last executing test programs: 6.017394596s ago: executing program 0 (id=981): r0 = io_uring_setup(0x1ddd, &(0x7f0000000440)={0x0, 0x40000000, 0x0, 0x1, 0x8}) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000740)={&(0x7f0000001000)={[{0x0}]}, 0x1}, 0x1) io_uring_register$IORING_UNREGISTER_PBUF_RING(r0, 0x17, &(0x7f0000000300)={0x0}, 0x1) 5.854603915s ago: executing program 1 (id=983): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x92, 0x5, 0x6, 0x4}, 0x3a, [0x8000, 0x2c95a, 0xf, 0x8, 0x80, 0x1, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x8, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x5, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0x800, 0x4, 0x4, 0x7, 0x3, 0x8, 0x4c75, 0x80000000, 0x2, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x40017, 0x0, 0x7, 0x5, 0x3e, 0x3, 0x6, 0xffff, 0x0, 0x6, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0x40c8, 0xf9, 0xe, 0x82c0, 0x6c7, 0x8, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x5, 0xea4, 0x0, 0xb94, 0x7, 0x7fff, 0x1c000, 0x3fe, 0x403, 0x200006, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x2d, 0x4e2, 0x5, 0x4, 0xb, 0x2000004, 0x9, 0x80000001, 0x9, 0x6, 0x47, 0x8200, 0x1, 0xfe000000, 0x8, 0xffffffff, 0x4, 0x4, 0x3, 0x50, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x407, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0xa2, 0x8000, 0x0, 0x5, 0xb, 0x5, 0x5, 0x5, 0x4000000, 0x1eb, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0xfffffffe, 0x3, 0x20000008, 0x4, 0x6d01, 0x2, 0x38, 0x800083, 0x200, 0x80, 0x3, 0x8000004, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x4005, 0x6, 0x8, 0xca, 0x1ff, 0x3, 0x7ff, 0xbe, 0x4, 0x7, 0xe, 0x0, 0x5, 0x1c, 0x8, 0x4, 0x8, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x2, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x9, 0x1, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xffffffd9, 0xfffff000, 0x10010000, 0x0, 0x7e, 0x9, 0x9602, 0x40007, 0xaf, 0x5, 0x6, 0x227, 0x2, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf3c, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x1, 0xb1e, 0xd7, 0x201, 0xffff3441, 0x4]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f0000002880)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 5.854329742s ago: executing program 0 (id=984): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009c323f08a5040330b244010203010902120001000200000904"], 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000200)={0x14, &(0x7f0000000080)={0x0, 0x8, 0x100, {0x100, 0x21, "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"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2801}}}, &(0x7f0000000400)={0x2c, &(0x7f0000000240)={0x0, 0x30, 0x94, "286b86649154d4aa86f25870c160dc1df790a54150ae002faa8341b7eaf24c44b03d26a45a05ec3ab688a03a515b117abb48a370ea0257acc49d716d3ad6acddb4e6a7d3bcdb2785068082c880d60c95724f9f25d9e81c2b9ec5d967e95f6191feb749ed6d6556520c75d2d6e730126ce607c5e867d4a796c065cea7b02cafe34d468e1559635d881a62b8354a8cfc4af28e8f14"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000380)={0xc0, 0x5, 0x1, '='}, &(0x7f00000003c0)={0x40, 0x5, 0x1, "d6"}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)={0x60, 0x0, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/4094, 0xffe}], &(0x7f0000001540)=[0x0, 0x0, 0x4]}, 0x20) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)={{0x0, 0x2, 0x5, 0x0, 0x5}}) 5.814951976s ago: executing program 1 (id=985): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000004800)={0x0, 0x0, &(0x7f00000047c0)={&(0x7f0000003340)={0x14, 0x19, 0x1, 0x70bd2b, 0x25dfdbfb, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) 5.685904233s ago: executing program 1 (id=986): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) 5.455547592s ago: executing program 3 (id=988): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000e00)={'pimreg0\x00', 0x1401}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0) 5.246260206s ago: executing program 1 (id=989): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x7ffffffc, "5660359c3245d1c42317afadfd48ed5100000000000000608a00", 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000280)) ppoll(&(0x7f0000000040)=[{r1}, {r1, 0x2004}], 0x2, 0x0, 0x0, 0x0) 5.030084314s ago: executing program 3 (id=991): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x48) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, 0x0, 0x0, 0x4003) getpriority(0x2, 0x0) 4.162791891s ago: executing program 1 (id=997): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ppoll(0x0, 0x0, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000180)={[0xffffffffffffff68]}, 0x8) 3.898826465s ago: executing program 2 (id=1000): r0 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d001d"], 0x1c}], 0x1}, 0x0) 3.636288309s ago: executing program 4 (id=1001): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = syz_open_dev$usbfs(0x0, 0x77, 0x101301) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r8, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x30, r4, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x6, 0xbd, [0x1]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x84) ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x321, 0xffff, 0x4c, 0x101, 0x0}) 3.536289675s ago: executing program 2 (id=1002): r0 = socket(0x10, 0x2, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c00000010000d0400"/20, @ANYRES32=r3, @ANYBLOB="00000000002501000a000100aaaaaaaaaa240000"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0xc000) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r5, &(0x7f0000000000), 0xfffffecc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x40) sendmsg$nl_route_sched(r10, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x84, 0x32, 0x12f, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x2}}}}]}]}, 0x84}}, 0x0) splice(r4, 0x0, r6, 0x0, 0x4ffe6, 0x0) write(r0, 0x0, 0x0) 3.100277685s ago: executing program 0 (id=1003): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socket$nl_netfilter(0x10, 0x3, 0xc) socket$tipc(0x1e, 0x2, 0x0) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x8801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) shmdt(0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14, r3, 0x301, 0x70bd29, 0x25dfdbfc, {0x24}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) fsopen(0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) 1.988185319s ago: executing program 3 (id=1004): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="50000000100001042dbd7000ffdbdf2500000000", @ANYRES32=r3, @ANYBLOB="00000000000000003000128008000100736974002400028006001000020000"], 0x50}}, 0x0) 1.870749529s ago: executing program 4 (id=1005): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) 1.766493821s ago: executing program 2 (id=1006): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x5, 0x5}}}}]}, 0x44}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.70191462s ago: executing program 3 (id=1007): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newtfilter={0x104, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xd8, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x6, 0xef, 0x8, 0x8, 0x5, 0x9, 0x7, 0x0, [{0x1001000, 0x4, 0x401, 0x6}, {0x6, 0x7, 0x1008, 0x5}, {0xfffffff9, 0x43, 0x7ffd, 0x6}, {0x3, 0x40, 0x51, 0x3ff}, {0x5, 0xb, 0x8, 0x42}, {0x6, 0x4, 0x8, 0x8}, {0x8001, 0x0, 0xfffffffc, 0x8001}, {0x1, 0x1800004, 0xa525}]}}, @TCA_U32_POLICE={0x40, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0x28bf, 0x20000000, 0xebb, 0x1, 0x2, {0x3, 0x2, 0x3, 0x2, 0x6, 0x8}, {0xf3, 0x1, 0xfffb, 0x6f4, 0x6, 0x6}, 0x4, 0x0, 0xfafd}}]}]}}]}, 0x104}, 0x1, 0x0, 0x0, 0x80}, 0xc040) 1.603560057s ago: executing program 4 (id=1008): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x92, 0x5, 0x6, 0x4}, 0x3a, [0x8000, 0x2c95a, 0xf, 0x8, 0x80, 0x1, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x8, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x5, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0x800, 0x4, 0x4, 0x7, 0x3, 0x8, 0x4c75, 0x80000000, 0x2, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x40017, 0x0, 0x7, 0x5, 0x3e, 0x3, 0x6, 0xffff, 0x0, 0x6, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0x40c8, 0xf9, 0xe, 0x82c0, 0x6c7, 0x8, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x5, 0xea4, 0x0, 0xb94, 0x7, 0x7fff, 0x1c000, 0x3fe, 0x403, 0x200006, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x2d, 0x4e2, 0x5, 0x4, 0xb, 0x2000004, 0x9, 0x80000001, 0x9, 0x6, 0x47, 0x8200, 0x1, 0xfe000000, 0x8, 0xffffffff, 0x4, 0x4, 0x3, 0x50, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x407, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0xa2, 0x8000, 0x0, 0x5, 0xb, 0x5, 0x5, 0x5, 0x4000000, 0x1eb, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0xfffffffe, 0x3, 0x20000008, 0x4, 0x6d01, 0x2, 0x38, 0x800083, 0x200, 0x80, 0x3, 0x8000004, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x4005, 0x6, 0x8, 0xca, 0x1ff, 0x3, 0x7ff, 0xbe, 0x4, 0x7, 0xe, 0x0, 0x5, 0x1c, 0x8, 0x4, 0x8, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x2, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x9, 0x1, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xffffffd9, 0xfffff000, 0x10010000, 0x0, 0x7e, 0x9, 0x9602, 0x40007, 0xaf, 0x5, 0x6, 0x227, 0x2, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf3c, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x1, 0xb1e, 0xd7, 0x201, 0xffff3441, 0x4]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f0000002880)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1.362683108s ago: executing program 3 (id=1009): bpf$PROG_LOAD(0x5, 0x0, 0x0) io_setup(0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') eventfd2(0x9, 0x80801) 1.25943405s ago: executing program 3 (id=1010): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x2, @remote}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x191c) 1.230673065s ago: executing program 2 (id=1011): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000040)='.