vblank timer overrun [ 282.910602][ T5099] usb 5-1: USB disconnect, device number 41 [ 283.001040][ T9966] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 283.044940][ T29] audit: type=1326 audit(1721585288.041:2434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9970 comm="syz.2.1073" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe852575b59 code=0x0 [ 283.066753][ C1] vkms_vblank_simulate: vblank timer overrun [ 283.279408][ T9983] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 283.644103][ T9997] netlink: 'syz.0.1080': attribute type 29 has an invalid length. [ 283.656602][ T5099] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 283.866917][ T5099] usb 5-1: Using ep0 maxpacket: 8 [ 283.911862][ T5099] usb 5-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice=54.48 [ 283.926440][ T5099] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.961721][ T5099] usb 5-1: config 0 descriptor?? [ 284.451849][T10022] netlink: 165 bytes leftover after parsing attributes in process `syz.3.1087'. [ 284.675454][T10026] random: crng reseeded on system resumption [ 284.698852][T10025] netlink: 'syz.0.1088': attribute type 7 has an invalid length. [ 284.735419][T10025] netlink: 'syz.0.1088': attribute type 6 has an invalid length. [ 285.659739][T10045] ======================================================= [ 285.659739][T10045] WARNING: The mand mount option has been deprecated and [ 285.659739][T10045] and is ignored by this kernel. Remove the mand [ 285.659739][T10045] option from the mount to silence this warning. [ 285.659739][T10045] ======================================================= [ 285.694685][ C1] vkms_vblank_simulate: vblank timer overrun [ 285.753471][T10049] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1097'. [ 286.082568][T10055] use of bytesused == 0 is deprecated and will be removed in the future, [ 286.092376][T10055] use the actual size instead. [ 286.221227][ T5151] usb 5-1: USB disconnect, device number 42 [ 286.286995][T10051] netlink: 'syz.0.1098': attribute type 4 has an invalid length. [ 286.378446][T10075] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1104'. [ 286.693123][T10084] FAULT_INJECTION: forcing a failure. [ 286.693123][T10084] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 286.780515][T10084] CPU: 0 PID: 10084 Comm: syz.2.1106 Not tainted 6.10.0-syzkaller-11185-g2c9b3512402e #0 [ 286.790359][T10084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 286.800427][T10084] Call Trace: [ 286.803721][T10084] [ 286.806667][T10084] dump_stack_lvl+0x241/0x360 [ 286.811378][T10084] ? __pfx_dump_stack_lvl+0x10/0x10 [ 286.816606][T10084] ? __pfx__printk+0x10/0x10 [ 286.821221][T10084] ? __pfx_lock_release+0x10/0x10 [ 286.826273][T10084] should_fail_ex+0x3b0/0x4e0 [ 286.830972][T10084] fpu__restore_sig+0x1b3/0x11b0 [ 286.835943][T10084] ? __pfx_fpu__restore_sig+0x10/0x10 [ 286.841356][T10084] ? __might_fault+0xc6/0x120 [ 286.846059][T10084] restore_sigcontext+0x675/0x7d0 [ 286.851097][T10084] ? __pfx_restore_sigcontext+0x10/0x10 [ 286.856732][T10084] ? __pfx___set_current_blocked+0x10/0x10 [ 286.862524][T10084] ? __task_pid_nr_ns+0x28/0x450 [ 286.867454][T10084] __do_sys_rt_sigreturn+0x17f/0x270 [ 286.872734][T10084] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 286.878530][T10084] ? do_syscall_64+0x100/0x230 [ 286.883275][T10084] ? do_syscall_64+0xb6/0x230 [ 286.887937][T10084] do_syscall_64+0xf3/0x230 [ 286.892432][T10084] ? clear_bhb_loop+0x35/0x90 [ 286.897102][T10084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.902978][T10084] RIP: 0033:0x7fe852575b57 [ 286.907372][T10084] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 286.926960][T10084] RSP: 002b:00007fe853411048 EFLAGS: 00000246 [ 286.933013][T10084] RAX: 0000000000000000 RBX: 00007fe852705f60 RCX: 00007fe852575b59 [ 286.940970][T10084] RDX: 0000000000002020 RSI: 00000000200029c0 RDI: 0000000000000003 [ 286.948934][T10084] RBP: 00007fe8534110a0 R08: 0000000000000000 R09: 0000000000000000 [ 286.956892][T10084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.964845][T10084] R13: 000000000000000b R14: 00007fe852705f60 R15: 00007fe85282fa78 [ 286.972920][T10084] [ 287.027465][T10096] netlink: 'syz.0.1110': attribute type 10 has an invalid length. [ 287.101234][T10096] batman_adv: batadv0: Adding interface: team0 [ 287.136983][ T5152] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 287.164686][T10096] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.209297][T10096] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 287.310666][T10099] netlink: 'syz.0.1110': attribute type 10 has an invalid length. [ 287.322093][T10099] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1110'. [ 287.336332][ T5152] usb 2-1: Using ep0 maxpacket: 32 [ 287.344951][ T5152] usb 2-1: New USB device found, idVendor=2040, idProduct=c602, bcdDevice= 1.8e [ 287.350825][T10099] team0: entered promiscuous mode [ 287.366557][ T5152] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.376563][T10099] team_slave_0: entered promiscuous mode [ 287.388911][ T5152] usb 2-1: config 0 descriptor?? [ 287.398345][T10099] team_slave_1: entered promiscuous mode [ 287.415246][ T5152] usb 2-1: dvb_usb_v2: found a 'HCW 126xxx' in warm state [ 287.417440][T10099] 8021q: adding VLAN 0 to HW filter on device team0 [ 287.443366][T10099] batman_adv: batadv0: Interface activated: team0 [ 287.451435][ T5152] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 287.453206][T10099] batman_adv: batadv0: Interface deactivated: team0 [ 287.474477][T10099] batman_adv: batadv0: Removing interface: team0 [ 287.474502][ T5152] dvbdev: DVB: registering new adapter (HCW 126xxx) [ 287.489816][T10099] bridge0: port 3(team0) entered blocking state [ 287.496590][ T5152] usb 2-1: media controller created [ 287.502925][T10099] bridge0: port 3(team0) entered disabled state [ 287.523762][T10099] team0: entered allmulticast mode [ 287.528453][ T5152] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 287.538044][T10099] team_slave_0: entered allmulticast mode [ 287.562823][T10099] team_slave_1: entered allmulticast mode [ 287.572910][ T5152] usb 2-1: selecting invalid altsetting 1 [ 287.575802][T10099] bridge0: port 3(team0) entered blocking state [ 287.585360][T10099] bridge0: port 3(team0) entered forwarding state [ 287.586299][ T5152] set interface failed [ 287.595687][ T5152] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 287.646314][ T5152] error writing reg: 0xff, val: 0x00 [ 287.674235][T10106] bridge_slave_0: default FDB implementation only supports local addresses [ 287.759085][ T5152] dvb_usb_mxl111sf 2-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 287.788993][ T5152] usb 2-1: USB disconnect, device number 25 [ 287.916374][ T29] audit: type=1326 audit(1721585292.911:2435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10117 comm="syz.3.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7c8575b59 code=0x7ffc0000 [ 287.975347][T10119] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.1118'. [ 287.977969][ T29] audit: type=1326 audit(1721585292.911:2436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10117 comm="syz.3.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7c8575b59 code=0x7ffc0000 [ 288.014572][ T29] audit: type=1326 audit(1721585292.951:2437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10117 comm="syz.3.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7fc7c8575b59 code=0x7ffc0000 [ 288.115813][T10121] bridge0: port 3(gretap0) entered blocking state [ 288.126045][ T29] audit: type=1326 audit(1721585292.951:2438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10117 comm="syz.3.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7c8575b59 code=0x7ffc0000 [ 288.156066][T10121] bridge0: port 3(gretap0) entered disabled state [ 288.164301][T10121] gretap0: entered allmulticast mode [ 288.175649][ T29] audit: type=1326 audit(1721585292.951:2439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10117 comm="syz.3.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7c8575b59 code=0x7ffc0000 [ 288.214874][T10121] gretap0: entered promiscuous mode [ 288.240501][T10121] bridge0: port 3(gretap0) entered blocking state [ 288.247503][T10121] bridge0: port 3(gretap0) entered forwarding state [ 288.403558][ T1118] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.431781][T10126] gretap0: left allmulticast mode [ 288.438504][T10126] gretap0: left promiscuous mode [ 288.445378][T10126] bridge0: port 3(gretap0) entered disabled state [ 288.562112][ T1118] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.694046][ T1118] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.773077][T10144] netdevsim netdevsim3 €: renamed from netdevsim0 (while UP) [ 288.904009][ T1118] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.064805][ T5113] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 289.077417][ T5113] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 289.085381][ T5113] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 289.094219][ T5113] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 289.102052][ T5113] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 289.112090][ T5113] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 289.498679][ T1118] bridge_slave_1: left allmulticast mode [ 289.510032][ T1118] bridge_slave_1: left promiscuous mode [ 289.536716][ T1118] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.595483][ T1118] bridge_slave_0: left allmulticast mode [ 289.627061][ T1118] bridge_slave_0: left promiscuous mode [ 289.645098][ T1118] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.706470][ T29] audit: type=1326 audit(1721585294.701:2440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10175 comm="syz.0.1136" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faf2f375b59 code=0x0 [ 290.319395][ T1118] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 290.326405][ T5152] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 290.336162][ T5154] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 290.364881][ T1118] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 290.392667][ T1118] bond0 (unregistering): Released all slaves [ 290.523339][ T5152] usb 5-1: config 0 interface 0 has no altsetting 0 [ 290.547239][ T5154] usb 1-1: Using ep0 maxpacket: 16 [ 290.579984][T10197] team_slave_0: Device is already in use. [ 290.587167][ T5154] usb 1-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 290.596370][ T5154] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.600052][ T5152] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 290.604518][ T5154] usb 1-1: Product: syz [ 290.620089][ T5154] usb 1-1: Manufacturer: syz [ 290.624704][ T5154] usb 1-1: SerialNumber: syz [ 290.647375][ T5154] usb 1-1: config 0 descriptor?? [ 290.666346][ T5152] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.710599][ C0] eth0: bad gso: type: 1, size: 1408 [ 290.729763][ T5152] usb 5-1: config 0 descriptor?? [ 291.081420][ T5154] usb 1-1: MIDIStreaming interface descriptor not found [ 291.188915][ T5110] Bluetooth: hci3: command tx timeout [ 291.368312][T10183] program syz.0.1138 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 291.392937][T10186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.402586][T10183] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 291.420593][T10158] chnl_net:caif_netlink_parms(): no params data found [ 291.425448][T10186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.659454][ T1118] hsr_slave_0: left promiscuous mode [ 291.670419][ T1118] hsr_slave_1: left promiscuous mode [ 291.678821][ T1118] batman_adv: batadv0: Removing interface: team0 [ 291.700468][ T1118] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 291.715545][ T1118] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 291.738754][ T1118] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 291.803346][ T1118] veth1_macvtap: left promiscuous mode [ 291.829491][ T1118] veth0_macvtap: left promiscuous mode [ 291.850265][ T1118] veth1_vlan: left promiscuous mode [ 291.870064][ T1118] veth0_vlan: left promiscuous mode [ 291.892262][ T5152] video4linux radio32: keene_cmd_set failed (-71) [ 291.908385][ T5153] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 291.912004][ T5152] radio-keene 5-1:0.0: V4L2 device registered as radio32 [ 291.939029][ T5152] usb 5-1: USB disconnect, device number 43 [ 292.129020][ T5153] usb 4-1: Using ep0 maxpacket: 32 [ 292.155497][ T5153] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.184685][ T5153] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.206954][ T5153] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 292.216182][ T5153] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 292.230408][ T5153] usb 4-1: Product: syz [ 292.249814][ T5153] usb 4-1: Manufacturer: syz [ 292.281803][ T5153] hub 4-1:4.0: USB hub found [ 292.497493][ T5153] hub 4-1:4.0: config failed, can't read hub descriptor (err -22) [ 292.591701][T10233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.602234][ T5153] usb 4-1: USB disconnect, device number 33 [ 292.622267][T10233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.693355][T10233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.721821][T10233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.801282][ T5113] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 292.814582][ T5113] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 292.823410][ T5113] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 292.834411][ T5113] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 292.851799][ T5113] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 292.860991][ T5113] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 292.866387][ T9] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 292.977974][ T5152] usb 1-1: USB disconnect, device number 30 [ 293.111838][ T9] usb 5-1: device descriptor read/64, error -71 [ 293.270644][ T5110] Bluetooth: hci3: command tx timeout [ 293.495449][ T1118] team0 (unregistering): Port device team_slave_1 removed [ 293.526334][ T5153] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 293.533590][ T1118] team0 (unregistering): Port device team_slave_0 removed [ 293.746307][ T5153] usb 4-1: Using ep0 maxpacket: 8 [ 293.754100][ T5153] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 293.773955][ T5153] usb 4-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 293.784494][ T5153] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.805580][ T5153] usb 4-1: config 0 descriptor?? [ 293.818984][ T5153] usb 4-1: Found UVC 0.00 device (05ac:8501) [ 293.825900][ T5153] usb 4-1: No valid video chain found. [ 294.004763][ T29] audit: type=1326 audit(1721585299.001:2441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10257 comm="syz.0.1155" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faf2f375b59 code=0x0 [ 294.033032][ T5151] usb 4-1: USB disconnect, device number 34 [ 294.159678][T10261] input: syz1 as /devices/virtual/input/input16 [ 294.222938][T10158] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.245556][T10158] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.255740][T10158] bridge_slave_0: entered allmulticast mode [ 294.270578][T10158] bridge_slave_0: entered promiscuous mode [ 294.314861][T10158] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.336100][T10158] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.357816][T10158] bridge_slave_1: entered allmulticast mode [ 294.373720][T10158] bridge_slave_1: entered promiscuous mode [ 294.446469][T10158] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 294.467327][T10158] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 294.588899][T10158] team0: Port device team_slave_0 added [ 294.623705][T10158] team0: Port device team_slave_1 added [ 294.706494][ T9] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 294.720717][T10279] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 294.727266][T10279] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 294.771075][T10158] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 294.778318][T10279] vhci_hcd vhci_hcd.0: Device attached [ 294.794618][T10158] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.822225][T10283] vhci_hcd: connection closed [ 294.830191][ T9350] vhci_hcd: stop threads [ 294.852285][ T9350] vhci_hcd: release socket [ 294.867920][T10158] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 294.887656][ T9350] vhci_hcd: disconnect device [ 294.894526][T10158] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 294.909712][T10158] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.942464][T10158] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 294.953242][ T5110] Bluetooth: hci2: command tx timeout [ 294.966841][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 294.984063][ T9] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 294.991174][T10238] chnl_net:caif_netlink_parms(): no params data found [ 294.999800][ T9] usb 5-1: can't read configurations, error -71 [ 295.090224][ T1118] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.177227][T10158] hsr_slave_0: entered promiscuous mode [ 295.186038][T10158] hsr_slave_1: entered promiscuous mode [ 295.226163][ T1118] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.347295][ T5110] Bluetooth: hci3: command tx timeout [ 295.404329][ T1118] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.486710][T10238] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.495228][T10238] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.522191][T10238] bridge_slave_0: entered allmulticast mode [ 295.532187][T10238] bridge_slave_0: entered promiscuous mode [ 295.593869][T10307] loop0: detected capacity change from 0 to 524288000 [ 295.658111][ T1118] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.704208][ T29] audit: type=1326 audit(1721585300.701:2442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10309 comm="syz.0.1167" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faf2f375b59 code=0x0 [ 295.766813][T10238] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.796614][T10238] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.803863][T10238] bridge_slave_1: entered allmulticast mode [ 295.828742][T10315] input: syz1 as /devices/virtual/input/input17 [ 295.853930][T10238] bridge_slave_1: entered promiscuous mode [ 296.022016][T10238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 296.054880][T10238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 296.156543][T10328] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 296.163103][T10328] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 296.179373][T10328] vhci_hcd vhci_hcd.0: Device attached [ 296.201817][T10331] vhci_hcd: connection closed [ 296.204931][ T1042] vhci_hcd: stop threads [ 296.231339][ T1042] vhci_hcd: release socket [ 296.238916][ T1042] vhci_hcd: disconnect device [ 296.265242][T10238] team0: Port device team_slave_0 added [ 296.278711][T10238] team0: Port device team_slave_1 added [ 296.420970][T10238] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 296.436039][T10238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.474410][T10238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 296.501991][ T1118] bridge_slave_1: left allmulticast mode [ 296.514079][ T1118] bridge_slave_1: left promiscuous mode [ 296.521172][ T1118] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.544978][ T1118] bridge_slave_0: left allmulticast mode [ 296.557421][ T1118] bridge_slave_0: left promiscuous mode [ 296.563166][ T1118] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.031924][ T5110] Bluetooth: hci2: command tx timeout [ 297.113991][T10358] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1176'. [ 297.402516][ T5110] Bluetooth: hci4: unexpected event 0x09 length: 17 > 3 [ 297.425569][T10367] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1178'. [ 297.436784][ T5110] Bluetooth: hci3: command tx timeout [ 297.551658][ T1118] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 297.576099][ T1118] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 297.603340][ T1118] bond0 (unregistering): Released all slaves [ 297.610444][ T29] audit: type=1326 audit(1721585302.601:2443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10363 comm="syz.4.1178" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f235d375b59 code=0x0 [ 297.674305][T10238] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 297.694815][T10238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.746382][T10238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 297.853860][T10369] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.861941][T10369] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.987149][ T29] audit: type=1326 audit(1721585302.991:2444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10372 comm="syz.0.1180" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faf2f375b59 code=0x0 [ 298.132434][T10374] input: syz1 as /devices/virtual/input/input18 [ 298.143550][T10238] hsr_slave_0: entered promiscuous mode [ 298.171727][T10238] hsr_slave_1: entered promiscuous mode [ 298.188142][T10238] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 298.198052][T10238] Cannot create hsr debugfs directory [ 298.591570][ T1118] hsr_slave_0: left promiscuous mode [ 298.612681][ T1118] hsr_slave_1: left promiscuous mode [ 298.625804][ T1118] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 298.626032][T10388] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 298.643337][ T1118] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 298.663135][ T1118] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 298.683029][ T1118] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 298.743810][ T1118] veth1_macvtap: left promiscuous mode [ 298.762341][ T1118] veth0_macvtap: left promiscuous mode [ 298.778405][ T1118] veth1_vlan: left promiscuous mode [ 298.786020][ T1118] veth0_vlan: left promiscuous mode [ 299.076428][ T5103] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 299.116794][ T5110] Bluetooth: hci2: command tx timeout [ 299.266508][ T5103] usb 4-1: Using ep0 maxpacket: 16 [ 299.285965][ T5103] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 40, changing to 9 [ 299.303578][ T5103] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 299.314094][ T5103] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 299.333910][ T5103] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 299.344602][ T5103] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.364278][ T5103] usb 4-1: Product: â   [ 299.375617][ T5103] usb 4-1: Manufacturer: 䩘怛爌쇃絹­鈯㈘圥ê¦à ˜è©§ê„’ꥷ䲊㡶㣔▊馡Ѩ≋敤헃ಎ闯뾌溺ë—äµ é€ë‘‡ê‰ï˜…ä Šá¹Ê…蹳犖⨸숽 [ 299.399576][ T5103] usb 4-1: SerialNumber: 䀊 [ 299.426456][ T5110] Bluetooth: hci4: command tx timeout [ 299.457333][ T1118] team0 (unregistering): Port device team_slave_1 removed [ 299.485022][ T29] audit: type=1326 audit(1721585304.481:2445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10414 comm="syz.4.1193" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f235d375b59 code=0x0 [ 299.521010][ T1118] team0 (unregistering): Port device team_slave_0 removed [ 299.618432][ T5103] cdc_ncm 4-1:1.0: bind() failure [ 299.643554][ T5103] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 299.655321][ T5103] cdc_ncm 4-1:1.1: bind() failure [ 299.685939][ T5103] usb 4-1: USB disconnect, device number 35 [ 300.054420][T10419] gretap0: entered promiscuous mode [ 300.085808][T10419] netlink: 'syz.4.1195': attribute type 2 has an invalid length. [ 300.095281][T10419] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1195'. [ 300.126163][ T29] audit: type=1326 audit(1721585305.121:2446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10423 comm="syz.0.1196" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faf2f375b59 code=0x0 [ 300.362556][T10158] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 300.392682][T10158] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 300.464912][T10158] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 300.482700][T10158] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 300.576718][ T5151] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 300.798976][ T5151] usb 5-1: Using ep0 maxpacket: 8 [ 300.833637][ T5151] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 300.849443][ T5151] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 300.861221][T10158] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.868926][ T5151] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 300.900978][ T5151] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 300.930748][ T5151] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 300.932624][T10158] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.972114][ T5151] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 301.013923][ T5151] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.021900][ T4516] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.029108][ T4516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.036328][ T5157] usb 4-1: new low-speed USB device number 36 using dummy_hcd [ 301.091051][ T4516] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.098271][ T4516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.165829][T10238] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 301.196930][ T5110] Bluetooth: hci2: command tx timeout [ 301.222318][T10238] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 301.265743][ T5151] usb 5-1: GET_CAPABILITIES returned 0 [ 301.271569][T10238] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 301.279732][ T5151] usbtmc 5-1:16.0: can't read capabilities [ 301.336687][T10238] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 301.506184][ T9] usb 5-1: USB disconnect, device number 48 [ 301.508792][T10158] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.712688][T10238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.735232][T10158] veth0_vlan: entered promiscuous mode [ 301.760981][T10158] veth1_vlan: entered promiscuous mode [ 301.809120][T10238] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.850178][ T5152] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.857409][ T5152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.871443][ T5152] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.878620][ T5152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.893147][T10158] veth0_macvtap: entered promiscuous mode [ 301.917295][T10158] veth1_macvtap: entered promiscuous mode [ 301.978111][T10158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.989112][T10158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.999505][T10158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.011034][T10158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.021086][T10158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.032220][T10158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.044063][T10158] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 302.090633][T10158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.109514][T10158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.136408][T10158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.156835][T10158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.172069][T10158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.182589][T10158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.201088][T10158] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 302.219302][T10158] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.228686][T10158] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.262133][T10158] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.283248][T10158] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.495468][T10238] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 302.619585][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.659993][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.771351][T10238] veth0_vlan: entered promiscuous mode [ 302.878544][ T9350] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.916395][ T9350] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.931315][T10238] veth1_vlan: entered promiscuous mode [ 303.078717][T10238] veth0_macvtap: entered promiscuous mode [ 303.124844][T10238] veth1_macvtap: entered promiscuous mode [ 303.190993][T10238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.218622][T10238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.228769][T10238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.254330][T10238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.282008][T10238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.307773][T10238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.331112][T10238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.343081][T10238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.367452][T10238] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 303.414853][T10238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.455084][T10238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.477537][T10238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.509194][T10238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.524651][T10238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.546640][T10238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.565204][T10238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.594279][T10238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.623540][T10238] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 303.707583][T10238] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.732506][T10238] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.748640][T10238] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.783886][T10238] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.936675][T10511] Invalid logical block size (44041) [ 304.094690][ T9350] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.127845][ T9350] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.238027][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.264834][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.302322][T10523] capability: warning: `syz.0.1218' uses deprecated v2 capabilities in a way that may be insecure [ 304.754726][T10540] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1148'. [ 304.773222][T10540] hsr0: entered promiscuous mode [ 304.926365][ T9] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 305.150866][ T5157] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 305.171692][ T9] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 305.206819][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.246486][ T9] usb 5-1: config 0 descriptor?? [ 305.282698][ T9] cp210x 5-1:0.0: cp210x converter detected [ 305.388682][ T5157] usb 1-1: config 1 has an invalid interface descriptor of length 3, skipping [ 305.426278][ T5157] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 305.458620][ T5157] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 305.490656][ T5157] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.508978][T10568] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1228'. [ 305.535110][ T5157] usb 1-1: Product: syz [ 305.545221][ T5157] usb 1-1: Manufacturer: syz [ 305.560370][ T5157] usb 1-1: SerialNumber: syz [ 305.591388][ T5157] usb 1-1: selecting invalid altsetting 1 [ 305.842684][ T5157] cdc_ncm 1-1:1.0: bind() failure [ 305.884473][ T5157] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 305.908027][T10582] loop0: detected capacity change from 0 to 7 [ 305.925265][ T5157] cdc_ncm 1-1:1.1: bind() failure [ 305.937697][T10582] Dev loop0: unable to read RDB block 7 [ 305.946741][T10582] loop0: unable to read partition table [ 305.952605][T10582] loop0: partition table beyond EOD, truncated [ 305.966574][T10582] loop_reread_partitions: partition scan of loop0 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 305.966574][T10582] ) failed (rc=-5) [ 305.996722][ T5157] usb 1-1: USB disconnect, device number 31 [ 306.487676][T10536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.504667][T10536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.662589][ T9] usb 5-1: cp210x converter now attached to ttyUSB0 [ 306.892386][ C0] eth0: bad gso: type: 1, size: 1408 [ 307.278073][ T29] audit: type=1326 audit(1721585312.271:2447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10624 comm="syz.1.1243" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffaa0f75b59 code=0x0 [ 307.419596][T10627] xt_l2tp: invalid flags combination: 0 [ 307.882222][T10654] netlink: 199356 bytes leftover after parsing attributes in process `syz.0.1249'. [ 307.906651][T10654] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1249'. [ 308.237693][ T5157] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 308.331368][ T5156] usb 5-1: USB disconnect, device number 49 [ 308.355831][ T5156] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 308.393707][ T5156] cp210x 5-1:0.0: device disconnected [ 308.440475][ T5157] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 308.476741][ T5157] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 308.515528][ T5157] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 308.546767][ T5157] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 308.586634][ T5157] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 308.614843][ T5157] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.647523][ T5157] usb 1-1: config 0 descriptor?? [ 309.072674][ T5157] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 309.089247][ T5157] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 309.115498][ T5157] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 309.138928][ T5157] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 309.397915][T10654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.435754][T10654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.475912][T10654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.491423][T10654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.626233][ T5154] usb 1-1: USB disconnect, device number 32 [ 309.722986][ T5156] IPVS: starting estimator thread 0... [ 309.758205][T10710] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available [ 309.866659][T10713] IPVS: using max 21 ests per chain, 50400 per kthread [ 310.186421][ T5156] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 310.378791][ T5156] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 310.389716][ T5156] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.402127][ T5156] usb 5-1: config 0 descriptor?? [ 310.546307][ T5157] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 310.615875][ T5156] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 310.630296][ T5156] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 310.650625][ T5156] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 310.662599][ T5156] [drm] Initialized udl on minor 2 [ 310.759530][ T5157] usb 1-1: New USB device found, idVendor=05ac, idProduct=0223, bcdDevice=e1.fc [ 310.769741][ T5157] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.796594][ T5157] usb 1-1: config 0 descriptor?? [ 310.809458][ T5157] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input22 [ 310.843527][ T5156] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 310.861137][ T5156] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 310.885951][ T5103] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 310.898500][ T5156] usb 5-1: USB disconnect, device number 50 [ 310.905276][ T5103] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 310.926471][ T5153] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 311.077792][T10730] IPv6: NLM_F_REPLACE set, but no existing node found! [ 311.114644][ T4539] bcm5974 1-1:0.0: could not read from device [ 311.124907][ T4539] bcm5974 1-1:0.0: could not read from device [ 311.135168][ T5153] usb 3-1: config 1 has an invalid interface descriptor of length 3, skipping [ 311.152376][ T4539] bcm5974 1-1:0.0: could not read from device [ 311.159938][ T5157] usb 1-1: USB disconnect, device number 33 [ 311.172836][ T5153] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 311.191699][ T5153] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 311.251531][ T5153] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.282882][ T5153] usb 3-1: Product: syz [ 311.295449][ T5153] usb 3-1: Manufacturer: syz [ 311.306118][ T5153] usb 3-1: SerialNumber: syz [ 311.317941][ T5153] usb 3-1: selecting invalid altsetting 1 [ 311.558361][ T5153] cdc_ncm 3-1:1.0: bind() failure [ 311.589978][ T5113] Bluetooth: hci1: command tx timeout [ 311.608205][ T5153] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 311.615037][ T5153] cdc_ncm 3-1:1.1: bind() failure [ 311.686527][ T5153] usb 3-1: USB disconnect, device number 27 [ 311.927063][T10746] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 311.933584][T10746] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 311.948437][T10746] vhci_hcd vhci_hcd.0: Device attached [ 311.984905][T10748] vhci_hcd: connection closed [ 311.997405][ T1118] vhci_hcd: stop threads [ 312.020082][ T1118] vhci_hcd: release socket [ 312.033694][ T1118] vhci_hcd: disconnect device [ 312.681643][T10771] fuse: Bad value for 'fd' [ 313.059828][T10786] netlink: 'syz.0.1290': attribute type 5 has an invalid length. [ 313.111629][T10790] trusted_key: encrypted_key: insufficient parameters specified [ 313.114008][T10791] trusted_key: encrypted_key: insufficient parameters specified [ 313.486802][T10806] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 313.493362][T10806] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 313.554309][T10806] vhci_hcd vhci_hcd.0: Device attached [ 313.568763][T10811] vhci_hcd: connection closed [ 313.575565][ T9350] vhci_hcd: stop threads [ 313.588293][ T9350] vhci_hcd: release socket [ 313.593029][ T9350] vhci_hcd: disconnect device [ 313.633939][T10817] FAULT_INJECTION: forcing a failure. [ 313.633939][T10817] name failslab, interval 1, probability 0, space 0, times 0 [ 313.677573][T10817] CPU: 0 PID: 10817 Comm: syz.2.1300 Not tainted 6.10.0-syzkaller-11185-g2c9b3512402e #0 [ 313.687423][T10817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 313.697503][T10817] Call Trace: [ 313.700797][T10817] [ 313.703735][T10817] dump_stack_lvl+0x241/0x360 [ 313.708441][T10817] ? __pfx_dump_stack_lvl+0x10/0x10 [ 313.713663][T10817] ? __pfx__printk+0x10/0x10 [ 313.718276][T10817] ? __pfx___might_resched+0x10/0x10 [ 313.723581][T10817] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.729665][T10817] ? arch_stack_walk+0x16d/0x1b0 [ 313.734616][T10817] should_fail_ex+0x3b0/0x4e0 [ 313.739318][T10817] should_failslab+0x9/0x20 [ 313.743848][T10817] __kmalloc_cache_node_noprof+0x74/0x300 [ 313.749589][T10817] ? __get_vm_area_node+0x113/0x270 [ 313.754903][T10817] __get_vm_area_node+0x113/0x270 [ 313.759955][T10817] __vmalloc_node_range_noprof+0x3bc/0x1460 [ 313.765869][T10817] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 313.771435][T10817] ? kasan_save_track+0x51/0x80 [ 313.776298][T10817] ? kasan_save_track+0x3f/0x80 [ 313.781164][T10817] ? __kasan_kmalloc+0x98/0xb0 [ 313.785948][T10817] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 313.791544][T10817] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 313.797905][T10817] ? __asan_memset+0x23/0x50 [ 313.802525][T10817] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 313.808088][T10817] __vmalloc_noprof+0x79/0x90 [ 313.812787][T10817] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 