last executing test programs: 8m49.558803819s ago: executing program 0 (id=1941): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlockall(0x2) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000100)='./file0\x00') symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r1, 0xb) shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(r1, 0xc) r2 = socket(0x40000000015, 0x5, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x41000004, &(0x7f0000000040)) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 8m45.991615153s ago: executing program 0 (id=1949): syz_emit_ethernet(0x76, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/if_inet6\x00') pread64(r3, &(0x7f0000000100)=""/50, 0x32, 0x20000000000040) r4 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r4, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r5}, 0x94) r7 = socket$netlink(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$XFS_IOC_GETBMAPX(r6, 0xc0205838, 0x0) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r8, 0x1, 0x100, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) 8m43.673540567s ago: executing program 0 (id=1954): ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) request_key(0x0, &(0x7f0000000380)={'syz', 0x1}, &(0x7f0000000200)='q\xa9', 0x0) close(0x3) syz_open_dev$tty1(0xc, 0x4, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x4, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 8m42.937557044s ago: executing program 0 (id=1958): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0x8044000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0xffffffff, 0x4, 0x2}}) socket$inet6(0xa, 0x800000000000002, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000002400)=@raw={'raw\x00', 0x3c1, 0x3, 0x488, 0x3b8, 0x12, 0x600, 0x3b8, 0x202, 0x3b8, 0x2e8, 0x2e8, 0x3b8, 0x2c0, 0x4, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b8, 0x4000000, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b500", 0x8}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xd8, 0x200, 0x0, {}, [@common=@ah={{0x30}, {[0x4d3, 0x4d3], 0xc9, 0x11, 0x3}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7ff, 'system_u:object_r:crond_initrc_exec_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) socket$unix(0x1, 0x5, 0x0) socket(0x10, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40040085}, 0x8010) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB], 0x1c}}, 0x4000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x80) 8m42.2879575s ago: executing program 0 (id=1961): getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @multicast2, @dev}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r3, &(0x7f00000002c0)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x6d, &(0x7f0000002280)=""/4090, 0x0) add_key$keyring(0x0, &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}]}]}, 0x54}}, 0x0) capset(&(0x7f00000006c0)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff, 0x400000}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000800)={0x53, 0xfffffffffffffff8, 0x6, 0x0, @scatter={0x0, 0x23000, 0x0}, &(0x7f0000000140)="b65292d1cb70", 0x0, 0x7e4, 0x10011, 0x0, 0x0}) 8m39.629445232s ago: executing program 0 (id=1964): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x5, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r9, 0x0, 0x4890) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff, 0xfffc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x8005, 0x5, 0xfffffdff, 0x4006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0x9, 0x5, 0x96, 0xfff, 0xc}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 8m23.641593199s ago: executing program 32 (id=1964): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x5, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r9, 0x0, 0x4890) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff, 0xfffc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x8005, 0x5, 0xfffffdff, 0x4006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0x9, 0x5, 0x96, 0xfff, 0xc}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 9.334681761s ago: executing program 5 (id=3159): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB='-\x00'], 0x2d) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) 9.256356853s ago: executing program 5 (id=3160): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="34010000", @ANYRES16=r1, @ANYBLOB="01002abd7000fcdbdf258700000008000300", @ANYRES32=r3, @ANYBLOB="41002a002d1a020001ff0f0000000000000000400014000000000393000000057206030303030303000601010101010171070101ffff02052072060303030303030000000a000600ffffffffffff00000a0006000802110000000000b0002a00845505054008021100000109000000ffffffffffff060000ffffffffffff040000002a0000ffffffffffff040000003c00400802110000000d000000ffffffffffff080040ffffffffffff0e0000000802110000012700055003f0d8d29a65747e781da2bac08827fc598467e99e23ff923fd35c1112f11b61805f709697c811166090be8d25332173520e2623949571949940e6e71ad1f1488683289f3345c0b5bb03a97af101226d2a01000a0006"], 0x134}, 0x1, 0x0, 0x0, 0x8040}, 0x4) 9.144803885s ago: executing program 5 (id=3161): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'comedi_bond\x00', [0x3, 0x204, 0x2, 0xc, 0xfffffffe, 0x5, 0x79, 0x1, 0x1, 0x0, 0x40, 0x1, 0xffb, 0x1, 0x4, 0xfd, 0xfffffffb, 0xd, 0x62, 0x80000000, 0x8, 0x8, 0x4, 0x20201e58, 0xffffffff, 0x2f3a2, 0x3, 0x80000008, 0xa6b9, 0x9, 0xdfffffff]}) 9.034176728s ago: executing program 5 (id=3162): syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b", 0x9d}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d4", 0x7a}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e385", 0x1c}], 0x2, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x12, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x5}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, @jmp={0x5, 0x1, 0x4, 0x0, 0x9, 0xfffffffffffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x3}, 0x94) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 8.585309029s ago: executing program 3 (id=3169): syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/comedi4\x00', 0x200, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000040)={0xc000003, 0x40000082, &(0x7f0000000080), 0x1, 0x20000001}) 8.391685873s ago: executing program 3 (id=3173): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000780)={0xfc78, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0x1}, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b03, 0x0) 8.08908672s ago: executing program 5 (id=3174): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) 8.08877721s ago: executing program 5 (id=3175): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6) 6.218648574s ago: executing program 2 (id=3187): unshare(0x62020600) syz_usb_disconnect(0xffffffffffffffff) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) 5.835649123s ago: executing program 3 (id=3188): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000100)={r3, r0, 0x1ff, 0x4, &(0x7f00000000c0)="0793ce40", 0x80, 0x7, 0x1, 0x5, 0xe7e, 0x6, 0x4, 'syz0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) 5.381908384s ago: executing program 2 (id=3189): prctl$PR_SET_PDEATHSIG(0x35, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) 5.253486867s ago: executing program 2 (id=3190): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000002580)={0x0, 0x0, 0x0, 0x2, 0x1000000, &(0x7f00000006c0)="ce84"}) 5.221452128s ago: executing program 2 (id=3191): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x7}, @HCI_OP_EXIT_PERIODIC_INQ={{0xbf}, 0x5}}}, 0x17) 5.172158069s ago: executing program 2 (id=3192): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x2d, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) 4.494579215s ago: executing program 3 (id=3193): syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES16, @ANYRES16], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x10080}}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000080)=""/150) 4.27361864s ago: executing program 4 (id=3200): connect$inet6(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0xfffd, @loopback}, 0x10, &(0x7f000000c540)=[{&(0x7f0000000280)='\b\x00', 0x2}, {&(0x7f000000b540)="920ca227df65", 0x6}], 0x2, &(0x7f000000b440)=ANY=[@ANYBLOB="1c000000000000000000000007000000860a"], 0x20}, 0x20000890) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0) 4.178539182s ago: executing program 4 (id=3202): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0x4008c001, 0x0) 2.940396071s ago: executing program 2 (id=3205): r0 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r0, 0x110, 0x7, 0x0, 0x4) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0xa8442, 0x0) socket$nl_route(0x10, 0x3, 0x0) ustat(0x801, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000080)=ANY=[], 0x1c) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7ffe}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x884}, 0x40) close(r2) socket(0x10, 0x3, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) timer_create(0x7, &(0x7f0000000080)={0x0, 0x11, 0x2}, &(0x7f0000000000)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0xa2c02, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) writev(r5, &(0x7f0000000540)=[{&(0x7f0000000000)="ad", 0x1}], 0x1) close_range(r5, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$kcm(r4, 0x0, 0x4005) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x4000) 2.635902789s ago: executing program 3 (id=3208): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000400)={0x1}) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, 0x0, &(0x7f0000000180)={0x0, 0x3, 0xb2, @string={0xb2, 0x3, "59535e35a7c271ab9615808bceda3d248c584876ef9a00741819343c5c4a0ebecd0b055379b6ffc15f65135d2c8077435f06ad6232c1145ac4e9325f4f772f906675a7afd1f4d2abd19f5c528896a684fa53cc91c58820f75393d2e57c254d85d59207d98ea4cf039f6bb2169f64779035a9b4ef18d112a1e95444a580110e8b423a84ef1185f1806d5efd889e2db7209a4c23b43dc4cd06d98b2f9d7aab71585d9c02b3996c6984d15c7d9f7fa9bcd4"}}, 0x0, 0x0, 0x0}, 0x0) 2.478646262s ago: executing program 1 (id=3209): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0xa, 0x10}, 0xc) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x8003, 0xbffc, 0xe652, 0x5, 0x134, 0x48, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x6fcd, 0x1, 0xf06, 0x3, 0x95, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$tun(r2, &(0x7f00000004c0)={@val={0x0, 0x6001}, @void, @llc={@llc={0x42, 0xbc, "d6", "b68eac2b7edafdd5d293d4d1e99c4bb4094a788b56f2e0dcb9a36b7401df9644ac10454e4c4a1732a1d4fb3355b458bc3eaae0cf11bd9fb5ee1da2b8d8275d33d0a2877ffd4d1d758044380a28a02874dab1f7c5686ba1a1b9806323b8bc354a69450cd0ee3c844230710c44f05fe1b288196266f87cf69e8eb7106423d621dcd6a608811fc930073d7a09ecdbce293778f54b1b728f9fdfc9babf7404b3e6fd11bc360e28c2b30aae945e23306570fc25391987a7e39bbd0b389eecbdbc17b8852905d213c26581afc6b4059d288678dbe822645c90044042ccef14561216d047dd850abcd882b7dccce7efa67ae75892fd12dc25"}}}, 0xfc) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 1.636429102s ago: executing program 1 (id=3210): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r2, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) 1.532807684s ago: executing program 1 (id=3211): mkdirat(0xffffffffffffff9c, 0x0, 0x0) lsetxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) syz_emit_vhci(&(0x7f0000000680)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0xa, 0xc9, "56e25d", "1321a9", "7d1e22", "afe4e6", 0x9, 0x19, 0x0, 0x9, 0x7f, 0x7, 0xd, 0x800, 0x6}}}}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x2208}, 0x1, 0x0, 0x0, 0x20000884}, 0x8800) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 1.398775808s ago: executing program 1 (id=3212): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='illinois', 0x8) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0xc9100120, 0x0, 0x0) 1.398532778s ago: executing program 4 (id=3213): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000000)=0x4000e, 0x2f) sendto$inet6(r0, 0x0, 0x0, 0x40811, &(0x7f00000001c0)={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x32}, 0x1c) 1.320764579s ago: executing program 4 (id=3214): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001180)={0x34, r1, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x2000c000) 102.823608ms ago: executing program 3 (id=3216): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x2d, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) 102.652058ms ago: executing program 4 (id=3217): socket$netlink(0x10, 0x3, 0xb) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000100001000000000000", @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0], 0x30}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="0100080200000018000066000000", @ANYRES32=r3, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r4, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="0600cd00000000006c003300802009000802110000010802110000005050505050505f00ff"], 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 98.851518ms ago: executing program 1 (id=3226): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/comedi3\x00', 0x280, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0xc000003, 0x0, 0x0, 0x1, 0x2}) 175.72µs ago: executing program 1 (id=3218): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000003300), 0x40002, 0x0) write$rfkill(r1, &(0x7f00000000c0)={0x0, 0x2, 0x3, 0xfe, 0x1}, 0x8) landlock_restrict_self(0xffffffffffffffff, 0xc) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TCFLSH(r0, 0x400455c8, 0x4) 0s ago: executing program 4 (id=3219): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000003100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)={0x28, r0, 0x1, 0x70bd23, 0x25dfdbfa, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000c054}, 0x0) kernel console output (not intermixed with test programs): ack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 839.653210][T13608] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 841.862025][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 841.862228][ T26] audit: type=1326 audit(1784041699.854:1973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13631 comm="syz.1.2550" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68a2390e59 code=0x7ffc0000 [ 842.290726][ T26] audit: type=1326 audit(1784041699.854:1974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13631 comm="syz.1.2550" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68a2390e59 code=0x7ffc0000 [ 842.316304][ T26] audit: type=1326 audit(1784041699.854:1975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13631 comm="syz.1.2550" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f68a2390e59 code=0x7ffc0000 [ 842.361617][ T26] audit: type=1326 audit(1784041699.854:1976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13631 comm="syz.1.2550" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68a2390e59 code=0x7ffc0000 [ 842.394101][ T26] audit: type=1326 audit(1784041699.854:1977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13631 comm="syz.1.2550" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68a2390e59 code=0x7ffc0000 [ 842.425819][ T26] audit: type=1326 audit(1784041699.854:1978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13631 comm="syz.1.2550" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f68a2390e59 code=0x7ffc0000 [ 842.809778][ T26] audit: type=1326 audit(1784041700.804:1979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13631 comm="syz.1.2550" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68a2390e59 code=0x7ffc0000 [ 843.058983][ T26] audit: type=1326 audit(1784041700.804:1980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13631 comm="syz.1.2550" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68a2390e59 code=0x7ffc0000 [ 843.364665][ T26] audit: type=1326 audit(1784041701.334:1981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13631 comm="syz.1.2550" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f68a2390e59 code=0x7ffc0000 [ 843.420086][ T26] audit: type=1326 audit(1784041701.334:1982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13631 