\x00', 0x449) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') fchdir(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x52) getdents64(r3, 0x0, 0x31) 976.561964ms ago: executing program 0 (id=1012): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='veth1_virt_wifi\x00', 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x6e20, @broadcast}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000500)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 951.214396ms ago: executing program 2 (id=1013): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0xfffffffd, {{@in6=@remote, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10, 0x26b9ffe36856e205}, {0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x1, 0xfffffffffffffffc}, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}}, 0xb8}}, 0x0) syz_emit_ethernet(0xd2, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6085a900009c8800fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e000e22009c90"], 0x0) 836.500653ms ago: executing program 0 (id=1014): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x2e, 0x31, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff2, 0xffff}, {0x0, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4) 770.747653ms ago: executing program 2 (id=1015): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4001c00) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r4 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000140)={r4, 0x1, 0x0, 0x4000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000007, 0x11, r5, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) 727.348585ms ago: executing program 1 (id=1016): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f00090581", @ANYRES32], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0x501c4814, &(0x7f00000000c0)={0x1, 0x3, 0x0, 0xe8b8, 0x0, 0xc}) 631.406509ms ago: executing program 0 (id=1017): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="042f01e0"], 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 631.01682ms ago: executing program 4 (id=1018): ioperm(0x0, 0x9, 0x5) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, r0, 0x2, 0x0) 174.827128ms ago: executing program 4 (id=1019): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000009c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000040)={0x38, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "ff1e72394a014dbe071b9b0ee2"}, @NL80211_ATTR_KEY_TYPE={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x40044}, 0x20008000) 0s ago: executing program 4 (id=1020): r0 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.159' (ED25519) to the list of known hosts. [ 68.694835][ T5854] cgroup: Unknown subsys name 'net' [ 68.801682][ T5854] cgroup: Unknown subsys name 'cpuset' [ 68.810162][ T5854] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 70.199946][ T5854] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.421549][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.427949][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.565044][ T5866] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.579018][ T5866] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.588512][ T5866] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.629265][ T5868] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.636704][ T5868] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 72.658781][ T5875] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.666867][ T5875] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 72.675561][ T5875] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.683658][ T5875] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.691879][ T5875] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 72.699319][ T5875] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.707938][ T5875] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.728546][ T5878] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 72.736784][ T5878] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 72.744869][ T5875] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 72.752991][ T5878] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.759037][ T5875] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.761542][ T5878] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 72.775120][ T5878] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.783315][ T5878] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 72.785216][ T5187] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.801508][ T5187] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.818408][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.831732][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.847594][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 73.557037][ T5881] chnl_net:caif_netlink_parms(): no params data found [ 73.599161][ T5886] chnl_net:caif_netlink_parms(): no params data found [ 73.651077][ T5882] chnl_net:caif_netlink_parms(): no params data found [ 73.723831][ T5884] chnl_net:caif_netlink_parms(): no params data found [ 73.813058][ T5885] chnl_net:caif_netlink_parms(): no params data found [ 73.982645][ T5881] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.990209][ T5881] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.997620][ T5881] bridge_slave_0: entered allmulticast mode [ 74.005037][ T5881] bridge_slave_0: entered promiscuous mode [ 74.041951][ T5884] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.049205][ T5884] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.057257][ T5884] bridge_slave_0: entered allmulticast mode [ 74.065894][ T5884] bridge_slave_0: entered promiscuous mode [ 74.074750][ T5881] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.081993][ T5881] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.089916][ T5881] bridge_slave_1: entered allmulticast mode [ 74.096890][ T5881] bridge_slave_1: entered promiscuous mode [ 74.104051][ T5886] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.111485][ T5886] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.118860][ T5886] bridge_slave_0: entered allmulticast mode [ 74.125985][ T5886] bridge_slave_0: entered promiscuous mode [ 74.133199][ T5882] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.140644][ T5882] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.147850][ T5882] bridge_slave_0: entered allmulticast mode [ 74.155217][ T5882] bridge_slave_0: entered promiscuous mode [ 74.172212][ T5884] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.179460][ T5884] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.186798][ T5884] bridge_slave_1: entered allmulticast mode [ 74.194403][ T5884] bridge_slave_1: entered promiscuous mode [ 74.225953][ T5886] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.233330][ T5886] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.240645][ T5886] bridge_slave_1: entered allmulticast mode [ 74.247604][ T5886] bridge_slave_1: entered promiscuous mode [ 74.254683][ T5882] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.262984][ T5882] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.270574][ T5882] bridge_slave_1: entered allmulticast mode [ 74.277974][ T5882] bridge_slave_1: entered promiscuous mode [ 74.366922][ T5882] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.380974][ T5882] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.405463][ T5884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.418691][ T5884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.431260][ T5881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.466452][ T5885] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.475065][ T5885] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.482396][ T5885] bridge_slave_0: entered allmulticast mode [ 74.490960][ T5885] bridge_slave_0: entered promiscuous mode [ 74.526969][ T5881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.539095][ T5886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.561166][ T5885] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.568410][ T5885] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.575702][ T5885] bridge_slave_1: entered allmulticast mode [ 74.583262][ T5885] bridge_slave_1: entered promiscuous mode [ 74.591769][ T5884] team0: Port device team_slave_0 added [ 74.627583][ T5886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.639895][ T5882] team0: Port device team_slave_0 added [ 74.647437][ T5884] team0: Port device team_slave_1 added [ 74.682319][ T5881] team0: Port device team_slave_0 added [ 74.705840][ T5882] team0: Port device team_slave_1 added [ 74.727295][ T5885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.741351][ T5885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.752398][ T5881] team0: Port device team_slave_1 added [ 74.783064][ T5870] Bluetooth: hci0: command tx timeout [ 74.845920][ T5886] team0: Port device team_slave_0 added [ 74.858574][ T5870] Bluetooth: hci1: command tx timeout [ 74.858846][ T51] Bluetooth: hci2: command tx timeout [ 74.864304][ T5870] Bluetooth: hci4: command tx timeout [ 74.882520][ T5884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.891429][ T5884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.917816][ T5884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.938963][ T5870] Bluetooth: hci3: command tx timeout [ 74.946463][ T5881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.953888][ T5881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.979947][ T5881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.993046][ T5886] team0: Port device team_slave_1 added [ 75.015559][ T5882] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.023195][ T5882] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.049328][ T5882] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.061600][ T5884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.068652][ T5884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.094830][ T5884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.116215][ T5885] team0: Port device team_slave_0 added [ 75.122954][ T5881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.130268][ T5881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.156507][ T5881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.179997][ T5882] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.187056][ T5882] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.213400][ T5882] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.235675][ T5885] team0: Port device team_slave_1 added [ 75.252827][ T5886] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.260234][ T5886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.286779][ T5886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.375050][ T5886] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.382085][ T5886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.408612][ T5886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.435625][ T5884] hsr_slave_0: entered promiscuous mode [ 75.442302][ T5884] hsr_slave_1: entered promiscuous mode [ 75.480279][ T5881] hsr_slave_0: entered promiscuous mode [ 75.486531][ T5881] hsr_slave_1: entered promiscuous mode [ 75.492893][ T5881] debugfs: 'hsr0' already exists in 'hsr' [ 75.498729][ T5881] Cannot create hsr debugfs directory [ 75.539538][ T5885] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.546519][ T5885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.572968][ T5885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.585914][ T5885] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.593007][ T5885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.619407][ T5885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.671596][ T5882] hsr_slave_0: entered promiscuous mode [ 75.677887][ T5882] hsr_slave_1: entered promiscuous mode [ 75.684257][ T5882] debugfs: 'hsr0' already exists in 'hsr' [ 75.690103][ T5882] Cannot create hsr debugfs directory [ 75.725317][ T5886] hsr_slave_0: entered promiscuous mode [ 75.732263][ T5886] hsr_slave_1: entered promiscuous mode [ 75.738702][ T5886] debugfs: 'hsr0' already exists in 'hsr' [ 75.744565][ T5886] Cannot create hsr debugfs directory [ 75.799488][ T5885] hsr_slave_0: entered promiscuous mode [ 75.805728][ T5885] hsr_slave_1: entered promiscuous mode [ 75.812508][ T5885] debugfs: 'hsr0' already exists in 'hsr' [ 75.819452][ T5885] Cannot create hsr debugfs directory [ 76.396414][ T5881] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 76.410013][ T5881] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 76.432631][ T5881] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 76.452188][ T5881] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 76.513986][ T5886] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 76.528488][ T5886] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 76.543666][ T5886] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 76.570173][ T5886] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 76.646078][ T5884] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 76.660508][ T5884] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 76.693324][ T5884] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 76.706938][ T5884] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 76.833259][ T5882] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.844269][ T5882] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.857250][ T5882] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.859301][ T5870] Bluetooth: hci0: command tx timeout [ 76.891172][ T5882] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.939204][ T5870] Bluetooth: hci4: command tx timeout [ 76.949550][ T5870] Bluetooth: hci2: command tx timeout [ 76.950714][ T51] Bluetooth: hci1: command tx timeout [ 76.975679][ T5885] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 76.997901][ T5881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.011517][ T5885] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 77.018699][ T51] Bluetooth: hci3: command tx timeout [ 77.039768][ T5886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.057497][ T5885] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 77.067904][ T5885] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 77.135604][ T5886] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.155648][ T5881] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.182026][ T999] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.189412][ T999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.203459][ T999] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.210589][ T999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.222731][ T999] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.229856][ T999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.249566][ T5884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.263376][ T3028] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.270585][ T3028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.365161][ T5884] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.381173][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.388413][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.445563][ T3565] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.452767][ T3565] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.571737][ T5885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.584229][ T5882] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.649230][ T5885] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.664747][ T5882] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.690344][ T3028] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.697496][ T3028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.707816][ T3028] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.715287][ T3028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.725249][ T3028] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.732490][ T3028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.747394][ T5881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.768648][ T3028] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.776151][ T3028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.795239][ T5886] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.806840][ T5884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.973954][ T5886] veth0_vlan: entered promiscuous mode [ 78.014757][ T5881] veth0_vlan: entered promiscuous mode [ 78.036067][ T5884] veth0_vlan: entered promiscuous mode [ 78.072536][ T5886] veth1_vlan: entered promiscuous mode [ 78.083595][ T5881] veth1_vlan: entered promiscuous mode [ 78.094774][ T5882] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.104782][ T5884] veth1_vlan: entered promiscuous mode [ 78.166759][ T5885] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.224044][ T5884] veth0_macvtap: entered promiscuous mode [ 78.242317][ T5886] veth0_macvtap: entered promiscuous mode [ 78.251765][ T5881] veth0_macvtap: entered promiscuous mode [ 78.268041][ T5884] veth1_macvtap: entered promiscuous mode [ 78.281493][ T5881] veth1_macvtap: entered promiscuous mode [ 78.292262][ T5882] veth0_vlan: entered promiscuous mode [ 78.304261][ T5886] veth1_macvtap: entered promiscuous mode [ 78.345862][ T5882] veth1_vlan: entered promiscuous mode [ 78.360689][ T5884] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.390252][ T5884] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.400437][ T5881] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.423579][ T5881] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.436146][ T5886] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.459974][ T5886] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.474806][ T999] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.486958][ T999] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.501999][ T5885] veth0_vlan: entered promiscuous mode [ 78.517963][ T999] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.526946][ T999] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.553307][ T999] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.574155][ T999] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.583298][ T999] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.593695][ T5885] veth1_vlan: entered promiscuous mode [ 78.615549][ T999] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.626054][ T999] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.647286][ T999] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.656938][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.684861][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.709520][ T5882] veth0_macvtap: entered promiscuous mode [ 78.744999][ T5882] veth1_macvtap: entered promiscuous mode [ 78.796928][ T3565] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.806458][ T3565] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.833029][ T5882] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.854115][ T5882] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.893984][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.914640][ T5885] veth0_macvtap: entered promiscuous mode [ 78.932968][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.942277][ T51] Bluetooth: hci0: command tx timeout [ 78.950529][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.985163][ T5885] veth1_macvtap: entered promiscuous mode [ 78.995636][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.004879][ T3565] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.014411][ T3565] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.022175][ T51] Bluetooth: hci2: command tx timeout [ 79.027586][ T5870] Bluetooth: hci4: command tx timeout [ 79.029912][ T5878] Bluetooth: hci1: command tx timeout [ 79.044551][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.053007][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.096087][ T999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.114580][ T5878] Bluetooth: hci3: command tx timeout [ 79.128373][ T999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.152347][ T5884] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 79.215456][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.229448][ T3565] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.237306][ T3565] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.253161][ T5885] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.273179][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.293304][ T5885] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.348958][ T64] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.389835][ T64] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.403672][ T5955] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 79.435334][ T64] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.480034][ T64] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.527630][ T3565] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.575037][ T3565] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.684965][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.728400][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.909010][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.952304][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.108478][ T999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.144012][ T999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.253921][ T5981] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 80.471237][ T5987] syz.1.14 uses obsolete (PF_INET,SOCK_PACKET) [ 80.481481][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 80.677822][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 80.728377][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 80.758278][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.798946][ T9] usb 1-1: config 0 descriptor?? [ 81.019135][ T5878] Bluetooth: hci0: command tx timeout [ 81.100369][ T5878] Bluetooth: hci2: command tx timeout [ 81.100711][ T51] Bluetooth: hci4: command tx timeout [ 81.108969][ T5878] Bluetooth: hci1: command tx timeout [ 81.179461][ T5878] Bluetooth: hci3: command tx timeout [ 81.373044][ T9] logitech 0003:046D:C626.0001: unbalanced collection at end of report description [ 81.392452][ T9] logitech 0003:046D:C626.0001: parse failed [ 81.480910][ T9] logitech 0003:046D:C626.0001: probe with driver logitech failed with error -22 [ 81.576148][ T9] usb 1-1: USB disconnect, device number 2 [ 82.408309][ T6002] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 82.587945][ T5873] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 82.622303][ T6002] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 82.630860][ T6002] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 82.671614][ T6002] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 82.708299][ T6002] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 82.734173][ T6037] netlink: 28 bytes leftover after parsing attributes in process `syz.1.32'. [ 82.743909][ T6002] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 82.758308][ T5873] usb 3-1: Using ep0 maxpacket: 32 [ 82.764255][ T6002] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.781222][ T5873] usb 3-1: unable to get BOS descriptor or descriptor too short [ 82.803706][ T5873] usb 3-1: config 241 has an invalid interface number: 213 but max is 0 [ 82.813908][ T6002] usb 4-1: config 0 descriptor?? [ 82.822696][ T5873] usb 3-1: config 241 has no interface number 0 [ 82.829554][ T6021] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 82.857557][ T5873] usb 3-1: config 241 interface 213 has no altsetting 0 [ 82.886768][ T5873] usb 3-1: config 241 has an invalid interface number: 213 but max is 0 [ 82.906327][ T5873] usb 3-1: config 241 has no interface number 0 [ 82.923554][ T5873] usb 3-1: config 241 interface 213 has no altsetting 0 [ 82.949436][ T5873] usb 3-1: config 241 has an invalid interface number: 213 but max is 0 [ 82.978446][ T5873] usb 3-1: config 241 has no interface number 0 [ 82.986019][ T5873] usb 3-1: config 241 interface 213 has no altsetting 0 [ 83.011628][ T5873] usb 3-1: config 241 has an invalid interface number: 213 but max is 0 [ 83.040297][ T5873] usb 3-1: config 241 has no interface number 0 [ 83.069953][ T5873] usb 3-1: config 241 interface 213 has no altsetting 0 [ 83.092816][ T5873] usb 3-1: config 241 has an invalid interface number: 213 but max is 0 [ 83.104767][ T6043] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 83.115056][ T5873] usb 3-1: config 241 has no interface number 0 [ 83.123951][ T5873] usb 3-1: config 241 interface 213 has no altsetting 0 [ 83.135681][ T5873] usb 3-1: string descriptor 0 read error: -22 [ 83.142759][ T5873] usb 3-1: New USB device found, idVendor=b708, idProduct=3090, bcdDevice=15.61 [ 83.168846][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.238839][ T5873] usb 3-1: Found UVC 0.00 device (b708:3090) [ 83.256697][ T5873] usb 3-1: No valid video chain found. [ 83.274571][ T6002] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 83.291977][ T6002] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 83.307838][ T6002] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 83.315538][ T6002] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 