last executing test programs: 1m33.345036005s ago: executing program 3 (id=2171): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000280)}, 0x8) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001280)="bb2d839f3bf337ccd0d8f3513ab30aba4b00b6f0ef506a60f4082ace5a8a10d80d8d595071f2ff529ff6996481ffc7e4de448343b85079722c4f1a1ce360836392283201a1a5ac0b6e24ccf9f075c64fe58b7a37d37019a49908876bc37c9f304eeefed8a6d8cae3ca0f81e900c8735b8b3063967b68a1567e30726f2c0edb6c85e78619700b0645b728a0c88b22d18366a6db2e391401feb630396bf42b987b102eb2d0a804e188648df6c8ddd79e0fde3893930e06e91c39cc01d239a1c20cb0cee84da924212382163c6638e798d66660c356195a56523456052c42aca7c8404e259561dfea5cbdc21a31b7e7eb73a710b68ba2ae2eff86d3d4fbda8b72014f5de839d48acbc9d217f7ac0b3362a66f3a7d04277cc4b918687ed082170f98dc54bd56f28ea3fecc4e86e1820ed811919dac4d09c18e27c4d839c7ac015d34522c7d87ae968dc872d97db81da9a4b6f631535348d9d44ca3fe846f6706fd3d3bd2f62f2d046a2973c9e8c6ccbf96fd0060d532433732627bf213a35870cea250f79ac773b8adba386e0ae960801b073646dcfe7c89f0cb410d22146cb3109bb9a12649e943104875c0272dfdfac5998854c0f62438909522fba45a4ac83b917a6d9a45704fefe035986b7ae676dd6b8094d2ce7ed64f0aaf138cc827553d74b2c04488d849df41fb98a6c966c07cbb1a9fe3ee5e41c3082c51b37f9df811461cf123830ee606c7b5816b6b86b21860177bfc3fd9aeb689dbb39963a55cee2afe7352200f719a3c0fe44e059446bd7226d9e814d2358c2524c0103c48f7516cc69eb04815bbef84a5bd840a5131f45c335ef8939d6100cf89160f5f1c5aec60e479d18f4680a5a525964fbf2371c1493df2c3e67f98645f329d984250dc98a48a5ab14624438ad259145794a22055ace7d33b5218ed2bda0a528bee49e4e4ae3068477da429945eef0e06128a3202f62634d8faba02e7a951fd2ceba99d2a1488872c66ceef1c5ba5a3e4a523be24c7c2de0316ae12a66d11a8089888c1e2635206ad43da841b07324fdb18eaf8d8a41a8eee7e9cd948967234049bf5ff3c8ce9cd708cf33fca2896221990573c08ef7eb0843189f7033f93b753a40c49bfc92effc9a663fbd1389f1719d14b3d33558bc1ca6c7a66c3ce93151091b23b0efdc14b6e4af3bd914ae73ef2c823346af97d7d2a53f644ba75587ab85e95c43244ba1c97cd1e692bd3e781c21b937e005c9b617ef80b0b39be0da367d2d6320a9d9efa49b574239631adb87f1b5028ee294136a8ba08b36a4faa93dc03960054a7d8655beae9a5b59db4880ba897ee9bdae083bc90567876375c747e6e19876f3ec81d6306fe252c5b7339c3f8aa409a2b745db9709e0152974db8463d16f16174be5ca677ce5bccdedc1c916919a4c919a92f0529ccca4f5c15546347cbfb94924541d8d8c1ad22bd579a620195ba98c4e1aac394c483d5ec233b7d645893ce835c19f5f58179d838d8ff31391beab43f5d01ce477cb305804b2ce0412788b2e516d049a2b55aa7bf673ade77522ef7299da43acc8cb6c6be9b9bbe90c0347a87eaa000383afd0b6ff6c3e53f11ae2449bfb75b717bd5f2068680e5677782a9fecfed818e69a54849a25ba9fc1894a43076860e1beb0149baf2bef5c712a295b5c8f27fbd75f738100c2e9d2e358b5c8805d1f8f94bea753fb4c3e72802844f7f54b1120310fc1d9bceac33a1e0dad1ac318b03e39e63845ef90b7c14d543e5248626a4deb328d3ababa54de95d6b9d4947f9afbe64fa36d731670adb4efd53f981f1acaa5361", 0x506}], 0x1}}], 0x1, 0x40000d0) sendto$inet(r0, &(0x7f0000000680)="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", 0x110, 0x40040011, 0x0, 0x0) 1m32.922536693s ago: executing program 3 (id=2172): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x8, 0x5, 0x4d4, 0x260, 0x260, 0xffffffff, 0x0, 0x0, 0x430, 0x430, 0xffffffff, 0x430, 0x430, 0x5, 0x0, {[{{@ipv6={@loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffff00], [], 'gretap0\x00', 'wg2\x00', {}, {}, 0x2f}, 0x0, 0x108, 0x150, 0x0, {}, [@common=@unspec=@physdev={{0x64}, {'ip6gre0\x00', {}, 'wg2\x00', {}, 0x0, 0x18}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x11, @ipv6=@empty, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @icmp_id=0x64, @gre_key=0xb0fa}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@private, @ipv6=@dev, @icmp_id}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, [], [0x0, 0x0, 0xffffff00], 'veth1_to_hsr\x00', 'veth0_vlan\x00'}, 0x0, 0xa4, 0xec}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key, @gre_key}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @local, [0xffffff00], [0xff], 'vlan0\x00', 'macvtap0\x00'}, 0x0, 0xa4, 0xe4}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "8100000000000000000000005b37f9ca83139d1d43f7ff00"}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x530) 1m32.216741246s ago: executing program 3 (id=2176): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x5, 0xe4}]}, 0x8) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001280)="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", 0x68a}], 0x1}}], 0x1, 0x40000d0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000300)="0906c422e0243219ff7b440e76a1b51b82ba23599f81b52c9d4db4486cec105e4b9f0f859f8a43eef6352f1e46e3145089b6a22f618ca14e288029b613a329c422481c6b7aff6806bce699cea461ecf591d9018b2a1d84e389a8d3127fd35913fe69754435c2", 0xffffffffffffffbb, 0x40040011, 0x0, 0x0) 1m31.210245996s ago: executing program 3 (id=2181): socket(0x400000000010, 0x3, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$UHID_DESTROY(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) dup3(r3, r1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000001800)=@mangle={'mangle\x00', 0x64, 0x6, 0x55c, 0xc8, 0xc8, 0x2e4, 0x2e4, 0x2e4, 0x494, 0x494, 0x494, 0x494, 0x494, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'veth1\x00', 'wg1\x00'}, 0x0, 0xa4, 0xc8, 0x0, {0x0, 0x3a010000}}, @HL={0x24}}, {{@uncond, 0x0, 0xa4, 0xc8}, @HL={0x24, 'HL\x00', 0x0, {0x1, 0x7c}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @private}, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'vxcan1\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x154, 0x0, {}, [@common=@srh1={{0x8c}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}]}, @unspec=@CHECKSUM={0x24, 'CHECKSUM\x00', 0x0, {0x0}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @common=@inet=@SYNPROXY={0x24}}, {{@uncond, 0x0, 0xa4, 0xe8}, @DNPT={0x44, 'DNPT\x00', 0x0, {@ipv4=@multicast1, @ipv6=@remote}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x5b8) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="000000006ccf68c989cec5b61a089eda7f858ab4bfe9f460a1d581910b935019007de4a387e5f210d539de7f80b605c280c1bfe2315362b1f4", @ANYRES16=r6, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000000800038004000100"], 0x34}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f0000000040)={&(0x7f0000001000), 0x0, 0x1}, 0x1) 1m29.988094691s ago: executing program 3 (id=2187): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xe}, 0x1c) recvmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, &(0x7f0000000040)}, 0x80000001}, {{0x0, 0x0, 0x0}, 0x7}], 0x2, 0x0, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000340)=',', 0x34000}], 0x1) 1m28.042055938s ago: executing program 3 (id=2194): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40), 0x0, 0x40080c1) shutdown(0xffffffffffffffff, 0x1) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x40000008) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000003680)={0x0, 0x61, 0x0, 0x1, 0x0, 0x0, 0x4000040}, 0x20000004) openat$fuse(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup, 0xffffffffffffffff, 0x19, 0x2020, 0xffffffffffffffff, @void, @void, @value}, 0x20) syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="0a01000005af9e08d2106528c9a40000000109021200010000000009"], 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') lseek(r3, 0x401, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x0, {0x2, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) 1m10.875449227s ago: executing program 32 (id=2194): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40), 0x0, 0x40080c1) shutdown(0xffffffffffffffff, 0x1) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x40000008) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000003680)={0x0, 0x61, 0x0, 0x1, 0x0, 0x0, 0x4000040}, 0x20000004) openat$fuse(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup, 0xffffffffffffffff, 0x19, 0x2020, 0xffffffffffffffff, @void, @void, @value}, 0x20) syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="0a01000005af9e08d2106528c9a40000000109021200010000000009"], 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') lseek(r3, 0x401, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x0, {0x2, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) 23.392278666s ago: executing program 5 (id=2339): syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffff0180c200000308060001080006040002aa2aaaaeaabbac1414bbaaaaaaaaaabbac"], 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 23.069166876s ago: executing program 5 (id=2342): unshare(0x2040400) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000000400)=[{&(0x7f0000000140)="300837f1d016ce840043f5fee25186907deb988ad4d788665af6cac92c0cabb98475f42099d2c4c061eed0c6b0c11daf934b6bccd1b32d3b2143e366f28bc2", 0x3f}, {&(0x7f00000001c0)="23e1544e66feb8b6221b1315841402cac278ee35a12d7556d393b2e1b980e8de9cbb26705a1bddf5b7b9440a586c9492aa0ead09f8cff48a7b86e4624a416bba0d5ebfc69d313ed810df393bf3b3ad33adeee6dd33232715925dc2ad6e2e47de8b3a8d14cf1a193ac3bffe7466c0c7c7a8ffc4599d3fed37472810a1fa806b60a777fa4c5efb352e1f3dcd78ae1cfb0e9fc8469ed34933f1990abf8736d1c8cf905eb76f4c8014e4c8d0f054b2671d3145ce093860b79515181753fea80c7fc756b9dea0fc03274104dbb48d53b94342ebf5c1f6c95d9f", 0xd7}, {&(0x7f00000002c0)="48d1f4a2ba7e37c8d1e948c3f16fcbe5a8370171fe887d85b52f47b9b4723facdd83922220f167d285e7d082a8ec79b4bf592d866ae08772c8b2733830bbd6b2fb8a211d2acd456a4fad4783dcdfba7991dac2fa971abb25084560a7f99ab262279f9899f17a8d89f1c91b1972250aeef9f60b16a6386b6d395831085a1395b29293b73e917db30a3227f86dd49e625c0d3946b1b708ad253cea902b6d6727cd91d077770ea92c98a2e116247fa472660915adcb7f70087f67d2999556da6bee6bf48d2d99983bb41e17cf", 0xcb}, {&(0x7f00000003c0)}], 0x4, 0x7) 22.648487197s ago: executing program 5 (id=2346): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f0000002040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000180)=[{0x0}, {0x0}], 0x2}, 0x7}], 0x2, 0x2, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r1}, 0x10, &(0x7f0000000480)={&(0x7f0000000140)=@can={{0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, "5b7ba3698f28aaf0"}, 0x10}}, 0x0) 22.177174634s ago: executing program 5 (id=2348): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000080)={{0x0, 0x0, 0x8}, 'syz1\x00', 0x14}) ioctl$UI_SET_PHYS(r2, 0x4004556c, &(0x7f0000000000)='syz1\x00') ioctl$UI_DEV_CREATE(r2, 0x5501) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101842, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r3, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) readv(r3, &(0x7f00000002c0)=[{&(0x7f0000000280)=""/56, 0x38}], 0x1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r1, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 20.049451738s ago: executing program 0 (id=2355): r0 = socket(0x8, 0xa, 0x8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000240)={0x2, 0x206, 0x0, 0x9, 0x0}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={r2, 0x1}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000001c0)={0x2, 0x20e, 0x7c, 0x800, r3}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket(0x11, 0x800000003, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x80001, 0x84) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x8000003d) openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) io_setup(0x8, &(0x7f0000004200)) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r6, 0x0, 0x31, &(0x7f0000000100)=0x80, 0x4) 19.808512395s ago: executing program 1 (id=2357): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) io_uring_setup(0x1612, 0x0) 19.526399462s ago: executing program 0 (id=2360): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x5, 0xe4}]}, 0x8) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000d0) sendto$inet(r0, &(0x7f0000000680)="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", 0x110, 0x40040011, 0x0, 0x0) 19.503474616s ago: executing program 1 (id=2361): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2041, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x4, 0x0, 0x3, "0062ba7d820000a75e0000000000fcff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x80045440, &(0x7f0000000000)=0x44) 19.421028195s ago: executing program 5 (id=2362): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40), 0x0, 0x40080c1) shutdown(0xffffffffffffffff, 0x1) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x40000008) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f0000003680)={0x0, 0x61, 0x0, 0x1, 0x0, 0x0, 0x4000040}, 0x20000004) openat$fuse(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup, 0xffffffffffffffff, 0x19, 0x2020, 0xffffffffffffffff, @void, @void, @value}, 0x20) syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="0a01000005af9e08d2106528c9a40000000109021200010000000009"], 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') lseek(r4, 0x401, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f00000000c0)={0x1d, r6}, 0x18) connect$can_j1939(r5, &(0x7f0000000140)={0x1d, r6, 0x0, {0x2, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) 19.287783996s ago: executing program 0 (id=2364): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_STREAMOFF(r3, 0x40045613, &(0x7f00000000c0)=0x5) setxattr$incfs_metadata(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840), &(0x7f00000005c0), 0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)) socket$inet6(0x10, 0x80000, 0x3) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x410240, 0x54) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r4, 0xc0305302, &(0x7f0000000280)={0x9, 0xe1e, 0xfff, 0x0, 0x7f, 0x8000}) r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r5, 0xc0405610, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000480)=0x2) getdents64(r4, &(0x7f0000001f00)=""/4093, 0xffd) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x200}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0x2a, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$kcm(0x2, 0x1000000000000002, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r7, 0x84, 0x81, &(0x7f00000003c0)="1a00000002000100", 0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r7, 0x84, 0x1b, &(0x7f0000000100), &(0x7f00000001c0)=0x8) unshare(0x42000000) 19.262386182s ago: executing program 1 (id=2366): syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffff0180c200000308060001080006040002aa2aaaaeaabbac1414bbaaaaaaaaaabbac"], 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273", 0x7, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 18.848594244s ago: executing program 1 (id=2368): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r1, 0x20, 0x2000, 0x40000002, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0xffff36f9}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0xd1}, 0x2000c000) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000040)={0x400, 0x6, 0x10, 0x3}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000080)={0x7f, 0x224, 0x203, 0xa5, 0x45ae, 0x4, 0xfffffffd, 0xa2f}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r5, 0x1, 0xc, &(0x7f0000001080)=""/249, &(0x7f0000001180)=0xf9) syz_emit_ethernet(0x82, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd60ee527e004c3c0000000000000000000000000000ea0100ff02000000000000000000000000000133"], 0x0) getegid() unshare(0x400) sendto$inet(r4, &(0x7f0000000100)="ab", 0xffe0, 0x2000c8d4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) 17.811512998s ago: executing program 1 (id=2371): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) io_uring_setup(0x1612, 0x0) 17.370136345s ago: executing program 1 (id=2373): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000000700)=[{{&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000100)=[{&(0x7f00000004c0)=""/201, 0xc9}, {&(0x7f0000000300)=""/156, 0x9c}], 0x2, &(0x7f00000001c0)=""/52, 0x34}, 0x6}, {{&(0x7f0000000240)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000400)=""/96, 0x60}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/138, 0x8a}], 0x3}, 0x4}], 0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x51aa, &(0x7f0000000740)={0x0, 0x8af4, 0x22400, 0x3, 0x142, 0x0, r2}, &(0x7f00000005c0), &(0x7f00000007c0)) r4 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x2d9e, 0x0, 0x0, 0x8b, 0x0, r3}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r4, 0x3516, 0xaddf, 0x2, 0x0, 0x0) 17.31365534s ago: executing program 4 (id=2375): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f0000002040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000180)=[{0x0}, {0x0}], 0x2}, 0x7}], 0x2, 0x2, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r1}, 0x10, &(0x7f0000000480)={&(0x7f0000000140)=@can={{0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, "5b7ba3698f28aaf0"}, 0x10}}, 0x0) 16.786692337s ago: executing program 2 (id=2376): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x5, 0xe4}]}, 0x8) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000d0) sendto$inet(r0, &(0x7f0000000680)="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", 0x110, 0x40040011, 0x0, 0x0) 16.75533799s ago: executing program 4 (id=2377): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2041, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x4, 0x0, 0x3, "0062ba7d820000a75e0000000000fcff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x80045440, &(0x7f0000000000)=0x44) 16.444684928s ago: executing program 2 (id=2378): syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffff0180c200000308060001080006040002aa2aaaaeaabbac1414bbaaaaaaaaaabbac"], 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273", 0x7, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 16.260086061s ago: executing program 0 (id=2379): r0 = syz_open_dev$vbi(0x0, 0x3, 0x2) write(r0, &(0x7f0000000280), 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x5, @pix_mp={0x9, 0x2, 0x3432564e, 0x6, 0x1, [{0x1, 0x4}, {0xd3, 0x4}, {0x5, 0x4f11}, {0x5, 0x6}, {0x4, 0x3}, {0x400, 0x80000000}, {0x3ff, 0x2000002}, {0x5, 0x800000}], 0x9, 0xbe, 0x3}}) 16.148474655s ago: executing program 4 (id=2380): syz_emit_ethernet(0x46, 0x0, 0x0) 15.993540681s ago: executing program 2 (id=2381): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xe}, 0x1c) recvmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000480)=""/78, 0x4e}], 0x1}, 0x80000001}, {{0x0, 0x0, 0x0}, 0x7}], 0x2, 0x0, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000340)}], 0x1) 15.919305676s ago: executing program 0 (id=2382): unshare(0x2040400) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000000400)=[{&(0x7f0000000140)="300837f1d016ce840043f5fee25186907deb988ad4d788665af6cac92c0cabb98475f42099d2c4c061eed0c6b0c11daf934b6bccd1b32d3b2143e366f28bc2", 0x3f}, {&(0x7f00000001c0)="23e1544e66feb8b6221b1315841402cac278ee35a12d7556d393b2e1b980e8de9cbb26705a1bddf5b7b9440a586c9492aa0ead09f8cff48a7b86e4624a416bba0d5ebfc69d313ed810df393bf3b3ad33adeee6dd33232715925dc2ad6e2e47de8b3a8d14cf1a193ac3bffe7466c0c7c7a8ffc4599d3fed37472810a1fa806b60a777fa4c5efb352e1f3dcd78ae1cfb0e9fc8469ed34933f1990abf8736d1c8cf905eb76f4c8014e4c8d0f054b2671d3145ce093860b79515181753fea80c7fc756b9dea0fc03274104dbb48d53b94342ebf5c1f6c95d9f", 0xd7}, {&(0x7f00000002c0)="48d1f4a2ba7e37c8d1e948c3f16fcbe5a8370171fe887d85b52f47b9b4723facdd83922220f167d285e7d082a8ec79b4bf592d866ae08772c8b2733830bbd6b2fb8a211d2acd456a4fad4783dcdfba7991dac2fa971abb25084560a7f99ab262279f9899f17a8d89f1c91b1972250aeef9f60b16a6386b6d395831085a1395b29293b73e917db30a3227f86dd49e625c0d3946b1b708ad253cea902b6d6727cd91d077770ea92c98a2e116247fa472660915adcb7f70087f67d2999556da6bee6bf48d2d99983bb41e17cf", 0xcb}, {&(0x7f00000003c0)="7f48d29fbb27dd790684368fb6a454fa439b933a09724ae843f57c492a91ed8d", 0x20}], 0x4, 0x7) 15.858302132s ago: executing program 4 (id=2383): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) io_uring_setup(0x1612, 0x0) 15.596629293s ago: executing program 0 (id=2384): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}}, 0xc800) keyctl$update(0x2, 0x0, &(0x7f0000000300)='1', 0x1) add_key$user(0x0, 0x0, &(0x7f0000000400), 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0x60100, 0x0) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c81, 0x9) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000200)={0x0, 0x104000, 0x0, 0xa5c}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_USER_PORT_KEY={0x6, 0x19, 0x88}, @IFLA_BOND_MODE={0x5, 0x1, 0x1}]}}}]}, 0x44}}, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x4e23, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x24) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000140)}], 0x1) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000240)=0x1000, 0x4) syz_usb_connect(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="120100004c87c810cd0615011e1a0102030109022407000000000009040000026048fe0009050b0000"], 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x34, r7, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x16, 0x0, @l2={'eth', 0x3a, 'gre0\x00'}}}}}, 0x34}}, 0x0) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) setns(r9, 0x24020000) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r11 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r11, 0x0, r10, 0x0, 0x46) close(r10) 15.454975055s ago: executing program 4 (id=2385): r0 = socket(0x8, 0xa, 0x8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000240)={0x2, 0x206, 0x0, 0x9, 0x0}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={r2, 0x1}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000001c0)={0x2, 0x20e, 0x7c, 0x800, r3}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket(0x11, 0x800000003, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x80001, 0x84) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x8000003d) openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r6, 0x0, 0x31, &(0x7f0000000100)=0x80, 0x4) 15.093686386s ago: executing program 4 (id=2386): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = gettid() r2 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x60400, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffc}, 0x0, &(0x7f0000000240)={0x1f}, 0x0, 0x0) close_range(r3, r4, 0x200000000000000) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000100)) r5 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000140)=0x4) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)=0x0) timer_settime(r6, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f00000083c0)={{0x1}}) timer_settime(r6, 0x1, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000000080)) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x3, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0x1, 0x58, &(0x7f00000002c0)}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5900000002060108000000000000000000000000140007800800114000000000050015000c0000000500010026000000050005000a00000005000400000000000d000300686173683a6e657400000000090002"], 0x5c}}, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') pipe2$watch_queue(&(0x7f0000000140), 0x80) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380), 0x202000) 14.882383075s ago: executing program 2 (id=2387): socket(0x400000000010, 0x3, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$UHID_DESTROY(r2, &(0x7f0000000200), 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) dup3(r3, r1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f0000000040)={&(0x7f0000001000), 0x0, 0x1}, 0x1) 14.806923807s ago: executing program 2 (id=2388): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f0000002040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000180)=[{0x0}, {0x0}], 0x2}, 0x7}], 0x2, 0x2, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r1}, 0x10, &(0x7f0000000480)={&(0x7f0000000140)=@can={{0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, "5b7ba3698f28aaf0"}, 0x10}}, 0x0) 14.717203364s ago: executing program 5 (id=2389): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x5, 0xe4}]}, 0x8) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f00000001c0)}}], 0x1, 0x40000d0) sendto$inet(r0, &(0x7f0000000680)="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", 0x110, 0x40040011, 0x0, 0x0) 14.398797943s ago: executing program 2 (id=2390): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2041, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x4, 0x0, 0x3, "0062ba7d820000a75e0000000000fcff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x80045440, &(0x7f0000000000)=0x44) 0s ago: executing program 33 (id=2373): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000000700)=[{{&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000100)=[{&(0x7f00000004c0)=""/201, 0xc9}, {&(0x7f0000000300)=""/156, 0x9c}], 0x2, &(0x7f00000001c0)=""/52, 0x34}, 0x6}, {{&(0x7f0000000240)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000400)=""/96, 0x60}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/138, 0x8a}], 0x3}, 0x4}], 0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x51aa, &(0x7f0000000740)={0x0, 0x8af4, 0x22400, 0x3, 0x142, 0x0, r2}, &(0x7f00000005c0), &(0x7f00000007c0)) r4 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x2d9e, 0x0, 0x0, 0x8b, 0x0, r3}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r4, 0x3516, 0xaddf, 0x2, 0x0, 0x0) kernel console output (not intermixed with test programs): turer: syz [ 306.936807][ T5897] usb 4-1: SerialNumber: syz [ 307.072450][ T5897] usb 4-1: config 0 descriptor?? [ 307.399107][ T8816] xt_CT: No such helper "snmp" [ 307.413195][ T5897] cxacru 4-1:0.0: cxacru_bind: interface has incorrect endpoints [ 307.422097][ T5897] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 307.449136][ T5897] usb 4-1: USB disconnect, device number 41 [ 307.520681][ T5965] usb 3-1: USB disconnect, device number 30 [ 307.699425][ T8837] syz.2.890(8837): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 307.816349][ T8839] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 307.823672][ T8839] IPv6: NLM_F_CREATE should be set when creating new route [ 307.921233][ T5965] usb 5-1: USB disconnect, device number 47 [ 308.296767][ T8847] xt_TCPMSS: Only works on TCP SYN packets [ 308.920785][ T44] usb 2-1: USB disconnect, device number 49 [ 309.584871][ T5965] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 309.675526][ T44] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 309.737483][ T24] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 309.747211][ T5965] usb 4-1: config 0 has no interfaces? [ 309.845257][ T5965] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 309.859656][ T5965] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.879922][ T5965] usb 4-1: Product: syz [ 309.884401][ T5965] usb 4-1: Manufacturer: syz [ 309.894820][ T44] usb 5-1: Using ep0 maxpacket: 16 [ 309.901205][ T5965] usb 4-1: SerialNumber: syz [ 309.910411][ T24] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 309.919527][ T24] usb 3-1: config 0 has no interface number 0 [ 309.932207][ T5965] usb 4-1: config 0 descriptor?? [ 309.935829][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.955225][ T24] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.966597][ T44] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 309.994734][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.003007][ T24] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 310.027686][ T44] usb 5-1: config 0 descriptor?? [ 310.032929][ T24] usb 3-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 310.064292][ T24] usb 3-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 310.075618][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.088068][ T24] usb 3-1: config 0 descriptor?? [ 310.533661][ T44] mcp2221 0003:04D8:00DD.0006: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 310.565688][ T24] usbhid 3-1:0.1: can't add hid device: -71 [ 310.571906][ T24] usbhid 3-1:0.1: probe with driver usbhid failed with error -71 [ 310.635286][ T24] usb 3-1: USB disconnect, device number 31 [ 310.675154][ T5961] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 310.839148][ T5961] usb 2-1: Using ep0 maxpacket: 8 [ 310.849652][ T5961] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 310.861709][ T5961] usb 2-1: New USB device found, idVendor=10d2, idProduct=2865, bcdDevice=a4.c9 [ 310.871168][ T5961] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.895654][ T5961] usb 2-1: config 0 descriptor?? [ 310.943888][ T8899] xt_TCPMSS: Only works on TCP SYN packets [ 311.580763][ T5965] usb 5-1: USB disconnect, device number 48 [ 312.286797][ T5961] usb 4-1: USB disconnect, device number 42 [ 312.448191][ T8916] FAULT_INJECTION: forcing a failure. [ 312.448191][ T8916] name failslab, interval 1, probability 0, space 0, times 0 [ 312.475015][ T8916] CPU: 1 UID: 0 PID: 8916 Comm: syz.3.915 Not tainted 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(full) [ 312.475047][ T8916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 312.475060][ T8916] Call Trace: [ 312.475069][ T8916] [ 312.475078][ T8916] dump_stack_lvl+0x189/0x250 [ 312.475116][ T8916] ? __pfx____ratelimit+0x10/0x10 [ 312.475150][ T8916] ? __pfx_dump_stack_lvl+0x10/0x10 [ 312.475184][ T8916] ? __pfx__printk+0x10/0x10 [ 312.475224][ T8916] should_fail_ex+0x414/0x560 [ 312.475285][ T8916] should_failslab+0xa8/0x100 [ 312.475311][ T8916] kmem_cache_alloc_noprof+0x73/0x3c0 [ 312.475345][ T8916] ? skb_clone+0x212/0x3a0 [ 312.475380][ T8916] skb_clone+0x212/0x3a0 [ 312.475413][ T8916] __netlink_deliver_tap+0x404/0x850 [ 312.475454][ T8916] ? netlink_deliver_tap+0x2e/0x1b0 [ 312.475482][ T8916] netlink_deliver_tap+0x19c/0x1b0 [ 312.475509][ T8916] netlink_sendskb+0x68/0x140 [ 312.475535][ T8916] netlink_rcv_skb+0x28c/0x470 [ 312.475561][ T8916] ? __pfx_genl_rcv_msg+0x10/0x10 [ 312.475595][ T8916] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 312.475638][ T8916] ? down_read+0x1ad/0x2e0 [ 312.475665][ T8916] genl_rcv+0x28/0x40 [ 312.475694][ T8916] netlink_unicast+0x75b/0x8d0 [ 312.475737][ T8916] netlink_sendmsg+0x805/0xb30 [ 312.475775][ T8916] ? __pfx_netlink_sendmsg+0x10/0x10 [ 312.475805][ T8916] ? __import_iovec+0x5d4/0x7f0 [ 312.475825][ T8916] ? aa_sock_msg_perm+0x94/0x160 [ 312.475854][ T8916] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 312.475881][ T8916] ? __pfx_netlink_sendmsg+0x10/0x10 [ 312.475909][ T8916] __sock_sendmsg+0x219/0x270 [ 312.475946][ T8916] ____sys_sendmsg+0x505/0x830 [ 312.475981][ T8916] ? __pfx_____sys_sendmsg+0x10/0x10 [ 312.476098][ T8916] ___sys_sendmsg+0x21f/0x2a0 [ 312.476134][ T8916] ? __pfx____sys_sendmsg+0x10/0x10 [ 312.476204][ T8916] ? __fget_files+0x2a/0x420 [ 312.476238][ T8916] ? __fget_files+0x3a0/0x420 [ 312.476274][ T8916] __sys_sendmsg+0x164/0x220 [ 312.476316][ T8916] ? __pfx___sys_sendmsg+0x10/0x10 [ 312.476360][ T8916] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 312.476393][ T8916] ? lockdep_hardirqs_on+0x9c/0x150 [ 312.476427][ T8916] __do_fast_syscall_32+0xb6/0x2b0 [ 312.476449][ T8916] ? lockdep_hardirqs_on+0x9c/0x150 [ 312.476484][ T8916] do_fast_syscall_32+0x34/0x80 [ 312.476505][ T8916] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 312.476534][ T8916] RIP: 0023:0xf7f38539 [ 312.476556][ T8916] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 312.476574][ T8916] RSP: 002b:00000000f505655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 312.476596][ T8916] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000400 [ 312.476610][ T8916] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 312.476622][ T8916] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 312.476633][ T8916] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 312.476645][ T8916] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 312.476676][ T8916] [ 313.235432][ T5965] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 313.418275][ T5965] usb 4-1: unable to get BOS descriptor or descriptor too short [ 313.437297][ T5965] usb 4-1: not running at top speed; connect to a high speed hub [ 313.456869][ T5965] usb 4-1: config 1 interface 0 altsetting 4 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 313.474786][ T5965] usb 4-1: config 1 interface 0 has no altsetting 0 [ 313.495214][ T5965] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 313.509002][ T5965] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.529442][ T5965] usb 4-1: Product: syz [ 313.539912][ T5965] usb 4-1: Manufacturer: syz [ 313.550346][ T5965] usb 4-1: SerialNumber: syz [ 313.577817][ T8919] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 313.993946][ T30] audit: type=1326 audit(1749583753.628:1489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8926 comm="syz.4.919" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 314.203787][ T5961] usb 2-1: USB disconnect, device number 50 [ 314.226735][ T30] audit: type=1326 audit(1749583753.628:1490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8926 comm="syz.4.919" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 314.257747][ T30] audit: type=1326 audit(1749583753.628:1491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8926 comm="syz.4.919" exe="/root/syz-executor" sig=0 arch=40000003 syscall=103 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 314.486684][ T30] audit: type=1326 audit(1749583753.788:1492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8926 comm="syz.4.919" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 314.684786][ T30] audit: type=1326 audit(1749583753.788:1493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8926 comm="syz.4.919" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 314.754828][ T30] audit: type=1326 audit(1749583753.958:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8926 comm="syz.4.919" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 314.870409][ T5965] usb 4-1: bad CDC descriptors [ 314.956361][ T5965] usb 4-1: USB disconnect, device number 43 [ 314.974866][ T30] audit: type=1326 audit(1749583753.968:1495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8926 comm="syz.4.919" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 315.084945][ T30] audit: type=1326 audit(1749583753.968:1496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8926 comm="syz.4.919" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 315.209653][ T8955] xt_TCPMSS: Only works on TCP SYN packets [ 316.694741][ T5961] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 316.985522][ T5961] usb 3-1: config 0 has no interfaces? [ 317.005818][ T5961] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 317.020747][ T5961] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.060153][ T5961] usb 3-1: Product: syz [ 317.064377][ T5961] usb 3-1: Manufacturer: syz [ 317.070610][ T5961] usb 3-1: SerialNumber: syz [ 317.086158][ T5961] usb 3-1: config 0 descriptor?? [ 317.161031][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.170346][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.184903][ T5965] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 317.358803][ T5965] usb 2-1: not running at top speed; connect to a high speed hub [ 317.383228][ T5965] usb 2-1: config 128 has an invalid interface number: 92 but max is 0 [ 317.411096][ T5965] usb 2-1: config 128 contains an unexpected descriptor of type 0x1, skipping [ 317.440276][ T5965] usb 2-1: config 128 has no interface number 0 [ 317.464814][ T5965] usb 2-1: config 128 interface 92 has no altsetting 0 [ 317.490123][ T5965] usb 2-1: New USB device found, idVendor=12d1, idProduct=e5b1, bcdDevice=ce.7a [ 317.513702][ T5965] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.570185][ T5965] usb 2-1: Product: ї [ 317.590883][ T5965] usb 2-1: Manufacturer: ㍮랓Ἧ궔嶙䓯먟฻ꈦ䧕﫾൚鵡䷑玂굟搅萞ⱬ꧟飵癅팣Ų腉䔶ꔄﭧᐲ縚镸螴ᛐ₆♺溴م耿됒ꒂ䤕ಚ贖婽宬齭᫴汾 [ 317.661754][ T5965] usb 2-1: SerialNumber: syz [ 317.799516][ T8976] input: syz1 as /devices/virtual/input/input17 [ 317.959610][ T5965] option 2-1:128.92: GSM modem (1-port) converter detected [ 318.060544][ T5965] usb 2-1: USB disconnect, device number 51 [ 318.143636][ T5965] option 2-1:128.92: device disconnected [ 318.469127][ T8984] QAT: Stopping all acceleration devices. [ 319.220500][ T5897] usb 3-1: USB disconnect, device number 32 [ 319.344779][ T5965] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 319.569436][ T9001] xt_TCPMSS: Only works on TCP SYN packets [ 319.598812][ T5965] usb 2-1: Using ep0 maxpacket: 8 [ 319.619954][ T5965] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 319.629198][ T5965] usb 2-1: New USB device found, idVendor=10d2, idProduct=2865, bcdDevice=a4.c9 [ 319.666483][ T5965] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.685789][ T5965] usb 2-1: config 0 descriptor?? [ 321.853092][ T5961] usb 2-1: USB disconnect, device number 52 [ 322.578019][ T9053] xt_TCPMSS: Only works on TCP SYN packets [ 322.607583][ T9052] FAULT_INJECTION: forcing a failure. [ 322.607583][ T9052] name failslab, interval 1, probability 0, space 0, times 0 [ 322.607651][ T9052] CPU: 1 UID: 0 PID: 