comm="syz.1.2550" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68a2390e59 code=0x7ffc0000 [ 843.444575][ C0] vkms_vblank_simulate: vblank timer overrun [ 844.183976][T13668] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 844.250494][T13667] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.336228][T13667] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.419492][T13667] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.149115][T13667] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.258758][T13667] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.270107][T13667] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.281472][T13667] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.292740][T13667] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.978076][T13689] Set syz1 is full, maxelem 65536 reached [ 850.405962][T13703] netlink: 272 bytes leftover after parsing attributes in process `syz.2.2563'. [ 851.077077][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 851.077429][ T26] audit: type=1326 audit(1784041709.074:1987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13704 comm="syz.3.2567" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132f04de59 code=0x7ffc0000 [ 851.240050][ T26] audit: type=1326 audit(1784041709.074:1988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13704 comm="syz.3.2567" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132f04de59 code=0x7ffc0000 [ 851.404009][ T26] audit: type=1326 audit(1784041709.074:1989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13704 comm="syz.3.2567" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f132f04de59 code=0x7ffc0000 [ 851.470828][ T26] audit: type=1326 audit(1784041709.074:1990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13704 comm="syz.3.2567" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132f04de59 code=0x7ffc0000 [ 851.604911][ T26] audit: type=1326 audit(1784041709.074:1991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13704 comm="syz.3.2567" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132f04de59 code=0x7ffc0000 [ 851.680433][ T26] audit: type=1326 audit(1784041709.074:1992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13704 comm="syz.3.2567" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f132f04de59 code=0x7ffc0000 [ 851.915579][ T26] audit: type=1326 audit(1784041709.914:1993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13704 comm="syz.3.2567" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132f04de59 code=0x7ffc0000 [ 852.006700][ T26] audit: type=1326 audit(1784041709.914:1994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13704 comm="syz.3.2567" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132f04de59 code=0x7ffc0000 [ 852.375998][ T26] audit: type=1326 audit(1784041710.374:1995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13704 comm="syz.3.2567" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f132f04de59 code=0x7ffc0000 [ 852.436925][ T26] audit: type=1326 audit(1784041710.434:1996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13704 comm="syz.3.2567" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132f04de59 code=0x7ffc0000 [ 859.798508][T13773] netlink: 272 bytes leftover after parsing attributes in process `syz.1.2583'. [ 861.534055][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 861.534075][ T26] audit: type=1326 audit(1784041719.524:2001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13779 comm="syz.1.2585" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68a2390e59 code=0x7ffc0000 [ 861.777391][ T26] audit: type=1326 audit(1784041719.524:2002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13779 comm="syz.1.2585" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68a2390e59 code=0x7ffc0000 [ 861.833304][ T26] audit: type=1326 audit(1784041719.524:2003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13779 comm="syz.1.2585" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f68a2390e59 code=0x7ffc0000 [ 862.277388][T13784] Set syz1 is full, maxelem 65536 reached [ 862.284926][ T26] audit: type=1326 audit(1784041719.524:2004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13779 comm="syz.1.2585" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68a2390e59 code=0x7ffc0000 [ 862.349793][ T26] audit: type=1326 audit(1784041719.524:2005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13779 comm="syz.1.2585" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68a2390e59 code=0x7ffc0000 [ 862.630058][ T26] audit: type=1326 audit(1784041719.524:2006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13779 comm="syz.1.2585" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f68a2390e59 code=0x7ffc0000 [ 864.302052][T13802] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 867.470730][T13822] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 870.313649][ T26] audit: type=1326 audit(1784041728.304:2007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13848 comm="syz.3.2603" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132f04de59 code=0x7ffc0000 [ 870.509065][ T26] audit: type=1326 audit(1784041728.304:2008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13848 comm="syz.3.2603" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132f04de59 code=0x7ffc0000 [ 870.570329][ T26] audit: type=1326 audit(1784041728.334:2009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13848 comm="syz.3.2603" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f132f04de59 code=0x7ffc0000 [ 870.667374][T13854] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.854879][ T26] audit: type=1326 audit(1784041728.334:2010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13848 comm="syz.3.2603" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132f04de59 code=0x7ffc0000 [ 870.881153][T13854] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.929329][T13854] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.966506][ T26] audit: type=1326 audit(1784041728.334:2011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13848 comm="syz.3.2603" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132f04de59 code=0x7ffc0000 [ 871.027362][T13854] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 871.106827][T13854] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 871.118394][T13854] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 871.129832][T13854] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 871.141270][T13854] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 871.311249][ T26] audit: type=1326 audit(1784041728.334:2012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13848 comm="syz.3.2603" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f132f04de59 code=0x7ffc0000 [ 871.335990][ T26] audit: type=1326 audit(1784041728.464:2013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13848 comm="syz.3.2603" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132f04de59 code=0x7ffc0000 [ 871.360845][ T26] audit: type=1326 audit(1784041728.464:2014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13848 comm="syz.3.2603" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132f04de59 code=0x7ffc0000 [ 871.385686][ T26] audit: type=1326 audit(1784041728.474:2015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13848 comm="syz.3.2603" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f132f04de59 code=0x7ffc0000 [ 871.414059][ T26] audit: type=1326 audit(1784041728.474:2016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13848 comm="syz.3.2603" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132f04de59 code=0x7ffc0000 [ 874.083097][T13884] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 874.091369][T13884] VFS: Can't find a romfs filesystem on dev nullb0. [ 874.091369][T13884] [ 874.241145][T13885] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 875.679560][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.687213][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 876.146976][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 876.146993][ T26] audit: type=1326 audit(1784041734.144:2024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13904 comm="syz.4.2620" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8950153e59 code=0x7ffc0000 [ 876.516181][ T26] audit: type=1326 audit(1784041734.144:2025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13904 comm="syz.4.2620" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8950153e59 code=0x7ffc0000 [ 876.645748][ T26] audit: type=1326 audit(1784041734.254:2026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13904 comm="syz.4.2620" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f8950153e59 code=0x7ffc0000 [ 876.769060][ T26] audit: type=1326 audit(1784041734.254:2027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13904 comm="syz.4.2620" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8950153e59 code=0x7ffc0000 [ 876.910403][ T26] audit: type=1326 audit(1784041734.254:2028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13904 comm="syz.4.2620" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8950153e59 code=0x7ffc0000 [ 876.997385][ T26] audit: type=1326 audit(1784041734.254:2029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13904 comm="syz.4.2620" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8950153e59 code=0x7ffc0000 [ 877.090484][ T26] audit: type=1326 audit(1784041734.354:2030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13904 comm="syz.4.2620" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8950153e59 code=0x7ffc0000 [ 877.204021][ T26] audit: type=1326 audit(1784041734.354:2031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13904 comm="syz.4.2620" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8950153e59 code=0x7ffc0000 [ 877.285590][ T26] audit: type=1326 audit(1784041734.464:2032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13904 comm="syz.4.2620" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f8950153e59 code=0x7ffc0000 [ 877.310362][T13915] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 877.373972][ T26] audit: type=1326 audit(1784041734.464:2033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13904 comm="syz.4.2620" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8950153e59 code=0x7ffc0000 [ 878.444023][ T4233] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 879.174170][ T4233] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 879.183255][ T4233] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.204007][ T4233] usb 3-1: Product: syz [ 879.208219][ T4233] usb 3-1: Manufacturer: syz [ 879.212841][ T4233] usb 3-1: SerialNumber: syz [ 879.238296][ T4233] usb 3-1: config 0 descriptor?? [ 879.286395][ T4233] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 879.854009][T13905] Set syz1 is full, maxelem 65536 reached [ 881.549524][T13948] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 881.557305][T13948] VFS: Can't find a romfs filesystem on dev nullb0. [ 881.557305][T13948] [ 882.404361][ T4233] gspca_stk1135: reg_w 0x300 err -71 [ 882.423154][ T4233] gspca_stk1135: serial bus timeout: status=0x00 [ 882.463779][ T4233] gspca_stk1135: Sensor write failed [ 882.495568][ T4233] gspca_stk1135: serial bus timeout: status=0x00 [ 882.522575][ T4233] gspca_stk1135: Sensor write failed [ 882.533668][ T4233] gspca_stk1135: serial bus timeout: status=0x00 [ 882.548546][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 882.548562][ T26] audit: type=1326 audit(1784041740.544:2041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13963 comm="syz.2.2632" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f818011be59 code=0x7ffc0000 [ 882.693037][ T4233] gspca_stk1135: Sensor read failed [ 882.698711][ T4233] gspca_stk1135: serial bus timeout: status=0x00 [ 882.707264][ T4233] gspca_stk1135: Sensor read failed [ 882.712571][ T4233] gspca_stk1135: Detected sensor type unknown (0x0) [ 882.719737][ T4233] gspca_stk1135: serial bus timeout: status=0x00 [ 882.726463][ T4233] gspca_stk1135: Sensor read failed [ 882.731774][ T4233] gspca_stk1135: serial bus timeout: status=0x00 [ 882.738440][ T26] audit: type=1326 audit(1784041740.544:2042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13963 comm="syz.2.2632" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f818011be59 code=0x7ffc0000 [ 882.738669][ T4233] gspca_stk1135: Sensor read failed [ 882.768835][ T4233] gspca_stk1135: serial bus timeout: status=0x00 [ 882.775469][ T4233] gspca_stk1135: Sensor write failed [ 882.780874][ T4233] gspca_stk1135: serial bus timeout: status=0x00 [ 882.786009][ T26] audit: type=1326 audit(1784041740.574:2043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13963 comm="syz.2.2632" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f818011be59 code=0x7ffc0000 [ 882.787351][ T4233] gspca_stk1135: Sensor write failed [ 882.818377][ T4233] stk1135: probe of 3-1:0.0 failed with error -71 [ 882.829333][ T4233] usb 3-1: USB disconnect, device number 49 [ 882.847488][ T26] audit: type=1326 audit(1784041740.574:2044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13963 comm="syz.2.2632" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f818011be59 code=0x7ffc0000 [ 882.878981][ T26] audit: type=1326 audit(1784041740.574:2045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13963 comm="syz.2.2632" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f818011be59 code=0x7ffc0000 [ 882.904314][ T26] audit: type=1326 audit(1784041740.574:2046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13963 comm="syz.2.2632" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f818011be59 code=0x7ffc0000 [ 882.930049][ T26] audit: type=1326 audit(1784041740.684:2047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13963 comm="syz.2.2632" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f818011be59 code=0x7ffc0000 [ 882.947828][T13930] Set syz1 is full, maxelem 65536 reached [ 882.954977][ T26] audit: type=1326 audit(1784041740.684:2048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13963 comm="syz.2.2632" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f818011be59 code=0x7ffc0000 [ 883.060733][ T26] audit: type=1326 audit(1784041740.704:2049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13963 comm="syz.2.2632" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f818011be59 code=0x7ffc0000 [ 883.099130][ T26] audit: type=1326 audit(1784041740.704:2050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13963 comm="syz.2.2632" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f818011be59 code=0x7ffc0000 [ 884.216230][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805fab5000: Timeout. Failed to send simple message. [ 885.494020][T11587] usb 2-1: new full-speed USB device number 77 using dummy_hcd [ 886.824163][T11587] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 886.850133][T11587] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.085340][T11587] usb 2-1: Product: syz [ 887.089565][T11587] usb 2-1: Manufacturer: syz [ 887.094596][T11587] usb 2-1: SerialNumber: syz [ 887.101790][T11587] usb 2-1: config 0 descriptor?? [ 887.168365][T11587] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 888.740805][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 888.740822][ T26] audit: type=1326 audit(1784041746.614:2058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14023 comm="syz.3.2650" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132f04de59 code=0x7ffc0000 [ 888.793639][ T26] audit: type=1326 audit(1784041746.614:2059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14023 comm="syz.3.2650" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132f04de59 code=0x7ffc0000 [ 888.836408][ T26] audit: type=1326 audit(1784041746.614:2060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14023 comm="syz.3.2650" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f132f04de59 code=0x7ffc0000 [ 888.871169][ T26] audit: type=1326 audit(1784041746.614:2061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14023 