last executing test programs: 33.124437796s ago: executing program 1 (id=1821): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x540a, 0x0) r1 = syz_io_uring_setup(0x231, &(0x7f0000000380)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffff86}) io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x3) 32.472178543s ago: executing program 1 (id=1824): unshare(0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ppoll(&(0x7f0000000100)=[{r1}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000700), 0x0, 0x1000000000000, 0x0}) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010000a000090400000103010100092100080001220100090581", @ANYRES64], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) 31.860306502s ago: executing program 3 (id=1828): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)={0x54, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @disassoc={{{}, {}, @device_b}, 0x0, @val={0x8c, 0x18, {0x0, '\x00', @long="8c58ea25b8b4fa85433c7c90bed82811"}}}}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x4800}, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_DQBUF(r5, 0xc04c5611, &(0x7f0000000180)=@overlay={0x0, 0x5, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "e73b7cdb"}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket(0xa, 0x1, 0x0) close(r6) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x4e21, 0x0, @mcast1, 0x34}]}, &(0x7f0000002100)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x4, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f0000003c00)=0x90) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000b, 0x4031, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r8, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) r9 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @remote, 0x0, 0x1, 'none\x00'}, 0x2c) r10 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r10, 0xc0405610, &(0x7f0000000180)={0xa}) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000000000)={0x11, @multicast1, 0x0, 0x1000002, 'lblcr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r9, 0x0, 0x485, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x0, 0x73, &(0x7f0000000000)=""/115) 30.205342365s ago: executing program 3 (id=1831): open$dir(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x1, &(0x7f0000000280)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xc}], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={0x1c8, r6, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_LISTEN_PORT={0x6}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_PEERS={0x16c, 0x8, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1bc715ee4868b12a49f4df11bc05475489f6a27c4d6483ad2fa5e45903b0ce85"}, @WGPEER_A_ENDPOINT4={0xa0, 0x4, {0x2, 0x0, @local}}, @WGPEER_A_ALLOWEDIPS={0x8c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}]}]}]}, {0x74, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @private0}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "cde20bc0d9b90ac13642d7b66459dd9db5e20b4b16d3d23f2cb03a8aa417dce6"}]}]}, @WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x1c8}}, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x0, 0x0) r7 = socket(0x2, 0xa, 0x0) getsockopt$SO_BINDTODEVICE(r7, 0x1, 0x1c, &(0x7f0000000000), 0x20000000) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="660a00000000000061114c0000000000850000001500000095000000000000a688e125801fae3200"], &(0x7f0000000000)='GPL\x00'}, 0x80) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000003000/0x1000)=nil, 0x1000, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) 28.781619258s ago: executing program 1 (id=1833): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000000000002a1001c0"]) 28.633066372s ago: executing program 3 (id=1835): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002ac0)=ANY=[@ANYBLOB="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"/3593], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, 0x0) 27.252247015s ago: executing program 1 (id=1837): socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}}, 0x0) 26.735709497s ago: executing program 1 (id=1839): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001080)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r4}, 0x10) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) syz_pidfd_open(r1, 0x0) setresuid(0x0, 0x0, 0x0) gettid() syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x4) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, 0x0, &(0x7f0000001000)) connect$inet(r5, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) connect$inet(r5, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000700), r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000004f80)=ANY=[@ANYBLOB='(\x00', @ANYRES16=r6, @ANYBLOB="050000000000000000006b0000000800030096755988cd3462252285bd483bf2dd8d46da4b9bc646ff210244c0770cf405b764460e42620b5e539491761d5c3621f8190f559ecf8ba102ae83a75c3b42e9ed69641796831c62d1e12103c25d73bd40c2f32d58e8b94ca43859bd4af7cffb6940a37ef6215f723d5698d499050000000000005dd1afb30b1eb85cb7b82539a874cfd9f9bb58", @ANYRES32=r7], 0x28}}, 0x40040000) ioctl$SIOCSIFHWADDR(r0, 0x4030582b, &(0x7f0000000000)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x0, 0x3}}) 23.907560998s ago: executing program 1 (id=1843): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000b40)=ANY=[@ANYBLOB="040e05003d20"], 0x7) r2 = openat(r0, 0x0, 0x1451c2, 0x0) ftruncate(r2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={0x0, {0x2, 0x4e23, @remote}, {0x2, 0x4e20, @loopback}, {0x2, 0x4e21, @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000100)='vcan0\x00', 0x7, 0x8000000000000001, 0x7ff}) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x2015}) read$FUSE(r3, &(0x7f0000001ac0)={0x2020}, 0x2020) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) fallocate(r5, 0x6, 0x8, 0xfffffffffffffff8) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x2000, 0x1}, {0x6a, 0x2}, @ramp={0x100, 0x8, {0x10, 0x2, 0x0, 0x4}}}) r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x862b01) ioctl$EVIOCSMASK(r6, 0x40104593, &(0x7f0000000180)={0x1, 0x59, &(0x7f0000000100)="f13b8716bcfdcca0c8af3538908cd9249f533b44e0242eab855e96f55b9ffada39f62d8b23dd050e4bd47c6e12e3bd98840d9ae70008ed417a94f6c6b2fccb3a3bcb625653302c9301e4fe75a70cdee4c457f97a50895e6577"}) write$char_usb(r6, &(0x7f0000000040), 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r7, 0x545c, 0x0) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) 23.511634989s ago: executing program 3 (id=1845): open$dir(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x1, &(0x7f0000000280)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xc}], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={0x1c8, r6, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_LISTEN_PORT={0x6}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_PEERS={0x16c, 0x8, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1bc715ee4868b12a49f4df11bc05475489f6a27c4d6483ad2fa5e45903b0ce85"}, @WGPEER_A_ENDPOINT4={0xa0, 0x4, {0x2, 0x0, @local}}, @WGPEER_A_ALLOWEDIPS={0x8c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}]}]}]}, {0x74, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @private0}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "cde20bc0d9b90ac13642d7b66459dd9db5e20b4b16d3d23f2cb03a8aa417dce6"}]}]}, @WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x1c8}}, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x0, 0x0) r7 = socket(0x2, 0xa, 0x0) getsockopt$SO_BINDTODEVICE(r7, 0x1, 0x1c, &(0x7f0000000000), 0x20000000) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="660a00000000000061114c0000000000850000001500000095000000000000a688e125801fae3200"], &(0x7f0000000000)='GPL\x00'}, 0x80) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000003000/0x1000)=nil, 0x1000, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) 21.90743764s ago: executing program 3 (id=1848): sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ptrace$getregset(0xf, r0, 0x0, &(0x7f0000000080)={0x0}) 21.439052052s ago: executing program 3 (id=1849): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) write$evdev(r0, &(0x7f0000000000), 0x100000008) r1 = io_uring_setup(0x4a2f, &(0x7f0000000000)) close(r1) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x80004509, 0x0) 11.513891405s ago: executing program 2 (id=1863): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x80002, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3, 0x1c) r0 = fsopen(&(0x7f0000000000)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) mkdirat(r1, &(0x7f0000000080)='./file0\x00', 0x0) 11.093987505s ago: executing program 4 (id=1867): unshare(0x2000680) fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x7a, 0xdd, 0x15, 0x20, 0x545, 0x8080, 0x301, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa1, 0xc3, 0x85}}]}}]}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="93630100200501001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x4c}}, 0x0) 10.848124546s ago: executing program 2 (id=1868): syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local={0xd}, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x73, 0x0, @private, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 10.770345824s ago: executing program 2 (id=1869): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x1c, &(0x7f0000000300)=@ringbuf={{}, {}, {}, [@snprintf]}, 0x0}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xb) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff7f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 7.915391268s ago: executing program 0 (id=1872): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r0, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000001c0)="bd", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='htcp\x00', 0xfedd) sendmmsg$inet(r0, &(0x7f0000009040)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001980)="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", 0x509}], 0x1}}], 0x1, 0x0) 6.676157113s ago: executing program 0 (id=1873): r0 = socket(0x10, 0x803, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x100, 0x4) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r2, 0x17, r3}, 0x10) 6.242919674s ago: executing program 2 (id=1874): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000000c0), 0x12) 6.083726593s ago: executing program 4 (id=1875): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "c5"}]}], {0x14}}, 0x7c}}, 0x0) 5.003047679s ago: executing program 0 (id=1876): unshare(0x22020600) unshare(0x22020600) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dce3) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 4.627506143s ago: executing program 2 (id=1877): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x100800001) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$binfmt_script(r0, &(0x7f0000001440)={'#! ', './file0', [{0x20, '/dev/cpu/#/msr\x00'}, {}, {0x20, ')\x9e!'}], 0xa, "c66969522d9812f7"}, 0x28) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04080400c80008"], 0x51) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='scalable\x00', 0x9) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r4, &(0x7f0000000200), 0xfffffd9d) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESOCT=r4], 0x17) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYRESOCT=r4, @ANYRESDEC=r2], 0x1ac) syz_emit_vhci(0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x4, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f0000001400), 0x1, 0x22, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r7, 0x4004ae99, &(0x7f0000000040)=0x4) 4.379382813s ago: executing program 4 (id=1878): syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local={0xd}, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x73, 0x0, @private, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 4.32030544s ago: executing program 0 (id=1879): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) ioctl$TCFLSH(r0, 0x40204706, 0x20000002) 4.28666227s ago: executing program 4 (id=1880): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff0000000000010902"], 0x0) ioctl$EVIOCRMFF(r0, 0x83c0550b, &(0x7f0000000400)) 3.947628301s ago: executing program 0 (id=1881): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4) r2 = socket(0x10, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000a00)=@newtaction={0x850, 0x31, 0x3d, 0x0, 0x0, {}, [{0x83c, 0x1, [@m_police={0x838, 0x0, 0x0, 0x0, {{0xb}, {0x80c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x850}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r4, 0x5, 0x0, 0x0, {{0x26}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) r6 = dup(0xffffffffffffffff) prctl$PR_SET_MM_MAP(0x21, 0xe, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xd3}]}, &(0x7f0000000080)='GPL\x00', 0x8}, 0x90) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000380)={{0x1, 0x1, 0x18}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_int(r8, 0x0, 0x33, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x14, 0x4, 0x4, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x11, r6, 0x0) cachestat(r0, &(0x7f0000000a80), &(0x7f0000000ac0), 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5543, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) 2.182187079s ago: executing program 2 (id=1882): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r3}, 0x38) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000750000000000000095000000000000001f2676029988d56618361e4ea328c3b9748183f619a76e2c628df100ad83b7b6b43e59043983beb0d6"], 0x0}, 0x90) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r6, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r7, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x24, 0x4, 0x2}, 0x48) 376.826494ms ago: executing program 4 (id=1883): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x8020, 0x0, 0x0, {0x2}}) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5393, &(0x7f0000000000)) 31.278235ms ago: executing program 4 (id=1884): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c80)=ANY=[@ANYBLOB="12010000000000406d0422c2000000000001090224000100000000090400000103000000092100000001220b0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='signal_deliver\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) getrlimit(0xb, &(0x7f0000000040)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r3}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_usb_control_io(r0, &(0x7f00000005c0)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="8d10160000001609b9a948cd64e488dce9ef3d58bab9d885af6d11e6"], &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xef4475c06f253db5}}, &(0x7f0000000500)={0x0, 0xf, 0x3b, {0x5, 0xf, 0x3b, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x6d, "508e938f47dcbd86a1863358632b300d"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x7, 0x5, 0x7, 0xd}, @ssp_cap={0x18, 0x10, 0xa, 0xdf, 0x3, 0x8, 0xf00, 0x0, [0xff3f00, 0xff0000, 0x3f00]}]}}, &(0x7f0000000400)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x8, 0x9, 0x8, "143eff20", "e4d29662"}}, &(0x7f0000000580)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x3, 0xb5, 0x7, 0x42, 0x89f6, 0x8}}}, &(0x7f0000000d00)={0x84, &(0x7f0000000600)={0x0, 0x13, 0x67, "9955c13e52a630dcbb9df950a988eff0027a8865d42d462ccf0addfcab244dfe056149efbf196645beb9c5e3bf5711b1fc46b8270009857281461b0f90b7960fc9050b33a3a3fef0f725f89ba6a7b3c1e384bb1d0f71404b411c050ee1ea49f0059b7cee9e9632"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000740)={0x20, 0x0, 0x4}, &(0x7f0000000780)={0x20, 0x0, 0x8, {0x160, 0x10, [0x1e000]}}, &(0x7f00000007c0)={0x40, 0x7, 0x2, 0x5000}, &(0x7f0000000a40)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000a80)={0x40, 0xb, 0x2, "9fbe"}, &(0x7f0000000ac0)={0x40, 0xf, 0x2, 0xffb1}, &(0x7f0000000b00)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000b40)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}}, &(0x7f0000000b80)={0x40, 0x19, 0x2, "8552"}, &(0x7f0000000bc0)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000000c00)={0x40, 0x1c, 0x1}, &(0x7f0000000c40)={0x40, 0x1e, 0x1, 0xb6}, &(0x7f0000000cc0)={0x40, 0x21, 0x1, 0x2}}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1cdf}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {0x0, 0x2, 0x0, 0xffff, 0x0, 0x3}, 0x766c, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x0) bind$packet(r4, &(0x7f0000000040)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r4, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r8}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0xc, {[@main=@item_4={0x3, 0x0, 0x8}, @global=@item_012={0x1, 0x1, 0x0, "03"}, @main=@item_4={0x3, 0x0, 0x0, "b53648c8"}]}}, 0x0}, 0x0) 0s ago: executing program 0 (id=1885): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000001980)={{0x2000, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, r2, 0x0, 0x0, 'syz0\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x9fd, 0x84, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x1c, 0x33, @data_frame={@msdu=@type10={{}, {}, @from_mac, @device_b, @broadcast}, @a_msdu}}]}, 0x4c}}, 0x0) syz_usb_connect(0x0, 0x35, &(0x7f00000007c0)={{0x12, 0x1, 0x0, 0xcc, 0x9, 0x40, 0x40, 0x1519, 0x443, 0x1597, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x23, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x2f, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x8, 0xb, "10958155ebf9"}]}}]}}]}}]}}, 0x0) chdir(&(0x7f0000000780)='./file0\x00') r8 = memfd_create(&(0x7f00000006c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\x91\xfdy\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0`\xaa8\xc7\xc8\x9d\xfdA\b\x10\x92(c\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdI\x83\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7 \x1d\xa1\xce\x8b\xac \xe8\x88\xdc\x02\xd7\x04\x9b\x9aL\x9f([4\x81\xf6\xb6\xdf\x16J\xab\xecC\xe2{\xfd\x8a\xb4\x8e\x9c\xfb\xf6\xe9\xd8]B6{\xf0(\xaeW;)\x9f\x9cR\xae\x12G\xd8\xa4y', 0x0) r9 = dup(r8) write$cgroup_pid(r9, &(0x7f0000000040)=0xffffffffffffffff, 0xe) sendfile(r8, r9, &(0x7f0000000100), 0x6c03) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r6, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf1, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000003c0), &(0x7f0000000440), 0x8, 0x60, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) ioctl$sock_inet6_SIOCDELRT(r9, 0x890c, &(0x7f0000000640)={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0={0xfc, 0x0, '\x00', 0x1}, 0x4, 0x8000, 0x7, 0x0, 0x1, 0x0, r10}) syz_usb_connect$cdc_ncm(0x3, 0x6f, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001020000202505a1a440000102030109025d0002010080010904000001020df5ff05240600012d052400fff50d240f0101000000008007000706241a060029090581032000040c060904010000020d00000904010102020d0000090582020800098508090503020004fc0780"], &(0x7f0000000180)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x81, 0x3, 0x0, 0x40}, 0x19, &(0x7f00000000c0)=ANY=[@ANYBLOB="050f1900011410049e2de74dd51c34d78855bba64d1596a975"], 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x426}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x827}}]}) kernel console output (not intermixed with test programs): etooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 344.437518][ T5464] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.630705][ T5464] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.139856][ T5464] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.378400][ T5464] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.461296][ T5346] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 345.672113][ T5346] usb 4-1: Using ep0 maxpacket: 32 [ 345.679881][ T5346] usb 4-1: config 0 has an invalid interface number: 111 but max is 1 [ 345.690301][ T5346] usb 4-1: config 0 has no interface number 1 [ 345.699691][ T5346] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 345.710885][ T5346] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.726550][ T5346] usb 4-1: Product: syz [ 345.732145][ T5346] usb 4-1: Manufacturer: syz [ 345.737098][ T5346] usb 4-1: SerialNumber: syz [ 345.750836][ T5346] usb 4-1: config 0 descriptor?? [ 345.782296][ T5269] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 346.011677][ T5269] usb 1-1: Using ep0 maxpacket: 8 [ 346.015539][ T5346] snd-usb-6fire 4-1:0.111: unable to receive device firmware state. [ 346.029233][ T5269] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 346.039659][ T5269] usb 1-1: config 179 has no interface number 0 [ 346.058549][ T5269] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 346.072188][ T5346] snd-usb-6fire 4-1:0.111: probe with driver snd-usb-6fire failed with error -71 [ 346.117761][ T5269] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 346.138387][ T5221] Bluetooth: hci2: command tx timeout [ 346.144123][ T5346] usb 4-1: USB disconnect, device number 35 [ 346.163806][ T5269] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 346.185064][ T5269] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 346.220671][ T5269] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 346.261643][ T5269] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 346.311012][ T5269] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.345762][ T5464] bridge_slave_1: left allmulticast mode [ 346.368984][ T5464] bridge_slave_1: left promiscuous mode [ 346.371661][ T8771] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 346.403009][ T5464] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.432366][ T5464] bridge_slave_0: left allmulticast mode [ 346.453003][ T5464] bridge_slave_0: left promiscuous mode [ 346.480685][ T5464] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.806644][ T9] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input25 [ 347.025959][ T9] usb 1-1: USB disconnect, device number 35 [ 347.032393][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 347.032432][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 347.079937][ T9] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 347.577782][ T5269] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 347.781503][ T5269] usb 4-1: Using ep0 maxpacket: 32 [ 347.801557][ T5269] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 347.821792][ T5269] usb 4-1: config 0 interface 0 has no altsetting 0 [ 347.845111][ T5269] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=a6.13 [ 347.861588][ T5269] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.877985][ T5269] usb 4-1: Product: syz [ 347.884454][ T5269] usb 4-1: Manufacturer: syz [ 347.889831][ T5269] usb 4-1: SerialNumber: syz [ 347.910309][ T5269] usb 4-1: config 0 descriptor?? [ 347.940582][ T5269] pvrusb2: Hardware description: Terratec Grabster AV400 [ 347.962176][ T5269] pvrusb2: ********** [ 347.966950][ T5269] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 348.001656][ T5269] pvrusb2: Important functionality might not be entirely working. [ 348.028987][ T5269] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 348.054055][ T5269] pvrusb2: ********** [ 348.091905][ T5269] usb 4-1: selecting invalid altsetting 0 [ 348.112416][ T2040] pvrusb2: Invalid write control endpoint [ 348.175541][ T5464] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 348.221661][ T5221] Bluetooth: hci2: command tx timeout [ 348.238408][ T25] usb 4-1: USB disconnect, device number 36 [ 348.259324][ T5464] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 348.284746][ T2040] pvrusb2: Invalid write control endpoint [ 348.290905][ T2040] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 348.302272][ T2040] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 348.310346][ T2040] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 348.320939][ T2040] pvrusb2: Device being rendered inoperable [ 348.322178][ T5464] bond0 (unregistering): Released all slaves [ 348.334442][ T2040] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 348.346182][ T2040] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 348.362516][ T2040] pvrusb2: Attached sub-driver cx25840 [ 348.368675][ T2040] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 348.408102][ T8744] chnl_net:caif_netlink_parms(): no params data found [ 348.418180][ T2040] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 349.423880][ T25] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 349.786213][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.119824][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.213030][ T25] usb 4-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 350.290764][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.302215][ T5221] Bluetooth: hci2: command tx timeout [ 350.376933][ T25] usb 4-1: config 0 descriptor?? [ 350.404961][ T8744] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.456291][ T8744] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.476441][ T8744] bridge_slave_0: entered allmulticast mode [ 350.542894][ T8744] bridge_slave_0: entered promiscuous mode [ 350.585393][ T5221] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 350.600679][ T5221] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 350.634576][ T5221] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 350.648574][ T5221] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 350.659267][ T5221] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 350.668712][ T5221] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 350.731701][ T5464] hsr_slave_0: left promiscuous mode [ 350.759007][ T8837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1092'. [ 350.772411][ T5464] hsr_slave_1: left promiscuous mode [ 350.791886][ T5464] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 350.819904][ T5464] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 350.841756][ T5464] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 350.867551][ T25] petalynx 0003:18B1:0037.001B: unknown main item tag 0x0 [ 350.871766][ T5464] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 350.892138][ T25] petalynx 0003:18B1:0037.001B: hidraw0: USB HID v0.00 Device [HID 18b1:0037] on usb-dummy_hcd.3-1/input0 [ 350.968069][ T5464] veth1_macvtap: left promiscuous mode [ 350.984970][ T5464] veth0_macvtap: left promiscuous mode [ 350.990880][ T5464] veth1_vlan: left promiscuous mode [ 350.999212][ T5464] veth0_vlan: left promiscuous mode [ 351.069895][ T5308] usb 4-1: USB disconnect, device number 37 [ 351.876660][ T5464] team0 (unregistering): Port device team_slave_1 removed [ 351.938854][ T5464] team0 (unregistering): Port device team_slave_0 removed [ 352.378009][ T5221] Bluetooth: hci2: command tx timeout [ 352.524564][ T8861] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 352.620866][ T8744] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.640173][ T8744] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.656044][ T8744] bridge_slave_1: entered allmulticast mode [ 352.664814][ T8744] bridge_slave_1: entered promiscuous mode [ 352.691575][ T5221] Bluetooth: hci5: command tx timeout [ 352.714048][ T8855] batadv0: entered promiscuous mode [ 352.720435][ T8855] macsec1: entered promiscuous mode [ 352.728072][ T8855] macsec1: entered allmulticast mode [ 352.734695][ T8855] batadv0: entered allmulticast mode [ 352.753124][ T8855] batadv0: left allmulticast mode [ 352.763438][ T8855] batadv0: left promiscuous mode [ 352.917006][ T8744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.944481][ T8744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 353.059551][ T8744] team0: Port device team_slave_0 added [ 353.088268][ T8744] team0: Port device team_slave_1 added [ 353.342771][ T8744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.362798][ T8744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.418015][ T8744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.525509][ T8744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.545336][ T8744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.604085][ T8744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.856848][ T8744] hsr_slave_0: entered promiscuous mode [ 353.879602][ T8744] hsr_slave_1: entered promiscuous mode [ 353.902286][ T8744] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 353.910117][ T8744] Cannot create hsr debugfs directory [ 354.164697][ T8905] sctp: [Deprecated]: syz.2.1103 (pid 8905) Use of struct sctp_assoc_value in delayed_ack socket option. [ 354.164697][ T8905] Use struct sctp_sack_info instead [ 354.187109][ T8905] sctp: [Deprecated]: syz.2.1103 (pid 8905) Use of struct sctp_assoc_value in delayed_ack socket option. [ 354.187109][ T8905] Use struct sctp_sack_info instead [ 354.772592][ T5221] Bluetooth: hci5: command tx timeout [ 354.782903][ T5464] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.847564][ T8917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 354.952055][ T5464] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.154865][ T5464] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.179742][ T8841] chnl_net:caif_netlink_parms(): no params data found [ 355.370984][ T5464] batman_adv: batadv0: Removing interface: macvtap1 [ 355.433894][ T5464] batman_adv: batadv0: Removing interface: macvtap2 [ 355.463383][ T5464] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.827198][ T8936] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1110'. [ 356.650584][ T8841] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.689346][ T8841] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.725399][ T8841] bridge_slave_0: entered allmulticast mode [ 356.762837][ T8841] bridge_slave_0: entered promiscuous mode [ 356.801781][ T8841] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.851286][ T5221] Bluetooth: hci5: command tx timeout [ 356.858828][ T8841] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.901883][ T8841] bridge_slave_1: entered allmulticast mode [ 356.909515][ T8841] bridge_slave_1: entered promiscuous mode [ 357.161413][ T8947] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1112'. [ 357.437592][ T8841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 357.534226][ T8841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 357.851776][ T8841] team0: Port device team_slave_0 added [ 357.914673][ T8841] team0: Port device team_slave_1 added [ 358.874823][ T5464] dvmrp0 (unregistering): left allmulticast mode [ 358.923442][ T8971] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 358.936708][ T5221] Bluetooth: hci5: command tx timeout [ 359.207879][ T5464] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 359.226640][ T5464] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 359.241234][ T5464] bond0 (unregistering): Released all slaves [ 359.285508][ T8841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 359.298263][ T8841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.333587][ T8841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 359.500706][ T8975] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1119'. [ 359.530079][ T8841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 359.569507][ T8841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.691012][ T8841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 359.716796][ T5464] tipc: Disabling bearer [ 359.734724][ T5464] tipc: Left network mode [ 360.044488][ T8744] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 360.159657][ T8744] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 360.197966][ T8744] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 360.264746][ T8841] hsr_slave_0: entered promiscuous mode [ 360.283309][ T8841] hsr_slave_1: entered promiscuous mode [ 360.311472][ T8841] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 360.339759][ T8841] Cannot create hsr debugfs directory [ 360.458342][ T8744] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 360.811854][ T8986] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1123'. [ 361.690695][ T5464] hsr_slave_0: left promiscuous mode [ 361.706738][ T5464] hsr_slave_1: left promiscuous mode [ 361.742055][ T5464] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 361.749890][ T5464] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 361.792343][ T5464] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 361.821345][ T5464] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 361.890892][ T5464] veth1_macvtap: left promiscuous mode [ 361.906289][ T5464] veth0_macvtap: left promiscuous mode [ 361.914668][ T5464] veth1_vlan: left promiscuous mode [ 361.920041][ T5464] veth0_vlan: left promiscuous mode [ 362.659177][ T5464] team0 (unregistering): Port device team_slave_1 removed [ 362.719155][ T5464] team0 (unregistering): Port device team_slave_0 removed [ 363.571577][ T9005] Bluetooth: MGMT ver 1.23 [ 363.576316][ T9001] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1127'. [ 363.586093][ T9005] Bluetooth: hci3: invalid len left 7, exp >= 48 [ 363.597008][ T9004] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1128'. [ 363.622107][ T9004] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1128'. [ 363.786206][ T9011] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1131'. [ 364.056171][ T5274] kernel write not supported for file bpf-prog (pid: 5274 comm: kworker/0:5) [ 364.307016][ T8744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.422663][ T8744] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.509708][ T5308] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.517257][ T5308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.632076][ T5308] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.639302][ T5308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.728378][ T9038] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1138'. [ 364.749000][ T9038] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1138'. [ 364.944875][ T8841] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 364.965670][ T8841] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 365.030640][ T8841] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 365.078484][ T8841] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 365.410163][ T5269] kernel write not supported for file bpf-prog (pid: 5269 comm: kworker/0:3) [ 365.457781][ T8841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 365.568170][ T8841] 8021q: adding VLAN 0 to HW filter on device team0 [ 365.609721][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.617717][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.676885][ T5273] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.684151][ T5273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.794367][ T8744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 365.964889][ T9081] : renamed from ipvlan1 [ 366.253544][ T5274] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 366.256538][ T9096] sch_fq: defrate 0 ignored. [ 366.462886][ T5274] usb 1-1: Using ep0 maxpacket: 8 [ 366.498440][ T5274] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 366.529448][ T5274] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 366.569187][ T5274] usb 1-1: New USB device found, idVendor=1943, idProduct=2257, bcdDevice= 3.fc [ 366.593532][ T8841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 366.598565][ T5274] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.612061][ T5221] Bluetooth: hci3: Opcode 0x1407 failed: -110 [ 366.613992][ T5234] Bluetooth: hci3: command 0x0406 tx timeout [ 366.625976][ T5274] usb 1-1: Product: syz [ 366.631953][ T9109] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 366.652683][ T5274] usb 1-1: Manufacturer: syz [ 366.657435][ T5274] usb 1-1: SerialNumber: syz [ 366.723887][ T5274] usb 1-1: config 0 descriptor?? [ 366.733418][ T9101] kvm: pic: non byte read [ 366.755969][ T5274] s2255 1-1:0.0: Could not find bulk-in endpoint [ 366.760526][ T9101] kvm: pic: non byte read [ 366.768967][ T9101] kvm: pic: non byte read [ 366.786471][ T9101] kvm: pic: non byte read [ 366.790649][ T5274] Sensoray 2255 driver load failed: 0xfffffff4 [ 366.796442][ T9101] kvm: pic: non byte read [ 366.802999][ T25] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 366.816963][ T5274] s2255 1-1:0.0: probe with driver s2255 failed with error -12 [ 366.824469][ T9101] kvm: pic: non byte read [ 366.829633][ T9101] kvm: pic: level sensitive irq not supported [ 366.829823][ T9101] kvm: pic: non byte read [ 366.868607][ T8744] veth0_vlan: entered promiscuous mode [ 366.904213][ T8841] veth0_vlan: entered promiscuous mode [ 366.910679][ T9101] kvm: pic: non byte read [ 366.933497][ T8744] veth1_vlan: entered promiscuous mode [ 366.990428][ T8841] veth1_vlan: entered promiscuous mode [ 367.009400][ T25] usb 4-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.10 [ 367.024754][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.037885][ T5274] usb 1-1: USB disconnect, device number 36 [ 367.043158][ T25] usb 4-1: Product: syz [ 367.063753][ T25] usb 4-1: Manufacturer: syz [ 367.078953][ T25] usb 4-1: SerialNumber: syz [ 367.115212][ T25] usb 4-1: config 0 descriptor?? [ 367.158049][ T8744] veth0_macvtap: entered promiscuous mode [ 367.164081][ T25] go7007 4-1:0.0: probe with driver go7007 failed with error -12 [ 367.216324][ T8744] veth1_macvtap: entered promiscuous mode [ 367.233056][ T8841] veth0_macvtap: entered promiscuous mode [ 367.266169][ T8841] veth1_macvtap: entered promiscuous mode [ 367.315675][ T8744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.341816][ T8744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.371421][ T8744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.383142][ T25] usb 4-1: USB disconnect, device number 38 [ 367.391325][ T8744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.403078][ T8744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.415444][ T8744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.436985][ T8744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.448171][ T8744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.470235][ T8744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 367.533408][ T8744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.556056][ T8744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.582515][ T8744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.609837][ T8744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.649463][ T8744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.681193][ T8744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.721226][ T8744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.746129][ T8744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.758096][ T9128] Bluetooth: hci3: invalid len left 7, exp >= 48 [ 367.783270][ T8744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.836483][ T8744] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.859410][ T8744] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.874832][ T8744] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.884748][ T8744] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.193070][ T8841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.414899][ T8841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.506744][ T29] audit: type=1326 audit(1722399779.893:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9131 comm="syz.2.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9ef9773b9 code=0x7ffc0000 [ 368.641297][ T8841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.798005][ T8841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.821750][ T29] audit: type=1326 audit(1722399779.903:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9131 comm="syz.2.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9ef9773b9 code=0x7ffc0000 [ 368.865289][ T8841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.917257][ T8841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.958468][ T8841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.012118][ T8841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.022279][ T8841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.033732][ T8841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.045900][ T8841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 369.058506][ T8841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.069080][ T8841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.079296][ T8841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.096529][ T8841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.110856][ T8841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.132833][ T8841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.168118][ T8841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.191546][ T8841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.221303][ T8841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.262218][ T8841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.293062][ T8841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 369.358198][ T8841] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.400320][ T8841] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.416918][ T8841] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.436904][ T8841] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.675644][ T5464] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.714209][ T5464] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.876170][ T5455] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.911925][ T5455] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.353776][ T9186] netlink: 'syz.4.1064': attribute type 1 has an invalid length. [ 370.418008][ T9186] netlink: 'syz.4.1064': attribute type 2 has an invalid length. [ 370.885711][ T5455] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.947391][ T5455] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.160998][ T5464] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.197950][ T5464] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.715108][ T9207] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1173'. [ 371.724226][ T9207] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1173'. [ 371.762087][ T9207] gtp0: entered promiscuous mode [ 371.767374][ T9207] gtp0: entered allmulticast mode [ 372.759063][ T9211] xt_CONNSECMARK: invalid mode: 0 [ 373.611815][ T25] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 374.416355][ T25] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 374.458897][ T25] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 374.505865][ T25] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 374.536860][ T25] usb 1-1: config 1 interface 1 has no altsetting 0 [ 374.548927][ T25] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 374.569743][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.591356][ T25] usb 1-1: Product: syz [ 374.595613][ T25] usb 1-1: Manufacturer: syz [ 374.619461][ T25] usb 1-1: SerialNumber: syz [ 374.661230][ T5274] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 374.663115][ T25] cdc_ncm 1-1:1.0: skipping garbage [ 374.678512][ T25] cdc_ncm 1-1:1.0: NCM or ECM functional descriptors missing [ 374.687335][ T25] cdc_ncm 1-1:1.0: bind() failure [ 374.883103][ T25] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 374.891306][ T5274] usb 5-1: Using ep0 maxpacket: 8 [ 374.909128][ T25] usb 1-1: USB disconnect, device number 37 [ 374.947876][ T5274] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 374.991895][ T5274] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 375.029690][ T5274] usb 5-1: New USB device found, idVendor=1943, idProduct=2257, bcdDevice= 3.fc [ 375.064000][ T5274] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.100177][ T5274] usb 5-1: Product: syz [ 375.117019][ T5274] usb 5-1: Manufacturer: syz [ 375.141178][ T5274] usb 5-1: SerialNumber: syz [ 375.154252][ T5274] usb 5-1: config 0 descriptor?? [ 375.177398][ T5274] s2255 5-1:0.0: Could not find bulk-in endpoint [ 375.194409][ T5274] Sensoray 2255 driver load failed: 0xfffffff4 [ 375.200772][ T5274] s2255 5-1:0.0: probe with driver s2255 failed with error -12 [ 375.219592][ T9255] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1183'. [ 375.470953][ T942] usb 5-1: USB disconnect, device number 26 [ 375.732637][ T9266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.790842][ T9266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.825055][ T9271] netlink: 'syz.0.1188': attribute type 10 has an invalid length. [ 375.854547][ T9271] geneve0: entered promiscuous mode [ 375.909815][ T9271] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 376.008786][ T9274] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 376.340522][ T9285] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1194'. [ 377.972340][ T9308] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1199'. [ 378.803619][ T5273] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 378.929511][ T9324] 9pnet_fd: Insufficient options for proto=fd [ 379.051689][ T5273] usb 1-1: Using ep0 maxpacket: 16 [ 379.094223][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.106149][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.186556][ T5273] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 379.361463][ T5273] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 379.389635][ T5273] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 379.609466][ T5273] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.644291][ T5273] usb 1-1: config 0 descriptor?? [ 379.951415][ T25] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 380.094843][ T9317] raw-gadget.1 gadget.0: fail, usb_ep_set_wedge returned -11 [ 380.151325][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 380.156913][ T5273] usbhid 1-1:0.0: can't add hid device: -71 [ 380.182167][ T5273] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 380.198618][ T25] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 380.211314][ T25] usb 5-1: config 1 has no interface number 1 [ 380.218986][ T5273] usb 1-1: USB disconnect, device number 38 [ 380.225475][ T25] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 380.269427][ T25] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 380.304390][ T25] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 380.313922][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.327953][ T25] usb 5-1: Product: syz [ 380.350933][ T25] usb 5-1: Manufacturer: syz [ 380.366855][ T25] usb 5-1: SerialNumber: syz [ 380.535870][ T9335] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1208'. [ 380.556207][ T9335] IPv6: sit1: Disabled Multicast RS [ 380.564460][ T9335] sit1: entered allmulticast mode [ 380.690280][ T25] usb 5-1: 2:1 : unsupported sample bitwidth 0 in 0 bytes [ 380.765546][ T25] usb 5-1: USB disconnect, device number 27 [ 380.893157][ T9339] ecryptfs_parse_options: eCryptfs: unrecognized option [&@] [ 380.930496][ T9339] ecryptfs_parse_options: eCryptfs: unrecognized option [ention_end] [ 380.955559][ T9339] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 380.983201][ T9339] Error parsing options; rc = [-22] [ 380.999099][ T942] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 381.087508][ T9020] udevd[9020]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 381.180247][ T9345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1213'. [ 381.231327][ T942] usb 4-1: Using ep0 maxpacket: 8 [ 381.248896][ T942] usb 4-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice=66.9e [ 381.269089][ T942] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.279832][ T942] usb 4-1: Product: syz [ 381.285846][ T942] usb 4-1: Manufacturer: syz [ 381.287275][ T9348] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 381.290719][ T942] usb 4-1: SerialNumber: syz [ 381.321489][ T942] usb 4-1: config 0 descriptor?? [ 381.349824][ T942] gspca_main: spca500-2.14.0 probing 046d:0900 [ 381.622316][ T5234] Bluetooth: hci1: unexpected event for opcode 0x1003 [ 382.550078][ T942] gspca_spca500: reg write: error -71 [ 382.560685][ T942] gspca_spca500: reg write: error -71 [ 382.567838][ T942] gspca_spca500: reg write: error -71 [ 382.574358][ T942] gspca_spca500: reg write: error -71 [ 382.580861][ T942] gspca_spca500: reg write: error -71 [ 382.589121][ T942] gspca_spca500: reg write: error -71 [ 382.595377][ T942] gspca_spca500: reg write: error -71 [ 382.608830][ T942] gspca_spca500: reg write: error -71 [ 382.621661][ T942] gspca_spca500: reg write: error -71 [ 382.638556][ T942] gspca_spca500: reg write: error -71 [ 382.659959][ T942] gspca_spca500: reg write: error -71 [ 382.881796][ T942] usb 4-1: USB disconnect, device number 39 [ 385.651512][ T5234] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 385.661737][ T5234] Bluetooth: hci1: Injecting HCI hardware error event [ 385.672180][ T5234] Bluetooth: hci1: hardware error 0x00 [ 386.131473][ T5269] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 388.734390][ T5234] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 389.141225][ T5269] usb 3-1: device not accepting address 31, error -71 [ 389.181248][ T5234] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 389.192673][ T5234] Bluetooth: hci5: Injecting HCI hardware error event [ 389.205035][ T5234] Bluetooth: hci5: hardware error 0x00 [ 389.881231][ T25] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 390.131236][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 390.166397][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 390.251284][ T25] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 390.290975][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 390.311794][ T25] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 390.329936][ T25] usb 1-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 390.340814][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.350359][ T25] usb 1-1: Product: syz [ 390.360611][ T25] usb 1-1: Manufacturer: syz [ 390.366406][ T25] usb 1-1: SerialNumber: syz [ 390.419892][ T25] usb 1-1: config 0 descriptor?? [ 390.466659][ T9449] netlink: 'syz.3.1245': attribute type 23 has an invalid length. [ 390.479278][ T25] mcba_usb 1-1:0.0 can0: couldn't setup read URBs [ 390.486929][ T25] mcba_usb 1-1:0.0 can0: couldn't start device: -90 [ 390.633622][ T25] mcba_usb 1-1:0.0: probe with driver mcba_usb failed with error -90 [ 390.751556][ T25] usb 1-1: USB disconnect, device number 39 [ 390.842999][ T9445] xt_CONNSECMARK: invalid mode: 0 [ 391.331422][ T5234] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 391.410062][ T9465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.430963][ T9465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 393.253099][ T9488] netlink: 'syz.3.1259': attribute type 23 has an invalid length. [ 393.262645][ T9] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 393.320219][ T9492] dccp_close: ABORT with 20 bytes unread [ 393.496699][ T9] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 393.704338][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 394.733938][ T9] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 394.751184][ T9] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 394.759769][ T9] usb 1-1: Product: syz [ 394.771253][ T9] usb 1-1: Manufacturer: syz [ 394.780560][ T9] usb 1-1: SerialNumber: syz [ 394.806184][ T9] usb 1-1: config 0 descriptor?? [ 394.882884][ T9] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 394.933710][ T9] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 395.493612][ T9506] xt_CONNSECMARK: invalid mode: 0 [ 395.954179][ T9] usb 1-1: USB disconnect, device number 40 [ 395.996561][ T9] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 398.196507][ T9545] 9pnet_fd: Insufficient options for proto=fd [ 400.163302][ T9555] gretap0: refused to change device tx_queue_len [ 400.170400][ T9555] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 405.484363][ T5269] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 406.361449][ T5269] usb 1-1: Using ep0 maxpacket: 8 [ 406.381707][ T5269] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 406.396046][ T5269] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.415622][ T5269] usb 1-1: config 0 descriptor?? [ 406.421218][ T9583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.455825][ T9583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.509596][ T9589] Cannot find add_set index 0 as target [ 407.459658][ T9608] syzkaller1: entered promiscuous mode [ 407.470539][ T9608] syzkaller1: entered allmulticast mode [ 408.645434][ T5269] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 408.694323][ T5269] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 408.761392][ T5269] asix 1-1:0.0: probe with driver asix failed with error -71 [ 408.866627][ T5269] usb 1-1: USB disconnect, device number 41 [ 409.138184][ T9634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1302'. [ 409.449637][ T9643] Cannot find add_set index 0 as