313.818355][T10817] bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 313.823747][T10817] ? bpf_prog_alloc+0x28/0x1b0 [ 313.828532][T10817] bpf_prog_alloc+0x3a/0x1b0 [ 313.833148][T10817] bpf_prog_create_from_user+0xa4/0x3e0 [ 313.838721][T10817] ? __pfx_seccomp_check_filter+0x10/0x10 [ 313.844463][T10817] do_seccomp+0x90d/0xf90 [ 313.848815][T10817] ? __pfx_do_seccomp+0x10/0x10 [ 313.853685][T10817] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 313.859680][T10817] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 313.866030][T10817] ? do_syscall_64+0x100/0x230 [ 313.870813][T10817] ? do_syscall_64+0xb6/0x230 [ 313.875511][T10817] do_syscall_64+0xf3/0x230 [ 313.880123][T10817] ? clear_bhb_loop+0x35/0x90 [ 313.884818][T10817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.890739][T10817] RIP: 0033:0x7fa4b9d75b59 [ 313.895167][T10817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.914786][T10817] RSP: 002b:00007fa4babc8048 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 313.923220][T10817] RAX: ffffffffffffffda RBX: 00007fa4b9f05f60 RCX: 00007fa4b9d75b59 [ 313.931210][T10817] RDX: 00000000200002c0 RSI: 0000000000000000 RDI: 0000000000000001 [ 313.939194][T10817] RBP: 00007fa4babc80a0 R08: 0000000000000000 R09: 0000000000000000 [ 313.947188][T10817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.955173][T10817] R13: 000000000000000b R14: 00007fa4b9f05f60 R15: 00007fa4ba02fa78 [ 313.963172][T10817] [ 313.966215][ C0] vkms_vblank_simulate: vblank timer overrun [ 313.984580][ T5153] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 314.015382][T10817] syz.2.1300: vmalloc error: size 8192, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 314.039399][T10817] CPU: 0 PID: 10817 Comm: syz.2.1300 Not tainted 6.10.0-syzkaller-11185-g2c9b3512402e #0 [ 314.049233][T10817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 314.059300][T10817] Call Trace: [ 314.062586][T10817] [ 314.065527][T10817] dump_stack_lvl+0x241/0x360 [ 314.070233][T10817] ? __pfx_dump_stack_lvl+0x10/0x10 [ 314.075455][T10817] ? __pfx__printk+0x10/0x10 [ 314.080065][T10817] ? __rcu_read_unlock+0xa1/0x110 [ 314.085088][T10817] warn_alloc+0x278/0x410 [ 314.089421][T10817] ? __pfx_warn_alloc+0x10/0x10 [ 314.094265][T10817] ? __get_vm_area_node+0x113/0x270 [ 314.099465][T10817] ? __get_vm_area_node+0x261/0x270 [ 314.104664][T10817] __vmalloc_node_range_noprof+0x3e0/0x1460 [ 314.110559][T10817] ? kasan_save_track+0x51/0x80 [ 314.115406][T10817] ? kasan_save_track+0x3f/0x80 [ 314.120265][T10817] ? __kasan_kmalloc+0x98/0xb0 [ 314.125021][T10817] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 314.130665][T10817] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 314.136996][T10817] ? __asan_memset+0x23/0x50 [ 314.141585][T10817] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 314.147128][T10817] __vmalloc_noprof+0x79/0x90 [ 314.151800][T10817] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 314.157339][T10817] bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 314.162704][T10817] ? bpf_prog_alloc+0x28/0x1b0 [ 314.167463][T10817] bpf_prog_alloc+0x3a/0x1b0 [ 314.172049][T10817] bpf_prog_create_from_user+0xa4/0x3e0 [ 314.177598][T10817] ? __pfx_seccomp_check_filter+0x10/0x10 [ 314.183311][T10817] do_seccomp+0x90d/0xf90 [ 314.187635][T10817] ? __pfx_do_seccomp+0x10/0x10 [ 314.192476][T10817] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 314.198452][T10817] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 314.204769][T10817] ? do_syscall_64+0x100/0x230 [ 314.209527][T10817] ? do_syscall_64+0xb6/0x230 [ 314.214198][T10817] do_syscall_64+0xf3/0x230 [ 314.218695][T10817] ? clear_bhb_loop+0x35/0x90 [ 314.223368][T10817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.229264][T10817] RIP: 0033:0x7fa4b9d75b59 [ 314.233684][T10817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 314.253284][T10817] RSP: 002b:00007fa4babc8048 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 314.262125][T10817] RAX: ffffffffffffffda RBX: 00007fa4b9f05f60 RCX: 00007fa4b9d75b59 [ 314.270087][T10817] RDX: 00000000200002c0 RSI: 0000000000000000 RDI: 0000000000000001 [ 314.278053][T10817] RBP: 00007fa4babc80a0 R08: 0000000000000000 R09: 0000000000000000 [ 314.286015][T10817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 314.294064][T10817] R13: 000000000000000b R14: 00007fa4b9f05f60 R15: 00007fa4ba02fa78 [ 314.302057][T10817] [ 314.305154][ C0] vkms_vblank_simulate: vblank timer overrun [ 314.340931][T10817] Mem-Info: [ 314.353470][T10817] active_anon:7747 inactive_anon:0 isolated_anon:0 [ 314.353470][T10817] active_file:15503 inactive_file:38281 isolated_file:0 [ 314.353470][T10817] unevictable:768 dirty:146 writeback:0 [ 314.353470][T10817] slab_reclaimable:9244 slab_unreclaimable:100318 [ 314.353470][T10817] mapped:15181 shmem:1290 pagetables:877 [ 314.353470][T10817] sec_pagetables:0 bounce:0 [ 314.353470][T10817] kernel_misc_reclaimable:0 [ 314.353470][T10817] free:1383874 free_pcp:520 free_cma:0 [ 314.413243][T10817] Node 0 active_anon:31388kB inactive_anon:0kB active_file:61688kB inactive_file:153040kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:60460kB dirty:584kB writeback:0kB shmem:3624kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10776kB pagetables:3508kB sec_pagetables:0kB all_unreclaimable? no [ 314.445428][ C0] vkms_vblank_simulate: vblank timer overrun [ 314.477981][ T5153] usb 4-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 314.490969][ T5153] usb 4-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 314.516340][ T5153] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 314.543182][ T5153] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.546347][ T5113] Bluetooth: hci2: command tx timeout [ 314.570837][T10817] Node 1 active_anon:0kB inactive_anon:0kB active_file:324kB inactive_file:84kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:264kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 314.601318][ C0] vkms_vblank_simulate: vblank timer overrun [ 314.671592][T10817] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 314.718079][T10817] lowmem_reserve[]: 0 2569 2569 0 0 [ 314.723373][T10817] Node 0 DMA32 free:1563920kB boost:0kB min:35096kB low:43868kB high:52640kB reserved_highatomic:0KB active_anon:35876kB inactive_anon:0kB active_file:61688kB inactive_file:152948kB unevictable:1536kB writepending:584kB present:3129332kB managed:2657740kB mlocked:0kB bounce:0kB free_pcp:2744kB local_pcp:1376kB free_cma:0kB [ 314.773691][T10817] lowmem_reserve[]: 0 0 0 0 0 [ 314.779376][T10817] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:0kB present:1048576kB managed:104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 314.823836][T10817] lowmem_reserve[]: 0 0 0 0 0 [ 314.833936][T10817] Node 1 Normal free:3950596kB boost:0kB min:54808kB low:68508kB high:82208kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:324kB inactive_file:84kB unevictable:1536kB writepending:0kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:1112kB local_pcp:1112kB free_cma:0kB [ 314.910995][T10817] lowmem_reserve[]: 0 0 0 0 0 [ 314.916118][T10817] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 314.947473][T10817] Node 0 DMA32: 143*4kB (UM) 14*8kB (UME) 323*16kB (UME) 445*32kB (UME) 296*64kB (UME) 89*128kB (UME) 72*256kB (UME) 30*512kB (UM) 9*1024kB (UM) 10*2048kB (UME) 354*4096kB (UM) = 1563900kB [ 315.003317][T10817] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 315.027148][T10831] loop0: detected capacity change from 0 to 7 [ 315.035468][T10817] Node 1 Normal: 1*4kB (M) 16*8kB (UM) 10*16kB (UM) 13*32kB (U) 5*64kB (U) 4*128kB (UM) 4*256kB (UM) 3*512kB (UM) 0*1024kB 3*2048kB (UM) 962*4096kB (M) = 3950596kB [ 315.057261][T10831] Dev loop0: unable to read RDB block 7 [ 315.066428][T10831] loop0: unable to read partition table [ 315.082965][T10817] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 315.094189][T10831] loop0: partition table beyond EOD, truncated [ 315.107512][T10831] loop_reread_partitions: partition scan of loop0 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 315.107512][T10831] ) failed (rc=-5) [ 315.131099][T10817] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 315.153582][T10817] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 315.195736][T10817] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 315.223810][T10817] 55077 total pagecache pages [ 315.246453][T10817] 0 pages in swap cache [ 315.262269][T10817] Free swap = 124392kB [ 315.272887][T10817] Total swap = 124996kB [ 315.286455][T10817] 2097051 pages RAM [ 315.290433][T10817] 0 pages HighMem/MovableOnly [ 315.295243][T10817] 401470 pages reserved [ 315.300234][T10817] 0 pages cma reserved [ 315.774704][T10855] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 315.781353][T10855] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 315.829467][T10855] vhci_hcd vhci_hcd.0: Device attached [ 315.875599][T10857] vhci_hcd: connection closed [ 315.876008][ T1042] vhci_hcd: stop threads [ 315.893227][ T1042] vhci_hcd: release socket [ 315.904753][ T1042] vhci_hcd: disconnect device [ 316.499521][ T5153] usb 4-1: string descriptor 0 read error: -71 [ 316.509628][ T5153] usb 4-1: USB disconnect, device number 37 [ 316.780237][T10889] x_tables: duplicate underflow at hook 2 [ 316.808588][T10889] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1322'. [ 316.818566][T10890] fuse: Bad value for 'fd' [ 316.881600][T10892] Cannot find add_set index 0 as target [ 316.913896][T10892] Cannot find add_set index 0 as target [ 317.025061][T10890] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1320'. [ 317.156626][ T5153] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 317.347087][ T5113] Bluetooth: hci2: command tx timeout [ 317.390765][ T5153] usb 4-1: config 0 has an invalid descriptor of length 104, skipping remainder of the config [ 317.390796][ T5153] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 317.390831][ T5153] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 317.390855][ T5153] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.393271][ T5153] usb 4-1: config 0 descriptor?? [ 317.439218][ T1240] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.439295][ T1240] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.460619][T10911] sctp: [Deprecated]: syz.2.1329 (pid 10911) Use of int in max_burst socket option deprecated. [ 317.460619][T10911] Use struct sctp_assoc_value instead [ 317.706146][T10913] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 317.712712][T10913] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 317.730649][T10913] vhci_hcd vhci_hcd.0: Device attached [ 317.770487][T10917] vhci_hcd: connection closed [ 317.771246][ T9342] vhci_hcd: stop threads [ 317.793011][ T9342] vhci_hcd: release socket [ 317.810842][ T9342] vhci_hcd: disconnect device [ 318.532373][T10945] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1343'. [ 319.169249][T10971] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 319.316586][ T5103] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 319.508899][ T5103] usb 1-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 319.535931][ T5103] usb 1-1: New USB device found, idVendor=22b8, idProduct=4b48, bcdDevice=3f.f0 [ 319.553653][ T5103] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.568036][ T5103] usb 1-1: Product: syz [ 319.572761][ T5103] usb 1-1: Manufacturer: syz [ 319.587814][ T5103] usb 1-1: SerialNumber: syz [ 319.795253][ T5153] usb 4-1: USB disconnect, device number 38 [ 319.813735][ T5103] qmi_wwan 1-1:1.0: skipping garbage [ 319.830264][ T5103] qmi_wwan 1-1:1.0: probe with driver qmi_wwan failed with error -22 [ 319.846177][ T5103] usb 1-1: USB disconnect, device number 34 [ 320.031152][T10996] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 320.086372][ T4516] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 320.124127][T10998] netlink: 'syz.4.1362': attribute type 4 has an invalid length. [ 320.139711][T10998] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1362'. [ 320.280192][ T4516] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 320.301198][ T4516] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 320.313412][ T4516] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 320.331051][ T4516] usb 2-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice=a7.c0 [ 320.354414][ T4516] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.394876][ T4516] usb 2-1: Product: syz [ 320.404676][ T4516] usb 2-1: Manufacturer: syz [ 320.412600][ T4516] usb 2-1: SerialNumber: syz [ 320.432500][ T4516] usb 2-1: config 0 descriptor?? [ 320.477272][ T5156] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 320.680943][ T5156] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 320.702993][ T5156] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.733798][ T5156] usb 3-1: Product: syz [ 320.739140][ T5156] usb 3-1: Manufacturer: syz [ 320.744991][ T5156] usb 3-1: SerialNumber: syz [ 320.757720][ T5156] usb 3-1: config 0 descriptor?? [ 320.767041][ T5156] ch341 3-1:0.0: ch341-uart converter detected [ 320.876500][ T4516] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 321.066440][ T4516] usb 5-1: Using ep0 maxpacket: 16 [ 321.114926][ T4516] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 321.152283][ T4516] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 321.185753][ T4516] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.245256][ T4516] usb 5-1: config 0 descriptor?? [ 321.263623][ T5156] ch341-uart ttyUSB0: failed to read break control: -71 [ 321.302576][ T5156] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 321.364918][ T5156] usb 3-1: USB disconnect, device number 28 [ 321.398052][ T5156] ch341 3-1:0.0: device disconnected [ 321.501563][T11014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.535472][T11014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.700478][ T29] audit: type=1326 audit(1721585326.701:2448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11027 comm="syz.3.1372" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc7c8575b59 code=0x0 [ 321.880753][T11014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.901845][T11014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.946147][ T4516] hid-generic 0003:0158:0100.0006: unknown main item tag 0x1 [ 321.973995][ T4516] hid-generic 0003:0158:0100.0006: unexpected long global item [ 322.001882][ T4516] hid-generic 0003:0158:0100.0006: probe with driver hid-generic failed with error -22 [ 322.175602][ T5154] usb 5-1: USB disconnect, device number 51 [ 322.572928][T11065] netlink: 'syz.3.1382': attribute type 32 has an invalid length. [ 322.707550][T11071] fuse: Unknown parameter '0x000000000000000300000000000000000000' [ 323.021757][ T4516] usb 2-1: USB disconnect, device number 26 [ 323.250605][ T5154] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 323.423319][ T5156] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 323.486325][ T5154] usb 4-1: Using ep0 maxpacket: 16 [ 323.516161][T10852] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.518012][ T5154] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.586280][ T5154] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 323.596386][ T4516] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 323.628492][ T5154] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 323.640262][ T5156] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 323.662422][ T5156] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 9.99 [ 323.674213][ T5156] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.683482][ T5154] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.699236][ T5156] usb 3-1: config 0 descriptor?? [ 323.729333][T10852] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.744576][ T5154] usb 4-1: config 0 descriptor?? [ 323.852516][ T4516] usb 2-1: New USB device found, idVendor=05ac, idProduct=0223, bcdDevice=e1.fc [ 323.877230][ T4516] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.951699][T10852] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.969577][ T4516] usb 2-1: config 0 descriptor?? [ 324.001185][ T5156] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 324.023404][ T4516] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input24 [ 324.046827][ T5156] usb 3-1: USB disconnect, device number 29 [ 324.177447][T10852] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.281049][ T5101] udevd[5101]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 324.616418][T10852] bridge_slave_1: left allmulticast mode [ 324.632349][T10852] bridge_slave_1: left promiscuous mode [ 324.642140][T10852] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.709296][T10852] bridge_slave_0: left allmulticast mode [ 324.715296][T10852] bridge_slave_0: left promiscuous mode [ 324.733398][T10852] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.801943][ T5110] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 324.820309][ T5110] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 324.835391][ T5110] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 324.875238][ T5110] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 324.891362][ T5110] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 324.900773][ T5110] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 325.012133][ T4539] bcm5974 2-1:0.0: could not read from device [ 325.040677][ T4516] usb 2-1: USB disconnect, device number 27 [ 325.043872][ T4539] bcm5974 2-1:0.0: could not read from device [ 325.984204][ T5154] usbhid 4-1:0.0: can't add hid device: -71 [ 325.993095][ T5154] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 326.022023][ T5154] usb 4-1: USB disconnect, device number 39 [ 326.224093][T10852] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 326.234953][T10852] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 326.239018][T10852] bond0 (unregistering): Released all slaves [ 326.275875][T11130] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1406'. [ 326.476896][ T5153] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 326.702102][ T5153] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 115, changing to 4 [ 326.726279][ T5153] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 25944, setting to 1023 [ 326.756528][ T5153] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 326.765612][ T5153] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.776847][ T5152] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 326.805571][ T5153] usb 1-1: config 0 descriptor?? [ 326.946597][ T5113] Bluetooth: hci0: command tx timeout [ 327.013192][ T5152] usb 3-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 327.016835][T11180] fuse: Bad value for 'fd' [ 327.048501][ T5152] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.092416][ T5152] usb 3-1: config 0 descriptor?? [ 327.133115][ T5152] ums-realtek 3-1:0.0: USB Mass Storage device detected [ 327.259927][T10852] hsr_slave_0: left promiscuous mode [ 327.296592][T10852] hsr_slave_1: left promiscuous mode [ 327.312349][T10852] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 327.327549][T10852] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 327.353474][T10852] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 327.368109][T10852] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 327.410837][T10852] veth1_macvtap: left promiscuous mode [ 327.428691][T10852] veth0_macvtap: left promiscuous mode [ 327.434503][T10852] veth1_vlan: left promiscuous mode [ 327.447264][T10852] veth0_vlan: left promiscuous mode [ 327.636093][ T5153] ath6kl: Failed to submit usb control message: -71 [ 327.668996][ T5153] ath6kl: unable to send the bmi data to the device: -71 [ 327.687856][ T5153] ath6kl: Unable to send get target info: -71 [ 327.705614][ T5153] ath6kl: Failed to init ath6kl core: -71 [ 327.743214][ T5153] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 327.790319][ T5153] usb 1-1: USB disconnect, device number 35 [ 328.335919][T10852] team0 (unregistering): Port device team_slave_1 removed [ 328.396033][T10852] team0 (unregistering): Port device team_slave_0 removed [ 328.872297][T11190] netlink: 798 bytes leftover after parsing attributes in process `syz.1.1417'. [ 328.944058][T11196] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1418'. [ 329.026333][T11106] chnl_net:caif_netlink_parms(): no params data found [ 329.026521][ T5113] Bluetooth: hci0: command tx timeout [ 329.536321][ T5154] usb 3-1: USB disconnect, device number 30 [ 329.655778][T11106] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.682196][T11106] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.709883][T11106] bridge_slave_0: entered allmulticast mode [ 329.730893][T11106] bridge_slave_0: entered promiscuous mode [ 329.760353][T11106] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.788860][T11106] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.834605][T11106] bridge_slave_1: entered allmulticast mode [ 329.851294][T11106] bridge_slave_1: entered promiscuous mode [ 330.030577][T11106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.069507][T11256] x_tables: duplicate underflow at hook 2 [ 330.085549][T11254] À: renamed from syztnl2 [ 330.153897][T11106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 330.234402][T11256] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1429'. [ 330.298564][T11106] team0: Port device team_slave_0 added [ 330.324363][T11106] team0: Port device team_slave_1 added [ 330.340864][T11259] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 330.466553][ T4516] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 330.490965][T11106] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 330.504914][T11106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.622153][T11106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 330.646626][ T5152] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 330.679402][ T4516] usb 2-1: config 0 has an invalid descriptor of length 104, skipping remainder of the config [ 330.701181][ T4516] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 330.718121][T11106] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 330.725107][T11106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.789835][ T4516] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 330.850537][ T4516] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.860595][T11106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 330.875757][ T5152] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 330.928945][ T4516] usb 2-1: config 0 descriptor?? [ 330.934058][ T5152] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 330.984807][ T5152] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 331.014385][ T5152] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.045342][T11259] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 331.063937][ T5113] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 331.070740][ T5113] Bluetooth: Wrong link type (-22) [ 331.076470][ T5113] Bluetooth: hci1: link tx timeout [ 331.082942][ T5113] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 331.106529][ T5110] Bluetooth: hci0: command tx timeout [ 331.378019][T11106] hsr_slave_0: entered promiscuous mode [ 331.422108][T11106] hsr_slave_1: entered promiscuous mode [ 331.452402][T11106] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 331.464747][T11106] Cannot create hsr debugfs directory [ 332.057148][T11295] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 332.543813][T11307] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1442'. [ 332.563609][T11307] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1442'. [ 332.812657][T11106] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 332.881965][T11106] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 332.925304][T11106] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 332.932885][ T4516] usb 2-1: USB disconnect, device number 28 [ 332.994283][T11106] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 333.107413][ T5110] Bluetooth: hci1: command 0x0406 tx timeout [ 333.187474][ T5113] Bluetooth: hci0: command tx timeout [ 333.370046][ T5157] usb 3-1: USB disconnect, device number 31 [ 333.422092][T11106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 333.467202][ T4516] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 333.550914][T11106] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.579107][ T5152] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.586335][ T5152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.662665][ T5103] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.669876][ T5103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.692386][ T4516] usb 2-1: config 0 has an invalid interface number: 18 but max is 0 [ 333.706495][ T4516] usb 2-1: config 0 has no interface number 0 [ 333.733773][ T4516] usb 2-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.766368][ T4516] usb 2-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 333.796056][ T4516] usb 2-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 333.806586][ T4516] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 333.814598][ T4516] usb 2-1: Manufacturer: syz [ 333.869609][ T4516] usb 2-1: config 0 descriptor?? [ 333.932267][T11106] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.081180][T11106] veth0_vlan: entered promiscuous mode [ 334.104638][T11106] veth1_vlan: entered promiscuous mode [ 334.303466][ T9342] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.339443][ T4516] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.18/0003:054C:03D5.0007/input/input25 [ 334.354410][T11106] veth0_macvtap: entered promiscuous mode [ 334.394883][T11106] veth1_macvtap: entered promiscuous mode [ 334.441341][ T4516] sony 0003:054C:03D5.0007: input,hidraw0: USB HID v0.00 Joystick [syz] on usb-dummy_hcd.1-1/input18 [ 334.504179][ T9342] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.662569][ T9342] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.711087][T11106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.731821][T11106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.753431][T11106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.772603][T11106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.782566][T11106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.793351][T11106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.805095][T11106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.815759][T11106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.860496][T11106] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 