last executing test programs: 3.505720884s ago: executing program 3 (id=3905): syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x818}, 0x4000) 3.433239559s ago: executing program 4 (id=3907): sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f5, 0x20, 0x70bd28, 0x25dfdbfe, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x4004) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffd74, 0x40004, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x70bd28, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, 'lo\x00'}}, 0x1e) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4810) sendmsg$sock(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1, &(0x7f00000002c0)=[@timestamping={{0x10, 0x1, 0x25, 0x7}}, @mark={{0x10, 0x1, 0x24, 0x4}}, @timestamping={{0x10, 0x1, 0x25, 0x5}}], 0x30}, 0x200088c1) 3.395295861s ago: executing program 1 (id=3908): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_io_uring_setup(0x60db, &(0x7f0000000140)={0x0, 0x7cc, 0x40, 0x3, 0x2c0}, &(0x7f00000001c0), &(0x7f0000000200)) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000003c0)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3}, 0x4) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) keyctl$clear(0x7, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$set_reqkey_keyring(0xf, 0xfffffffb) socket$l2tp(0x2, 0x2, 0x73) r8 = socket(0x15, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r8, 0x84, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=0x4) close_range(r4, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x13, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r1, 0xc, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x6, @remote, 0xfffffffc}}, 0x0, 0x0, 0x6, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x20000000, @remote}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) sendto$inet6(r0, 0x0, 0x0, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2, 0x80000000}, 0x1c) socket$inet6(0x10, 0x2, 0x4) 3.296369174s ago: executing program 3 (id=3909): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r0, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=@newlink={0x54, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, r0, 0x0, 0x1c05}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x3}, @IFLA_GRE_LINK={0x8, 0x1, r0}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x12) 3.231882059s ago: executing program 3 (id=3911): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x45833af92e4b38ff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff3}}}, 0x24}}, 0x0) r4 = socket(0x11, 0x3, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r4, &(0x7f0000000180)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) socket$nl_route(0x10, 0x3, 0x0) 2.76626374s ago: executing program 2 (id=3914): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0xfff0, 0xfff1}, {0x7, 0xffff}}}, 0x24}}, 0x0) 2.48910834s ago: executing program 3 (id=3916): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@fadd={0x58, 0x114, 0x6, {{0x80, 0xe}, 0x0, 0x0, 0xee0, 0x9, 0xa45c, 0x4, 0x20, 0x401}}], 0x58}, 0x4000000) 2.44607262s ago: executing program 4 (id=3917): syz_usb_connect(0x5, 0x27, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb7, 0x5c, 0x7f, 0x40, 0x547, 0x201, 0x1164, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa2, 0xcd, 0xd2}}]}}]}}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) write(r0, &(0x7f0000000180), 0x0) 2.362281799s ago: executing program 0 (id=3918): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x7, 0x2, 0x6, 0x4, 0xe, 0x4}, [@TCA_NETEM_RATE={0x14, 0x6, {0x8001, 0x1, 0x7, 0x3ff}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffc, {0x0, 0x0, 0x0, r6, {}, {0x2, 0xb}, {0x9, 0x6}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x6aa}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c0e9}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.357540772s ago: executing program 2 (id=3919): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, 0x0, 0x0, 0x45833af92e4b38ff, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r3 = socket(0x11, 0x3, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000100001040000000000", @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2.212079157s ago: executing program 3 (id=3920): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f00000000c0)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) close(r3) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x4}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0xffffffff}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x58}}, 0x8000) close(r4) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) getpid() r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x4, 0x1ff, 0x20000000, 0xc, 0x6}, 0x7f, 0x5}, [{0x2a9, 0x6, 0x810, 0x4, 0x5}, {0x4a7, 0x1ff, 0x4, 0x1, 0x7, 0xdd}, {0x9, 0x7, 0x3ff, 0x97, 0xfffffffd, 0x4}, {0x8, 0x0, 0x6, 0x2, 0x7fff, 0x3}, {0x4f9a, 0x5, 0x1, 0x1, 0x2, 0x8}, {0x0, 0x5, 0x1437, 0x1, 0xee57, 0x9}, {0x77d, 0x8, 0x9, 0x6, 0x8, 0x1}, {0x5, 0x6, 0x0, 0x2, 0x1, 0x7fff}, {0x0, 0x3, 0x4235da1, 0x9, 0x7ec9, 0x8}, {0x10000, 0x2, 0x0, 0x1, 0x3, 0x40000009}, {0xd, 0xffff0001, 0x0, 0x6, 0x81, 0x4}, {0xfffffffc, 0x4, 0xffff, 0x2, 0xffffffff, 0xfffffffa}, {0x5, 0xd29, 0x101, 0x3, 0x7, 0xc}, {0x0, 0xfffffff7, 0x1, 0x72b2, 0xc874, 0x3}, {0x3, 0xf, 0x5, 0x1, 0x1ff, 0x6}, {0x9b9b, 0xffff, 0x6, 0xb, 0xb3d, 0x812}, {0x5, 0x7, 0x2, 0x5, 0x5, 0x4}, {0x6, 0x0, 0x9, 0x2, 0x82, 0x2}, {0xfffffff7, 0x6, 0x2, 0x9, 0xff}, {0x4, 0x1, 0x371, 0x8, 0x0, 0xeac}, {0x9, 0x2, 0xd77, 0x8, 0x113, 0x8d3f}, {0x7, 0xffffffff, 0x4, 0x92a4, 0x9, 0x10}, {0x1a4a13f0, 0x9, 0xe, 0x3, 0xad47, 0xf83b}, {0x1ff, 0x5, 0x7, 0xfff, 0x9}, {0x100, 0x4, 0x200, 0x9, 0x1, 0x9df}, {0x9, 0x1, 0x65, 0x9, 0x7}, {0x401, 0x10001, 0x9, 0x200, 0x9, 0x1}, {0x6, 0x10, 0xf, 0x2, 0x6, 0x3}, {0xf23, 0x3ff, 0x0, 0x9, 0xfffffffc}, {0x80000000, 0x6, 0x0, 0x6, 0x6, 0xd}, {0x0, 0x9, 0xd, 0x8000, 0x3, 0x2}, {0x800, 0x9, 0x6, 0x3, 0x7, 0x8}, {0x7, 0x8, 0x7358, 0x7, 0x8, 0xffffffff}, {0x4d9, 0x45db8bad, 0xb3dd, 0x1, 0xbc, 0x7ff}, {0x7, 0x1, 0x3, 0x3, 0x3, 0x7a}, {0x5a1b, 0x1, 0x1, 0x7ff, 0x3, 0x4}, {0x3, 0x7, 0x4, 0x4, 0x1c716ddc, 0x8}, {0xffffffa5, 0x7, 0x0, 0x10, 0x3, 0x5}, {0x8219, 0x0, 0x2, 0x6, 0x3, 0x2}, {0x62, 0xf4, 0x5, 0x4, 0x4, 0x67}, {0x5, 0x4, 0x53, 0x8, 0xc0000000, 0x7}, {0x2, 0x5, 0x2, 0xffff, 0x2, 0x2}, {0x80000001, 0x94c, 0x6, 0xfffffe00, 0x5, 0x7b27}, {0x2, 0x6, 0x1000, 0x9, 0x9}, {0xa, 0x0, 0x9, 0x4, 0xe, 0x9}, {0xdf, 0x7fff, 0x8000, 0x81, 0xff, 0xfffffff8}, {0x2, 0x10000, 0x9, 0x2, 0x2}, {0x2, 0x6, 0x9, 0x1, 0x2, 0x40}, {0xfffffe00, 0x3, 0x74d2, 0x3, 0x80000001, 0x6}, {0x2, 0x8, 0xfffffff7, 0x1, 0x6, 0xa}, {0x8, 0x9, 0x8e, 0x33, 0x10001, 0x22cb}, {0x2, 0x31f5, 0x7, 0x5, 0x7fffffff, 0x1}, {0x9, 0x10001, 0x4, 0x8, 0x7, 0x9}, {0xb, 0x1ff, 0xb, 0x3, 0x5, 0x80000001}, {0x7, 0x80, 0x69b, 0x3, 0x8, 0x339}, {0xee, 0x80000000, 0xfba6, 0x101, 0x5, 0xb}, {0x3, 0x458, 0x6, 0xf, 0x7, 0x8000}, {0x9, 0xfffffffa, 0x1000, 0x8, 0xb, 0xce5a}, {0x400, 0xffff, 0x3, 0xbcbb, 0x7, 0xb}, {0x0, 0xe000, 0x8, 0x8, 0x2, 0x1}, {0x1, 0x0, 0x3, 0x9, 0x0, 0x401}, {0xd, 0x1, 0x2, 0xf, 0x81, 0x5}, {0x6, 0xfff, 0x5, 0x5, 0x4, 0x3649}, {0x7, 0x2, 0x80000000, 0x9, 0x1630, 0x9e73}, {0xb, 0x1b6, 0xc4, 0x7, 0x4, 0xca}, {0x4, 0x5, 0x401, 0x4, 0xfffffff8, 0x40}, {0x8, 0x4594, 0x8, 0x4, 0x0, 0xffff}, {0x100, 0xfffffffb, 0x6, 0x0, 0x9, 0x6}, {0x3, 0xf7b, 0x3, 0x8, 0x6, 0x3}, {0x1, 0x5, 0x3, 0xab9, 0x7, 0x9}, {0xffffffff, 0x0, 0xfc, 0x7, 0x6, 0xc}, {0xf, 0x1, 0xa000000, 0x1, 0x101, 0x1f3}, {0x7ff, 0x9, 0xfffff001, 0x8001, 0x2, 0x2}, {0x4, 0xd9, 0x6, 0x1, 0x9, 0xfffffff8}, {0x3, 0x3, 0x7, 0x9, 0x10, 0x1}, {0x8f000000, 0x100, 0xffffffff, 0x963, 0x2, 0xc}, {0x6, 0x50, 0x6, 0xa, 0x0, 0x3}, {0x649, 0x2, 0x80000001, 0x8, 0x0, 0x1}, {0x8, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x3}, {0xa3, 0x81, 0x9fcb, 0x1, 0x8, 0x7fff}, {0x0, 0x2, 0x750c, 0x0, 0x1, 0xfffffffc}, {0x7ff, 0x7, 0x10000, 0x9, 0x0, 0x88}, {0x5, 0x10001, 0x7fff, 0x81, 0xfffffff4, 0x7}, {0xfce, 0x80000001, 0x5, 0x4, 0x1ff}, {0x3, 0x0, 0x3ff, 0x7fffffff, 0x9, 0x7}, {0xdac, 0x0, 0x4, 0x80000001, 0x3, 0x8}, {0x7, 0xffffffff, 0x6, 0x8, 0x80000001, 0xa}, {0x2, 0x4, 0x4, 0x401, 0xe32}, {0x5, 0x7, 0x6, 0x8, 0x2, 0x2}, {0x10001, 0x100, 0x3, 0x4, 0x9, 0xfffffffa}, {0x2, 0x0, 0x3, 0x6, 0x800, 0x3}, {0x0, 0x0, 0x3, 0x8, 0x1, 0x3}, {0x3, 0x3, 0xffffffff, 0x3, 0x800, 0xde}, {0x5, 0x66, 0x41d0, 0x8001, 0x1, 0x3}, {0x5, 0x7, 0xfffffffc, 0x4, 0x9, 0x92c}, {0x4, 0xffff, 0x0, 0x101, 0x4, 0x1}, {0x9, 0xf667, 0x5, 0x3, 0x5, 0x4}, {0x1731, 0xa, 0x9960, 0x9, 0x1, 0x7}, {0xd, 0xfffffffa, 0x1, 0x3, 0x40, 0x2}, {0x1, 0x4, 0x80000000, 0x80000001, 0x2, 0x6}, {0x7, 0x2, 0xffffff3a, 0x4cf, 0x800, 0x6}, {0x8000, 0x6, 0x1, 0x0, 0x100, 0x80000000}, {0x3b, 0x5562334a, 0x2, 0x2, 0x6, 0x81}, {0x4, 0x96, 0x81, 0x0, 0x101, 0x7}, {0x4, 0xff, 0x9, 0x0, 0x81, 0x29}, {0xa, 0x5, 0x0, 0x9, 0xffffffff, 0xfb4}, {0x80000000, 0x2, 0xffff, 0x39b4, 0x1, 0x6}, {0x61, 0x2d, 0x6, 0x1fe4c5d2, 0x1, 0x3}, {0x1, 0xe2, 0x7ff, 0x7ff, 0x7f, 0x29d0}, {0x0, 0x4, 0xc, 0xd594, 0x9, 0x7}, {0x6, 0x0, 0x7, 0x9, 0x7, 0x9}, {0x80e9, 0x7, 0x9, 0x1, 0x1, 0x18000}, {0x400, 0x9, 0x0, 0x6f}, {0x2, 0x1, 0x6, 0x3, 0xfffff71b, 0xce}, {0x1, 0xff, 0xb, 0x4, 0x800, 0x1}, {0x6, 0x2, 0x8, 0xfff, 0x4, 0x7fff}, {0x0, 0x0, 0x7f, 0x401, 0x7, 0x7fff}, {0x7, 0xb, 0x10000, 0x1, 0x8000, 0xfffff830}, {0x2, 0x4, 0x2, 0x1, 0x6, 0x2b4}, {0x3cd2dbce, 0x929a, 0x9dc, 0x0, 0x8, 0xfffffffc}, {0x6, 0x0, 0xe71, 0xc5c3, 0x3, 0x1}, {0x7, 0x2, 0x197a, 0x7, 0x1, 0x8}, {0xff, 0x2c, 0xfffffc01, 0x1, 0x3, 0x100}, {0x0, 0x6, 0x10001, 0xce7, 0xec, 0x1000}, {0xffffffff, 0x6, 0xffffffff, 0x9, 0x2, 0x6}, {0xfa, 0x9, 0xbf1d, 0x9, 0x80, 0x5}, {0x1c91, 0x5f27, 0x1, 0x0, 0x6, 0x6}, {0x37, 0x622, 0x2, 0x1, 0x7, 0x2}], [{0x5}, {0xccffbfc290ab3baa}, {}, {0x2}, {0x2}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x2}, {0x4}, {0x5}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0xed3229170eca159, 0x1}, {0x2, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x5}, {0x54e1b160e6ec45e8, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x5}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x2}, {}, {0x2}, {0x5, 0x1}, {0x4}, {0x2}, {0x9baeccaf277094c4, 0x1}, {}, {0x2, 0x1}, {}, {}, {0x8f9fc2e2ef57f2f0}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x1, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x4}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x81}, 0x800) read$FUSE(r2, &(0x7f0000000640)={0x2020}, 0x2020) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', 0x0]}) 2.101205937s ago: executing program 0 (id=3921): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b927, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {0xffff, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.589042692s ago: executing program 1 (id=3922): r0 = syz_open_dev$dri(&(0x7f00000003c0), 0x1, 0x80000) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f00000000c0)={0x0, 0x0, 0x9, 0x3}) 1.442288127s ago: executing program 2 (id=3923): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010026bd7000fedbdf250c00000008000300", @ANYRES32=r1, @ANYBLOB="0a00060008021100000110200c0050800500020003000000"], 0x34}, 0x1, 0x0, 0x0, 0x818}, 0x4000) 1.409054869s ago: executing program 1 (id=3924): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r0, 0x29, 0x18, 0x0, 0x0) 1.34621721s ago: executing program 0 (id=3925): open(0x0, 0x80ff, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x0, 0x0) getpid() r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x8) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x2}, 0x94) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) read(r1, &(0x7f00000017c0)=""/4090, 0xffa) 1.164394418s ago: executing program 2 (id=3926): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x45833af92e4b38ff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff3}}}, 0x24}}, 0x0) r4 = socket(0x11, 0x3, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r4, &(0x7f0000000180)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) socket$nl_route(0x10, 0x3, 0x0) 1.164265424s ago: executing program 1 (id=3927): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000006a00831300000000000000ffa60000000000000008000e0000000000080005"], 0x28}, 0x1, 0x0, 0x0, 0x4009050}, 0x8050) epoll_create(0x4) 1.099551374s ago: executing program 1 (id=3928): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@bridge_dellink={0x24, 0x13, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0x4}]}, 0x24}}, 0x0) 949.774826ms ago: executing program 4 (id=3929): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0xfff0, 0xfff1}, {0x7, 0xffff}}}, 0x24}}, 0x0) 881.831787ms ago: executing program 1 (id=3930): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 698.393375ms ago: executing program 4 (id=3931): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x7, 0x2, 0x6, 0x4, 0xe, 0x4}, [@TCA_NETEM_RATE={0x14, 0x6, {0x8001, 0x1, 0x7, 0x3ff}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffc, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0x9, 0x6}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x6aa}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c0e9}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 492.488206ms ago: executing program 3 (id=3932): r0 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0x10) 361.280043ms ago: executing program 2 (id=3933): r0 = syz_io_uring_setup(0x6440, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x3, 0x1, 0x0, 0xce}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x55, 0x2000, @fd_index=0xd, 0x7, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 303.877395ms ago: executing program 0 (id=3934): r0 = syz_open_dev$dri(&(0x7f00000003c0), 0x1, 0x80000) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f00000000c0)={0x0, 0x0, 0x9, 0x3}) 206.765486ms ago: executing program 0 (id=3935): r0 = socket(0x11, 0x800000003, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xa4, 0x24, 0xf0b, 0x80000, 0xfffffffd, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x8, 0x4, 0xfff], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xfffffff8}]}}]}, 0xa4}}, 0x0) 198.56884ms ago: executing program 4 (id=3936): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010026bd7000fedbdf250c00000008000300", @ANYRES32=r1, @ANYBLOB="0a00060008021100000110200c0050800500020003000000"], 0x34}, 0x1, 0x0, 0x0, 0x818}, 0x4000) 119.219069ms ago: executing program 2 (id=3937): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000000801010000ffffe00000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07000140800000010800014080000001090001"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x28008000) 8.264774ms ago: executing program 0 (id=3938): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000180), 0x2) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x1, 0x0, 0x4000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000007, 0x11, r2, 0x0) setresuid(0x0, 0xee00, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000280)=""/194) 0s ago: executing program 4 (id=3939): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}, {&(0x7f00000002c0)=""/185, 0xb9}], 0x2}, 0x5}], 0x1, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x220, 0x100, 0x0) kernel console output (not intermixed with test programs): comm="syz.2.2918" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 649.186563][T14107] hsr_slave_1: entered promiscuous mode [ 649.205434][T14107] debugfs: 'hsr0' already exists in 'hsr' [ 649.213473][T14107] Cannot create hsr debugfs directory [ 649.227228][ T30] audit: type=1326 audit(1758948192.947:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14264 comm="syz.2.2918" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 649.367306][ T1095] hsr_slave_0: left promiscuous mode [ 649.375362][ T51] Bluetooth: hci5: command tx timeout [ 649.399517][ T1095] hsr_slave_1: left promiscuous mode [ 649.414064][ T1095] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 649.443146][ T1095] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 649.491832][ T1095] veth1_macvtap: left promiscuous mode [ 649.506829][ T1095] veth0_macvtap: left promiscuous mode [ 649.514401][ T1095] veth1_vlan: left promiscuous mode [ 649.521188][ T1095] veth0_vlan: left promiscuous mode [ 650.085224][ T6916] tipc: Node number set to 4211062923 [ 650.267106][ T1095] team0 (unregistering): Port device team_slave_1 removed [ 650.317639][ T1095] team0 (unregistering): Port device team_slave_0 removed [ 650.725634][T14267] tipc: Resetting bearer [ 650.792783][T14255] tipc: Disabling bearer [ 651.124206][T14300] netlink: 'syz.4.2930': attribute type 10 has an invalid length. [ 651.455810][ T51] Bluetooth: hci5: command tx timeout [ 651.612232][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 651.612247][ T30] audit: type=1326 audit(1758948195.507:1608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14322 