target [ 409.776939][ T9658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.834201][ T9658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.879787][ T9660] syzkaller1: entered promiscuous mode [ 409.897935][ T9660] syzkaller1: entered allmulticast mode [ 410.791776][ T9684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.824408][ T9684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.625760][ T942] IPVS: starting estimator thread 0... [ 411.841471][ T9702] IPVS: using max 16 ests per chain, 38400 per kthread [ 411.874109][ T9674] netlink: 'syz.2.1313': attribute type 1 has an invalid length. [ 412.643396][ T9718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.692094][ T9718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.648924][ T29] audit: type=1326 audit(1722399827.163:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9763 comm="syz.1.1337" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2977d773b9 code=0x0 [ 416.382675][ T9772] hub 9-0:1.0: USB hub found [ 416.389962][ T9772] hub 9-0:1.0: 8 ports detected [ 417.898108][ T9787] netlink: 'syz.1.1344': attribute type 7 has an invalid length. [ 417.950019][ T9787] netlink: 'syz.1.1344': attribute type 1 has an invalid length. [ 418.006332][ T9787] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.1344'. [ 418.544413][ T9795] cgroup: fork rejected by pids controller in /syz3 [ 418.742408][ T5341] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 418.755751][ T9837] REISERFS warning (device nullb0): sh-2021 reiserfs_fill_super: can not find reiserfs on nullb0 [ 418.941364][ T5341] usb 4-1: Using ep0 maxpacket: 16 [ 418.955678][ T5341] usb 4-1: config 0 has no interfaces? [ 418.965913][ T5341] usb 4-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 418.986854][ T5341] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.016223][ T5341] usb 4-1: config 0 descriptor?? [ 419.985704][ T9853] random: crng reseeded on system resumption [ 420.021574][ T9852] bond_slave_0: entered promiscuous mode [ 420.027912][ T9852] bond_slave_1: entered promiscuous mode [ 420.076225][ T9852] bond_slave_0: left promiscuous mode [ 420.081793][ T9852] bond_slave_1: left promiscuous mode [ 420.525347][ T9857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.571903][ T9857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.971255][ T5346] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 421.445185][ T5346] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 421.657574][ T5346] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.729384][ T5346] usb 3-1: config 0 descriptor?? [ 421.794859][ T5346] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 421.831662][ T5341] usb 4-1: USB disconnect, device number 40 [ 422.444210][ T5346] gspca_cpia1: usb_control_msg 03, error -32 [ 422.455964][ T5346] cpia1 3-1:0.0: unexpected state after lo power cmd: 00 [ 422.515151][ T29] audit: type=1800 audit(1722399834.033:22): pid=9879 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.1364" name="/" dev="9p" ino=2 res=0 errno=0 [ 422.655339][ T5346] gspca_cpia1: usb_control_msg 01, error -71 [ 422.682557][ T5346] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0) [ 422.753918][ T5346] usb 3-1: USB disconnect, device number 33 [ 423.362023][ T9893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 423.370810][ T9893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 423.551909][ T9895] bond_slave_0: entered promiscuous mode [ 423.557720][ T9895] bond_slave_1: entered promiscuous mode [ 423.593334][ T9895] bond_slave_0: left promiscuous mode [ 423.598895][ T9895] bond_slave_1: left promiscuous mode [ 423.852364][ T5346] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 424.067852][ T5346] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 424.092248][ T5346] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 424.131504][ T9905] random: crng reseeded on system resumption [ 424.161990][ T5346] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 424.181545][ T5346] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 424.211888][ T5346] usb 3-1: SerialNumber: syz [ 424.224805][ T9900] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 424.243075][ T5346] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 424.261255][ T942] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 424.471262][ T942] usb 1-1: Using ep0 maxpacket: 8 [ 424.493093][ T942] usb 1-1: config 6 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 424.532220][ T942] usb 1-1: config 6 interface 0 altsetting 0 has an endpoint descriptor with address 0xEC, changing to 0x8C [ 424.572493][ T942] usb 1-1: config 6 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 424.601250][ T942] usb 1-1: config 6 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0 [ 424.668444][ T942] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 424.729557][ T942] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.751224][ T942] usb 1-1: Product: syz [ 424.755455][ T942] usb 1-1: Manufacturer: syz [ 424.800833][ T942] usb 1-1: SerialNumber: syz [ 424.835672][ T942] hso 1-1:6.0: Can't find BULK OUT endpoint [ 425.028514][ T9906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 425.031832][ T5346] usb 3-1: USB disconnect, device number 34 [ 425.063344][ T9399] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 425.065134][ T9906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 425.088719][ T9399] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 425.098480][ T9399] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 425.107489][ T9399] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 425.121828][ T9399] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 425.130207][ T9399] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 425.249503][ T9] usb 1-1: USB disconnect, device number 42 [ 425.896221][ T9913] chnl_net:caif_netlink_parms(): no params data found [ 426.411220][ T29] audit: type=1800 audit(1722399837.923:23): pid=9925 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.1376" name="/" dev="9p" ino=2 res=0 errno=0 [ 427.171380][ T9399] Bluetooth: hci6: command tx timeout [ 427.668991][ T9913] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.924211][ T9913] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.331423][ T9913] bridge_slave_0: entered allmulticast mode [ 428.523644][ T9913] bridge_slave_0: entered promiscuous mode [ 428.730350][ T9913] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.771625][ T9913] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.778963][ T9913] bridge_slave_1: entered allmulticast mode [ 428.842692][ T9913] bridge_slave_1: entered promiscuous mode [ 429.083246][ T9913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 429.145010][ T9913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 429.251313][ T9399] Bluetooth: hci6: command tx timeout [ 429.309673][ T9913] team0: Port device team_slave_0 added [ 429.332707][ T9913] team0: Port device team_slave_1 added [ 429.460970][ T9913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.502432][ T9913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.601503][ T9913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 430.535328][ T9913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 430.614553][ T9913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 430.773212][ T9913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 431.039421][ T9913] hsr_slave_0: entered promiscuous mode [ 431.053026][ T5274] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 431.066830][ T9913] hsr_slave_1: entered promiscuous mode [ 431.098681][ T9913] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 431.127137][ T9913] Cannot create hsr debugfs directory [ 431.287987][ T5274] usb 4-1: Using ep0 maxpacket: 8 [ 431.311943][ T5274] usb 4-1: config 6 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 431.331600][ T9399] Bluetooth: hci6: command tx timeout [ 431.339400][ T5274] usb 4-1: config 6 interface 0 altsetting 0 has an endpoint descriptor with address 0xEC, changing to 0x8C [ 431.421977][ T5274] usb 4-1: config 6 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 431.443711][ T5274] usb 4-1: config 6 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0 [ 431.485729][ T5274] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 431.524279][ T5274] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.555885][ T5274] usb 4-1: Product: syz [ 431.566165][ T5274] usb 4-1: Manufacturer: syz [ 431.579338][ T5274] usb 4-1: SerialNumber: syz [ 431.609638][ T5274] hso 4-1:6.0: Can't find BULK OUT endpoint [ 431.730558][ T9913] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.947887][ T5341] usb 4-1: USB disconnect, device number 41 [ 432.050948][ T9913] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.348169][ T9913] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.673712][ T9913] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.341640][ T25] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 433.434450][ T9399] Bluetooth: hci6: command tx timeout [ 433.704088][ T25] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 433.738106][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.744400][ T9994] netlink: 'syz.1.1394': attribute type 10 has an invalid length. [ 433.906621][ T25] usb 4-1: config 0 descriptor?? [ 434.294353][ T25] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 434.315140][ T9994] batman_adv: batadv0: Adding interface: team0 [ 434.341748][ T9994] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 434.377333][ T9994] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 434.396807][ T9997] netlink: 'syz.1.1394': attribute type 10 has an invalid length. [ 434.411566][ T9997] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1394'. [ 434.441594][ T9997] team0: entered promiscuous mode [ 434.452014][ T9997] team_slave_0: entered promiscuous mode [ 434.458047][ T9997] team_slave_1: entered promiscuous mode [ 434.500545][ T9997] 8021q: adding VLAN 0 to HW filter on device team0 [ 435.013128][ T9997] batman_adv: batadv0: Interface activated: team0 [ 435.019981][ T9997] batman_adv: batadv0: Interface deactivated: team0 [ 435.027270][ T9997] batman_adv: batadv0: Removing interface: team0 [ 435.052361][ T9997] bridge0: port 3(team0) entered blocking state [ 435.068358][ T9997] bridge0: port 3(team0) entered disabled state [ 435.082047][ T9997] team0: entered allmulticast mode [ 435.087221][ T9997] team_slave_0: entered allmulticast mode [ 435.103848][ T9997] team_slave_1: entered allmulticast mode [ 435.120025][ T9997] bridge0: port 3(team0) entered blocking state [ 435.126636][ T9997] bridge0: port 3(team0) entered forwarding state [ 435.246124][ T25] gspca_cpia1: usb_control_msg 03, error -32 [ 435.271683][ T25] cpia1 4-1:0.0: unexpected state after lo power cmd: 00 [ 435.485317][ T25] gspca_cpia1: usb_control_msg 01, error -71 [ 435.508046][ T25] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0) [ 435.526633][ T9913] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 435.559084][ T9913] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 435.559746][ T25] usb 4-1: USB disconnect, device number 42 [ 435.627382][ T9913] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 435.773141][ T9913] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 436.135473][ T9913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 436.238861][ T9913] 8021q: adding VLAN 0 to HW filter on device team0 [ 436.291156][ T5274] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.298476][ T5274] bridge0: port 1(bridge_slave_0) entered forwarding state [ 436.428164][ T5274] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.435506][ T5274] bridge0: port 2(bridge_slave_1) entered forwarding state [ 436.556461][ T9913] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 436.603034][ T25] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 436.662684][T10027] loop0: detected capacity change from 0 to 1 [ 436.721459][T10027] loop0: detected capacity change from 1 to 0 [ 436.801495][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 436.829409][ T25] usb 1-1: config 6 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 436.849237][ T25] usb 1-1: config 6 interface 0 altsetting 0 has an endpoint descriptor with address 0xEC, changing to 0x8C [ 436.904760][ T25] usb 1-1: config 6 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 436.993123][ T25] usb 1-1: config 6 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0 [ 437.036016][ T25] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 437.066324][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.858881][ T25] usb 1-1: Product: syz [ 437.864370][ T25] usb 1-1: Manufacturer: syz [ 437.869036][ T25] usb 1-1: SerialNumber: syz [ 437.880354][ T25] hso 1-1:6.0: Can't find BULK OUT endpoint [ 438.010542][T10042] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1407'. [ 438.135523][ T9913] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 438.193864][ T5346] usb 1-1: USB disconnect, device number 43 [ 438.391254][ T25] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 438.615826][ T25] usb 4-1: config 9 has an invalid descriptor of length 213, skipping remainder of the config [ 438.641605][ T25] usb 4-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 438.691378][ T25] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 438.721839][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.890728][ T25] usb 4-1: USB disconnect, device number 43 [ 440.103162][ T9913] veth0_vlan: entered promiscuous mode [ 440.130729][ T9913] veth1_vlan: entered promiscuous mode [ 440.224492][ T9913] veth0_macvtap: entered promiscuous mode [ 440.248959][ T9913] veth1_macvtap: entered promiscuous mode [ 440.318453][ T9913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.331612][ T9913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.342014][ T9913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.353634][ T9913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.361402][ T9] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 440.364866][ T9913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.391016][ T9913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.404735][ T9913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.418018][ T9913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.432489][ T9913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.459673][ T9913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.486866][ T9913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.517783][ T9913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.534699][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.544106][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.562118][ T9913] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 440.584337][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 440.588533][ T9913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.632065][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 440.643397][ T9913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.653699][ T9] usb 3-1: New USB device found, idVendor=056a, idProduct=033c, bcdDevice= 0.00 [ 440.668037][ T9913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.674170][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.725854][ T9913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.750820][ T9] usb 3-1: config 0 descriptor?? [ 440.759226][ T9913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.800470][ T9913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.858655][ T9913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.904444][ T9913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.929826][ T9913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.951651][ T9913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.979926][ T9913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.996723][ T9913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.036720][ T9913] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 441.103114][ T9913] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.149166][ T9913] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.178292][ T9913] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.200570][ T9] wacom 0003:056A:033C.001C: Unknown device_type for 'HID 056a:033c'. Assuming pen. [ 441.213652][ T9913] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.236418][ T9] wacom 0003:056A:033C.001C: hidraw0: USB HID v0.00 Device [HID 056a:033c] on usb-dummy_hcd.2-1/input0 [ 441.294877][ T9] input: Wacom Intuos PT S 2 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:033C.001C/input/input26 [ 441.562935][ T9] usb 3-1: USB disconnect, device number 35 [ 441.901318][ T5273] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 442.474982][ T5273] usb 4-1: Using ep0 maxpacket: 16 [ 442.516489][ T5273] usb 4-1: config 0 has no interfaces? [ 442.535256][ T5273] usb 4-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 442.601541][ T5273] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.611695][ T5471] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.619582][ T5471] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.682227][ T5273] usb 4-1: config 0 descriptor?? [ 442.823565][ T5471] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.872354][ T5471] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.238892][ T29] audit: type=1326 audit(1722399854.753:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10136 