comm="syz.3.2650" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132f04de59 code=0x7ffc0000 [ 888.924081][ T26] audit: type=1326 audit(1784041746.614:2062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14023 comm="syz.3.2650" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132f04de59 code=0x7ffc0000 [ 888.948930][ T26] audit: type=1326 audit(1784041746.614:2063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14023 comm="syz.3.2650" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f132f04de59 code=0x7ffc0000 [ 888.973588][ T26] audit: type=1326 audit(1784041746.784:2064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14023 comm="syz.3.2650" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132f04de59 code=0x7ffc0000 [ 889.012764][ T26] audit: type=1326 audit(1784041746.784:2065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14023 comm="syz.3.2650" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132f04de59 code=0x7ffc0000 [ 889.067811][ T26] audit: type=1326 audit(1784041746.814:2066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14023 comm="syz.3.2650" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f132f04de59 code=0x7ffc0000 [ 889.115182][ T26] audit: type=1326 audit(1784041746.814:2067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14023 comm="syz.3.2650" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132f04de59 code=0x7ffc0000 [ 889.874214][T11587] gspca_stk1135: reg_w 0x7 err -110 [ 889.880631][T11587] gspca_stk1135: serial bus timeout: status=0x00 [ 889.946258][T11587] gspca_stk1135: Sensor write failed [ 890.013610][T11587] gspca_stk1135: serial bus timeout: status=0x00 [ 890.030629][T11587] gspca_stk1135: Sensor write failed [ 890.036552][T11587] gspca_stk1135: serial bus timeout: status=0x00 [ 890.042977][T11587] gspca_stk1135: Sensor read failed [ 890.048737][T11587] gspca_stk1135: serial bus timeout: status=0x00 [ 890.055411][T11587] gspca_stk1135: Sensor read failed [ 890.060623][T11587] gspca_stk1135: Detected sensor type unknown (0x0) [ 890.067592][T11587] gspca_stk1135: serial bus timeout: status=0x00 [ 890.074161][T11587] gspca_stk1135: Sensor read failed [ 890.079461][T11587] gspca_stk1135: serial bus timeout: status=0x00 [ 890.087009][T11587] gspca_stk1135: Sensor read failed [ 890.092322][T11587] gspca_stk1135: serial bus timeout: status=0x00 [ 890.098983][T11587] gspca_stk1135: Sensor write failed [ 890.104551][T11587] gspca_stk1135: serial bus timeout: status=0x00 [ 890.110894][T11587] gspca_stk1135: Sensor write failed [ 890.116625][T11587] stk1135: probe of 2-1:0.0 failed with error -110 [ 890.257177][ T4263] usb 2-1: USB disconnect, device number 77 [ 894.200806][T14048] Set syz1 is full, maxelem 65536 reached [ 894.433461][T14084] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.488377][T14084] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.537561][T14084] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.587379][T14084] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.658970][T14084] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 894.670616][T14084] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 894.682295][T14084] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 894.693964][T14084] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 895.516758][T14094] ip6t_srh: unknown srh match flags FF3F [ 895.652758][ T26] kauditd_printk_skb: 24 callbacks suppressed [ 895.652778][ T26] audit: type=1326 audit(1784041753.644:2092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14098 comm="syz.1.2668" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68a2390e59 code=0x7ffc0000 [ 895.683358][ C1] vkms_vblank_simulate: vblank timer overrun [ 895.785102][ T26] audit: type=1326 audit(1784041753.644:2093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14098 comm="syz.1.2668" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68a2390e59 code=0x7ffc0000 [ 895.818819][ T26] audit: type=1326 audit(1784041753.644:2094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14098 comm="syz.1.2668" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f68a2390e59 code=0x7ffc0000 [ 895.860523][ T26] audit: type=1326 audit(1784041753.654:2095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14098 comm="syz.1.2668" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68a2390e59 code=0x7ffc0000 [ 895.890695][ T26] audit: type=1326 audit(1784041753.654:2096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14098 comm="syz.1.2668" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68a2390e59 code=0x7ffc0000 [ 895.915079][ C1] vkms_vblank_simulate: vblank timer overrun [ 895.923422][ T26] audit: type=1326 audit(1784041753.654:2097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14098 comm="syz.1.2668" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f68a2390e59 code=0x7ffc0000 [ 895.947630][ C1] vkms_vblank_simulate: vblank timer overrun [ 895.959925][ T26] audit: type=1326 audit(1784041753.784:2098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14098 comm="syz.1.2668" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68a2390e59 code=0x7ffc0000 [ 895.984194][ C1] vkms_vblank_simulate: vblank timer overrun [ 896.038702][ T26] audit: type=1326 audit(1784041753.784:2099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14098 comm="syz.1.2668" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68a2390e59 code=0x7ffc0000 [ 896.075054][ T26] audit: type=1326 audit(1784041753.804:2100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14098 comm="syz.1.2668" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f68a2390e59 code=0x7ffc0000 [ 896.225056][ T26] audit: type=1326 audit(1784041753.814:2101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14098 comm="syz.1.2668" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68a2390e59 code=0x7ffc0000 [ 896.249540][ C1] vkms_vblank_simulate: vblank timer overrun [ 896.542747][T14114] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2671'. [ 897.550366][T14124] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.598515][T14124] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.648366][T14124] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.708287][T14124] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.786429][T14124] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.800451][T14124] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.814362][T14124] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.828404][T14124] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 900.700871][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 900.700890][ T26] audit: type=1326 audit(1784041758.564:2114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14162 comm="syz.5.2685" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbd84282e59 code=0x7ffc0000 [ 900.794115][ T26] audit: type=1326 audit(1784041758.684:2115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14162 comm="syz.5.2685" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd84282e59 code=0x7ffc0000 [ 900.887647][ T26] audit: type=1326 audit(1784041758.684:2116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14162 comm="syz.5.2685" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd84282e59 code=0x7ffc0000 [ 900.889536][T14167] ip6t_srh: unknown srh match flags FF3F [ 900.925913][T14165] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 900.957913][ T26] audit: type=1326 audit(1784041758.744:2117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14162 comm="syz.5.2685" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fbd84282e59 code=0x7ffc0000 [ 901.010959][ T26] audit: type=1326 audit(1784041758.744:2118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14162 comm="syz.5.2685" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd84282e59 code=0x7ffc0000 [ 901.070600][ T26] audit: type=1326 audit(1784041758.744:2119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14162 comm="syz.5.2685" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd84282e59 code=0x7ffc0000 [ 901.102020][T14165] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 901.133994][ T26] audit: type=1326 audit(1784041758.744:2120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14162 comm="syz.5.2685" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fbd84282e59 code=0x7ffc0000 [ 901.192888][ T26] audit: type=1326 audit(1784041758.744:2121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14162 comm="syz.5.2685" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd84282e59 code=0x7ffc0000 [ 901.288590][ T26] audit: type=1326 audit(1784041758.744:2122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14162 comm="syz.5.2685" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd84282e59 code=0x7ffc0000 [ 901.334322][ T26] audit: type=1326 audit(1784041758.744:2123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14162 comm="syz.5.2685" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fbd84282e59 code=0x7ffc0000 [ 901.451857][T14165] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 901.817692][T14165] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.367180][T14165] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.380858][T14165] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.396085][T14165] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.410588][T14165] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.457314][T14184] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.628460][T14184] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.884739][T14184] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.138350][T14184] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.300942][T14184] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.341015][T14184] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.380474][T14184] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.420040][T14184] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 905.786099][T14222] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2699'. [ 907.510322][T14236] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2703'. [ 909.602182][T14217] Set syz1 is full, maxelem 65536 reached [ 909.770411][T14254] ip6t_srh: unknown srh match flags FF3F [ 914.189913][T14296] ip6t_srh: unknown srh match flags FF3F [ 915.336947][T14306] device syzkaller0 entered promiscuous mode [ 916.786524][T14320] ip6t_srh: unknown srh match flags FF3F [ 921.008612][T14358] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 921.018683][T14358] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.943069][T14358] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 921.952976][T14358] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.150343][T14358] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 922.160217][T14358] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.369012][T14358] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 922.378993][T14358] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.448127][T14358] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 256 - 0 [ 922.456460][T14358] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 922.468227][T14358] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 256 - 0 [ 922.476515][T14358] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 922.487943][T14358] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 256 - 0 [ 922.496510][T14358] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 922.507889][T14358] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 256 - 0 [ 922.516049][T14358] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 924.137032][T14381] Set syz1 is full, maxelem 65536 reached [ 926.125805][T14391] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 926.268550][T14391] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 926.368443][T14391] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 926.543569][T14391] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 926.811501][T14391] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.852611][T14391] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.893722][T14391] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.933899][T14391] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 927.356889][ T26] kauditd_printk_skb: 17 callbacks suppressed [ 927.356905][ T26] audit: type=1326 audit(1784041785.354:2141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14405 comm="syz.3.2744" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132f04de59 code=0x7ffc0000 [ 927.586361][ T26] audit: type=1326 audit(1784041785.354:2142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14405 comm="syz.3.2744" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f132f04de59 code=0x7ffc0000 [ 927.611540][ T26] audit: type=1326 audit(1784041785.354:2143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14405 comm="syz.3.2744" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132f04de59 code=0x7ffc0000 [ 927.636280][ T26] audit: type=1326 audit(1784041785.354:2144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14405 comm="syz.3.2744" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f132f04de59 code=0x7ffc0000 [ 928.576855][T14422] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.648487][T14422] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.719445][ T26] audit: type=1326 audit(1784041786.714:2145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14405 comm="syz.3.2744" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132f04de59 code=0x7ffc0000 [ 928.766732][T14422] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.838495][T14422] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.852876][ T26] audit: type=1326 audit(1784041786.744:2146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14405 comm="syz.3.2744" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132f04de59 code=0x7ffc0000 [ 928.891264][ T26] audit: type=1326 audit(1784041786.804:2147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14405 comm="syz.3.2744" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f132f04de59 code=0x7ffc0000 [ 928.924021][ T26] audit: type=1326 audit(1784041786.804:2148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14405 comm="syz.3.2744" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132f04de59 code=0x7ffc0000 [ 928.957014][ T26] audit: type=1326 audit(1784041786.804:2149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14405 comm="syz.3.2744" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132f04de59 code=0x7ffc0000 [ 929.037518][ T26] audit: type=1326 audit(1784041786.804:2150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14405 comm="syz.3.2744" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f132f04de59 code=0x7ffc0000 [ 934.674919][T14422] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.687706][T14422] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.699117][T14422] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.710732][T14422] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 936.730223][T14481] Set syz1 is full, maxelem 65536 reached [ 937.127328][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 937.133730][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 939.034549][T14499] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2767'. [ 941.770239][T14536] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 941.949865][T14536] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.027073][T14546] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2779'. [ 942.780958][T14536] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.854964][T14536] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.929160][T14536] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 942.940628][T14536] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 942.952138][T14536] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 942.963514][T14536] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 