9052 Comm: syz.1.953 Not tainted 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(full) [ 322.607670][ T9052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 322.607679][ T9052] Call Trace: [ 322.607685][ T9052] [ 322.607691][ T9052] dump_stack_lvl+0x189/0x250 [ 322.607719][ T9052] ? __pfx____ratelimit+0x10/0x10 [ 322.607744][ T9052] ? __pfx_dump_stack_lvl+0x10/0x10 [ 322.607781][ T9052] ? __pfx__printk+0x10/0x10 [ 322.607813][ T9052] ? __pfx___might_resched+0x10/0x10 [ 322.607847][ T9052] ? fs_reclaim_acquire+0x7d/0x100 [ 322.607880][ T9052] should_fail_ex+0x414/0x560 [ 322.607916][ T9052] should_failslab+0xa8/0x100 [ 322.607942][ T9052] __kmalloc_noprof+0xcb/0x4f0 [ 322.607962][ T9052] ? drm_atomic_state_init+0x9c/0x310 [ 322.607990][ T9052] drm_atomic_state_init+0x9c/0x310 [ 322.608015][ T9052] drm_atomic_state_alloc+0xbc/0x100 [ 322.608038][ T9052] drm_client_modeset_commit_atomic+0xe2/0x760 [ 322.608075][ T9052] ? rcu_is_watching+0x15/0xb0 [ 322.608115][ T9052] ? __mutex_lock+0x330/0xe80 [ 322.608139][ T9052] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 322.608200][ T9052] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 322.608228][ T9052] ? desc_read+0x1b8/0x3f0 [ 322.608266][ T9052] drm_client_modeset_commit_locked+0xcb/0x4d0 [ 322.608308][ T9052] drm_fb_helper_pan_display+0x3e7/0xbd0 [ 322.608356][ T9052] fb_pan_display+0x39b/0x680 [ 322.608387][ T9052] ? __pfx_drm_fb_helper_pan_display+0x10/0x10 [ 322.608425][ T9052] bit_update_start+0x4d/0x1e0 [ 322.608453][ T9052] fbcon_switch+0x1565/0x2040 [ 322.608473][ T9052] ? __lock_acquire+0xab9/0xd20 [ 322.608519][ T9052] ? __pfx_fbcon_switch+0x10/0x10 [ 322.608563][ T9052] ? __pfx_hide_cursor+0x10/0x10 [ 322.608600][ T9052] ? is_console_locked+0x9/0x20 [ 322.608621][ T9052] ? set_origin+0x346/0x480 [ 322.608654][ T9052] csi_J+0x6c1/0xe50 [ 322.608684][ T9052] do_con_write+0x4169/0x5200 [ 322.608777][ T9052] ? __pfx_do_con_write+0x10/0x10 [ 322.608800][ T9052] ? trace_contention_end+0x39/0x120 [ 322.608824][ T9052] ? __mutex_lock+0x330/0xe80 [ 322.608848][ T9052] ? n_tty_write+0xdee/0x11d0 [ 322.608884][ T9052] ? n_tty_write+0x663/0x11d0 [ 322.608915][ T9052] ? __pfx___mutex_lock+0x10/0x10 [ 322.608937][ T9052] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 322.608969][ T9052] ? con_write+0x2e/0x40 [ 322.608998][ T9052] con_write+0x24/0x40 [ 322.609021][ T9052] n_tty_write+0xd35/0x11d0 [ 322.609081][ T9052] ? __pfx_n_tty_write+0x10/0x10 [ 322.609109][ T9052] ? __pfx_woken_wake_function+0x10/0x10 [ 322.609137][ T9052] ? file_tty_write+0x2e8/0x990 [ 322.609157][ T9052] ? rcu_is_watching+0x15/0xb0 [ 322.609191][ T9052] ? kfree+0x4d/0x440 [ 322.609224][ T9052] ? __pfx_n_tty_write+0x10/0x10 [ 322.609254][ T9052] file_tty_write+0x500/0x990 [ 322.609288][ T9052] vfs_write+0x548/0xa90 [ 322.609330][ T9052] ? __pfx_tty_write+0x10/0x10 [ 322.609351][ T9052] ? __pfx_vfs_write+0x10/0x10 [ 322.609408][ T9052] ? __fget_files+0x2a/0x420 [ 322.609445][ T9052] ksys_write+0x145/0x250 [ 322.609470][ T9052] ? __pfx_ksys_write+0x10/0x10 [ 322.609493][ T9052] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 322.609529][ T9052] ? lockdep_hardirqs_on+0x9c/0x150 [ 322.609566][ T9052] __do_fast_syscall_32+0xb6/0x2b0 [ 322.609589][ T9052] ? lockdep_hardirqs_on+0x9c/0x150 [ 322.609629][ T9052] do_fast_syscall_32+0x34/0x80 [ 322.609651][ T9052] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 322.609677][ T9052] RIP: 0023:0xf705e539 [ 322.609695][ T9052] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 322.609714][ T9052] RSP: 002b:00000000f504e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 322.609737][ T9052] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080001040 [ 322.609752][ T9052] RDX: 0000000000001006 RSI: 0000000000000000 RDI: 0000000000000000 [ 322.609764][ T9052] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 322.609776][ T9052] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 322.609789][ T9052] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 322.609825][ T9052] [ 324.085017][ T5961] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 324.265479][ T9078] netlink: 4 bytes leftover after parsing attributes in process `syz.4.961'. [ 324.313281][ T5961] usb 3-1: Using ep0 maxpacket: 8 [ 324.420322][ T5961] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 324.449435][ T5961] usb 3-1: New USB device found, idVendor=10d2, idProduct=2865, bcdDevice=a4.c9 [ 324.459495][ T5961] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.499338][ T5961] usb 3-1: config 0 descriptor?? [ 324.831845][ T9086] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode active-backup(1) [ 325.114758][ T5961] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 325.273734][ T5961] usb 2-1: Using ep0 maxpacket: 16 [ 325.303304][ T5961] usb 2-1: config index 0 descriptor too short (expected 1828, got 36) [ 325.365167][ T5961] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 325.373433][ T5961] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 325.383838][ T5961] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 325.423967][ T5961] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 325.573683][ T5961] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 325.656919][ T5961] usb 2-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 325.734436][ T5961] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.804154][ T5961] usb 2-1: Product: syz [ 325.850092][ T5961] usb 2-1: Manufacturer: syz [ 325.904797][ T5961] usb 2-1: SerialNumber: syz [ 325.925974][ T5961] usb 2-1: config 0 descriptor?? [ 325.947528][ T5961] keyspan 2-1:0.0: Keyspan 2 port adapter converter detected [ 325.956395][ T5961] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 87 [ 325.968810][ T5961] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 7 [ 325.987718][ T5961] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 325.996718][ T5961] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 326.065462][ T9098] xt_TCPMSS: Only works on TCP SYN packets [ 326.084239][ T5961] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 326.099857][ T5961] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 85 [ 326.118554][ T5961] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 5 [ 326.133951][ T5961] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 326.153604][ T9086] tipc: Started in network mode [ 326.158687][ T9086] tipc: Node identity , cluster identity 4711 [ 326.170421][ T9086] tipc: Failed to obtain node identity [ 326.173603][ T5961] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 83 [ 326.201539][ T5961] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 3 [ 326.209993][ T9086] tipc: Enabling of bearer rejected, failed to enable media [ 326.236703][ T30] audit: type=1400 audit(1749583765.878:1497): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=262620AAC1FB2051D4F401A532E24447D4BD7B9FA9979B40DB pid=9100 comm="syz.0.969" [ 326.263302][ T5961] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 4 [ 326.263368][ T5961] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 86 [ 326.263426][ T5961] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 6 [ 326.270781][ T5961] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 326.277441][ T5961] usb 2-1: USB disconnect, device number 53 [ 326.289199][ T5961] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 326.297442][ T5961] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 326.298438][ T5961] keyspan 2-1:0.0: device disconnected [ 326.625228][ T9103] netlink: 24 bytes leftover after parsing attributes in process `syz.0.970'. [ 326.817203][ T5965] usb 3-1: USB disconnect, device number 33 [ 327.224930][ T5961] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 327.434941][ T5897] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 327.446974][ T5961] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 327.457410][ T5961] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 327.467915][ T5961] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 327.477419][ T5961] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 327.489914][ T5961] usb 4-1: SerialNumber: syz [ 327.594836][ T5965] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 327.608466][ T5897] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 327.624835][ T5897] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 327.660224][ T9124] xt_CT: You must specify a L4 protocol and not use inversions on it [ 327.936779][ T5897] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 327.954312][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.962546][ T5897] usb 3-1: Product: syz [ 327.969395][ T5897] usb 3-1: Manufacturer: syz [ 327.976054][ T5897] usb 3-1: SerialNumber: syz [ 328.008701][ T5965] usb 5-1: config 0 has no interfaces? [ 328.019238][ T5965] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 328.028710][ T5965] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.037355][ T5965] usb 5-1: Product: syz [ 328.056426][ T5965] usb 5-1: Manufacturer: syz [ 328.063035][ T5965] usb 5-1: SerialNumber: syz [ 328.081427][ T5965] usb 5-1: config 0 descriptor?? [ 328.200284][ T5897] usb 3-1: 0:2 : does not exist [ 328.211436][ T5897] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 328.258775][ T5897] usb 3-1: USB disconnect, device number 34 [ 328.340350][ T5890] udevd[5890]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 328.804793][ T5897] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 328.971942][ T5897] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 328.989740][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.015548][ T5897] usb 2-1: Product: syz [ 329.039280][ T5897] usb 2-1: Manufacturer: syz [ 329.043969][ T5897] usb 2-1: SerialNumber: syz [ 329.070277][ T5897] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 329.137522][ T5965] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 329.321411][ T61] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 329.351664][ T9128] random: crng reseeded on system resumption [ 329.498090][ T44] usb 2-1: USB disconnect, device number 54 [ 329.665904][ T9146] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 329.763826][ T9148] FAULT_INJECTION: forcing a failure. [ 329.763826][ T9148] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 329.789857][ T9148] CPU: 1 UID: 0 PID: 9148 Comm: syz.0.985 Not tainted 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(full) [ 329.789892][ T9148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 329.789905][ T9148] Call Trace: [ 329.789914][ T9148] [ 329.789923][ T9148] dump_stack_lvl+0x189/0x250 [ 329.789968][ T9148] ? __pfx____ratelimit+0x10/0x10 [ 329.790002][ T9148] ? __pfx_dump_stack_lvl+0x10/0x10 [ 329.790035][ T9148] ? __pfx__printk+0x10/0x10 [ 329.790071][ T9148] should_fail_ex+0x414/0x560 [ 329.790105][ T9148] _copy_to_user+0x31/0xb0 [ 329.790135][ T9148] simple_read_from_buffer+0xe1/0x170 [ 329.790164][ T9148] proc_fail_nth_read+0x1df/0x250 [ 329.790194][ T9148] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 329.790224][ T9148] ? rw_verify_area+0x258/0x650 [ 329.790257][ T9148] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 329.790284][ T9148] vfs_read+0x200/0x980 [ 329.790323][ T9148] ? __pfx___mutex_lock+0x10/0x10 [ 329.790345][ T9148] ? __pfx_vfs_read+0x10/0x10 [ 329.790380][ T9148] ? __fget_files+0x2a/0x420 [ 329.790409][ T9148] ? __fget_files+0x3a0/0x420 [ 329.790431][ T9148] ? __fget_files+0x2a/0x420 [ 329.790464][ T9148] ksys_read+0x145/0x250 [ 329.790487][ T9148] ? __pfx_ksys_read+0x10/0x10 [ 329.790524][ T9148] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 329.790558][ T9148] ? lockdep_hardirqs_on+0x9c/0x150 [ 329.790592][ T9148] __do_fast_syscall_32+0xb6/0x2b0 [ 329.790623][ T9148] do_fast_syscall_32+0x34/0x80 [ 329.790644][ T9148] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 329.790670][ T9148] RIP: 0023:0xf7f51539 [ 329.790694][ T9148] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 329.790714][ T9148] RSP: 002b:00000000f5076590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 329.790743][ T9148] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5076620 [ 329.790757][ T9148] RDX: 000000000000000f RSI: 00000000f73e2ff4 RDI: 0000000000000000 [ 329.790770][ T9148] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 329.790782][ T9148] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 329.790794][ T9148] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 329.790823][ T9148] [ 330.017840][ C1] vkms_vblank_simulate: vblank timer overrun [ 330.164386][ T5961] usb 4-1: 0:2 : does not exist [ 330.190036][ T5961] usb 4-1: USB disconnect, device number 44 [ 330.208510][ T5965] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 330.229630][ T5944] udevd[5944]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 330.275311][ T24] usb 5-1: USB disconnect, device number 49 [ 330.325483][ T5965] ath9k_htc: Failed to initialize the device [ 330.427592][ T44] usb 2-1: ath9k_htc: USB layer deinitialized [ 330.694014][ T9171] xt_TCPMSS: Only works on TCP SYN packets [ 330.796153][ T5897] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 330.999861][ T5897] usb 3-1: Using ep0 maxpacket: 8 [ 331.056482][ T5897] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 331.066150][ T5897] usb 3-1: New USB device found, idVendor=10d2, idProduct=2865, bcdDevice=a4.c9 [ 331.076156][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.096279][ T5897] usb 3-1: config 0 descriptor?? [ 331.135175][ T44] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 331.296305][ T44] usb 2-1: Using ep0 maxpacket: 8 [ 331.312344][ T44] usb 2-1: config 1 interface 0 altsetting 8 endpoint 0x82 has invalid maxpacket 1136, setting to 1024 [ 331.353388][ T44] usb 2-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 1024 [ 331.387194][ T44] usb 2-1: config 1 interface 0 altsetting 8 bulk endpoint 0x3 has invalid maxpacket 32 [ 331.398617][ T44] usb 2-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 331.432803][ T44] usb 2-1: config 1 interface 0 has no altsetting 0 [ 331.449191][ T9187] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode [ 331.463394][ T44] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 331.473271][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.483807][ T44] usb 2-1: Product: 뗪⅘핹Ꝗ鉯ﵳꄑ쭰쒜鐞㺔뵛⮴熻䐼᎝愲腊졨홾待鈻ǔ蔄뾑饩婅ᜐ笥㛄廞䥄웞ퟙ鮎됻禹䓲Ყ搵Ѳ㌉謤䖖ꥻᆫ㷓趼討ㇱ㉌꨻焌荏绸᎞缦皨㐨̭⳱줓찉Ӌ挹ꌠ̨ﶾ䋐㽖６怊䘨罤泖﮴垠硸쵋 [ 331.510432][ C1] vkms_vblank_simulate: vblank timer overrun [ 331.533196][ T44] usb 2-1: Manufacturer: Ь [ 331.543026][ T44] usb 2-1: SerialNumber: А [ 331.699797][ T9181] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 331.714001][ T9181] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 331.964069][ T44] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 331.988588][ T44] usb 2-1: USB disconnect, device number 55 [ 332.276465][ T5897] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 332.334719][ T24] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 332.469694][ T5897] usb 5-1: config 0 has no interfaces? [ 332.496190][ T24] usb 4-1: config 0 has no interfaces? [ 332.563460][ T24] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 332.574258][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.584912][ T5897] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 332.600023][ T24] usb 4-1: Product: syz [ 332.611092][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.638272][ T24] usb 4-1: Manufacturer: syz [ 332.650019][ T5897] usb 5-1: Product: syz [ 332.658791][ T24] usb 4-1: SerialNumber: syz [ 332.666100][ T5897] usb 5-1: Manufacturer: syz [ 332.688686][ T24] usb 4-1: config 0 descriptor?? [ 332.691187][ T5897] usb 5-1: SerialNumber: syz [ 332.738353][ T5897] usb 5-1: config 0 descriptor?? [ 333.462547][ T44] usb 3-1: USB disconnect, device number 35 [ 333.663931][ T9234] xt_TCPMSS: Only works on TCP SYN packets [ 334.463276][ T9253] 8021q: VLANs not supported on caif0 [ 334.960563][ T44] usb 5-1: USB disconnect, device number 50 [ 335.123861][ T2158] usb 4-1: USB disconnect, device number 45 [ 335.414845][ T5925] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 335.567048][ T5925] usb 3-1: Using ep0 maxpacket: 8 [ 335.610235][ T5925] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 335.619645][ T5925] usb 3-1: New USB device found, idVendor=10d2, idProduct=2865, bcdDevice=a4.c9 [ 335.629446][ T5925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.684482][ T5925] usb 3-1: config 0 descriptor?? [ 335.795240][ T44] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 336.008426][ T44] usb 2-1: config 0 has no interfaces? [ 336.017628][ T44] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 336.030781][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.055720][ T44] usb 2-1: Product: syz [ 336.064158][ T44] usb 2-1: Manufacturer: syz [ 336.075111][ T44] usb 2-1: SerialNumber: syz [ 336.152087][ T44] usb 2-1: config 0 descriptor?? [ 336.457738][ T9300] xt_TCPMSS: Only works on TCP SYN packets [ 338.474384][ T5925] usb 2-1: USB disconnect, device number 56 [ 338.734027][ T5925] usb 3-1: USB disconnect, device number 36 [ 339.253616][ T9347] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1050'. [ 339.269186][ T9347] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1050'. [ 340.876914][ T9399] binder: 9397:9399 ioctl 541b 0 returned -22 [ 342.219967][ T9436] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1088'. [ 343.414731][ T9490] bridge_slave_0: left allmulticast mode [ 343.420557][ T9490] bridge_slave_0: left promiscuous mode [ 343.426679][ T9490] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.496567][ T9490] bridge_slave_1: left promiscuous mode [ 343.585458][ T9490] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.780623][ T9490] bond0: (slave bond_slave_0): Releasing backup interface [ 343.817325][ T9490] bond0: (slave bond_slave_1): Releasing backup interface [ 343.877021][ T9490] team0: Port device team_slave_0 removed [ 343.941775][ T9490] team0: Port device team_slave_1 removed [ 343.958028][ T9490] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 343.970023][ T9490] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 344.000337][ T9490] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 344.164954][ T9490] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 344.571911][ T9478] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 344.898773][ T24] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 345.098388][ T24] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 345.107776][ T24] usb 4-1: config 0 has no interface number 0 [ 345.113913][ T24] usb 4-1: config 0 interface 41 has no altsetting 0 [ 345.138783][ T24] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 345.150999][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.182202][ T24] usb 4-1: Product: syz [ 345.388106][ T24] usb 4-1: Manufacturer: syz [ 345.424781][ T24] usb 4-1: SerialNumber: syz [ 345.433230][ T24] usb 4-1: config 0 descriptor?? [ 345.474759][ T5925] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 345.977517][ T5925] usb 5-1: Using ep0 maxpacket: 8 [ 346.027985][ T5925] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 346.064751][ T5925] usb 5-1: New USB device found, idVendor=10d2, idProduct=2865, bcdDevice=a4.c9 [ 346.074209][ T5925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.121046][ T5925] usb 5-1: config 0 descriptor?? [ 346.127974][ T24] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 346.212601][ T24] usb 4-1: USB disconnect, device number 46 [ 346.503621][ T5925] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 346.674719][ T5925] usb 2-1: Using ep0 maxpacket: 32 [ 346.683746][ T5925] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 346.709540][ T5925] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 346.740831][ T5925] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 346.798760][ T5925] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 346.821811][ T5925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.856714][ T5925] usb 2-1: config 0 descriptor?? [ 346.874173][ T9536] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 346.897072][ T5925] hub 2-1:0.0: USB hub found [ 347.100780][ T5925] hub 2-1:0.0: 2 ports detected [ 347.339225][ T5925] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 347.346116][ T5925] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 347.361593][ T5925] usbhid 2-1:0.0: can't add hid device: -71 [ 347.372299][ T5925] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 347.447049][ T5925] usb 2-1: USB disconnect, device number 57 [ 348.132024][ T24] usb 5-1: USB disconnect, device number 51 [ 351.639009][ T9667] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1178'. [ 352.734299][ T9685] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1182'. [ 352.743511][ T9685] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1182'. [ 352.956217][ T9687] program syz.3.1185 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 354.167677][ T30] audit: type=1800 audit(1749583793.808:1498): pid=9717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1198" name="dmabuf" dev="dmabuf" ino=6 res=0 errno=0 [ 354.943166][ T9747] syz_tun: entered promiscuous mode [ 354.968319][ T9747] batadv_slave_0: entered promiscuous mode [ 355.015467][ T9747] hsr1: entered allmulticast mode [ 355.054943][ T9747] syz_tun: entered allmulticast mode [ 355.081805][ T9747] batadv_slave_0: entered allmulticast mode [ 355.132055][ T9753] capability: warning: `syz.1.1214' uses 32-bit capabilities (legacy support in use) [ 355.278961][ T9757] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1216'. [ 356.006902][ T5925] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 356.169761][ T5925] usb 4-1: device descriptor read/64, error -71 [ 356.434808][ T5925] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 356.574746][ T5925] usb 4-1: device descriptor read/64, error -71 [ 356.697928][ T5925] usb usb4-port1: attempt power cycle [ 357.057504][ T5925] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 357.096106][ T5925] usb 4-1: device descriptor read/8, error -71 [ 357.348635][ T5925] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 357.386624][ T5925] usb 4-1: device descriptor read/8, error -71 [ 357.415256][ T9788] syz_tun: entered promiscuous mode [ 357.422018][ T9788] batadv_slave_0: entered promiscuous mode [ 357.428755][ T9788] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 357.436521][ T9788] Cannot create hsr debugfs directory [ 357.442215][ T9788] hsr1: entered allmulticast mode [ 357.448733][ T9788] syz_tun: entered allmulticast mode [ 357.454194][ T9788] batadv_slave_0: entered allmulticast mode [ 357.499299][ T5925] usb usb4-port1: unable to enumerate USB device [ 358.321031][ T9821] syz_tun: entered promiscuous mode [ 358.348766][ T9821] batadv_slave_0: entered promiscuous mode [ 358.375727][ T9821] hsr0: entered allmulticast mode [ 358.380829][ T9821] syz_tun: entered allmulticast mode [ 358.403365][ T9821] batadv_slave_0: entered allmulticast mode [ 358.870125][ T9842] xt_TCPMSS: Only works on TCP SYN packets [ 361.224861][ T24] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 361.319252][ T1106] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 361.425050][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 361.613189][ T24] usb 2-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 361.627579][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.770281][ T2158] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 361.778791][ T24] usb 2-1: config 0 descriptor?? [ 361.980621][ T2158] usb 3-1: Using ep0 maxpacket: 8 [ 362.012938][ T2158] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 362.031155][ T2158] usb 3-1: New USB device found, idVendor=10d2, idProduct=2865, bcdDevice=a4.c9 [ 362.155005][ T2158] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.348491][ T24] dragonrise 0003:0079:0006.0007: unknown main item tag 0x0 [ 362.379349][ T24] dragonrise 0003:0079:0006.0007: unknown main item tag 0x0 [ 362.387017][ T24] dragonrise 0003:0079:0006.0007: unknown main item tag 0x0 [ 362.394370][ T24] dragonrise 0003:0079:0006.0007: unknown main item tag 0x0 [ 362.406096][ T2158] usb 3-1: config 0 descriptor?? [ 362.440214][ T24] dragonrise 0003:0079:0006.0007: unknown main item tag 0x0 [ 362.468626][ T24] dragonrise 0003:0079:0006.0007: hidraw0: USB HID v0.00 Device [HID 0079:0006] on usb-dummy_hcd.1-1/input0 [ 362.480408][ T24] dragonrise 0003:0079:0006.0007: no inputs found [ 362.486943][ T24] dragonrise 0003:0079:0006.0007: force feedback init failed [ 362.563717][ T24] usb 2-1: USB disconnect, device number 58 [ 362.731905][ T9959] fido_id[9959]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 364.384899][ T24] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 364.475567][ T2158] usb 3-1: USB disconnect, device number 37 [ 364.555416][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 364.605132][ T24] usb 4-1: config 0 has an invalid interface number: 96 but max is 0 [ 364.613290][ T24] usb 4-1: config 0 has no interface number 0 [ 364.638667][ T24] usb 4-1: config 0 interface 96 has no altsetting 0 [ 364.676268][ T24] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=b2.44 [ 364.695048][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.707846][ T24] usb 4-1: Product: syz [ 364.712158][ T24] usb 4-1: Manufacturer: syz [ 364.720611][ T24] usb 4-1: SerialNumber: syz [ 364.747595][ T24] usb 4-1: config 0 descriptor?? [ 364.785327][ T24] legousbtower 4-1:0.96: interrupt endpoints not found [ 364.986574][ T5897] usb 4-1: USB disconnect, device number 51 [ 365.141153][T10028] netlink: 2044 bytes leftover after parsing attributes in process `syz.2.1326'. [ 365.171426][T10028] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1326'. [ 367.304955][ T5897] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 367.466806][ T5897] usb 3-1: config 0 has an invalid interface number: 71 but max is 0 [ 367.475148][ T5897] usb 3-1: config 0 has no interface number 0 [ 367.493209][ T5897] usb 3-1: config 0 interface 71 altsetting 0 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 367.551743][ T5897] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0012, bcdDevice=cc.c0 [ 367.562992][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.571981][ T5897] usb 3-1: Product: syz [ 367.660540][ T5897] usb 3-1: Manufacturer: syz [ 368.075823][ T5897] usb 3-1: SerialNumber: syz [ 368.098509][ T5897] usb 3-1: config 0 descriptor?? [ 368.107122][ T5897] kvaser_usb 3-1:0.71: error -ENODEV: Cannot get usb endpoint(s) [ 368.343196][ T5897] usb 3-1: USB disconnect, device number 38 [ 369.279305][T10109] fuse: Bad value for 'user_id' [ 369.284223][T10109] fuse: Bad value for 'user_id' [ 369.412272][ T30] audit: type=1326 audit(1749583809.058:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10106 comm="syz.2.1355" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03539 code=0x7ffc0000 [ 369.440736][ T30] audit: type=1326 audit(1749583809.058:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10106 comm="syz.2.1355" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03539 code=0x7ffc0000 [ 369.463854][ T30] audit: type=1326 audit(1749583809.058:1501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10106 comm="syz.2.1355" exe="/root/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf7f03539 code=0x7ffc0000 [ 369.486412][ T30] audit: type=1326 audit(1749583809.058:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10106 comm="syz.2.1355" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f03539 code=0x7ffc0000 [ 369.528435][ T30] audit: type=1326 audit(1749583809.058:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10106 comm="syz.2.1355" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f03539 code=0x7ffc0000 [ 369.665646][ T30] audit: type=1326 audit(1749583809.058:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10106 comm="syz.2.1355" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03539 code=0x7ffc0000 [ 369.687759][ C1] vkms_vblank_simulate: vblank timer overrun [ 369.704000][ T30] audit: type=1326 audit(1749583809.168:1505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10106 comm="syz.2.1355" exe="/root/syz-executor" sig=0 arch=40000003 syscall=254 compat=1 ip=0xf7f03539 code=0x7ffc0000 [ 369.726489][ T30] audit: type=1326 audit(1749583809.168:1506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10106 comm="syz.2.1355" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03539 code=0x7ffc0000 [ 369.777429][ T30] audit: type=1326 audit(1749583809.168:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10106 comm="syz.2.1355" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03539 code=0x7ffc0000 [ 369.840894][ T30] audit: type=1326 audit(1749583809.168:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10106 comm="syz.2.1355" exe="/root/syz-executor" sig=0 arch=40000003 syscall=441 compat=1 ip=0xf7f03539 code=0x7ffc0000 [ 370.997574][T10164] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1382'. [ 371.016905][T10164] netlink: 'syz.1.1382': attribute type 30 has an invalid length. [ 371.042627][T10164] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.052107][T10164] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.063112][T10164] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.072523][T10164] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.134745][ T5897] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 371.304834][ T5897] usb 5-1: Using ep0 maxpacket: 8 [ 371.340482][ T5897] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 371.357974][ T5897] usb 5-1: New USB device found, idVendor=10d2, idProduct=2865, bcdDevice=a4.c9 [ 371.381097][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.425330][ T5897] usb 5-1: config 0 descriptor?? [ 371.494731][ T5925] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 371.691974][ T5925] usb 3-1: Using ep0 maxpacket: 8 [ 371.703383][ T5925] usb 3-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 371.713234][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.758797][ T5925] usb 3-1: Product: syz [ 371.768445][ T5925] usb 3-1: Manufacturer: syz [ 371.778948][ T5925] usb 3-1: SerialNumber: syz [ 371.797169][ T5925] usb 3-1: config 0 descriptor?? [ 372.022212][ T5925] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 372.449641][ T5925] gspca_sunplus: reg_w_riv err -71 [ 372.459804][ T5925] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 372.527072][ T5925] usb 3-1: USB disconnect, device number 39 [ 373.289427][T10209] bridge_slave_0: left allmulticast mode [ 373.298900][T10209] bridge_slave_0: left promiscuous mode [ 373.377092][T10209] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.691983][T10209] bridge_slave_1: left allmulticast mode [ 373.702513][T10209] bridge_slave_1: left promiscuous mode [ 373.709702][T10209] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.898107][T10209] bond0: (slave bond_slave_0): Releasing backup interface [ 373.976227][ T24] usb 5-1: USB disconnect, device number 52 [ 374.028803][T10209] bond0: (slave bond_slave_1): Releasing backup interface [ 374.184572][T10209] team0: Port device team_slave_0 removed [ 374.251105][T10209] team0: Port device team_slave_1 removed [ 374.286570][T10209] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 374.306319][T10209] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 374.317698][T10209] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 374.326374][T10209] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 374.596447][T10222] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1401'. [ 375.142107][T10239] loop2: detected capacity change from 0 to 7 [ 375.178485][ C0] blk_print_req_error: 10 callbacks suppressed [ 375.178506][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 375.193902][ C0] buffer_io_error: 23 callbacks suppressed [ 375.193923][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 375.235444][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 375.244678][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 375.274827][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 375.284024][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 375.364936][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 375.374169][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 375.400033][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 375.409251][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 375.418686][ T44] IPVS: starting estimator thread 0... [ 375.679612][T10219] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 375.705567][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 375.714833][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 375.735641][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 375.744877][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 375.752852][T10239] ldm_validate_partition_table(): Disk read failed. [ 375.760277][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 375.769485][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 375.777954][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 375.787188][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 375.797194][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 375.806421][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 375.825132][T10239] Dev loop2: unable to read RDB block 0 [ 375.854765][T10243] IPVS: using max 27 ests per chain, 64800 per kthread [ 375.886474][T10239] loop2: unable to read partition table [ 375.892491][T10239] loop2: partition table beyond EOD, truncated [ 375.901630][T10239] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 376.098522][T10247] vivid-000: disconnect [ 376.580016][T10244] vivid-000: reconnect [ 376.817642][ T30] kauditd_printk_skb: 176 callbacks suppressed [ 376.817662][ T30] audit: type=1326 audit(1749583816.468:1685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10256 comm="syz.4.1413" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 376.910044][ T30] audit: type=1326 audit(1749583816.468:1686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10256 comm="syz.4.1413" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 377.146544][ T30] audit: type=1326 audit(1749583816.798:1687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10270 comm="syz.3.1419" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f38539 code=0x7ffc0000 [ 377.224809][ T30] audit: type=1326 audit(1749583816.798:1688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10270 comm="syz.3.1419" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f38539 code=0x7ffc0000 [ 377.324215][ T30] audit: type=1326 audit(1749583816.828:1689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10270 comm="syz.3.1419" exe="/root/syz-executor" sig=0 arch=40000003 syscall=178 compat=1 ip=0xf7f38539 code=0x7ffc0000 [ 377.372621][T10275] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1421'. [ 377.375850][ T30] audit: type=1326 audit(1749583816.828:1690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10270 comm="syz.3.1419" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f38539 code=0x7ffc0000 [ 377.403768][ C1] vkms_vblank_simulate: vblank timer overrun [ 377.496115][ T30] audit: type=1326 audit(1749583816.828:1691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10270 comm="syz.3.1419" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f38539 code=0x7ffc0000 [ 377.572529][ T30] audit: type=1326 audit(1749583816.828:1692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10270 comm="syz.3.1419" exe="/root/syz-executor" sig=0 arch=40000003 syscall=397 compat=1 ip=0xf7f38539 code=0x7ffc0000 [ 377.623997][ T30] audit: type=1326 audit(1749583816.828:1693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10270 comm="syz.3.1419" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f38539 code=0x7ffc0000 [ 377.685227][ T30] audit: type=1326 audit(1749583816.828:1694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10270 comm="syz.3.1419" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f38539 code=0x7ffc0000 [ 377.707399][ C1] vkms_vblank_simulate: vblank timer overrun [ 377.807354][ T24] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 377.955047][ T44] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 377.971150][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 377.995307][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 378.023805][ T24] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 378.052414][ T24] usb 4-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0 [ 378.066350][ T24] usb 4-1: Product: syz [ 378.075171][ T24] usb 4-1: Manufacturer: syz [ 378.093395][ T24] usb 4-1: config 0 descriptor?? [ 378.105196][ T24] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 378.121968][ T44] usb 5-1: Using ep0 maxpacket: 16 [ 378.138990][ T44] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 378.154716][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 378.173603][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 51431, setting to 1024 [ 378.224746][ T44] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 378.245580][ T44] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 378.264899][ T44] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 378.275012][ T44] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 378.287473][ T44] usb 5-1: Manufacturer: syz [ 378.311510][ T44] usb 5-1: config 0 descriptor?? [ 378.598731][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.605746][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.645682][ T44] rc_core: IR keymap rc-hauppauge not found [ 378.664021][ T44] Registered IR keymap rc-empty [ 378.690022][ T44] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 378.716370][ T44] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 378.736020][ T44] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 378.754466][ T44] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input18 [ 378.774320][ T44] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 378.796350][ T44] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 378.823912][ T44] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 378.854139][ T44] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 378.890671][ T44] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 378.915139][ T44] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 378.947236][ T44] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 378.986773][ T44] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 379.005256][ T44] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 379.026702][ T44] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 379.047240][ T44] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 379.056465][ T44] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 379.070293][ T44] usb 5-1: USB disconnect, device number 53 [ 379.174800][ T5925] usb 2-1: new low-speed USB device number 59 using dummy_hcd [ 379.326726][ T5925] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 379.337626][ T5925] usb 2-1: config 0 has no interface number 0 [ 379.343750][ T5925] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 379.357744][ T5925] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 379.369947][ T5925] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 379.379308][ T5925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.390086][ T5925] usb 2-1: config 0 descriptor?? [ 379.396474][T10319] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 379.413773][ T5925] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 379.637136][ T44] usb 2-1: USB disconnect, device number 59 [ 380.328258][T10350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1449'. [ 380.578974][ T24] usb 4-1: USB disconnect, device number 52 [ 380.684705][ T44] usb 5-1: new full-speed USB device number 54 using dummy_hcd [ 380.859409][ T44] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 380.878494][ T44] usb 5-1: config 0 has no interface number 0 [ 380.898172][ T44] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 380.910857][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.949542][ T44] usb 5-1: Product: syz [ 380.955717][ T44] usb 5-1: Manufacturer: syz [ 380.960701][ T44] usb 5-1: SerialNumber: syz [ 380.972429][ T44] usb 5-1: config 0 descriptor?? [ 381.399918][T10358] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 381.583919][T10388] vlan0: entered promiscuous mode [ 381.598744][T10388] vlan0: entered allmulticast mode [ 381.603923][T10388] hsr_slave_1: entered allmulticast mode [ 381.811368][ T44] asix 5-1:0.251 (unnamed net_device) (uninitialized): Invalid PHY address 0x39 [ 381.998183][ T44] usb 5-1: USB disconnect, device number 54 [ 383.524787][ T44] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 383.694800][ T44] usb 5-1: Using ep0 maxpacket: 32 [ 383.734851][ T44] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 383.760719][ T44] usb 5-1: config 0 has no interfaces? [ 383.772654][ T44] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 383.785010][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.834781][ T44] usb 5-1: Product: syz [ 383.849255][ T44] usb 5-1: Manufacturer: syz [ 383.853916][ T44] usb 5-1: SerialNumber: syz [ 383.890751][ T44] usb 5-1: config 0 descriptor?? [ 384.057560][T10472] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1494'. [ 385.441295][T10527] ALSA: mixer_oss: invalid OSS volume '' [ 386.053911][T10554] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1533'. [ 386.293008][ T44] usb 5-1: USB disconnect, device number 55 [ 386.295445][T10559] netlink: 'syz.3.1535': attribute type 1 has an invalid length. [ 386.470711][T10559] 8021q: adding VLAN 0 to HW filter on device bond1 [ 386.644102][T10563] bond1: (slave veth5): Enslaving as an active interface with a down link [ 386.734081][T10568] bond1: (slave veth0_to_bond): making interface the new active one [ 386.802425][T10568] veth0_to_bond: entered promiscuous mode [ 386.809985][T10568] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 387.484728][ T5925] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 387.668055][ T5925] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 387.681637][ T5925] usb 3-1: config 0 interface 0 has no altsetting 0 [ 387.692555][ T5925] usb 3-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 387.703195][ T5925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.723842][ T5925] usb 3-1: config 0 descriptor?? [ 387.731673][T10598] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 387.905123][ T5965] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 388.086860][ T5965] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 388.097578][ T5965] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 388.107168][ T5965] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.119749][ T5965] usb 2-1: config 0 descriptor?? [ 388.129711][ T5965] pwc: Askey VC010 type 2 USB webcam detected. [ 388.154309][T10598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.173345][T10598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.343348][ T5925] usbhid 3-1:0.0: can't add hid device: -71 [ 388.363610][ T5925] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 388.391974][ T5925] usb 3-1: USB disconnect, device number 40 [ 388.540995][ T5965] pwc: recv_control_msg error -32 req 02 val 2b00 [ 388.557485][ T5965] pwc: recv_control_msg error -32 req 02 val 2700 [ 388.578014][ T5965] pwc: recv_control_msg error -32 req 02 val 2c00 [ 388.719174][T10638] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1565'. [ 388.734891][T10638] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1565'. [ 388.811033][ T5965] pwc: recv_control_msg error -32 req 04 val 1300 [ 388.826692][ T5965] pwc: recv_control_msg error -71 req 04 val 1400 [ 388.837638][ T5965] pwc: recv_control_msg error -71 req 02 val 2000 [ 388.852969][ T5965] pwc: recv_control_msg error -71 req 02 val 2100 [ 388.865790][ T5965] pwc: recv_control_msg error -71 req 04 val 1500 [ 388.882696][ T5965] pwc: recv_control_msg error -71 req 02 val 2500 [ 388.895918][ T5965] pwc: recv_control_msg error -71 req 02 val 2400 [ 388.908546][ T5965] pwc: recv_control_msg error -71 req 02 val 2600 [ 388.930427][ T5965] pwc: recv_control_msg error -71 req 02 val 2900 [ 388.965160][ T5965] pwc: recv_control_msg error -71 req 02 val 2800 [ 388.997650][ T5965] pwc: recv_control_msg error -71 req 04 val 1100 [ 389.035012][ T5965] pwc: recv_control_msg error -71 req 04 val 1200 [ 389.059133][ T5965] pwc: Registered as video103. [ 389.086816][ T5965] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input19 [ 389.148545][ T5965] usb 2-1: USB disconnect, device number 60 [ 389.834980][T10671] random: crng reseeded on system resumption [ 390.543615][T10687] IPVS: set_ctl: invalid protocol: 59 172.20.20.187:20004 [ 390.812815][T10694] syz_tun: entered promiscuous mode [ 390.856260][T10694] batadv_slave_0: entered promiscuous mode [ 390.862968][T10694] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 390.894822][T10694] Cannot create hsr debugfs directory [ 390.900465][T10694] hsr1: entered allmulticast mode [ 390.944294][T10694] syz_tun: entered allmulticast mode [ 390.964684][T10694] batadv_slave_0: entered allmulticast mode [ 391.724740][ T24] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 391.945048][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 391.959150][ T24] usb 5-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 391.973817][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.986573][ T24] usb 5-1: Product: syz [ 391.990793][ T24] usb 5-1: Manufacturer: syz [ 391.996027][ T24] usb 5-1: SerialNumber: syz [ 392.003606][ T24] usb 5-1: config 0 descriptor?? [ 392.255356][ T24] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 392.269960][ T24] gspca_sunplus: reg_w_riv err -71 [ 392.289123][ T24] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 392.314202][ T24] usb 5-1: USB disconnect, device number 56 [ 393.104739][ T5965] usb 2-1: new full-speed USB device number 61 using dummy_hcd [ 393.276814][ T5965] usb 2-1: config index 0 descriptor too short (expected 63524, got 36) [ 393.295761][ T5965] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 393.316126][ T1101] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 393.343516][ T5965] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 393.356789][ T5965] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.381132][ T5965] usb 2-1: Product: syz [ 393.398181][ T5965] usb 2-1: Manufacturer: syz [ 393.402842][ T5965] usb 2-1: SerialNumber: syz [ 393.427094][ T5965] usb 2-1: config 0 descriptor?? [ 393.507021][ T5965] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 393.594727][ T24] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 393.634522][ T5944] udevd[5944]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 393.677668][ T5965] usb 2-1: USB disconnect, device number 61 [ 393.770297][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 393.840349][ T24] usb 4-1: config 0 has no interfaces? [ 393.878844][ T24] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 393.900372][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.918926][ T24] usb 4-1: Product: syz [ 393.929432][ T24] usb 4-1: Manufacturer: syz [ 393.939639][ T24] usb 4-1: SerialNumber: syz [ 393.980687][ T24] usb 4-1: config 0 descriptor?? [ 394.488083][ T5965] usb 4-1: USB disconnect, device number 53 [ 394.802920][T10782] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.1627'. [ 396.235184][ T5897] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 396.401301][ T5897] usb 2-1: unable to get BOS descriptor or descriptor too short [ 396.429108][ T5897] usb 2-1: not running at top speed; connect to a high speed hub [ 396.453220][ T5897] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 396.480347][ T5897] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 396.498267][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.524835][ T5897] usb 2-1: Product: syz [ 396.529099][ T5897] usb 2-1: Manufacturer: syz [ 396.533875][ T5897] usb 2-1: SerialNumber: syz [ 396.763279][ T5897] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 396.787780][ T5897] cdc_ncm 2-1:1.0: bind() failure [ 396.809383][ T30] audit: type=1400 audit(1749583836.458:1695): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=10845 comm="syz.4.1658" [ 396.816290][ T5897] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 396.848073][ T5897] cdc_ncm 2-1:1.1: bind() failure [ 396.869378][ T5897] usb 2-1: USB disconnect, device number 62 [ 397.024993][ T44] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 397.194967][ T44] usb 4-1: Using ep0 maxpacket: 32 [ 397.202521][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 397.219282][ T44] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 397.220899][T10858] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 397.235889][T10858] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 397.246812][ T44] usb 4-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 397.258483][T10858] vhci_hcd vhci_hcd.0: Device attached [ 397.259967][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.284669][ T44] usb 4-1: Product: syz [ 397.289183][T10861] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(10) [ 397.295809][T10861] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 397.309826][T10861] vhci_hcd vhci_hcd.0: Device attached [ 397.328839][T10858] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 397.334991][ T44] usb 4-1: Manufacturer: syz [ 397.352740][T10858] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(13) [ 397.354671][ T44] usb 4-1: SerialNumber: syz [ 397.359465][T10858] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 397.388093][ T44] usb 4-1: config 0 descriptor?? [ 397.418903][T10861] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 397.430662][ T44] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 397.437547][T10858] vhci_hcd vhci_hcd.0: Device attached [ 397.464376][T10858] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 397.494355][T10858] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 397.504900][ T5897] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 397.529775][T10858] vhci_hcd vhci_hcd.0: pdev(4) rhport(7) sockfd(21) [ 397.536441][T10858] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 397.542918][ T44] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 397.572481][T10858] vhci_hcd vhci_hcd.0: Device attached [ 397.590396][T10864] vhci_hcd: connection closed [ 397.598531][T10862] vhci_hcd: connection closed [ 397.603832][T10859] vhci_hcd: connection reset by peer [ 397.614359][ T1101] vhci_hcd: stop threads [ 397.654327][ T1101] vhci_hcd: release socket [ 397.673032][ T1101] vhci_hcd: disconnect device [ 397.709049][ T44] usb 4-1: USB disconnect, device number 54 [ 397.715812][ T1101] vhci_hcd: stop threads [ 397.736059][ T1101] vhci_hcd: release socket [ 397.747646][T10873] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1666'. [ 397.750013][ T7541] udevd[7541]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 397.781033][T10870] vhci_hcd: connection closed [ 397.783281][ T1101] vhci_hcd: disconnect device [ 397.815978][ T1101] vhci_hcd: stop threads [ 397.820303][ T1101] vhci_hcd: release socket [ 397.840712][ T1101] vhci_hcd: disconnect device [ 397.845959][ T1101] vhci_hcd: stop threads [ 397.854838][ T1101] vhci_hcd: release socket [ 397.871059][ T1101] vhci_hcd: disconnect device [ 397.970310][T10877] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 397.986828][ T1101] veth0_to_bond: left promiscuous mode [ 398.794329][ T30] audit: type=1400 audit(1749583838.438:1696): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=10909 comm="syz.3.1683" [ 401.395191][ T5925] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 401.546702][ T5925] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 401.557423][ T5925] usb 4-1: config 0 has no interfaces? [ 401.562940][ T5925] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 401.572164][ T5925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.583724][ T5925] usb 4-1: config 0 descriptor?? [ 401.819146][ T5925] usb 4-1: USB disconnect, device number 55 [ 402.588937][ T5897] vhci_hcd: vhci_device speed not set [ 402.690537][ T30] audit: type=1326 audit(1749583842.338:1697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11026 comm="syz.1.1735" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 402.744975][ T30] audit: type=1326 audit(1749583842.338:1698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11026 comm="syz.1.1735" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 402.785748][ T30] audit: type=1326 audit(1749583842.338:1699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11026 comm="syz.1.1735" exe="/root/syz-executor" sig=0 arch=40000003 syscall=438 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 402.850359][ T30] audit: type=1326 audit(1749583842.338:1700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11026 comm="syz.1.1735" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 402.894810][ T30] audit: type=1326 audit(1749583842.338:1701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11026 comm="syz.1.1735" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 403.216153][T11046] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1742'. [ 403.767136][T11064] ALSA: mixer_oss: invalid OSS volume '' [ 405.854739][ T5897] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 406.015360][ T5897] usb 2-1: Using ep0 maxpacket: 32 [ 406.033801][ T5897] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 406.042424][ T5897] usb 2-1: config 0 has no interface number 0 [ 406.054808][ T5897] usb 2-1: config 0 interface 184 has no altsetting 0 [ 406.073513][ T5897] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 406.103076][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.135669][ T5897] usb 2-1: Product: syz [ 406.139917][ T5897] usb 2-1: Manufacturer: syz [ 406.164443][ T5897] usb 2-1: SerialNumber: syz [ 406.201749][ T5897] usb 2-1: config 0 descriptor?? [ 406.238117][ T5897] smsc75xx v1.0.0 [ 406.249765][ T30] audit: type=1326 audit(1749583845.898:1702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11148 comm="syz.2.1791" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03539 code=0x7ffc0000 [ 406.305199][ T30] audit: type=1326 audit(1749583845.898:1703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11148 comm="syz.2.1791" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03539 code=0x7ffc0000 [ 406.372305][ T30] audit: type=1326 audit(1749583845.898:1704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11148 comm="syz.2.1791" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f03539 code=0x7ffc0000 [ 406.394799][ C1] vkms_vblank_simulate: vblank timer overrun [ 406.452309][ T30] audit: type=1326 