comm="syz.1.2939" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 651.690819][ T30] audit: type=1326 audit(1758948195.547:1609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14322 comm="syz.1.2939" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 651.744301][ T30] audit: type=1326 audit(1758948195.547:1610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14322 comm="syz.1.2939" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 651.748407][T14325] tipc: Enabled bearer , priority 0 [ 651.800601][ T30] audit: type=1326 audit(1758948195.547:1611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14322 comm="syz.1.2939" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 651.833297][ T30] audit: type=1326 audit(1758948195.547:1612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14322 comm="syz.1.2939" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 651.856347][ T30] audit: type=1326 audit(1758948195.547:1613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14322 comm="syz.1.2939" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 651.880222][ T30] audit: type=1326 audit(1758948195.547:1614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14322 comm="syz.1.2939" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 651.943276][ T30] audit: type=1326 audit(1758948195.547:1615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14322 comm="syz.1.2939" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 651.983311][ T30] audit: type=1326 audit(1758948195.547:1616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14322 comm="syz.1.2939" exe="/root/syz-executor" sig=0 arch=40000003 syscall=8 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 652.038120][ T30] audit: type=1326 audit(1758948195.547:1617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14322 comm="syz.1.2939" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 652.067880][T14328] tipc: Resetting bearer [ 652.253352][T14320] tipc: Disabling bearer [ 652.264937][T14349] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 652.313111][T14352] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2946'. [ 652.340118][T14352] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2946'. [ 652.560530][T14361] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2949'. [ 652.601788][T14361] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2949'. [ 652.637419][T14361] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2949'. [ 652.647520][T14107] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 652.694503][T14107] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 652.753468][T14107] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 652.794299][T14107] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 653.110955][T14107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 653.176828][T14107] 8021q: adding VLAN 0 to HW filter on device team0 [ 653.210161][T14388] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2956'. [ 653.229072][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 653.236320][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 653.269181][T10954] bridge0: port 2(bridge_slave_1) entered blocking state [ 653.276392][T10954] bridge0: port 2(bridge_slave_1) entered forwarding state [ 653.701697][T14392] bond0: left promiscuous mode [ 654.171399][T14392] vlan1: left promiscuous mode [ 654.196716][T14392] vlan1: left allmulticast mode [ 654.205776][T14392] veth0_vlan: left allmulticast mode [ 654.246851][T14392] veth1_vlan: left allmulticast mode [ 654.259224][T14392] macvlan1: left allmulticast mode [ 654.649892][T14392] ip6gretap1: left allmulticast mode [ 654.675616][T14392] gretap1: left promiscuous mode [ 654.771946][ T1095] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.853100][ T9191] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.920606][T14107] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 654.967781][ T9191] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.995240][ T9191] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.019568][T14440] netlink: 'syz.1.2964': attribute type 10 has an invalid length. [ 655.112151][T14107] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 655.331697][T14107] veth0_vlan: entered promiscuous mode [ 655.378272][T14107] veth1_vlan: entered promiscuous mode [ 655.498035][T14107] veth0_macvtap: entered promiscuous mode [ 655.522055][T14454] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2967'. [ 655.546197][T14107] veth1_macvtap: entered promiscuous mode [ 655.561132][T14454] 0XD: renamed from gretap0 (while UP) [ 655.577747][T14454] 0XD: entered allmulticast mode [ 655.582537][T14457] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2968'. [ 655.592648][T14454] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 655.687265][T14107] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 655.730029][T14107] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 655.803923][ T9191] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.836957][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.866217][T14467] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2971'. [ 655.897468][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.321979][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.536111][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 656.549005][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 656.654422][ T6927] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 656.674258][ T6927] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 656.718980][T14487] netlink: 'syz.0.2976': attribute type 10 has an invalid length. [ 656.747064][T14487] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 657.098921][T14500] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2979'. [ 657.130310][T14502] usb usb5: usbfs: process 14502 (syz.1.2980) did not claim interface 0 before use [ 657.445360][T14513] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2983'. [ 657.716331][T13885] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 657.731519][T13885] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 657.740293][T13885] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 657.752802][T13885] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 657.765353][T13885] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 657.839688][T14523] loop7: detected capacity change from 0 to 7 [ 657.878385][T14523] Buffer I/O error on dev loop7, logical block 0, async page read [ 657.907756][T14523] Buffer I/O error on dev loop7, logical block 0, async page read [ 657.916729][T14523] Buffer I/O error on dev loop7, logical block 0, async page read [ 657.924883][T14523] Buffer I/O error on dev loop7, logical block 0, async page read [ 657.995883][T14523] Buffer I/O error on dev loop7, logical block 0, async page read [ 658.045448][T14523] Buffer I/O error on dev loop7, logical block 0, async page read [ 658.053421][T14523] Buffer I/O error on dev loop7, logical block 0, async page read [ 658.119212][T14523] ldm_validate_partition_table(): Disk read failed. [ 658.159485][ T51] Bluetooth: hci1: unexpected event for opcode 0x1003 [ 658.175582][T14523] Buffer I/O error on dev loop7, logical block 0, async page read [ 658.184380][T14523] Buffer I/O error on dev loop7, logical block 0, async page read [ 658.224411][T14523] Buffer I/O error on dev loop7, logical block 0, async page read [ 658.275571][T14523] Dev loop7: unable to read RDB block 0 [ 658.301880][T14523] loop7: unable to read partition table [ 658.347473][T14523] loop7: partition table beyond EOD, truncated [ 658.384624][T14523] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 658.524486][T14541] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 658.551634][T14540] netlink: 'syz.1.2990': attribute type 10 has an invalid length. [ 658.773392][T14551] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2996'. [ 658.924489][T14561] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2997'. [ 659.085588][T14417] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 659.092093][T14524] chnl_net:caif_netlink_parms(): no params data found [ 659.242388][ T6927] bridge_slave_1: left allmulticast mode [ 659.253365][ T6927] bridge_slave_1: left promiscuous mode [ 659.257072][T14417] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 659.265540][ T6927] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.292847][T14417] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 659.313007][ T6927] bridge_slave_0: left promiscuous mode [ 659.320902][T14417] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.325091][ T6927] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.347466][T14417] usb 2-1: config 0 descriptor?? [ 659.354730][T14568] input: syz1 as /devices/virtual/input/input23 [ 659.393272][T14417] pwc: Askey VC010 type 2 USB webcam detected. [ 659.502836][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056c81400: rx timeout, send abort [ 659.789326][T14417] pwc: recv_control_msg error -32 req 02 val 2b00 [ 659.806299][T14417] pwc: recv_control_msg error -32 req 02 val 2700 [ 659.813651][T14417] pwc: recv_control_msg error -32 req 02 val 2c00 [ 659.828050][T14417] pwc: recv_control_msg error -32 req 04 val 1000 [ 659.845958][T14417] pwc: recv_control_msg error -32 req 04 val 1300 [ 659.856927][ T51] Bluetooth: hci2: command tx timeout [ 659.874521][T14417] pwc: recv_control_msg error -32 req 04 val 1400 [ 660.002964][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056c83800: rx timeout, send abort [ 660.012444][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056c81400: abort rx timeout. Force session deactivation [ 660.089217][T14417] pwc: recv_control_msg error -71 req 02 val 2100 [ 660.104042][T14417] pwc: recv_control_msg error -71 req 04 val 1500 [ 660.135850][T14417] pwc: recv_control_msg error -71 req 02 val 2500 [ 660.156479][T14417] pwc: recv_control_msg error -71 req 02 val 2400 [ 660.163615][T14417] pwc: recv_control_msg error -71 req 02 val 2600 [ 660.171194][T14417] pwc: recv_control_msg error -71 req 02 val 2900 [ 660.191980][T14417] pwc: recv_control_msg error -71 req 02 val 2800 [ 660.199538][T14417] pwc: recv_control_msg error -71 req 04 val 1100 [ 660.206869][T14417] pwc: recv_control_msg error -71 req 04 val 1200 [ 660.224777][T14417] pwc: Registered as video103. [ 660.247640][T14417] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input24 [ 660.313941][T14417] usb 2-1: USB disconnect, device number 94 [ 660.484969][ T6927] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 660.497097][ T6927] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 660.510703][ T6927] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 660.511422][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056c83800: abort rx timeout. Force session deactivation [ 660.535704][ T6927] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 660.544510][ T6927] bond0 (unregistering): Released all slaves [ 660.577400][T14587] tipc: Enabling of bearer rejected, failed to enable media [ 660.802866][T14524] bridge0: port 1(bridge_slave_0) entered blocking state [ 660.833909][T14524] bridge0: port 1(bridge_slave_0) entered disabled state [ 660.853063][T14612] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 660.866788][T14524] bridge_slave_0: entered allmulticast mode [ 660.875416][T14524] bridge_slave_0: entered promiscuous mode [ 660.882952][ T6927] tipc: Left network mode [ 660.891924][T14524] bridge0: port 2(bridge_slave_1) entered blocking state [ 660.920382][T14524] bridge0: port 2(bridge_slave_1) entered disabled state [ 660.945495][T14524] bridge_slave_1: entered allmulticast mode [ 660.953691][T14524] bridge_slave_1: entered promiscuous mode [ 661.324376][T14524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 661.356843][T14636] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3016'. [ 661.415653][T14524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 661.641802][T14646] tipc: Enabling of bearer rejected, failed to enable media [ 661.830995][T14658] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 661.935935][ T51] Bluetooth: hci2: command tx timeout [ 662.196166][T14524] team0: Port device team_slave_0 added [ 662.219525][T14524] team0: Port device team_slave_1 added [ 662.461654][T14524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 662.475175][T14524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 662.566350][T14524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 662.604872][T14524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 662.635682][T14524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 662.710123][T14524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 662.789191][T14684] tipc: Enabled bearer , priority 0 [ 662.821309][ T6927] hsr_slave_0: left promiscuous mode [ 662.839358][ T6927] hsr_slave_1: left promiscuous mode [ 662.856637][ T6927] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 662.885496][ T6927] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 663.756648][T14719] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3037'. [ 663.906758][T14417] tipc: Node number set to 3552688890 [ 664.015986][ T51] Bluetooth: hci2: command tx timeout [ 664.194288][T14684] syzkaller0: entered promiscuous mode [ 664.200008][T14684] syzkaller0: entered allmulticast mode [ 664.211262][T14691] tipc: Resetting bearer [ 664.218710][T14701] tipc: Enabling of bearer rejected, failed to enable media [ 664.231750][T14682] tipc: Resetting bearer [ 664.278742][T14682] tipc: Disabling bearer [ 664.484642][T14722] pim6reg: entered allmulticast mode [ 664.519252][T14524] hsr_slave_0: entered promiscuous mode [ 664.534126][T14524] hsr_slave_1: entered promiscuous mode [ 664.540822][T14524] debugfs: 'hsr0' already exists in 'hsr' [ 664.550782][T14524] Cannot create hsr debugfs directory [ 665.084520][T14755] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3048'. [ 665.123066][T14756] tipc: Enabling of bearer rejected, failed to enable media [ 665.381405][T14762] netlink: 'syz.3.3050': attribute type 10 has an invalid length. [ 665.491335][T14762] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 666.008190][T14524] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 666.054760][T14524] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 666.094762][T14524] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 666.097682][ T51] Bluetooth: hci2: command tx timeout [ 666.153824][T14524] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 666.455277][T14411] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 666.500481][T14524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 666.554253][T14524] 8021q: adding VLAN 0 to HW filter on device team0 [ 666.593716][ T9191] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.600976][ T9191] bridge0: port 1(bridge_slave_0) entered forwarding state [ 666.637231][T14411] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 666.644285][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.652485][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 666.657943][T14411] usb 1-1: config 0 has no interface number 0 [ 666.674613][T14411] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 666.704788][T14411] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.733533][T14411] usb 1-1: config 0 descriptor?? [ 666.753511][T14411] usb 1-1: selecting invalid altsetting 1 [ 666.780433][T14411] dvb_ttusb_budget: ttusb_init_controller: error [ 666.808943][T14411] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 666.876026][T14524] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 667.000159][T14524] veth0_vlan: entered promiscuous mode [ 667.007763][T14411] DVB: Unable to find symbol cx22700_attach() [ 667.018614][T14824] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 667.037577][T14524] veth1_vlan: entered promiscuous mode [ 667.114286][T14411] DVB: Unable to find symbol tda10046_attach() [ 667.142475][T14411] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 667.155404][T14524] veth0_macvtap: entered promiscuous mode [ 667.169811][T14411] usb 1-1: USB disconnect, device number 7 [ 667.186416][T14524] veth1_macvtap: entered promiscuous mode [ 667.248364][T14524] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 667.339350][T14524] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 667.367367][ T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.379157][T14833] netlink: 'syz.1.3069': attribute type 10 has an invalid length. [ 667.398452][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.435646][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.483422][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.671925][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 667.705285][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 