944.167708][T14561] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2792'. [ 946.698187][T14579] Set syz1 is full, maxelem 65536 reached [ 948.201693][T14593] Set syz1 is full, maxelem 65536 reached [ 949.128159][T14602] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2791'. [ 950.707070][T14619] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2795'. [ 953.105846][T14643] ip6t_srh: unknown srh match flags FF3F [ 953.941467][T14650] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 953.951199][T14650] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.022843][T14650] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 955.033003][T14650] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.078333][T14650] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 955.088145][T14650] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.125221][T14650] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 955.135059][T14650] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.241704][T14650] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 256 - 0 [ 955.249909][T14650] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.263925][T14650] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 256 - 0 [ 955.272159][T14650] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.286057][T14650] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 256 - 0 [ 955.294326][T14650] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.308564][T14650] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 256 - 0 [ 955.316841][T14650] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.848995][T14669] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2809'. [ 957.831799][T14689] ip6t_srh: unknown srh match flags FF3F [ 961.764035][T14739] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 962.353418][T14739] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 963.039652][T14739] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 963.126159][T14739] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 963.198464][T14739] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.210421][T14739] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.221811][T14739] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.232960][T14739] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.479164][T14762] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2833'. [ 965.800465][T14779] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.927255][T14779] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.182898][T14779] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.570797][T14779] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.604015][ T4232] Bluetooth: hci1: command 0x0409 tx timeout [ 967.614633][T14779] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.629671][T14779] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.640761][T14780] chnl_net:caif_netlink_parms(): no params data found [ 967.661575][T14779] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.688153][T14779] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.914448][ T4368] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 967.924472][ T4368] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 968.008438][T14822] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2844'. [ 968.477006][ T4368] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 968.488084][ T4368] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 968.678922][T14798] Bluetooth: Error in BCSP hdr checksum [ 969.079242][ T4368] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 969.212724][ T4368] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 969.485535][T14780] bridge0: port 1(bridge_slave_0) entered blocking state [ 969.523970][T14780] bridge0: port 1(bridge_slave_0) entered disabled state [ 970.214118][ T4232] Bluetooth: hci1: command 0x041b tx timeout [ 970.221581][T14780] device bridge_slave_0 entered promiscuous mode [ 970.239508][T14780] bridge0: port 2(bridge_slave_1) entered blocking state [ 970.248049][T14780] bridge0: port 2(bridge_slave_1) entered disabled state [ 970.264793][T14780] device bridge_slave_1 entered promiscuous mode [ 970.278679][ T4368] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 970.288434][ T4368] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 970.314383][T11587] Bluetooth: hci4: command 0x1003 tx timeout [ 970.327233][ T4203] Bluetooth: hci4: sending frame failed (-49) [ 970.440584][T14780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 970.458335][T14780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 971.011955][T14846] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2853'. [ 971.496245][T14780] team0: Port device team_slave_0 added [ 971.504825][T14780] team0: Port device team_slave_1 added [ 971.528085][T14780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 971.565149][T14780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 971.591876][T14780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 971.620399][T14780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 971.634563][T14780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 972.340869][ T3517] Bluetooth: hci1: command 0x040f tx timeout [ 972.843839][T14780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 973.109782][T11587] Bluetooth: hci4: command 0x1001 tx timeout [ 973.117585][ T4203] Bluetooth: hci4: sending frame failed (-49) [ 973.133342][T14859] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.176984][ T4368] tipc: Left network mode [ 973.216784][T14780] device hsr_slave_0 entered promiscuous mode [ 973.224662][T14780] device hsr_slave_1 entered promiscuous mode [ 973.239978][T14859] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.338574][T14859] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.400863][T14859] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.734937][T14859] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.747298][T14859] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.758673][T14859] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.770253][T14859] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.510500][ T3517] Bluetooth: hci1: command 0x0419 tx timeout [ 974.564785][T14872] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2860'. [ 974.565029][T14873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2859'. [ 975.205029][ T4281] Bluetooth: hci4: command 0x1009 tx timeout [ 975.285627][ T4368] device hsr_slave_0 left promiscuous mode [ 976.416650][ T4368] device hsr_slave_1 left promiscuous mode [ 976.437839][ T4368] device bridge_slave_1 left promiscuous mode [ 976.455741][ T4368] bridge0: port 2(bridge_slave_1) entered disabled state [ 976.467940][ T4368] device bridge_slave_0 left promiscuous mode [ 976.475955][ T4368] bridge0: port 1(bridge_slave_0) entered disabled state [ 976.516642][ T4368] device veth1_macvtap left promiscuous mode [ 976.526526][ T4368] device veth0_macvtap left promiscuous mode [ 976.532609][ T4368] device veth1_vlan left promiscuous mode [ 976.557047][ T4368] device veth0_vlan left promiscuous mode [ 978.952810][ T4368] bond4 (unregistering): (slave geneve3): Releasing active interface [ 979.078181][ T4368] bond4 (unregistering): Released all slaves [ 979.347364][ T4368] bond3 (unregistering): Released all slaves [ 979.470156][ T4368] bond2 (unregistering): Released all slaves [ 979.522882][ T4368] bond1 (unregistering): (slave geneve2): Releasing active interface [ 979.559663][ T4368] bond1 (unregistering): Released all slaves [ 979.707950][ T4368] team0 (unregistering): Port device team_slave_1 removed [ 979.737352][ T4368] team0 (unregistering): Port device team_slave_0 removed [ 979.752756][ T4368] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 979.786147][ T4368] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 979.926859][T14932] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 979.935673][ T4368] bond0 (unregistering): Released all slaves [ 980.063696][T14780] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 980.079090][T14780] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 980.147230][T14780] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 980.218156][T14780] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 980.456897][T14940] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2872'. [ 981.631962][T14780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 981.697711][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 981.715386][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 981.743603][T14780] 8021q: adding VLAN 0 to HW filter on device team0 [ 981.767633][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 981.784838][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 981.805055][ T3069] bridge0: port 1(bridge_slave_0) entered blocking state [ 981.812157][ T3069] bridge0: port 1(bridge_slave_0) entered forwarding state [ 981.854785][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 981.869843][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 981.888898][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 981.909387][ T3069] bridge0: port 2(bridge_slave_1) entered blocking state [ 981.916545][ T3069] bridge0: port 2(bridge_slave_1) entered forwarding state [ 981.925700][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 981.934855][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 981.954285][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 981.975553][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 982.024579][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 982.050076][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 982.060005][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 982.069455][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 982.078360][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 982.087899][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 982.096688][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 982.128984][T14780] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 982.339528][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 982.349314][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 982.366825][T14780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 982.934483][T14962] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 983.013803][T14962] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 983.188496][T14962] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 983.353728][T14962] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 983.483908][T14975] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2873'. [ 984.097908][T14962] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.109127][T14962] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.120321][T14962] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.131462][T14962] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 985.267519][T14998] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2880'. [ 987.541641][T15019] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2884'. [ 988.237579][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 988.288911][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 988.336518][ T9557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 988.349007][ T9557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 988.381471][ T9557] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 988.518154][ T9557] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 988.710918][T14780] device veth0_vlan entered promiscuous mode [ 988.733120][T14780] device veth1_vlan entered promiscuous mode [ 988.839839][T14780] device veth0_macvtap entered promiscuous mode [ 988.876368][ T9557] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 988.896101][ T9557] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 988.944788][ T9557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 988.963453][ T9557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 988.999912][ T9557] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 989.031131][T14780] device veth1_macvtap entered promiscuous mode [ 989.254537][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 989.321602][T14780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 989.532189][T14780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 989.659278][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 989.719005][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 989.842872][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 989.966851][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 990.355624][T14780] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 990.433977][T14780] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 990.565201][T14780] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 990.574195][T14780] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 990.887680][T15039] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.951180][T15039] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 991.026009][T15039] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 991.079169][T15039] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 991.138125][T15039] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.149720][T15039] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.161262][T15039] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.172851][T15039] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.872620][T15053] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2893'. [ 993.696770][ T3069] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 993.745165][ T3069] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 994.099812][ T4366] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 994.128346][T15059] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 994.138290][T15059] VFS: Can't find a romfs filesystem on dev nullb0. [ 994.138290][T15059] [ 994.495434][ T9557] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 994.506841][ T4366] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 994.524875][ T9557] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 995.775411][T15078] ip6t_srh: unknown srh match flags FF3F [ 996.115273][T15081] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2835'. [ 998.638887][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.645237][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 999.113322][T15106] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 999.528430][T15113] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2905'. [ 1000.518978][T15125] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1000.529595][T15125] VFS: Can't find a romfs filesystem on dev nullb0. [ 1000.529595][T15125] [ 1003.807799][T15147] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2913'. [ 1005.976519][T15154] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2914'. [ 1007.389643][T15163] chnl_net:caif_netlink_parms(): no params data found [ 1007.840563][ T4366] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1008.607585][ T3517] Bluetooth: hci4: command 0x0409 tx timeout [ 1009.675945][ T4366] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.366688][T15163] bridge0: port 1(bridge_slave_0) entered blocking state [ 1010.488008][T15163] bridge0: port 1(bridge_slave_0) entered disabled state [ 1010.633934][ T3517] Bluetooth: hci4: command 0x041b tx timeout [ 1010.668881][T15163] device bridge_slave_0 entered promiscuous mode [ 1010.740649][ T4366] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.692623][T15163] bridge0: port 2(bridge_slave_1) entered blocking state [ 1011.899744][T15163] bridge0: port 2(bridge_slave_1) entered disabled state [ 1011.956778][T15163] device bridge_slave_1 entered promiscuous mode [ 1012.165592][ T4366] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1012.248274][T15163] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1012.288493][T15163] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1012.385518][T15163] team0: Port device team_slave_0 added [ 1012.408894][T15163] team0: Port device team_slave_1 added [ 1012.713987][ T4281] Bluetooth: hci4: command 0x040f tx timeout [ 1012.715231][T15163] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1012.778239][T15163] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1012.867709][T15163] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1012.895264][T15163] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1012.902472][T15163] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1012.929326][T15163] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1013.064891][T15163] device hsr_slave_0 entered promiscuous mode [ 1013.125298][T15163] device hsr_slave_1 entered promiscuous mode [ 1013.133249][T15163] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1013.150904][T15163] Cannot create hsr debugfs directory [ 1014.537008][ T4366] tipc: Left network mode [ 1014.793971][ T3519] Bluetooth: hci4: command 0x0419 tx timeout [ 1015.291372][T15163] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1015.554118][T15163] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1015.569723][T15163] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1015.801404][T15163] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1016.965195][T15263] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1017.442167][T15263] VFS: Can't find a romfs filesystem on dev nullb0. [ 1017.442167][T15263] [ 1017.744591][T15163] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1017.864290][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1017.929615][T15276] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2938'. [ 1018.057916][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1018.262006][ T4366] device hsr_slave_0 left promiscuous mode [ 1019.443921][ T4366] device hsr_slave_1 left promiscuous mode [ 1019.476576][ T4366] device bridge_slave_1 left promiscuous mode [ 1019.504515][ T4366] bridge0: port 2(bridge_slave_1) entered disabled state [ 1019.567298][ T4366] device bridge_slave_0 left promiscuous mode [ 1019.573562][ T4366] bridge0: port 1(bridge_slave_0) entered disabled state [ 1019.625316][ T4366] device veth1_macvtap left promiscuous mode [ 1019.654355][ T4366] device veth0_macvtap left promiscuous mode [ 1019.684287][ T4366] device veth1_vlan left promiscuous mode [ 1019.690778][ T4366] device veth0_vlan left promiscuous mode [ 1020.436281][T15307] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2941'. [ 1021.413695][T15317] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2954'. [ 1022.877186][ T4366] bond6 (unregistering): Released all slaves [ 1023.124513][ T4366] bond5 (unregistering): Released all slaves [ 1023.220058][ T4366] bond4 (unregistering): Released all slaves [ 1023.267383][ T4366] bond3 (unregistering): Released all slaves [ 1023.280754][ T4366] bond2 (unregistering): Released all slaves [ 1023.297068][ T4366] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1023.311124][ T4366] bond1 (unregistering): Released all slaves [ 1024.260615][T15335] ip6t_srh: unknown srh match flags FF3F [ 1024.400640][T15333] Set syz1 is full, maxelem 65536 reached [ 1024.453232][ T4366] team0 (unregistering): Port device team_slave_1 removed [ 1024.468479][ T4366] team0 (unregistering): Port device team_slave_0 removed [ 1024.800820][ T4366] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1024.921066][ T4366] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1025.009165][ T4366] bond0 (unregistering): Released all slaves [ 1025.062916][T15163] 8021q: adding VLAN 0 to HW filter on device team0 [ 1025.457216][T15348] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2950'. [ 1026.056635][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1026.099384][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1026.108110][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 1026.115245][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1026.259676][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1026.425671][T15358] ip6t_srh: unknown srh match flags FF3F [ 1026.884464][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1027.355510][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1027.364602][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 1027.371677][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1027.399179][T15367] ip6t_srh: unknown srh match flags FF3F [ 1027.400513][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1027.852582][ T7616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1027.877588][ T7616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1027.941025][T15377] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2958'. [ 1028.563110][ T7616] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1028.583612][ T7616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1028.603986][ T7616] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1028.622497][ T7616] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1028.942429][T15385] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1029.309149][T15387] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2961'. [ 1029.423048][T15385] VFS: Can't find a romfs filesystem on dev nullb0. [ 1029.423048][T15385] [ 1029.542753][ T7616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1030.256024][ T7616] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1030.268701][T15163] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1030.282975][T15163] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1030.314904][T15396] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1030.331174][ T7616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1030.340041][ T7616] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1032.752380][T15396] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1032.806522][T15422] ip6t_srh: unknown srh match flags FF3F [ 1032.819036][T15396] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.014671][T15396] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.983668][T15396] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.996473][T15396] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1034.007790][T15396] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1034.019078][T15396] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1036.713274][ T8070] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1036.789481][T15452] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2976'. [ 1036.811042][ T8070] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1037.072045][T15163] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1037.661675][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1037.893132][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1038.151368][T15464] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1038.162186][T15464] VFS: Can't find a romfs filesystem on dev nullb0. [ 1038.162186][T15464] [ 1038.672218][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1038.691192][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1038.728817][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1038.736834][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1038.780273][T15163] device veth0_vlan entered promiscuous mode [ 1038.812152][T15163] device veth1_vlan entered promiscuous mode [ 1039.541170][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1039.566946][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1039.578211][T15163] device veth0_macvtap entered promiscuous mode [ 1039.602769][T15163] device veth1_macvtap entered promiscuous mode [ 1039.630620][T15163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1039.714566][T15163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1040.028078][T15163] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1040.096876][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1040.296510][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1041.091037][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1041.179178][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1042.146735][T15483] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.171297][T15163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1042.182300][T15163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1042.195641][T15163] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1042.207851][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1042.227910][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1042.297770][T15483] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.314025][T15163] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.469617][T15163] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.491162][T15163] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.500025][T15163] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.542726][T15483] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1043.542561][T15483] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1044.057954][T15483] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1044.073416][T15483] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1044.087753][T15483] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1044.101917][T15483] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1044.236994][ T4369] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1044.288256][ T4369] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1044.349242][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1044.362881][ T3069] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1044.390545][ T3069] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1044.416664][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1044.577910][T15524] ip6t_srh: unknown srh match flags FF3F [ 1044.635244][T15525] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1049.408856][T15561] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3000'. [ 1050.447027][ T4235] Bluetooth: hci0: command 0x0409 tx timeout [ 1051.404882][T15569] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1051.545390][T15569] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1051.636671][T15569] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1051.652516][T15548] chnl_net:caif_netlink_parms(): no params data found [ 1051.721912][T15569] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1051.824665][T15569] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.837700][T15569] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.849238][T15569] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.861582][T15569] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.970320][T15587] ip6t_srh: unknown srh match flags FF3F [ 1051.988613][ T4366] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.031553][T15548] bridge0: port 1(bridge_slave_0) entered blocking state [ 1052.044451][T15548] bridge0: port 1(bridge_slave_0) entered disabled state [ 1052.068908][T15548] device bridge_slave_0 entered promiscuous mode [ 1052.159250][ T4366] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.875290][ T4235] Bluetooth: hci0: command 0x041b tx timeout [ 1053.036368][T15594] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1053.233981][T15594] VFS: Can't find a romfs filesystem on dev nullb0. [ 1053.233981][T15594] [ 1053.478828][T15548] bridge0: port 2(bridge_slave_1) entered blocking state [ 1053.487659][T15548] bridge0: port 2(bridge_slave_1) entered disabled state [ 1053.495826][T15548] device bridge_slave_1 entered promiscuous mode [ 1053.508523][ T4366] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.548652][T15548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1053.562901][T15548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1053.581398][ T4366] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.602410][T15548] team0: Port device team_slave_0 added [ 1053.617975][T15548] team0: Port device team_slave_1 added [ 1053.681926][T15548] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1053.699213][T15548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1054.701699][T15548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1054.756807][T15548] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1054.763805][T15548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1055.130751][T15418] Bluetooth: hci0: command 0x040f tx timeout [ 1055.247787][T15619] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3012'. [ 1057.243743][ T4235] Bluetooth: hci0: command 0x0419 tx timeout [ 1057.312271][T15622] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1057.339818][T15548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1058.020330][T15548] device hsr_slave_0 entered promiscuous mode [ 1058.035306][T15548] device hsr_slave_1 entered promiscuous mode [ 1058.047918][T15548] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1058.073773][T15548] Cannot create hsr debugfs directory [ 1058.103934][ T4366] tipc: Left network mode [ 1058.896166][T15642] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.096856][T15642] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.145878][T15647] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1059.156171][T15647] VFS: Can't find a romfs filesystem on dev nullb0. [ 1059.156171][T15647] [ 1059.252771][T15642] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.404117][T15642] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.847513][T15642] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.858947][T15642] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.870786][T15642] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.881988][T15642] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.997807][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 1060.007775][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 1062.079747][T15672] ip6t_srh: unknown srh match flags FF3F [ 1063.128358][T15548] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1063.150219][T15548] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1064.372206][T15548] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1064.545673][T15548] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1064.835557][ T4366] device hsr_slave_0 left promiscuous mode [ 1065.075119][ T4366] device hsr_slave_1 left promiscuous mode [ 1065.084656][ T4366] device bridge_slave_1 left promiscuous mode [ 1065.102601][ T4366] bridge0: port 2(bridge_slave_1) entered disabled state [ 1065.112131][ T4366] device bridge_slave_0 left promiscuous mode [ 1065.137887][ T4366] bridge0: port 1(bridge_slave_0) entered disabled state [ 1065.362705][ T4366] device veth1_macvtap left promiscuous mode [ 1065.373687][ T4366] device veth0_macvtap left promiscuous mode [ 1065.380004][ T4366] device veth1_vlan left promiscuous mode [ 1065.386061][ T4366] device veth0_vlan left promiscuous mode [ 1066.795317][ T4366] bond2 (unregistering): Released all slaves [ 1066.828240][ T4366] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1066.841923][ T4366] bond1 (unregistering): Released all slaves [ 1066.971441][ T4366] team0 (unregistering): Port device team_slave_1 removed [ 1066.987616][ T4366] team0 (unregistering): Port device team_slave_0 removed [ 1067.004578][ T4366] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1067.022331][ T4366] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1067.096539][ T4366] bond0 (unregistering): Released all slaves [ 1069.377568][T15548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1069.461098][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1069.490426][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1069.522758][T15732] ip6t_srh: unknown srh match flags FF3F [ 1069.537430][T15548] 8021q: adding VLAN 0 to HW filter on device team0 [ 1069.686332][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1069.708668][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1069.779811][T15738] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3037'. [ 1070.471025][ T3069] bridge0: port 1(bridge_slave_0) entered blocking