audit(1749583845.898:1705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11148 comm="syz.2.1791" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03539 code=0x7ffc0000 [ 406.483539][ T30] audit: type=1326 audit(1749583845.898:1706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11148 comm="syz.2.1791" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03539 code=0x7ffc0000 [ 406.712848][ T5897] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 406.780709][ T5897] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 407.266864][ T5897] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 407.330287][ T5897] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 407.381270][ T5897] usb 2-1: USB disconnect, device number 63 [ 411.704856][ T5843] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 411.714917][ T5843] Bluetooth: hci2: Injecting HCI hardware error event [ 411.726194][ T5838] Bluetooth: hci2: hardware error 0x00 [ 412.543691][T11220] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1825'. [ 412.619078][T11220] netlink: 'syz.2.1825': attribute type 18 has an invalid length. [ 412.707741][T11220] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1825'. [ 413.891195][ T5838] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 414.425059][ T44] usb 2-1: new full-speed USB device number 64 using dummy_hcd [ 414.695526][ T44] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 414.739818][ T44] usb 2-1: config 0 has no interface number 0 [ 414.823320][ T44] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 414.879669][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.941980][ T44] usb 2-1: Product: syz [ 414.974896][ T44] usb 2-1: Manufacturer: syz [ 414.985235][ T24] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 415.039380][ T44] usb 2-1: SerialNumber: syz [ 415.165471][ T44] usb 2-1: config 0 descriptor?? [ 415.234953][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 415.338889][ T24] usb 5-1: New USB device found, idVendor=09da, idProduct=0006, bcdDevice= 0.00 [ 415.464921][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.647623][ T24] usb 5-1: config 0 descriptor?? [ 415.734536][ T44] usb 2-1: Firmware: major: 153, minor: 65, hardware type: UNKNOWN (148) [ 415.981930][ T44] usb 2-1: failed to fetch extended address, random address set [ 416.062520][ T44] usb 2-1: atusb_probe: initialization failed, error = -524 [ 416.175835][ T44] atusb 2-1:0.128: probe with driver atusb failed with error -524 [ 416.269889][ T24] a4tech 0003:09DA:0006.0008: unknown main item tag 0x5 [ 416.375398][ T44] usb 2-1: USB disconnect, device number 64 [ 416.500820][ T24] a4tech 0003:09DA:0006.0008: hidraw0: USB HID v20.00 Device [HID 09da:0006] on usb-dummy_hcd.4-1/input0 [ 416.749149][ T24] usb 5-1: USB disconnect, device number 57 [ 417.794645][ C0] sched: DL replenish lagged too much [ 417.953956][T11249] fido_id[11249]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 423.486224][ T5897] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 424.238986][ T5897] usb 3-1: Using ep0 maxpacket: 32 [ 424.456889][ T5897] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 424.460326][ T24] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 424.475713][ T5897] usb 3-1: config 0 has no interface number 0 [ 424.479086][ T5897] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 424.532409][ T5897] usb 3-1: config 0 interface 85 has no altsetting 0 [ 424.722728][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 424.780353][ T5897] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 424.815864][ T24] usb 2-1: config index 0 descriptor too short (expected 1688, got 152) [ 424.853150][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.871836][ T5897] usb 3-1: Product: syz [ 424.887855][ T5897] usb 3-1: Manufacturer: syz [ 424.892525][ T5897] usb 3-1: SerialNumber: syz [ 424.900718][ T24] usb 2-1: config 162 has too many interfaces: 201, using maximum allowed: 32 [ 424.900780][ T24] usb 2-1: config 162 has an invalid descriptor of length 0, skipping remainder of the config [ 424.900833][ T24] usb 2-1: config 162 has 0 interfaces, different from the descriptor's value: 201 [ 424.924974][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 424.925032][ T30] audit: type=1326 audit(1749583864.568:1710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11282 comm="syz.4.1852" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 424.925803][ T30] audit: type=1326 audit(1749583864.578:1711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11282 comm="syz.4.1852" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 424.957221][ T30] audit: type=1326 audit(1749583864.608:1712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11282 comm="syz.4.1852" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 424.957386][ T30] audit: type=1326 audit(1749583864.608:1713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11282 comm="syz.4.1852" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 424.957471][ T30] audit: type=1326 audit(1749583864.608:1714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11282 comm="syz.4.1852" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 424.966068][ T30] audit: type=1326 audit(1749583864.618:1715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11282 comm="syz.4.1852" exe="/root/syz-executor" sig=0 arch=40000003 syscall=55 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 425.339266][ T9881] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 425.374351][ T24] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 425.476637][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.534784][ T24] usb 2-1: Product: syz [ 425.540048][ T24] usb 2-1: Manufacturer: syz [ 425.553123][ T24] usb 2-1: SerialNumber: syz [ 425.611969][ T30] audit: type=1326 audit(1749583864.618:1716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11282 comm="syz.4.1852" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 425.741822][ T5897] usb 3-1: config 0 descriptor?? [ 426.076018][ T24] usb 2-1: USB disconnect, device number 65 [ 426.224395][ T30] audit: type=1326 audit(1749583864.798:1717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11282 comm="syz.4.1852" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 426.395850][ T30] audit: type=1326 audit(1749583865.388:1718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11286 comm="syz.4.1855" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 426.543021][ T5897] appletouch 3-1:0.85: Failed to read mode from device. [ 426.632835][ T5897] appletouch 3-1:0.85: probe with driver appletouch failed with error -5 [ 426.671673][ T30] audit: type=1326 audit(1749583865.388:1719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11286 comm="syz.4.1855" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 427.477536][ T24] usb 4-1: new full-speed USB device number 56 using dummy_hcd [ 427.741124][ T24] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 427.794008][ T24] usb 4-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 427.883069][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.981901][ T24] usb 4-1: Product: syz [ 428.011824][ T24] usb 4-1: Manufacturer: syz [ 428.067551][ T24] usb 4-1: SerialNumber: syz [ 428.150959][ T24] usb 4-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 428.166557][T11314] hub 9-0:1.0: USB hub found [ 428.180144][T11314] hub 9-0:1.0: 1 port detected [ 428.551147][ T5897] usb 3-1: USB disconnect, device number 41 [ 429.223606][ T24] usb 4-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 429.490262][ T24] usb 4-1: USB disconnect, device number 56 [ 432.623811][ T24] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 432.854471][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 432.974820][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 433.038821][ T24] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 433.090999][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 433.171814][ T24] usb 5-1: SerialNumber: syz [ 434.111285][T11349] bridge0: port 1(vlan2) entered blocking state [ 434.395318][T11349] bridge0: port 1(vlan2) entered disabled state [ 434.479057][T11349] vlan2: entered allmulticast mode [ 434.602059][T11349] bridge0: entered allmulticast mode [ 434.779422][T11349] vlan2: left allmulticast mode [ 434.902987][T11349] bridge0: left allmulticast mode [ 435.193386][T11363] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1876'. [ 435.757150][ T24] usb 5-1: 0:2 : does not exist [ 436.165870][ T24] usb 5-1: USB disconnect, device number 58 [ 436.449862][ T5944] udevd[5944]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 440.043042][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.051048][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 452.343524][ T2158] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 455.518847][ T2158] usb 4-1: new full-speed USB device number 57 using dummy_hcd [ 455.854388][ T2158] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 456.004792][ T2158] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.131762][ T2158] usb 4-1: Product: syz [ 456.202059][ T2158] usb 4-1: Manufacturer: syz [ 456.292494][ T2158] usb 4-1: SerialNumber: syz [ 456.366641][ T2158] usb 4-1: config 0 descriptor?? [ 456.972767][ T2158] usb 4-1: Firmware: major: 0, minor: 0, hardware type: UNKNOWN (64) [ 457.079579][ T2158] usb 4-1: Firmware version (0.0) predates our first public release. [ 457.219516][ T2158] usb 4-1: Please update to version 0.2 or newer [ 457.336940][ T1101] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 457.370385][ T2158] usb 4-1: atusb_probe: initialization failed, error = -524 [ 457.521694][ T2158] atusb 4-1:0.0: probe with driver atusb failed with error -524 [ 457.765315][ T2158] usb 4-1: USB disconnect, device number 57 [ 458.855693][T11538] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1956'. [ 464.925885][T11597] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 466.151030][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 466.151080][ T30] audit: type=1326 audit(1749583905.798:1726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11609 comm="syz.2.1987" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f03539 code=0x0 [ 470.875108][ T24] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 471.303712][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 471.492413][ T24] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 471.588934][ T24] usb 3-1: config 0 has no interface number 0 [ 471.680667][ T24] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 471.797862][ T24] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 471.821713][T11651] binder: 11649:11651 unknown command 0 [ 471.867252][T11651] binder: 11649:11651 ioctl c0306201 80000c00 returned -22 [ 471.901544][ T24] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 471.990749][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.112514][ T24] usb 3-1: config 0 descriptor?? [ 472.852879][ T24] uclogic 0003:28BD:0071.0009: failed retrieving string descriptor #100: -71 [ 472.927513][ T24] uclogic 0003:28BD:0071.0009: failed retrieving pen parameters: -71 [ 473.018665][ T24] uclogic 0003:28BD:0071.0009: pen probing failed: -71 [ 473.080674][ T24] uclogic 0003:28BD:0071.0009: failed probing parameters: -71 [ 473.182970][ T24] uclogic 0003:28BD:0071.0009: probe with driver uclogic failed with error -71 [ 473.433561][ T24] usb 3-1: USB disconnect, device number 42 [ 474.316749][ T24] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 474.661388][ T24] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 474.777780][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.880670][ T24] usb 4-1: config 0 descriptor?? [ 474.932263][ T24] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 475.408362][ T24] cpia1 4-1:0.0: unexpected state after lo power cmd: 00 [ 475.611647][ T24] gspca_cpia1: usb_control_msg 01, error -71 [ 475.700651][ T24] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0) [ 475.819880][ T24] usb 4-1: USB disconnect, device number 58 [ 477.713352][T11704] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2025'. [ 477.815061][T11704] tipc: Enabling of bearer rejected, failed to enable media [ 478.320921][T11709] 8021q: VLANs not supported on ipvlan0 [ 482.883778][ T2158] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 483.117545][ T2158] usb 5-1: Using ep0 maxpacket: 16 [ 483.191697][ T2158] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 483.295027][ T2158] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 483.439936][ T2158] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 483.509151][ T2158] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 483.608103][ T2158] usb 5-1: Manufacturer: syz [ 483.699396][ T2158] usb 5-1: config 0 descriptor?? [ 484.822278][T11754] batman_adv: batadv0: Interface deactivated: macvtap1 [ 484.862136][T11754] batman_adv: batadv0: Removing interface: macvtap1 [ 484.969601][T11758] vlan2: entered promiscuous mode [ 485.004210][T11758] vlan2: entered allmulticast mode [ 485.039853][T11758] hsr_slave_1: entered allmulticast mode [ 485.565524][ T2158] usb 5-1: USB disconnect, device number 60 [ 486.663642][ T30] audit: type=1326 audit(1749583926.308:1727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11788 comm="syz.2.2063" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03539 code=0x7ffc0000 [ 486.994934][ T30] audit: type=1326 audit(1749583926.308:1728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11788 comm="syz.2.2063" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03539 code=0x7ffc0000 [ 487.398032][ T30] audit: type=1326 audit(1749583926.368:1729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11788 comm="syz.2.2063" exe="/root/syz-executor" sig=0 arch=40000003 syscall=431 compat=1 ip=0xf7f03539 code=0x7ffc0000 [ 487.621579][T11796] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2065'. [ 487.774236][T11796] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2065'. [ 487.794858][ T30] audit: type=1326 audit(1749583926.368:1730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11788 comm="syz.2.2063" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03539 code=0x7ffc0000 [ 487.967489][T11796] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2065'. [ 488.119970][ T30] audit: type=1326 audit(1749583926.368:1731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11788 comm="syz.2.2063" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03539 code=0x7ffc0000 [ 488.746116][T11805] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 489.226879][ T2158] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 489.316601][ T1101] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 489.447147][ T2158] usb 4-1: Using ep0 maxpacket: 16 [ 489.471094][ T2158] usb 4-1: config 0 has an invalid interface number: 126 but max is 0 [ 489.503520][ T2158] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 489.547046][ T2158] usb 4-1: config 0 has no interface number 0 [ 489.570964][ T2158] usb 4-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 489.604365][ T2158] usb 4-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 489.643706][ T2158] usb 4-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 489.657390][ T24] usb 2-1: new full-speed USB device number 66 using dummy_hcd [ 489.698865][ T2158] usb 4-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 489.769604][ T2158] usb 4-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 489.856152][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 489.875837][ T2158] usb 4-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 489.944823][ T24] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 489.987642][ T2158] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.139023][ T24] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 490.193548][ T2158] usb 4-1: config 0 descriptor?? [ 490.255952][T11809] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 490.268373][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.399804][ T2158] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 490.415434][ T24] usb 2-1: Product: syz [ 490.474773][ T24] usb 2-1: Manufacturer: syz [ 490.515135][ T24] usb 2-1: SerialNumber: syz [ 490.588002][ T24] usb 2-1: config 0 descriptor?? [ 490.644186][ T5946] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 490.904816][ T5946] usb 3-1: Using ep0 maxpacket: 32 [ 490.976054][ T5946] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 491.045182][ T5946] usb 3-1: config 0 has no interface number 0 [ 491.106213][ T2158] usb 4-1: USB disconnect, device number 59 [ 491.119833][ T5946] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 491.194092][ T24] usb 2-1: USB disconnect, device number 66 [ 491.212096][ T5946] usb 3-1: config 0 interface 85 has no altsetting 0 [ 491.257384][ T5946] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 491.327397][ T5946] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.376086][ T5946] usb 3-1: Product: syz [ 491.415261][ T5946] usb 3-1: Manufacturer: syz [ 491.421047][ T5946] usb 3-1: SerialNumber: syz [ 491.498246][ T5946] usb 3-1: config 0 descriptor?? [ 491.831684][ T5946] appletouch 3-1:0.85: Failed to read mode from device. [ 492.151847][ T5946] appletouch 3-1:0.85: probe with driver appletouch failed with error -5 [ 492.371761][ T5946] usb 3-1: USB disconnect, device number 43 [ 493.694817][ T24] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 493.916531][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 493.973201][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 494.070067][ T24] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 494.155835][ T24] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 494.306702][ T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 494.353500][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 494.412289][ T24] usb 2-1: SerialNumber: syz [ 494.435038][T11844] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2087'. [ 494.485710][T11834] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 494.559220][ T24] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 494.806672][ T24] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 494.880863][ T24] usb 2-1: USB disconnect, device number 67 [ 