667.785843][T14843] syzkaller1: entered promiscuous mode [ 667.791348][T14843] syzkaller1: entered allmulticast mode [ 667.851269][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 667.890950][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 668.078044][T14859] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2978'. [ 668.146087][T14411] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 668.308718][T14411] usb 2-1: Using ep0 maxpacket: 8 [ 668.316795][T14411] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 668.350517][T14411] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 668.370000][T14411] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.380575][T14411] usb 2-1: Product: syz [ 668.385279][T14411] usb 2-1: Manufacturer: syz [ 668.395228][T14411] usb 2-1: SerialNumber: syz [ 668.401287][T14874] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3081'. [ 668.408861][T14411] usb 2-1: config 0 descriptor?? [ 668.434611][T14411] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 668.453038][T14411] usb 2-1: setting power ON [ 668.479716][T14411] dvb-usb: bulk message failed: -22 (2/0) [ 668.509783][T14411] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 668.537651][T14411] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 668.568497][T14411] usb 2-1: media controller created [ 668.640413][T14854] dvb-usb: bulk message failed: -22 (3/0) [ 668.661826][T14854] dvb-usb: bulk message failed: -22 (3/0) [ 668.681016][T14411] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 668.715405][T14419] IPVS: starting estimator thread 0... [ 668.758667][T14411] usb 2-1: selecting invalid altsetting 6 [ 668.773849][T14411] usb 2-1: digital interface selection failed (-22) [ 668.803372][T14411] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 668.815744][T14883] IPVS: using max 32 ests per chain, 76800 per kthread [ 668.840763][T14411] usb 2-1: setting power OFF [ 668.846508][ T6917] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 668.860744][T14411] dvb-usb: bulk message failed: -22 (2/0) [ 668.868397][T14411] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 668.878561][T14411] (NULL device *): no alternate interface [ 668.946267][T14411] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 669.014410][ T6917] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 669.045337][T14411] usb 2-1: USB disconnect, device number 95 [ 669.053472][ T6917] usb 4-1: config 0 has no interface number 0 [ 669.074093][ T6917] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 669.103654][ T6917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.131940][ T6917] usb 4-1: config 0 descriptor?? [ 669.170918][ T6917] usb 4-1: selecting invalid altsetting 1 [ 669.188677][ T6917] dvb_ttusb_budget: ttusb_init_controller: error [ 669.205281][ T6917] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 669.352695][T14902] netlink: 'syz.0.3087': attribute type 10 has an invalid length. [ 669.426859][ T6917] DVB: Unable to find symbol cx22700_attach() [ 669.450933][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 669.565199][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 669.725193][ T6917] DVB: Unable to find symbol tda10046_attach() [ 669.731409][ T6917] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 669.898167][ T6917] usb 4-1: USB disconnect, device number 43 [ 670.164314][T14918] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3091'. [ 670.624424][T14936] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3096'. [ 670.764192][T14941] syzkaller0: entered promiscuous mode [ 670.781569][T14941] syzkaller0: entered allmulticast mode [ 671.183818][T14958] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3104'. [ 671.657470][T14977] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3111'. [ 673.125425][T14417] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 673.367368][T14417] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 673.395214][ T6917] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 673.405109][T14417] usb 4-1: config 1 has no interface number 0 [ 673.443114][T14417] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 673.482846][T14417] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 673.535082][T14417] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 64 [ 673.575126][ T6917] usb 1-1: Using ep0 maxpacket: 32 [ 673.585150][T14417] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 673.614979][ T6917] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 673.628253][ T6917] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 673.629832][T14417] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 673.686044][ T6917] usb 1-1: New USB device found, idVendor=0c70, idProduct=f00a, bcdDevice= 0.00 [ 673.695055][T14417] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.703083][T14417] usb 4-1: Product: syz [ 673.705139][ T6917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.747582][T14417] usb 4-1: Manufacturer: syz [ 673.752210][T14417] usb 4-1: SerialNumber: syz [ 673.783590][T13885] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 673.785255][ T6917] usb 1-1: config 0 descriptor?? [ 673.800723][T15038] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 673.814499][T13885] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 673.823538][T13885] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 673.835362][T15038] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 673.844134][T13885] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 673.861807][T13885] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 674.067423][T15038] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 674.074712][T15038] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 674.257966][ T6917] aquacomputer_d5next 0003:0C70:F00A.0022: unknown main item tag 0x7 [ 674.284759][ T6917] aquacomputer_d5next 0003:0C70:F00A.0022: hidraw0: USB HID v0.00 Device [HID 0c70:f00a] on usb-dummy_hcd.0-1/input0 [ 674.474093][ T6917] usb 1-1: USB disconnect, device number 8 [ 674.679336][T15059] chnl_net:caif_netlink_parms(): no params data found [ 674.737098][T14417] sierra_net 4-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.3-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 674.770488][ C1] sierra_net 4-1:1.7 wwan0: : unexpected notification 42! [ 674.780574][ C1] sierra_net 4-1:1.7 wwan0: : unexpected notification 6e! [ 674.788005][ C1] sierra_net 4-1:1.7 wwan0: : unexpected notification e2! [ 674.796681][ C1] sierra_net 4-1:1.7 wwan0: : unexpected notification 88! [ 674.804083][ C1] sierra_net 4-1:1.7 wwan0: : unexpected notification f4! [ 674.811474][ C1] sierra_net 4-1:1.7 wwan0: : unexpected notification 11! [ 674.819103][ C1] sierra_net 4-1:1.7 wwan0: : unexpected notification d7! [ 674.826433][ C1] sierra_net 4-1:1.7 wwan0: : unexpected notification 82! [ 674.833755][ C1] sierra_net 4-1:1.7 wwan0: : unexpected notification 7a! [ 674.841111][ C1] sierra_net 4-1:1.7 wwan0: : unexpected notification c1! [ 674.848730][ C1] sierra_net 4-1:1.7 wwan0: : unexpected notification aa! [ 674.856073][ C1] sierra_net 4-1:1.7 wwan0: : unexpected notification 67! [ 674.863417][ C1] sierra_net 4-1:1.7 wwan0: : unexpected notification bd! [ 674.873437][ C1] sierra_net 4-1:1.7 wwan0: : unexpected notification 2e! [ 674.880925][ C1] sierra_net 4-1:1.7 wwan0: : unexpected notification 15! [ 674.888278][ C1] sierra_net 4-1:1.7 wwan0: : unexpected notification c8! [ 674.895663][ C1] sierra_net 4-1:1.7 wwan0: : unexpected notification b9! [ 674.903082][ C1] sierra_net 4-1:1.7 wwan0: : unexpected notification 2b! [ 674.910391][ C1] sierra_net 4-1:1.7 wwan0: : unexpected notification 72! [ 674.917708][ C1] sierra_net 4-1:1.7 wwan0: : unexpected notification 5b! [ 674.925084][ C1] sierra_net 4-1:1.7 wwan0: : unexpected notification f0! [ 674.932418][ C1] sierra_net 4-1:1.7 wwan0: : unexpected notification 50! [ 674.939972][ C1] sierra_net 4-1:1.7 wwan0: : unexpected notification 84! [ 674.947561][ C1] sierra_net 4-1:1.7 wwan0: : unexpected notification cc! [ 674.954934][ C1] sierra_net 4-1:1.7 wwan0: : unexpected notification 88! [ 674.962279][ C1] sierra_net 4-1:1.7 wwan0: : unexpected notification 9d! [ 674.969737][ C1] sierra_net 4-1:1.7 wwan0: : unexpected notification f9! [ 674.977467][ C1] sierra_net 4-1:1.7 wwan0: : unexpected notification 43! [ 674.984810][ C1] sierra_net 4-1:1.7 wwan0: : unexpected notification e7! [ 674.992203][ C1] sierra_net 4-1:1.7 wwan0: : unexpected notification 37! [ 674.999540][ C1] sierra_net 4-1:1.7 wwan0: : unexpected notification 5d! [ 675.133196][T15059] bridge0: port 1(bridge_slave_0) entered blocking state [ 675.145416][T15059] bridge0: port 1(bridge_slave_0) entered disabled state [ 675.168873][T15059] bridge_slave_0: entered allmulticast mode [ 675.202135][T15059] bridge_slave_0: entered promiscuous mode [ 675.228389][T14417] sierra_net 4-1:1.7 wwan0: Submit SYNC failed -71 [ 675.235274][T14418] sierra_net 4-1:1.7 wwan0: usb_control_msg failed, status -71 [ 675.257293][T15059] bridge0: port 2(bridge_slave_1) entered blocking state [ 675.258693][T14417] sierra_net 4-1:1.7 wwan0: Send SYNC failed, status -71 [ 675.271802][T14418] sierra_net 4-1:1.7 wwan0: usb_control_msg failed, status -71 [ 675.291018][T15059] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.298262][T14417] sierra_net 4-1:1.7 wwan0: Submit SYNC failed -71 [ 675.298288][T14417] sierra_net 4-1:1.7 wwan0: Send SYNC failed, status -71 [ 675.310202][T14417] usb 4-1: USB disconnect, device number 44 [ 675.327743][T14417] sierra_net 4-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.3-1, Sierra Wireless USB-to-WWAN Modem [ 675.369959][T15059] bridge_slave_1: entered allmulticast mode [ 675.400154][T15059] bridge_slave_1: entered promiscuous mode [ 675.420071][T15076] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3140'. [ 675.476324][T14417] sierra_net 4-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 675.543751][T15059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 675.590759][T15059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 675.721738][T15059] team0: Port device team_slave_0 added [ 675.739121][T15059] team0: Port device team_slave_1 added [ 675.797770][T15059] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 675.814944][T15059] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 675.875125][T15059] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 675.902676][T15059] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 675.915447][T14418] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 675.920640][T15059] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 675.962636][T13885] Bluetooth: hci3: command tx timeout [ 675.985089][T15059] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 676.141038][T15059] hsr_slave_0: entered promiscuous mode [ 676.155172][T14418] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 676.164507][T14418] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.176354][T15059] hsr_slave_1: entered promiscuous mode [ 676.188879][T14418] usb 1-1: Product: syz [ 676.193069][T14418] usb 1-1: Manufacturer: syz [ 676.202292][T15059] debugfs: 'hsr0' already exists in 'hsr' [ 676.211299][T14418] usb 1-1: SerialNumber: syz [ 676.216123][T15059] Cannot create hsr debugfs directory [ 676.701511][T15059] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.789781][T15059] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.880307][T15095] netlink: 'syz.3.3149': attribute type 10 has an invalid length. [ 676.927338][T15059] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.944455][T15095] macvlan1: entered allmulticast mode [ 676.951521][T15095] veth1_vlan: entered allmulticast mode [ 676.958832][T15095] team0: Device macvlan1 is up. Set it down before adding it as a team port [ 677.020972][T15059] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.072170][T15098] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3150'. [ 677.254827][T14418] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 677.306046][T14418] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 677.329383][T14418] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 677.349287][T14418] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 677.384467][T15059] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 677.414888][T14418] usb 1-1: USB disconnect, device number 9 [ 677.433490][T15059] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 677.490674][T15059] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 677.549679][T15059] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 677.725385][T14417] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 677.769288][T15059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 677.817355][T15059] 8021q: adding VLAN 0 to HW filter on device team0 [ 677.852114][T10954] bridge0: port 1(bridge_slave_0) entered blocking state [ 677.859349][T10954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 677.898794][T14417] usb 4-1: Using ep0 maxpacket: 8 [ 677.919336][T14417] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 677.949017][ T1095] bridge0: port 2(bridge_slave_1) entered blocking state [ 677.956220][ T1095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 677.973599][T14417] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 678.005368][T15116] syzkaller0: entered promiscuous mode [ 678.015423][T14417] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.016158][T13885] Bluetooth: hci3: command tx timeout [ 678.023469][T14417] usb 4-1: Product: syz [ 678.043999][T15116] syzkaller0: entered allmulticast mode [ 678.050070][T14417] usb 4-1: Manufacturer: syz [ 678.097669][T14417] usb 4-1: SerialNumber: syz [ 678.141269][T14417] usb 4-1: config 0 descriptor?? [ 678.159821][T14417] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 678.199565][T14417] usb 4-1: setting power ON [ 678.209549][T14417] dvb-usb: bulk message failed: -22 (2/0) [ 678.261084][T14417] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 678.328371][T14417] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 678.344442][T14417] usb 4-1: media controller created [ 678.426177][T14417] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 678.521248][T14417] usb 4-1: selecting invalid altsetting 6 [ 678.536258][T14417] usb 4-1: digital interface selection failed (-22) [ 678.542877][T14417] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 678.589807][T14417] usb 4-1: setting power OFF [ 678.604602][T14417] dvb-usb: bulk message failed: -22 (2/0) [ 678.618776][T15124] netlink: 'syz.2.3159': attribute type 10 has an invalid length. [ 678.636755][T15059] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 678.643977][T14417] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 678.672427][T14417] (NULL device *): no alternate interface [ 678.701397][T15124] macvlan1: entered allmulticast mode [ 678.759596][T15124] veth1_vlan: entered allmulticast mode [ 678.787605][T14417] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 678.806638][T15124] team0: Port device macvlan1 added [ 678.876499][T14417] usb 4-1: USB disconnect, device number 45 [ 679.034554][T15132] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3161'. [ 679.052902][T15059] veth0_vlan: entered promiscuous mode [ 679.088562][T15059] veth1_vlan: entered promiscuous mode [ 679.215950][T15059] veth0_macvtap: entered promiscuous mode [ 679.256061][T15059] veth1_macvtap: entered promiscuous mode [ 679.334653][T15059] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 679.354480][T15059] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 679.365363][T14417] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 679.381699][ T1155] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.408577][ T1155] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.465621][ T1155] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.499836][ T1155] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.552037][T14417] usb 4-1: Using ep0 maxpacket: 8 [ 679.572358][T14417] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 679.607673][T14417] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 679.635760][T14417] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 679.668795][T14417] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 679.693249][T14417] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 679.704543][T14417] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.734100][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 679.753526][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 679.793680][T15142] netlink: 'syz.0.3166': attribute type 10 has an invalid length. [ 679.927819][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 679.955109][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 679.994875][T14417] usb 4-1: GET_CAPABILITIES returned 0 [ 