last executing test programs: 2m34.51036047s ago: executing program 2 (id=182): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000fff50000170101c0"]) 2m12.75617269s ago: executing program 2 (id=182): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000fff50000170101c0"]) 1m55.921250935s ago: executing program 2 (id=182): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000fff50000170101c0"]) 1m19.874275114s ago: executing program 2 (id=182): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000fff50000170101c0"]) 44.835113246s ago: executing program 2 (id=182): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000fff50000170101c0"]) 17.8887501s ago: executing program 2 (id=182): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000fff50000170101c0"]) 8.944544359s ago: executing program 4 (id=807): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x70350bb51f470f97) io_uring_setup(0x668, &(0x7f0000000480)) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff"], 0x7c}}, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="fe", 0x1}, {&(0x7f0000001240)="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", 0x44b}], 0x2}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x3d, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) 4.717214526s ago: executing program 4 (id=808): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f0000000040)={0x0, 0x2710}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) sendmmsg(r1, &(0x7f0000004500)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)='j', 0x1}], 0x1}}], 0x1, 0x0) 4.507832148s ago: executing program 4 (id=809): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESOCT], 0x17) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000077e000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000040)="0f01c2b805000000b9030000000f01c166ba430066b8003866efc4c105f141d0f3260f35c4e17c50e80f23090f825d00000067650f01ca2e0f08", 0x3a}], 0x1, 0x0, 0x0, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.46045042s ago: executing program 1 (id=810): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0xddfdffdb}) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000000)) 4.013244853s ago: executing program 1 (id=813): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x2000035e, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r0, 0x5, 0x1, 0x0, &(0x7f0000000000)='%', 0x0, 0xcff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socketpair(0x11, 0x3, 0x300, &(0x7f0000000000)) 3.658838792s ago: executing program 4 (id=814): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f00000001c0)={0x28, 0x10000}) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000480), &(0x7f0000000280)={'syz', 0x0}, &(0x7f0000000a00)="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", 0x169, r1) r3 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r4, r2}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'crct10dif\x00\x00\x00 \x00\x00\x00+\xcc\xff%\xd2cTH,\x00'}}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x4, r5}) ioctl$DMA_BUF_SET_NAME_A(r7, 0x40086200, &(0x7f00000001c0)='\x03\x00\x00\x00\x00\x00\x00\x00-control\x00') ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105511, 0x0) 3.494170184s ago: executing program 1 (id=815): timerfd_create(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000004400000008000300", @ANYRES32=0x0, @ANYBLOB="300000000005001801200000df"], 0x2c}}, 0x0) syz_io_uring_setup(0x174a, &(0x7f0000000100), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x24f8, &(0x7f0000000240), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[@ANYRES8=r3], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 3.472210959s ago: executing program 3 (id=816): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000000000000000000000000000bb", @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000140)=0x5, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000004400)={@ifindex, 0xffffffffffffffff, 0x0, 0x0, 0x0, @link_id}, 0x20) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002540)=""/216, 0xd8}}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000240)={0x20, 0x4}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.9775149s ago: executing program 0 (id=817): pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, 0x16, 0xa01, 0x0, 0x0, {0xa}, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x9, 0x0, 0x0, @u32}]}]}, 0x20}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x2, 0x0, @loopback, 0x9}, 0x1c) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0), 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendto$inet6(r3, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5dac14e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r3, 0x1) recvmsg(r3, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000900)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r3, @ANYRESOCT=r5, @ANYRES64=r4, @ANYRESDEC, @ANYRES64, @ANYRESDEC=r2, @ANYRESOCT=r7], 0x13c}, 0x1, 0x0, 0x0, 0x4}, 0x40448d2) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r2) sendmsg$BATADV_CMD_GET_HARDIF(r7, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x30cff28cd98764d6}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="00032cbd7000ffdbdf2505000000050038000100000008000600", @ANYRES32=0x0, @ANYBLOB="057c1bb78102fc5b5840c82203942edfa4a0136bec89456d3b11703ee797788d93227352bb325b2fb40f596c6aae9aa3d06b6fe6bc7f5b5c9e22b082e0d25834eb3e75009ce39892352979213e9cd251cd37c75fe9170bc4d5c0e4fefe9a2fa255bb287207fd9f94302689008ad7cbe6c14acb43f4948019e51735058a6521d18f5e60c495a22e2687ecd7517204b32f2310134b7dcc31ae454822d3f52c3b31e589e0ad8027815f58cd21773b118334fae0dda00abc326f485fd74d76c0f0ff507fa550d9e42be2d7f91298f7cd61f558b03a834d"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8080) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, r8, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80003}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x289}]}, 0x5c}}, 0x80) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="3bb1ec56a3fe633706daa703116e10121929cecc2e244f4413d04f51dc48b87eb541760e8e48a09854d1a55385882a069ce0af5e8aa2523f598e0fac55809eee1178993a843b733e8ce4ef832f000000000000004f41dec653af1dc99c38f345f31fa4951acd389777a5719f4e612f2edf6df8a0e1fe090020969a517d7469c8f24183ae31fcc71bf29f2e9f206959037bc4f0ac0d0b574eb629e210", @ANYRES16=r8, @ANYBLOB="00022abd7000fbdbdf250e0000000800310003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="014127bd7000ffdbdf00"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x804) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x4c, r8, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x40}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x800}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48890}, 0x24000880) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f0000000040)={0x2c, r8, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r8, 0x0, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfffffff8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xf7}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xac7b}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x8840) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r8, 0x0, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4081}, 0x240008c0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r8, 0x800, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000140)=@framed, &(0x7f00000001c0)='GPL\x00', 0x4, 0xcf, &(0x7f0000000200)=""/207, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380), 0x10}, 0x90) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000009080)={0xa4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x1d7}, @CTA_MARK_MASK={0x8}]}, 0xa4}}, 0x0) 2.915545607s ago: executing program 1 (id=818): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @private=0xa010102}, @in6={0xa, 0x0, 0x0, @private0}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000a00)=[@in={0x2, 0x0, @loopback}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x20) creat(0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="0202000400"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6349363006"], 0xfdef) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="007a707573657420006370750806"], 0x12) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYRESHEX=r3, @ANYRES8=r4, @ANYRESDEC], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r7 = accept(r2, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r8 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) 2.615004363s ago: executing program 3 (id=819): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f0000000040)={0x0, 0x2710}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) sendmmsg(r1, &(0x7f0000004500)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)='j', 0x1}], 0x1}}], 0x1, 0x0) 2.558744333s ago: executing program 0 (id=820): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f0000000080)={0xa, 0x4e22, 0x80000, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f00000008c0)=[@rthdr={{0x18, 0x29, 0x3e}}], 0x18}, 0x0) 2.293109456s ago: executing program 0 (id=821): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', r0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = syz_open_dev$I2C(&(0x7f0000000480), 0x0, 0x0) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000180)={&(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0}, {0x0, 0x2610, 0x0, 0x0}], 0x2}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="18000500000000000000000000000000f13218114800f82755913cf371064d3f38a8", @ANYRESHEX=r2, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x90) socket$inet_sctp(0x2, 0x0, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r5 = openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap(&(0x7f0000963000/0x3000)=nil, 0x3000, 0x0, 0x10, r5, 0x1000) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e24, @dev}, 0x10) writev(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r6, 0x0) recvmmsg(r6, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xfffffffffffffc93}}, {{&(0x7f0000000540)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x0, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/65, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000040000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000001c0)='block_split\x00', r8}, 0x10) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000740)=@filter={'filter\x00', 0x42, 0x4, 0x3c0, 0xffffffff, 0xf8, 0xf8, 0x208, 0xffffffff, 0xffffffff, 0x328, 0x328, 0x328, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x73}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x5}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa0, 0x110, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "d675ef1a27acea4c3c29b1bc225f00641b4756e72736ac9737ed75a12134a9df80284d4b52f6e9a2ed7f2cf113cb0032d3b0e7802fc1a581c0cfc778aab4a6ef"}}}, {{@ip={@private, @loopback, 0x0, 0x0, 'batadv_slave_0\x00', 'veth1\x00'}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00'}}, @common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x420) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x3, &(0x7f0000000280)=[{}, {0x1, 0x0, 0x0, 0xfffffffc}, {0x6, 0x4, 0xe3}]}) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000003c0)={'vcan0\x00'}) 2.270170098s ago: executing program 3 (id=822): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0xfffffffa) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00769a7d8200010000001495595915303d6000"}) r4 = syz_open_pts(r0, 0x0) ioctl$TCFLSH(r4, 0x540b, 0x2) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c92012000e000500"], 0x17) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r7, r6, &(0x7f0000002080)=0x64, 0x23b) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r9, 0x1, 0x3e, &(0x7f0000000080)="3a0dc768", 0x4) bind$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r10, r8, &(0x7f0000002080)=0x64, 0x23b) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r12 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r12, r11, &(0x7f0000002080)=0x64, 0x23b) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r6, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0xfffffffffffffe46, 0xffffffffffffffff, {0xfc}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x20, 0xa, &(0x7f00000005c0)=@raw=[@map_idx_val={0x18, 0x7}, @printk], &(0x7f0000000640)='GPL\x00', 0x3, 0x1e, &(0x7f0000000680)=""/30, 0x28656d2ed8f805b9, 0x4, '\x00', 0x0, 0x2f, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f00000006c0)={0x3, 0xa, 0xfffffff7, 0x7fffffff}, 0x10, 0xffffffffffffffff, r8, 0x3, &(0x7f0000000740)=[r11, r6, r13], &(0x7f0000000300)=[{0x1, 0x3, 0x10, 0x9}, {0x4, 0x4, 0x5, 0xb}, {0x3, 0x5, 0xb, 0x6}], 0x10, 0xffffffc0}, 0x90) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r6, 0xc02864ca, &(0x7f0000000080)={&(0x7f0000000000)=[0x0, 0x0], &(0x7f0000000040)=[0x0, 0xffffffffffffffff, 0xf4], 0x49, 0x2, 0x2}) r14 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r14, &(0x7f0000000180)) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x3c}}, 0x0) 1.805246808s ago: executing program 1 (id=823): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) r1 = socket(0x2, 0x2, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r2, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x6) ioctl$NBD_DISCONNECT(r2, 0xab08) ioctl$NBD_CLEAR_SOCK(r0, 0x125f) socketpair$unix(0x1, 0x0, 0x0, 0x0) r3 = dup(0xffffffffffffffff) write$FUSE_INIT(r3, &(0x7f00000020c0)={0x50}, 0xfde7) fcntl$setsig(0xffffffffffffffff, 0xa, 0x6) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="01000300"}) 1.527259271s ago: executing program 4 (id=824): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x6, 0x0}, {0x18, 0x9, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.158218547s ago: executing program 3 (id=825): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x2000035e, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r0, 0x5, 0x1, 0x0, &(0x7f0000000000)='%', 0x0, 0xcff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socketpair(0x11, 0x3, 0x300, &(0x7f0000000000)) 1.088926081s ago: executing program 4 (id=826): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=ANY=[@ANYBLOB="80000000080211000001080211000000505050505050000000000000000000006400210000060202020202020100050300000025030000043c04000000002d1a00000000000000000000000000000000000004000000"], 0x62) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x14, r1, 0x5, 0x0, 0x0, {{}, {@void, @void}}, [@chandef_params]}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000200095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) socket$can_raw(0x1d, 0x3, 0x1) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r5, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r5, &(0x7f0000000040)='q', 0xa792a, 0x8000, 0x0, 0x57) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000100)='wlan0\x00', 0x10) recvfrom$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x20000400) socket$pppl2tp(0x18, 0x1, 0x1) poll(&(0x7f0000000040)=[{r4}], 0x1, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000900)={'veth1_to_team\x00', {0x2, 0x0, @dev}}) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f00000000c0)={'geneve0\x00', {0x2, 0x0, @broadcast}}) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xb4001, 0x0) ioctl$PPPIOCSMAXCID(r8, 0x40047451, &(0x7f0000000280)=0x6) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r9, 0x112, 0x9, 0x0, 0x0) 490.233686ms ago: executing program 0 (id=827): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002800)={0x1, 0x58, &(0x7f0000002780)}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x3, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000004180)=ANY=[@ANYBLOB="18020000e2ffffff00000000000000c685000000360000009500001800000000922ae83713ab9600010000801b10fb54a8cb72d232ad558c46fff4208d4990ec11ce9413ac30e00bd0081f8504e19a5183d769676520e98a263345e44d5ad12bca35510100c4d86abeb12303ff1c9fe0d0020000d60400000007d3670000008aff66d6b3181ffc1d62a3954c1198bbc4fa13aee48ca9e8969faebf3183fe803ab3f5024b52dc265b36fc9dae00a09404f01f9504d0976d252bd8d24538556e5e57bee3b8cf464ef3c6a7def8bad3ca6e3abdb21696e340bb8e2a093add57196b40def3858ef569147fa4108328392d322ab5df10a2f69a6bdf72ee7944e810d0223917c3d042410f57466f59544047d6d8ac44060000000000ee16c729300d2301800000000000002b5a8b05fcc154ad5290a8cdb97c343f454ff69dd6cbde49b28a6cb5f4fc0001745cff6e00e7ffffff0000acf3209a08439f1ff01779b6f6df7e02aa6d7760525b595fe1f697bc114ed1778e97a3f0395f946974cfb458be2a34cf924dc37b5592bf17956f3547497aba814382ff67b345b677a9d6523d87008000000400000000003fe8613ca29ff92be0d8deffff7b68136b0046d535dd39c0f35408869e9b342b953f91447e6b9eab304f134306320600a44095254b45a6c1312a13696c7202df5f764713504facc532c5a6d44d99ec7530ed7b0311000000000000e54e9072a22d911f4a2c2e2fa806e63c5cd98a8569a6d6bcfb000064885117e2ad910eae67e0ebe380d0f648713e68153579e02d71c58d147b00821ab9a6475b31e1ebf1369a04000000fbf3983f283f2f00000000992774814d63c933912d000006000000a66acb0a38856929e7d8b1b06c9bd5d7e5490f3b8596b694ea9483bd4bd287c83dd998a74694d18bdd8ad0983bc90770bbd26a82b9d99d5fc04563b523c47ef8c33400e90d02000000000000000edf1147a7afe772cd45af8aeffe2753088e02ca6bb2feec446ce7dbce66f0a93a03371320980865c7c62ea4d8f8a864dce9fa85aeb0454349100296ee2dba39c3f6fd6cf96714e11fe03b5062809a7418b165dd0336d226bac1e1223be1c97b15175d0e664beb126000e96549e1a1228c686edb475b705eaa9515c96f4fc6b3c925ea404e0f1de61026dc6c6618580fd6ce9eac602c1756f6d1056712412131ed9925989e01eae489ec7052e0ed72c326c7a8aa63999e2297c54ce1822d14b7c7699a9d0600f11f2e7f474cffbc35bc8623cd5eb68af82275a940be0400000000000000bcc3fbe7d90de96d6a8e9f32f18d1f606b381e4903b500000000000000000000004a2357ba5f6000de1cfa88b7165dcf4f2aaee86d4802000000000000008fdb686d5da2a42e4b5024b6535811f362201d4f82012e6af704973d04ea923c19e6cb723c1923b3eea2d73e176dff383c9fbbac53dfdcb1a68c98e96fe39eec23963faf3ebed3409144c7c53d6318ced678a621450a9b01e9f2772e5f2999d3435da02556e36c3215d2bd4e96c93bff3ad04a82ff3cfadcf65eb92adc6c68d66b11cb2d7556414a86dfa94bb7aa52c7febb1e9b2efcbbc5bccf9d39bed802f4f056976a9a362ee9cc624ec454b90200fd9603f96908bddc14500000000000000000000000000044d917c62b27679913075731e8fddb07c10c82002d60181588ae63a440454287de9e340f611267f37bdd0f2d21cb06fcaf45a0a297e396f428d43371424b307eef82c5d6d19f3ef0d3b8f7fa51957e3099caab31133b34a1d3eebc0f0c9056df2e9667ba0b55695c7894010079b07e7aef7785e2486472b5cba1f3346c1e8e23deb8c82bb6eb2c72c484241dc3b66da78260f800fffd39368b952f6f4a10295c50c887a31d8b543c5d10f2dbd4d0b84eaad43feb6e169a9f2fcff7000000000000000000e011bc6366f56fa787f212c1f8c0f47f50b1e9b5d841ea55fe569bb7bf1e78191c8a02ad436725771738a2a98891971e3b932352896e1ea10f62e8ef7a87e16151b39d6c27575714540d8c293a3fa4b5a825360