496.046619][T11853] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2092'. [ 496.166902][T11853] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2092'. [ 501.485077][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.495540][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.555534][T11932] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2126'. [ 503.642956][T11932] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2126'. [ 504.309406][T11941] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2129'. [ 507.122711][T11971] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2142'. [ 507.771205][T11981] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2146'. [ 511.383890][T12018] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2159'. [ 514.465645][T12057] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2173'. [ 515.579889][T12073] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2178'. [ 517.868612][T12095] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2188'. [ 517.993167][T12095] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2188'. [ 520.966301][ T5965] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 524.143326][ T1101] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 526.386497][ T5965] usb 4-1: device descriptor read/64, error -110 [ 529.685182][ T5965] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 530.268636][ T5965] usb 4-1: device descriptor read/64, error -32 [ 531.019522][T12143] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2202'. [ 531.124740][ T5965] usb usb4-port1: attempt power cycle [ 531.189307][T12143] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2202'. [ 536.174673][ T5965] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 536.252877][ T5965] usb 4-1: device descriptor read/8, error -32 [ 536.725513][ T5965] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 536.815095][ T5965] usb 4-1: device descriptor read/8, error -32 [ 536.968551][ T5965] raw-gadget.0 gadget.3: failed to queue suspend event [ 537.316662][ T5965] usb usb4-port1: unable to enumerate USB device [ 544.401883][T12180] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2217'. [ 544.648879][T12180] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2217'. [ 546.292089][T12195] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 546.375113][T12195] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 546.388528][T12195] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 546.398502][T12195] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 546.410768][T12195] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 548.514912][T12195] Bluetooth: hci4: command tx timeout [ 550.654872][T12195] Bluetooth: hci4: command tx timeout [ 550.747261][T12115] syz_tun (unregistering): left promiscuous mode [ 550.865756][T12115] raw-gadget.0 gadget.3: failed to queue disconnect event [ 551.799906][ T9881] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 551.814886][ T9881] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.921304][ T9881] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 551.963858][ T9881] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.347016][ T9881] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 552.364513][ T9881] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.498472][ T9881] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 552.532359][ T9881] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.676402][T12195] Bluetooth: hci4: command tx timeout [ 552.767259][T12228] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2230'. [ 552.902010][T12197] chnl_net:caif_netlink_parms(): no params data found [ 552.921602][T12228] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2230'. [ 553.954327][T12197] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.029519][T12197] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.038836][T12197] bridge_slave_0: entered allmulticast mode [ 554.079619][T12197] bridge_slave_0: entered promiscuous mode [ 554.139032][ T9881] bridge_slave_1: left allmulticast mode [ 554.145521][ T9881] bridge_slave_1: left promiscuous mode [ 554.172537][ T9881] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.212398][ T9881] bridge_slave_0: left allmulticast mode [ 554.221455][ T9881] bridge_slave_0: left promiscuous mode [ 554.293778][ T9881] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.386068][ T9881] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 554.756040][T12195] Bluetooth: hci4: command tx timeout [ 555.432335][ T9881] batman_adv: batadv0: Removing interface: ip6gretap1 [ 555.869056][T12278] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2240'. [ 555.891136][T12278] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2240'. [ 555.980851][T12281] xt_TCPMSS: Only works on TCP SYN packets [ 556.601112][ T9881] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 556.631586][ T9881] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 556.761877][ T9881] bond0 (unregistering): Released all slaves [ 556.953813][ T9881] bond1 (unregistering): (slave veth5): Releasing active interface [ 556.965654][ T9881] veth0_to_bond: entered promiscuous mode [ 556.986827][ T9881] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface [ 557.002835][ T9881] bond1 (unregistering): Released all slaves [ 557.048081][T12197] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.065790][T12197] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.073150][T12197] bridge_slave_1: entered allmulticast mode [ 557.100169][T12197] bridge_slave_1: entered promiscuous mode [ 557.928273][T12299] geneve3: entered promiscuous mode [ 557.979455][T12197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 557.990175][ T30] audit: type=1326 audit(1749583997.608:1732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12308 comm="syz.4.2249" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 558.227903][T12197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 558.274717][ T30] audit: type=1326 audit(1749583997.608:1733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12308 comm="syz.4.2249" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 558.674969][ T30] audit: type=1326 audit(1749583997.768:1734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12308 comm="syz.4.2249" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 558.974863][ T30] audit: type=1326 audit(1749583997.768:1735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12308 comm="syz.4.2249" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 559.135029][ T30] audit: type=1326 audit(1749583997.768:1736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12308 comm="syz.4.2249" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 559.206381][ T30] audit: type=1326 audit(1749583997.778:1737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12308 comm="syz.4.2249" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f36558 code=0x7ffc0000 [ 559.294692][ T30] audit: type=1326 audit(1749583997.778:1738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12308 comm="syz.4.2249" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f36558 code=0x7ffc0000 [ 559.324897][ T30] audit: type=1326 audit(1749583997.778:1739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12308 comm="syz.4.2249" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f36558 code=0x7ffc0000 [ 559.353298][ T30] audit: type=1326 audit(1749583997.778:1740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12308 comm="syz.4.2249" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 559.382714][ T30] audit: type=1326 audit(1749583997.778:1741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12308 comm="syz.4.2249" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f36558 code=0x7ffc0000 [ 559.508254][T12318] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2251'. [ 559.520595][T12318] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2251'. [ 559.872945][T12197] team0: Port device team_slave_0 added [ 560.138926][T12197] team0: Port device team_slave_1 added [ 560.423390][T12329] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2254'. [ 560.588240][T12197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 560.604653][T12197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 560.636996][T12337] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2256'. [ 560.652456][T12197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 560.734210][T12331] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 560.782397][ T9881] batadv_slave_0: left promiscuous mode [ 560.807120][ T9881] hsr_slave_0: left promiscuous mode [ 560.817677][ T9881] hsr_slave_1: left promiscuous mode [ 560.830509][ T9881] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 560.867934][ T9881] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 560.888821][ T9881] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 560.902539][ T9881] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 560.987063][ T9881] veth1_macvtap: left promiscuous mode [ 560.993819][ T9881] veth0_macvtap: left promiscuous mode [ 561.006655][ T9881] veth1_vlan: left promiscuous mode [ 561.013022][ T9881] veth0_vlan: left promiscuous mode [ 562.376096][ T24] usb 2-1: new full-speed USB device number 68 using dummy_hcd [ 562.531437][ T9881] team0 (unregistering): Port device team_slave_1 removed [ 562.580968][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 562.617095][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 562.628886][ T24] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 562.648784][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.664124][ T24] usb 2-1: config 0 descriptor?? [ 562.682483][ T9881] team0 (unregistering): Port device team_slave_0 removed [ 562.925899][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.934783][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.869686][T12197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 563.880893][T12197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 563.910124][T12197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 564.528011][T12197] hsr_slave_0: entered promiscuous mode [ 564.647682][T12197] hsr_slave_1: entered promiscuous mode [ 564.692231][T12197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 564.734011][T12197] Cannot create hsr debugfs directory [ 565.571652][ T24] usbhid 2-1:0.0: can't add hid device: -71 [ 565.633011][ T9881] IPVS: stop unused estimator thread 0... [ 565.674798][ T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 565.745203][ T24] usb 2-1: USB disconnect, device number 68 [ 565.788007][T12397] geneve2: entered promiscuous mode [ 567.717815][T12197] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 567.821946][T12197] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 567.998324][T12197] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 568.296739][T12197] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 568.485796][ T5965] hid-generic FFFC:0003:0000.000A: unknown main item tag 0x0 [ 568.493352][ T5965] hid-generic FFFC:0003:0000.000A: unknown main item tag 0x0 [ 568.545196][ T5965] hid-generic FFFC:0003:0000.000A: unknown main item tag 0x0 [ 568.552675][ T5965] hid-generic FFFC:0003:0000.000A: unknown main item tag 0x0 [ 568.561531][ T5965] hid-generic FFFC:0003:0000.000A: unknown main item tag 0x0 [ 568.569165][ T5965] hid-generic FFFC:0003:0000.000A: unknown main item tag 0x0 [ 568.603705][ T5965] hid-generic FFFC:0003:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 568.864723][ T5925] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 568.887136][T12197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 568.983246][T12197] 8021q: adding VLAN 0 to HW filter on device team0 [ 568.985956][T12450] fido_id[12450]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 569.079921][ T5925] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 569.104216][ T1116] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.111460][ T1116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 569.129009][ T5925] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 569.142944][ T5925] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 569.163408][ T9881] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.164331][ T5925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.171715][ T9881] bridge0: port 2(bridge_slave_1) entered forwarding state [ 569.213741][ T5925] usb 3-1: config 0 descriptor?? [ 569.509102][T12197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 569.659487][T12197] veth0_vlan: entered promiscuous mode [ 569.690389][T12197] veth1_vlan: entered promiscuous mode [ 569.812450][T12197] veth0_macvtap: entered promiscuous mode [ 569.840139][T12197] veth1_macvtap: entered promiscuous mode [ 569.942123][T12197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 570.002487][T12197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 570.042529][T12197] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.076400][T12197] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.104748][T12197] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.134649][T12197] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.470545][ T3448] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 570.491887][ T3448] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 570.616976][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 570.628349][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 571.171043][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 571.171087][ T30] audit: type=1326 audit(1749584010.818:1801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12498 comm="syz.4.2294" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 571.268130][ T30] audit: type=1326 audit(1749584010.818:1802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12498 comm="syz.4.2294" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 571.415804][ T30] audit: type=1326 audit(1749584010.888:1803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12498 comm="syz.4.2294" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 571.525387][ T30] audit: type=1326 audit(1749584010.888:1804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12498 comm="syz.4.2294" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 571.577092][ T30] audit: type=1326 audit(1749584010.888:1805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12498 comm="syz.4.2294" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 571.751887][ T5925] usbhid 3-1:0.0: can't add hid device: -71 [ 571.776719][ T30] audit: type=1326 audit(1749584010.888:1806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12498 comm="syz.4.2294" exe="/root/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 571.871249][ T5925] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 571.922088][ T5925] usb 3-1: USB disconnect, device number 44 [ 572.096522][ T30] audit: type=1326 audit(1749584010.888:1807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12498 comm="syz.4.2294" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f36558 code=0x7ffc0000 [ 572.254623][ T30] audit: type=1326 audit(1749584010.888:1808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12498 comm="syz.4.2294" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f36558 code=0x7ffc0000 [ 572.340095][ T30] audit: type=1326 audit(1749584010.888:1809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12498 comm="syz.4.2294" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f36558 code=0x7ffc0000 [ 572.380072][ T30] audit: type=1326 audit(1749584010.888:1810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12498 comm="syz.4.2294" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f36558 code=0x7ffc0000 [ 573.314738][ T5897] usb 2-1: new full-speed USB device number 69 using dummy_hcd [ 573.434683][ T5925] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 573.552803][ T5897] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 573.607326][ T5897] usb 2-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 573.644601][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.654675][ T5925] usb 3-1: Using ep0 maxpacket: 32 [ 573.708092][ T5897] usb 2-1: config 0 descriptor?? [ 573.743739][ T5925] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 573.789006][ T5925] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE1, changing to 0x81 [ 573.823992][ T5925] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 573.856628][ T5925] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 573.958797][ T5925] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 574.099196][ T5925] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice=55.01 [ 574.133206][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.206739][ T5925] usb 3-1: Product: syz [ 574.284866][ T5946] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 574.285669][ T5925] usb 3-1: Manufacturer: syz [ 574.346101][ T5925] usb 3-1: SerialNumber: syz [ 574.372527][ T5925] usb 3-1: config 0 descriptor?? [ 574.484807][ T5946] usb 6-1: Using ep0 maxpacket: 8 [ 574.553942][ T5946] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 574.564416][ T5946] usb 6-1: New USB device found, idVendor=10d2, idProduct=2865, bcdDevice=a4.c9 [ 574.593115][ T5946] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.631795][ T5946] usb 6-1: config 0 descriptor?? [ 575.016152][T12532] xt_CT: No such helper "snmp" [ 575.158023][ T5925] cxacru 3-1:0.0: cxacru_bind: interface has incorrect endpoints [ 575.211213][ T5925] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 575.227914][ T5965] usb 2-1: USB disconnect, device number 69 [ 575.331451][ T5925] usb 3-1: USB disconnect, device number 45 [ 577.753992][ T44] usb 6-1: USB disconnect, device number 2 [ 577.911232][ T30] kauditd_printk_skb: 249 callbacks suppressed [ 577.911277][ T30] audit: type=1326 audit(1749584017.558:2060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12613 comm="syz.4.2322" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 578.020479][ T30] audit: type=1326 audit(1749584017.558:2061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12613 comm="syz.4.2322" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 578.045026][ T30] audit: type=1326 audit(1749584017.568:2062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12613 