680.001868][T14417] usbtmc 4-1:16.0: can't read capabilities [ 680.095530][T13885] Bluetooth: hci3: command tx timeout [ 680.217259][ T6917] usb 4-1: USB disconnect, device number 46 [ 680.588247][T15154] netlink: 'syz.2.3171': attribute type 10 has an invalid length. [ 680.836477][T15156] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3172'. [ 682.202976][T13885] Bluetooth: hci3: command tx timeout [ 682.336706][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 682.336720][ T30] audit: type=1800 audit(1758948226.227:1635): pid=15188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3185" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 682.384332][T15204] netlink: 136 bytes leftover after parsing attributes in process `syz.0.3192'. [ 682.689727][T15216] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3197'. [ 683.839785][T15224] delete_channel: no stack [ 684.302964][T15240] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3207'. [ 684.664309][T15246] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 684.736996][T15245] syzkaller0: entered promiscuous mode [ 684.765155][T15245] syzkaller0: entered allmulticast mode [ 685.862040][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.868656][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.294892][T15274] syzkaller0: entered promiscuous mode [ 686.346092][T15275] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3218'. [ 686.363175][T15274] syzkaller0: entered allmulticast mode [ 688.225159][T14403] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 688.385271][T14403] usb 2-1: Using ep0 maxpacket: 16 [ 688.404951][T14403] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 688.434889][T14403] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 688.465144][T14403] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.483455][T14403] usb 2-1: Product: syz [ 688.493572][T14403] usb 2-1: Manufacturer: syz [ 688.569268][T14403] usb 2-1: SerialNumber: syz [ 688.610570][T14403] usb 2-1: config 0 descriptor?? [ 688.615421][ T6917] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 688.659878][T14403] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 688.692573][T14403] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 688.772075][ T6917] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 688.791694][ T6917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.825213][ T6917] usb 4-1: Product: syz [ 688.839754][ T6917] usb 4-1: Manufacturer: syz [ 688.860160][ T6917] usb 4-1: SerialNumber: syz [ 688.884915][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 688.896951][ T6917] usb 4-1: config 0 descriptor?? [ 688.906255][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 688.914828][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 688.926231][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 688.934058][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 688.953034][ T6917] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 047 [ 689.265996][T14403] em28xx 2-1:0.0: chip ID is em2860 [ 689.332763][T15330] chnl_net:caif_netlink_parms(): no params data found [ 689.483412][T15330] bridge0: port 1(bridge_slave_0) entered blocking state [ 689.490853][T15330] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.498432][T15330] bridge_slave_0: entered allmulticast mode [ 689.507569][T15330] bridge_slave_0: entered promiscuous mode [ 689.511256][ T6917] i2c i2c-1: failure reading functionality [ 689.517320][T15330] bridge0: port 2(bridge_slave_1) entered blocking state [ 689.530093][T15330] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.534827][ T6917] i2c i2c-1: connected i2c-tiny-usb device [ 689.537630][T15330] bridge_slave_1: entered allmulticast mode [ 689.553700][T14403] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 689.561797][T14403] em28xx 2-1:0.0: board has no eeprom [ 689.570761][T15330] bridge_slave_1: entered promiscuous mode [ 689.577988][ T6917] usb 4-1: USB disconnect, device number 47 [ 689.635673][T14403] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 689.647151][T14403] em28xx 2-1:0.0: dvb set to bulk mode. [ 689.652791][T14417] em28xx 2-1:0.0: Binding DVB extension [ 689.660715][T15330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 689.684132][T15330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 689.686000][T14403] usb 2-1: USB disconnect, device number 96 [ 689.735694][T14403] em28xx 2-1:0.0: Disconnecting em28xx [ 689.784919][T14417] em28xx 2-1:0.0: Registering input extension [ 689.793785][T15330] team0: Port device team_slave_0 added [ 689.810458][T15330] team0: Port device team_slave_1 added [ 689.855256][T14417] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 689.858481][T15330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 689.863305][T14417] Registered IR keymap rc-empty [ 689.869544][T15330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 689.883326][T14417] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 689.908232][T15330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 689.912714][T14417] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input25 [ 689.924031][T15330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 689.944450][T15330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 689.948794][T14417] em28xx 2-1:0.0: Input extension successfully initialized [ 689.971265][T15330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 690.023750][T14403] em28xx 2-1:0.0: Closing input extension [ 690.098507][T14403] em28xx 2-1:0.0: Freeing device [ 690.243957][T15330] hsr_slave_0: entered promiscuous mode [ 690.251231][T15330] hsr_slave_1: entered promiscuous mode [ 690.266798][T15330] debugfs: 'hsr0' already exists in 'hsr' [ 690.272557][T15330] Cannot create hsr debugfs directory [ 690.300818][T15353] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3247'. [ 690.439721][ T30] audit: type=1326 audit(1758948234.337:1636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15359 comm="syz.0.3252" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 690.502555][ T30] audit: type=1326 audit(1758948234.367:1637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15359 comm="syz.0.3252" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 690.573907][ T30] audit: type=1326 audit(1758948234.367:1638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15359 comm="syz.0.3252" exe="/root/syz-executor" sig=0 arch=40000003 syscall=45 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 690.614844][ T30] audit: type=1326 audit(1758948234.367:1639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15359 comm="syz.0.3252" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 690.685163][ T30] audit: type=1326 audit(1758948234.367:1640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15359 comm="syz.0.3252" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 690.982378][T13885] Bluetooth: hci4: command tx timeout [ 691.498622][T15376] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3255'. [ 692.114916][T15394] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3263'. [ 692.371062][T15330] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 692.402947][T15330] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 692.437721][T15330] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 692.463514][T15330] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 692.693476][T15406] syzkaller0: entered promiscuous mode [ 692.699329][T15406] syzkaller0: entered allmulticast mode [ 692.778089][T15330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 692.857566][T15330] 8021q: adding VLAN 0 to HW filter on device team0 [ 692.865371][T15408] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3262'. [ 692.920496][ T1155] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.927726][ T1155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 693.020980][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state [ 693.028171][ T1155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 693.057724][T13885] Bluetooth: hci4: command tx timeout [ 693.354205][T15330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 693.534777][T15330] veth0_vlan: entered promiscuous mode [ 693.556547][T15330] veth1_vlan: entered promiscuous mode [ 693.610689][T15330] veth0_macvtap: entered promiscuous mode [ 693.629448][T15330] veth1_macvtap: entered promiscuous mode [ 693.656252][T15330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 693.726240][T15330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 693.764985][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.827722][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.861810][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.882940][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.107280][ T9191] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 694.136136][ T9191] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 694.222684][T15433] syzkaller0: entered promiscuous mode [ 694.235306][T15433] syzkaller0: entered allmulticast mode [ 694.329683][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 694.364553][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 695.015222][T14403] usb 2-1: new full-speed USB device number 97 using dummy_hcd [ 695.146967][T13885] Bluetooth: hci4: command tx timeout [ 695.153268][T15465] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3287'. [ 695.166030][T14403] usb 2-1: device descriptor read/64, error -71 [ 695.236759][T15467] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3288'. [ 695.254210][T15467] gretap0: entered promiscuous mode [ 695.260039][T15467] macsec1: entered promiscuous mode [ 695.267727][T15467] macsec1: entered allmulticast mode [ 695.273100][T15467] gretap0: entered allmulticast mode [ 695.283704][T15467] gretap0: left allmulticast mode [ 695.293242][T15467] gretap0: left promiscuous mode [ 695.415608][T14403] usb 2-1: new full-speed USB device number 98 using dummy_hcd [ 695.442136][T15474] syzkaller0: entered promiscuous mode [ 695.448111][T15474] syzkaller0: entered allmulticast mode [ 695.545446][T14403] usb 2-1: device descriptor read/64, error -71 [ 695.658585][T14403] usb usb2-port1: attempt power cycle [ 696.022410][T14403] usb 2-1: new full-speed USB device number 99 using dummy_hcd [ 696.056462][T14403] usb 2-1: device descriptor read/8, error -71 [ 696.396194][T14403] usb 2-1: new full-speed USB device number 100 using dummy_hcd [ 696.432378][T14403] usb 2-1: device descriptor read/8, error -71 [ 696.686857][T14403] usb usb2-port1: unable to enumerate USB device [ 697.074150][T14403] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 697.215421][T13885] Bluetooth: hci4: command tx timeout [ 697.233256][T15523] tipc: Started in network mode [ 697.238373][T14403] usb 1-1: Using ep0 maxpacket: 16 [ 697.244551][T15523] tipc: Node identity 76c17cf2b5f5, cluster identity 4711 [ 697.262572][T14403] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 697.262612][T15523] tipc: Enabled bearer , priority 0 [ 697.273682][T14403] usb 1-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 697.308652][T15525] syzkaller0: entered promiscuous mode [ 697.317622][T14403] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.323400][T15525] syzkaller0: entered allmulticast mode [ 697.344611][T14403] usb 1-1: config 0 descriptor?? [ 697.459872][T15523] tipc: Resetting bearer [ 697.482294][T15521] tipc: Resetting bearer [ 697.516951][T15521] tipc: Disabling bearer [ 697.527032][T15530] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3314'. [ 697.780617][T14403] greenasia 0003:0E8F:0012.0023: reserved main item tag 0xd [ 697.802870][T14403] greenasia 0003:0E8F:0012.0023: unknown main item tag 0x0 [ 697.832444][T14403] greenasia 0003:0E8F:0012.0023: hidraw0: USB HID v0.05 Device [HID 0e8f:0012] on usb-dummy_hcd.0-1/input0 [ 697.873917][T14403] greenasia 0003:0E8F:0012.0023: no inputs found [ 697.990951][T14403] usb 1-1: USB disconnect, device number 10 [ 699.256195][ T30] audit: type=1326 audit(1758948243.157:1641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15579 comm="syz.0.3337" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 699.285158][ T30] audit: type=1326 audit(1758948243.157:1642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15579 comm="syz.0.3337" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 699.344796][ T30] audit: type=1326 audit(1758948243.157:1643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15579 comm="syz.0.3337" exe="/root/syz-executor" sig=0 arch=40000003 syscall=328 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 699.368775][ T30] audit: type=1326 audit(1758948243.157:1644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15579 comm="syz.0.3337" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 699.393455][ T30] audit: type=1326 audit(1758948243.157:1645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15579 comm="syz.0.3337" exe="/root/syz-executor" sig=0 arch=40000003 syscall=248 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 699.417907][ T30] audit: type=1326 audit(1758948243.157:1646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15579 comm="syz.0.3337" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 699.522404][ T30] audit: type=1326 audit(1758948243.157:1647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15579 comm="syz.0.3337" exe="/root/syz-executor" sig=0 arch=40000003 syscall=247 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 699.559896][ T30] audit: type=1326 audit(1758948243.227:1648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15579 comm="syz.0.3337" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 699.598411][T15533] syz.2.3315: vmalloc error: size 2101248, failed to allocated page array size 4104, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 699.622128][T15533] CPU: 1 UID: 0 PID: 15533 Comm: syz.2.3315 Not tainted syzkaller #0 PREEMPT(full) [ 699.622155][T15533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 699.622167][T15533] Call Trace: [ 699.622176][T15533] [ 699.622186][T15533] dump_stack_lvl+0x189/0x250 [ 699.622219][T15533] ? __pfx_dump_stack_lvl+0x10/0x10 [ 699.622242][T15533] ? __pfx__printk+0x10/0x10 [ 699.622268][T15533] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 699.622293][T15533] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 699.622317][T15533] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 699.622343][T15533] warn_alloc+0x214/0x310 [ 699.622377][T15533] ? __pfx_warn_alloc+0x10/0x10 [ 699.622414][T15533] ? __get_vm_area_node+0x28f/0x300 [ 699.622440][T15533] ? hash_netiface_create+0x358/0xfe0 [ 699.622471][T15533] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 699.622530][T15533] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 699.622555][T15533] ? hash_netiface_create+0x358/0xfe0 [ 699.622583][T15533] ? __get_vm_area_node+0x28f/0x300 [ 699.622608][T15533] ? hash_netiface_create+0x358/0xfe0 [ 699.622635][T15533] __vmalloc_node_range_noprof+0x56a/0x12f0 [ 699.622662][T15533] ? hash_netiface_create+0x358/0xfe0 [ 699.622684][T15533] ? __do_fast_syscall_32+0xb6/0x2b0 [ 699.622738][T15533] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 699.622771][T15533] ? rcu_is_watching+0x15/0xb0 [ 699.622791][T15533] ? hash_netiface_create+0x358/0xfe0 [ 699.622814][T15533] ? hash_netiface_create+0x358/0xfe0 [ 699.622836][T15533] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 699.622862][T15533] ? hash_netiface_create+0x358/0xfe0 [ 699.622888][T15533] ? hash_netiface_create+0x2fe/0xfe0 [ 699.622923][T15533] hash_netiface_create+0x358/0xfe0 [ 699.622958][T15533] ? __nla_parse+0x40/0x60 [ 699.622984][T15533] ? __pfx_hash_netiface_create+0x10/0x10 [ 699.623012][T15533] ip_set_create+0xa97/0x1940 [ 699.623040][T15533] ? ip_set_create+0x4a2/0x1940 [ 699.623078][T15533] ? __pfx_ip_set_create+0x10/0x10 [ 699.623147][T15533] nfnetlink_rcv_msg+0xb4a/0x1130 [ 699.623176][T15533] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 699.623224][T15533] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 699.623249][T15533] ? kasan_save_free_info+0x46/0x50 [ 699.623325][T15533] netlink_rcv_skb+0x205/0x470 [ 699.623348][T15533] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 699.623377][T15533] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 699.623411][T15533] ? bpf_lsm_capable+0x9/0x20 [ 699.623434][T15533] ? security_capable+0x7e/0x2e0 [ 699.623471][T15533] nfnetlink_rcv+0x26a/0x2520 [ 699.623501][T15533] ? __dev_queue_xmit+0x1d79/0x3b50 [ 699.623537][T15533] ? __dev_queue_xmit+0x27b/0x3b50 [ 699.623576][T15533] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 699.623603][T15533] ? __pfx___dev_queue_xmit+0x10/0x10 [ 699.623643][T15533] ? ref_tracker_free+0x63a/0x7d0 [ 699.623663][T15533] ? __asan_memcpy+0x40/0x70 [ 699.623684][T15533] ? __pfx_ref_tracker_free+0x10/0x10 [ 