423c1cbc8b5d19167152823ed853140edda002c16c842b168bb55f6bb713deb57d0aa78d6d4e5fc5be2c402bd246128f41bcb02000000892b135a92e8c844938aa98ba4839a1408a696454d40e5eed4d4dce481ca86bfac54c330331b7f2cde17cbaeb0377696faf546ecbe742d73d47d726a50f6e752f3325255bd7e8b5923aa3cfb6f7e06494f21ca450139c558000000000000000000000800000000000000000075aa0000000000000000000000005560bd9eb81e839e4992e64b074a66cccccf00334fa94da8477be7d99b558ec6a5b1596ac1e7617c6b32eed0cc70286caf2c5189a103f4b0b04aff171c4d388ccf67fea37e782f025c94c853cde330a193a967d907a8c88fcb033e680f559a72150cb900bafcd536f48797915a2fe9922ce27300009e1b36aa4730117d9b00000000003c630000000000008fbbd11b015c415ca04192fbfb1a8b0e3460af35771dbac10062835c9bab3ad09f7a022c52d8000000000000000000004000000000000000000000000000000000000000000400000000000000000000000000006ec473c54399b7b8aa1ee46132fc45da8292631178cecf19550108b8b8423de42957ffe9bb6d752e68d2bc2ce777a17bf4dfdfee5de0f3e4dadf51ab9562827b762fa611ba5f32861c19dffe1dc9fd5c41cd46cf131fd6b0c2ddad90ac33f768f9ecc70327c59918fa5a249befe98262f53c8182d95f6da3698a6a88c2c31d801a8f1f5e0ce05138d5422da0a6a62b9dfe1f39775d1d0c9186096415f544aaf76b0a1c877a6c826a5adcfb22c4a0e5a46271caa3eaf4f389dd5f3c20dbddc0377a4266d7b9fd61b9287e9b4be0a413ee31be0ddecab0ef7b25cba1fb3654ddf291ecb7768ac1e177042cb4c452fa6b3966950000000000000000c187da23d6855500fe8510b51e13a890e394b84a6ea2cc8d42b97c697c29122298d55e2e1cca8e07abda2606a3f381c64b9fec0000000a7965e4854e8e3572ad5149b3872342dea9252132860c9af1bd5fe263c0313dea5d6e0c11a466d6892ed65f34667dd79b07b5cbdd8aa7dd561a26b5562d4861a7e1b0f48930e0b696ea3bee7eb72794e163d7aeac9a0fa5403ac9cb421eae283b0550f1d0d339cd7b96e71d3ab48ad9d7975e0c9b117f71d3ab80a0c9b0284ecc469fa6181c9c71fce07a6ffb23296a107763138e8d9876291af2076890c47925ac773d95d2ca42acb3e5f3a1550665b898462c139ffd0106bc8a61b6117d252efcab7106b4c3a3c13a70ff452e9d2096142c517b0e91b5cf88332faca5b3ee96363065c3ce32d3d39ec36e20d597e05664f2526bd918090649da11f7299789d00f5024df1e99d3efecb9b457642fe810370ba4fbe00fa60a28af966a27a1659e448bbe43a1dcd2ea760018b57a36ac41ef2051a7b703d55c0602540663016e20d50385766df4dac47802a55bd38dd767ee9960c6daa704fc5d01a1459134d1b9edfde3be9e25a110228c64253588ff420644dbc0854e69a7bdda72f93ceaccf92cfe7dd6296c950db10f6dd8a5ef9b73cf6a12a1ba16fdc7e35b805f4fd2fcff0a623722149c1465e4de2d53f0f10b14c21865027abc71a12cb1e9f8029c7a20000000eeb0d53a83e518c8d2052c08b515d9d0bde24ac4e798040c7db0bb03c019507d6377f3d5dd94a27abc6d6b120d61f772407e0d2cb50d29168b68aef9f176b4c3aa8b21279d4ea9c1f669aa8c2c17d5b3a8d1dda58d26f1019af04b7774c85d5bce8be010f27c5211938031c3404680b01279c778bd1fe1b48c4b5b8e0fe756e54a8d76b7cec5e3407d93b4eadc446440607de844acf5524a4657e33af2115547b735b57b5092d0bc8fa6acb832509abe0882d570ce400aaebd7baff88526608d6991aac95751671174129457e4a03aca69d82b64b89e6ad6ed1e275ec5002e48170e4c7b4f3971481098dedb88fba90770e44bf404d5a97fefe2fe8e459fe45933b78c7ab5fe985a480193a20fb07da1455fb283df68af569ac82aa6dc703e29bf158931fb79f2abfa6ff7eb8c4f381c9da58bea460e2ead969933e5391970ca4fddd64da2e5df9c4d82044068caaaab771b37bb06bbe673056d849825525f1120b2250f6b8520381f7a74b1c687781cb6b23e67b918844b83dbaeeb559ec8520d710dd6d6b4e64838bd434a36ed03fc0c488b24571032ffbc9f8ce97041e1bc4729d539358dc9599c1266b9ce2cb6dd0ad57a6e9d3d4a11a27f70b2934c96237e2ba09c58eeda678d4d08b6da99b7a86e946215afb1b48792fde54492e306cb5342e2589874b603a1de972b1f09cc350096f5c3e814118af9ba0793cfdf20c77b34eacfdf63ce59ec4d2e867bf884e941559b068d908325667672b5e1cf71f4829c0493e8b141489ed926b822becead7a0a2b4a4c008ab16b616d60f347e4da54f06443507efe57ea62399ef4eb11b2f559e1b056456a53998bf1c6d13c92e75136147f91ae3a75ca15eb1b51bf700b3c0bf54bc3745ff313c5e75dc66386897f6ee45429371b8d0878c442ad2fe9baf85c1390da13efc353ccbef950c29f39ddf436f0d9bf1be1515ed251d8b6f11ecb16b1e8d1ed04196e9b6c2f9e068b7749bb6c1f533e493f22c901662c65cb761dc2eeff2f698bd4dbae83e2dfdc4f1c7f918a00515c1bc189d10ec22b35c92725cbf0ba244fd029c4f026f68e000000060000ab0476c3fd7f7c1e5c000000000000000000000011e43e39d3f4394fbfa13c416b1c443c5e52eea726491ad75100ebad7c6d5a665c59a3fb158e43da904f19e7e8daa4e90390b8da945f6cd78536c0d2be07221f85ad46b180f256d4d84592691d15d65896b66b63a46705338b67b72dc1c3075fcdc5cbffb0366151632ba5be8ae815dfea9fadfd31c473a24a73d3e5116c3023b3563c72d26fbd5987c41e01b59dcf71b2bde5ca4ef8d92fd3613c768b35223f6fd0b5e9a8b98cccf1e2b4612e620e3a159d6365c9045aaa826aa0ee6d26cf0397ce674c20824584b464ebdc2f3ea26a7aec4570b242a6677a4e9187f8591c3a9b"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096}, 0x70) sendto$inet(r2, &(0x7f0000006e00)="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", 0x1000, 0x4, &(0x7f0000007e00)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x0, 0x2, &(0x7f0000000000)=@raw=[@map_fd], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r3}, 0x80) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000040)={'wg0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_GSO_MAX_SIZE={0x8}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x1000000}]}, 0x30}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000000040)={'wg0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_GSO_MAX_SIZE={0x8}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x1000000}]}, 0x30}}, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_timeval(r9, 0x1, 0x9, 0x0, &(0x7f0000000140)) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000002380)={@map, r4, 0x16}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000024c0)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002480)={&(0x7f0000002400)=@delchain={0x44, 0x65, 0xd3e, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0x3, 0x2}, {0xfff3, 0x15}}, [@TCA_CHAIN={0x8, 0xb, 0x100}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_RATE={0x6, 0x5, {0xa4, 0x20}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000094}, 0x30000010) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r9, 0x8983, &(0x7f0000000100)={0x2, 'batadv_slave_1\x00', {0x6}, 0x100}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003100)={0xffffffffffffffff, 0xe0, &(0x7f0000003000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000002e40)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000002e80)=[0x0], &(0x7f0000002ec0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000002f00)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000002f40), &(0x7f0000002f80), 0x8, 0x10, 0x8, 0x8, &(0x7f0000002fc0)}}, 0x10) sendmmsg$inet(r0, &(0x7f0000006cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000002340)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002300)={&(0x7f0000003140)={0x58, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PEERS={0x8, 0x8, 0x0, 0x1, [{0x4}]}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x20}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r10}]}, 0x58}}, 0x40001) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r0, &(0x7f0000000200)="237c7b1687639c0585e63611f4845bb98fb66c465b1445b484116ac5c10409c286d2ef2d2b9ef654aaaf95df17a0801b96519675908198f2a6edcca1d8bb46bca725bf3073c0dfc8838496f2b584843ab52391749d9cf645a567f3ea2e9a080fff01000079d5e325f67c268507a815f4703a432c342885eba6c73f8a44e89db3a0b83abc5f07ca194f746456c0e95fb66c740b95ea53b5499ede1dd4a133838e2b0370f53ba8b91ca0de9f1bdced49ee88f108e8198c7c6677da754f1b648b936b9f787973c7e95061627dedba51aa8da809ea30adf079d1943355f71f3f", 0xde, 0xb, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x3, 0x0, 0x0) 416.389318ms ago: executing program 3 (id=828): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r3, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x90}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x9c) 271.213779ms ago: executing program 0 (id=829): mkdir(&(0x7f0000000580)='./file0\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@fwd={0x5}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x1}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x3c}, 0x20) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='mpol=bind:0-', @ANYRESOCT]) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x4}, 0x9c) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x3c, r2, 0x0, 0x0, 0x0, {0x36}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000080)="7800000018002507b9409b14ffff0b7a0204be04020714056402040c5c0009003f0006180a0000000d0085a168d0bf46d32345653610648d270005000a06024e49935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000400160008030a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) 37.34711ms ago: executing program 3 (id=830): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) socket$inet(0x2, 0x2, 0x1) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x810, 0xffffffffffffffff, 0x0) ioctl$KVM_IRQFD(r0, 0x4020ae76, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x8004}, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x0, 0x0, {0xa}, [@ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8}]}, 0x1c}}, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000280)={@local, @local, @val, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f81fcb", 0x60, 0x3a, 0x0, @private0, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "4aa1d3", 0x0, 0x0, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @loopback}, [@routing, @srh={0x0, 0x3, 0x4, 0x1, 0x0, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @remote}]}, @srh={0x0, 0x20000000000000a1}, @dstopts]}}}}}}}, 0x0) sendmsg$inet_sctp(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000002c0)="0cc4c53e52cd4f1e2787e1cd1e55684e749d3b21ae068680fadc5cc648c79186f3d98ccd3a5b1732936dcf74538ffc97a9f821", 0x33}, {&(0x7f0000000340)="9c89ca312f027074ae7d79f183f678fc695c50a34d0e4133881f084b6d440ab6868186a9eabf0b8e5760adbc5a349da9d1620af787745bee2d6d2e6a84ee1fe7132e692fed0e0fe948d775263f5b67a91c4bd74ceeb68e733b2389262377b79861ddf5d86ca1a6388ab7257d5f1271a35a8c79a96e3e28f094fdfa96736ef41516bd3fbec3fd955247007a18dd527d224592b6fc09a0", 0x96}], 0x2}, 0x0) unshare(0x22020400) r5 = socket(0x15, 0x5, 0x0) recvfrom$ax25(r5, 0x0, 0x0, 0x105, &(0x7f0000001c00)={{0x3, @default}, [@bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x20000000) 37.034947ms ago: executing program 0 (id=831): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x0, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/233, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, &(0x7f0000000700)=""/99, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000004c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x20000) write$eventfd(r3, &(0x7f00000000c0)=0xfffffffffffffffe, 0x8) 0s ago: executing program 1 (id=832): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x15) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBLED(r3, 0x4bfa, &(0x7f0000000000)) bind$xdp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, r1}, 0x10) ioctl$TCFLSH(r2, 0x404c4701, 0x20000000) kernel console output (not intermixed with test programs): 608] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 169.076754][ T4608] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 169.108387][ T4608] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 169.121650][ T4608] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 169.129861][ T4608] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 169.138384][ T4608] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 169.832351][ T6616] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 170.023957][ T5565] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 170.050087][ T5565] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.064980][ T6622] netlink: 32 bytes leftover after parsing attributes in process `syz.0.336'. [ 170.091913][ T5565] bond0 (unregistering): Released all slaves [ 170.180653][ T6605] netlink: 12 bytes leftover after parsing attributes in process `syz.1.330'. [ 170.451711][ T5225] vhci_hcd: vhci_device speed not set [ 170.511222][ T5310] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 170.722814][ T5310] usb 1-1: Using ep0 maxpacket: 8 [ 170.765355][ T5310] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 170.800714][ T5310] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.820257][ T5310] usb 1-1: config 0 descriptor?? [ 170.879937][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 170.924876][ T5565] hsr_slave_0: left promiscuous mode [ 170.953315][ T5565] hsr_slave_1: left promiscuous mode [ 170.980070][ T5565] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.992196][ T5565] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.016021][ T5565] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.028001][ T5565] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.060773][ T5310] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 171.167537][ T5565] veth1_macvtap: left promiscuous mode [ 171.171868][ T5277] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 171.178989][ T5565] veth0_macvtap: left promiscuous mode [ 171.181272][ T4608] Bluetooth: hci1: command tx timeout [ 171.205240][ T5565] veth1_vlan: left promiscuous mode [ 171.212301][ T5565] veth0_vlan: left promiscuous mode [ 171.401646][ T5277] usb 5-1: Using ep0 maxpacket: 16 [ 171.427137][ T5277] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.448851][ T5277] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 171.459661][ T5277] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 171.472771][ T5277] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 171.515704][ T5277] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 171.536802][ T5310] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 171.548482][ T5277] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 171.564663][ T5310] asix 1-1:0.0: probe with driver asix failed with error -61 [ 171.578602][ T5277] usb 5-1: SerialNumber: syz [ 171.601268][ T5277] cdc_acm 5-1:1.0: skipping garbage [ 171.611090][ T5277] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -12 [ 171.866840][ T5277] usb 5-1: USB disconnect, device number 11 [ 172.237759][ T5565] team0 (unregistering): Port device team_slave_1 removed [ 172.287004][ T5565] team0 (unregistering): Port device team_slave_0 removed [ 172.876917][ T6622] netlink: 'syz.0.336': attribute type 10 has an invalid length. [ 172.888193][ T6622] team0: Device veth1_macvtap failed to register rx_handler [ 173.299579][ T4608] Bluetooth: hci1: command tx timeout [ 173.432396][ T6683] openvswitch: netlink: Message has 4 unknown bytes. [ 173.825998][ T30] audit: type=1326 audit(1722559992.690:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6685 comm="syz.4.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79b3773b9 code=0x7ffc0000 [ 174.046318][ T30] audit: type=1326 audit(1722559992.720:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6685 comm="syz.4.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79b3773b9 code=0x7ffc0000 [ 174.201195][ T5310] usb 1-1: USB disconnect, device number 9 [ 174.483327][ T30] audit: type=1326 audit(1722559992.740:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6685 comm="syz.4.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7fd79b3773b9 code=0x7ffc0000 [ 175.330567][ T4608] Bluetooth: hci1: command tx timeout [ 175.438894][ T30] audit: type=1326 audit(1722559992.740:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6685 comm="syz.4.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79b3773b9 code=0x7ffc0000 [ 175.974865][ T30] audit: type=1326 audit(1722559992.740:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6685 comm="syz.4.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79b3773b9 code=0x7ffc0000 [ 176.149882][ T6608] chnl_net:caif_netlink_parms(): no params data found [ 176.245643][ T30] audit: type=1326 audit(1722559995.110:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6698 comm="syz.1.360" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc025b773b9 code=0x0 [ 177.410459][ T4608] Bluetooth: hci1: command tx timeout [ 179.793722][ T6608] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.822975][ T6608] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.891030][ T6608] bridge_slave_0: entered allmulticast mode [ 179.909217][ T6608] bridge_slave_0: entered promiscuous mode [ 179.936010][ T6608] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.955576][ T6608] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.981157][ T6608] bridge_slave_1: entered allmulticast mode [ 180.008818][ T6608] bridge_slave_1: entered promiscuous mode [ 180.142067][ T6608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 180.143826][ T58] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 180.163433][ T6608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 180.285549][ T6608] team0: Port device team_slave_0 added [ 180.299481][ T6608] team0: Port device team_slave_1 added [ 180.380502][ T58] usb 4-1: Using ep0 maxpacket: 16 [ 180.383631][ T6721] netlink: 32 bytes leftover after parsing attributes in process `syz.0.368'. [ 180.398781][ T58] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.399817][ T6608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 180.422093][ T58] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 180.432808][ T58] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 180.436170][ T6608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.447112][ T58] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 180.470025][ T6608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 180.498289][ T6608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 180.508637][ T942] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 180.516773][ T58] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 180.516881][ T58] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 180.516965][ T58] usb 4-1: SerialNumber: syz [ 180.535008][ T58] cdc_acm 4-1:1.0: skipping garbage [ 180.545192][ T6608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.559132][ T58] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -12 [ 180.575016][ T6608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.674342][ T6608] hsr_slave_0: entered promiscuous mode [ 180.684075][ T6608] hsr_slave_1: entered promiscuous mode [ 180.693114][ T6608] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 180.705018][ T6608] Cannot create hsr debugfs directory [ 180.730715][ T5225] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 180.770643][ T942] usb 2-1: Using ep0 maxpacket: 16 [ 180.783812][ T942] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.805210][ T942] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 180.850459][ T942] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 180.870076][ T942] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.914146][ T942] usb 2-1: config 0 descriptor?? [ 180.918571][ T58] usb 4-1: USB disconnect, device number 17 [ 180.927256][ T5225] usb 1-1: Using ep0 maxpacket: 8 [ 180.944775][ T5225] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 180.962911][ T5225] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.996929][ T5225] usb 1-1: config 0 descriptor?? [ 181.239284][ T5225] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 181.346405][ T942] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 181.369399][ T942] microsoft 0003:045E:07DA.0005: unknown main item tag 0x1 [ 181.388611][ T942] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 181.397226][ T942] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 181.405815][ T942] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 181.415013][ T942] microsoft 0003:045E:07DA.0005: No inputs registered, leaving [ 181.437113][ T942] microsoft 0003:045E:07DA.0005: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 181.460575][ T942] microsoft 0003:045E:07DA.0005: no inputs found [ 181.468727][ T942] microsoft 0003:045E:07DA.0005: could not initialize ff, continuing anyway [ 181.661888][ T30] audit: type=1326 audit(1722560000.530:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6724 comm="syz.3.