334.902205][T11106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.928908][T11106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.947812][T11106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.981546][T11106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.005521][T11106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.032132][ T5110] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 335.046695][ T5110] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 335.056316][ T5110] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 335.066645][ T5110] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 335.077265][ T5110] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 335.085786][ T5110] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 335.115538][T11106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.159364][T11106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.176442][T11106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.188851][T11106] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.244678][ T9342] netdevsim netdevsim3 € (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.269304][T11106] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.280095][T11106] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.306656][T11106] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.320305][T11106] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.476738][ T5152] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 335.698157][ T5152] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 335.714001][ T5152] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.737191][ T5152] usb 1-1: config 0 descriptor?? [ 335.815001][ T9349] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.857829][ T9349] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.879103][ T9342] bridge_slave_1: left allmulticast mode [ 335.893414][ T9342] bridge_slave_1: left promiscuous mode [ 335.900406][ T9342] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.924024][ T9342] bridge_slave_0: left allmulticast mode [ 335.933221][ T9342] bridge_slave_0: left promiscuous mode [ 335.941973][ T9342] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.478012][ T5154] usb 2-1: USB disconnect, device number 29 [ 336.719967][ T9342] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 336.737188][ T9342] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 336.757921][ T9342] bond0 (unregistering): Released all slaves [ 336.884670][ T5152] [drm:udl_init] *ERROR* Selecting channel failed [ 336.932186][ T5152] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 336.966297][ T5152] [drm] Initialized udl on minor 2 [ 336.994124][ T5152] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 337.011431][T11416] sctp: [Deprecated]: syz.2.1460 (pid 11416) Use of struct sctp_assoc_value in delayed_ack socket option. [ 337.011431][T11416] Use struct sctp_sack_info instead [ 337.036536][ T5152] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 337.045875][ T5103] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 337.078869][ T5152] usb 1-1: USB disconnect, device number 36 [ 337.088789][ T5103] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 337.100254][ T5103] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 337.160577][T10850] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.176868][T10850] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.186770][ T5113] Bluetooth: hci4: command tx timeout [ 337.322249][T11374] chnl_net:caif_netlink_parms(): no params data found [ 337.381177][ T9342] hsr_slave_0: left promiscuous mode [ 337.409664][ T9342] hsr_slave_1: left promiscuous mode [ 337.425165][ T9342] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 337.443252][ T9342] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 337.463230][ T9342] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 337.486532][ T9342] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 337.519563][ T5103] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 337.598792][ T9342] veth1_macvtap: left promiscuous mode [ 337.616639][ T9342] veth0_macvtap: left promiscuous mode [ 337.626728][ T9342] veth1_vlan: left promiscuous mode [ 337.635603][ T9342] veth0_vlan: left promiscuous mode [ 337.743658][ T5103] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 337.762867][ T5103] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 337.785196][ T5103] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 337.813689][ T5103] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 337.824652][ T5103] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.839404][ T5103] usb 3-1: Product: syz [ 337.843741][ T5103] usb 3-1: Manufacturer: syz [ 337.863590][ T5103] usb 3-1: SerialNumber: syz [ 337.902274][ T5103] cdc_ncm 3-1:1.0: skipping garbage [ 337.909251][ T5103] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 337.923153][ T5103] cdc_ncm 3-1:1.0: bind() failure [ 339.034368][ T9342] team0 (unregistering): Port device team_slave_1 removed [ 339.103216][ T9342] team0 (unregistering): Port device team_slave_0 removed [ 339.159116][ T9] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 339.274109][ T5113] Bluetooth: hci4: command tx timeout [ 339.356666][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 339.379891][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.391018][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.401354][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 339.415337][ T9] usb 5-1: New USB device found, idVendor=1430, idProduct=474c, bcdDevice= 0.00 [ 339.424439][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.435045][ T9] usb 5-1: config 0 descriptor?? [ 339.585875][T11509] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1478'. [ 339.845507][T11425] netlink: 766 bytes leftover after parsing attributes in process `syz.2.1461'. [ 339.865005][T11460] netlink: 'syz.2.1461': attribute type 12 has an invalid length. [ 339.884889][T11460] netlink: 'syz.2.1461': attribute type 29 has an invalid length. [ 339.894238][ T9] sony 0003:1430:474C.0008: unknown main item tag 0x0 [ 339.906607][T11460] netlink: 'syz.2.1461': attribute type 2 has an invalid length. [ 339.916341][ T9] sony 0003:1430:474C.0008: unknown main item tag 0x2 [ 339.938587][ T9] sony 0003:1430:474C.0008: unbalanced collection at end of report description [ 339.960248][T11460] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1461'. [ 339.970595][ T9] sony 0003:1430:474C.0008: parse failed [ 339.976538][ T9] sony 0003:1430:474C.0008: probe with driver sony failed with error -22 [ 340.325635][T11374] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.353353][T11374] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.396637][ T5103] usb 5-1: USB disconnect, device number 52 [ 340.406788][T11374] bridge_slave_0: entered allmulticast mode [ 340.437170][T11374] bridge_slave_0: entered promiscuous mode [ 340.462569][T11374] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.488317][T11374] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.502209][T11374] bridge_slave_1: entered allmulticast mode [ 340.516444][T11374] bridge_slave_1: entered promiscuous mode [ 340.661838][T11374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.690004][T11374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 340.761149][T11374] team0: Port device team_slave_0 added [ 340.801017][T11374] team0: Port device team_slave_1 added [ 340.904521][T11374] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 340.924058][T11374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 340.991180][T11374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.045178][T11374] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.056435][ T5151] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 341.071358][T11374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.125306][T11374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.128229][ T5157] usb 3-1: USB disconnect, device number 32 [ 341.229801][ T29] audit: type=1326 audit(1721585346.231:2449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11550 comm="syz.4.1488" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1208f75b59 code=0x0 [ 341.257085][ T5151] usb 2-1: too many configurations: 212, using maximum allowed: 8 [ 341.310298][ T5151] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 341.346362][ T5113] Bluetooth: hci4: command tx timeout [ 341.366338][ T5151] usb 2-1: can't read configurations, error -61 [ 341.566547][ T5151] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 341.582954][T11374] hsr_slave_0: entered promiscuous mode [ 341.623707][T11374] hsr_slave_1: entered promiscuous mode [ 341.634239][T11374] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 341.642545][T11374] Cannot create hsr debugfs directory [ 341.656987][ T5156] usb 5-1: new low-speed USB device number 53 using dummy_hcd [ 341.779977][ T5151] usb 2-1: too many configurations: 212, using maximum allowed: 8 [ 341.805685][ T5151] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 341.848238][ T5156] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 341.862236][ T5151] usb 2-1: can't read configurations, error -61 [ 341.863931][ T5156] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.901095][ T5156] usb 5-1: config 0 descriptor?? [ 341.929669][ T5151] usb usb2-port1: attempt power cycle [ 342.077722][ T4516] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 342.274433][ T4516] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 342.295913][ T4516] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 342.357747][ T5151] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 342.357766][ T4516] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 342.388711][T11583] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1494'. [ 342.428922][ T4516] usb 1-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice=a7.c0 [ 342.442247][ T4516] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.467671][ T5151] usb 2-1: too many configurations: 212, using maximum allowed: 8 [ 342.473780][ T4516] usb 1-1: Product: syz [ 342.490952][ T4516] usb 1-1: Manufacturer: syz [ 342.502952][ T4516] usb 1-1: SerialNumber: syz [ 342.531015][ T5151] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 342.535222][ T4516] usb 1-1: config 0 descriptor?? [ 342.569742][ T5151] usb 2-1: can't read configurations, error -61 [ 342.575307][ T4516] qmi_wwan 1-1:0.0: probe with driver qmi_wwan failed with error -22 [ 342.748030][ T5103] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 342.767409][ T5151] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 342.847889][ T5151] usb 2-1: too many configurations: 212, using maximum allowed: 8 [ 342.879902][ T5151] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 342.916503][ T5151] usb 2-1: can't read configurations, error -61 [ 342.948427][ T5151] usb usb2-port1: unable to enumerate USB device [ 342.988985][ T5103] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 343.012742][T11374] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 343.039067][ T5103] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.068052][T11374] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 343.082402][ T5103] usb 3-1: config 0 descriptor?? [ 343.098936][T11374] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 343.113174][ T5103] cp210x 3-1:0.0: cp210x converter detected [ 343.132209][T11374] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 343.400943][T11374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.437754][ T5113] Bluetooth: hci4: command tx timeout [ 343.443067][T11374] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.485708][ T4516] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.492893][ T4516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.537529][T11583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.568106][T11583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.582960][ T5099] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.590135][ T5099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.621521][ T5103] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -121 [ 343.870117][T11586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.893717][T11374] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 343.918338][T11586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.149612][ T5103] cp210x 3-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 344.149645][ T5103] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 344.155353][ T5103] usb 3-1: cp210x converter now attached to ttyUSB0 [ 344.161237][ T5103] usb 3-1: USB disconnect, device number 33 [ 344.176661][ T5103] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 344.177249][ T5103] cp210x 3-1:0.0: device disconnected [ 344.187822][T11374] veth0_vlan: entered promiscuous mode [ 344.222335][T11596] team_slave_0: entered promiscuous mode [ 344.270975][T11596] team_slave_1: entered promiscuous mode [ 344.405608][T11596] vlan1: entered promiscuous mode [ 344.406507][T11596] team0: entered promiscuous mode [ 344.424745][T11596] vlan1: entered allmulticast mode [ 344.424765][T11596] team0: entered allmulticast mode [ 344.424779][T11596] team_slave_0: entered allmulticast mode [ 344.424795][T11596] team_slave_1: entered allmulticast mode [ 344.468686][T11596] team0: left allmulticast mode [ 344.468710][T11596] team_slave_0: left allmulticast mode [ 344.468727][T11596] team_slave_1: left allmulticast mode [ 344.468750][T11596] team0: left promiscuous mode [ 344.473777][T11596] team_slave_0: left promiscuous mode [ 344.474920][T11596] team_slave_1: left promiscuous mode [ 344.497431][ T5156] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 344.497463][ T5156] asix 5-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 344.497632][ T5156] asix 5-1:0.0: probe with driver asix failed with error -71 [ 344.503586][ T5156] usb 5-1: USB disconnect, device number 53 [ 344.655864][ T5099] usb 1-1: USB disconnect, device number 37 [ 344.751695][T11374] veth1_vlan: entered promiscuous mode [ 344.868505][T11374] veth0_macvtap: entered promiscuous mode [ 344.883708][T11374] veth1_macvtap: entered promiscuous mode [ 344.939335][T11374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.939362][T11374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.939375][T11374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.939389][T11374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.939400][T11374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.939414][T11374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.939426][T11374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.939441][T11374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.940957][T11374] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 344.944156][T11374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.944177][T11374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.944188][T11374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.944203][T11374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.944215][T11374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.944229][T11374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.944241][T11374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.944254][T11374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.964944][T11374] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.000839][T11374] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.000875][T11374] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.000902][T11374] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.000928][T11374] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.067749][T11626] bridge2: entered promiscuous mode [ 345.067775][T11626] bridge2: entered allmulticast mode [ 345.513888][ T9342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.513911][ T9342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.627150][ T9342] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.627176][ T9342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.017348][ T5099] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 346.198683][ T5099] usb 1-1: Using ep0 maxpacket: 8 [ 346.206752][ T5099] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 346.206783][ T5099] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 346.206809][ T5099] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 346.206834][ T5099] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 346.206874][ T5099] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 346.206898][ T5099] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.370858][ T5110] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 346.373215][ T5110] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 346.374234][ T5110] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 346.375505][ T5110] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 346.377152][ T5110] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 346.377465][ T5110] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 346.439119][ T5099] usb 1-1: GET_CAPABILITIES returned 0 [ 346.439155][ T5099] usbtmc 1-1:16.0: can't read capabilities [ 346.573843][ T1042] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.629374][T11669] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1510'. [ 346.733579][ T1042] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.831058][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 346.831097][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 346.831119][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 346.831139][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 346.831159][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 346.831179][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 346.831200][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 346.831374][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 346.831397][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 346.831416][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 346.831436][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 346.831455][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 346.831488][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 346.831507][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 346.831690][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 346.831724][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 346.884197][ T1042] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.090871][ T1042] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.259913][T11680] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1512'. [ 347.260491][T11680] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.260879][T11680] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.261443][T11680] bridge0: entered allmulticast mode [ 347.763383][ T1042] bridge_slave_1: left allmulticast mode [ 347.771747][ T1042] bridge_slave_1: left promiscuous mode [ 347.781229][ T1042] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.802927][ T1042] bridge_slave_0: left allmulticast mode [ 347.808919][ T1042] bridge_slave_0: left promiscuous mode [ 347.815829][ T1042] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.846724][ T5099] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 347.867449][ T4516] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 348.036500][ T5099] usb 5-1: Using ep0 maxpacket: 32 [ 348.059599][ T5099] usb 5-1: New USB device found, idVendor=1d6f, idProduct=0010, bcdDevice= a.a7 [ 348.073983][ T5153] usb 1-1: USB disconnect, device number 38 [ 348.077987][ T4516] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 348.097688][ T5099] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.107666][ T4516] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.120613][ T5099] usb 5-1: Product: syz [ 348.126123][ T5099] usb 5-1: Manufacturer: syz [ 348.138160][ T5099] usb 5-1: SerialNumber: syz [ 348.143970][ T4516] usb 4-1: config 0 descriptor?? [ 348.161033][ T5099] usb 5-1: config 0 descriptor?? [ 348.170171][ T5099] usb 5-1: bad CDC descriptors [ 348.172930][ T5099] cp210x 5-1:0.0: cp210x converter detected [ 348.449774][ T1042] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 348.457225][T11703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.479088][ T5113] Bluetooth: hci3: command tx timeout [ 348.497906][T11703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.503279][ T1042] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 348.536600][ T1042] bond0 (unregistering): Released all slaves [ 348.590867][ T4516] [drm:udl_init] *ERROR* Selecting channel failed [ 348.615035][T11667] chnl_net:caif_netlink_parms(): no params data found [ 348.641778][ T4516] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 348.655825][ T4516] [drm] Initialized udl on minor 2 [ 348.664821][ T4516] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 348.675457][ T4516] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 348.682719][T11686] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1515'. [ 348.685023][ T5103] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 348.721881][ T4516] usb 4-1: USB disconnect, device number 40 [ 348.740729][ T5103] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 348.857156][ T5099] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 348.864675][ T5099] cp210x 5-1:0.0: querying part number failed [ 348.867548][T11715] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1524'. [ 348.893299][ T5099] usb 5-1: cp210x converter now attached to ttyUSB0 [ 348.941662][ T5099] usb 5-1: USB disconnect, device number 54 [ 348.969634][ T5099] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 349.000268][ T5099] cp210x 5-1:0.0: device disconnected [ 349.446071][ C0] eth0: bad gso: type: 1, size: 1408 [ 349.614339][T11667] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.622375][T11667] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.651937][T11667] bridge_slave_0: entered allmulticast mode [ 349.692673][T11667] bridge_slave_0: entered promiscuous mode [ 349.717990][T11667] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.741322][T11667] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.756878][T11667] bridge_slave_1: entered allmulticast mode [ 349.773611][T11667] bridge_slave_1: entered promiscuous mode [ 349.861451][ T1042] hsr_slave_0: left promiscuous mode [ 349.883054][ T1042] hsr_slave_1: left promiscuous mode [ 349.913433][ T1042] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 349.931662][ T1042] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 349.972437][ T1042] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 349.987913][ T1042] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 350.069062][ T1042] veth1_macvtap: left promiscuous mode [ 350.087324][ T1042] veth0_macvtap: left promiscuous mode [ 350.102101][ T1042] veth1_vlan: left promiscuous mode [ 350.113244][ T1042] veth0_vlan: left promiscuous mode [ 350.217057][ T4516] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 350.436788][ T4516] usb 5-1: Using ep0 maxpacket: 8 [ 350.450599][ T4516] usb 5-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 350.476730][ T4516] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.498575][ T4516] usb 5-1: Product: syz [ 350.514378][ T4516] usb 5-1: Manufacturer: syz [ 350.524257][ T4516] usb 5-1: SerialNumber: syz [ 350.552728][ T5113] Bluetooth: hci3: command tx timeout [ 350.568859][ T4516] usb 5-1: config 0 descriptor?? [ 350.583521][ T4516] option 5-1:0.0: GSM modem (1-port) converter detected [ 351.203307][ T29] audit: type=1326 audit(1721585356.201:2450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11774 comm="syz.1.1536" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffaa0f75b59 code=0x0 [ 351.258024][ T1042] team0 (unregistering): Port device team_slave_1 removed [ 351.353718][ T1042] team0 (unregistering): Port device team_slave_0 removed [ 352.092765][T11667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.132175][T11768] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1534'. [ 352.182255][T11667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.266417][ T5151] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 352.381771][T11667] team0: Port device team_slave_0 added [ 352.412173][T11667] team0: Port device team_slave_1 added [ 352.458140][ T5151] usb 2-1: device descriptor read/64, error -71 [ 352.501077][T11667] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.516485][T11667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.546352][T11667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.574877][T11667] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.582482][T11667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.618383][ T5153] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 352.628847][T11667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.639367][ T5113] Bluetooth: hci3: command tx timeout [ 352.796598][ T5151] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 352.825673][ T9] usb 5-1: USB disconnect, device number 55 [ 352.830335][T11667] hsr_slave_0: entered promiscuous mode [ 352.849756][ T9] option 5-1:0.0: device disconnected [ 352.872097][T11667] hsr_slave_1: entered promiscuous mode [ 352.895411][ T5153] usb 4-1: config 0 interface 0 has no altsetting 0 [ 352.909613][ T5153] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 352.944975][ T5153] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.966339][ T5151] usb 2-1: device descriptor read/64, error -71 [ 352.987513][ T5153] usb 4-1: config 0 descriptor?? [ 353.047923][ T1042] IPVS: stop unused estimator thread 0... [ 353.106891][ T5151] usb usb2-port1: attempt power cycle [ 353.434593][T11812] skb len=8071 headroom=168 headlen=136 tailroom=0 [ 353.434593][T11812] mac=(168,0) mac_len=0 net=(168,20) trans=188 [ 353.434593][T11812] shinfo(txflags=0 nr_frags=1 gso(size=0 type=0 segs=0)) [ 353.434593][T11812] csum(0x20000eb start=235 offset=512 ip_summed=3 complete_sw=0 valid=0 level=0) [ 353.434593][T11812] hash(0x0 sw=0 l4=0) proto=0x0800 pkttype=0 iif=0 [ 353.434593][T11812] priority=0x0 mark=0x0 alloc_cpu=0 vlan_all=0x0 [ 353.434593][T11812] encapsulation=1 