699.623721][T15533] ? skb_clone+0x246/0x3a0 [ 699.623749][T15533] ? __netlink_deliver_tap+0x807/0x850 [ 699.623769][T15533] ? netlink_deliver_tap+0x2e/0x1b0 [ 699.623796][T15533] ? netlink_deliver_tap+0x2e/0x1b0 [ 699.623825][T15533] netlink_unicast+0x82f/0x9e0 [ 699.623863][T15533] ? __pfx_netlink_unicast+0x10/0x10 [ 699.623892][T15533] ? netlink_sendmsg+0x642/0xb30 [ 699.623916][T15533] ? skb_put+0x11b/0x210 [ 699.623942][T15533] netlink_sendmsg+0x805/0xb30 [ 699.623973][T15533] ? __pfx_netlink_sendmsg+0x10/0x10 [ 699.623997][T15533] ? __import_iovec+0x5d4/0x7f0 [ 699.624019][T15533] ? aa_sock_msg_perm+0xf1/0x1d0 [ 699.624040][T15533] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 699.624061][T15533] ? __pfx_netlink_sendmsg+0x10/0x10 [ 699.624082][T15533] __sock_sendmsg+0x219/0x270 [ 699.624113][T15533] ____sys_sendmsg+0x505/0x830 [ 699.624143][T15533] ? __pfx_____sys_sendmsg+0x10/0x10 [ 699.624173][T15533] ? __pfx_futex_wake_mark+0x10/0x10 [ 699.624207][T15533] ___sys_sendmsg+0x21f/0x2a0 [ 699.624233][T15533] ? __pfx____sys_sendmsg+0x10/0x10 [ 699.624295][T15533] ? __fget_files+0x2a/0x420 [ 699.624312][T15533] ? __fget_files+0x3a0/0x420 [ 699.624341][T15533] __sys_sendmsg+0x164/0x220 [ 699.624366][T15533] ? __pfx___sys_sendmsg+0x10/0x10 [ 699.624407][T15533] ? lockdep_hardirqs_on+0x9c/0x150 [ 699.624431][T15533] __do_fast_syscall_32+0xb6/0x2b0 [ 699.624454][T15533] ? lockdep_hardirqs_on+0x9c/0x150 [ 699.624479][T15533] do_fast_syscall_32+0x34/0x80 [ 699.624500][T15533] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 699.624523][T15533] RIP: 0023:0xf701e539 [ 699.624541][T15533] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 699.624559][T15533] RSP: 002b:00000000f540e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 699.624579][T15533] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000040 [ 699.624593][T15533] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 0000000000000000 [ 699.624605][T15533] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 699.624616][T15533] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 699.624628][T15533] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 699.624658][T15533] [ 699.624797][T15533] Mem-Info: [ 699.627058][ T30] audit: type=1326 audit(1758948243.227:1649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15579 comm="syz.0.3337" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 699.642198][T15533] active_anon:11033 inactive_anon:0 isolated_anon:0 [ 699.642198][T15533] active_file:14392 inactive_file:4301 isolated_file:0 [ 699.642198][T15533] unevictable:768 dirty:178 writeback:0 [ 699.642198][T15533] slab_reclaimable:11591 slab_unreclaimable:105018 [ 699.642198][T15533] mapped:33201 shmem:4225 pagetables:1313 [ 699.642198][T15533] sec_pagetables:0 bounce:0 [ 699.642198][T15533] kernel_misc_reclaimable:0 [ 699.642198][T15533] free:1305123 free_pcp:11611 free_cma:0 [ 700.233982][T15533] Node 0 active_anon:47544kB inactive_anon:0kB active_file:57568kB inactive_file:17068kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:144500kB dirty:708kB writeback:0kB shmem:18900kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13484kB pagetables:5288kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 700.284593][T15533] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 700.345556][T15533] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 700.424823][T15533] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 700.459549][T15533] Node 0 DMA32 free:1312404kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:53264kB inactive_anon:0kB active_file:57388kB inactive_file:15760kB unevictable:1536kB writepending:708kB present:3129332kB managed:2557404kB mlocked:0kB bounce:0kB free_pcp:27536kB local_pcp:17008kB free_cma:0kB [ 700.546014][T15533] lowmem_reserve[]: 0 0 1 1 1 [ 700.550809][T15533] Node 0 Normal free:20kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:80kB inactive_anon:0kB active_file:180kB inactive_file:1308kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:56kB local_pcp:28kB free_cma:0kB [ 700.635167][T15533] lowmem_reserve[]: 0 0 0 0 0 [ 700.639934][T15533] Node 1 Normal free:3887684kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:14304kB local_pcp:4992kB free_cma:0kB [ 700.737286][T15533] lowmem_reserve[]: 0 0 0 0 0 [ 700.742060][T15533] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 700.755171][T15533] Node 0 DMA32: 15*4kB (UE) 1*8kB (U) 387*16kB (UME) 309*32kB (UM) 162*64kB (M) 122*128kB (ME) 28*256kB (UME) 7*512kB (M) 6*1024kB (UME) 2*2048kB (M) 303*4096kB (M) = 1304212kB [ 700.783590][T15533] Node 0 Normal: 1*4kB (M) 2*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 700.826199][T15533] Node 1 Normal: 205*4kB (UME) 64*8kB (UME) 41*16kB (UME) 158*32kB (UME) 59*64kB (UME) 14*128kB (UME) 7*256kB (UME) 3*512kB (ME) 1*1024kB (M) 2*2048kB (ME) 944*4096kB (UM) = 3887684kB [ 700.857794][T15616] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3350'. [ 700.935373][T15533] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 700.985195][T15533] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 701.038023][T15533] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 701.095464][T15533] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 701.121286][T15533] 27027 total pagecache pages [ 701.131577][T15533] 0 pages in swap cache [ 701.158388][T15533] Free swap = 124996kB [ 701.183377][T15533] Total swap = 124996kB [ 701.196166][T15533] 2097051 pages RAM [ 701.202366][T15533] 0 pages HighMem/MovableOnly [ 701.219775][T15533] 425674 pages reserved [ 701.229645][T15533] 0 pages cma reserved [ 702.885407][T14411] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 703.055494][T14411] usb 4-1: device descriptor read/64, error -71 [ 703.315202][T14411] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 703.490698][T14411] usb 4-1: device descriptor read/64, error -71 [ 703.632531][T14411] usb usb4-port1: attempt power cycle [ 704.005361][T14411] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 704.046354][T14411] usb 4-1: device descriptor read/8, error -71 [ 704.075139][T14401] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 704.216076][T14401] usb 2-1: device descriptor read/64, error -71 [ 704.285292][T14411] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 704.335853][T14411] usb 4-1: device descriptor read/8, error -71 [ 704.445885][T14411] usb usb4-port1: unable to enumerate USB device [ 704.455759][T14401] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 704.456213][T15675] tipc: Started in network mode [ 704.480887][T15675] tipc: Node identity 4e6b002db77a, cluster identity 4711 [ 704.495875][T15675] tipc: Enabled bearer , priority 0 [ 704.523371][T15675] syzkaller0: entered promiscuous mode [ 704.535208][T15675] syzkaller0: entered allmulticast mode [ 704.578379][T15675] tipc: Resetting bearer [ 704.597414][T15674] tipc: Resetting bearer [ 704.605309][T14401] usb 2-1: device descriptor read/64, error -71 [ 704.630688][T15674] tipc: Disabling bearer [ 704.720628][T14401] usb usb2-port1: attempt power cycle [ 705.095185][T14401] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 705.135831][T14401] usb 2-1: device descriptor read/8, error -71 [ 705.137727][T15691] syzkaller0: entered promiscuous mode [ 705.151962][T15691] syzkaller0: entered allmulticast mode [ 705.157787][ T6917] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 705.333308][ T6917] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 705.352780][ T6917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.364036][ T6917] usb 5-1: Product: syz [ 705.373903][ T6917] usb 5-1: Manufacturer: syz [ 705.375682][T14401] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 705.380900][ T6917] usb 5-1: SerialNumber: syz [ 705.438252][T14401] usb 2-1: device descriptor read/8, error -71 [ 705.546233][T14401] usb usb2-port1: unable to enumerate USB device [ 705.648950][T15701] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3386'. [ 706.330253][T15718] syzkaller0: entered promiscuous mode [ 706.348455][T15718] syzkaller0: entered allmulticast mode [ 706.957315][ T6917] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 707.245167][T14417] usb 2-1: new full-speed USB device number 105 using dummy_hcd [ 707.415718][ T6917] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 707.419060][T14417] usb 2-1: device descriptor read/64, error -71 [ 707.487301][ T6917] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 707.515964][ T6917] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 707.554703][ T6917] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 707.587854][ T6917] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 707.634269][ T6917] usb 5-1: USB disconnect, device number 80 [ 707.695847][T14417] usb 2-1: new full-speed USB device number 106 using dummy_hcd [ 707.835144][T14417] usb 2-1: device descriptor read/64, error -71 [ 707.947764][T14417] usb usb2-port1: attempt power cycle [ 707.965303][T14400] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 708.127416][T14400] usb 1-1: New USB device found, idVendor=28bd, idProduct=0074, bcdDevice= 0.00 [ 708.145479][T14400] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.165852][T14400] usb 1-1: config 0 descriptor?? [ 708.295404][T14417] usb 2-1: new full-speed USB device number 107 using dummy_hcd [ 708.336139][T14417] usb 2-1: device descriptor read/8, error -71 [ 708.603067][T14417] usb 2-1: new full-speed USB device number 108 using dummy_hcd [ 708.611602][T14400] uclogic 0003:28BD:0074.0024: interface is invalid, ignoring [ 708.625786][T14417] usb 2-1: device descriptor read/8, error -71 [ 708.735678][T14417] usb usb2-port1: unable to enumerate USB device [ 708.820025][T14417] usb 1-1: USB disconnect, device number 11 [ 709.337749][T15759] tipc: Enabling of bearer rejected, failed to enable media [ 709.365454][T15759] syzkaller0: entered promiscuous mode [ 709.385056][T15759] syzkaller0: entered allmulticast mode [ 709.939311][T15773] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3417'. [ 709.983015][T15777] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3418'. [ 710.606674][T15800] tipc: Enabled bearer , priority 0 [ 710.626382][T15800] syzkaller0: entered promiscuous mode [ 710.633681][T15800] syzkaller0: entered allmulticast mode [ 710.672932][T15800] tipc: Resetting bearer [ 710.688021][T15802] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3429'. [ 710.734198][T15798] tipc: Resetting bearer [ 710.804761][T15798] tipc: Disabling bearer [ 710.805136][T15806] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 710.817230][T15806] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 710.849047][T15806] vhci_hcd vhci_hcd.0: Device attached [ 710.866792][T15811] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 710.915990][T15806] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 710.938267][T15806] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 710.945288][T14401] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 710.974657][T15807] vhci_hcd: connection closed [ 710.981849][ T13] vhci_hcd: stop threads [ 711.011625][ T13] vhci_hcd: release socket [ 711.032850][ T13] vhci_hcd: disconnect device [ 711.085855][T14401] usb 4-1: device descriptor read/64, error -71 [ 711.096220][T14400] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 711.109823][T14400] usb 33-1: enqueue for inactive port 0 [ 711.249874][T14400] vhci_hcd: vhci_device speed not set [ 711.325434][T14401] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 711.465228][T14401] usb 4-1: device descriptor read/64, error -71 [ 711.587051][T14401] usb usb4-port1: attempt power cycle [ 711.887511][T15836] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3443'. [ 711.940472][T14401] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 712.035087][T14401] usb 4-1: device descriptor read/8, error -71 [ 712.295159][T14401] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 712.383917][T14401] usb 4-1: device descriptor read/8, error -71 [ 712.524087][T14401] usb usb4-port1: unable to enumerate USB device [ 713.424310][T14419] IPVS: starting estimator thread 0... [ 713.546352][T15862] IPVS: using max 31 ests per chain, 74400 per kthread [ 715.246271][T14403] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 715.265362][T14401] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 715.406879][T14403] usb 5-1: Using ep0 maxpacket: 16 [ 715.426443][T14401] usb 1-1: no configurations [ 715.431331][T14403] usb 5-1: config 82 has an invalid interface number: 185 but max is 0 [ 715.439803][T14401] usb 1-1: can't read configurations, error -22 [ 715.495170][T14403] usb 5-1: config 82 has no interface number 0 [ 715.501422][T14403] usb 5-1: config 82 interface 185 has no altsetting 0 [ 715.529966][T14403] usb 5-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=58.82 [ 715.550738][T14403] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.575482][T14403] usb 5-1: Product: syz [ 715.579674][T14403] usb 5-1: Manufacturer: syz [ 715.596272][T14403] usb 5-1: SerialNumber: syz [ 715.635214][T14401] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 715.799217][T14401] usb 1-1: no configurations [ 715.803900][T14401] usb 1-1: can't read configurations, error -22 [ 715.933814][T14403] usb_ehset_test 5-1:82.185: probe with driver usb_ehset_test failed with error -32 [ 715.948095][T14403] usb 5-1: USB disconnect, device number 81 [ 715.954420][T14401] usb usb1-port1: attempt power cycle [ 715.985123][ T5866] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 716.145097][ T5866] usb 4-1: Using ep0 maxpacket: 32 [ 716.158216][ T5866] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 716.167491][ T5866] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.177572][ T5866] usb 4-1: Product: syz [ 716.182787][ T5866] usb 4-1: Manufacturer: syz [ 716.187891][ T5866] usb 4-1: SerialNumber: syz [ 716.202888][ T5866] usb 4-1: config 0 descriptor?? [ 716.220680][ T5866] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 716.305264][T14401] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 716.336604][T14401] usb 1-1: no configurations [ 716.341443][T14401] usb 1-1: can't read configurations, error -22 [ 716.485165][T14401] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 716.516750][T14401] usb 1-1: no configurations [ 716.521621][T14401] usb 1-1: can't read configurations, error -22 [ 716.545564][T14401] usb usb1-port1: unable to enumerate USB device [ 716.820549][ T5866] gspca_ov534_9: reg_w failed -71 [ 716.996153][T15938] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3479'. [ 717.035137][T14400] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 717.116181][ T5866] gspca_ov534_9: Unknown sensor 0000 [ 717.116275][ T5866] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 717.162510][ T5866] usb 4-1: USB disconnect, device number 56 [ 717.216814][T14400] usb 5-1: Using ep0 maxpacket: 32 [ 717.225933][T14400] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 717.237517][T14400] usb 5-1: config 0 has no interface number 0 [ 717.260243][T14400] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=2c.d8 [ 717.281809][T14400] usb 5-1: New USB device strings: Mfr=193, Product=2, SerialNumber=3 [ 717.298903][T14400] usb 5-1: Product: syz [ 717.309041][T14400] usb 5-1: Manufacturer: syz [ 717.323934][T14400] usb 5-1: SerialNumber: syz [ 717.343549][T14400] usb 5-1: config 0 descriptor?? [ 717.396807][T14400] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 717.417992][T14400] usb 5-1: selecting invalid altsetting 1 [ 717.423756][T14400] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 717.481515][T14400] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 717.515943][T14400] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 717.524289][T14400] usb 5-1: media controller created [ 717.604119][T14400] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 718.089122][T15952] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3484'. [ 718.202226][T15958] tipc: Started in network mode [ 718.207254][T15958] tipc: Node identity 1a67ef6321dd, cluster identity 4711 [ 718.214640][T15958] tipc: Enabled bearer , priority 0 [ 718.224053][T15958] syzkaller0: entered promiscuous mode [ 718.229682][T15958] syzkaller0: entered allmulticast mode [ 718.256221][T15958] tipc: Resetting bearer [ 718.264911][T15956] tipc: Resetting bearer [ 718.293305][T15956] tipc: Disabling bearer [ 718.656125][T15935] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 718.687819][T14400] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 718.697346][T14400] zl10353_read_register: readreg error (reg=127, ret==-71) [ 718.705297][T14400] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 718.786992][T14400] usb 5-1: USB disconnect, device number 82 [ 719.092776][T15976] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3492'. [ 