83.362987][ T6002] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 83.373792][ T6002] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 83.420787][ T6002] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 83.459261][ T5869] usb 3-1: USB disconnect, device number 2 [ 83.496318][ T6051] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 83.597231][ T5873] usb 4-1: USB disconnect, device number 2 [ 83.822637][ T6002] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 84.019563][ T6002] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 84.053127][ T6002] usb 1-1: config 0 has no interfaces? [ 84.097030][ T6002] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 84.141728][ T6002] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.187654][ T6002] usb 1-1: config 0 descriptor?? [ 84.246422][ T6068] netlink: 'syz.1.43': attribute type 1 has an invalid length. [ 84.304296][ T6054] fido_id[6054]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 84.318823][ T6070] netlink: 4 bytes leftover after parsing attributes in process `syz.3.44'. [ 84.332305][ T6070] netlink: 4 bytes leftover after parsing attributes in process `syz.3.44'. [ 84.418843][ T5873] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 84.583031][ T5873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.612319][ T6078] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 84.625605][ T5873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.659010][ T5873] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 84.681120][ T5873] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 84.692952][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.732194][ T5873] usb 3-1: config 0 descriptor?? [ 85.140944][ T6092] Zero length message leads to an empty skb [ 85.171373][ T5873] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 85.315418][ T6097] netlink: 4 bytes leftover after parsing attributes in process `syz.1.57'. [ 85.576940][ T5869] usb 3-1: USB disconnect, device number 3 [ 85.585043][ T6105] plantronics 0003:047F:FFFF.0003: usb_submit_urb(ctrl) failed: -19 [ 85.742228][ T5945] usb 1-1: USB disconnect, device number 3 [ 85.807162][ T6110] netlink: 20 bytes leftover after parsing attributes in process `syz.1.61'. [ 85.834568][ T6110] vlan2: entered promiscuous mode [ 85.850638][ T5873] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 85.865211][ T6110] bridge0: entered promiscuous mode [ 86.018875][ T5873] usb 4-1: Using ep0 maxpacket: 32 [ 86.030330][ T5873] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 86.049742][ T5873] usb 4-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 86.065352][ T5873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.095142][ T5873] usb 4-1: Product: syz [ 86.108129][ T5873] usb 4-1: Manufacturer: syz [ 86.126441][ T5873] usb 4-1: SerialNumber: syz [ 86.144209][ T5873] usb 4-1: config 0 descriptor?? [ 86.158036][ T6108] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 86.221642][ T5873] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 86.319177][ T30] audit: type=1326 audit(1759031702.980:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6117 comm="syz.2.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08cb98eec9 code=0x7ffc0000 [ 86.331636][ T6119] process 'syz.0.64' launched './file0' with NULL argv: empty string added [ 86.418394][ T30] audit: type=1326 audit(1759031702.980:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6117 comm="syz.2.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f08cb98eec9 code=0x7ffc0000 [ 86.504263][ T30] audit: type=1326 audit(1759031702.980:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6117 comm="syz.2.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08cb98eec9 code=0x7ffc0000 [ 86.510913][ T5873] usb 4-1: USB disconnect, device number 3 [ 86.790568][ T10] cfg80211: failed to load regulatory.db [ 86.955274][ T6134] netlink: 'syz.4.69': attribute type 1 has an invalid length. [ 87.223674][ T6142] netlink: 28 bytes leftover after parsing attributes in process `syz.4.72'. [ 88.597437][ T6182] netlink: 12 bytes leftover after parsing attributes in process `syz.1.90'. [ 88.823055][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 88.903282][ T6188] syzkaller0: entered promiscuous mode [ 88.919758][ T6188] syzkaller0: entered allmulticast mode [ 89.339175][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.449117][ T6208] syzkaller0: entered promiscuous mode [ 89.458739][ T6208] syzkaller0: entered allmulticast mode [ 89.947768][ T6220] syzkaller0: entered promiscuous mode [ 89.964515][ T6220] syzkaller0: entered allmulticast mode [ 90.509204][ T5959] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 90.673956][ T5959] usb 1-1: Using ep0 maxpacket: 16 [ 90.701767][ T5959] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.733034][ T5959] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 90.773692][ T5959] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=f1.40 [ 90.785763][ T5959] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 90.814554][ T5959] usb 1-1: Product: syz [ 90.824235][ T5959] usb 1-1: Manufacturer: syz [ 91.028516][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 91.056961][ T5959] usb 1-1: bad CDC descriptors [ 91.073063][ T5959] usb 1-1: USB disconnect, device number 4 [ 91.518746][ T6256] netlink: 12 bytes leftover after parsing attributes in process `syz.3.117'. [ 91.528078][ T6256] netlink: 20 bytes leftover after parsing attributes in process `syz.3.117'. [ 92.084042][ T6238] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 92.097522][ T6238] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.106372][ T6238] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.168784][ T6247] tipc: Enabling of bearer rejected, failed to enable media [ 92.205009][ T6263] syzkaller0: entered promiscuous mode [ 92.218466][ T6263] syzkaller0: entered allmulticast mode [ 92.682873][ T6284] netlink: 20 bytes leftover after parsing attributes in process `syz.0.128'. [ 93.079102][ T6292] syzkaller0: entered promiscuous mode [ 93.084709][ T6292] syzkaller0: entered allmulticast mode [ 93.097420][ T6300] tipc: Started in network mode [ 93.098517][ T6296] binder: 6295:6296 ioctl c0306201 200000000680 returned -14 [ 93.112984][ T6300] tipc: Node identity ca9de8ec6f0c, cluster identity 4711 [ 93.131057][ T6300] tipc: Enabled bearer , priority 0 [ 93.532732][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 93.541793][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 94.273001][ T9] tipc: Node number set to 2777802988 [ 95.065713][ T6294] syzkaller0: entered promiscuous mode [ 95.072576][ T6294] syzkaller0: entered allmulticast mode [ 95.102865][ T6310] tipc: Resetting bearer [ 95.115089][ T6293] tipc: Resetting bearer [ 95.129576][ T6293] tipc: Disabling bearer [ 95.509764][ T6343] netlink: 20 bytes leftover after parsing attributes in process `syz.0.147'. [ 95.719666][ T6349] syzkaller0: entered promiscuous mode [ 95.786514][ T6349] syzkaller0: entered allmulticast mode [ 95.840573][ T5938] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 95.868704][ T5938] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 95.891514][ T5938] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 95.922630][ T5938] hid-generic 0000:0004:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz0 [ 95.949243][ T6351] syzkaller0: entered promiscuous mode [ 95.965068][ T6351] syzkaller0: entered allmulticast mode [ 96.056839][ T6364] tipc: Started in network mode [ 96.066908][ T6364] tipc: Node identity b69cc8859f6d, cluster identity 4711 [ 96.105326][ T6364] tipc: Enabled bearer , priority 0 [ 97.221405][ T5959] tipc: Node number set to 703711365 [ 97.902735][ T6367] syzkaller0: entered promiscuous mode [ 97.908748][ T6367] syzkaller0: entered allmulticast mode [ 98.088504][ T6357] tipc: Resetting bearer [ 98.152465][ T6357] tipc: Disabling bearer [ 98.394872][ T6411] tipc: Enabled bearer , priority 0 [ 98.406403][ T6411] syzkaller0: entered promiscuous mode [ 98.424820][ T6411] syzkaller0: entered allmulticast mode [ 98.457202][ T6411] tipc: Resetting bearer [ 98.511411][ T6410] tipc: Resetting bearer [ 98.556284][ T6410] tipc: Disabling bearer [ 98.673740][ T6415] syzkaller0: entered promiscuous mode [ 98.693849][ T6415] syzkaller0: entered allmulticast mode [ 100.269872][ T6440] tipc: Enabling of bearer rejected, failed to enable media [ 100.279712][ T6446] gretap0: default FDB implementation only supports local addresses [ 100.628414][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 100.800268][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 100.821467][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 100.856507][ T9] usb 1-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 