comm="syz.4.2322" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 578.132706][ T30] audit: type=1326 audit(1749584017.568:2063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12613 comm="syz.4.2322" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 578.300516][ T30] audit: type=1326 audit(1749584017.578:2064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12613 comm="syz.4.2322" exe="/root/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 578.536693][ T30] audit: type=1326 audit(1749584017.588:2065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12613 comm="syz.4.2322" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f36558 code=0x7ffc0000 [ 578.593426][ T30] audit: type=1326 audit(1749584017.588:2066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12613 comm="syz.4.2322" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f36558 code=0x7ffc0000 [ 578.616123][ T30] audit: type=1326 audit(1749584017.588:2067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12613 comm="syz.4.2322" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f36558 code=0x7ffc0000 [ 578.690915][ T30] audit: type=1326 audit(1749584017.588:2068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12613 comm="syz.4.2322" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f36558 code=0x7ffc0000 [ 579.164738][ T30] audit: type=1326 audit(1749584017.588:2069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12613 comm="syz.4.2322" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f36558 code=0x7ffc0000 [ 580.362002][T12655] input: syz1 as /devices/virtual/input/input23 [ 582.275007][ T44] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 582.485643][ T44] usb 5-1: Using ep0 maxpacket: 8 [ 582.563874][ T44] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 582.574493][ T44] usb 5-1: New USB device found, idVendor=10d2, idProduct=2865, bcdDevice=a4.c9 [ 582.585495][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.641451][ T44] usb 5-1: config 0 descriptor?? [ 583.739106][ T30] kauditd_printk_skb: 119 callbacks suppressed [ 583.739126][ T30] audit: type=1326 audit(1749584023.388:2189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12709 comm="syz.0.2340" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 583.845760][ T30] audit: type=1326 audit(1749584023.388:2190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12709 comm="syz.0.2340" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 583.946111][ T30] audit: type=1326 audit(1749584023.458:2191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12709 comm="syz.0.2340" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 584.025470][ T30] audit: type=1326 audit(1749584023.458:2192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12709 comm="syz.0.2340" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 584.065158][ T30] audit: type=1326 audit(1749584023.458:2193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12709 comm="syz.0.2340" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 584.098922][ T30] audit: type=1326 audit(1749584023.478:2194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12709 comm="syz.0.2340" exe="/root/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 584.161042][ T30] audit: type=1326 audit(1749584023.478:2195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12709 comm="syz.0.2340" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f51558 code=0x7ffc0000 [ 584.239630][ T30] audit: type=1326 audit(1749584023.478:2196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12709 comm="syz.0.2340" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f51558 code=0x7ffc0000 [ 584.309231][ T30] audit: type=1326 audit(1749584023.488:2197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12709 comm="syz.0.2340" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f51558 code=0x7ffc0000 [ 584.335082][ T30] audit: type=1326 audit(1749584023.488:2198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12709 comm="syz.0.2340" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f51558 code=0x7ffc0000 [ 585.452129][ T24] usb 5-1: USB disconnect, device number 61 [ 585.485070][T12738] input: syz1 as /devices/virtual/input/input24 [ 585.966383][ T1116] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 588.316127][ T5925] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 588.466095][T12809] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2368'. [ 588.614907][ T5925] usb 6-1: Using ep0 maxpacket: 8 [ 588.670247][ T5925] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 588.679897][ T5925] usb 6-1: New USB device found, idVendor=10d2, idProduct=2865, bcdDevice=a4.c9 [ 588.702344][ T5925] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.015249][ T5925] usb 6-1: config 0 descriptor?? [ 589.245736][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 589.245756][ T30] audit: type=1326 audit(1749584028.898:2237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12822 comm="syz.1.2371" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 589.367173][ T30] audit: type=1326 audit(1749584028.958:2238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12822 comm="syz.1.2371" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 589.486585][ T30] audit: type=1326 audit(1749584029.048:2239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12822 comm="syz.1.2371" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 589.669378][ T30] audit: type=1326 audit(1749584029.048:2240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12822 comm="syz.1.2371" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 589.789161][ T30] audit: type=1326 audit(1749584029.048:2241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12822 comm="syz.1.2371" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 591.144210][ T30] audit: type=1326 audit(1749584030.788:2242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12853 comm="syz.4.2383" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 591.313263][ T30] audit: type=1326 audit(1749584030.788:2243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12853 comm="syz.4.2383" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 591.465166][ T30] audit: type=1326 audit(1749584030.828:2244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12853 comm="syz.4.2383" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 591.570985][T12863] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode active-backup(1) [ 591.586499][ T30] audit: type=1326 audit(1749584030.838:2245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12853 comm="syz.4.2383" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 591.609288][ T30] audit: type=1326 audit(1749584030.838:2246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12853 comm="syz.4.2383" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 591.922972][ T5897] usb 6-1: USB disconnect, device number 3 [ 637.268197][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 637.288352][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 684.665973][ T5838] Bluetooth: hci4: command 0x0406 tx timeout [ 686.163431][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.183694][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 730.532114][ T1106] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 749.531620][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 750.724908][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 750.731936][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P12878/1:b..l [ 750.740455][ C1] rcu: (detected by 1, t=10502 jiffies, g=63721, q=898738 ncpus=2) [ 750.748477][ C1] task:syz.4.2386 state:R running task stack:26888 pid:12878 tgid:12873 ppid:5856 task_flags:0x40044c flags:0x20004006 [ 750.763052][ C1] Call Trace: [ 750.766372][ C1] [ 750.769341][ C1] __schedule+0x16f5/0x4d00 [ 750.773892][ C1] ? free_pages_and_swap_cache+0x4be/0x520 [ 750.779756][ C1] ? preempt_schedule_common+0x83/0xd0 [ 750.785270][ C1] ? __pfx___schedule+0x10/0x10 [ 750.790171][ C1] ? do_raw_spin_lock+0x121/0x290 [ 750.795249][ C1] ? preempt_schedule+0xae/0xc0 [ 750.800151][ C1] preempt_schedule_common+0x83/0xd0 [ 750.805497][ C1] preempt_schedule+0xae/0xc0 [ 750.810222][ C1] ? __pfx_preempt_schedule+0x10/0x10 [ 750.815654][ C1] preempt_schedule_thunk+0x16/0x30 [ 750.820906][ C1] _raw_spin_unlock+0x3f/0x50 [ 750.825629][ C1] unmap_page_range+0x3842/0x41c0 [ 750.830746][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 750.836185][ C1] ? unmap_vmas+0x144/0x580 [ 750.841080][ C1] unmap_vmas+0x399/0x580 [ 750.845460][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 750.850387][ C1] exit_mmap+0x248/0xb50 [ 750.854669][ C1] ? uprobe_clear_state+0x20f/0x290 [ 750.859909][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 750.864736][ C1] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 750.870434][ C1] ? __pfx_exit_aio+0x10/0x10 [ 750.875166][ C1] ? uprobe_clear_state+0x274/0x290 [ 750.880412][ C1] __mmput+0x118/0x420 [ 750.884534][ C1] exit_mm+0x1da/0x2c0 [ 750.888641][ C1] ? __pfx_exit_mm+0x10/0x10 [ 750.893270][ C1] ? rcu_is_watching+0x15/0xb0 [ 750.898082][ C1] do_exit+0x640/0x22e0 [ 750.902286][ C1] ? do_raw_spin_lock+0x121/0x290 [ 750.907364][ C1] ? __pfx_do_exit+0x10/0x10 [ 750.911986][ C1] ? cgroup_freezing+0x20/0x360 [ 750.916893][ C1] do_group_exit+0x21c/0x2d0 [ 750.921530][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 750.926781][ C1] get_signal+0x1286/0x1340 [ 750.931356][ C1] arch_do_signal_or_restart+0x9a/0x750 [ 750.936957][ C1] ? blkcg_maybe_throttle_current+0x1ab/0xb40 [ 750.943064][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 750.948326][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 750.954540][ C1] ? exit_to_user_mode_loop+0x40/0x110 [ 750.960045][ C1] exit_to_user_mode_loop+0x75/0x110 [ 750.965376][ C1] __do_fast_syscall_32+0x1f4/0x2b0 [ 750.970623][ C1] do_fast_syscall_32+0x34/0x80 [ 750.975538][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 750.981921][ C1] RIP: 0023:0xf7f36539 [ 750.986020][ C1] RSP: 002b:00000000f503555c EFLAGS: 00000206 ORIG_RAX: 00000000000001b4 [ 750.994472][ C1] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000000006 [ 751.002579][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 751.010582][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 751.018588][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 751.026596][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 751.034618][ C1] [ 751.037662][ C1] rcu: rcu_preempt kthread starved for 1015 jiffies! g63721 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 751.048792][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 751.058798][ C1] rcu: RCU grace-period kthread stack dump: [ 751.064713][ C1] task:rcu_preempt state:R running task stack:27224 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 751.078347][ C1] Call Trace: [ 751.081653][ C1] [ 751.084615][ C1] __schedule+0x16f5/0x4d00 [ 751.089181][ C1] ? schedule+0x165/0x360 [ 751.093581][ C1] ? __pfx___schedule+0x10/0x10 [ 751.098514][ C1] ? schedule+0x91/0x360 [ 751.102816][ C1] schedule+0x165/0x360 [ 751.107025][ C1] schedule_timeout+0x12b/0x270 [ 751.111923][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 751.117341][ C1] ? __pfx_process_timeout+0x10/0x10 [ 751.122675][ C1] ? prepare_to_swait_event+0x341/0x380 [ 751.128265][ C1] rcu_gp_fqs_loop+0x301/0x1540 [ 751.133188][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 751.139393][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 751.144723][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 751.149974][ C1] rcu_gp_kthread+0x99/0x390 [ 751.154625][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 751.159871][ C1] ? __kthread_parkme+0x7b/0x200 [ 751.164844][ C1] ? __kthread_parkme+0x1a1/0x200 [ 751.169921][ C1] kthread+0x70e/0x8a0 [ 751.174033][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 751.179278][ C1] ? __pfx_kthread+0x10/0x10 [ 751.183930][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 751.189171][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 751.194409][ C1] ? __pfx_kthread+0x10/0x10 [ 751.199046][ C1] ret_from_fork+0x3fc/0x770 [ 751.203681][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 751.208841][ C1] ? __switch_to_asm+0x39/0x70 [ 751.213642][ C1] ? __switch_to_asm+0x33/0x70 [ 751.218454][ C1] ? __pfx_kthread+0x10/0x10 [ 751.223089][ C1] ret_from_fork_asm+0x1a/0x30 [ 751.227902][ C1] [ 751.230951][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 751.237617][ C1] Sending NMI from CPU 1 to CPUs 0: [ 751.242864][ C0] NMI backtrace for cpu 0 [ 751.242886][ C0] CPU: 0 UID: 0 PID: 3405 Comm: kworker/R-bat_e Not tainted 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(full) [ 751.242908][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 751.242921][ C0] Workqueue: bat_events batadv_dat_purge [ 751.242947][ C0] RIP: 0010:kasan_check_range+0x1d4/0x2c0 [ 751.242969][ C0] Code: 01 f3 49 8d 5c 24 07 4d 85 e4 49 0f 49 dc 48 83 e3 f8 49 29 dc 74 12 41 80 3b 00 0f 85 b8 00 00 00 49 ff c3 49 ff cc 75 ee 5b <41> 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 45 84 ff 75 63 41 f7 [ 751.242986][ C0] RSP: 0018:ffffc90000006ff8 EFLAGS: 00000056 [ 751.243011][ C0] RAX: 0000000000000001 RBX: ffffffff99d223c0 RCX: ffffffff819edd4d [ 751.243023][ C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffffff99d223c0 [ 751.243035][ C0] RBP: ffffc900000070e0 R08: ffffffff99d223c3 R09: 1ffffffff33a4478 [ 751.243047][ C0] R10: dffffc0000000000 R11: fffffbfff33a4479 R12: 0000000000000001 [ 751.243059][ C0] R13: ffff888157981cc0 R14: fffffbfff33a4479 R15: 1ffffffff33a4478 [ 751.243071][ C0] FS: 0000000000000000(0000) GS:ffff888125c52000(0000) knlGS:0000000000000000 [ 751.243085][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 751.243097][ C0] CR2: 00000000f44f557c CR3: 000000000df38000 CR4: 00000000003526f0 [ 751.243110][ C0] Call Trace: [ 751.243117][ C0] [ 751.243125][ C0] do_raw_spin_unlock+0x4d/0x240 [ 751.243147][ C0] _raw_spin_unlock_irqrestore+0x78/0x110 [ 751.243172][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 751.243197][ C0] ? skb_release_data+0x62d/0x7c0 [ 751.243220][ C0] debug_check_no_obj_freed+0x451/0x470 [ 751.243248][ C0] ? skb_release_data+0x62d/0x7c0 [ 751.243268][ C0] kmem_cache_free+0x113/0x400 [ 751.243287][ C0] skb_release_data+0x62d/0x7c0 [ 751.243312][ C0] consume_skb+0x9e/0xf0 [ 751.243331][ C0] nft_synproxy_eval_v4+0x376/0x560 [ 751.243358][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 751.243383][ C0] ? nf_ip_checksum+0x13c/0x510 [ 751.243408][ C0] nft_synproxy_do_eval+0x345/0x570 [ 751.243435][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 751.243468][ C0] nft_do_chain+0x40c/0x1920 [ 751.243497][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 751.243533][ C0] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 751.243558][ C0] nft_do_chain_inet+0x25d/0x340 [ 751.243581][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 751.243604][ C0] ? ipt_do_table+0x2a3/0x1640 [ 751.243625][ C0] ? nf_nat_ipv4_local_in+0x223/0x720 [ 751.243644][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 751.243667][ C0] nf_hook_slow+0xc2/0x220 [ 751.243693][ C0] NF_HOOK+0x206/0x3a0 [ 751.243713][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 751.243732][ C0] ? NF_HOOK+0x9a/0x3a0 [ 751.243749][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 751.243766][ C0] ? ip_rcv_finish_core+0xda3/0x1c00 [ 751.243787][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 751.243806][ C0] ? skb_dst+0x4f/0xd0 [ 751.243825][ C0] ? ip_local_deliver+0x12a/0x1b0 [ 751.243845][ C0] NF_HOOK+0x30c/0x3a0 [ 751.243864][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 751.243883][ C0] ? NF_HOOK+0x9a/0x3a0 [ 751.243900][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 751.243917][ C0] ? ip_rcv_core+0x7f7/0xd00 [ 751.243936][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 751.243960][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 751.243977][ C0] __netif_receive_skb+0x143/0x380 [ 751.243995][ C0] ? process_backlog+0x2d5/0x14f0 [ 751.244013][ C0] process_backlog+0x60e/0x14f0 [ 751.244038][ C0] ? __pfx_process_backlog+0x10/0x10 [ 751.244056][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 751.244079][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 751.244105][ C0] __napi_poll+0xc4/0x480 [ 751.244119][ C0] ? net_rx_action+0x46d/0xe30 [ 751.244138][ C0] net_rx_action+0x707/0xe30 [ 751.244154][ C0] ? debug_object_activate+0x2e2/0x420 [ 751.244181][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 751.244206][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 751.244239][ C0] handle_softirqs+0x286/0x870 [ 751.244266][ C0] ? do_softirq+0xec/0x180 [ 751.244292][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 751.244319][ C0] ? batadv_dat_purge+0x2da/0x3c0 [ 751.244340][ C0] do_softirq+0xec/0x180 [ 751.244363][ C0] [ 751.244368][ C0] [ 751.244375][ C0] ? __pfx_do_softirq+0x10/0x10 [ 751.244403][ C0] ? lockdep_softirqs_on+0x13b/0x1c0 [ 751.244428][ C0] __local_bh_enable_ip+0x17d/0x1c0 [ 751.244457][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 751.244482][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 751.244501][ C0] ? batadv_dat_purge+0x2da/0x3c0 [ 751.244522][ C0] batadv_dat_purge+0x2da/0x3c0 [ 751.244543][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 751.244568][ C0] process_scheduled_works+0xae1/0x17b0 [ 751.244606][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 751.244635][ C0] ? assign_work+0x381/0x410 [ 751.244660][ C0] rescuer_thread+0x53c/0xdd0 [ 751.244683][ C0] ? rescuer_thread+0xbb/0xdd0 [ 751.244708][ C0] kthread+0x70e/0x8a0 [ 751.244727][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 751.244742][ C0] ? __pfx_kthread+0x10/0x10 [ 751.244783][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 751.244808][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 751.244832][ C0] ? __pfx_kthread+0x10/0x10 [ 751.244852][ C0] ret_from_fork+0x3fc/0x770 [ 751.244878][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 751.244906][ C0] ? __switch_to_asm+0x39/0x70 [ 751.244924][ C0] ? __switch_to_asm+0x33/0x70 [ 751.244941][ C0] ? __pfx_kthread+0x10/0x10 [ 751.244977][ C0] ret_from_fork_asm+0x1a/0x30 [ 751.245004][ C0] [ 752.409242][ T1306] ieee802154 phy1 wpan1: encryption failed: -22