719.592428][T15988] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3496'. [ 719.611072][T15986] kvm: pic: non byte read [ 719.615982][T15986] kvm: pic: non byte read [ 719.620432][T15986] kvm: pic: non byte read [ 719.624854][T15986] kvm: pic: non byte read [ 719.653852][T15986] kvm: pic: non byte read [ 719.667476][T15986] kvm: pic: non byte read [ 719.675237][T15986] kvm: pic: non byte read [ 719.685207][T15986] kvm: pic: non byte read [ 719.695549][T15986] kvm: pic: non byte read [ 719.705237][T15986] kvm: pic: non byte read [ 719.916768][T15994] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3499'. [ 720.006494][T15999] netlink: 'syz.0.3501': attribute type 39 has an invalid length. [ 720.109546][T16004] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3504'. [ 720.118807][T14419] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 720.285404][T14419] usb 2-1: Using ep0 maxpacket: 16 [ 720.294582][T14419] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 720.322353][T14419] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 720.342305][T14419] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.355340][T14419] usb 2-1: Product: syz [ 720.369322][T14419] usb 2-1: Manufacturer: syz [ 720.379551][T14419] usb 2-1: SerialNumber: syz [ 720.405580][T14419] usb 2-1: config 0 descriptor?? [ 720.430526][T14419] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 720.455636][T14419] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 720.608628][T16023] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3513'. [ 721.005245][T14401] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 721.048993][T14419] em28xx 2-1:0.0: chip ID is em2765 [ 721.235499][T14401] usb 5-1: Using ep0 maxpacket: 32 [ 721.252085][T14401] usb 5-1: config 0 has an invalid interface number: 131 but max is 0 [ 721.280821][T14401] usb 5-1: config 0 has no interface number 0 [ 721.369466][T14401] usb 5-1: config 0 interface 131 has no altsetting 0 [ 721.402552][T14401] usb 5-1: New USB device found, idVendor=14aa, idProduct=0301, bcdDevice=b2.13 [ 721.448056][T14401] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.494011][T14401] usb 5-1: Product: syz [ 721.503071][T14401] usb 5-1: Manufacturer: syz [ 721.538242][T14401] usb 5-1: SerialNumber: syz [ 721.564953][T14401] usb 5-1: config 0 descriptor?? [ 721.594871][T14401] dvb-usb: found a 'WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U)' in warm state. [ 721.614160][T14401] dvb-usb: bulk message failed: -22 (2/0) [ 721.623871][T14401] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 721.653074][T14401] dvbdev: DVB: registering new adapter (WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U)) [ 721.672937][T14419] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 721.723745][T14401] usb 5-1: media controller created [ 721.742138][T16047] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3523'. [ 721.752999][T16047] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3523'. [ 721.753079][T14419] em28xx 2-1:0.0: board has no eeprom [ 721.765559][T14401] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 721.785994][T14401] usb 5-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 721.796652][T14401] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 722.098676][T14401] rc_core: IR keymap rc-dtt200u not found [ 722.119024][T14401] Registered IR keymap rc-empty [ 722.147649][T14401] rc rc0: WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 722.206742][T14401] input: WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input26 [ 722.248491][T14401] dvb-usb: schedule remote query interval to 300 msecs. [ 722.275913][T14401] dvb-usb: WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U) successfully initialized and connected. [ 722.535209][T16060] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3526'. [ 722.587568][T14403] dvb-usb: bulk message failed: -22 (1/0) [ 722.594318][T14403] dvb-usb: error -22 while querying for an remote control event. [ 722.904525][T16050] em28xx 2-1:0.0: writing to i2c device at 0x8 failed (error=-5) [ 722.916259][T14403] dvb-usb: bulk message failed: -22 (1/0) [ 722.928379][T14403] dvb-usb: error -22 while querying for an remote control event. [ 722.955291][T14419] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 722.972044][T14419] em28xx 2-1:0.0: dvb set to bulk mode. [ 722.989844][ T6917] em28xx 2-1:0.0: Binding DVB extension [ 723.029722][T14419] usb 2-1: USB disconnect, device number 109 [ 723.055311][T14419] em28xx 2-1:0.0: Disconnecting em28xx [ 723.130998][ T6917] em28xx 2-1:0.0: Registering input extension [ 723.140227][T14419] em28xx 2-1:0.0: Closing input extension [ 723.189027][T14419] em28xx 2-1:0.0: Freeing device [ 723.221891][T16076] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3533'. [ 723.265722][T14401] dvb-usb: bulk message failed: -22 (1/0) [ 723.275464][T14401] dvb-usb: error -22 while querying for an remote control event. [ 723.617895][T14403] dvb-usb: bulk message failed: -22 (1/0) [ 723.631568][T14403] dvb-usb: error -22 while querying for an remote control event. [ 723.882709][T16083] syzkaller0: entered promiscuous mode [ 723.995331][T16083] syzkaller0: entered allmulticast mode [ 724.003519][T14403] usb 5-1: USB disconnect, device number 83 [ 724.055911][T16091] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3537'. [ 724.148211][T14403] dvb-usb: WideView/Yuan/Yakumo/Hama/Typhoon DVB-T successfully deinitialized and disconnected. [ 725.791586][T16116] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3544'. [ 727.776358][T16119] tipc: Enabling of bearer rejected, failed to enable media [ 728.079425][T16137] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3550'. [ 728.096119][T16140] Failed to get privilege flags for destination (handle=0x2:0x0) [ 728.108210][T16142] netlink: 'syz.4.3554': attribute type 1 has an invalid length. [ 728.233523][T16149] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3554'. [ 728.333674][T16142] 8021q: adding VLAN 0 to HW filter on device bond1 [ 728.758356][T16149] bond1 (unregistering): Released all slaves [ 728.835313][T16167] tipc: Started in network mode [ 728.840219][T16167] tipc: Node identity 32a958b75dde, cluster identity 4711 [ 728.875372][T16167] tipc: Enabled bearer , priority 0 [ 728.882360][T16164] syzkaller0: entered promiscuous mode [ 728.896039][T16164] syzkaller0: entered allmulticast mode [ 728.963523][T16164] tipc: Resetting bearer [ 729.076642][T16163] tipc: Resetting bearer [ 729.133425][T16163] tipc: Disabling bearer [ 729.201121][T16175] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3566'. [ 729.895245][T14403] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 730.055240][T14403] usb 4-1: Using ep0 maxpacket: 8 [ 730.068520][T14403] usb 4-1: no configurations [ 730.075104][T14403] usb 4-1: can't read configurations, error -22 [ 730.225209][T14403] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 730.457456][T14403] usb 4-1: Using ep0 maxpacket: 8 [ 730.468821][T14403] usb 4-1: no configurations [ 730.473808][T14403] usb 4-1: can't read configurations, error -22 [ 730.483064][T14403] usb usb4-port1: attempt power cycle [ 730.610635][T16206] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3578'. [ 730.855223][T14403] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 730.885950][T14403] usb 4-1: Using ep0 maxpacket: 8 [ 730.922329][T14403] usb 4-1: no configurations [ 730.955284][T14403] usb 4-1: can't read configurations, error -22 [ 731.095227][T14403] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 731.156402][T16226] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3586'. [ 731.167028][T14403] usb 4-1: Using ep0 maxpacket: 8 [ 731.174520][T14403] usb 4-1: no configurations [ 731.180982][T16225] tipc: Enabled bearer , priority 0 [ 731.184258][T14403] usb 4-1: can't read configurations, error -22 [ 731.209008][T16225] syzkaller0: entered promiscuous mode [ 731.210584][T14403] usb usb4-port1: unable to enumerate USB device [ 731.231763][T16225] syzkaller0: entered allmulticast mode [ 731.353653][T16223] tipc: Resetting bearer [ 731.423693][T16223] tipc: Disabling bearer [ 732.613806][T16256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3598'. [ 733.100895][T16259] tipc: Enabled bearer , priority 0 [ 733.108747][T16259] syzkaller0: entered promiscuous mode [ 733.114392][T16259] syzkaller0: entered allmulticast mode [ 733.207777][T16258] tipc: Resetting bearer [ 733.265645][T16258] tipc: Disabling bearer [ 733.425351][ T6917] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 733.588198][ T6917] usb 1-1: Using ep0 maxpacket: 16 [ 733.599298][ T6917] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 733.622475][ T6917] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 733.641357][ T6917] usb 1-1: config 0 interface 0 has no altsetting 0 [ 733.649335][ T6917] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 733.658824][ T6917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.671074][ T6917] usb 1-1: config 0 descriptor?? [ 734.121420][ T6917] nzxt-smart2 0003:1E71:2009.0025: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 734.211313][T16279] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3607'. [ 734.479296][T16253] warn_alloc: 3 callbacks suppressed [ 734.479314][T16253] syz.2.3596: vmalloc error: size 2101248, failed to allocated page array size 4104, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 734.572323][T16253] CPU: 1 UID: 0 PID: 16253 Comm: syz.2.3596 Not tainted syzkaller #0 PREEMPT(full) [ 734.572350][T16253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 734.572363][T16253] Call Trace: [ 734.572371][T16253] [ 734.572381][T16253] dump_stack_lvl+0x189/0x250 [ 734.572413][T16253] ? __pfx_dump_stack_lvl+0x10/0x10 [ 734.572437][T16253] ? __pfx__printk+0x10/0x10 [ 734.572461][T16253] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 734.572485][T16253] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 734.572509][T16253] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 734.572534][T16253] warn_alloc+0x214/0x310 [ 734.572569][T16253] ? __pfx_warn_alloc+0x10/0x10 [ 734.572615][T16253] ? __get_vm_area_node+0x28f/0x300 [ 734.572641][T16253] ? hash_netiface_create+0x358/0xfe0 [ 734.572671][T16253] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 734.572730][T16253] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 734.572759][T16253] ? hash_netiface_create+0x358/0xfe0 [ 734.572787][T16253] ? __get_vm_area_node+0x28f/0x300 [ 734.572813][T16253] ? hash_netiface_create+0x358/0xfe0 [ 734.572839][T16253] __vmalloc_node_range_noprof+0x56a/0x12f0 [ 734.572866][T16253] ? hash_netiface_create+0x358/0xfe0 [ 734.572889][T16253] ? __do_fast_syscall_32+0xb6/0x2b0 [ 734.572943][T16253] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 734.572975][T16253] ? rcu_is_watching+0x15/0xb0 [ 734.572996][T16253] ? hash_netiface_create+0x358/0xfe0 [ 734.573020][T16253] ? hash_netiface_create+0x358/0xfe0 [ 734.573042][T16253] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 734.573069][T16253] ? hash_netiface_create+0x358/0xfe0 [ 734.573094][T16253] ? hash_netiface_create+0x2fe/0xfe0 [ 734.573124][T16253] hash_netiface_create+0x358/0xfe0 [ 734.573158][T16253] ? __nla_parse+0x40/0x60 [ 734.573179][T16253] ? __pfx_hash_netiface_create+0x10/0x10 [ 734.573207][T16253] ip_set_create+0xa97/0x1940 [ 734.573234][T16253] ? ip_set_create+0x4a2/0x1940 [ 734.573272][T16253] ? __pfx_ip_set_create+0x10/0x10 [ 734.573336][T16253] nfnetlink_rcv_msg+0xb4a/0x1130 [ 734.573373][T16253] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 734.573418][T16253] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 734.573443][T16253] ? kasan_save_free_info+0x46/0x50 [ 734.573516][T16253] netlink_rcv_skb+0x205/0x470 [ 734.573545][T16253] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 734.573574][T16253] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 734.573614][T16253] ? bpf_lsm_capable+0x9/0x20 [ 734.573637][T16253] ? security_capable+0x7e/0x2e0 [ 734.573673][T16253] nfnetlink_rcv+0x26a/0x2520 [ 734.573703][T16253] ? __dev_queue_xmit+0x1d79/0x3b50 [ 734.573740][T16253] ? __dev_queue_xmit+0x27b/0x3b50 [ 734.573778][T16253] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 734.573805][T16253] ? __pfx___dev_queue_xmit+0x10/0x10 [ 734.573846][T16253] ? ref_tracker_free+0x63a/0x7d0 [ 734.573865][T16253] ? __asan_memcpy+0x40/0x70 [ 734.573886][T16253] ? __pfx_ref_tracker_free+0x10/0x10 [ 734.573923][T16253] ? skb_clone+0x246/0x3a0 [ 734.573952][T16253] ? __netlink_deliver_tap+0x807/0x850 [ 734.573972][T16253] ? netlink_deliver_tap+0x2e/0x1b0 [ 734.574000][T16253] ? netlink_deliver_tap+0x2e/0x1b0 [ 734.574029][T16253] netlink_unicast+0x82f/0x9e0 [ 734.574066][T16253] ? __pfx_netlink_unicast+0x10/0x10 [ 734.574096][T16253] ? netlink_sendmsg+0x642/0xb30 [ 734.574115][T16253] ? skb_put+0x11b/0x210 [ 734.574140][T16253] netlink_sendmsg+0x805/0xb30 [ 734.574171][T16253] ? __pfx_netlink_sendmsg+0x10/0x10 [ 734.574202][T16253] ? __import_iovec+0x5d4/0x7f0 [ 734.574224][T16253] ? aa_sock_msg_perm+0xf1/0x1d0 [ 734.574248][T16253] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 734.574269][T16253] ? __pfx_netlink_sendmsg+0x10/0x10 [ 734.574291][T16253] __sock_sendmsg+0x219/0x270 [ 734.574323][T16253] ____sys_sendmsg+0x505/0x830 [ 734.574353][T16253] ? __pfx_____sys_sendmsg+0x10/0x10 [ 734.574395][T16253] ___sys_sendmsg+0x21f/0x2a0 [ 734.574421][T16253] ? __pfx____sys_sendmsg+0x10/0x10 [ 734.574445][T16253] ? futex_private_hash_put+0x4b/0x280 [ 734.574464][T16253] ? futex_private_hash_put+0x245/0x280 [ 734.574488][T16253] ? futex_wake+0x4b2/0x560 [ 734.574524][T16253] ? __lock_acquire+0xab9/0xd20 [ 734.574576][T16253] __sys_sendmsg+0x164/0x220 [ 734.574608][T16253] ? __pfx___sys_sendmsg+0x10/0x10 [ 734.574647][T16253] ? lockdep_hardirqs_on+0x9c/0x150 [ 734.574672][T16253] __do_fast_syscall_32+0xb6/0x2b0 [ 734.574693][T16253] ? lockdep_hardirqs_on+0x9c/0x150 [ 734.574716][T16253] do_fast_syscall_32+0x34/0x80 [ 734.574738][T16253] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 734.574760][T16253] RIP: 0023:0xf701e539 [ 734.574778][T16253] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 734.574795][T16253] RSP: 002b:00000000f540e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 734.574814][T16253] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 734.574828][T16253] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 0000000000000000 [ 734.574839][T16253] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 734.574850][T16253] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 734.574860][T16253] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 734.574887][T16253] [ 734.668090][T14419] usb 1-1: USB disconnect, device number 16 [ 734.672510][T16253] Mem-Info: [ 734.853687][ T6917] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 735.105962][T16253] active_anon:10649 inactive_anon:0 isolated_anon:0 [ 735.105962][T16253] active_file:14392 inactive_file:4316 isolated_file:0 [ 735.105962][T16253] unevictable:768 dirty:198 writeback:0 [ 735.105962][T16253] slab_reclaimable:11434 slab_unreclaimable:107195 [ 735.105962][T16253] mapped:29882 shmem:4077 pagetables:1317 [ 735.105962][T16253] sec_pagetables:0 bounce:0 [ 735.105962][T16253] kernel_misc_reclaimable:0 [ 735.105962][T16253] free:1300599 free_pcp:13952 free_cma:0 [ 735.205300][T16253] Node 0 active_anon:34792kB inactive_anon:0kB active_file:57568kB inactive_file:17128kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119584kB dirty:760kB writeback:0kB shmem:6872kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13424kB pagetables:5212kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 735.323096][T16253] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 735.391506][T16253] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 735.424744][T16253] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 735.431709][T16253] Node 0 DMA32 free:1295744kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:31776kB inactive_anon:0kB active_file:57388kB inactive_file:15820kB unevictable:1536kB writepending:760kB present:3129332kB managed:2557404kB mlocked:0kB bounce:0kB free_pcp:53360kB local_pcp:27124kB free_cma:0kB [ 735.467166][T16253] lowmem_reserve[]: 0 0 1 1 1 [ 735.472007][T16253] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:116kB inactive_anon:0kB active_file:180kB inactive_file:1308kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:4kB free_cma:0kB [ 735.524656][T16253] lowmem_reserve[]: 0 0 0 0 0 [ 735.546989][ T6917] usb 2-1: Using ep0 maxpacket: 8 [ 735.555209][ T6917] usb 2-1: no configurations [ 735.559828][ T6917] usb 2-1: can't read configurations, error -22 [ 735.566547][T16253] Node 1 Normal free:3887684kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:14336kB