100.876085][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.894187][ T9] usb 1-1: Product: syz [ 100.918376][ T9] usb 1-1: Manufacturer: syz [ 100.923019][ T9] usb 1-1: SerialNumber: syz [ 100.941098][ T9] usb 1-1: config 0 descriptor?? [ 100.967117][ T6453] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 100.978420][ T5959] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 100.981620][ T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 101.159138][ T5959] usb 5-1: Using ep0 maxpacket: 8 [ 101.176264][ T5959] usb 5-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2 [ 101.195531][ T5959] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.217328][ T9] usb 1-1: USB disconnect, device number 5 [ 101.226108][ T5959] usb 5-1: Product: syz [ 101.243165][ T5959] usb 5-1: Manufacturer: syz [ 101.428496][ T5945] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 101.478281][ T5959] usb 5-1: SerialNumber: syz [ 101.489683][ T5959] usb 5-1: config 0 descriptor?? [ 101.628691][ T5945] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 101.645513][ T5945] usb 4-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 101.654883][ T5945] usb 4-1: Product: syz [ 101.660047][ T5945] usb 4-1: Manufacturer: syz [ 101.664822][ T5945] usb 4-1: SerialNumber: syz [ 101.676769][ T5945] usb 4-1: config 0 descriptor?? [ 101.711499][ T5945] ch341 4-1:0.0: ch341-uart converter detected [ 101.719243][ T5959] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 101.877096][ T6490] syzkaller0: entered promiscuous mode [ 101.883032][ T6490] syzkaller0: entered allmulticast mode [ 101.924258][ T6470] bridge_slave_0: left allmulticast mode [ 101.945048][ T6470] bridge_slave_0: left promiscuous mode [ 101.976224][ T6470] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.003364][ T6470] bridge_slave_1: left allmulticast mode [ 102.009351][ T6470] bridge_slave_1: left promiscuous mode [ 102.015945][ T6470] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.057731][ T6470] bond0: (slave bond_slave_0): Releasing backup interface [ 102.100016][ T6470] bond0: (slave bond_slave_1): Releasing backup interface [ 102.108721][ T6496] netlink: 4 bytes leftover after parsing attributes in process `syz.1.200'. [ 102.127494][ T6470] team0: Port device team_slave_0 removed [ 102.145902][ T6470] team0: Port device team_slave_1 removed [ 102.154121][ T6470] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.164238][ T6470] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.173659][ T6470] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.181460][ T6470] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.223749][ T5959] gspca_sunplus: reg_w_riv err -71 [ 102.229210][ T5959] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 102.257756][ T5959] usb 5-1: USB disconnect, device number 2 [ 102.476578][ T6501] tipc: Started in network mode [ 102.483257][ T6501] tipc: Node identity 9636ba4bab85, cluster identity 4711 [ 102.491453][ T6501] tipc: Enabled bearer , priority 0 [ 102.509385][ T6501] syzkaller0: entered promiscuous mode [ 102.514895][ T6501] syzkaller0: entered allmulticast mode [ 102.601613][ T6500] tipc: Resetting bearer [ 102.644570][ T6500] tipc: Disabling bearer [ 102.709461][ T6505] netlink: 'syz.1.206': attribute type 12 has an invalid length. [ 102.725603][ T5945] ch341-uart ttyUSB0: break control not supported, using simulated break [ 102.757760][ T5945] usb 4-1: ch341-uart converter now attached to ttyUSB0 [ 103.067473][ T6519] binder: 6514:6519 ioctl c0306201 200000000000 returned -14 [ 103.348409][ T24] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 103.523615][ T24] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 103.546644][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.566219][ T24] usb 5-1: config 0 descriptor?? [ 103.998111][ T24] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 104.009715][ T24] asix 5-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 104.022404][ T24] asix 5-1:0.0: probe with driver asix failed with error -32 [ 104.125158][ T24] usb 4-1: USB disconnect, device number 4 [ 104.156321][ T24] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 104.187789][ T24] ch341 4-1:0.0: device disconnected [ 104.193555][ T5945] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 104.358858][ T5945] usb 2-1: Using ep0 maxpacket: 16 [ 104.385014][ T5945] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 104.406731][ T5945] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 104.433781][ T5945] usb 2-1: config 0 has no interface number 0 [ 104.450353][ T5945] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 104.468496][ T5945] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.476765][ T5945] usb 2-1: Product: syz [ 104.502159][ T5945] usb 2-1: Manufacturer: syz [ 104.515102][ T5945] usb 2-1: SerialNumber: syz [ 104.794409][ T5945] usb 2-1: config 0 descriptor?? [ 105.019471][ T5945] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 105.047434][ T5945] usb 2-1: No valid video chain found. [ 105.067662][ T5945] usb 2-1: USB disconnect, device number 2 [ 105.339285][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.504797][ T6582] ptrace attach of "./syz-executor exec"[5882] was attempted by "./syz-executor exec"[6582] [ 105.886614][ T6586] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 105.939187][ T10] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 106.110398][ T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=029f, bcdDevice= 0.00 [ 106.324582][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.369095][ T9] usb 5-1: USB disconnect, device number 3 [ 106.417674][ T10] usb 3-1: config 0 descriptor?? [ 106.848780][ T10] hid (null): bogus close delimiter [ 106.998138][ T10] apple 0003:05AC:029F.0005: bogus close delimiter [ 107.031167][ T10] apple 0003:05AC:029F.0005: item 0 1 2 10 parsing failed [ 107.069415][ T10] apple 0003:05AC:029F.0005: parse failed [ 107.099535][ T10] apple 0003:05AC:029F.0005: probe with driver apple failed with error -22 [ 107.108547][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 107.178696][ T10] usb 3-1: USB disconnect, device number 4 [ 107.458954][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 107.803057][ T6605] netlink: 'syz.2.245': attribute type 13 has an invalid length. [ 107.864351][ T6605] netlink: 'syz.2.245': attribute type 17 has an invalid length. [ 107.912054][ T6605] netlink: 'syz.2.245': attribute type 27 has an invalid length. [ 108.044154][ T6609] mmap: syz.0.247 (6609) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 108.540333][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 109.622739][ T6635] tipc: Started in network mode [ 109.648344][ T6635] tipc: Node identity c61a77577ccd, cluster identity 4711 [ 109.679334][ T6635] tipc: Enabled bearer , priority 0 [ 109.709255][ T6639] syzkaller0: entered promiscuous mode [ 109.724493][ T6639] syzkaller0: entered allmulticast mode [ 109.768863][ T6638] netlink: 4 bytes leftover after parsing attributes in process `syz.0.255'. [ 109.834584][ T6635] tipc: Resetting bearer [ 110.041366][ T6634] tipc: Resetting bearer [ 110.104245][ T6634] tipc: Disabling bearer [ 110.368384][ T5945] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 110.409004][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 110.560931][ T5945] usb 5-1: New USB device found, idVendor=05ac, idProduct=029f, bcdDevice= 0.00 [ 110.571180][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 110.580204][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 110.613872][ T5945] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.648066][ T5945] usb 5-1: config 0 descriptor?? [ 110.992062][ T6661] capability: warning: `syz.1.270' uses 32-bit capabilities (legacy support in use) [ 111.114764][ T5945] apple 0003:05AC:029F.0006: unknown main item tag 0x2 [ 111.199951][ T5945] apple 0003:05AC:029F.0006: hidraw0: USB HID v0.00 Device [HID 05ac:029f] on usb-dummy_hcd.4-1/input0 [ 111.290013][ T5945] usb 5-1: USB disconnect, device number 4 [ 111.346457][ T30] audit: type=1326 audit(1759031728.010:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6668 comm="syz.3.273" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd53958eec9 code=0x0 [ 111.535960][ T6665] fido_id[6665]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 111.648293][ T5959] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 111.829305][ T5959] usb 2-1: config index 0 descriptor too short (expected 65121, got 36) [ 111.837731][ T5959] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 111.892306][ T5959] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 111.907144][ T5959] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.929912][ T5959] usb 2-1: Product: syz [ 111.934123][ T5959] usb 2-1: Manufacturer: syz [ 111.955489][ T5959] usb 2-1: SerialNumber: syz [ 111.984118][ T5959] rtl8150 2-1:1.0: couldn't find required endpoints [ 111.998710][ T5959] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 112.193954][ T5959] usb 2-1: USB disconnect, device number 3 [ 112.316506][ T6684] syzkaller0: entered promiscuous mode [ 112.335738][ T6684] syzkaller0: entered allmulticast mode [ 113.311903][ T6709] fuse: Unknown parameter 'grou00000000000000000000' [ 113.417882][ T6713] batadv_slave_1: entered promiscuous mode [ 113.501940][ T6714] bridge1: entered promiscuous mode [ 113.531955][ T6711] batadv_slave_1: left promiscuous mode [ 114.958354][ T24] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 115.099322][ T5869] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 115.141410][ T24] usb 1-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 115.168057][ T24] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.198261][ T24] usb 1-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 115.247597][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 115.286361][ T24] usb 1-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 115.316376][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.355931][ T24] usb 1-1: config 0 descriptor?? [ 115.368455][ T5869] usb 5-1: Using ep0 maxpacket: 32 [ 115.383239][ T5869] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 115.420611][ T5869] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 115.462743][ T5869] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 115.502367][ T5869] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 115.518419][ T5869] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 115.526798][ T5869] usb 5-1: Product: syz [ 115.548915][ T5869] usb 5-1: Manufacturer: syz [ 115.553566][ T5869] usb 5-1: SerialNumber: syz [ 115.613028][ T5869] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input7 [ 115.787220][ T24] hid-alps 0003:044E:120C.0007: unbalanced collection at end of report description [ 115.823913][ T24] hid-alps 0003:044E:120C.0007: parse failed [ 115.836732][ C0] appletouch 5-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 115.836739][ T5959] usb 5-1: USB disconnect, device number 5 [ 115.872789][ T24] hid-alps 0003:044E:120C.0007: probe with driver hid-alps failed with error -22 [ 115.976987][ T5959] appletouch 5-1:1.0: input: appletouch disconnected [ 115.992827][ T24] usb 1-1: USB disconnect, device number 6 [ 116.606558][ T6796] syzkaller0: entered promiscuous mode [ 116.648505][ T6796] syzkaller0: entered allmulticast mode [ 117.658546][ T5938] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 117.912087][ T5938] usb 4-1: unable to get BOS descriptor or descriptor too short [ 117.921440][ T5938] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 117.929529][ T5938] usb 4-1: can't read configurations, error -71 [ 118.898614][ T6828] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 119.104291][ T6838] netlink: 28 bytes leftover after parsing attributes in process `syz.1.336'. [ 119.520103][ T6854] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.706773][ T6861] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 119.868347][ T6864] syzkaller0: entered promiscuous mode [ 119.873916][ T6864] syzkaller0: entered allmulticast mode [ 121.916773][ T5959] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 122.088408][ T5959] usb 2-1: Using ep0 maxpacket: 8 [ 122.095476][ T5959] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.107781][ T5959] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.117634][ T5959] usb 2-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 122.126728][ T5959] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.137653][ T5959] usb 2-1: config 0 descriptor?? [ 122.590741][ T5959] cherry 0003:046A:0027.0008: unknown main item tag 0x3 [ 122.612355][ T5959] cherry 0003:046A:0027.0008: unknown main item tag 0x6 [ 122.650743][ T5959] cherry 0003:046A:0027.0008: unknown main item tag 0x0 [ 122.657770][ T5959] cherry 0003:046A:0027.0008: unknown main item tag 0x0 [ 122.705027][ T5959] cherry 0003:046A:0027.0008: unknown main item tag 0x0 [ 122.727197][ T5959] cherry 0003:046A:0027.0008: unknown main item tag 0x0 [ 122.762081][ T5959] cherry 0003:046A:0027.0008: unknown main item tag 0x0 [ 122.798851][ T5959] cherry 0003:046A:0027.0008: unknown main item tag 0x0 [ 122.801128][ T6917] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 122.829048][ T5959] cherry 0003:046A:0027.0008: unknown main item tag 0x0 [ 122.853933][ T5959] cherry 0003:046A:0027.0008: unknown main item tag 0x0 [ 122.874542][ T5959] cherry 0003:046A:0027.0008: hidraw0: USB HID v0.00 Device [HID 046a:0027] on usb-dummy_hcd.1-1/input0 [ 122.906765][ T5959] usb 2-1: USB disconnect, device number 4 [ 123.043492][ T6930] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 123.055054][ T6925] fido_id[6925]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 123.377233][ T6935] syzkaller0: entered promiscuous mode [ 123.393149][ T6935] syzkaller0: entered allmulticast mode [ 123.405015][ T6944] netlink: 'syz.1.378': attribute type 4 has an invalid length. [ 123.436261][ T6944] netlink: 'syz.1.378': attribute type 4 has an invalid length. [ 127.186363][ T6954] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 127.638371][ T5945] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 127.821181][ T5945] usb 2-1: config 0 has an invalid interface number: 237 but max is 0 [ 127.843391][ T5945] usb 2-1: config 0 has no interface number 0 [ 127.856238][ T5945] usb 2-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 127.899657][ T5945] usb 2-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 127.910016][ T5945] usb 2-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 127.938288][ T5945] usb 2-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 127.991734][ T5945] usb 2-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.b6 [ 128.019407][ T5945] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.032121][ T5945] usb 2-1: Product: syz [ 128.046005][ T5945] usb 2-1: Manufacturer: syz [ 128.052393][ T5945] usb 2-1: SerialNumber: syz [ 128.073710][ T7000] sock: sock_set_timeout: `syz.4.397' (pid 7000) tries to set negative timeout [ 128.083328][ T5945] usb 2-1: config 0 descriptor?? [ 128.118823][ T5945] xpad 2-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 128.154036][ T5945] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.237/input/input8 [ 128.314869][ T5945] usb 2-1: USB disconnect, device number 5 [ 128.579102][ T7014] netlink: 12 bytes leftover after parsing attributes in process `syz.2.403'. [ 128.750553][ T7012] syzkaller0: entered promiscuous mode [ 128.760694][ T7012] syzkaller0: entered allmulticast mode [ 129.128555][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 129.328643][ T9] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 129.395329][ T9] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 129.441163][ T9] usb 4-1: config 220 has no interface number 2 [ 129.447641][ T9] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 129.458501][ T5945] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 129.461984][ T9] usb 4-1: config 220 interface 0 has no altsetting 0 [ 129.480615][ T9] usb 4-1: config 220 interface 76 has no altsetting 0 [ 129.487654][ T9] usb 4-1: config 220 interface 1 has no altsetting 0 [ 129.517877][ T9] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 129.527926][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.538068][ T9] usb 4-1: Product: syz [ 129.543810][ T9] usb 4-1: Manufacturer: syz [ 129.548922][ T9] usb 4-1: SerialNumber: syz [ 129.648364][ T5945] usb 1-1: Using ep0 maxpacket: 8 [ 129.656484][ T5945] usb 1-1: config 0 has an invalid interface number: 37 but max is 0 [ 129.668496][ T5945] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 129.683095][ T5945] usb 1-1: config 0 has no interface number 0 [ 129.702796][ T5945] usb 1-1: New USB device found, idVendor=0421, idProduct=0508, bcdDevice=50.d3 [ 129.712342][ T5945] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.720777][ T5945] usb 1-1: Product: syz [ 129.725341][ T5945] usb 1-1: Manufacturer: syz [ 129.730415][ T5945] usb 1-1: SerialNumber: syz [ 129.743962][ T5945] usb 1-1: config 0 descriptor?? [ 129.775724][ T5945] usb 1-1: bad CDC descriptors [ 129.778520][ T9] usb 4-1: selecting invalid altsetting 0 [ 129.816565][ T9] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 129.833222][ T9] usb 4-1: No valid video chain found. [ 129.863582][ T9] usb 4-1: selecting invalid altsetting 0 [ 129.871376][ T9] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 129.887781][ T9] usb 4-1: USB disconnect, device number 7 [ 131.841826][ T5873] usb 1-1: USB disconnect, device number 7 [ 132.098325][ T5945] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 