comm="syz.4.1373" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6b3c7773b9 code=0x0 [ 449.270511][T10145] hub 9-0:1.0: USB hub found [ 449.276006][T10145] hub 9-0:1.0: 8 ports detected [ 449.666347][T10135] sctp: [Deprecated]: syz.1.1425 (pid 10135) Use of int in maxseg socket option. [ 449.666347][T10135] Use struct sctp_assoc_value instead [ 450.004216][ T9] usb 4-1: USB disconnect, device number 44 [ 452.732186][ T29] audit: type=1326 audit(1722399864.253:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10188 comm="syz.0.1438" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff5d89773b9 code=0x0 [ 453.288047][T10194] hub 9-0:1.0: USB hub found [ 453.294192][T10194] hub 9-0:1.0: 8 ports detected [ 454.169877][T10200] sctp: [Deprecated]: syz.4.1439 (pid 10200) Use of int in maxseg socket option. [ 454.169877][T10200] Use struct sctp_assoc_value instead [ 454.301259][ T5274] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 454.453132][T10212] hpfs: bad mount options. [ 454.516352][ T5274] usb 1-1: New USB device found, idVendor=8086, idProduct=0630, bcdDevice=83.b4 [ 454.518397][ T25] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 454.536462][ T5274] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.561258][ T5274] usb 1-1: Product: syz [ 454.565499][ T5274] usb 1-1: Manufacturer: syz [ 454.577758][ T5274] usb 1-1: SerialNumber: syz [ 454.597777][ T5274] usb 1-1: config 0 descriptor?? [ 454.612250][ T5274] gspca_main: spca500-2.14.0 probing 8086:0630 [ 454.681462][ T5273] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 454.734168][ T25] usb 4-1: config 0 has no interfaces? [ 454.753904][ T25] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 454.771013][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 454.791250][ T25] usb 4-1: SerialNumber: syz [ 454.812048][ T25] usb 4-1: config 0 descriptor?? [ 454.903028][ T5273] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 454.927510][ T5273] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 454.962711][ T25] usb 1-1: USB disconnect, device number 44 [ 454.975884][ T5273] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 454.986629][ T5273] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.023999][T10210] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 455.088896][ T5346] usb 4-1: USB disconnect, device number 45 [ 455.099108][ T5273] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 455.503738][ T5274] usb 5-1: USB disconnect, device number 28 [ 456.014077][T10229] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 456.675672][T10231] netlink: 'syz.3.1451': attribute type 309 has an invalid length. [ 457.640224][T10257] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 457.851281][T10264] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 457.883464][T10264] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 458.321947][T10268] binder: 10262:10268 ioctl 4018620d 0 returned -22 [ 459.112080][T10264] siw: device registration error -19 [ 461.691397][ T9] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 461.915470][ T9] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 34, using maximum allowed: 30 [ 461.981738][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 462.056872][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 462.118890][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 34 [ 462.201180][ T9] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 462.271186][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.392924][ T9] usb 4-1: config 0 descriptor?? [ 464.843235][ T5234] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 464.888819][ T5234] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 464.901704][ T5234] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 465.239820][ T5234] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 465.250467][ T5234] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 465.259581][ T5234] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 465.532944][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 465.542867][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 465.579033][ T9] usb 4-1: USB disconnect, device number 46 [ 466.964574][T10320] chnl_net:caif_netlink_parms(): no params data found [ 467.331848][ T5234] Bluetooth: hci1: command tx timeout [ 468.218071][T10320] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.252338][T10320] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.278952][T10320] bridge_slave_0: entered allmulticast mode [ 468.299346][T10320] bridge_slave_0: entered promiscuous mode [ 468.317310][T10320] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.330213][T10320] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.340990][T10320] bridge_slave_1: entered allmulticast mode [ 468.369634][T10320] bridge_slave_1: entered promiscuous mode [ 468.564772][T10320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 468.639386][T10320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 468.812220][ T25] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 468.993756][T10320] team0: Port device team_slave_0 added [ 469.052822][T10320] team0: Port device team_slave_1 added [ 469.067487][ T25] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 469.094367][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.132746][ T25] usb 4-1: Product: syz [ 469.153734][ T25] usb 4-1: Manufacturer: syz [ 469.177309][ T25] usb 4-1: SerialNumber: syz [ 469.209365][ T25] usb 4-1: config 0 descriptor?? [ 469.229902][ T29] audit: type=1326 audit(1722399880.743:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10376 comm="syz.4.1495" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6b3c7773b9 code=0x0 [ 469.304582][T10320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 469.339205][T10320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 469.412190][ T5234] Bluetooth: hci1: command tx timeout [ 469.700777][T10320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 469.720980][T10320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 469.729214][T10320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 469.819341][T10380] hub 9-0:1.0: USB hub found [ 469.824613][T10380] hub 9-0:1.0: 8 ports detected [ 470.769304][T10320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 470.837580][ T25] usb 4-1: Firmware: major: 202, minor: 255, hardware type: RZUSB (3) [ 471.052018][ T25] usb 4-1: failed to fetch extended address, random address set [ 471.162681][T10320] hsr_slave_0: entered promiscuous mode [ 471.179334][T10320] hsr_slave_1: entered promiscuous mode [ 471.197939][ T25] usb 4-1: USB disconnect, device number 47 [ 471.225968][T10320] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 471.277477][T10320] Cannot create hsr debugfs directory [ 471.493907][ T5234] Bluetooth: hci1: command tx timeout [ 472.016787][T10320] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.360152][T10320] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.919651][T10320] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.134904][T10320] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.580906][ T5234] Bluetooth: hci1: command tx timeout [ 473.776983][T10423] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1507'. [ 473.821583][T10423] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1507'. [ 473.954832][T10320] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 474.009177][T10320] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 474.062222][T10320] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 474.118725][T10320] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 474.311924][ T9] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 474.533801][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 474.566451][T10320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 474.591185][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 474.614765][ T9] usb 5-1: New USB device found, idVendor=5543, idProduct=3031, bcdDevice= 0.00 [ 474.646418][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.693029][ T9] usb 5-1: config 0 descriptor?? [ 474.737479][T10320] 8021q: adding VLAN 0 to HW filter on device team0 [ 474.870254][ T5308] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.877690][ T5308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 475.125142][T10452] netlink: 71464 bytes leftover after parsing attributes in process `syz.0.1517'. [ 475.139885][T10452] netlink: zone id is out of range [ 475.145393][T10452] netlink: zone id is out of range [ 475.176707][T10452] netlink: zone id is out of range [ 475.280536][T10452] netlink: zone id is out of range [ 475.368814][T10452] netlink: zone id is out of range [ 475.578875][T10452] netlink: zone id is out of range [ 475.609383][T10452] netlink: zone id is out of range [ 475.636096][T10452] netlink: zone id is out of range [ 475.661661][T10320] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 475.682031][T10452] netlink: zone id is out of range [ 475.716017][T10320] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 475.744564][T10452] netlink: zone id is out of range [ 475.840342][ T5274] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.847795][ T5274] bridge0: port 2(bridge_slave_1) entered forwarding state [ 476.345499][T10471] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1521'. [ 476.422568][T10466] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 476.495903][T10475] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1522'. [ 476.551254][T10475] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1522'. [ 476.681525][T10466] siw: device registration error -19 [ 476.713244][T10320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 477.006005][T10320] veth0_vlan: entered promiscuous mode [ 477.127253][T10320] veth1_vlan: entered promiscuous mode [ 477.244541][T10490] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 477.299401][T10320] veth0_macvtap: entered promiscuous mode [ 477.425789][T10320] veth1_macvtap: entered promiscuous mode [ 477.639463][T10320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.683346][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 477.716247][T10500] netlink: 'syz.3.1530': attribute type 1 has an invalid length. [ 477.721236][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 477.726530][T10500] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.1530'. [ 477.732674][T10320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.750973][T10500] netlink: 'syz.3.1530': attribute type 1 has an invalid length. [ 477.813095][ T9] usb 5-1: USB disconnect, device number 29 [ 477.833347][T10320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.884154][T10320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.931091][T10320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.952039][T10320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.973216][T10320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.999943][T10320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.016841][T10320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.037006][T10320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.047319][T10320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.066097][T10320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.077407][T10320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.098187][T10320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.114386][T10320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 478.175543][T10320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.201422][T10320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.221170][T10320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.251105][T10320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.266058][T10320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.294053][T10320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.321161][T10320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.375420][T10320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.401111][T10320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.421092][T10320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.440853][T10320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.465049][T10320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.479970][T10320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.498131][T10320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.519953][T10320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 478.542271][T10505] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1532'. [ 478.554055][T10509] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1534'. [ 478.574238][T10509] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1534'. [ 478.633737][T10320] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.680859][T10320] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.721244][T10320] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.730036][T10320] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.071449][ T5462] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.084731][ T5462] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.204289][T10525] netlink: 'syz.1.1543': attribute type 1 has an invalid length. [ 479.225685][T10525] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.1543'. [ 479.260361][ T5462] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.290052][T10525] netlink: 'syz.1.1543': attribute type 1 has an invalid length. [ 479.299422][ T5462] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.532344][T10529] hub 6-0:1.0: USB hub found [ 479.537507][T10529] hub 6-0:1.0: 1 port detected [ 479.552872][T10529] Invalid ELF header magic: != ELF [ 480.483748][T10534] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1544'. [ 480.991552][ T5272] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 481.221297][ T5272] usb 4-1: Using ep0 maxpacket: 32 [ 481.234147][ T5272] usb 4-1: New USB device found, idVendor=0cde, idProduct=0023, bcdDevice=21.32 [ 481.265598][ T5272] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.286183][ T5272] usb 4-1: Product: syz [ 481.291904][ T5272] usb 4-1: Manufacturer: syz [ 481.298541][ T5272] usb 4-1: SerialNumber: syz [ 481.318065][ T5272] usb 4-1: config 0 descriptor?? [ 481.821376][ T29] audit: type=1326 audit(1722399893.333:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10545 comm="syz.2.1549" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7fca3773b9 code=0x0 [ 481.991221][ T25] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 482.203477][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 482.232333][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 482.260743][ T25] usb 1-1: New USB device found, idVendor=06cd, idProduct=011a, bcdDevice=17.cb [ 482.277985][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.294633][ T25] usb 1-1: Product: syz [ 482.304533][ T5272] usb 4-1: reset high-speed USB device number 48 using dummy_hcd [ 482.315275][ T25] usb 1-1: Manufacturer: syz [ 482.322746][ T25] usb 1-1: SerialNumber: syz [ 482.335424][ T25] usb 1-1: config 0 descriptor?? [ 482.345317][ T25] keyspan 1-1:0.0: Keyspan - (without firmware) converter detected [ 482.639147][ T5272] usb 1-1: USB disconnect, device number 45 [ 482.659815][ T5272] keyspan 1-1:0.0: device disconnected [ 482.724414][T10568] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1558'. [ 482.883223][ T25] usb 4-1: USB disconnect, device number 48 [ 487.133115][T10614] hsr0: entered promiscuous mode [ 491.604246][ T25] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 491.829533][ T25] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 491.860339][ T25] usb 3-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 491.889365][ T25] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 491.926956][ T25] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 491.940365][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.960336][ T25] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 492.092801][ T25] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 492.237282][T10154] udevd[10154]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 492.381155][ T942] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 492.495456][T10657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.504426][T10657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.536027][ T942] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 493.589257][ T942] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 493.629902][ T942] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 493.661694][T10679] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 493.692679][ T942] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 493.720624][ T942] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.748213][T10679] syzkaller0: entered promiscuous mode [ 493.762682][ T942] usb 4-1: config 0 descriptor?? [ 493.772181][T10679] syzkaller0: entered allmulticast mode [ 494.391682][ T942] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 494.410513][ T942] plantronics 0003:047F:FFFF.001D: No inputs registered, leaving [ 494.477950][ T942] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 494.496495][ T5272] usb 3-1: USB disconnect, device number 36 [ 495.290287][ T5269] usb 4-1: USB disconnect, device number 49 [ 496.352746][ T9399] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 496.381410][ T9399] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 496.394736][ T9399] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 496.424442][ T9399] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 496.447625][ T9399] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 496.455595][ T9399] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 498.541177][ T5234] Bluetooth: hci5: command tx timeout [ 500.611462][ T5234] Bluetooth: hci5: command tx timeout [ 501.107407][T10722] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1608'. [ 501.285032][T10725] hsr0: entered promiscuous mode [ 501.980636][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.987269][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.615768][T10738] loop0: detected capacity change from 0 to 7 [ 502.668816][T10700] chnl_net:caif_netlink_parms(): no params data found [ 502.675958][T10738] Dev loop0: unable to read RDB block 7 [ 502.690360][T10738] loop0: unable to read partition table [ 502.697887][ T5234] Bluetooth: hci5: command tx timeout [ 502.711663][T10738] loop0: partition table beyond EOD, truncated [ 502.761530][T10738] loop_reread_partitions: partition scan of loop0 (被xڬdƤݡ [ 502.761530][T10738] ) failed (rc=-5) [ 503.244092][T10700] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.283808][T10700] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.320873][T10700] bridge_slave_0: entered allmulticast mode [ 503.352577][T10700] bridge_slave_0: entered promiscuous mode [ 503.368181][T10700] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.406235][ T5346] IPVS: starting estimator thread 0... [ 503.421503][T10700] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.462979][T10700] bridge_slave_1: entered allmulticast mode [ 503.519437][T10700] bridge_slave_1: entered promiscuous mode [ 503.531239][T10768] IPVS: using max 22 ests per chain, 52800 per kthread [ 504.782360][ T5234] Bluetooth: hci5: command tx timeout [ 504.803485][T10700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 504.881700][T10764] ceph: No mds server is up or the cluster is laggy [ 504.989637][T10700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 505.330415][T10700] team0: Port device team_slave_0 added [ 505.352000][T10794] loop0: detected capacity change from 0 to 7 [ 505.401490][T10794] Dev loop0: unable to read RDB block 7 [ 505.403335][T10700] team0: Port device team_slave_1 added [ 505.415013][T10794] loop0: unable to read partition table [ 505.462548][T10794] loop0: partition table beyond EOD, truncated [ 505.530305][T10794] loop_reread_partitions: partition scan of loop0 (被xڬdƤݡ [ 505.530305][T10794] ) failed (rc=-5) [ 505.603677][T10700] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 505.631875][T10700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 505.701308][T10700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 505.751487][T10700] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 505.758520][T10700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 505.861076][T10700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 505.903907][T10798] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1628'. [ 506.102652][T10700] hsr_slave_0: entered promiscuous mode [ 506.149405][T10700] hsr_slave_1: entered promiscuous mode [ 506.162724][T10700] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 506.191598][T10700] Cannot create hsr debugfs directory [ 507.240608][ T5346] IPVS: starting estimator thread 0... [ 507.534789][T10823] IPVS: using max 16 ests per chain, 38400 per kthread [ 507.695574][T10700] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.448716][T10700] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.484914][ T25] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 508.688478][T10700] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.720935][ T25] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 508.742946][ T25] usb 3-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 508.764901][ T25] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 508.781442][ T9] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 508.788285][ T25] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 508.799058][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.863993][ T25] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 508.879347][T10700] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.899722][ T5346] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 508.926800][ T25] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 508.971701][ T942] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 508.998878][T10723] udevd[10723]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 509.035078][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 509.051108][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 509.068594][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 509.079643][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 509.087792][ T9] usb 4-1: SerialNumber: syz [ 509.099109][ T9] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 509.114588][ T9] cdc_acm 4-1:1.0: This needs exactly 3 endpoints [ 509.116465][ T5346] usb 5-1: Using ep0 maxpacket: 8 [ 509.131168][ T9] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -22 [ 509.164115][ T5346] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 509.201096][ T5346] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.219679][ T5346] usb 5-1: Product: syz [ 509.251327][ T5346] usb 5-1: Manufacturer: syz [ 509.256021][ T5346] usb 5-1: SerialNumber: syz [ 509.271567][T10825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 509.280492][T10825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 509.294239][ T5346] usb 5-1: config 0 descriptor?? [ 509.340517][T10700] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 509.473849][T10700] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 509.537853][T10700] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 509.560505][ T942] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 509.560570][ T942] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 509.560603][ T942] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 509.560628][ T942] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 509.560677][ T942] usb 1-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00 [ 509.560704][ T942] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.595117][T10700] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 509.596983][ T942] usb 1-1: config 0 descriptor?? [ 509.684305][ T5346] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 509.781513][ T5272] usb 4-1: USB disconnect, device number 50 [ 510.025181][T10700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 510.046209][ T942] thrustmaster 0003:044F:B653.001E: unknown main item tag 0x0 [ 510.071334][ T942] thrustmaster 0003:044F:B653.001E: unknown main item tag 0x1 [ 510.100688][ T942] thrustmaster 0003:044F:B653.001E: unknown main item tag 0x0 [ 510.122970][T10700] 8021q: adding VLAN 0 to HW filter on device team0 [ 510.141882][ T942] thrustmaster 0003:044F:B653.001E: item fetching failed at offset 3/7 [ 510.178936][ T942] thrustmaster 0003:044F:B653.001E: parse failed [ 510.194073][ T5271] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.201410][ T5271] bridge0: port 1(bridge_slave_0) entered forwarding state [ 510.219827][ T942] thrustmaster 0003:044F:B653.001E: probe with driver thrustmaster failed with error -22 [ 510.233950][ T5271] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.241237][ T5271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 510.381465][ T5269] usb 1-1: USB disconnect, device number 46 [ 510.542216][ T5346] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 510.566370][ T5346] usb 5-1: USB disconnect, device number 30 [ 510.825345][ T5346] usb 3-1: USB disconnect, device number 37 [ 511.312890][T10700] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 511.441883][ T5269] libceph: connect (1)[c::]:6789 error -101 [ 511.448968][ T5269] libceph: mon0 (1)[c::]:6789 connect error [ 511.470772][T10856] ceph: No mds server is up or the cluster is laggy [ 512.522785][ T5271] libceph: connect (1)[c::]:6789 error -101 [ 512.529000][ T5271] libceph: mon0 (1)[c::]:6789 connect error [ 512.607630][T10700] veth0_vlan: entered promiscuous mode [ 512.663592][T10700] veth1_vlan: entered promiscuous mode [ 512.850616][T10700] veth0_macvtap: entered promiscuous mode [ 512.924387][T10700] veth1_macvtap: entered promiscuous mode [ 512.989619][T10700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 513.041267][T10700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.058169][T10700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 513.094788][T10700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.140848][T10700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 513.175068][T10700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.201182][ T5271] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 513.202335][T10700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 513.266508][T10700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.296206][T10700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 513.331162][T10700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.361531][T10700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 513.401681][T10700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.414706][ T5271] usb 5-1: Using ep0 maxpacket: 32 [ 513.430547][T10700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 513.445524][ T5271] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 513.464991][T10700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.478374][ T5271] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.502525][T10700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 513.518224][ T5271] usb 5-1: config 0 descriptor?? [ 513.543360][T10700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.556202][ T5271] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 513.584233][T10700] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 513.786708][T10700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.815398][T10700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.828427][T10700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.861503][T10700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.892211][T10700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.931061][T10700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.954836][T10700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.979194][T10700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.004634][T10700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 514.034102][T10700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.079410][T10700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 514.119401][T10700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.163352][T10700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 514.198571][T10700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.247335][T10700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 514.278620][T10700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.320095][T10700] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 514.392238][T10700] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.450650][T10700] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.499530][T10700] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.527225][T10700] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.003392][ T5455] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 515.031161][ T5455] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 515.071373][ T25] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 515.095655][ T5271] gspca_vc032x: reg_w err -71 [ 515.103650][ T5271] gspca_vc032x: I2c Bus Busy Wait 00 [ 515.109031][ T5271] gspca_vc032x: I2c Bus Busy Wait 00 [ 515.163636][ T5271] gspca_vc032x: I2c Bus Busy Wait 00 [ 515.169523][ T5271] gspca_vc032x: I2c Bus Busy Wait 00 [ 515.191828][ T5271] gspca_vc032x: I2c Bus Busy Wait 00 [ 515.199332][ T5471] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 515.207690][ T5271] gspca_vc032x: I2c Bus Busy Wait 00 [ 515.214728][ T5271] gspca_vc032x: I2c Bus Busy Wait 00 [ 515.241520][ T5471] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 515.257896][ T5271] gspca_vc032x: I2c Bus Busy Wait 00 [ 515.273893][ T5271] gspca_vc032x: I2c Bus Busy Wait 00 [ 515.298204][ T5271] gspca_vc032x: I2c Bus Busy Wait 00 [ 515.312430][ T5271] gspca_vc032x: I2c Bus Busy Wait 00 [ 515.331081][ T5271] gspca_vc032x: I2c Bus Busy Wait 00 [ 515.336457][ T5271] gspca_vc032x: I2c Bus Busy Wait 00 [ 515.336495][ T25] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 515.351147][ T5271] gspca_vc032x: I2c Bus Busy Wait 00 [ 515.391234][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 515.413029][ T5271] gspca_vc032x: I2c Bus Busy Wait 00 [ 515.427600][ T5271] gspca_vc032x: I2c Bus Busy Wait 00 [ 515.454466][ T5271] gspca_vc032x: I2c Bus Busy Wait 00 [ 515.478779][ T5271] gspca_vc032x: I2c Bus Busy Wait 00 [ 515.495766][ T5271] gspca_vc032x: Unknown sensor... [ 515.511186][ T5271] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 515.521397][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 515.564540][ T25] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 515.627273][ T5271] usb 5-1: USB disconnect, device number 31 [ 515.631195][ T25] usb 1-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00 [ 515.759814][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.802498][ T25] usb 1-1: config 0 descriptor?? [ 516.364652][ T25] thrustmaster 0003:044F:B653.001F: unknown main item tag 0x0 [ 516.448956][ T25] thrustmaster 0003:044F:B653.001F: unknown main item tag 0x1 [ 516.500534][ T25] thrustmaster 0003:044F:B653.001F: unknown main item tag 0x0 [ 516.570082][ T25] thrustmaster 0003:044F:B653.001F: item fetching failed at offset 3/7 [ 516.623883][ T25] thrustmaster 0003:044F:B653.001F: parse failed [ 516.643588][ T25] thrustmaster 0003:044F:B653.001F: probe with driver thrustmaster failed with error -22 [ 516.878203][ T5272] usb 1-1: USB disconnect, device number 47 [ 518.236598][T10969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 518.281568][T10969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 520.081672][T10991] netlink: 'syz.0.1689': attribute type 8 has an invalid length. [ 520.139460][T10994] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1691'. [ 526.331209][ T5346] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 527.547799][ T5346] usb 5-1: Using ep0 maxpacket: 8 [ 527.585425][ T5346] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 527.625200][ T5346] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 527.668052][ T5346] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 527.717241][ T5346] usb 5-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 527.741081][ T5346] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.764529][ T5346] usb 5-1: config 0 descriptor?? [ 528.323901][ T5346] creative-sb0540 0003:041E:3100.0020: unknown main item tag 0x0 [ 528.369743][ T5346] creative-sb0540 0003:041E:3100.0020: unknown main item tag 0x0 [ 528.411407][ T5346] creative-sb0540 0003:041E:3100.0020: item fetching failed at offset 4/5 [ 528.456414][ T5346] creative-sb0540 0003:041E:3100.0020: parse failed [ 528.491568][ T5346] creative-sb0540 0003:041E:3100.0020: probe with driver creative-sb0540 failed with error -22 [ 528.552470][ T5346] usb 5-1: USB disconnect, device number 32 [ 530.773245][ T5346] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 531.005079][ T5346] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 531.047427][ T5346] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 531.084042][ T5346] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 531.111995][ T5346] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 531.132308][ T5346] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.170061][ T5346] usb 4-1: config 0 descriptor?? [ 531.338300][T11078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 531.361609][ T5272] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 531.412005][T11078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 531.581880][ T5272] usb 5-1: Using ep0 maxpacket: 32 [ 531.618009][ T5272] usb 5-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 124, changing to 10 [ 531.664429][ T5346] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 531.672011][ T5272] usb 5-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 64 [ 531.702947][ T5346] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 531.711687][ T5272] usb 5-1: config 1 interface 0 altsetting 8 bulk endpoint 0x3 has invalid maxpacket 1024 [ 531.744693][ T5346] plantronics 0003:047F:FFFF.0021: No inputs registered, leaving [ 531.763002][ T5272] usb 5-1: config 1 interface 0 has no altsetting 0 [ 531.804224][ T5346] plantronics 0003:047F:FFFF.0021: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 531.835719][ T5272] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 531.872796][ T5272] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.901445][ T5272] usb 5-1: Product: ࠠ [ 531.941329][ T5272] usb 5-1: Manufacturer: nj獥藲녉嫛݉乜ࢤ䏉퇪弍푘薍 [ 531.981215][ T5272] usb 5-1: SerialNumber: ဇ [ 532.001376][ T5269] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 532.041773][T11075] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 532.066780][ T5346] usb 4-1: USB disconnect, device number 51 [ 532.090353][T11075] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 532.261434][ T5269] usb 1-1: Using ep0 maxpacket: 8 [ 532.280115][ T5269] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 