local_pcp:5024kB free_cma:0kB [ 735.633062][T16293] netlink: 'syz.3.3611': attribute type 1 has an invalid length. [ 735.662696][T16293] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3611'. [ 735.671048][T16253] lowmem_reserve[]: 0 0 0 0 0 [ 735.691268][T16253] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 735.705345][ T6917] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 735.734918][T16253] Node 0 DMA32: 14*4kB (E) 405*8kB (M) 154*16kB (UME) 348*32kB (UME) 188*64kB (UME) 101*128kB (UME) 33*256kB (UM) 13*512kB (M) 6*1024kB (UME) 4*2048kB (UM) 299*4096kB (M) = 1296000kB [ 735.766478][T16253] Node 0 Normal: 6*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 735.795626][T16253] Node 1 Normal: 205*4kB (UME) 64*8kB (UME) 41*16kB (UME) 158*32kB (UME) 59*64kB (UME) 14*128kB (UME) 7*256kB (UME) 3*512kB (ME) 1*1024kB (M) 2*2048kB (ME) 944*4096kB (UM) = 3887684kB [ 735.834528][T16253] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 735.855310][T16253] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 735.857323][T16295] syzkaller0: entered promiscuous mode [ 735.864633][T16253] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 735.864653][T16253] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 735.864669][T16253] 21807 total pagecache pages [ 735.864678][T16253] 1 pages in swap cache [ 735.870454][T16295] syzkaller0: entered allmulticast mode [ 735.880241][ T6917] usb 2-1: Using ep0 maxpacket: 8 [ 735.935152][T16253] Free swap = 124992kB [ 735.939346][T16253] Total swap = 124996kB [ 735.953899][T16253] 2097051 pages RAM [ 735.958627][ T6917] usb 2-1: no configurations [ 735.963672][ T6917] usb 2-1: can't read configurations, error -22 [ 735.970613][ T6917] usb usb2-port1: attempt power cycle [ 735.976359][T16253] 0 pages HighMem/MovableOnly [ 735.992808][T16253] 425674 pages reserved [ 736.002883][T16253] 0 pages cma reserved [ 736.335830][ T6917] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 736.356101][ T6917] usb 2-1: Using ep0 maxpacket: 8 [ 736.374860][ T6917] usb 2-1: no configurations [ 736.379835][ T6917] usb 2-1: can't read configurations, error -22 [ 736.555488][ T6917] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 736.606025][ T6917] usb 2-1: Using ep0 maxpacket: 8 [ 736.620097][ T6917] usb 2-1: no configurations [ 736.638064][ T6917] usb 2-1: can't read configurations, error -22 [ 736.661351][ T6917] usb usb2-port1: unable to enumerate USB device [ 736.875476][T14403] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 737.037464][T14403] usb 1-1: unable to get BOS descriptor or descriptor too short [ 737.080304][T14403] usb 1-1: not running at top speed; connect to a high speed hub [ 737.099066][T14403] usb 1-1: config 2 has an invalid interface number: 99 but max is 0 [ 737.116225][T14403] usb 1-1: config 2 has an invalid interface number: 131 but max is 0 [ 737.133434][T14403] usb 1-1: config 2 has 2 interfaces, different from the descriptor's value: 1 [ 737.155279][T14403] usb 1-1: config 2 has no interface number 0 [ 737.179765][T14403] usb 1-1: config 2 has no interface number 1 [ 737.204738][T14403] usb 1-1: config 2 interface 99 altsetting 2 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 737.230502][T14403] usb 1-1: config 2 interface 99 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 737.263887][T14403] usb 1-1: too many endpoints for config 2 interface 131 altsetting 161: 209, using maximum allowed: 30 [ 737.311259][T14403] usb 1-1: config 2 interface 131 altsetting 161 has an invalid descriptor for endpoint zero, skipping [ 737.345089][T14403] usb 1-1: config 2 interface 131 altsetting 161 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 737.375252][T14403] usb 1-1: config 2 interface 131 altsetting 161 has 2 endpoint descriptors, different from the interface descriptor's value: 209 [ 737.411244][T14403] usb 1-1: config 2 interface 99 has no altsetting 0 [ 737.444814][T16315] netlink: 'syz.3.3620': attribute type 10 has an invalid length. [ 737.458856][T14403] usb 1-1: config 2 interface 131 has no altsetting 0 [ 737.552603][T14403] usb 1-1: New USB device found, idVendor=041e, idProduct=4067, bcdDevice=58.08 [ 737.595155][T14403] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.598974][T16321] netlink: 'syz.3.3622': attribute type 1 has an invalid length. [ 737.603173][T14403] usb 1-1: Product: syz [ 737.603192][T14403] usb 1-1: Manufacturer: syz [ 737.603206][T14403] usb 1-1: SerialNumber: syz [ 737.674690][T16322] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 737.750446][T16321] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3622'. [ 738.052132][T14403] usb 1-1: USB disconnect, device number 17 [ 738.958535][T16339] ======================================================= [ 738.958535][T16339] WARNING: The mand mount option has been deprecated and [ 738.958535][T16339] and is ignored by this kernel. Remove the mand [ 738.958535][T16339] option from the mount to silence this warning. [ 738.958535][T16339] ======================================================= [ 738.993389][ C0] vkms_vblank_simulate: vblank timer overrun [ 740.181279][T16354] syzkaller0: entered promiscuous mode [ 740.195280][T16354] syzkaller0: entered allmulticast mode [ 740.305184][T14400] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 740.455198][T14400] usb 1-1: Using ep0 maxpacket: 8 [ 740.462161][T14400] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 740.475135][T14400] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 740.675306][T14400] usb 1-1: config 0 has no interfaces? [ 740.695617][T14400] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 740.704676][T14400] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.899163][T14400] usb 1-1: Product: syz [ 740.903377][T14400] usb 1-1: Manufacturer: syz [ 740.921451][T14400] usb 1-1: SerialNumber: syz [ 740.945955][T14400] usb 1-1: config 0 descriptor?? [ 741.143251][T16364] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 741.182411][ T5866] usb 1-1: USB disconnect, device number 18 [ 741.644717][ T30] audit: type=1326 audit(1758948285.537:1650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16378 comm="syz.2.3642" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf701e539 code=0x0 [ 741.666212][ C0] vkms_vblank_simulate: vblank timer overrun [ 743.605456][T16419] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3652'. [ 743.672685][T16424] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3653'. [ 743.752273][T16424] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3653'. [ 743.870484][ T30] audit: type=1326 audit(1758948287.767:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16426 comm="syz.4.3656" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f76539 code=0x0 [ 744.194673][T16446] syzkaller0: entered promiscuous mode [ 744.201736][T16446] syzkaller0: entered allmulticast mode [ 744.451174][T16450] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3666'. [ 744.965183][T14411] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 745.025421][ T6917] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 745.075291][T14417] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 745.125157][T14411] usb 4-1: Using ep0 maxpacket: 16 [ 745.133524][T14411] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 745.160727][T14411] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 745.174872][T14411] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.184720][T14411] usb 4-1: Product: syz [ 745.189604][ T6917] usb 5-1: Using ep0 maxpacket: 32 [ 745.202296][T14411] usb 4-1: Manufacturer: syz [ 745.208179][T14411] usb 4-1: SerialNumber: syz [ 745.213709][ T6917] usb 5-1: config 0 interface 0 has no altsetting 0 [ 745.236042][T14411] usb 4-1: config 0 descriptor?? [ 745.241725][T14417] usb 1-1: Using ep0 maxpacket: 32 [ 745.249177][T14417] usb 1-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 745.251060][T14411] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 745.265347][T14417] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.276721][ T6917] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 745.292161][ T6917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.297175][T14417] usb 1-1: config 0 descriptor?? [ 745.304806][ T6917] usb 5-1: Product: syz [ 745.309287][ T6917] usb 5-1: Manufacturer: syz [ 745.313881][ T6917] usb 5-1: SerialNumber: syz [ 745.319441][T14411] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 745.343894][ T6917] usb 5-1: config 0 descriptor?? [ 745.346909][T14417] usb 1-1: selecting invalid altsetting 3 [ 745.364690][T14417] comedi comedi5: could not set alternate setting 3 in high speed [ 745.383142][T14417] usbduxsigma 1-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 745.401822][T14417] usbduxsigma 1-1:0.0: probe with driver usbduxsigma failed with error -22 [ 745.415491][T14400] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 745.546863][T14403] usb 1-1: USB disconnect, device number 19 [ 745.587554][T14400] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 745.609307][T14400] usb 2-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 745.625054][T14400] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.654787][T14400] usb 2-1: config 0 descriptor?? [ 745.784327][ T6917] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 745.865442][T14411] em28xx 4-1:0.0: chip ID is em2765 [ 745.988175][ T6917] gs_usb 5-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO) [ 746.007142][ T6917] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -71 [ 746.031834][ T6917] usb 5-1: USB disconnect, device number 84 [ 746.087117][T14400] lenovo 0003:17EF:6062.0026: unknown main item tag 0x4 [ 746.116745][T14400] lenovo 0003:17EF:6062.0026: item fetching failed at offset 6/7 [ 746.139110][T14400] lenovo 0003:17EF:6062.0026: hid_parse failed [ 746.149685][T14400] lenovo 0003:17EF:6062.0026: probe with driver lenovo failed with error -22 [ 746.201822][T16480] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3679'. [ 746.291799][ T6917] usb 2-1: USB disconnect, device number 114 [ 746.459586][T14411] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 746.486937][T14411] em28xx 4-1:0.0: board has no eeprom [ 746.549470][T16495] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3686'. [ 746.575263][T14411] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 746.583230][T14411] em28xx 4-1:0.0: dvb set to bulk mode. [ 746.604563][ T6917] em28xx 4-1:0.0: Binding DVB extension [ 746.615584][T14411] usb 4-1: USB disconnect, device number 61 [ 746.625659][T16496] netlink: 'syz.0.3684': attribute type 13 has an invalid length. [ 746.636278][T14411] em28xx 4-1:0.0: Disconnecting em28xx [ 746.801081][ T6917] em28xx 4-1:0.0: Registering input extension [ 746.824136][T14411] em28xx 4-1:0.0: Closing input extension [ 746.868043][T14411] em28xx 4-1:0.0: Freeing device [ 747.140866][ T30] audit: type=1326 audit(1758948291.037:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16511 comm="syz.3.3694" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f44539 code=0x0 [ 747.259289][T16496] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 747.300662][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.307056][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.475140][ T6917] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 749.688773][ T6917] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 749.729497][ T6917] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 749.800328][ T6917] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 749.844799][ T6917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.877522][T16550] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 749.891558][ T6917] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 750.075282][T14403] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 750.248433][T14403] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 750.263349][T14403] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 750.278556][T14403] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 750.302404][T14403] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.311959][T16560] netlink: 'syz.4.3710': attribute type 1 has an invalid length. [ 750.340652][T16560] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3710'. [ 750.357789][T16553] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 750.412868][T14403] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 750.748201][T13885] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 750.757817][T13885] Bluetooth: hci2: Injecting HCI hardware error event [ 750.766591][T13885] Bluetooth: hci2: hardware error 0x00 [ 751.033564][T14417] usb 1-1: USB disconnect, device number 20 [ 751.190164][ T30] audit: type=1326 audit(1758948295.087:1653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16576 comm="syz.2.3716" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf701e539 code=0x0 [ 751.211675][ C1] vkms_vblank_simulate: vblank timer overrun [ 752.202125][T14417] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 752.203311][T14419] usb 4-1: USB disconnect, device number 62 [ 752.355488][T14417] usb 5-1: Using ep0 maxpacket: 8 [ 752.370425][T14417] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 752.396369][T14417] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 752.411687][T14417] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 752.434641][T14417] usb 5-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=6b.ad [ 752.461635][T14417] usb 5-1: New USB device strings: Mfr=55, Product=237, SerialNumber=3 [ 752.480382][T14417] usb 5-1: Product: syz [ 752.503207][T14417] usb 5-1: Manufacturer: syz [ 752.518289][T14417] usb 5-1: SerialNumber: syz [ 752.532105][T14417] usb 5-1: config 0 descriptor?? [ 752.556921][T14417] smsusb:smsusb_probe: board id=2, interface number 0 [ 752.574141][T14417] smsusb:smsusb_probe: Device initialized with return code -19 [ 752.766175][T14417] usb 5-1: USB disconnect, device number 85 [ 753.032342][T13885] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 755.401791][T16639] tipc: Enabling of bearer rejected, failed to enable media [ 755.604128][ T6917] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 755.755208][ T6917] usb 1-1: Using ep0 maxpacket: 16 [ 755.774448][ T6917] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 755.851409][ T6917] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 755.879230][ T6917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.892573][ T6917] usb 1-1: Product: syz [ 755.900498][ T6917] usb 1-1: Manufacturer: syz [ 755.908759][ T6917] usb 1-1: SerialNumber: syz [ 755.927247][ T6917] usb 1-1: config 0 descriptor?? [ 755.938123][ T6917] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 755.959635][ T6917] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 756.036976][T16651] tipc: Enabled bearer , priority 0 [ 756.080895][T16651] tipc: Resetting bearer [ 756.132218][T16650] tipc: Disabling bearer [ 756.776102][T16657] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3746'. [ 756.888468][ T6917] em28xx 1-1:0.0: chip ID is em2765 [ 756.988418][T16666] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3751'. [ 757.218655][T16674] netlink: 'syz.2.3755': attribute type 1 has an invalid length. [ 757.302733][T16674] 8021q: adding VLAN 0 to HW filter on device bond1 [ 757.345723][T14417] usb 2-1: new full-speed USB device number 115 using dummy_hcd [ 757.497954][T14417] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 757.515070][T14417] usb 2-1: config 0 has no interface number 0 [ 757.521134][ T6917] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 757.521181][ T6917] em28xx 1-1:0.0: board has no eeprom [ 757.568871][T14417] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 757.625118][ T6917] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 757.643252][ T6917] em28xx 1-1:0.0: dvb set to bulk mode. [ 757.643410][T14417] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.657014][T14419] em28xx 1-1:0.0: Binding DVB extension [ 757.684059][ T6917] usb 1-1: USB disconnect, device number 21 [ 757.698995][ T6917] em28xx 1-1:0.0: Disconnecting em28xx [ 757.773192][T14417] usb 2-1: config 0 descriptor?? [ 757.791064][T14417] usb 2-1: selecting invalid altsetting 1 [ 757.824720][T14417] dvb_ttusb_budget: ttusb_init_controller: error [ 757.843354][T14417] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 757.854468][T14419] em28xx 1-1:0.0: Registering input extension [ 757.910281][ T6917] em28xx 1-1:0.0: Closing input extension [ 757.945559][ T6917] em28xx 1-1:0.0: Freeing device [ 758.401938][T14417] DVB: Unable to find symbol cx22700_attach() [ 758.516731][ T30] audit: type=1326 audit(1758948302.407:1654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16701 comm="syz.3.3765" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44539 