state [ 1070.478206][ T3069] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1071.714764][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1071.728186][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1071.769767][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1071.839471][ T3069] bridge0: port 2(bridge_slave_1) entered blocking state [ 1071.846626][ T3069] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1071.858574][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1071.878674][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1071.926478][ T7616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1071.946243][ T7616] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1071.995763][ T7616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1072.034939][ T7616] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1072.073959][ T7616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1072.093770][ T7616] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1072.124560][ T7616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1072.151335][ T7616] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1072.198468][ T7616] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1072.225240][T15548] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1072.324490][T15756] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1073.067960][ T7616] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1073.082377][ T7616] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1073.853576][T15548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1074.085371][T15776] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1074.104192][ T9557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1074.112937][ T9557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1074.155343][T15776] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1074.187181][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1074.206777][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1074.236826][T15776] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1074.251356][T15548] device veth0_vlan entered promiscuous mode [ 1074.265181][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1074.278024][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1074.302822][T15776] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1074.322581][T15548] device veth1_vlan entered promiscuous mode [ 1074.375332][T15776] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1074.389233][T15776] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1074.400811][T15776] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1074.412240][T15776] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1074.453117][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1074.469370][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1074.490512][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1074.501206][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1074.569268][T15548] device veth0_macvtap entered promiscuous mode [ 1074.585188][T15548] device veth1_macvtap entered promiscuous mode [ 1074.611403][T15548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1074.622210][T15548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1074.636908][T15548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1074.647848][T15548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1075.874516][T15548] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1075.882251][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1075.934967][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1076.196263][T15796] ip6t_srh: unknown srh match flags FF3F [ 1077.164318][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1077.621061][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1077.638471][T15548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1077.671694][T15548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1077.686431][T15548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1077.702319][T15548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1077.735203][T15548] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1077.825815][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1077.886455][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1077.923285][T15548] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1077.952895][T15548] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1077.975091][T15548] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.011746][T15548] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.303321][ T7616] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1078.324364][ T7616] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1078.362419][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1078.436327][ T3069] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1078.436349][ T3069] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1078.436559][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1080.269133][T15878] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3079'. [ 1080.329264][T15874] device syzkaller1 entered promiscuous mode [ 1080.809108][T15881] chnl_net:caif_netlink_parms(): no params data found [ 1080.943581][ T4369] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1081.079771][ T4369] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1081.206833][ T4369] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1081.234126][T15881] bridge0: port 1(bridge_slave_0) entered blocking state [ 1081.241579][T15881] bridge0: port 1(bridge_slave_0) entered disabled state [ 1081.255275][T15881] device bridge_slave_0 entered promiscuous mode [ 1081.279854][T15881] bridge0: port 2(bridge_slave_1) entered blocking state [ 1081.287222][T15881] bridge0: port 2(bridge_slave_1) entered disabled state [ 1081.297431][T15881] device bridge_slave_1 entered promiscuous mode [ 1081.329440][ T4369] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1081.349932][T15881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1081.375997][T15881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1081.458864][ T13] usb 2-1: new full-speed USB device number 78 using dummy_hcd [ 1081.483548][T15881] team0: Port device team_slave_0 added [ 1081.502469][T15881] team0: Port device team_slave_1 added [ 1081.566149][T15881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1081.585392][T15881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1081.643113][T15881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1081.682731][T15881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1081.692258][T15881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1081.739764][T15881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1081.786972][T15917] device syzkaller0 entered promiscuous mode [ 1081.813117][ T4369] tipc: Left network mode [ 1081.849278][T15881] device hsr_slave_0 entered promiscuous mode [ 1081.867945][T15881] device hsr_slave_1 entered promiscuous mode [ 1081.886400][T15881] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1081.906131][T15881] Cannot create hsr debugfs directory [ 1081.949338][ T13] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1081.962639][ T13] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 1082.012658][ T13] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 247, setting to 64 [ 1082.040752][ T13] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1082.062451][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 1082.062466][ T26] audit: type=1326 audit(1784041940.054:2153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15927 comm="syz.4.3094" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe25a2ace59 code=0x0 [ 1082.234235][ T13] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 1082.253551][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1082.282204][ T13] usb 2-1: Product: syz [ 1082.286571][ T13] usb 2-1: Manufacturer: syz [ 1082.291230][ T13] usb 2-1: SerialNumber: syz [ 1082.338106][ T13] usb 2-1: config 0 descriptor?? [ 1082.354030][ T7] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1082.358432][T15912] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1082.474099][ T23] Bluetooth: hci2: command 0x0409 tx timeout [ 1082.589694][T15912] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1082.622682][ T13] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input6 [ 1082.632067][ T7] usb 6-1: Using ep0 maxpacket: 8 [ 1082.794268][ T7] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1082.813167][ T7] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1082.828575][ T7] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1082.858786][ T7] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1082.884121][ T7] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1082.913942][ T7] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1082.945099][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1082.988763][T15494] usb 2-1: USB disconnect, device number 78 [ 1083.116387][T15881] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1083.145871][T15881] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1083.171868][T15956] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3097'. [ 1083.250629][T15881] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1083.267995][T15881] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1083.498088][ T4369] device hsr_slave_0 left promiscuous mode [ 1083.504933][ T4369] device hsr_slave_1 left promiscuous mode [ 1083.541542][ T4369] device bridge_slave_1 left promiscuous mode [ 1083.560917][ T4369] bridge0: port 2(bridge_slave_1) entered disabled state [ 1083.587705][ T4369] device bridge_slave_0 left promiscuous mode [ 1083.604046][ T4369] bridge0: port 1(bridge_slave_0) entered disabled state [ 1083.640462][ T4369] device veth1_macvtap left promiscuous mode [ 1083.658976][ T4369] device veth0_macvtap left promiscuous mode [ 1083.684061][ T4369] device veth1_vlan left promiscuous mode [ 1083.689908][ T4369] device veth0_vlan left promiscuous mode [ 1083.867226][T15985] usbtmc 6-1:16.0: simple usb_control_msg failed -32 [ 1083.883257][T15035] usb 6-1: USB disconnect, device number 6 [ 1084.027868][ T4369] bond3 (unregistering): Released all slaves [ 1084.051774][ T4369] bond2 (unregistering): Released all slaves [ 1084.084485][T15995] PID 15995 killed due to inadequate hugepage pool [ 1084.096939][ T4369] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1084.130134][ T4369] bond1 (unregistering): Released all slaves [ 1084.325340][ T4369] team0 (unregistering): Port device team_slave_1 removed [ 1084.340308][ T4369] team0 (unregistering): Port device team_slave_0 removed [ 1084.351943][ T4369] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1084.368461][ T4369] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1084.448008][ T23] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1084.450500][ T4369] bond0 (unregistering): Released all slaves [ 1084.506659][T15881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1084.514403][T15035] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1084.553917][T15494] Bluetooth: hci2: command 0x041b tx timeout [ 1084.567054][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1084.591939][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1084.604028][ T13] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1084.624613][T15881] 8021q: adding VLAN 0 to HW filter on device team0 [ 1084.648316][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1084.660411][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1084.681364][ T4366] bridge0: port 1(bridge_slave_0) entered blocking state [ 1084.688521][ T4366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1084.726804][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1084.752430][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1084.771923][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1084.808141][T15035] usb 3-1: Using ep0 maxpacket: 8 [ 1084.814308][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1084.843037][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1084.850833][ T3069] bridge0: port 2(bridge_slave_1) entered blocking state [ 1084.860018][ T3069] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1084.868964][ T23] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1084.892802][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1084.898722][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1084.910946][ T23] usb 2-1: config 0 descriptor?? [ 1084.916714][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1084.951093][T15035] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 1084.960533][T15035] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 1084.970696][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1084.978984][T15035] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1084.988539][ T13] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1085.001858][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1085.010706][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26320, setting to 1024 [ 1085.022226][T15035] usb 3-1: config 250 has no interface number 0 [ 1085.029602][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1085.038324][T15035] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1085.050287][ T13] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1085.064608][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1085.073240][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1085.080906][T15035] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1085.091839][T15035] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1085.103262][T15035] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 1085.108851][T15881] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1085.124645][T15035] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1085.141138][T15881] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1085.150737][T15035] usb 3-1: config 250 interface 228 has no altsetting 0 [ 1085.164896][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1085.173253][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1085.183195][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1085.185942][ T13] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1085.193147][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1085.205829][ T13] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1085.208628][ T4281] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1085.220561][ T13] usb 5-1: Manufacturer: syz [ 1085.228870][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1085.250670][ T13] usb 5-1: config 0 descriptor?? [ 1085.301553][T16008] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 1085.308919][T15035] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1085.329146][T15035] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1085.341809][T15035] usb 3-1: Product: syz [ 1085.346569][T15035] usb 3-1: SerialNumber: syz [ 1085.390846][ T23] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 1085.413684][ T23] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 1085.417203][T15035] hub 3-1:250.228: bad descriptor, ignoring hub [ 1085.434412][T15035] hub: probe of 3-1:250.228 failed with error -5 [ 1085.435600][ T23] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.0005/input/input7 [ 1085.469500][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1085.477861][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1085.492525][T15881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1085.520190][ T23] cm6533_jd 0003:0D8C:0022.0005: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 1085.550869][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1085.579300][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1085.614245][ T4281] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1085.640841][T15035] usblp 3-1:250.228: usblp1: USB Bidirectional printer dev 50 