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47f41773b9 code=0x7ffc0000 [ 181.686276][ T6726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.716506][ T6721] netlink: 'syz.0.368': attribute type 10 has an invalid length. [ 181.725752][ T30] audit: type=1326 audit(1722560000.560:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6724 comm="syz.3.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47f41773b9 code=0x7ffc0000 [ 181.734097][ T6721] team0: Device veth1_macvtap failed to register rx_handler [ 181.759714][ T6726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.763833][ T30] audit: type=1326 audit(1722560000.570:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6724 comm="syz.3.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f47f41773b9 code=0x7ffc0000 [ 181.789708][ T5225] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 181.817775][ T5225] asix 1-1:0.0: probe with driver asix failed with error -61 [ 181.887071][ T30] audit: type=1326 audit(1722560000.570:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6724 comm="syz.3.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47f41773b9 code=0x7ffc0000 [ 181.921222][ T6608] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 181.949388][ T6608] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 181.962950][ T30] audit: type=1326 audit(1722560000.570:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6724 comm="syz.3.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47f41773b9 code=0x7ffc0000 [ 181.992066][ T6608] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 182.012323][ T6608] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 182.043957][ T58] usb 2-1: USB disconnect, device number 7 [ 182.426984][ T6608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.273860][ T6608] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.437631][ T5278] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.444894][ T5278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.465756][ T5278] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.473016][ T5278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.546267][ T30] audit: type=1326 audit(1722560002.410:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6741 comm="syz.3.375" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f47f41773b9 code=0x0 [ 183.929007][ T6608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.933203][ T8] usb 1-1: USB disconnect, device number 10 [ 184.018648][ T30] audit: type=1326 audit(1722560002.880:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6762 comm="syz.4.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79b3773b9 code=0x7ffc0000 [ 184.079427][ T30] audit: type=1326 audit(1722560002.880:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6762 comm="syz.4.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79b3773b9 code=0x7ffc0000 [ 184.089650][ T6608] veth0_vlan: entered promiscuous mode [ 184.161493][ T6608] veth1_vlan: entered promiscuous mode [ 184.166551][ T30] audit: type=1326 audit(1722560002.910:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6762 comm="syz.4.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7fd79b3773b9 code=0x7ffc0000 [ 184.250691][ T30] audit: type=1326 audit(1722560002.910:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6762 comm="syz.4.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79b3773b9 code=0x7ffc0000 [ 184.267921][ T6608] veth0_macvtap: entered promiscuous mode [ 184.284650][ T6608] veth1_macvtap: entered promiscuous mode [ 184.345964][ T6608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.356751][ T6608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.381830][ T6608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.400903][ T6608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.433994][ T6608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.452196][ T6608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.466133][ T6608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.478175][ T6608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.489887][ T6608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.531769][ T6608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.548801][ T6608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.570798][ T6608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.652958][ T6608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.664761][ T6608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.689376][ T6608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.716628][ T6608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.737493][ T6608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.758521][ T6608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.771680][ T6608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.791932][ T6608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.814789][ T6608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.832634][ T6608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.843811][ T5225] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 184.851448][ T6608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.851472][ T6608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.851491][ T6608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.853395][ T6608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.920969][ T8] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 184.930885][ T5310] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 184.935421][ T6608] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.947869][ T6608] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.957005][ T6608] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.966384][ T6608] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.154243][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 10 [ 185.360196][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 185.684545][ T8] usb 1-1: New USB device found, idVendor=19d2, idProduct=ffd0, bcdDevice=e0.c1 [ 185.700526][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.719417][ T8] usb 1-1: Product: syz [ 185.731372][ T8] usb 1-1: Manufacturer: syz [ 185.738176][ T8] usb 1-1: SerialNumber: syz [ 185.803337][ T8] usb 1-1: config 0 descriptor?? [ 185.824703][ T5225] usb 4-1: Using ep0 maxpacket: 16 [ 185.833360][ T5310] usb 2-1: config 0 has an invalid interface number: 156 but max is 1 [ 185.834829][ T8] option 1-1:0.0: GSM modem (1-port) converter detected [ 185.843211][ T5310] usb 2-1: config 0 has no interface number 1 [ 185.843304][ T5310] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 185.843332][ T5310] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 185.843360][ T5310] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 185.843411][ T5310] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 185.843454][ T5310] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 185.843481][ T5310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.846722][ T5310] usb 2-1: config 0 descriptor?? [ 185.930574][ T5225] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.949429][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.957475][ T5225] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 185.957534][ T5225] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 185.957564][ T5225] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.001736][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.019160][ T5225] usb 4-1: config 0 descriptor?? [ 186.049809][ T5554] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.055274][ T5310] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 186.064658][ T8] usb 1-1: USB disconnect, device number 11 [ 186.067195][ T8] option 1-1:0.0: device disconnected [ 186.072702][ T5310] usb 2-1: MIDIStreaming interface descriptor not found [ 186.105126][ T5554] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.196147][ T5310] gspca_main: spca561-2.14.0 probing abcd:cdee [ 186.303294][ T5310] spca561 2-1:0.0: probe with driver spca561 failed with error -22 [ 186.346767][ T5310] usb 2-1: USB disconnect, device number 8 [ 186.525777][ T5225] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 186.533803][ T5225] microsoft 0003:045E:07DA.0006: unknown main item tag 0x1 [ 186.542079][ T5225] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 186.549450][ T5225] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 186.558961][ T5225] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 186.567943][ T5225] microsoft 0003:045E:07DA.0006: No inputs registered, leaving [ 186.577487][ T5225] microsoft 0003:045E:07DA.0006: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 186.589644][ T5225] microsoft 0003:045E:07DA.0006: no inputs found [ 186.600160][ T5225] microsoft 0003:045E:07DA.0006: could not initialize ff, continuing anyway [ 186.790987][ T5272] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 186.808446][ T6797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.817563][ T6797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.988205][ T5272] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.999838][ T5272] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.000642][ T5278] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 187.011112][ T5272] usb 5-1: New USB device found, idVendor=056a, idProduct=00e3, bcdDevice= 0.00 [ 187.027046][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 187.027061][ T30] audit: type=1326 audit(1722560005.890:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6798 comm="syz.1.396" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc025b773b9 code=0x0 [ 187.054263][ T5272] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.068823][ T5310] usb 4-1: USB disconnect, device number 18 [ 187.090031][ T5272] usb 5-1: config 0 descriptor?? [ 187.220461][ T5278] usb 1-1: Using ep0 maxpacket: 16 [ 187.227930][ T5278] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 187.246531][ T5278] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 187.258484][ T5278] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 187.267890][ T5278] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.284616][ T5278] usb 1-1: config 0 descriptor?? [ 187.513305][ T5272] wacom 0003:056A:00E3.0007: unknown main item tag 0x0 [ 187.520864][ T5272] wacom 0003:056A:00E3.0007: unknown main item tag 0x0 [ 187.527774][ T5272] wacom 0003:056A:00E3.0007: unknown main item tag 0x0 [ 187.535923][ T5272] wacom 0003:056A:00E3.0007: unknown main item tag 0x0 [ 187.543281][ T5272] wacom 0003:056A:00E3.0007: unknown main item tag 0x0 [ 187.552135][ T5272] wacom 0003:056A:00E3.0007: unknown main item tag 0x0 [ 187.559059][ T5272] wacom 0003:056A:00E3.0007: unknown main item tag 0x0 [ 187.571219][ T5272] wacom 0003:056A:00E3.0007: hidraw0: USB HID v0.00 Device [HID 056a:00e3] on usb-dummy_hcd.4-1/input0 [ 187.710908][ T6796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.724233][ T5273] usb 5-1: USB disconnect, device number 12 [ 187.735590][ T6796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.762922][ T5278] hid (null): bogus close delimiter [ 187.769172][ T5278] hid (null): invalid report_size 29539 [ 187.789648][ T5278] hid-generic 0003:0158:0100.0008: unknown main item tag 0x0 [ 187.798229][ T5278] hid-generic 0003:0158:0100.0008: unknown main item tag 0x0 [ 187.820562][ T5278] hid-generic 0003:0158:0100.0008: bogus close delimiter [ 187.827667][ T5278] hid-generic 0003:0158:0100.0008: item 0 0 2 10 parsing failed [ 187.840269][ T5278] hid-generic 0003:0158:0100.0008: probe with driver hid-generic failed with error -22 [ 187.978018][ T5272] usb 1-1: USB disconnect, device number 12 [ 188.370905][ T5272] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 188.570601][ T5272] usb 2-1: Using ep0 maxpacket: 8 [ 188.604262][ T5272] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 188.645360][ T52] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.650405][ T5272] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 188.680048][ T5272] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 188.715870][ T5272] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 188.747513][ T5272] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 188.771309][ T5272] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.816497][ T5272] hub 2-1:1.0: bad descriptor, ignoring hub [ 188.823045][ T5272] hub 2-1:1.0: probe with driver hub failed with error -5 [ 188.843383][ T5272] cdc_wdm 2-1:1.0: skipping garbage [ 188.848657][ T5272] cdc_wdm 2-1:1.0: skipping garbage [ 188.868460][ T5272] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 188.880613][ T5272] cdc_wdm 2-1:1.0: Unknown control protocol [ 188.890786][ T52] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.989129][ T52] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.082783][ T52] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.182969][ T5272] usb 2-1: USB disconnect, device number 9 [ 189.189178][ T52] bridge_slave_1: left allmulticast mode [ 189.195043][ T52] bridge_slave_1: left promiscuous mode [ 189.201656][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.216681][ T52] bridge_slave_0: left allmulticast mode [ 189.229450][ T52] bridge_slave_0: left promiscuous mode [ 189.270112][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.550491][ T5278] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 189.584162][ T5272] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 189.867506][ T5278] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 10 [ 189.899810][ T5278] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 189.947617][ T5278] usb 1-1: New USB device found, idVendor=19d2, idProduct=ffd0, bcdDevice=e0.c1 [ 190.011961][ T5278] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.082331][ T5278] usb 1-1: Product: syz [ 190.123099][ T5278] usb 1-1: Manufacturer: syz [ 190.186937][ T5278] usb 1-1: SerialNumber: syz [ 190.631269][ T5272] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 190.678096][ T5272] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 190.702798][ T5272] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 190.751167][ T5272] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 190.793702][ T5272] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.824626][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 190.832822][ T5278] usb 1-1: config 0 descriptor?? [ 190.847346][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 190.850050][ T5278] option 1-1:0.0: GSM modem (1-port) converter detected [ 190.857353][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 190.890236][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 190.900013][ T6814] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 190.919033][ T5272] hub 2-1:1.0: bad descriptor, ignoring hub [ 190.930447][ T5272] hub 2-1:1.0: probe with driver hub failed with error -5 [ 190.939326][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 190.948211][ T5272] cdc_wdm 2-1:1.0: skipping garbage [ 190.955271][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 190.963795][ T5272] cdc_wdm 2-1:1.0: skipping garbage [ 190.972223][ T5272] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 190.978329][ T5272] cdc_wdm 2-1:1.0: Unknown control protocol [ 191.008457][ T30] audit: type=1326 audit(1722560009.850:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6837 comm="syz.3.411" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f47f41773b9 code=0x0 [ 191.039354][ T5272] usb 2-1: USB disconnect, device number 10 [ 191.103421][ T5277] usb 1-1: USB disconnect, device number 13 [ 191.114114][ T5277] option 1-1:0.0: device disconnected [ 191.219019][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 191.237371][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 191.252354][ T52] bond0 (unregistering): Released all slaves [ 191.884326][ T5275] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 192.090467][ T5275] usb 2-1: Using ep0 maxpacket: 16 [ 192.142625][ T5275] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 192.182259][ T5275] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 192.268638][ T5275] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 192.537793][ T5275] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.592611][ T5275] usb 2-1: config 0 descriptor?? [ 193.010619][ T4608] Bluetooth: hci1: command tx timeout [ 193.358510][ T6850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.392617][ T6850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.423981][ T52] hsr_slave_0: left promiscuous mode [ 193.452203][ T5275] hid (null): bogus close delimiter [ 193.471761][ T5275] hid (null): invalid report_size 29539 [ 193.481556][ T52] hsr_slave_1: left promiscuous mode [ 193.488838][ T5275] hid-generic 0003:0158:0100.0009: unknown main item tag 0x0 [ 193.506864][ T5275] hid-generic 0003:0158:0100.0009: unknown main item tag 0x0 [ 193.528122][ T5275] hid-generic 0003:0158:0100.0009: bogus close delimiter [ 193.536511][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.547235][ T6869] UBIFS error (pid: 6869): cannot open "./file0", error -22 [ 193.557038][ T5275] hid-generic 0003:0158:0100.0009: item 0 0 2 10 parsing failed [ 193.557067][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.594177][ T5275] hid-generic 0003:0158:0100.0009: probe with driver hid-generic failed with error -22 [ 193.594600][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.632304][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.663295][ T5275] usb 2-1: USB disconnect, device number 11 [ 193.710256][ T52] veth1_macvtap: left promiscuous mode [ 193.718034][ T52] veth0_macvtap: left promiscuous mode [ 193.725995][ T52] veth1_vlan: left promiscuous mode [ 193.731647][ T52] veth0_vlan: left promiscuous mode [ 194.620167][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.630071][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.766471][ T52] team0 (unregistering): Port device team_slave_1 removed [ 194.810081][ T52] team0 (unregistering): Port device team_slave_0 removed [ 195.090616][ T4608] Bluetooth: hci1: command tx timeout [ 195.530228][ T6835] chnl_net:caif_netlink_parms(): no params data found [ 195.550460][ T6889] 9pnet: p9_errstr2errno: server reported unknown error ΜN/Y80娪m=|g [ 195.744037][ T6889] program syz.0.427 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 195.788047][ T54] Bluetooth: hci5: sending frame failed (-49) [ 195.796525][ T4608] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 196.048225][ T6835] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.075074][ T6835] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.085997][ T6835] bridge_slave_0: entered allmulticast mode [ 196.114850][ T6835] bridge_slave_0: entered promiscuous mode [ 196.170118][ T6835] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.223160][ T6835] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.247400][ T6835] bridge_slave_1: entered allmulticast mode [ 196.285212][ T6835] bridge_slave_1: entered promiscuous mode [ 196.286507][ T30] audit: type=1326 audit(1722560015.150:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6919 comm="syz.3.