code=0x7ffc0000 [ 758.667742][ T30] audit: type=1326 audit(1758948302.417:1655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16701 comm="syz.3.3765" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44539 code=0x7ffc0000 [ 758.834071][T14417] DVB: Unable to find symbol tda10046_attach() [ 758.866905][T14417] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 758.876993][ T30] audit: type=1326 audit(1758948302.417:1656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16701 comm="syz.3.3765" exe="/root/syz-executor" sig=0 arch=40000003 syscall=8 compat=1 ip=0xf7f44539 code=0x7ffc0000 [ 758.939671][T16706] netlink: 'syz.1.3767': attribute type 1 has an invalid length. [ 758.950915][T14417] usb 2-1: USB disconnect, device number 115 [ 759.017974][ T30] audit: type=1326 audit(1758948302.417:1657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16701 comm="syz.3.3765" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44539 code=0x7ffc0000 [ 759.082763][ T30] audit: type=1326 audit(1758948302.417:1658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16701 comm="syz.3.3765" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44539 code=0x7ffc0000 [ 759.105387][ T30] audit: type=1326 audit(1758948302.417:1659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16701 comm="syz.3.3765" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f44539 code=0x7ffc0000 [ 759.127459][ C1] vkms_vblank_simulate: vblank timer overrun [ 759.145218][ T30] audit: type=1326 audit(1758948302.417:1660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16701 comm="syz.3.3765" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44539 code=0x7ffc0000 [ 759.177338][ T30] audit: type=1326 audit(1758948302.417:1661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16701 comm="syz.3.3765" exe="/root/syz-executor" sig=0 arch=40000003 syscall=377 compat=1 ip=0xf7f44539 code=0x7ffc0000 [ 759.245462][ T30] audit: type=1326 audit(1758948302.417:1662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16701 comm="syz.3.3765" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44539 code=0x7ffc0000 [ 759.289976][T16706] 8021q: adding VLAN 0 to HW filter on device bond1 [ 759.617777][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 760.877681][T14418] usb 4-1: new full-speed USB device number 63 using dummy_hcd [ 760.928558][T16741] netlink: 'syz.1.3781': attribute type 1 has an invalid length. [ 760.972101][T16741] 8021q: adding VLAN 0 to HW filter on device bond2 [ 761.047019][T14418] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 761.047047][T14418] usb 4-1: config 0 has no interface number 0 [ 761.047090][T14418] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 761.047113][T14418] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.057351][T14418] usb 4-1: config 0 descriptor?? [ 761.060590][T14418] usb 4-1: selecting invalid altsetting 1 [ 761.060767][T14418] dvb_ttusb_budget: ttusb_init_controller: error [ 761.060780][T14418] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 761.207857][T14418] DVB: Unable to find symbol cx22700_attach() [ 761.581133][T14418] DVB: Unable to find symbol tda10046_attach() [ 761.592771][T14418] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 761.628215][T14418] usb 4-1: USB disconnect, device number 63 [ 762.298152][T13885] Bluetooth: hci3: ISO packet too small [ 762.622919][T16789] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3800'. [ 762.944448][T16807] binder: BINDER_SET_CONTEXT_MGR already set [ 762.950622][T16807] binder: 16805:16807 ioctl 4018620d 80004a80 returned -16 [ 763.010962][T16811] netlink: 'syz.4.3811': attribute type 1 has an invalid length. [ 763.050363][T16811] 8021q: adding VLAN 0 to HW filter on device bond1 [ 763.063362][T16811] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3811'. [ 764.231119][T14417] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 764.346401][T16845] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3824'. [ 764.417742][T14417] usb 4-1: config 0 has an invalid interface number: 29 but max is 0 [ 764.426504][T14417] usb 4-1: config 0 has no interface number 0 [ 764.445190][T14417] usb 4-1: config 0 interface 29 has no altsetting 0 [ 764.451947][T14417] usb 4-1: New USB device found, idVendor=1435, idProduct=0829, bcdDevice=89.8c [ 764.519961][T14417] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.563245][T14417] usb 4-1: config 0 descriptor?? [ 764.835182][T14417] usb 4-1: string descriptor 0 read error: -71 [ 764.842763][T14417] usb 4-1: Could not find all expected endpoints [ 764.876585][T14417] usb 4-1: USB disconnect, device number 64 [ 765.277038][T16859] ip6gre1: entered allmulticast mode [ 765.345585][T16861] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 765.616061][T16868] netlink: 'syz.3.3832': attribute type 1 has an invalid length. [ 765.713234][T16870] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3832'. [ 765.717053][T16868] 8021q: adding VLAN 0 to HW filter on device bond1 [ 766.045344][ T6917] usb 5-1: new full-speed USB device number 86 using dummy_hcd [ 766.148921][T16876] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3836'. [ 766.220997][ T6917] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 766.245331][ T6917] usb 5-1: config 0 has no interface number 0 [ 766.265582][ T6917] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 766.316438][ T6917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 766.356485][ T6917] usb 5-1: config 0 descriptor?? [ 766.388741][ T6917] usb 5-1: selecting invalid altsetting 1 [ 766.414961][ T6917] dvb_ttusb_budget: ttusb_init_controller: error [ 766.449562][ T6917] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 766.461127][T16880] syzkaller0: entered promiscuous mode [ 766.486092][T16880] syzkaller0: entered allmulticast mode [ 766.615323][ T6917] DVB: Unable to find symbol cx22700_attach() [ 766.737917][ T6917] DVB: Unable to find symbol tda10046_attach() [ 766.744122][ T6917] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 766.790072][ T6917] usb 5-1: USB disconnect, device number 86 [ 769.895135][ T5866] usb 5-1: new full-speed USB device number 87 using dummy_hcd [ 770.077075][ T5866] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 770.090968][ T5866] usb 5-1: config 0 has no interface number 0 [ 770.105251][T13885] Bluetooth: hci5: command 0x0406 tx timeout [ 770.128348][ T5866] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 770.181306][ T5866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.269885][ T5866] usb 5-1: config 0 descriptor?? [ 770.336344][ T5866] usb 5-1: selecting invalid altsetting 1 [ 770.342259][ T5866] dvb_ttusb_budget: ttusb_init_controller: error [ 770.380790][ T5866] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 770.562923][ T5866] DVB: Unable to find symbol cx22700_attach() [ 770.687982][ T5866] DVB: Unable to find symbol tda10046_attach() [ 770.724324][ T5866] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 770.758673][ T5866] usb 5-1: USB disconnect, device number 87 [ 771.255793][T16962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3870'. [ 771.426264][T16968] netlink: 'syz.2.3874': attribute type 1 has an invalid length. [ 771.462974][T16968] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3874'. [ 771.934051][T16965] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3872'. [ 772.082700][T16989] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3884'. [ 772.346451][T16995] netlink: 'syz.4.3886': attribute type 1 has an invalid length. [ 772.381493][T16995] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3886'. [ 772.707259][T17014] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3894'. [ 772.924679][T17020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3897'. [ 773.215256][T13885] Bluetooth: hci4: unexpected cc 0x0402 length: 4 > 1 [ 773.343397][T17032] tipc: Enabled bearer , priority 0 [ 773.358120][T17032] syzkaller0: entered promiscuous mode [ 773.370797][T17032] syzkaller0: entered allmulticast mode [ 773.436228][T17032] tipc: Resetting bearer [ 773.474362][T17031] tipc: Resetting bearer [ 773.531749][T17031] tipc: Disabling bearer [ 773.841140][T17052] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3911'. [ 774.798683][ T6917] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 774.960106][ T6917] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 774.966520][T17077] tipc: Enabled bearer , priority 0 [ 774.971895][ T6917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.035288][ T6917] usb 5-1: Product: syz [ 775.048411][T17077] syzkaller0: entered promiscuous mode [ 775.055244][ T6917] usb 5-1: Manufacturer: syz [ 775.070745][ T6917] usb 5-1: SerialNumber: syz [ 775.080363][T17077] syzkaller0: entered allmulticast mode [ 775.106484][ T6917] usb 5-1: config 0 descriptor?? [ 775.141475][ T6917] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 775.171208][T17077] tipc: Resetting bearer [ 775.193931][ T6917] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 775.222845][T17076] tipc: Resetting bearer [ 775.243294][ T6917] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 775.269990][ T6917] usb 5-1: media controller created [ 775.276529][T17076] tipc: Disabling bearer [ 775.305359][ T6917] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 775.410176][ T6917] DVB: Unable to find symbol mt352_attach() [ 775.593084][ T6917] DVB: Unable to find symbol nxt6000_attach() [ 775.619467][ T6917] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 775.678886][ T6917] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input30 [ 775.702001][ T6917] dvb-usb: schedule remote query interval to 1000 msecs. [ 775.729975][ T6917] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 775.777641][ T6917] dvb-usb: bulk message failed: -22 (7/0) [ 775.808625][ T6917] dvb-usb: bulk message failed: -22 (7/0) [ 775.837601][ T6917] usb 5-1: USB disconnect, device number 88 [ 775.977166][T17095] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3926'. [ 776.092700][ T6917] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 776.452636][T17106] tipc: Enabled bearer , priority 0 [ 776.476139][T17103] tipc: Resetting bearer [ 776.503249][T17102] tipc: Disabling bearer [ 776.755484][T17113] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3935'. [ 776.879304][T17117] netlink: 'syz.2.3937': attribute type 1 has an invalid length. [ 776.955969][T17119] ------------[ cut here ]------------ [ 776.961761][T17119] WARNING: CPU: 1 PID: 17119 at fs/exec.c:119 path_noexec+0x1af/0x200 [ 776.970354][T17119] Modules linked in: [ 776.974582][T17119] CPU: 1 UID: 0 PID: 17119 Comm: syz.0.3938 Not tainted syzkaller #0 PREEMPT(full) [ 776.984055][T17119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 776.994286][T17119] RIP: 0010:path_noexec+0x1af/0x200 [ 777.001370][T17119] Code: 02 31 ff 48 89 de e8 d0 e3 89 ff d1 eb eb 07 e8 e7 de 89 ff b3 01 89 d8 5b 41 5e 41 5f 5d e9 08 90 47 09 cc e8 d2 de 89 ff 90 <0f> 0b 90 e9 48 ff ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c a6 [ 777.021378][T17119] RSP: 0018:ffffc900000f7bd8 EFLAGS: 00010283 [ 777.027527][T17119] RAX: ffffffff8235dc1e RBX: ffff88803028ccc0 RCX: 0000000000080000 [ 777.035572][T17119] RDX: ffffc9001d5c1000 RSI: 000000000000006a RDI: 000000000000006b [ 777.043555][T17119] RBP: 0000000000080000 R08: ffff88807d66bc00 R09: 0000000000000003 [ 777.051694][T17119] R10: 0000000000000003 R11: 0000000000000002 R12: 0000000000000011 [ 777.059806][T17119] R13: 1ffff9200001ef90 R14: 0000000000000000 R15: dffffc0000000000 [ 777.068096][T17119] FS: 0000000000000000(0000) GS:ffff888125d12000(0063) knlGS:00000000f541eb40 [ 777.077139][T17119] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 777.083735][T17119] CR2: 000000000c359f22 CR3: 000000005eb42000 CR4: 00000000003526f0 [ 777.091785][T17119] Call Trace: [ 777.095124][T17119] [ 777.098067][T17119] do_mmap+0xa43/0x10d0 [ 777.102253][T17119] ? __pfx_do_mmap+0x10/0x10 [ 777.106943][T17119] ? down_write_killable+0x178/0x230 [ 777.112249][T17119] ? __pfx_down_write_killable+0x10/0x10 [ 777.117989][T17119] ? common_file_perm+0x1b5/0x230 [ 777.123038][T17119] vm_mmap_pgoff+0x2a6/0x4d0 [ 777.127720][T17119] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 777.132851][T17119] ? __fget_files+0x2a/0x420 [ 777.137600][T17119] ? __fget_files+0x2a/0x420 [ 777.142210][T17119] ? __fget_files+0x2a/0x420 [ 777.146884][T17119] ksys_mmap_pgoff+0x51f/0x760 [ 777.151677][T17119] __do_fast_syscall_32+0xb6/0x2b0 [ 777.156884][T17119] do_fast_syscall_32+0x34/0x80 [ 777.161752][T17119] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 777.168406][T17119] RIP: 0023:0xf702e539 [ 777.172500][T17119] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 777.192223][T17119] RSP: 002b:00000000f541e55c EFLAGS: 00000206 ORIG_RAX: 00000000000000c0 [ 777.200730][T17119] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000003000 [ 777.208806][T17119] RDX: 0000000003000007 RSI: 0000000000000011 RDI: 0000000000000005 [ 777.216941][T17119] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 777.224925][T17119] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 777.233001][T17119] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 777.241048][T17119] [ 777.244079][T17119] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 777.251367][T17119] CPU: 1 UID: 0 PID: 17119 Comm: syz.0.3938 Not tainted syzkaller #0 PREEMPT(full) [ 777.260743][T17119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 777.270810][T17119] Call Trace: [ 777.274095][T17119] [ 777.277034][T17119] dump_stack_lvl+0x99/0x250 [ 777.281641][T17119] ? __asan_memcpy+0x40/0x70 [ 777.286248][T17119] ? __pfx_dump_stack_lvl+0x10/0x10 [ 777.291462][T17119] ? __pfx__printk+0x10/0x10 [ 777.296091][T17119] vpanic+0x281/0x750 [ 777.300076][T17119] ? __pfx__printk+0x10/0x10 [ 777.304660][T17119] ? __pfx_vpanic+0x10/0x10 [ 777.309155][T17119] ? is_bpf_text_address+0x292/0x2b0 [ 777.314443][T17119] panic+0xb9/0xc0 [ 777.318166][T17119] ? __pfx_panic+0x10/0x10 [ 777.322584][T17119] __warn+0x31b/0x4b0 [ 777.326552][T17119] ? path_noexec+0x1af/0x200 [ 777.331132][T17119] ? path_noexec+0x1af/0x200 [ 777.335712][T17119] report_bug+0x2be/0x4f0 [ 777.340033][T17119] ? path_noexec+0x1af/0x200 [ 777.344611][T17119] ? path_noexec+0x1af/0x200 [ 777.349186][T17119] ? path_noexec+0x1b1/0x200 [ 777.353765][T17119] handle_bug+0x84/0x160 [ 777.357998][T17119] exc_invalid_op+0x1a/0x50 [ 777.362492][T17119] asm_exc_invalid_op+0x1a/0x20 [ 777.367326][T17119] RIP: 0010:path_noexec+0x1af/0x200 [ 777.372526][T17119] Code: 02 31 ff 48 89 de e8 d0 e3 89 ff d1 eb eb 07 e8 e7 de 89 ff b3 01 89 d8 5b 41 5e 41 5f 5d e9 08 90 47 09 cc e8 d2 de 89 ff 90 <0f> 0b 90 e9 48 ff ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c a6 [ 777.392126][T17119] RSP: 0018:ffffc900000f7bd8 EFLAGS: 00010283 [ 777.398187][T17119] RAX: ffffffff8235dc1e RBX: ffff88803028ccc0 RCX: 0000000000080000 [ 777.406146][T17119] RDX: ffffc9001d5c1000 RSI: 000000000000006a RDI: 000000000000006b [ 777.414143][T17119] RBP: 0000000000080000 R08: ffff88807d66bc00 R09: 0000000000000003 [ 777.422101][T17119] R10: 0000000000000003 R11: 0000000000000002 R12: 0000000000000011 [ 777.430056][T17119] R13: 1ffff9200001ef90 R14: 0000000000000000 R15: dffffc0000000000 [ 777.438020][T17119] ? path_noexec+0x1ae/0x200 [ 777.442610][T17119] ? path_noexec+0x1ae/0x200 [ 777.447186][T17119] do_mmap+0xa43/0x10d0 [ 777.451342][T17119] ? __pfx_do_mmap+0x10/0x10 [ 777.455919][T17119] ? down_write_killable+0x178/0x230 [ 777.461545][T17119] ? __pfx_down_write_killable+0x10/0x10 [ 777.467176][T17119] ? common_file_perm+0x1b5/0x230 [ 777.472211][T17119] vm_mmap_pgoff+0x2a6/0x4d0 [ 777.476812][T17119] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 777.482096][T17119] ? __fget_files+0x2a/0x420 [ 777.486670][T17119] ? __fget_files+0x2a/0x420 [ 777.491241][T17119] ? __fget_files+0x2a/0x420 [ 777.495815][T17119] ksys_mmap_pgoff+0x51f/0x760 [ 777.500575][T17119] __do_fast_syscall_32+0xb6/0x2b0 [ 777.505681][T17119] do_fast_syscall_32+0x34/0x80 [ 777.510527][T17119] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 777.516839][T17119] RIP: 0023:0xf702e539 [ 777.520892][T17119] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 777.540491][T17119] RSP: 002b:00000000f541e55c EFLAGS: 00000206 ORIG_RAX: 00000000000000c0 [ 777.548910][T17119] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000003000 [ 777.556884][T17119] RDX: 0000000003000007 RSI: 0000000000000011 RDI: 0000000000000005 [ 777.564847][T17119] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 777.572807][T17119] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 777.580765][T17119] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 777.588735][T17119] [ 777.592002][T17119] Kernel Offset: disabled [ 777.596308][T17119] Rebooting in 86400 seconds..