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1085.641782][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1085.673977][ T4281] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1085.720207][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1085.728172][ T4281] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1085.746628][T15881] device veth0_vlan entered promiscuous mode [ 1085.752809][ T4281] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1085.764321][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1085.784508][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1085.785794][ T13] appleir 0003:05AC:8243.0006: unknown main item tag 0x0 [ 1085.793732][ T4281] usb 6-1: config 0 descriptor?? [ 1085.815998][T15881] device veth1_vlan entered promiscuous mode [ 1085.819656][ T13] appleir 0003:05AC:8243.0006: No inputs registered, leaving [ 1085.824877][ T4235] usb 2-1: USB disconnect, device number 79 [ 1085.878911][ T13] appleir 0003:05AC:8243.0006: hiddev2,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 1085.917653][T15881] device veth0_macvtap entered promiscuous mode [ 1085.978708][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1086.015317][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1086.024460][ T4233] usb 5-1: USB disconnect, device number 59 [ 1086.038476][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1086.064213][T15035] usb 3-1: USB disconnect, device number 50 [ 1086.071090][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1086.084532][T15035] usblp1: removed [ 1086.105510][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1086.127049][T15881] device veth1_macvtap entered promiscuous mode [ 1086.152044][T15881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1086.180441][T15881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1086.190497][T15881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1086.206133][T15881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1086.218841][T15881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1086.232365][T15881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1086.261252][T15881] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1086.281047][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1086.292242][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1086.302321][ T4281] cm6533_jd 0003:0D8C:0022.0007: unknown main item tag 0x0 [ 1086.323026][ T4281] cm6533_jd 0003:0D8C:0022.0007: unknown main item tag 0x0 [ 1086.331432][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1086.341994][ T4281] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0D8C:0022.0007/input/input8 [ 1086.356551][T15881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1086.378834][T15881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1086.394466][T15035] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1086.410723][ T4281] cm6533_jd 0003:0D8C:0022.0007: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 1086.413253][T15881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1086.453844][T15881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1086.465276][T16059] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3115'. [ 1086.483448][T15881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1086.496267][T15881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1086.515459][T15881] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1086.549648][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1086.581507][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1086.602981][ T13] usb 6-1: USB disconnect, device number 7 [ 1086.614706][T15881] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1086.634074][ T4281] Bluetooth: hci2: command 0x040f tx timeout [ 1086.654249][T15881] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1086.689434][T15881] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1086.698586][T15035] usb 3-1: Using ep0 maxpacket: 8 [ 1086.705106][T15881] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1086.729539][T16068] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1086.854214][T15035] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 1086.882980][T15035] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 1086.927658][T15035] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1086.963863][T15035] usb 3-1: config 250 has no interface number 0 [ 1086.984945][T15035] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1087.023202][T15035] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1087.062907][T16074] overlayfs: unrecognized mount option "verity=on" or missing value [ 1087.081829][T15035] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1087.138796][T15035] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 1087.199887][T15035] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1087.244018][T15035] usb 3-1: config 250 interface 228 has no altsetting 0 [ 1087.292771][ T4233] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1087.326478][ T4233] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1087.341440][T15035] usb 3-1: string descriptor 0 read error: -71 [ 1087.361710][T15035] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1087.385243][T15035] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1087.454091][T15035] usb 3-1: can't set config #250, error -71 [ 1087.508257][T15035] usb 3-1: USB disconnect, device number 51 [ 1087.564783][ T4366] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1087.598036][ T4366] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1087.640900][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1087.643873][ T4281] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 1087.674177][ T7616] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1087.674252][ T23] Bluetooth: hci1: command 0x0406 tx timeout [ 1087.687677][ T7616] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1087.708671][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1087.914039][T15035] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1088.034066][ T4281] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1088.059338][ T4281] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 1088.091294][ T4281] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 247, setting to 64 [ 1088.126771][ T4281] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1088.165562][T15035] usb 3-1: Using ep0 maxpacket: 8 [ 1088.304181][ T4281] usb 6-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 1088.313412][ T4281] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1088.325092][T15035] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1088.343554][T15035] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1088.353865][ T4281] usb 6-1: Product: syz [ 1088.358126][ T4281] usb 6-1: Manufacturer: syz [ 1088.362840][ T4281] usb 6-1: SerialNumber: syz [ 1088.385611][T15035] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1088.398901][ T4281] usb 6-1: config 0 descriptor?? [ 1088.415198][T16092] Cannot find set identified by id 0 to match [ 1088.419186][T15035] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1088.451806][T15035] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1088.454270][T16078] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1088.485199][T15035] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1088.511091][T15035] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1088.585432][T16097] VFS: Mount too revealing [ 1088.597165][T16097] overlayfs: failed to resolve './file2': -2 [ 1088.718637][ T13] Bluetooth: hci2: command 0x0419 tx timeout [ 1088.757917][T16078] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1088.816137][ T4281] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input9 [ 1088.827007][ T7] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1089.116616][ T23] usb 6-1: USB disconnect, device number 8 [ 1089.258944][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1089.278818][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1089.299078][ T7] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1089.313994][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1089.334888][ T7] usb 4-1: config 0 descriptor?? [ 1089.456392][ T4281] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1089.514093][T16107] usbtmc 3-1:16.0: simple usb_control_msg failed -32 [ 1089.523890][ T23] usb 3-1: USB disconnect, device number 52 [ 1089.713922][ T4281] usb 2-1: Using ep0 maxpacket: 8 [ 1089.820579][ T7] cm6533_jd 0003:0D8C:0022.0009: unknown main item tag 0x0 [ 1089.833994][ T4281] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 1089.839391][ T7] cm6533_jd 0003:0D8C:0022.0009: unknown main item tag 0x0 [ 1089.862802][ T4281] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 1089.878916][ T7] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0D8C:0022.0009/input/input10 [ 1089.883050][ T4281] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1089.930466][ T4281] usb 2-1: config 250 has no interface number 0 [ 1089.931574][ T7] cm6533_jd 0003:0D8C:0022.0009: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 1089.953905][ T4281] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1089.966004][ T4265] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 1089.984024][ T4281] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1090.035454][ T4281] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1090.108064][ T4281] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 1090.137058][ T7] usb 4-1: USB disconnect, device number 48 [ 1090.163904][ T4281] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1090.209871][ T4281] usb 2-1: config 250 interface 228 has no altsetting 0 [ 1090.232998][T16110] fido_id[16110]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1090.324339][ T4265] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1090.344573][ T4281] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1090.364629][ T4281] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1090.373041][ T4281] usb 2-1: Product: syz [ 1090.398041][ T4281] usb 2-1: SerialNumber: syz [ 1090.445092][ T4281] hub 2-1:250.228: bad descriptor, ignoring hub [ 1090.460879][ T4281] hub: probe of 2-1:250.228 failed with error -5 [ 1090.528269][T16122] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3137'. [ 1090.537886][ T4265] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1090.549431][ T4265] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1090.568209][ T4265] usb 6-1: Product: syz [ 1090.574163][ T4265] usb 6-1: Manufacturer: syz [ 1090.584114][ T4265] usb 6-1: SerialNumber: syz [ 1090.610042][ T4265] usb 6-1: config 0 descriptor?? [ 1090.634710][T16109] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1090.655943][ T4265] streamzap 6-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 1090.678385][ T13] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1090.686745][ T4281] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 80 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1090.783676][ T4203] Bluetooth: Wrong link type (-22) [ 1090.906238][ T4232] usb 6-1: USB disconnect, device number 9 [ 1090.943941][ T13] usb 5-1: Using ep0 maxpacket: 32 [ 1091.027807][T16137] comedi comedi0: Minor 2 could not be opened [ 1091.094757][ T13] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1091.110689][ T13] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1091.114149][T16139] Cannot find set identified by id 0 to match [ 1091.324057][ T13] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1091.343904][ T13] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1091.352280][ T13] usb 5-1: Product: syz [ 1091.357297][ T13] usb 5-1: Manufacturer: syz [ 1091.361922][ T13] usb 5-1: SerialNumber: syz [ 1091.378532][ T13] usb 5-1: config 0 descriptor?? [ 1091.424661][ T13] hub 5-1:0.0: bad descriptor, ignoring hub [ 1091.430648][ T13] hub: probe of 5-1:0.0 failed with error -5 [ 1091.539393][T16106] usb 2-1: reset high-speed USB device number 80 using dummy_hcd [ 1091.739512][T16162] xt_hashlimit: size too large, truncated to 1048576 [ 1091.793995][ T7] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1092.194695][ T7] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1092.212967][ T7] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1092.241000][ T7] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1092.265695][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1092.297076][ T7] usb 6-1: config 0 descriptor?? [ 1092.328541][T16168] VFS: Mount too revealing [ 1092.340455][T16168] overlayfs: failed to resolve './file2': -2 [ 1092.485227][ T4233] usb 5-1: USB disconnect, device number 60 [ 1092.526735][ T4281] usb 2-1: USB disconnect, device number 80 [ 1092.547993][ T4281] usblp0: removed [ 1092.703912][ T4265] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1092.791860][ T7] cm6533_jd 0003:0D8C:0022.000A: unknown main item tag 0x0 [ 1092.813542][ T7] cm6533_jd 0003:0D8C:0022.000A: unknown main item tag 0x0 [ 1092.838801][ T7] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0D8C:0022.000A/input/input11 [ 1092.892661][ T7] cm6533_jd 0003:0D8C:0022.000A: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 1092.954027][ T4265] usb 3-1: Using ep0 maxpacket: 8 [ 1093.043107][ T4235] usb 6-1: USB disconnect, device number 10 [ 1093.074117][ T4265] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1093.095575][ T4265] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1093.131030][ T4265] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1093.151342][ T4265] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1093.188854][ T4265] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1093.213918][ T4265] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1093.368933][ T7] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1093.383974][ T4232] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1093.515161][ T4265] usb 3-1: GET_CAPABILITIES returned 0 [ 1093.520878][ T4265] usbtmc 3-1:16.0: can't read capabilities [ 1093.745978][ T4265] usb 3-1: USB disconnect, device number 53 [ 1093.795406][T16183] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3159'. [ 1093.854268][ T4232] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1093.865506][ T7] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1093.893474][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26320, setting to 1024 [ 1093.905252][ T4232] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1093.924000][ T4232] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1093.933284][ T7] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1093.953894][ T4232] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1093.974666][ T4232] usb 5-1: config 0 descriptor?? [ 1094.074198][ T7] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1094.088057][ T7] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1094.108416][ T7] usb 2-1: Manufacturer: syz [ 1094.127748][ T7] usb 2-1: config 0 descriptor?? [ 1094.174169][T16176] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1094.512463][T16203] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3168'. [ 1094.579331][T16206] comedi: No check for data length of config insn id 1986356271 is implemented [ 1094.607581][T16206] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 1094.642487][T16206] comedi: Assuming n=65536 is correct [ 1094.650239][ T7] appleir 0003:05AC:8243.000B: unknown main item tag 0x0 [ 1094.664914][ T7] appleir 0003:05AC:8243.000B: No inputs registered, leaving [ 1094.689404][ T7] appleir 0003:05AC:8243.000B: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 1094.700873][ T4232] usbhid 5-1:0.0: can't add hid device: -71 [ 1094.707149][ T4232] usbhid: probe of 5-1:0.0 failed with error -71 [ 1094.722319][ T4232] usb 5-1: USB disconnect, device number 61 [ 1094.914116][ T4233] usb 3-1: new full-speed USB device number 54 using dummy_hcd [ 1094.955181][T15035] usb 2-1: USB disconnect, device number 81 [ 1095.037997][ T4369] Bluetooth: hci3: Frame reassembly failed (-84) [ 1095.053895][ T7] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1095.274217][ T4233] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1095.304021][ T7] usb 4-1: Using ep0 maxpacket: 8 [ 1095.424147][ T7] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1095.432425][ T7] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1095.445494][ T4233] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1095.454645][ T7] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1095.464540][ T4233] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.472559][ T4233] usb 3-1: Product: syz [ 1095.476827][ T7] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1095.493887][ T4233] usb 3-1: Manufacturer: syz [ 1095.498575][ T4233] usb 3-1: SerialNumber: syz [ 1095.503409][ T7] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1095.517688][ T7] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1095.527836][ T4233] usb 3-1: config 0 descriptor?? [ 1095.533627][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1095.545373][T16212] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1095.575797][ T4233] streamzap 3-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 1095.813943][ T7] usb 4-1: usb_control_msg returned -32 [ 1095.819674][ T7] usbtmc 4-1:16.0: can't read capabilities [ 1095.845472][ T4281] usb 3-1: USB disconnect, device number 54 [ 1096.474301][ T7] Bluetooth: hci4: command 0x0406 tx timeout [ 1096.539161][T16246] comedi: No check for data length of config insn id 1986356271 is implemented [ 1096.548462][T16246] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 1096.560106][T16246] comedi: Assuming n=65536 is correct [ 1096.664062][T16244] usbtmc 4-1:16.0: usb_control_msg returned -32 [ 1096.762443][ T4281] usb 4-1: USB disconnect, device number 49 [ 1097.114531][ T7] Bluetooth: hci3: command 0x1003 tx timeout [ 1097.122769][ T4203] Bluetooth: hci3: sending frame failed (-49) [ 1097.840801][T16263] binder: 16262:16263 ioctl c0306201 200000002580 returned -14 [ 1097.903674][ T4203] Bluetooth: hci4: unexpected event for opcode 0x0404 [ 1098.213918][ T4281] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1098.493208][T16231] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1098.624534][ T4281] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1098.643976][ T4281] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26320, setting to 1024 [ 1098.665541][ T4281] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1098.767821][T16277] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3197'. [ 1098.784109][ T4281] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1098.804408][ T4281] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1098.814269][ T4281] usb 3-1: Manufacturer: syz [ 1098.828562][ T4281] usb 3-1: config 0 descriptor?? [ 1098.867415][T16267] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1098.887820][ T4235] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 1099.193960][ T4233] Bluetooth: hci3: command 0x1001 tx timeout [ 1099.200119][ T7] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1099.207922][ T4203] Bluetooth: hci3: sending frame failed (-49) [ 1099.241901][T16293] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1099.261107][T16293] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1099.304783][ T4235] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1099.335931][ T4281] appleir 0003:05AC:8243.000C: unknown main item tag 0x0 [ 1099.344251][ T4281] appleir 0003:05AC:8243.000C: No inputs registered, leaving [ 1099.365255][ T4281] appleir 0003:05AC:8243.000C: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 1099.456656][ T7] usb 5-1: Using ep0 maxpacket: 8 [ 1099.515757][ T4235] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1099.524959][ T4235] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1099.533052][ T4235] usb 4-1: Product: syz [ 1099.544039][ T4235] usb 4-1: Manufacturer: syz [ 1099.548677][ T4235] usb 4-1: SerialNumber: syz [ 1099.565495][ T4235] usb 4-1: config 0 descriptor?? [ 1099.576552][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1099.591099][ T7] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1099.600713][T16269] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1099.613965][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1099.637034][ T7] usb 5-1: config 0 descriptor?? [ 1099.647254][ T4235] streamzap 4-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 1099.676905][ T4235] usb 3-1: USB disconnect, device number 55 [ 1099.898762][ T7] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1099.904539][T15494] usb 4-1: USB disconnect, device number 50 [ 1100.222564][T16301] comedi comedi0: Minor 2 could not be opened [ 1100.794022][ T4235] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1101.158281][ T4281] usb 5-1: USB disconnect, device number 62 [ 1101.214945][ T4235] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1101.232556][ T4235] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1101.253491][ T4235] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1101.273181][ T4235] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1101.298577][T15494] Bluetooth: hci3: command 0x1009 tx timeout [ 1101.384066][ T4235] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1101.397630][ T4235] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1101.414681][ T4235] usb 4-1: Manufacturer: syz [ 1101.443911][ T4235] usb 4-1: config 0 descriptor?? [ 1101.930538][ T4235] appleir 0003:05AC:8243.000D: unknown main item tag 0x0 [ 1101.944219][ T4235] appleir 0003:05AC:8243.000D: No inputs registered, leaving [ 1101.976809][ T4235] appleir 0003:05AC:8243.000D: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 1102.313898][ T4281] Bluetooth: hci0: command 0x2021 tx timeout [ 1102.471351][ T4281] usb 4-1: USB disconnect, device number 51 [ 1103.026649][T16326] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3217'. [ 1103.129994][T16332] [ 1103.132372][T16332] ====================================================== [ 1103.139401][T16332] WARNING: possible circular locking dependency detected [ 1103.146429][T16332] syzkaller #0 Not tainted [ 1103.150858][T16332] ------------------------------------------------------ [ 1103.157880][T16332] syz.1.3218/16332 is trying to acquire lock: [ 1103.163961][T16332] ffff888058fe5028 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210 [ 1103.175246][T16332] [ 1103.175246][T16332] but task is already holding lock: [ 1103.182623][T16332] ffffffff8d6d3c28 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x1ae/0x560 [ 1103.192417][T16332] [ 1103.192417][T16332] which lock already depends on the new lock. [ 1103.192417][T16332] [ 1103.202836][T16332] [ 1103.202836][T16332] the existing dependency chain (in reverse order) is: [ 1103.211859][T16332] [ 1103.211859][T16332] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 1103.219866][T16332] __mutex_lock_common+0x1e5/0x2400 [ 1103.225716][T16332] mutex_lock_nested+0x17/0x20 [ 1103.231015][T16332] rfkill_register+0x2f/0x970 [ 1103.236232][T16332] hci_register_dev+0x459/0x980 [ 1103.241685][T16332] vhci_create_device+0x32e/0x5c0 [ 1103.248034][T16332] vhci_write+0x389/0x440 [ 1103.252894][T16332] vfs_write+0x748/0xd70 [ 1103.257729][T16332] ksys_write+0x153/0x260 [ 1103.262592][T16332] do_syscall_64+0x4c/0xa0 [ 1103.267575][T16332] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1103.274003][T16332] [ 1103.274003][T16332] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 1103.281838][T16332] __mutex_lock_common+0x1e5/0x2400 [ 1103.287584][T16332] mutex_lock_nested+0x17/0x20 [ 1103.292879][T16332] vhci_send_frame+0x88/0x100 [ 1103.298172][T16332] hci_send_frame+0x1a9/0x2e0 [ 1103.303384][T16332] hci_tx_work+0x9b5/0x16d0 [ 1103.308418][T16332] process_one_work+0x867/0xff0 [ 1103.313802][T16332] worker_thread+0xad7/0x12a0 [ 1103.319011][T16332] kthread+0x42e/0x520 [ 1103.323653][T16332] ret_from_fork+0x1f/0x30 [ 1103.328622][T16332] [ 1103.328622][T16332] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 1103.337847][T16332] __flush_work+0x116/0x210 [ 1103.342889][T16332] hci_dev_do_close+0x201/0x1020 [ 1103.348360][T16332] hci_unregister_dev+0x2eb/0x590 [ 1103.353921][T16332] vhci_release+0x73/0xc0 [ 1103.358784][T16332] __fput+0x212/0x8c0 [ 1103.363314][T16332] task_work_run+0x125/0x1a0 [ 1103.368442][T16332] do_exit+0x635/0x2110 [ 1103.373276][T16332] do_group_exit+0x12c/0x2f0 [ 1103.378405][T16332] get_signal+0x7eb/0x12e0 [ 1103.383390][T16332] arch_do_signal_or_restart+0xe6/0x12a0 [ 1103.389603][T16332] exit_to_user_mode_loop+0x9e/0x130 [ 1103.395465][T16332] exit_to_user_mode_prepare+0xee/0x180 [ 1103.401540][T16332] syscall_exit_to_user_mode+0x16/0x40 [ 1103.407568][T16332] do_syscall_64+0x58/0xa0 [ 1103.412515][T16332] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1103.419202][T16332] [ 1103.419202][T16332] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 1103.426877][T16332] __mutex_lock_common+0x1e5/0x2400 [ 1103.432633][T16332] mutex_lock_nested+0x17/0x20 [ 1103.433880][ T4281] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1103.437933][T16332] bg_scan_update+0x44/0x3b0 [ 1103.450657][T16332] process_one_work+0x867/0xff0 [ 1103.456158][T16332] worker_thread+0xad7/0x12a0 [ 1103.461379][T16332] kthread+0x42e/0x520 [ 1103.465979][T16332] ret_from_fork+0x1f/0x30 [ 1103.470941][T16332] [ 1103.470941][T16332] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 1103.480775][T16332] __lock_acquire+0x2c66/0x7b50 [ 1103.486237][T16332] lock_acquire+0x19e/0x400 [ 1103.491278][T16332] __flush_work+0x116/0x210 [ 1103.496300][T16332] __cancel_work_timer+0x3f4/0x560 [ 1103.501942][T16332] hci_request_cancel_all+0xcc/0x300 [ 1103.507862][T16332] hci_dev_do_close+0x4e/0x1020 [ 1103.513753][T16332] hci_rfkill_set_block+0x101/0x180 [ 1103.519489][T16332] rfkill_set_block+0x1c1/0x3c0 [ 1103.524862][T16332] rfkill_fop_write+0x453/0x560 [ 1103.530233][T16332] vfs_write+0x304/0xd70 [ 1103.535022][T16332] ksys_write+0x153/0x260 [ 1103.539882][T16332] do_syscall_64+0x4c/0xa0 [ 1103.544811][T16332] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1103.551239][T16332] [ 1103.551239][T16332] other info that might help us debug this: [ 1103.551239][T16332] [ 1103.561544][T16332] Chain exists of: [ 1103.561544][T16332] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 1103.561544][T16332] [ 1103.577278][T16332] Possible unsafe locking scenario: [ 1103.577278][T16332] [ 1103.584725][T16332] CPU0 CPU1 [ 1103.590132][T16332] ---- ---- [ 1103.595487][T16332] lock(rfkill_global_mutex); [ 1103.600244][T16332] lock(&data->open_mutex); [ 1103.607354][T16332] lock(rfkill_global_mutex); [ 1103.614638][T16332] lock((work_completion)(&hdev->bg_scan_update)); [ 1103.621218][T16332] [ 1103.621218][T16332] *** DEADLOCK *** [ 1103.621218][T16332] [ 1103.629350][T16332] 1 lock held by syz.1.3218/16332: [ 1103.634451][T16332] #0: ffffffff8d6d3c28 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x1ae/0x560 [ 1103.644580][T16332] [ 1103.644580][T16332] stack backtrace: [ 1103.650459][T16332] CPU: 0 PID: 16332 Comm: syz.1.3218 Not tainted syzkaller #0 [ 1103.657918][T16332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1103.668045][T16332] Call Trace: [ 1103.671432][T16332] [ 1103.674405][T16332] dump_stack_lvl+0x188/0x250 [ 1103.679103][T16332] ? load_image+0x410/0x410 [ 1103.683677][T16332] ? show_regs_print_info+0x20/0x20 [ 1103.688979][T16332] ? print_circular_bug+0x12b/0x1a0 [ 1103.694194][T16332] check_noncircular+0x296/0x330 [ 1103.699127][T16332] ? look_up_lock_class+0x71/0x110 [ 1103.704246][T16332] ? add_chain_block+0x9b0/0x9b0 [ 1103.709186][T16332] ? lockdep_lock+0xf1/0x1f0 [ 1103.713797][T16332] ? __lock_acquire+0x1305/0x7b50 [ 1103.718847][T16332] ? mark_lock+0x94/0x320 [ 1103.723181][T16332] ? _find_first_zero_bit+0xd1/0xf0 [ 1103.728425][T16332] __lock_acquire+0x2c66/0x7b50 [ 1103.733370][T16332] ? verify_lock_unused+0x140/0x140 [ 1103.738561][T16332] ? verify_lock_unused+0x140/0x140 [ 1103.743762][T16332] lock_acquire+0x19e/0x400 [ 1103.748266][T16332] ? __flush_work+0xfa/0x210 [ 1103.752933][T16332] ? __lock_acquire+0x7b50/0x7b50 [ 1103.757947][T16332] ? read_lock_is_recursive+0x10/0x10 [ 1103.763323][T16332] ? start_flush_work+0x784/0x830 [ 1103.768337][T16332] ? __lock_acquire+0x13dc/0x7b50 [ 1103.773351][T16332] __flush_work+0x116/0x210 [ 1103.777850][T16332] ? __flush_work+0xfa/0x210 [ 1103.782444][T16332] ? flush_work+0x20/0x20 [ 1103.786763][T16332] ? try_to_grab_pending+0xfb/0x820 [ 1103.791970][T16332] ? mark_lock+0x94/0x320 [ 1103.796301][T16332] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1103.802290][T16332] ? lock_chain_count+0x20/0x20 [ 1103.807136][T16332] ? mark_lock+0x94/0x320 [ 1103.811469][T16332] ? __cancel_work_timer+0x36a/0x560 [ 1103.816754][T16332] __cancel_work_timer+0x3f4/0x560 [ 1103.821948][T16332] ? cancel_work_sync+0x20/0x20 [ 1103.826844][T16332] ? __cancel_work+0x1f9/0x2e0 [ 1103.831603][T16332] ? lockdep_hardirqs_on+0x94/0x140 [ 1103.836794][T16332] ? __cancel_work+0x27b/0x2e0 [ 1103.841549][T16332] ? cancel_work+0x20/0x20 [ 1103.845963][T16332] hci_request_cancel_all+0xcc/0x300 [ 1103.851241][T16332] hci_dev_do_close+0x4e/0x1020 [ 1103.856084][T16332] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1103.861975][T16332] ? _raw_spin_unlock+0x40/0x40 [ 1103.866843][T16332] hci_rfkill_set_block+0x101/0x180 [ 1103.872031][T16332] ? rcu_lock_release+0x20/0x20 [ 1103.876868][T16332] rfkill_set_block+0x1c1/0x3c0 [ 1103.881725][T16332] rfkill_fop_write+0x453/0x560 [ 1103.886570][T16332] ? rfkill_fop_read+0x560/0x560 [ 1103.891512][T16332] ? common_file_perm+0xf0/0x1c0 [ 1103.896500][T16332] ? fsnotify_perm+0x5d/0x560 [ 1103.901218][T16332] ? security_file_permission+0x75/0xa0 [ 1103.906752][T16332] ? rfkill_fop_read+0x560/0x560 [ 1103.911773][T16332] vfs_write+0x304/0xd70 [ 1103.916029][T16332] ? file_end_write+0x250/0x250 [ 1103.920868][T16332] ? __fget_files+0x402/0x470 [ 1103.925552][T16332] ? __fdget_pos+0x1e2/0x370 [ 1103.930142][T16332] ? ksys_write+0x70/0x260 [ 1103.934554][T16332] ksys_write+0x153/0x260 [ 1103.938900][T16332] ? __ia32_sys_read+0x80/0x80 [ 1103.943663][T16332] ? lockdep_hardirqs_on+0x94/0x140 [ 1103.948883][T16332] do_syscall_64+0x4c/0xa0 [ 1103.953318][T16332] ? clear_bhb_loop+0x30/0x80 [ 1103.958043][T16332] ? clear_bhb_loop+0x30/0x80 [ 1103.962744][T16332] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1103.968666][T16332] RIP: 0033:0x7fa71006fe59 [ 1103.973130][T16332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1103.992875][T16332] RSP: 002b:00007fa70e2c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1104.001463][T16332] RAX: ffffffffffffffda RBX: 00007fa7102f7fa0 RCX: 00007fa71006fe59 [ 1104.009523][T16332] RDX: 0000000000000008 RSI: 00002000000000c0 RDI: 0000000000000004 [ 1104.017524][T16332] RBP: 00007fa710105e6f R08: 0000000000000000 R09: 0000000000000000 [ 1104.025513][T16332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1104.033499][T16332] R13: 00007fa7102f8038 R14: 00007fa7102f7fa0 R15: 00007ffd3d4cd998 [ 1104.041472][T16332] [ 1104.044570][ C0] vkms_vblank_simulate: vblank timer overrun [ 1104.074028][ T4281] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1104.087473][ T4281] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26320, setting to 1024 [ 1104.099033][ T4281] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1104.193934][ T4281] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1104.203064][ T4281] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1104.211275][ T4281] usb 4-1: Manufacturer: syz [ 1104.216798][ T4281] usb 4-1: config 0 descriptor?? [ 1104.244055][T16330] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1104.694889][ T4281] appleir 0003:05AC:8243.000E: unknown main item tag 0x0 [ 1104.702128][ T4281] appleir 0003:05AC:8243.000E: No inputs registered, leaving [ 1104.711538][ T4281] appleir 0003:05AC:8243.000E: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 1104.994369][ T4233] usb 4-1: USB disconnect, device number 52