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47f41773b9 code=0x7ffc0000 [ 196.404824][ T30] audit: type=1326 audit(1722560015.180:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6919 comm="syz.3.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47f41773b9 code=0x7ffc0000 [ 196.476739][ T30] audit: type=1326 audit(1722560015.190:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6919 comm="syz.3.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7f47f41773b9 code=0x7ffc0000 [ 196.515732][ T30] audit: type=1326 audit(1722560015.200:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6919 comm="syz.3.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47f41773b9 code=0x7ffc0000 [ 196.669208][ T6835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.720210][ T6835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.770874][ T5225] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 196.830490][ T5272] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 196.843372][ T5278] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 196.893179][ T6835] team0: Port device team_slave_0 added [ 196.920042][ T6835] team0: Port device team_slave_1 added [ 196.946823][ T6933] netlink: 12 bytes leftover after parsing attributes in process `syz.1.438'. [ 196.964438][ T5225] usb 1-1: Using ep0 maxpacket: 8 [ 196.981245][ T5225] usb 1-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 197.010426][ T5225] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.020978][ T5272] usb 5-1: Using ep0 maxpacket: 16 [ 197.029728][ T5272] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 197.043664][ T5272] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 197.053099][ T5278] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 197.054694][ T5225] usb 1-1: config 0 descriptor?? [ 197.070068][ T5272] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 197.087815][ T5272] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.099483][ T5225] usb 1-1: bad CDC descriptors [ 197.115232][ T5278] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 197.129351][ T5272] usb 5-1: config 0 descriptor?? [ 197.136566][ T5278] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 197.159945][ T6835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.167257][ T6835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.193645][ T4608] Bluetooth: hci1: command tx timeout [ 197.211011][ T5278] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 197.236197][ T5278] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 197.271897][ T6835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.290842][ T5278] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.325495][ T5278] usb 4-1: config 0 descriptor?? [ 197.351139][ T6835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.390412][ T6835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.428725][ T6835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.592899][ T6835] hsr_slave_0: entered promiscuous mode [ 197.627089][ T6923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.654510][ T6835] hsr_slave_1: entered promiscuous mode [ 197.663394][ T6923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.699861][ T6835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 197.745428][ T6835] Cannot create hsr debugfs directory [ 197.771261][ T5272] hid (null): bogus close delimiter [ 197.779787][ T5272] hid (null): invalid report_size 29539 [ 197.790154][ T5272] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 197.798984][ T5272] hid-generic 0003:0158:0100.000A: unknown main item tag 0x0 [ 197.814979][ T5278] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 197.828240][ T5272] hid-generic 0003:0158:0100.000A: bogus close delimiter [ 197.862218][ T5272] hid-generic 0003:0158:0100.000A: item 0 0 2 10 parsing failed [ 197.881642][ T5278] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 197.893359][ T5272] hid-generic 0003:0158:0100.000A: probe with driver hid-generic failed with error -22 [ 198.052616][ T5272] usb 5-1: USB disconnect, device number 13 [ 198.711086][ T5272] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 198.923343][ T5272] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.952094][ T5272] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.988955][ T5272] usb 2-1: New USB device found, idVendor=056a, idProduct=00e3, bcdDevice= 0.00 [ 199.016833][ T5272] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.047778][ T5272] usb 2-1: config 0 descriptor?? [ 199.089749][ T6835] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 199.106985][ T5225] usb 1-1: USB disconnect, device number 14 [ 199.167341][ T6835] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 199.222469][ T6835] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 199.259121][ T6835] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 199.266771][ T4608] Bluetooth: hci1: command tx timeout [ 199.478640][ T6835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.501086][ T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 199.509772][ T5272] wacom 0003:056A:00E3.000C: unknown main item tag 0x0 [ 199.518453][ T5272] wacom 0003:056A:00E3.000C: unknown main item tag 0x0 [ 199.527289][ T5272] wacom 0003:056A:00E3.000C: unknown main item tag 0x0 [ 199.536412][ T6835] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.540481][ T5272] wacom 0003:056A:00E3.000C: unknown main item tag 0x0 [ 199.555582][ T5278] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.560285][ T5272] wacom 0003:056A:00E3.000C: unknown main item tag 0x0 [ 199.562821][ T5278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.569611][ T5272] wacom 0003:056A:00E3.000C: unknown main item tag 0x0 [ 199.585725][ T5272] wacom 0003:056A:00E3.000C: unknown main item tag 0x0 [ 199.596295][ T5272] wacom 0003:056A:00E3.000C: hidraw1: USB HID v0.00 Device [HID 056a:00e3] on usb-dummy_hcd.1-1/input0 [ 199.614394][ T5278] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.621570][ T5278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.650521][ T5225] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 199.701034][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 199.710207][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 199.761603][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 199.796255][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.809579][ T5278] usb 2-1: USB disconnect, device number 12 [ 199.822991][ T9] usb 5-1: Product: syz [ 199.835780][ T30] audit: type=1326 audit(1722560018.690:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6978 comm="syz.3.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47f41773b9 code=0x7ffc0000 [ 199.837538][ T9] usb 5-1: Manufacturer: syz [ 199.890313][ T30] audit: type=1326 audit(1722560018.700:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6978 comm="syz.3.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47f41773b9 code=0x7ffc0000 [ 199.901381][ T9] usb 5-1: SerialNumber: syz [ 199.915720][ T5225] usb 1-1: Using ep0 maxpacket: 8 [ 199.943936][ T9] usb 5-1: config 0 descriptor?? [ 199.953370][ T9] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 199.956737][ T5225] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 199.978636][ T5310] usb 4-1: USB disconnect, device number 19 [ 199.978726][ T9] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 200.001547][ T30] audit: type=1326 audit(1722560018.730:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6978 comm="syz.3.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7f47f41773b9 code=0x7ffc0000 [ 200.004038][ T5225] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 200.068646][ T30] audit: type=1326 audit(1722560018.730:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6978 comm="syz.3.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47f41773b9 code=0x7ffc0000 [ 200.090128][ T5225] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 200.118043][ T52] Bluetooth: hci5: Frame reassembly failed (-84) [ 200.129047][ T5225] usb 1-1: New USB device found, idVendor=1b80, idProduct=d700, bcdDevice=d0.46 [ 200.140216][ T5225] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.150069][ T5225] usb 1-1: Product: syz [ 200.174928][ T5225] usb 1-1: Manufacturer: syz [ 200.179603][ T5225] usb 1-1: SerialNumber: syz [ 200.191521][ T5225] usb 1-1: config 0 descriptor?? [ 200.214778][ T6835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.302728][ T6835] veth0_vlan: entered promiscuous mode [ 200.319651][ T6835] veth1_vlan: entered promiscuous mode [ 200.373790][ T6835] veth0_macvtap: entered promiscuous mode [ 200.411600][ T6835] veth1_macvtap: entered promiscuous mode [ 200.419627][ T5225] radio-si470x 1-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 200.426795][ T5225] radio-si470x 1-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 200.466068][ T6835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.484131][ T6835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.494943][ T6835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.508202][ T6835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.518434][ T6835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.536855][ T6835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.550397][ T6835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.566681][ T6835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.579008][ T6835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.594000][ T9] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 200.615332][ T5225] radio-si470x 1-1:0.0: software version 0, hardware version 0 [ 200.630383][ T6835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.640735][ T5225] radio-si470x 1-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 200.660409][ T6835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.675512][ T5225] radio-si470x 1-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 200.691380][ T6835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.706063][ T6835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.731883][ T6835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.742650][ T6835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.760371][ T6835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.775483][ T6835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.799519][ T6835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.813102][ T6835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.823392][ T5225] radio-si470x 1-1:0.0: submitting int urb failed (-90) [ 200.830864][ T6835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.842754][ T6835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.854112][ T6835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.866627][ T6835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.876866][ T6835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.887515][ T6835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.901794][ T6835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.943661][ T6835] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.957244][ T6835] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.967630][ T6835] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.976802][ T6835] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.163651][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.181600][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.235949][ T5368] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.252213][ T5368] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.441024][ T5225] radio-si470x 1-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 201.458360][ T5225] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -22 [ 201.460975][ T9] em28xx 5-1:0.0: write to i2c device at 0xa0 failed with unknown error (status=1) [ 201.476766][ T5225] usb 1-1: USB disconnect, device number 15 [ 201.484082][ T9] em28xx 5-1:0.0: failed to read eeprom (err=-5) [ 201.491867][ T9] em28xx 5-1:0.0: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 201.700499][ T9] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 201.716135][ T9] em28xx 5-1:0.0: dvb set to bulk mode. [ 201.724532][ T5278] em28xx 5-1:0.0: Binding DVB extension [ 201.771038][ T9] usb 5-1: USB disconnect, device number 14 [ 201.786957][ T9] em28xx 5-1:0.0: Disconnecting em28xx [ 201.810800][ T5238] Bluetooth: hci2: command 0x0406 tx timeout [ 201.859932][ T5278] em28xx 5-1:0.0: Registering input extension [ 201.867967][ T9] em28xx 5-1:0.0: Closing input extension [ 201.928199][ T9] em28xx 5-1:0.0: Freeing device [ 202.072047][ T5225] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 202.130686][ T54] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 202.131052][ T4608] Bluetooth: hci5: command 0x1003 tx timeout [ 202.261450][ T5225] usb 2-1: Using ep0 maxpacket: 8 [ 202.279598][ T7006] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 202.309990][ T5225] usb 2-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 202.328281][ T5225] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.359839][ T5225] usb 2-1: config 0 descriptor?? [ 202.401793][ T30] audit: type=1326 audit(1722560021.260:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7007 comm="syz.3.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47f41773b9 code=0x7ffc0000 [ 202.448986][ T5225] usb 2-1: bad CDC descriptors [ 202.459828][ T30] audit: type=1326 audit(1722560021.260:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7007 comm="syz.3.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47f41773b9 code=0x7ffc0000 [ 202.486799][ T30] audit: type=1326 audit(1722560021.260:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7007 comm="syz.3.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7f47f41773b9 code=0x7ffc0000 [ 202.514793][ T30] audit: type=1326 audit(1722560021.260:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7007 comm="syz.3.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47f41773b9 code=0x7ffc0000 [ 202.578920][ T30] audit: type=1326 audit(1722560021.260:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7007 comm="syz.3.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47f41773b9 code=0x7ffc0000 [ 202.797985][ T7006] Driver unsupported XDP return value 0 on prog (id 89) dev N/A, expect packet loss! [ 202.914496][ T7014] netlink: 12 bytes leftover after parsing attributes in process `syz.4.459'. [ 204.520486][ T9] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 204.794406][ T5277] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 205.528864][ T5275] usb 2-1: USB disconnect, device number 13 [ 205.600991][ T5277] usb 4-1: Using ep0 maxpacket: 8 [ 205.608662][ T5277] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 205.622583][ T5277] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 205.636699][ T5277] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 205.655625][ T5277] usb 4-1: New USB device found, idVendor=1b80, idProduct=d700, bcdDevice=d0.46 [ 205.667980][ T5277] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.825951][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 10 [ 205.854894][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 205.891325][ T9] usb 5-1: New USB device found, idVendor=19d2, idProduct=ffd0, bcdDevice=e0.c1 [ 205.928893][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.999808][ T52] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.025915][ T9] usb 5-1: Product: syz [ 206.054208][ T9] usb 5-1: Manufacturer: syz [ 206.086520][ T9] usb 5-1: SerialNumber: syz [ 206.165824][ T9] usb 5-1: config 0 descriptor?? [ 206.266223][ T9] option 5-1:0.0: GSM modem (1-port) converter detected [ 208.429856][ T5277] usb 4-1: Product: syz [ 208.489337][ T5277] usb 4-1: Manufacturer: syz [ 208.519258][ T5277] usb 4-1: SerialNumber: syz [ 208.561587][ T5277] usb 4-1: config 0 descriptor?? [ 208.594207][ T5277] usb 4-1: can't set config #0, error -71 [ 208.603644][ T5277] usb 4-1: USB disconnect, device number 20 [ 208.629149][ T5275] usb 5-1: USB disconnect, device number 15 [ 208.642260][ T5275] option 5-1:0.0: device disconnected [ 209.273453][ T30] audit: type=1326 audit(1722560028.130:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7042 comm="syz.0.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbe5f773b9 code=0x7ffc0000 [ 209.319654][ T30] audit: type=1326 audit(1722560028.130:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7042 comm="syz.0.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbe5f773b9 code=0x7ffc0000 [ 209.378640][ T30] audit: type=1326 audit(1722560028.140:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7042 comm="syz.0.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7fdbe5f773b9 code=0x7ffc0000 [ 209.457676][ T30] audit: type=1326 audit(1722560028.140:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7042 comm="syz.0.