inner(proto=0x0008, mac=192, net=192, trans=244) [ 353.483586][T11812] dev name=veth0_to_team feat=0x000061164fdd19e9 [ 353.490041][T11812] skb linear: 00000000: 45 02 1f 87 d5 49 00 00 0f 2f 31 c6 ac 14 14 1f [ 353.498616][T11812] skb linear: 00000010: e0 00 e5 02 00 00 08 00 bd 0f 1f 6f 01 02 0c 52 [ 353.507229][T11812] skb linear: 00000020: 0f 06 4c f9 1f e4 fd fe 4b 44 94 30 eb b5 29 97 [ 353.515792][T11812] skb linear: 00000030: e3 6e 03 9b 1c 59 88 25 f8 01 00 a3 c0 63 76 c3 [ 353.524370][T11812] skb linear: 00000040: 30 41 76 a1 67 d5 02 61 a6 7a 34 a0 9e 5f e2 bb [ 353.532934][T11812] skb linear: 00000050: 07 b7 10 57 f9 18 a5 4b f8 00 00 00 42 7e 00 00 [ 353.541516][T11812] skb linear: 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 353.550090][T11812] skb linear: 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 353.558667][T11812] skb linear: 00000080: 00 00 00 00 00 00 00 00 [ 353.565121][T11812] skb frag: 00000000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 353.573700][T11812] skb frag: 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 353.582294][T11812] skb frag: 00000020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 353.590873][T11812] skb frag: 00000030: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 353.599442][T11812] skb frag: 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 353.608016][T11812] skb frag: 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 353.616586][T11812] skb frag: 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 353.625126][T11812] skb frag: 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 353.633714][T11812] skb frag: 00000080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 353.642286][T11812] skb frag: 00000090: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 353.650856][T11812] skb frag: 000000a0: 00 00 00 00 00 00 00 00 [ 353.657386][T11812] ------------[ cut here ]------------ [ 353.662852][T11812] offset+2 (581) > skb_headlen() (136) [ 353.668848][T11812] WARNING: CPU: 0 PID: 11812 at net/core/dev.c:3336 skb_checksum_help+0x68f/0x730 [ 353.678109][T11812] Modules linked in: [ 353.682022][T11812] CPU: 0 PID: 11812 Comm: syz.4.1546 Not tainted 6.10.0-syzkaller-11185-g2c9b3512402e #0 [ 353.691917][T11812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 353.694720][ T5110] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 353.701995][T11812] RIP: 0010:skb_checksum_help+0x68f/0x730 [ 353.702040][T11812] Code: 48 8b 4c 24 10 0f b6 04 01 84 c0 0f 85 89 00 00 00 48 8b 44 24 08 2b 18 48 c7 c7 40 c1 c6 8c 4c 89 f6 89 da e8 22 8f f7 f7 90 <0f> 0b 90 90 bb ea ff ff ff e9 cf fc ff ff 48 8b 0c 24 80 e1 07 80 [ 353.702057][T11812] RSP: 0018:ffffc900090e6d28 EFLAGS: 00010246 [ 353.702078][T11812] RAX: 2caf50d425957b00 RBX: 0000000000000088 RCX: 0000000000040000 [ 353.702094][T11812] RDX: ffffc9000c05a000 RSI: 000000000003ffff RDI: 0000000000040000 [ 353.702108][T11812] RBP: dffffc0000000000 R08: ffffffff815555a2 R09: fffffbfff1c39f60 [ 353.702124][T11812] R10: dffffc0000000000 R11: fffffbfff1c39f60 R12: 1ffff1100445454e [ 353.702140][T11812] R13: 0000000000000243 R14: 0000000000000245 R15: ffff8880222a2a00 [ 353.702154][T11812] FS: 00007f1209e2b6c0(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 353.714502][ T5110] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 353.714961][T11812] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 353.756871][ T5110] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 353.764597][T11812] CR2: 000000002000f000 CR3: 0000000071db0000 CR4: 00000000003506f0 [ 353.764621][T11812] DR0: 000000000000008d DR1: 0000000000000000 DR2: 0000000000000000 [ 353.764635][T11812] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 353.764649][T11812] Call Trace: [ 353.764659][T11812] [ 353.781200][ T5110] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 353.789573][T11812] ? __warn+0x163/0x4e0 [ 353.789602][T11812] ? skb_checksum_help+0x68f/0x730 [ 353.789629][T11812] ? report_bug+0x2b3/0x500 [ 353.789653][T11812] ? skb_checksum_help+0x68f/0x730 [ 353.789680][T11812] ? handle_bug+0x3e/0x70 [ 353.789698][T11812] ? exc_invalid_op+0x1a/0x50 [ 353.789717][T11812] ? asm_exc_invalid_op+0x1a/0x20 [ 353.789745][T11812] ? __warn_printk+0x292/0x360 [ 353.797565][ T5110] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 353.803253][T11812] ? skb_checksum_help+0x68f/0x730 [ 353.803283][T11812] ? skb_checksum_help+0x68e/0x730 [ 353.811302][ T5110] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 353.818208][T11812] ip_do_fragment+0x20d/0x1b30 [ 353.818254][T11812] ? __pfx_ip_finish_output2+0x10/0x10 [ 353.818282][T11812] ? __pfx_ip_do_fragment+0x10/0x10 [ 353.924675][T11812] ? kasan_quarantine_put+0xdc/0x230 [ 353.930016][T11812] ? lockdep_hardirqs_on+0x99/0x150 [ 353.935230][T11812] ? __ip_finish_output+0x247/0x400 [ 353.940459][T11812] ? kmem_cache_free+0x145/0x350 [ 353.945410][T11812] ? ip_fragment+0x9a/0x220 [ 353.949951][T11812] __ip_finish_output+0x290/0x400 [ 353.955004][T11812] iptunnel_xmit+0x540/0x9b0 [ 353.959671][T11812] ip_tunnel_xmit+0x2119/0x2950 [ 353.964549][T11812] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 353.969777][T11812] ? gre_build_header+0x341/0xb30 [ 353.974819][T11812] ? __pfx_gre_build_header+0x10/0x10 [ 353.980231][T11812] ? iptunnel_handle_offloads+0x25f/0x650 [ 353.985969][T11812] ipgre_xmit+0x958/0xd40 [ 353.990372][T11812] ? __pfx_ipgre_xmit+0x10/0x10 [ 353.995247][T11812] ? validate_xmit_skb+0x9f9/0x1120 [ 354.000516][T11812] dev_hard_start_xmit+0x27a/0x7e0 [ 354.005657][T11812] __dev_queue_xmit+0x1b63/0x3e90 [ 354.010747][T11812] ? __dev_queue_xmit+0x2da/0x3e90 [ 354.015880][T11812] ? _copy_from_iter+0x26b/0x1960 [ 354.020960][T11812] ? __pfx___dev_queue_xmit+0x10/0x10 [ 354.026410][T11812] ? __virt_addr_valid+0x183/0x530 [ 354.031542][T11812] ? skb_set_owner_w+0x238/0x3e0 [ 354.036530][T11812] ? skb_partial_csum_set+0x105/0x350 [ 354.041917][T11812] ? virtio_net_hdr_to_skb+0xb52/0x1460 [ 354.047509][T11812] ? packet_parse_headers+0x7e3/0xaf0 [ 354.052910][T11812] ? packet_xmit+0x68/0x330 [ 354.057451][T11812] packet_sendmsg+0x4bc0/0x6710 [ 354.062337][T11812] ? __pfx___might_resched+0x10/0x10 [ 354.067685][T11812] ? aa_sk_perm+0x967/0xab0 [ 354.072217][T11812] ? __pfx_packet_sendmsg+0x10/0x10 [ 354.077474][T11812] ? __pfx_lock_release+0x10/0x10 [ 354.082510][T11812] ? __import_iovec+0x536/0x820 [ 354.087407][T11812] ? aa_sock_msg_perm+0x91/0x160 [ 354.092355][T11812] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 354.097675][T11812] ? security_socket_sendmsg+0x87/0xb0 [ 354.103169][T11812] ? __pfx_packet_sendmsg+0x10/0x10 [ 354.108418][T11812] __sock_sendmsg+0x221/0x270 [ 354.113114][T11812] ____sys_sendmsg+0x525/0x7d0 [ 354.117941][T11812] ? __pfx_____sys_sendmsg+0x10/0x10 [ 354.123262][T11812] __sys_sendmsg+0x2b0/0x3a0 [ 354.127900][T11812] ? __pfx___sys_sendmsg+0x10/0x10 [ 354.133077][T11812] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 354.139456][T11812] ? do_syscall_64+0x100/0x230 [ 354.144231][T11812] ? do_syscall_64+0xb6/0x230 [ 354.149288][T11812] do_syscall_64+0xf3/0x230 [ 354.153799][T11812] ? clear_bhb_loop+0x35/0x90 [ 354.158516][T11812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.164504][T11812] RIP: 0033:0x7f1208f75b59 [ 354.168961][T11812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 354.188611][T11812] RSP: 002b:00007f1209e2b048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 354.197087][T11812] RAX: ffffffffffffffda RBX: 00007f1209105f60 RCX: 00007f1208f75b59 [ 354.205065][T11812] RDX: 0000000000000000 RSI: 0000000020002ac0 RDI: 0000000000000003 [ 354.213068][T11812] RBP: 00007f1208fe4e5d R08: 0000000000000000 R09: 0000000000000000 [ 354.221065][T11812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 354.229079][T11812] R13: 000000000000000b R14: 00007f1209105f60 R15: 00007f120922fa78 [ 354.237113][T11812] [ 354.240150][T11812] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 354.247422][T11812] CPU: 0 PID: 11812 Comm: syz.4.1546 Not tainted 6.10.0-syzkaller-11185-g2c9b3512402e #0 [ 354.257219][T11812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 354.267265][T11812] Call Trace: [ 354.270536][T11812] [ 354.273461][T11812] dump_stack_lvl+0x241/0x360 [ 354.278233][T11812] ? __pfx_dump_stack_lvl+0x10/0x10 [ 354.283428][T11812] ? __pfx__printk+0x10/0x10 [ 354.288019][T11812] ? vscnprintf+0x5d/0x90 [ 354.292344][T11812] panic+0x349/0x860 [ 354.296244][T11812] ? __warn+0x172/0x4e0 [ 354.300397][T11812] ? __pfx_panic+0x10/0x10 [ 354.304818][T11812] __warn+0x346/0x4e0 [ 354.308790][T11812] ? skb_checksum_help+0x68f/0x730 [ 354.313896][T11812] report_bug+0x2b3/0x500 [ 354.318218][T11812] ? skb_checksum_help+0x68f/0x730 [ 354.323322][T11812] handle_bug+0x3e/0x70 [ 354.327466][T11812] exc_invalid_op+0x1a/0x50 [ 354.331964][T11812] asm_exc_invalid_op+0x1a/0x20 [ 354.336804][T11812] RIP: 0010:skb_checksum_help+0x68f/0x730 [ 354.342516][T11812] Code: 48 8b 4c 24 10 0f b6 04 01 84 c0 0f 85 89 00 00 00 48 8b 44 24 08 2b 18 48 c7 c7 40 c1 c6 8c 4c 89 f6 89 da e8 22 8f f7 f7 90 <0f> 0b 90 90 bb ea ff ff ff e9 cf fc ff ff 48 8b 0c 24 80 e1 07 80 [ 354.362121][T11812] RSP: 0018:ffffc900090e6d28 EFLAGS: 00010246 [ 354.368181][T11812] RAX: 2caf50d425957b00 RBX: 0000000000000088 RCX: 0000000000040000 [ 354.376141][T11812] RDX: ffffc9000c05a000 RSI: 000000000003ffff RDI: 0000000000040000 [ 354.384099][T11812] RBP: dffffc0000000000 R08: ffffffff815555a2 R09: fffffbfff1c39f60 [ 354.392064][T11812] R10: dffffc0000000000 R11: fffffbfff1c39f60 R12: 1ffff1100445454e [ 354.400023][T11812] R13: 0000000000000243 R14: 0000000000000245 R15: ffff8880222a2a00 [ 354.407993][T11812] ? __warn_printk+0x292/0x360 [ 354.412755][T11812] ? skb_checksum_help+0x68e/0x730 [ 354.417862][T11812] ip_do_fragment+0x20d/0x1b30 [ 354.422629][T11812] ? __pfx_ip_finish_output2+0x10/0x10 [ 354.428081][T11812] ? __pfx_ip_do_fragment+0x10/0x10 [ 354.433276][T11812] ? kasan_quarantine_put+0xdc/0x230 [ 354.438555][T11812] ? lockdep_hardirqs_on+0x99/0x150 [ 354.443749][T11812] ? __ip_finish_output+0x247/0x400 [ 354.448943][T11812] ? kmem_cache_free+0x145/0x350 [ 354.453874][T11812] ? ip_fragment+0x9a/0x220 [ 354.458377][T11812] __ip_finish_output+0x290/0x400 [ 354.463405][T11812] iptunnel_xmit+0x540/0x9b0 [ 354.468002][T11812] ip_tunnel_xmit+0x2119/0x2950 [ 354.472870][T11812] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 354.478061][T11812] ? gre_build_header+0x341/0xb30 [ 354.483084][T11812] ? __pfx_gre_build_header+0x10/0x10 [ 354.488450][T11812] ? iptunnel_handle_offloads+0x25f/0x650 [ 354.494167][T11812] ipgre_xmit+0x958/0xd40 [ 354.498499][T11812] ? __pfx_ipgre_xmit+0x10/0x10 [ 354.503343][T11812] ? validate_xmit_skb+0x9f9/0x1120 [ 354.508538][T11812] dev_hard_start_xmit+0x27a/0x7e0 [ 354.513653][T11812] __dev_queue_xmit+0x1b63/0x3e90 [ 354.518679][T11812] ? __dev_queue_xmit+0x2da/0x3e90 [ 354.523779][T11812] ? _copy_from_iter+0x26b/0x1960 [ 354.528799][T11812] ? __pfx___dev_queue_xmit+0x10/0x10 [ 354.534160][T11812] ? __virt_addr_valid+0x183/0x530 [ 354.539280][T11812] ? skb_set_owner_w+0x238/0x3e0 [ 354.544234][T11812] ? skb_partial_csum_set+0x105/0x350 [ 354.549602][T11812] ? virtio_net_hdr_to_skb+0xb52/0x1460 [ 354.555143][T11812] ? packet_parse_headers+0x7e3/0xaf0 [ 354.560526][T11812] ? packet_xmit+0x68/0x330 [ 354.565029][T11812] packet_sendmsg+0x4bc0/0x6710 [ 354.569896][T11812] ? __pfx___might_resched+0x10/0x10 [ 354.575188][T11812] ? aa_sk_perm+0x967/0xab0 [ 354.579688][T11812] ? __pfx_packet_sendmsg+0x10/0x10 [ 354.584883][T11812] ? __pfx_lock_release+0x10/0x10 [ 354.589897][T11812] ? __import_iovec+0x536/0x820 [ 354.594740][T11812] ? aa_sock_msg_perm+0x91/0x160 [ 354.599673][T11812] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 354.604950][T11812] ? security_socket_sendmsg+0x87/0xb0 [ 354.610398][T11812] ? __pfx_packet_sendmsg+0x10/0x10 [ 354.615587][T11812] __sock_sendmsg+0x221/0x270 [ 354.620262][T11812] ____sys_sendmsg+0x525/0x7d0 [ 354.625023][T11812] ? __pfx_____sys_sendmsg+0x10/0x10 [ 354.630312][T11812] __sys_sendmsg+0x2b0/0x3a0 [ 354.634904][T11812] ? __pfx___sys_sendmsg+0x10/0x10 [ 354.640037][T11812] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 354.646357][T11812] ? do_syscall_64+0x100/0x230 [ 354.651111][T11812] ? do_syscall_64+0xb6/0x230 [ 354.655775][T11812] do_syscall_64+0xf3/0x230 [ 354.660267][T11812] ? clear_bhb_loop+0x35/0x90 [ 354.664937][T11812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.670822][T11812] RIP: 0033:0x7f1208f75b59 [ 354.675225][T11812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 354.694819][T11812] RSP: 002b:00007f1209e2b048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 354.703226][T11812] RAX: ffffffffffffffda RBX: 00007f1209105f60 RCX: 00007f1208f75b59 [ 354.711186][T11812] RDX: 0000000000000000 RSI: 0000000020002ac0 RDI: 0000000000000003 [ 354.719146][T11812] RBP: 00007f1208fe4e5d R08: 0000000000000000 R09: 0000000000000000 [ 354.727108][T11812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 354.735066][T11812] R13: 000000000000000b R14: 00007f1209105f60 R15: 00007f120922fa78 [ 354.743041][T11812] [ 354.746262][T11812] Kernel Offset: disabled [ 354.750619][T11812] Rebooting in 86400 seconds..