532.301386][ T5269] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 532.349423][ T5269] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 532.398078][ T5269] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 532.442887][ T5269] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 532.469448][ T5272] usb 5-1: bad CDC descriptors [ 532.508704][ T5269] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 532.534330][ T5272] usb 5-1: USB disconnect, device number 33 [ 532.564855][ T5269] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.864633][ T5269] usb 1-1: usb_control_msg returned -32 [ 532.905427][ T5269] usbtmc 1-1:16.0: can't read capabilities [ 534.139869][T11095] team0: Port device macvlan2 added [ 535.264381][ T5346] usb 1-1: USB disconnect, device number 48 [ 536.190559][T11131] Cannot find add_set index 0 as target [ 536.534787][ T5274] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 542.785267][ T5274] usb 4-1: string descriptor 0 read error: -32 [ 542.793127][ T5274] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.bb [ 542.804801][ T5274] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.817625][ T5274] usb 4-1: config 0 descriptor?? [ 543.011606][ T5274] usb 4-1: can't set config #0, error -71 [ 543.040232][ T5274] usb 4-1: USB disconnect, device number 52 [ 543.641351][ T5274] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 543.851138][ T5274] usb 4-1: Using ep0 maxpacket: 16 [ 543.911146][ T5274] usb 4-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=f8.a6 [ 543.920340][ T5274] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.985272][ T5274] usb 4-1: Product: syz [ 543.999075][ T5274] usb 4-1: Manufacturer: syz [ 544.031764][ T5274] usb 4-1: SerialNumber: syz [ 544.073397][ T5274] usb 4-1: config 0 descriptor?? [ 545.384991][ T9399] Bluetooth: hci2: command 0x0406 tx timeout [ 546.246442][ T5464] Bluetooth: hci7: Frame reassembly failed (-84) [ 547.300591][ T29] audit: type=1326 audit(1722399958.813:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11178 comm="syz.0.1756" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff5d89773b9 code=0x0 [ 547.450961][ T5341] usb 4-1: USB disconnect, device number 53 [ 547.460734][T11181] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1756'. [ 548.321402][ T5234] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 549.158327][T11202] syz.3.1760 (11202): drop_caches: 2 [ 549.631613][ T5271] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 549.901717][ T5271] usb 4-1: Using ep0 maxpacket: 8 [ 549.924177][ T5271] usb 4-1: config 1 has an invalid interface number: 5 but max is 2 [ 549.975697][ T5271] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 550.041084][ T5271] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 550.091060][ T5271] usb 4-1: config 1 has no interface number 1 [ 550.140136][ T5271] usb 4-1: too many endpoints for config 1 interface 5 altsetting 1: 66, using maximum allowed: 30 [ 550.151876][T11192] Bluetooth: hci6: command 0x0406 tx timeout [ 550.236816][ T5271] usb 4-1: config 1 interface 5 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 66 [ 550.339682][ T5271] usb 4-1: config 1 interface 5 has no altsetting 0 [ 550.384566][ T5271] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 550.441199][ T5271] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.507153][ T5271] usb 4-1: Product: syz [ 550.533274][ T5271] usb 4-1: Manufacturer: syz [ 550.558904][ T5271] usb 4-1: SerialNumber: syz [ 553.113048][ T5271] usb 4-1: 0:2 : does not exist [ 553.231851][ T5271] usb 4-1: USB disconnect, device number 54 [ 553.649220][ T29] audit: type=1326 audit(1722399965.163:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11229 comm="syz.0.1773" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff5d89773b9 code=0x0 [ 553.702516][T11231] veth0_to_bridge: entered promiscuous mode [ 553.722207][T11231] macsec1: entered promiscuous mode [ 553.727925][T11231] macsec1: entered allmulticast mode [ 553.741393][T11231] veth0_to_bridge: entered allmulticast mode [ 553.815521][T10845] udevd[10845]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 554.048253][T11231] veth0_to_bridge: left allmulticast mode [ 554.089716][T11231] veth0_to_bridge: left promiscuous mode [ 556.333403][T11235] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1773'. [ 556.401193][ T5272] IPVS: starting estimator thread 0... [ 556.561274][T11260] IPVS: using max 25 ests per chain, 60000 per kthread [ 556.642768][T11265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 556.709641][T11265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 556.929041][T11270] netlink: 'syz.2.1783': attribute type 29 has an invalid length. [ 556.975596][T11270] netlink: 'syz.2.1783': attribute type 29 has an invalid length. [ 557.891381][ T5274] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 557.921329][ T5271] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 558.103381][ T5274] usb 4-1: Using ep0 maxpacket: 8 [ 558.117204][ T5274] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 558.139440][ T5271] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 558.152910][ T5274] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 558.191187][ T5271] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x56, changing to 0x6 [ 558.213393][ T5274] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 558.247397][ T5271] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 163, changing to 7 [ 558.273473][ T5274] usb 4-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 558.301253][ T5271] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 9176, setting to 1024 [ 558.322844][ T5274] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.343145][ T5271] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 558.376366][ T5274] usb 4-1: config 0 descriptor?? [ 558.391215][ T5271] usb 5-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 558.446961][ T5271] usb 5-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 558.489435][ T5271] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.506825][ T5271] usb 5-1: Product: syz [ 558.515963][ T5271] usb 5-1: Manufacturer: syz [ 558.526345][ T5271] usb 5-1: SerialNumber: syz [ 558.549054][ T5271] usb 5-1: config 0 descriptor?? [ 558.590235][ T5271] usb 5-1: ucan: probing device on interface #0 [ 558.610379][ T5271] usb 5-1: ucan: invalid endpoint configuration [ 558.640598][ T5271] usb 5-1: ucan: probe failed; try to update the device firmware [ 558.866378][ T5274] hid-picolcd 0003:04D8:C002.0022: item fetching failed at offset 5/7 [ 558.896321][ T5274] hid-picolcd 0003:04D8:C002.0022: device report parse failed [ 558.923339][ T5274] hid-picolcd 0003:04D8:C002.0022: probe with driver hid-picolcd failed with error -22 [ 558.975942][ T5274] usb 5-1: USB disconnect, device number 34 [ 559.164895][ T5271] usb 4-1: USB disconnect, device number 55 [ 559.722036][ T5271] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 559.953217][ T5271] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 559.981693][ T5271] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 560.025104][ T5271] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 560.065916][ T5271] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 560.103274][ T5271] usb 3-1: SerialNumber: syz [ 560.232939][T11310] netlink: 'syz.0.1798': attribute type 4 has an invalid length. [ 560.241283][ T4669] udevd[4669]: worker [10845] terminated by signal 33 (Unknown signal 33) [ 560.249933][ T4669] udevd[4669]: worker [10845] failed while handling '/devices/virtual/block/loop0' [ 560.310612][T11313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.376734][T11313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.397807][ T5271] usb 3-1: 0:2 : does not exist [ 560.463157][ T5271] usb 3-1: USB disconnect, device number 38 [ 560.579036][T11310] netlink: 'syz.0.1798': attribute type 17 has an invalid length. [ 560.778658][T10723] udevd[10723]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 561.911435][T11338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 561.925619][T11338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 562.904066][T11348] net_ratelimit: 394 callbacks suppressed [ 562.904200][T11348] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 563.021268][ T5341] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 563.243759][ T5341] usb 4-1: Using ep0 maxpacket: 16 [ 563.252077][ T5341] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 563.263320][ T5341] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 563.277327][ T5341] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 563.294075][ T5341] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.318835][ T5341] usb 4-1: config 0 descriptor?? [ 563.373742][ T9399] Bluetooth: hci6: unexpected event 0x08 length: 78 > 4 [ 563.415591][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.432039][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.649423][ T9399] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 565.721241][ T5341] usbhid 4-1:0.0: can't add hid device: -71 [ 565.784938][ T5341] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 565.859477][ T5341] usb 4-1: USB disconnect, device number 56 [ 567.580087][ T9399] Bluetooth: hci1: command tx timeout [ 568.685925][ T29] audit: type=1326 audit(1722399980.203:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11393 comm="syz.2.1822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fca3773b9 code=0x7ffc0000 [ 568.802039][ T29] audit: type=1326 audit(1722399980.233:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11393 comm="syz.2.1822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fca3773b9 code=0x7ffc0000 [ 568.854745][T11401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 568.872614][ T29] audit: type=1326 audit(1722399980.233:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11393 comm="syz.2.1822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f7fca3773b9 code=0x7ffc0000 [ 568.911768][T11401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 568.997165][ T29] audit: type=1326 audit(1722399980.233:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11393 comm="syz.2.1822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fca3773b9 code=0x7ffc0000 [ 569.121939][ T29] audit: type=1326 audit(1722399980.233:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11393 comm="syz.2.1822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fca3773b9 code=0x7ffc0000 [ 569.198422][ T29] audit: type=1326 audit(1722399980.233:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11393 comm="syz.2.1822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f7fca3773b9 code=0x7ffc0000 [ 569.292263][ T29] audit: type=1326 audit(1722399980.233:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11393 comm="syz.2.1822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fca3773b9 code=0x7ffc0000 [ 569.373779][ T29] audit: type=1326 audit(1722399980.243:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11393 comm="syz.2.1822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f7fca3773b9 code=0x7ffc0000 [ 569.453702][ T29] audit: type=1326 audit(1722399980.243:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11393 comm="syz.2.1822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fca3773b9 code=0x7ffc0000 [ 569.501162][ T942] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 569.563455][ T29] audit: type=1326 audit(1722399980.243:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11393 comm="syz.2.1822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fca3773b9 code=0x7ffc0000 [ 569.713318][ T942] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 569.746247][ T942] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 569.792204][ T942] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 569.818957][ T942] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 569.849826][ T942] usb 5-1: SerialNumber: syz [ 570.197846][ T942] usb 5-1: 0:2 : does not exist [ 570.260328][ T942] usb 5-1: USB disconnect, device number 35 [ 570.608434][T10723] udevd[10723]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 574.070137][T11443] ip_vti0: Master is either lo or non-ether device [ 574.181417][ T25] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 574.196382][ T9399] Bluetooth: hci6: ACL packet for unknown connection handle 200 [ 574.431169][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 574.469925][ T25] usb 3-1: config 0 has an invalid interface number: 104 but max is 2 [ 574.518273][ T25] usb 3-1: config 0 has an invalid interface number: 104 but max is 2 [ 574.759370][ T25] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 574.780550][ T25] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 575.406678][ T25] usb 3-1: config 0 has no interface number 0 [ 575.414118][ T25] usb 3-1: config 0 interface 104 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 575.427289][ T25] usb 3-1: config 0 interface 104 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 575.609412][ T25] usb 3-1: config 0 interface 104 has no altsetting 1 [ 575.735298][ T25] usb 3-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 7.36 [ 576.792238][ T25] usb 3-1: New USB device strings: Mfr=1, Product=255, SerialNumber=255 [ 576.867414][ T25] usb 3-1: Product: syz [ 577.058284][ T25] usb 3-1: Manufacturer: syz [ 577.063629][ T25] usb 3-1: SerialNumber: syz [ 577.071649][ T25] usb 3-1: config 0 descriptor?? [ 577.079597][ T25] usb 3-1: can't set config #0, error -71 [ 577.088697][ T25] usb 3-1: USB disconnect, device number 39 [ 583.296892][T11505] vlan2: entered promiscuous mode [ 583.312937][T11505] dummy0: entered promiscuous mode [ 583.432785][T11505] dummy0: left promiscuous mode [ 585.095330][ T9399] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 585.104588][ T9399] Bluetooth: hci5: Injecting HCI hardware error event [ 585.114638][T11192] Bluetooth: hci5: hardware error 0x00 [ 585.234443][T11514] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1856'. [ 585.434231][T11522] netlink: 'syz.2.1859': attribute type 1 has an invalid length. [ 587.421187][T11192] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 588.383488][ T7100] bridge0: port 3(syz_tun) entered disabled state [ 588.733507][ T7100] syz_tun (unregistering): left allmulticast mode [ 588.817365][ T7100] syz_tun (unregistering): left promiscuous mode [ 588.897532][ T7100] bridge0: port 3(syz_tun) entered disabled state [ 589.405325][ T5234] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 589.419784][ T5234] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 589.441553][ T5234] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 589.463599][ T5234] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 589.473448][ T5234] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 589.492723][ T5234] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 590.591729][ T5272] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 590.832343][ T5272] usb 5-1: Using ep0 maxpacket: 32 [ 591.164216][ T9399] Bluetooth: hci1: command 0x0406 tx timeout [ 591.366380][ T5272] usb 5-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 591.401522][ T5272] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.428536][ T5464] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.449130][ T5272] usb 5-1: config 0 descriptor?? [ 591.521866][ T5272] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 591.592864][ T5272] input: xirlink-cit as /devices/platform/dummy_hcd.4/usb5/5-1/input/input29 [ 591.661213][T11192] Bluetooth: hci3: command tx timeout [ 592.013379][ T9399] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 592.032229][ T9399] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 592.042167][ T9399] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 592.052908][ T9399] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 592.066038][ T9399] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 592.079336][ T9399] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 592.963017][T11562] veth0_to_bridge: entered promiscuous mode [ 592.969079][T11562] macsec1: entered promiscuous mode [ 593.061322][T11562] macsec1: entered allmulticast mode [ 593.131084][T11562] veth0_to_bridge: entered allmulticast mode [ 593.332066][T11562] veth0_to_bridge: left allmulticast mode [ 593.338143][T11562] veth0_to_bridge: left promiscuous mode [ 593.856384][ T9399] Bluetooth: hci3: command tx timeout [ 594.133694][ T9399] Bluetooth: hci5: command tx timeout [ 594.254987][ T5464] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.418063][T11558] vlan2: entered promiscuous mode [ 594.784316][ T25] usb 5-1: USB disconnect, device number 36 [ 594.866375][ T5464] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.727004][T11539] chnl_net:caif_netlink_parms(): no params data found [ 595.941398][ T9399] Bluetooth: hci3: command tx timeout [ 596.211193][ T9399] Bluetooth: hci5: command tx timeout [ 596.219862][ T5464] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.861576][ T9399] Bluetooth: hci1: unexpected event 0x08 length: 78 > 4 [ 597.421131][ T5274] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 597.538095][T11539] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.616883][T11539] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.632481][T11539] bridge_slave_0: entered allmulticast mode [ 597.650776][T11539] bridge_slave_0: entered promiscuous mode [ 