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbe5f773b9 code=0x7ffc0000 [ 209.520091][ T30] audit: type=1326 audit(1722560028.140:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7042 comm="syz.0.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbe5f773b9 code=0x7ffc0000 [ 213.113714][ T52] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.506655][ T4608] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 213.523454][ T4608] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 213.536456][ T4608] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 213.558431][ T4608] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 213.577114][ T4608] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 213.594439][ T4608] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 213.873273][ T52] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.094952][ T52] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.310497][ T5272] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 214.511991][ T5272] usb 5-1: Using ep0 maxpacket: 8 [ 214.529091][ T5272] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 214.557878][ T5272] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 214.592958][ T5272] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 214.638092][ T5272] usb 5-1: New USB device found, idVendor=1b80, idProduct=d700, bcdDevice=d0.46 [ 214.680905][ T5272] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.688975][ T5272] usb 5-1: Product: syz [ 214.729169][ T5272] usb 5-1: Manufacturer: syz [ 214.735785][ T7087] netlink: 'syz.3.487': attribute type 1 has an invalid length. [ 214.740455][ T5272] usb 5-1: SerialNumber: syz [ 214.752129][ T7087] netlink: 224 bytes leftover after parsing attributes in process `syz.3.487'. [ 214.764689][ T52] bridge_slave_1: left allmulticast mode [ 214.779899][ T5272] usb 5-1: config 0 descriptor?? [ 214.781542][ T7087] netlink: 8 bytes leftover after parsing attributes in process `syz.3.487'. [ 214.785626][ T52] bridge_slave_1: left promiscuous mode [ 214.818406][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.832666][ T7087] netlink: 4 bytes leftover after parsing attributes in process `syz.3.487'. [ 214.846276][ T52] bridge_slave_0: left allmulticast mode [ 214.860867][ T52] bridge_slave_0: left promiscuous mode [ 214.870196][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.880135][ T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 215.029569][ T5272] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 215.039466][ T5272] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 215.108427][ T9] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 215.127938][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 215.141837][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 215.164464][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 215.185000][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 215.206984][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 215.229211][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 215.246484][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 215.252400][ T5272] radio-si470x 5-1:0.0: software version 0, hardware version 0 [ 215.257502][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 215.273580][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 215.274469][ T5272] radio-si470x 5-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 215.301198][ T5272] radio-si470x 5-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 215.318067][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 215.355313][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 215.369091][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 215.377262][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 215.386296][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 215.400451][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 215.410257][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 215.418505][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 215.428878][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 215.442378][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 215.453183][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 215.460239][ T5272] radio-si470x 5-1:0.0: submitting int urb failed (-90) [ 215.461536][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 215.476371][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 215.490916][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 215.501132][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 215.509848][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 215.519299][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 215.530988][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 215.544391][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 215.552804][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 215.562230][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 215.578089][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 215.590670][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 215.609314][ T9] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 215.620069][ T9] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 215.628680][ T9] usb 1-1: Product: syz [ 215.633708][ T9] usb 1-1: Manufacturer: syz [ 215.642220][ T9] usb 1-1: SerialNumber: syz [ 215.649833][ T9] usb 1-1: config 0 descriptor?? [ 215.651011][ T4608] Bluetooth: hci1: command tx timeout [ 215.660267][ T9] yurex 1-1:0.0: Could not submitting URB [ 215.666844][ T9] yurex 1-1:0.0: probe with driver yurex failed with error -5 [ 215.699106][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 215.754927][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 215.784193][ T52] bond0 (unregistering): Released all slaves [ 215.962272][ T5310] usb 1-1: USB disconnect, device number 16 [ 216.199366][ T7072] chnl_net:caif_netlink_parms(): no params data found [ 216.327829][ T5272] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 216.338942][ T5272] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -22 [ 216.360976][ T5272] usb 5-1: USB disconnect, device number 16 [ 217.749802][ T4608] Bluetooth: hci0: command 0x0406 tx timeout [ 217.756319][ T5238] Bluetooth: hci1: command tx timeout [ 219.719092][ T52] hsr_slave_0: left promiscuous mode [ 219.750518][ T52] hsr_slave_1: left promiscuous mode [ 219.785587][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.797328][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.811553][ T54] Bluetooth: hci1: command tx timeout [ 219.859837][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.889194][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.957721][ T52] veth1_macvtap: left promiscuous mode [ 219.965106][ T52] veth0_macvtap: left promiscuous mode [ 219.973719][ T52] veth1_vlan: left promiscuous mode [ 219.980789][ T52] veth0_vlan: left promiscuous mode [ 220.201536][ T5272] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 220.290456][ T942] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 220.401152][ T5272] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 220.417176][ T5272] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 220.451950][ T5272] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 220.486236][ T5272] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 220.507712][ T5272] usb 1-1: config 0 interface 0 has no altsetting 0 [ 220.507857][ T942] usb 5-1: Using ep0 maxpacket: 8 [ 220.526908][ T5272] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 220.546888][ T5272] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 220.590108][ T5272] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 220.616062][ T942] usb 5-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 220.625797][ T942] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.647136][ T5272] usb 1-1: config 0 interface 0 has no altsetting 0 [ 220.672439][ T5272] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 220.677666][ T942] usb 5-1: config 0 descriptor?? [ 220.687821][ T5272] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 220.718924][ T942] usb 5-1: bad CDC descriptors [ 220.722775][ T5272] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 220.744960][ T5272] usb 1-1: config 0 interface 0 has no altsetting 0 [ 220.777085][ T5272] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 220.786395][ T5272] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 220.815109][ T5272] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 220.828295][ T5272] usb 1-1: config 0 interface 0 has no altsetting 0 [ 220.844517][ T5272] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 220.860461][ T5272] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 220.872438][ T5272] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 220.883159][ T5272] usb 1-1: config 0 interface 0 has no altsetting 0 [ 220.904806][ T5272] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 220.949607][ T5272] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 220.988286][ T5272] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 221.005685][ T5272] usb 1-1: config 0 interface 0 has no altsetting 0 [ 221.026097][ T5272] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 221.039637][ T5272] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 221.052387][ T5272] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 221.065180][ T5272] usb 1-1: config 0 interface 0 has no altsetting 0 [ 221.082416][ T5272] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 221.091954][ T5272] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 221.138973][ T5272] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 221.160197][ T5272] usb 1-1: config 0 interface 0 has no altsetting 0 [ 221.197836][ T5272] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 221.217190][ T5272] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 221.236098][ T5272] usb 1-1: Product: syz [ 221.248431][ T5272] usb 1-1: Manufacturer: syz [ 221.258925][ T5272] usb 1-1: SerialNumber: syz [ 221.291821][ T5272] usb 1-1: config 0 descriptor?? [ 221.329746][ T5272] yurex 1-1:0.0: Could not submitting URB [ 221.336051][ T5272] yurex 1-1:0.0: probe with driver yurex failed with error -5 [ 221.423205][ T52] team0 (unregistering): Port device team_slave_1 removed [ 221.482151][ T52] team0 (unregistering): Port device team_slave_0 removed [ 221.637833][ T5272] usb 1-1: USB disconnect, device number 17 [ 221.890597][ T54] Bluetooth: hci1: command tx timeout [ 222.183236][ T7072] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.218716][ T7072] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.248551][ T7072] bridge_slave_0: entered allmulticast mode [ 222.264558][ T7072] bridge_slave_0: entered promiscuous mode [ 222.780506][ T58] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 222.826071][ T5275] usb 5-1: USB disconnect, device number 17 [ 222.886723][ T7072] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.910551][ T7072] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.931098][ T7072] bridge_slave_1: entered allmulticast mode [ 222.962959][ T7072] bridge_slave_1: entered promiscuous mode [ 223.013203][ T58] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.040521][ T58] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.080467][ T58] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 223.102336][ T58] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 223.139710][ T58] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 223.169301][ T58] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.226463][ T58] usb 1-1: Product: syz [ 223.248607][ T58] usb 1-1: Manufacturer: syz [ 223.286612][ T58] usb 1-1: SerialNumber: syz [ 223.358916][ T58] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 223.367030][ T58] cdc_ncm 1-1:1.0: bind() failure [ 223.381360][ T7171] netlink: 'syz.1.513': attribute type 1 has an invalid length. [ 223.398510][ T58] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 223.404364][ T7171] netlink: 224 bytes leftover after parsing attributes in process `syz.1.513'. [ 223.415752][ T58] cdc_ncm 1-1:1.1: bind() failure [ 223.463017][ T7172] netlink: 40 bytes leftover after parsing attributes in process `syz.3.514'. [ 223.495968][ T7171] netlink: 8 bytes leftover after parsing attributes in process `syz.1.513'. [ 224.090087][ T7164] netlink: 4 bytes leftover after parsing attributes in process `syz.1.513'. [ 224.518175][ T7072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.085961][ T7072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.383276][ T7072] team0: Port device team_slave_0 added [ 225.416892][ T7072] team0: Port device team_slave_1 added [ 225.557006][ T7072] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.581146][ T7072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.616006][ T7072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.647822][ T7193] netlink: 8 bytes leftover after parsing attributes in process `syz.4.521'. [ 225.677140][ T7072] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.692630][ T7072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.728419][ T7072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.793693][ T7194] bridge0: port 3(hsr0) entered blocking state [ 225.801706][ T7194] bridge0: port 3(hsr0) entered disabled state [ 225.808427][ T7194] hsr0: entered allmulticast mode [ 225.813785][ T7194] hsr_slave_0: entered allmulticast mode [ 225.819547][ T7194] hsr_slave_1: entered allmulticast mode [ 225.860898][ T7194] hsr0: entered promiscuous mode [ 225.893844][ T7194] bridge0: port 3(hsr0) entered blocking state [ 225.901126][ T7194] bridge0: port 3(hsr0) entered listening state [ 226.065551][ T7072] hsr_slave_0: entered promiscuous mode [ 226.097326][ T7072] hsr_slave_1: entered promiscuous mode [ 226.125245][ T7072] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 226.150402][ T7072] Cannot create hsr debugfs directory [ 226.355601][ T5273] usb 1-1: USB disconnect, device number 18 [ 226.480595][ T5310] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 226.572367][ T7218] 9pnet_fd: Insufficient options for proto=fd [ 226.611559][ T7219] netlink: 'syz.4.529': attribute type 1 has an invalid length. [ 226.634100][ T7219] netlink: 224 bytes leftover after parsing attributes in process `syz.4.529'. [ 226.673925][ T5310] usb 4-1: Using ep0 maxpacket: 8 [ 226.690470][ T7219] netlink: 8 bytes leftover after parsing attributes in process `syz.4.529'. [ 226.704117][ T5310] usb 4-1: New USB device found, idVendor=061d, idProduct=c180, bcdDevice=5e.fe [ 226.744560][ T5310] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.770671][ T5310] usb 4-1: Product: syz [ 226.779056][ T5310] usb 4-1: Manufacturer: syz [ 226.790634][ T5310] usb 4-1: SerialNumber: syz [ 226.806162][ T5310] usb 4-1: config 0 descriptor?? [ 226.811507][ T7210] netlink: 4 bytes leftover after parsing attributes in process `syz.4.529'. [ 226.827397][ T5310] quatech2 4-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 227.040366][ C1] hrtimer: interrupt took 67553 ns [ 227.054403][ T5310] usb 4-1: qt2_attach - failed to power on unit: -71 [ 227.063869][ T5310] quatech2 4-1:0.0: probe with driver quatech2 failed with error -71 [ 227.078858][ T5310] usb 4-1: USB disconnect, device number 21 [ 229.608194][ T7236] netlink: 8 bytes leftover after parsing attributes in process `syz.3.536'. [ 229.706766][ T7236] bridge0: port 3(hsr0) entered blocking state [ 229.716979][ T7236] bridge0: port 3(hsr0) entered disabled state [ 229.727689][ T7236] hsr0: entered allmulticast mode [ 229.745591][ T7239] netlink: 4 bytes leftover after parsing attributes in process `syz.4.537'. [ 229.754732][ T7236] hsr_slave_0: entered allmulticast mode [ 229.789036][ T7236] hsr_slave_1: entered allmulticast mode [ 229.812895][ T7236] hsr0: entered promiscuous mode [ 230.058391][ T7072] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 230.103215][ T7072] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 230.138489][ T7072] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 230.164287][ T7072] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 230.411701][ T7252] netlink: 44 bytes leftover after parsing attributes in process `syz.3.542'. [ 230.466021][ T7072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.477244][ T7252] netlink: 'syz.3.542': attribute type 1 has an invalid length. [ 230.497650][ T7252] netlink: 224 bytes leftover after parsing attributes in process `syz.3.542'. [ 230.554539][ T7252] sctp: [Deprecated]: syz.3.542 (pid 7252) Use of struct sctp_assoc_value in delayed_ack socket option. [ 230.554539][ T7252] Use struct sctp_sack_info instead [ 230.625271][ T7072] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.709312][ T5310] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.717354][ T5310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.802270][ T7259] 9pnet_fd: Insufficient options for proto=fd [ 230.815926][ T5277] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.823911][ T5277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.341304][ T54] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 231.459753][ T7268] netlink: 4 bytes leftover after parsing attributes in process `syz.4.545'. [ 231.585630][ T7266] smc: net device ip6_vti0 applied user defined pnetid SYZ0 [ 231.641010][ T5272] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 231.716641][ T7072] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.875112][ T5272] usb 4-1: Using ep0 maxpacket: 16 [ 231.900004][ T5272] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.930428][ T5272] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.942668][ T7072] veth0_vlan: entered promiscuous mode [ 231.978992][ T5272] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 232.007253][ T7072] veth1_vlan: entered promiscuous mode [ 232.071712][ T5272] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 232.199786][ T5272] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.984628][ T7072] veth0_macvtap: entered promiscuous mode [ 233.047771][ T7072] veth1_macvtap: entered promiscuous mode [ 233.209940][ T7072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.270754][ T7072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.316188][ T7072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.369646][ T7072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.385182][ T5272] usb 4-1: config 0 descriptor?? [ 233.440723][ T7072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.500404][ T7072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.510290][ T7072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.580862][ T7072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.622889][ T7072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.651234][ T7072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.685337][ T7072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.706032][ T7072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.748230][ T7072] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.754965][ T7245] syz.0.540 (7245): drop_caches: 2 [ 233.893363][ T5272] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 233.920835][ T5272] microsoft 0003:045E:07DA.000D: item 0 4 0 8 parsing failed [ 233.941489][ T7072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.942894][ T5272] microsoft 0003:045E:07DA.000D: parse failed [ 233.980543][ T7072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.052119][ T7072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.070624][ T5272] microsoft 0003:045E:07DA.000D: probe with driver microsoft failed with error -22 [ 234.110943][ T7072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.151495][ T5272] usb 4-1: USB disconnect, device number 22 [ 234.161232][ T7072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.224203][ T7072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.298673][ T7072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.346848][ T7072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.381198][ T7072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.430621][ T7072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.482357][ T7072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.511963][ T7303] netlink: 44 bytes leftover after parsing attributes in process `syz.1.555'. [ 234.530697][ T7072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.574482][ T7303] netlink: 'syz.1.555': attribute type 1 has an invalid length. [ 234.580724][ T7072] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.740730][ T7303] netlink: 224 bytes leftover after parsing attributes in process `syz.1.555'. [ 234.767285][ T7072] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.824843][ T7072] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.863413][ T7303] sctp: [Deprecated]: syz.1.555 (pid 7303) Use of struct sctp_assoc_value in delayed_ack socket option. [ 234.863413][ T7303] Use struct sctp_sack_info instead [ 234.877571][ T7072] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.956559][ T7072] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.366270][ T7250] syz.0.540 (7250): drop_caches: 2 [ 236.027230][ T7249] syz.0.540 (7249): drop_caches: 2 [ 236.516991][ T5542] bridge_slave_1: left allmulticast mode [ 236.540593][ T5542] bridge_slave_1: left promiscuous mode [ 236.556392][ T5542] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.616260][ T5542] bridge_slave_0: left allmulticast mode [ 236.634936][ T5542] bridge_slave_0: left promiscuous mode [ 236.650717][ T5542] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.511167][ T5542] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 239.536747][ T5542] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 239.565705][ T5542] bond0 (unregistering): Released all slaves [ 239.602080][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.607171][ T7318] netlink: 4 bytes leftover after parsing attributes in process `syz.1.558'. [ 239.625724][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.887302][ T7343] netlink: 8 bytes leftover after parsing attributes in process `syz.4.565'. [ 239.911876][ T7343] 8021q: VLANs not supported on bridge0 [ 239.941193][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.949168][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.112435][ T5275] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 240.350473][ T5275] usb 1-1: Using ep0 maxpacket: 8 [ 240.390416][ T5275] usb 1-1: New USB device found, idVendor=061d, idProduct=c180, bcdDevice=5e.fe [ 240.440982][ T5275] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.449031][ T5275] usb 1-1: Product: syz [ 240.559713][ T5275] usb 1-1: Manufacturer: syz [ 240.595798][ T5275] usb 1-1: SerialNumber: syz [ 240.642848][ T5275] usb 1-1: config 0 descriptor?? [ 240.673468][ T5275] quatech2 1-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 240.947546][ T5275] usb 1-1: qt2_attach - failed to power on unit: -71 [ 240.976783][ T5275] quatech2 1-1:0.0: probe with driver quatech2 failed with error -71 [ 241.037499][ T5275] usb 1-1: USB disconnect, device number 19 [ 241.342882][ C0] bridge0: port 3(hsr0) entered learning state [ 241.351763][ T5542] hsr_slave_0: left promiscuous mode [ 241.413990][ T5542] hsr_slave_1: left promiscuous mode [ 241.490566][ T5542] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.500657][ T5542] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.545427][ T5542] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.560474][ T5542] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.639803][ T5542] veth1_macvtap: left promiscuous mode [ 241.661984][ T5542] veth0_macvtap: left promiscuous mode [ 241.690569][ T5542] veth1_vlan: left promiscuous mode [ 241.697474][ T5542] veth0_vlan: left promiscuous mode [ 242.740770][ T7371] netlink: 12 bytes leftover after parsing attributes in process `syz.3.573'. [ 243.062971][ T7380] netlink: 'syz.0.571': attribute type 7 has an invalid length. [ 243.072003][ T7380] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.571'. [ 243.794271][ T7378] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 245.764545][ T30] audit: type=1326 audit(1722560064.630:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7397 comm="syz.1.577" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc025b773b9 code=0x0 [ 246.174187][ T5238] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 246.189140][ T5238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 246.199903][ T5238] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 246.209355][ T5238] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 246.243112][ T5238] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 246.255143][ T5238] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 246.416254][ T5542] team0 (unregistering): Port device team_slave_1 removed [ 246.542511][ T5542] team0 (unregistering): Port device team_slave_0 removed [ 247.543584][ T7411] nullb0: AHDI p1 [ 248.291309][ T5238] Bluetooth: hci1: command tx timeout [ 249.505119][ T7432] capability: warning: `syz.1.585' uses deprecated v2 capabilities in a way that may be insecure [ 249.984041][ T7439] netlink: 'syz.4.586': attribute type 7 has an invalid length. [ 249.991927][ T7439] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.586'. [ 250.381048][ T5238] Bluetooth: hci1: command tx timeout [ 250.687039][ T7438] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 251.948027][ T7401] chnl_net:caif_netlink_parms(): no params data found [ 252.450915][ T5238] Bluetooth: hci1: command tx timeout [ 252.671312][ T5565] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.786317][ T7401] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.839262][ T7401] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.864131][ T7401] bridge_slave_0: entered allmulticast mode [ 252.919810][ T7401] bridge_slave_0: entered promiscuous mode [ 253.164955][ T5565] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.229560][ T7401] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.251549][ T7401] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.274271][ T7401] bridge_slave_1: entered allmulticast mode [ 253.300032][ T7401] bridge_slave_1: entered promiscuous mode [ 253.394915][ T5565] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.480673][ T8] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 253.683993][ T5565] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.714764][ T8] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 253.729912][ T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.792921][ T8] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 253.854946][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.875169][ T7401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.895736][ T8] usb 4-1: Product: syz [ 253.940421][ T8] usb 4-1: Manufacturer: syz [ 253.979606][ T8] usb 4-1: SerialNumber: syz [ 253.987747][ T7401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.033656][ T8] cdc_mbim 4-1:1.0: MBIM functional descriptor missing [ 254.067408][ T8] cdc_mbim 4-1:1.0: bind() failure [ 254.304747][ T7401] team0: Port device team_slave_0 added [ 254.361796][ T7401] team0: Port device team_slave_1 added [ 254.398604][ T942] usb 4-1: USB disconnect, device number 23 [ 254.530669][ T5238] Bluetooth: hci1: command tx timeout [ 254.761464][ T7401] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.781568][ T7401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.915783][ T7401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.140051][ T7401] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.176561][ T7401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.229425][ T7401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.552479][ T5565] bridge_slave_1: left allmulticast mode [ 255.558202][ T5565] bridge_slave_1: left promiscuous mode [ 255.586579][ T5565] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.671625][ T5565] bridge_slave_0: left allmulticast mode [ 255.711107][ T5565] bridge_slave_0: left promiscuous mode [ 255.725000][ T5565] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.969893][ T7509] binder: 7507:7509 ioctl c018620c 0 returned -14 [ 256.056523][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.056641][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.432299][ T7513] netlink: 16 bytes leftover after parsing attributes in process `syz.1.610'. [ 256.700558][ C0] bridge0: port 3(hsr0) entered forwarding state [ 256.706951][ C0] bridge0: topology change detected, propagating [ 257.519054][ T5565] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 257.545827][ T5565] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 257.576909][ T5565] bond0 (unregistering): Released all slaves [ 257.628894][ T7401] hsr_slave_0: entered promiscuous mode [ 257.663842][ T7401] hsr_slave_1: entered promiscuous mode [ 257.698624][ T7401] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 257.708014][ T7401] Cannot create hsr debugfs directory [ 257.750834][ T5277] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 258.014809][ T5277] usb 4-1: Using ep0 maxpacket: 8 [ 258.080839][ T5277] usb 4-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 258.098946][ T5277] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.113537][ T5277] usb 4-1: config 0 descriptor?? [ 258.151312][ T5277] usb 4-1: bad CDC descriptors [ 259.224430][ T7529] netlink: 'syz.1.615': attribute type 13 has an invalid length. [ 259.280969][ T7529] netlink: 164 bytes leftover after parsing attributes in process `syz.1.615'. [ 259.306560][ T7529] syz_tun: refused to change device tx_queue_len [ 259.919193][ T5565] hsr_slave_0: left promiscuous mode [ 259.946457][ T5565] hsr_slave_1: left promiscuous mode [ 259.981657][ T5565] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.000269][ T5565] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.028859][ T5565] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.048064][ T5565] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.863218][ T5275] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 260.953851][ T5565] veth1_macvtap: left promiscuous mode [ 260.979885][ T5565] veth0_macvtap: left promiscuous mode [ 260.992722][ T5565] veth1_vlan: left promiscuous mode [ 261.018568][ T5277] usb 4-1: USB disconnect, device number 24 [ 261.020726][ T5565] veth0_vlan: left promiscuous mode [ 261.093944][ T5275] usb 2-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice=c2.b7 [ 261.110707][ T5275] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.138723][ T5275] usb 2-1: config 0 descriptor?? [ 261.188664][ T5275] gspca_main: mars-2.14.0 probing 093a:050f [ 261.870211][ T5565] team0 (unregistering): Port device team_slave_1 removed [ 261.928310][ T5565] team0 (unregistering): Port device team_slave_0 removed [ 262.557416][ T7547] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 262.643280][ T8] usb 2-1: USB disconnect, device number 14 [ 262.890083][ T7557] fuse: Unknown parameter 'fKy.'׫trBN' [ 262.960516][ T30] audit: type=1326 audit(1722560081.790:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7556 comm="syz.0.625" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdbe5f773b9 code=0x0 [ 263.163901][ T7560] nullb0: AHDI p1 [ 263.254750][ T5238] Bluetooth: hci4: command 0x0406 tx timeout [ 263.706856][ T7565] syz.3.628[7565] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 263.707189][ T7565] syz.3.628[7565] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 266.551325][ T7585] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 266.934488][ T7401] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 266.965454][ T7593] netlink: 'syz.1.638': attribute type 13 has an invalid length. [ 266.975971][ T7593] netlink: 164 bytes leftover after parsing attributes in process `syz.1.638'. [ 266.986840][ T7593] syz_tun: refused to change device tx_queue_len [ 266.998983][ T7401] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 267.045406][ T7401] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 267.067651][ T7401] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 267.160833][ T5275] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 267.393390][ T5275] usb 4-1: Using ep0 maxpacket: 8 [ 267.421491][ T5275] usb 4-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 267.438784][ T5275] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.458929][ T5275] usb 4-1: config 0 descriptor?? [ 267.482862][ T5275] usb 4-1: bad CDC descriptors [ 267.736989][ T7401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.782783][ T58] usb 4-1: USB disconnect, device number 25 [ 268.095330][ T7401] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.619018][ T5272] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.627376][ T5272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.812393][ T5275] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.819589][ T5275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.900204][ T54] Bluetooth: hci2: unexpected event for opcode 0x0c1c [ 270.592999][ T7638] netlink: 'syz.0.652': attribute type 3 has an invalid length. [ 270.671168][ T7638] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.652'. [ 270.907731][ T7401] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.149316][ T7657] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 271.888345][ T7401] veth0_vlan: entered promiscuous mode [ 271.956404][ T7401] veth1_vlan: entered promiscuous mode [ 272.106990][ T7401] veth0_macvtap: entered promiscuous mode [ 272.186551][ T7401] veth1_macvtap: entered promiscuous mode [ 272.254886][ T7663] kvm: apic: phys broadcast and lowest prio [ 272.319795][ T7401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.420723][ T7401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.458352][ T7401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.494194][ T7401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.519120][ T7401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.531009][ T7401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.568030][ T7401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.604868][ T7401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.618448][ T7401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.637638][ T7401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.717529][ T7401] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.800667][ T5272] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 273.040637][ T5272] usb 1-1: Using ep0 maxpacket: 8 [ 273.186456][ T5272] usb 1-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 273.991500][ T5272] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.006803][ T5272] usb 1-1: config 0 descriptor?? [ 274.057387][ T7401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.058714][ T5272] usb 1-1: bad CDC descriptors [ 274.140555][ T7401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.174492][ T7401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.185403][ T7401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.204342][ T7401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.238161][ T7401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.280416][ T7401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.323403][ T7401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.377452][ T7401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.388234][ T942] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 274.445375][ T7401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.501755][ T7401] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.586524][ T7401] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.597173][ T942] usb 5-1: Using ep0 maxpacket: 32 [ 274.635815][ T942] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 274.650236][ T7401] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.666877][ T942] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 274.690046][ T7686] nullb0: AHDI p1 [ 274.728370][ T7401] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.792506][ T942] usb 5-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 274.812188][ T7401] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.858320][ T942] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.902211][ T942] usb 5-1: config 0 descriptor?? [ 274.945032][ T7683] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 275.226841][ T5392] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.272494][ T5392] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.493770][ T5392] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.502975][ T942] hid-rmi 0003:0461:4E72.000E: hidraw0: USB HID v0.00 Device [HID 0461:4e72] on usb-dummy_hcd.4-1/input0 [ 275.544336][ T5392] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.817104][ T5310] usb 5-1: USB disconnect, device number 18 [ 276.110240][ T942] usb 1-1: USB disconnect, device number 20 [ 276.709135][ T5392] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.007780][ T5392] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.147938][ T5392] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.275841][ T5392] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.310695][ T8] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 277.508618][ T5392] bridge_slave_1: left allmulticast mode [ 277.515418][ T5392] bridge_slave_1: left promiscuous mode [ 277.536665][ T5392] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.547863][ T8] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 277.559326][ T8] usb 4-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 277.582124][ T5392] bridge_slave_0: left allmulticast mode [ 277.594894][ T8] usb 4-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 0.84 [ 277.602782][ T5392] bridge_slave_0: left promiscuous mode [ 277.604701][ T8] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 277.618758][ T8] usb 4-1: Product: syz [ 277.623556][ T8] usb 4-1: SerialNumber: syz [ 277.644703][ T5392] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.666717][ T8] option 4-1:7.0: GSM modem (1-port) converter detected [ 278.072894][ T7706] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 279.211734][ T5310] usb 4-1: USB disconnect, device number 26 [ 279.262427][ T5310] option 4-1:7.0: device disconnected [ 279.299581][ T7712] netlink: 32 bytes leftover after parsing attributes in process `syz.1.675'. [ 279.354778][ T942] IPVS: starting estimator thread 0... [ 279.461235][ T7716] IPVS: using max 17 ests per chain, 40800 per kthread [ 279.792575][ T7714] ebtables: ebtables: counters copy to user failed while replacing table [ 279.794579][ T7726] netlink: 16 bytes leftover after parsing attributes in process `syz.1.678'. [ 279.926618][ T5238] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 279.939136][ T5238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 279.952699][ T5238] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 279.966906][ T5238] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 279.979397][ T5238] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 279.987899][ T5238] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 280.251610][ T8] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 280.463154][ T8] usb 5-1: config 0 has an invalid descriptor of length 20, skipping remainder of the config [ 280.497714][ T8] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 280.507832][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.519904][ T8] usb 5-1: config 0 descriptor?? [ 280.532919][ T8] usb 5-1: Found UVC 0.00 device (046d:08c1) [ 280.539947][ T8] usb 5-1: No valid video chain found. [ 280.553722][ T5392] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 280.582618][ T5392] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 280.595357][ T5392] bond0 (unregistering): Released all slaves [ 280.813379][ T5277] usb 5-1: USB disconnect, device number 19 [ 281.741013][ T5392] hsr_slave_0: left promiscuous mode [ 281.846116][ T5392] hsr_slave_1: left promiscuous mode [ 281.862613][ T5392] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.179780][ T54] Bluetooth: hci1: command tx timeout [ 282.200428][ T5392] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.230467][ T8] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 283.290462][ T5392] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.364455][ T5392] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.540566][ T8] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 283.559852][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.621848][ T8] usb 2-1: config 0 descriptor?? [ 283.774798][ T5392] veth1_macvtap: left promiscuous mode [ 283.802972][ T5392] veth0_macvtap: left promiscuous mode [ 283.817419][ T5392] veth1_vlan: left promiscuous mode [ 283.847786][ T5392] veth0_vlan: left promiscuous mode [ 284.211676][ T54] Bluetooth: hci1: command tx timeout [ 286.291481][ T54] Bluetooth: hci1: command tx timeout [ 286.535193][ T8] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 286.596046][ T8] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 286.632969][ T8] [drm:udl_init] *ERROR* Selecting channel failed [ 286.692082][ T8] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 286.698851][ T8] [drm] Initialized udl on minor 2 [ 286.726102][ T8] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 286.757605][ T8] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 286.767836][ T5275] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 286.809473][ T5275] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 286.822663][ T8] usb 2-1: USB disconnect, device number 15 [ 286.844505][ T5275] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 287.035245][ T7776] netlink: 16 bytes leftover after parsing attributes in process `syz.3.692'. [ 287.709279][ T5392] team0 (unregistering): Port device team_slave_1 removed [ 287.829106][ T5392] team0 (unregistering): Port device team_slave_0 removed [ 288.370994][ T54] Bluetooth: hci1: command tx timeout [ 288.574308][ T7771] netlink: 4 bytes leftover after parsing attributes in process `syz.0.690'. [ 288.587055][ T7773] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 290.027229][ T7790] netlink: 4 bytes leftover after parsing attributes in process `syz.1.694'. [ 291.085233][ T7791] kvm: emulating exchange as write [ 291.184586][ T7727] chnl_net:caif_netlink_parms(): no params data found [ 291.344962][ T7802] sit0: entered promiscuous mode [ 291.366850][ T7802] netlink: 'syz.3.700': attribute type 1 has an invalid length. [ 291.401287][ T7802] netlink: 1 bytes leftover after parsing attributes in process `syz.3.700'. [ 291.686398][ T7727] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.699034][ T7727] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.709201][ T7727] bridge_slave_0: entered allmulticast mode [ 291.721126][ T7727] bridge_slave_0: entered promiscuous mode [ 291.733986][ T7727] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.752197][ T7727] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.773485][ T7727] bridge_slave_1: entered allmulticast mode [ 291.803286][ T7727] bridge_slave_1: entered promiscuous mode [ 291.977516][ T7727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.033402][ T7727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.136339][ T7818] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 292.395003][ T7727] team0: Port device team_slave_0 added [ 292.461306][ T7727] team0: Port device team_slave_1 added [ 293.013747][ T7727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.059000][ T7727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.186696][ T7727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.298687][ T7727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.343562][ T7727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.449653][ T7727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.618140][ T7727] hsr_slave_0: entered promiscuous mode [ 293.648700][ T7850] netlink: 56 bytes leftover after parsing attributes in process `syz.1.718'. [ 293.667854][ T7727] hsr_slave_1: entered promiscuous mode [ 293.677837][ T7850] netlink: 8 bytes leftover after parsing attributes in process `syz.1.718'. [ 293.694889][ T7727] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 293.741410][ T7727] Cannot create hsr debugfs directory [ 294.120148][ T7865] ax25_connect(): syz.0.724 uses autobind, please contact jreuter@yaina.de [ 294.140831][ T942] usb 2-1: new low-speed USB device number 16 using dummy_hcd [ 294.360973][ T942] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 294.398399][ T942] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 294.460944][ T942] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 294.505368][ T942] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 294.545840][ T942] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 294.587729][ T942] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 294.628318][ T942] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 294.705687][ T942] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 294.725120][ T942] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 294.746364][ T942] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 294.774377][ T942] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 294.797786][ T942] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 294.835971][ T942] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 294.910639][ T942] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 294.949749][ T7876] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 294.972503][ T942] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 295.018596][ T942] usb 2-1: string descriptor 0 read error: -22 [ 295.030502][ T8] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 295.042230][ T942] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 295.077863][ T942] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.206575][ T942] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 295.290231][ T8] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 295.323017][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.344469][ T7727] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 295.358221][ T8] usb 5-1: config 0 descriptor?? [ 295.399672][ T7727] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 295.484609][ T7727] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 295.595802][ T7727] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 295.732275][ T5273] usb 2-1: USB disconnect, device number 16 [ 296.370106][ T7727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.512226][ T7727] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.560219][ T5273] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.567615][ T5273] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.661447][ T5273] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.668938][ T5273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.802477][ T7889] netlink: 56 bytes leftover after parsing attributes in process `syz.1.732'. [ 296.923472][ T7889] netlink: 8 bytes leftover after parsing attributes in process `syz.1.732'. [ 297.181595][ T8] [drm:udl_init] *ERROR* Selecting channel failed [ 297.257996][ T8] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 297.285878][ T8] [drm] Initialized udl on minor 2 [ 297.337381][ T8] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 297.389413][ T8] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 297.436909][ T942] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 297.448025][ T8] usb 5-1: USB disconnect, device number 20 [ 297.471131][ T942] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 297.746885][ T7891] syz.0.733 (7891): drop_caches: 2 [ 297.795333][ T7898] syz.0.733 (7898): drop_caches: 2 [ 297.828279][ T7897] syz.0.733 (7897): drop_caches: 2 [ 297.885098][ T7891] syz.0.733 (7891): drop_caches: 2 [ 297.908541][ T7897] syz.0.733 (7897): drop_caches: 2 [ 297.936700][ T7898] syz.0.733 (7898): drop_caches: 2 [ 298.165268][ T7727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.406902][ T7727] veth0_vlan: entered promiscuous mode [ 298.506465][ T7727] veth1_vlan: entered promiscuous mode [ 298.755247][ T7727] veth0_macvtap: entered promiscuous mode [ 299.689180][ T7727] veth1_macvtap: entered promiscuous mode [ 299.831937][ T7923] futex_wake_op: syz.0.739 tries to shift op by -1; fix this program [ 299.988421][ T7727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.013583][ T7932] netlink: 56 bytes leftover after parsing attributes in process `syz.1.744'. [ 300.043206][ T7727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.060865][ T7932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.744'. [ 300.081812][ T7727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.099290][ T7727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.135176][ T7727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.201004][ T7727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.278147][ T7727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.360947][ T7727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.391479][ T7727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.404171][ T7727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.419772][ T7727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 300.531396][ T7727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.544156][ T7727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.556099][ T7727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.567572][ T7727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.578923][ T7727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.593723][ T7727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.604916][ T7727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.616797][ T7727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.632529][ T7727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.645353][ T7727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.660548][ T7727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 300.767371][ T7727] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.795052][ T7727] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.834539][ T7727] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.863439][ T7727] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.243722][ T7960] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 301.982972][ T1058] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.028691][ T1058] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.257904][ T1058] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.329799][ T1058] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.574325][ T7974] ======================================================= [ 302.574325][ T7974] WARNING: The mand mount option has been deprecated and [ 302.574325][ T7974] and is ignored by this kernel. Remove the mand [ 302.574325][ T7974] option from the mount to silence this warning. [ 302.574325][ T7974] ======================================================= [ 302.639754][ T7975] option changes via remount are deprecated (pid=7973 comm=syz.3.759) [ 303.375449][ T5554] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.602342][ T5554] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.693984][ T5554] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.794026][ T5554] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.951690][ T5554] bridge_slave_1: left allmulticast mode [ 303.957875][ T5554] bridge_slave_1: left promiscuous mode [ 303.964360][ T5554] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.975673][ T5554] bridge_slave_0: left allmulticast mode [ 303.982303][ T5554] bridge_slave_0: left promiscuous mode [ 303.988739][ T5554] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.772046][ T5554] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 304.838582][ T5554] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 304.881336][ T5554] bond0 (unregistering): Released all slaves [ 305.282021][ T5238] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 305.297574][ T5238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 305.311311][ T5238] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 305.344163][ T5238] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 305.358286][ T5238] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 305.380497][ T5238] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 305.599092][ T8030] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 306.070785][ T5554] hsr_slave_0: left promiscuous mode [ 306.092046][ T5554] hsr_slave_1: left promiscuous mode [ 306.171327][ T5554] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 306.229780][ T5554] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.270610][ T8046] futex_wake_op: syz.1.787 tries to shift op by -1; fix this program [ 306.352892][ T5554] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.411402][ T5554] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 307.410639][ T5238] Bluetooth: hci1: command tx timeout [ 307.647876][ T5554] veth1_macvtap: left promiscuous mode [ 307.655359][ T5554] veth0_macvtap: left promiscuous mode [ 307.662471][ T5554] veth1_vlan: left promiscuous mode [ 307.668694][ T5554] veth0_vlan: left promiscuous mode [ 308.110644][ T5275] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 308.357406][ T5275] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 308.367728][ T5275] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.387801][ T5275] usb 5-1: Product: syz [ 308.397959][ T5275] usb 5-1: Manufacturer: syz [ 308.414202][ T5275] usb 5-1: SerialNumber: syz [ 308.435472][ T5275] usb 5-1: config 0 descriptor?? [ 308.813542][ T5554] team0 (unregistering): Port device team_slave_1 removed [ 308.892301][ T5275] usb 5-1: Firmware: major: 0, minor: 248, hardware type: UNKNOWN (124) [ 308.903978][ T5554] team0 (unregistering): Port device team_slave_0 removed [ 309.095581][ T5275] usb 5-1: failed to fetch extended address, random address set [ 309.103986][ T5275] usb 5-1: atusb_probe: initialization failed, error = -524 [ 309.125298][ T5275] atusb 5-1:0.0: probe with driver atusb failed with error -524 [ 309.153256][ T5275] usb 5-1: USB disconnect, device number 21 [ 309.493481][ T5238] Bluetooth: hci1: command tx timeout [ 310.205144][ T8026] chnl_net:caif_netlink_parms(): no params data found [ 310.653016][ T8026] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.697687][ T8026] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.742162][ T8026] bridge_slave_0: entered allmulticast mode [ 310.767124][ T8026] bridge_slave_0: entered promiscuous mode [ 310.814836][ T8026] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.844608][ T8026] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.884269][ T8026] bridge_slave_1: entered allmulticast mode [ 310.914689][ T8026] bridge_slave_1: entered promiscuous mode [ 311.445486][ T8026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.485427][ T8026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.570919][ T5238] Bluetooth: hci1: command tx timeout [ 311.814385][ T8026] team0: Port device team_slave_0 added [ 311.899864][ T8026] team0: Port device team_slave_1 added [ 312.017225][ T8104] xt_l2tp: v2 doesn't support IP mode [ 312.074967][ T30] audit: type=1326 audit(1722560130.940:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8096 comm="syz.1.805" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc025b773b9 code=0x0 [ 312.202666][ T8026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.222678][ T8110] futex_wake_op: syz.3.806 tries to shift op by -1; fix this program [ 312.235185][ T8026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.307620][ T8026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.813297][ T8114] netlink: 24 bytes leftover after parsing attributes in process `syz.4.807'. [ 313.650561][ T5238] Bluetooth: hci1: command tx timeout [ 316.461817][ T8026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.469587][ T8026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.517964][ T8026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.846385][ T8122] No such timeout policy "syz1" [ 316.876964][ T8026] hsr_slave_0: entered promiscuous mode [ 316.914713][ T8026] hsr_slave_1: entered promiscuous mode [ 316.938186][ T8026] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 316.976255][ T8026] Cannot create hsr debugfs directory [ 317.496762][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.504533][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.561138][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 319.068579][ T8026] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 319.123163][ T8026] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 319.184874][ T8026] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 319.245684][ T8026] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 319.332153][ T8163] syz.3.822 (8163): drop_caches: 2 [ 319.351387][ T8170] syz.3.822 (8170): drop_caches: 2 [ 319.357269][ T8170] syz.3.822 (8170): drop_caches: 2 [ 319.408398][ T8163] syz.3.822 (8163): drop_caches: 2 [ 319.577343][ T8163] syz.3.822 (8163): drop_caches: 2 [ 319.620051][ T8161] xt_l2tp: v2 doesn't support IP mode [ 319.656282][ T8163] syz.3.822 (8163): drop_caches: 2 [ 319.675981][ T30] audit: type=1326 audit(1722560138.530:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8160 comm="syz.0.821" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdbe5f773b9 code=0x0 [ 319.790657][ T8173] nbd1: detected capacity change from 0 to 12 [ 319.832524][ T8176] block nbd1: NBD_DISCONNECT [ 319.903973][ T8176] block nbd1: Send disconnect failed -89 [ 319.957392][ T8178] block nbd1: Send control failed (result -89) [ 319.977172][ T8026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.993925][ T8178] block nbd1: Request send failed, requeueing [ 320.092065][ T8026] 8021q: adding VLAN 0 to HW filter on device team0 [ 320.112700][ T8178] block nbd1: Disconnected due to user request. [ 320.155791][ T5275] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.163045][ T5275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.200486][ T5275] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.208000][ T5275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.221553][ T59] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 320.233842][ T59] Buffer I/O error on dev nbd1, logical block 0, async page read [ 320.248256][ T8178] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 320.324838][ T8183] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 320.358838][ T8178] Buffer I/O error on dev nbd1, logical block 0, async page read [ 320.408573][ T8178] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 320.420952][ T8178] Buffer I/O error on dev nbd1, logical block 0, async page read [ 320.438318][ T8178] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 320.449528][ T8178] Buffer I/O error on dev nbd1, logical block 0, async page read [ 320.481044][ T8178] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 320.490163][ T8178] Buffer I/O error on dev nbd1, logical block 0, async page read [ 320.504313][ T8026] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 320.516847][ T8026] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 320.535854][ T8178] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 320.580625][ T8178] Buffer I/O error on dev nbd1, logical block 0, async page read [ 320.626111][ T8178] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 320.659534][ T8178] Buffer I/O error on dev nbd1, logical block 0, async page read [ 320.682800][ T8178] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 320.730575][ T8178] Buffer I/O error on dev nbd1, logical block 0, async page read [ 320.739451][ T8178] ldm_validate_partition_table(): Disk read failed. [ 320.810820][ T8178] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 320.840845][ T8178] Buffer I/O error on dev nbd1, logical block 0, async page read [ 320.850296][ T8178] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 320.905722][ T8178] Buffer I/O error on dev nbd1, logical block 0, async page read [ 320.925860][ T8178] Dev nbd1: unable to read RDB block 0 [ 320.936371][ T8196] tmpfs: Bad value for 'mpol' [ 320.946291][ T8178] nbd1: unable to read partition table [ 320.961106][ T8178] nbd1: partition table beyond EOD, truncated [ 321.065604][ T8026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 321.277769][ T8202] netlink: 4 bytes leftover after parsing attributes in process `syz.3.830'. [ 426.900241][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 426.907365][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5218/2:b..l [ 426.915931][ C0] rcu: (detected by 0, t=10503 jiffies, g=34673, q=350 ncpus=2) [ 426.923714][ C0] task:syz-executor state:R running task stack:20496 pid:5218 tgid:5218 ppid:5213 flags:0x00004002 [ 426.936873][ C0] Call Trace: [ 426.940191][ C0] [ 426.943155][ C0] __schedule+0x17ae/0x4a10 [ 426.947734][ C0] ? __pfx___schedule+0x10/0x10 [ 426.952629][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 426.958664][ C0] ? preempt_schedule_irq+0xf0/0x1c0 [ 426.963992][ C0] preempt_schedule_irq+0xfb/0x1c0 [ 426.969148][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 426.975302][ C0] irqentry_exit+0x5e/0x90 [ 426.979753][ C0] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 426.985260][ C0] RIP: 0010:percpu_ref_tryget+0xa3/0x180 [ 426.990947][ C0] Code: bf 00 00 00 00 00 fc ff df 48 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 e8 32 f7 ff 48 8b 03 a8 03 75 69 65 48 ff 00 01 e8 36 a5 ac 09 85 c0 74 3a e8 7d 59 79 ff 84 c0 75 31 e8 24 [ 427.010676][ C0] RSP: 0018:ffffc9000397ee28 EFLAGS: 00000286 [ 427.016780][ C0] RAX: 0000607f46a5a6f8 RBX: ffff88805e664010 RCX: ffff888028471e00 [ 427.024958][ C0] RDX: dffffc0000000000 RSI: ffffffff8c3f8820 RDI: ffffffff8c3f87e0 [ 427.032963][ C0] RBP: 1ffff11005aacb32 R08: ffffffff934ec807 R09: 1ffffffff269d900 [ 427.041053][ C0] R10: dffffc0000000000 R11: fffffbfff269d901 R12: ffff88802d565990 [ 427.049055][ C0] R13: dffffc0000000000 R14: ffffffff82004634 R15: dffffc0000000000 [ 427.057077][ C0] ? percpu_ref_tryget+0x14/0x180 [ 427.062173][ C0] ? percpu_ref_tryget+0x43/0x180 [ 427.067236][ C0] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 427.072990][ C0] get_mem_cgroup_from_objcg+0xc8/0x150 [ 427.078576][ C0] obj_cgroup_charge_pages+0x81/0x200 [ 427.083994][ C0] ? __pfx_obj_cgroup_charge_pages+0x10/0x10 [ 427.090024][ C0] ? prepare_alloc_pages+0x369/0x5d0 [ 427.095443][ C0] __memcg_kmem_charge_page+0xc8/0x1d0 [ 427.100946][ C0] __alloc_pages_noprof+0x28c/0x6c0 [ 427.106292][ C0] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 427.112052][ C0] ? policy_nodemask+0x53/0x7e0 [ 427.116967][ C0] ? policy_nodemask+0x291/0x7e0 [ 427.121965][ C0] alloc_pages_mpol_noprof+0x3e8/0x680 [ 427.127476][ C0] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 427.133515][ C0] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 427.140491][ C0] ? alloc_pages_noprof+0xef/0x170 [ 427.145828][ C0] pte_alloc_one+0x88/0x5d0 [ 427.150374][ C0] ? __pfx_pte_alloc_one+0x10/0x10 [ 427.155543][ C0] __pte_alloc+0x79/0x3a0 [ 427.160012][ C0] ? __pfx___pte_alloc+0x10/0x10 [ 427.164986][ C0] ? copy_pmd_range+0x7a7a/0x8500 [ 427.170312][ C0] copy_pmd_range+0x7ccd/0x8500 [ 427.175229][ C0] ? __pfx_copy_pmd_range+0x10/0x10 [ 427.180467][ C0] ? look_up_lock_class+0x77/0x160 [ 427.185618][ C0] ? register_lock_class+0x102/0x980 [ 427.190963][ C0] ? __pfx_register_lock_class+0x10/0x10 [ 427.196664][ C0] ? mark_lock+0x9a/0x350 [ 427.201045][ C0] ? __lock_acquire+0x137a/0x2040 [ 427.206148][ C0] copy_page_range+0x99f/0xe90 [ 427.211008][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 427.216342][ C0] ? __pfx_up_write+0x10/0x10 [ 427.221057][ C0] ? __asan_memset+0x23/0x50 [ 427.225689][ C0] ? __pfx_vma_interval_tree_augment_rotate+0x10/0x10 [ 427.232493][ C0] ? vma_interval_tree_insert_after+0x259/0x2b0 [ 427.238780][ C0] copy_mm+0x11ea/0x1f30 [ 427.243100][ C0] ? __pfx_copy_mm+0x10/0x10 [ 427.247737][ C0] ? __init_rwsem+0x122/0x160 [ 427.252447][ C0] ? copy_signal+0x549/0x670 [ 427.257080][ C0] copy_process+0x187a/0x3dc0 [ 427.262082][ C0] ? copy_process+0xa03/0x3dc0 [ 427.266899][ C0] ? __pfx_copy_process+0x10/0x10 [ 427.271982][ C0] kernel_clone+0x223/0x870 [ 427.276539][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 427.281637][ C0] __x64_sys_clone+0x258/0x2a0 [ 427.286450][ C0] ? __pfx___x64_sys_clone+0x10/0x10 [ 427.291778][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 427.297820][ C0] ? exc_page_fault+0x590/0x8c0 [ 427.302710][ C0] ? do_syscall_64+0xb6/0x230 [ 427.307429][ C0] do_syscall_64+0xf3/0x230 [ 427.311987][ C0] ? clear_bhb_loop+0x35/0x90 [ 427.316727][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.322755][ C0] RIP: 0033:0x7fc025b6dc13 [ 427.327224][ C0] RSP: 002b:00007ffdc4c53e08 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 427.335689][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc025b6dc13 [ 427.343889][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 427.351975][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 427.359979][ C0] R10: 00005555940da7d0 R11: 0000000000000246 R12: 0000000000000000 [ 427.367980][ C0] R13: 000000000004e33e R14: 000000000004dfb9 R15: 00007ffdc4c53f90 [ 427.376002][ C0] [ 427.379065][ C0] rcu: rcu_preempt kthread starved for 10540 jiffies! g34673 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 427.390284][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 427.400278][ C0] rcu: RCU grace-period kthread stack dump: [ 427.406237][ C0] task:rcu_preempt state:R running task stack:24912 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 427.418119][ C0] Call Trace: [ 427.421457][ C0] [ 427.424422][ C0] __schedule+0x17ae/0x4a10 [ 427.428996][ C0] ? __pfx___schedule+0x10/0x10 [ 427.433892][ C0] ? __pfx_lock_release+0x10/0x10 [ 427.438958][ C0] ? __asan_memset+0x23/0x50 [ 427.443590][ C0] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 427.449440][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 427.455984][ C0] ? schedule+0x90/0x320 [ 427.460258][ C0] schedule+0x14b/0x320 [ 427.464484][ C0] schedule_timeout+0x1be/0x310 [ 427.469364][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 427.474771][ C0] ? __pfx_process_timeout+0x10/0x10 [ 427.480108][ C0] ? prepare_to_swait_event+0x32e/0x350 [ 427.485707][ C0] rcu_gp_fqs_loop+0x2df/0x1330 [ 427.490593][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 427.495831][ C0] ? rcu_gp_init+0x1256/0x1630 [ 427.500648][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 427.505616][ C0] ? __pfx_rcu_implicit_dynticks_qs+0x10/0x10 [ 427.511728][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 427.517052][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 427.523097][ C0] ? finish_swait+0xd4/0x1e0 [ 427.527731][ C0] rcu_gp_kthread+0xa7/0x3b0 [ 427.532370][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 427.537599][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 427.543528][ C0] ? __kthread_parkme+0x169/0x1d0 [ 427.548596][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 427.553827][ C0] kthread+0x2f0/0x390 [ 427.557934][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 427.563166][ C0] ? __pfx_kthread+0x10/0x10 [ 427.567782][ C0] ret_from_fork+0x4b/0x80 [ 427.572240][ C0] ? __pfx_kthread+0x10/0x10 [ 427.576859][ C0] ret_from_fork_asm+0x1a/0x30 [ 427.581765][ C0] [ 427.584805][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 427.591148][ C0] Sending NMI from CPU 0 to CPUs 1: [ 427.596844][ C1] NMI backtrace for cpu 1 [ 427.596866][ C1] CPU: 1 UID: 0 PID: 8204 Comm: vhost-8203 Not tainted 6.11.0-rc1-syzkaller-00154-gc0ecd6388360 #0 [ 427.596892][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 427.596903][ C1] RIP: 0010:mark_lock+0xa2/0x350 [ 427.596937][ C1] Code: 00 8b 1b 81 e3 ff 1f 00 00 48 89 d8 48 c1 e8 06 48 8d 3c c5 00 c8 4e 93 be 08 00 00 00 e8 66 5e 87 00 48 0f a3 1d 4e aa de 11 <73> 10 48 69 c3 c8 00 00 00 48 8d 98 00 27 1d 93 eb 68 48 c7 c0 80 [ 427.596953][ C1] RSP: 0018:ffffc90000a18ac8 EFLAGS: 00000057 [ 427.596970][ C1] RAX: 0000000000000001 RBX: 0000000000000021 RCX: ffffffff81701daa [ 427.596984][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff934ec800 [ 427.596997][ C1] RBP: 0000000000000009 R08: ffffffff934ec807 R09: 1ffffffff269d900 [ 427.597010][ C1] R10: dffffc0000000000 R11: fffffbfff269d901 R12: ffff88805d105a00 [ 427.597024][ C1] R13: dffffc0000000000 R14: 0000000000000200 R15: ffff88805d106508 [ 427.597038][ C1] FS: 00007fdbe6d6d6c0(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 427.597054][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 427.597067][ C1] CR2: 0000000000000002 CR3: 000000007efb4000 CR4: 00000000003506f0 [ 427.597083][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 427.597094][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 427.597105][ C1] Call Trace: [ 427.597114][ C1] [ 427.597124][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 427.597143][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 427.597170][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 427.597197][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 427.597220][ C1] ? nmi_handle+0x14f/0x5a0 [ 427.597238][ C1] ? nmi_handle+0x2a/0x5a0 [ 427.597256][ C1] ? mark_lock+0xa2/0x350 [ 427.597282][ C1] ? default_do_nmi+0x63/0x160 [ 427.597301][ C1] ? exc_nmi+0x123/0x1f0 [ 427.597317][ C1] ? end_repeat_nmi+0xf/0x53 [ 427.597349][ C1] ? mark_lock+0x9a/0x350 [ 427.597376][ C1] ? mark_lock+0xa2/0x350 [ 427.597402][ C1] ? mark_lock+0xa2/0x350 [ 427.597430][ C1] ? mark_lock+0xa2/0x350 [ 427.597457][ C1] [ 427.597462][ C1] [ 427.597471][ C1] __lock_acquire+0xc35/0x2040 [ 427.597506][ C1] lock_acquire+0x1ed/0x550 [ 427.597530][ C1] ? net_tx_action+0x708/0xa50 [ 427.597562][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 427.597589][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 427.597615][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 427.597642][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 427.597671][ C1] ? net_tx_action+0x708/0xa50 [ 427.597694][ C1] net_tx_action+0x725/0xa50 [ 427.597716][ C1] ? net_tx_action+0x708/0xa50 [ 427.597740][ C1] ? __pfx_net_tx_action+0x10/0x10 [ 427.597774][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 427.597805][ C1] handle_softirqs+0x2c4/0x970 [ 427.597831][ C1] ? __irq_exit_rcu+0xf4/0x1c0 [ 427.597857][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 427.597883][ C1] ? irqtime_account_irq+0xd4/0x1e0 [ 427.597911][ C1] __irq_exit_rcu+0xf4/0x1c0 [ 427.597934][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 427.597962][ C1] irq_exit_rcu+0x9/0x30 [ 427.597983][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 427.598008][ C1] [ 427.598014][ C1] [ 427.598021][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 427.598050][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x11/0x70 [ 427.598076][ C1] Code: 5b e9 93 61 58 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 65 48 8b 0c 25 00 d7 03 00 <65> 8b 15 20 71 70 7e f7 c2 00 01 ff 00 74 11 f7 c2 00 01 00 00 74 [ 427.598092][ C1] RSP: 0018:ffffc900093078d0 EFLAGS: 00000246 [ 427.598106][ C1] RAX: ffffffff8141feb3 RBX: 0000000000000000 RCX: ffff88805d105a00 [ 427.598119][ C1] RDX: ffff88805d105a00 RSI: 0000000000000000 RDI: 0000000000000000 [ 427.598131][ C1] RBP: ffffc900093079f8 R08: ffffffff8141fea9 R09: 1ffff1100fa7c615 [ 427.598145][ C1] R10: dffffc0000000000 R11: ffffed100fa7c616 R12: ffffc90009307a68 [ 427.598159][ C1] R13: ffffc90009307af0 R14: 0000000000000002 R15: 0000000000000000 [ 427.598174][ C1] ? kernelmode_fixup_or_oops+0x49/0xf0 [ 427.598197][ C1] ? kernelmode_fixup_or_oops+0x53/0xf0 [ 427.598224][ C1] kernelmode_fixup_or_oops+0x53/0xf0 [ 427.598249][ C1] __bad_area_nosemaphore+0x118/0x770 [ 427.598274][ C1] ? __pfx___up_read+0x10/0x10 [ 427.598294][ C1] ? __pfx___bad_area_nosemaphore+0x10/0x10 [ 427.598327][ C1] ? lock_mm_and_find_vma+0xf8/0x2f0 [ 427.598349][ C1] exc_page_fault+0x61d/0x8c0 [ 427.598375][ C1] asm_exc_page_fault+0x26/0x30 [ 427.598400][ C1] RIP: 0010:__get_user_nocheck_2+0xa/0x20 [ 427.598418][ C1] Code: 01 ca c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb 0f ae e8 <0f> b7 10 31 c0 0f 01 ca c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 [ 427.598433][ C1] RSP: 0018:ffffc90009307b18 EFLAGS: 00050202 [ 427.598448][ C1] RAX: 0000000000000002 RBX: ffff88806a6c0290 RCX: dffffc0000000000 [ 427.598461][ C1] RDX: ffffc90014309000 RSI: 00000000000000cb RDI: 00000000000000cc [ 427.598473][ C1] RBP: ffffc90009307b20 R08: ffffffff88fa9fd2 R09: 1ffffffff269d926 [ 427.598486][ C1] R10: dffffc0000000000 R11: fffffbfff269d927 R12: dffffc0000000000 [ 427.598500][ C1] R13: dffffc0000000000 R14: ffff88806a6c01e0 R15: ffff88806a6c01e0 [ 427.598517][ C1] ? vhost_enable_notify+0xc2/0x5d0 [ 427.598549][ C1] vhost_get_avail_idx+0xd5/0x410 [ 427.598578][ C1] vhost_enable_notify+0x315/0x5d0 [ 427.598607][ C1] vhost_transport_do_send_pkt+0x107c/0x1400 [ 427.598647][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 427.598674][ C1] ? __pfx_vhost_transport_do_send_pkt+0x10/0x10 [ 427.598707][ C1] ? kcov_remote_start+0x4c0/0x7e0 [ 427.598731][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 427.598760][ C1] ? kcov_remote_start+0x9e/0x7e0 [ 427.598787][ C1] vhost_run_work_list+0x145/0x1c0 [ 427.598815][ C1] ? __pfx_vhost_run_work_list+0x10/0x10 [ 427.598843][ C1] vhost_task_fn+0x267/0x3f0 [ 427.598874][ C1] ? __pfx_vhost_task_fn+0x10/0x10 [ 427.598901][ C1] ? __pfx_vhost_task_fn+0x10/0x10 [ 427.598929][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 427.598955][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 427.598979][ C1] ? __pfx_vhost_task_fn+0x10/0x10 [ 427.599009][ C1] ? __pfx_vhost_task_fn+0x10/0x10 [ 427.599036][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 427.599056][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 427.599078][ C1] ? __pfx_vhost_task_fn+0x10/0x10 [ 427.599107][ C1] ret_from_fork+0x4b/0x80 [ 427.599132][ C1] ? __pfx_vhost_task_fn+0x10/0x10 [ 427.599161][ C1] ret_from_fork_asm+0x1a/0x30 [ 427.599196][ C1]