597.682195][T11539] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.706494][T11539] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.739056][ T5274] usb 5-1: config 0 has no interfaces? [ 597.772275][T11539] bridge_slave_1: entered allmulticast mode [ 597.781267][ T5274] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 597.816070][T11539] bridge_slave_1: entered promiscuous mode [ 597.823175][ T5274] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.902586][ T5274] usb 5-1: config 0 descriptor?? [ 597.971889][ T9399] Bluetooth: hci3: command tx timeout [ 598.076607][T11539] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 598.115847][T11539] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 598.166368][ T5464] bridge_slave_1: left allmulticast mode [ 598.176916][ T5464] bridge_slave_1: left promiscuous mode [ 598.206083][ T5464] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.274159][ T5464] bridge_slave_0: left allmulticast mode [ 598.291208][ T9399] Bluetooth: hci5: command tx timeout [ 598.351221][ T5464] bridge_slave_0: left promiscuous mode [ 598.357237][ T5464] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.496194][ T5464] bridge_slave_1: left allmulticast mode [ 598.546133][ T5464] bridge_slave_1: left promiscuous mode [ 598.582885][ T5464] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.657504][ T5464] bridge_slave_0: left allmulticast mode [ 598.690684][ T5464] bridge_slave_0: left promiscuous mode [ 598.731155][ T5464] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.033719][ T942] usb 5-1: USB disconnect, device number 37 [ 599.596548][T11618] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1882'. [ 600.371456][ T9399] Bluetooth: hci5: command tx timeout [ 601.391310][ T5271] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 601.689992][ T5271] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 601.753707][ T5271] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 601.824555][ T5271] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 601.851898][ T5271] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.901368][ T30] INFO: task syz.2.1435:10187 blocked for more than 143 seconds. [ 601.930055][ T30] Not tainted 6.11.0-rc1-syzkaller-00044-g22f546873149 #0 [ 601.939397][ T5271] usb 5-1: config 0 descriptor?? [ 601.972340][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 602.045057][ T30] task:syz.2.1435 state:D stack:26928 pid:10187 tgid:10172 ppid:5745 flags:0x00000004 [ 602.130694][ T30] Call Trace: [ 602.158576][ T30] [ 602.224170][ T30] __schedule+0x17ae/0x4a10 [ 602.310329][ T30] ? __pfx___schedule+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 602.350945][ T30] ? __pfx_lock_release+0x10/0x10 [ 602.356604][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 602.491173][ T30] ? schedule+0x90/0x320 [ 602.495556][ T30] schedule+0x14b/0x320 [ 602.499783][ T30] schedule_preempt_disabled+0x13/0x30 [ 602.576913][ T30] __ww_mutex_lock+0xec2/0x2790 [ 602.648610][ T30] ? __ww_mutex_lock+0xb08/0x2790 [ 602.671424][ T30] ? drm_modeset_lock+0x6f/0x90 [ 602.676418][ T30] ? __pfx___ww_mutex_lock+0x10/0x10 [ 602.771322][ T30] ? __drm_mode_object_find+0x448/0x5d0 [ 602.777029][ T30] ? __pfx___drm_mode_object_find+0x10/0x10 [ 602.813047][ T30] ww_mutex_lock+0x40/0x1f0 [ 602.817975][ T30] ? drm_modeset_lock+0x65/0x90 [ 602.841577][ T30] drm_modeset_lock+0x6f/0x90 [ 602.846405][ T30] drm_mode_getcrtc+0x152/0x770 [ 602.882446][ T30] drm_ioctl_kernel+0x33a/0x440 [ 602.887433][ T30] ? __pfx_drm_mode_getcrtc+0x10/0x10 [ 602.931390][ T30] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 602.936858][ T30] ? __might_fault+0xc6/0x120 [ 602.951123][ T30] drm_ioctl+0x611/0xad0 [ 602.955459][ T30] ? __pfx_drm_mode_getcrtc+0x10/0x10 [ 602.960901][ T30] ? __pfx_drm_ioctl+0x10/0x10 [ 602.981277][ T30] ? bpf_lsm_file_ioctl+0x9/0x10 [ 602.986299][ T30] ? security_file_ioctl+0x87/0xb0 [ 603.005855][ T30] ? __pfx_drm_ioctl+0x10/0x10 [ 603.010719][ T30] __se_sys_ioctl+0xfc/0x170 [ 603.031371][ T30] do_syscall_64+0xf3/0x230 [ 603.035978][ T30] ? clear_bhb_loop+0x35/0x90 [ 603.040720][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.071066][ T30] RIP: 0033:0x7fb9ef9773b9 [ 603.075572][ T30] RSP: 002b:00007fb9ef3bd048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 603.092579][ T30] RAX: ffffffffffffffda RBX: 00007fb9efb06130 RCX: 00007fb9ef9773b9 [ 603.100629][ T30] RDX: 00000000200003c0 RSI: 00000000c06864a1 RDI: 000000000000000d [ 603.133485][ T30] RBP: 00007fb9ef9e48e6 R08: 0000000000000000 R09: 0000000000000000 [ 603.151391][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 603.159521][ T30] R13: 000000000000006e R14: 00007fb9efb06130 R15: 00007ffe70ab9978 [ 603.191286][ T30] [ 603.194446][ T30] [ 603.194446][ T30] Showing all locks held in the system: [ 603.211720][ T30] 1 lock held by khungtaskd/30: [ 603.222976][ T30] #0: ffffffff8e7377a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 603.251255][ T30] 1 lock held by kcompactd0/33: [ 603.256208][ T30] 3 locks held by kworker/u8:10/2597: [ 603.281090][ T30] 2 locks held by dhcpcd/4883: [ 603.285946][ T30] #0: ffff888058b57678 (nlk_cb_mutex-ROUTE){+.+.}-{3:3}, at: netlink_dump+0xcb/0xd80 [ 603.321979][ T30] #1: ffffffff8fa6d648 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_dumpit+0x99/0x200 [ 603.330920][ T30] 2 locks held by getty/4976: [ 603.353833][ T30] #0: ffff88802b0060a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 603.371612][ T30] #1: ffffc900031232f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 603.401057][ T30] 3 locks held by kworker/0:3/5269: [ 603.406425][ T30] #0: ffff888015480948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 603.453145][ T30] #1: ffffc90003f27d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 603.492188][ T30] #2: ffffffff8fa6d648 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 603.511264][ T30] 5 locks held by kworker/0:4/5271: [ 603.516586][ T30] #0: ffff888018aabd48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 603.551215][ T30] #1: ffffc90003f47d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 603.581161][ T30] #2: ffff888023f69190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 603.590316][ T30] #3: ffff88807e6d8190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 603.621469][ T30] #4: ffff88801baa5160 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 603.658704][ T30] 3 locks held by kworker/0:5/5274: [ 603.671403][ T30] #0: ffff888015480948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 603.721124][ T30] #1: ffffc90003f77d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 603.741408][ T30] #2: ffffffff8fa6d648 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 603.769054][ T30] 5 locks held by kworker/u8:20/5464: [ 603.775133][ T30] #0: ffff8880162e3148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 603.800482][ T30] #1: ffffc900046cfd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 603.812967][ T30] #2: ffffffff8fa60ad0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 603.836329][ T30] #3: ffffffff8fa6d648 (rtnl_mutex){+.+.}-{3:3}, at: cleanup_net+0x6af/0xcc0 [ 603.861615][ T30] #4: ffffffff8e73cb78 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 603.881239][ T30] 6 locks held by syz.4.1328/9738: [ 603.886473][ T30] 1 lock held by syz.2.1435/10187: [ 603.921312][ T30] #0: ffff8880205d00b0 (crtc_ww_class_mutex){+.+.}-{3:3}, at: drm_modeset_lock+0x6f/0x90 [ 603.941051][ T30] 1 lock held by syz.1.1569/10609: [ 603.951343][ T30] #0: ffff8880205d00b0 (crtc_ww_class_mutex){+.+.}-{3:3}, at: drm_modeset_lock+0x6f/0x90 [ 603.971403][ T30] 4 locks held by udevd/10723: [ 603.976297][ T30] #0: ffff888028d928b8 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xb7/0xd60 [ 604.001154][ T30] #1: ffff888172607888 (&of->mutex#2){+.+.}-{3:3}, at: kernfs_seq_start+0x53/0x3b0 [ 604.010843][ T30] #2: ffff8881718e04b8 (kn->active#5){++++}-{0:0}, at: kernfs_seq_start+0x72/0x3b0 [ 604.030881][ T30] #3: ffff88807e6d8190 (&dev->mutex){....}-{3:3}, at: uevent_show+0x17d/0x340 [ 604.057834][ T30] 1 lock held by syz.3.1849/11483: [ 604.077545][ T30] #0: ffffffff8fa6d648 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 604.091270][ T30] 1 lock held by syz-executor/11539: [ 604.096643][ T30] #0: ffffffff8fa6d648 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 604.120576][ T30] 1 lock held by syz-executor/11568: [ 604.130498][ T30] #0: ffffffff8fa6d648 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_newlink+0xab7/0x20a0 [ 604.160466][ T30] 2 locks held by syz.2.1882/11618: [ 604.166048][ T30] #0: ffffffff8fad2d50 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 604.181067][ T30] #1: ffffffff8fa6d648 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x5f/0x8b0 [ 604.190486][ T30] 1 lock held by syz.4.1884/11625: [ 604.210398][ T30] #0: ffffffff8e73cb78 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 604.231443][ T30] 2 locks held by syz.0.1885/11630: [ 604.236753][ T30] #0: ffffffff8fad2d50 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 604.261577][ T30] #1: ffffffff8fa6d648 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x5f/0x8b0 [ 604.286079][ T30] [ 604.321534][ T30] ============================================= [ 604.321534][ T30] [ 604.330163][ T30] NMI backtrace for cpu 0 [ 604.334545][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc1-syzkaller-00044-g22f546873149 #0 [ 604.345313][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 604.355417][ T30] Call Trace: [ 604.358727][ T30] [ 604.361723][ T30] dump_stack_lvl+0x241/0x360 [ 604.366457][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 604.371794][ T30] ? __pfx__printk+0x10/0x10 [ 604.376440][ T30] ? vprintk_emit+0x631/0x770 [ 604.381177][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 604.386253][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 604.391252][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 604.396761][ T30] ? _printk+0xd5/0x120 [ 604.400962][ T30] ? __pfx__printk+0x10/0x10 [ 604.405589][ T30] ? __wake_up_klogd+0xcc/0x110 [ 604.410474][ T30] ? __pfx__printk+0x10/0x10 [ 604.415109][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 604.420612][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 604.426642][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 604.432685][ T30] watchdog+0xfee/0x1030 [ 604.436982][ T30] ? watchdog+0x1ea/0x1030 [ 604.441444][ T30] ? __pfx_watchdog+0x10/0x10 [ 604.446254][ T30] kthread+0x2f0/0x390 [ 604.450368][ T30] ? __pfx_watchdog+0x10/0x10 [ 604.455138][ T30] ? __pfx_kthread+0x10/0x10 [ 604.459770][ T30] ret_from_fork+0x4b/0x80 [ 604.464232][ T30] ? __pfx_kthread+0x10/0x10 [ 604.468851][ T30] ret_from_fork_asm+0x1a/0x30 [ 604.473677][ T30] [ 604.482614][ T30] Sending NMI from CPU 0 to CPUs 1: [ 604.491087][ C1] NMI backtrace for cpu 1 [ 604.491103][ C1] CPU: 1 UID: 0 PID: 5471 Comm: kworker/u8:22 Not tainted 6.11.0-rc1-syzkaller-00044-g22f546873149 #0 [ 604.491125][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 604.491136][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 604.491162][ C1] RIP: 0010:lock_release+0xd7/0xa30 [ 604.491193][ C1] Code: a9 87 00 48 0f a3 1d 40 a3 86 0e 73 16 e8 a1 ce 09 00 84 c0 75 0d 80 3d bb 79 70 0e 00 0f 84 fc 05 00 00 48 c7 c0 3c a5 f6 8f <48> c1 e8 03 42 0f b6 04 38 84 c0 0f 85 1f 06 00 00 83 3d 5d d3 86 [ 604.491208][ C1] RSP: 0018:ffffc9000470f440 EFLAGS: 00000202 [ 604.491223][ C1] RAX: ffffffff8ff6a53c RBX: 0000000000000001 RCX: ffffffff816fd1a0 [ 604.491236][ C1] RDX: 0000000000000000 RSI: ffffffff8c3f8620 RDI: ffffffff8c3f85e0 [ 604.491249][ C1] RBP: ffffc9000470f570 R08: ffffffff8ff674ef R09: 1ffffffff1fece9d [ 604.491262][ C1] R10: dffffc0000000000 R11: fffffbfff1fece9e R12: 1ffff920008e1e94 [ 604.491275][ C1] R13: ffffffff84af32c0 R14: dffffc0000000000 R15: dffffc0000000000 [ 604.491289][ C1] FS: 0000000000000000(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 604.491304][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 604.491319][ C1] CR2: 00007ff5d971bfa8 CR3: 000000007e0d2000 CR4: 00000000003506f0 [ 604.491335][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 604.491346][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 604.491357][ C1] Call Trace: [ 604.491363][ C1] [ 604.491372][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 604.491401][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 604.491426][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 604.491456][ C1] ? nmi_handle+0x2a/0x5a0 [ 604.491484][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 604.491506][ C1] ? nmi_handle+0x14f/0x5a0 [ 604.491523][ C1] ? nmi_handle+0x2a/0x5a0 [ 604.491541][ C1] ? lock_release+0xd7/0xa30 [ 604.491564][ C1] ? default_do_nmi+0x63/0x160 [ 604.491584][ C1] ? exc_nmi+0x123/0x1f0 [ 604.491603][ C1] ? end_repeat_nmi+0xf/0x53 [ 604.491629][ C1] ? debug_objects_fill_pool+0x80/0x9b0 [ 604.491655][ C1] ? lock_release+0xb0/0xa30 [ 604.491679][ C1] ? lock_release+0xd7/0xa30 [ 604.491704][ C1] ? lock_release+0xd7/0xa30 [ 604.491737][ C1] ? lock_release+0xd7/0xa30 [ 604.491762][ C1] [ 604.491768][ C1] [ 604.491776][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 604.491803][ C1] ? __pfx_lock_release+0x10/0x10 [ 604.491825][ C1] ? validate_chain+0x11e/0x5900 [ 604.491844][ C1] ? unwind_next_frame+0x1b90/0x2a00 [ 604.491872][ C1] ? __read_once_word_nocheck+0x9/0x20 [ 604.491903][ C1] ? debug_objects_fill_pool+0x80/0x9b0 [ 604.491920][ C1] ? debug_objects_fill_pool+0x80/0x9b0 [ 604.491939][ C1] debug_objects_fill_pool+0xc0/0x9b0 [ 604.491960][ C1] ? __pfx_validate_chain+0x10/0x10 [ 604.491980][ C1] ? ret_from_fork_asm+0x19/0x30 [ 604.492010][ C1] ? __pfx_debug_objects_fill_pool+0x10/0x10 [ 604.492027][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 604.492051][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 604.492075][ C1] ? __kernel_text_address+0xd/0x40 [ 604.492094][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 604.492119][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 604.492145][ C1] ? arch_stack_walk+0x17b/0x1b0 [ 604.492171][ C1] debug_object_assert_init+0x12e/0x440 [ 604.492189][ C1] ? __lock_acquire+0x137a/0x2040 [ 604.492215][ C1] ? __pfx_debug_object_assert_init+0x10/0x10 [ 604.492238][ C1] ? mark_lock+0x9a/0x350 [ 604.492271][ C1] __mod_timer+0x10d/0xeb0 [ 604.492293][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 604.492321][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 604.492345][ C1] ? __pfx___mod_timer+0x10/0x10 [ 604.492365][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 604.492388][ C1] ? ieee80211_ibss_work+0x303/0x14c0 [ 604.492410][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 604.492440][ C1] ieee80211_ibss_work+0x4f0/0x14c0 [ 604.492460][ C1] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 604.492480][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 604.492501][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 604.492521][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 604.492544][ C1] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 604.492562][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 604.492586][ C1] ? skb_dequeue+0x113/0x150 [ 604.492608][ C1] ? ieee80211_iface_work+0xc06/0xf20 [ 604.492631][ C1] ? ieee80211_iface_work+0xe6b/0xf20 [ 604.492659][ C1] cfg80211_wiphy_work+0x2db/0x490 [ 604.492683][ C1] ? process_scheduled_works+0x945/0x1830 [ 604.492705][ C1] process_scheduled_works+0xa2c/0x1830 [ 604.492751][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 604.492780][ C1] ? assign_work+0x364/0x3d0 [ 604.492808][ C1] worker_thread+0x86d/0xd40 [ 604.492842][ C1] ? __kthread_parkme+0x169/0x1d0 [ 604.492869][ C1] ? __pfx_worker_thread+0x10/0x10 [ 604.492893][ C1] kthread+0x2f0/0x390 [ 604.492909][ C1] ? __pfx_worker_thread+0x10/0x10 [ 604.492933][ C1] ? __pfx_kthread+0x10/0x10 [ 604.492951][ C1] ret_from_fork+0x4b/0x80 [ 604.492976][ C1] ? __pfx_kthread+0x10/0x10 [ 604.492991][ C1] ret_from_fork_asm+0x1a/0x30 [ 604.493026][ C1] [ 604.509643][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 604.509669][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc1-syzkaller-00044-g22f546873149 #0 [ 604.509697][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 604.509713][ T30] Call Trace: [ 604.509722][ T30] [ 604.509738][ T30] dump_stack_lvl+0x241/0x360 [ 604.509781][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 604.509813][ T30] ? __pfx__printk+0x10/0x10 [ 604.509838][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 604.509881][ T30] ? vscnprintf+0x5d/0x90 [ 604.509918][ T30] panic+0x349/0x860 [ 604.509949][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 604.509994][ T30] ? __pfx_panic+0x10/0x10 [ 604.510019][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 604.510048][ T30] ? __irq_work_queue_local+0x137/0x410 [ 604.510081][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 604.510107][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 604.510142][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 604.510181][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 604.510221][ T30] watchdog+0x102d/0x1030 [ 604.510257][ T30] ? watchdog+0x1ea/0x1030 [ 604.510296][ T30] ? __pfx_watchdog+0x10/0x10 [ 604.510328][ T30] kthread+0x2f0/0x390 [ 604.510351][ T30] ? __pfx_watchdog+0x10/0x10 [ 604.510382][ T30] ? __pfx_kthread+0x10/0x10 [ 604.510405][ T30] ret_from_fork+0x4b/0x80 [ 604.510437][ T30] ? __pfx_kthread+0x10/0x10 [ 604.510458][ T30] ret_from_fork_asm+0x1a/0x30 [ 604.510508][ T30] [ 604.516724][ T30] Kernel Offset: disabled [ 605.161396][ T30] Rebooting in 86400 seconds..