132.290019][ T5945] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 132.302748][ T5945] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.345164][ T5945] usb 4-1: config 0 descriptor?? [ 132.667221][ T30] audit: type=1326 audit(1759031749.330:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7096 comm="syz.4.435" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6f02f8eec9 code=0x0 [ 132.749282][ T5959] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 132.875052][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.881755][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.908454][ T5959] usb 3-1: Using ep0 maxpacket: 8 [ 132.917175][ T5959] usb 3-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2 [ 132.926487][ T5959] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.934685][ T5959] usb 3-1: Product: syz [ 132.939436][ T5959] usb 3-1: Manufacturer: syz [ 132.946553][ T5959] usb 3-1: SerialNumber: syz [ 132.960294][ T5959] usb 3-1: config 0 descriptor?? [ 133.128417][ T5869] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 133.187969][ T5959] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 133.298423][ T5869] usb 1-1: Using ep0 maxpacket: 32 [ 133.310745][ T5869] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 133.322293][ T5869] usb 1-1: config 0 has no interface number 0 [ 133.330511][ T5869] usb 1-1: config 0 interface 184 has no altsetting 0 [ 133.345663][ T5869] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 133.356943][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.374074][ T5869] usb 1-1: Product: syz [ 133.379455][ T5869] usb 1-1: Manufacturer: syz [ 133.384234][ T5869] usb 1-1: SerialNumber: syz [ 133.394407][ T5869] usb 1-1: config 0 descriptor?? [ 133.406857][ T5869] smsc75xx v1.0.0 [ 133.440022][ T7087] bridge_slave_0: left allmulticast mode [ 133.452481][ T7087] bridge_slave_0: left promiscuous mode [ 133.483097][ T7087] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.552486][ T7087] bridge_slave_1: left allmulticast mode [ 133.572680][ T7087] bridge_slave_1: left promiscuous mode [ 133.589882][ T7087] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.633381][ T7087] bond0: (slave bond_slave_0): Releasing backup interface [ 133.647222][ T7087] bond0: (slave bond_slave_1): Releasing backup interface [ 133.670845][ T7087] team0: Port device team_slave_0 removed [ 133.687461][ T7087] team0: Port device team_slave_1 removed [ 133.695080][ T7087] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.702725][ T7087] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.716073][ T5959] gspca_sunplus: reg_w_riv err -110 [ 133.723812][ T7087] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.738316][ T7087] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.745614][ T5959] sunplus 3-1:0.0: probe with driver sunplus failed with error -110 [ 133.848386][ T5938] usb 3-1: USB disconnect, device number 5 [ 133.924309][ T7113] kvm: kvm [7112]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 133.941330][ T7113] kvm: kvm [7112]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 133.963083][ T7113] kvm: kvm [7112]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 133.997399][ T7113] kvm: kvm [7112]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x186) = 0x4000 [ 134.025706][ T7113] kvm: kvm [7112]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0x4000 [ 134.051543][ T7113] kvm: kvm [7112]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x186) = 0x4000 [ 134.065948][ T7113] kvm: kvm [7112]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x186) = 0x4000 [ 134.076516][ T7113] kvm: kvm [7112]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0x4000 [ 134.100495][ T7113] kvm: kvm [7112]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0x4000 [ 134.113946][ T7113] kvm: kvm [7112]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe706111 [ 134.225193][ T5869] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 134.248493][ T5869] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 134.278618][ T5869] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 134.294338][ T5869] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 134.358359][ T5869] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 134.388431][ T5869] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 134.417224][ T5869] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 134.451749][ T5869] usb 1-1: USB disconnect, device number 8 [ 134.794841][ T5945] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 134.828647][ T5945] asix 4-1:0.0: probe with driver asix failed with error -71 [ 134.871871][ T5945] usb 4-1: USB disconnect, device number 8 [ 135.895460][ T7164] netlink: 20 bytes leftover after parsing attributes in process `syz.3.460'. [ 135.988032][ T7159] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 137.338439][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.748563][ T5938] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 137.898402][ T5938] usb 4-1: Using ep0 maxpacket: 32 [ 137.916307][ T5938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.947958][ T5938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.980940][ T5938] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 138.008723][ T5938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.031619][ T5938] usb 4-1: config 0 descriptor?? [ 138.049472][ T5938] hub 4-1:0.0: USB hub found [ 138.242533][ T5938] hub 4-1:0.0: 1 port detected [ 138.648739][ T5938] usb 4-1: USB disconnect, device number 9 [ 138.672523][ T7219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.698509][ T7219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.778377][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.811158][ T7219] syz.2.482 (7219) used greatest stack depth: 16184 bytes left [ 139.008390][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.417991][ T7229] syzkaller0: entered promiscuous mode [ 139.435453][ T7229] syzkaller0: entered allmulticast mode [ 139.448280][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.298374][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.648323][ T5869] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 141.822408][ T5869] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.844837][ T5869] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.856468][ T5869] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 141.876708][ T5869] usb 5-1: New USB device found, idVendor=047f, idProduct=ff85, bcdDevice= 0.00 [ 141.896321][ T5869] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 141.924454][ T5869] usb 5-1: Manufacturer: syz [ 141.943195][ T5869] usb 5-1: config 0 descriptor?? [ 142.071499][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.183886][ T30] audit: type=1326 audit(1759031758.850:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7282 comm="syz.0.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58a298eec9 code=0x7ffc0000 [ 142.206610][ T30] audit: type=1326 audit(1759031758.850:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7282 comm="syz.0.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f58a298eec9 code=0x7ffc0000 [ 142.229093][ T30] audit: type=1326 audit(1759031758.850:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7282 comm="syz.0.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58a298eec9 code=0x7ffc0000 [ 142.252511][ T30] audit: type=1326 audit(1759031758.850:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7282 comm="syz.0.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58a298eec9 code=0x7ffc0000 [ 142.406624][ T5869] plantronics 0003:047F:FF85.0009: hiddev0,hidraw0: USB HID v0.40 Device [syz] on usb-dummy_hcd.4-1/input0 [ 142.766000][ T7262] bridge_slave_1: default FDB implementation only supports local addresses [ 142.928354][ T5869] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 143.024922][ T5959] usb 5-1: USB disconnect, device number 6 [ 143.089611][ T5869] usb 2-1: Using ep0 maxpacket: 32 [ 143.119577][ T5869] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 143.189177][ T5869] usb 2-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 143.206694][ T7307] snd_dummy snd_dummy.0: control 0:1:9:syz0:0 is already present [ 143.208282][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.262519][ T5869] usb 2-1: Product: syz [ 143.266731][ T5869] usb 2-1: Manufacturer: syz [ 143.288287][ T5869] usb 2-1: SerialNumber: syz [ 143.315618][ T5869] usb 2-1: config 0 descriptor?? [ 143.347734][ T7287] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 143.363479][ T5869] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 143.531589][ T7316] netlink: 28 bytes leftover after parsing attributes in process `syz.0.514'. [ 143.633856][ T9] usb 2-1: USB disconnect, device number 6 [ 143.788066][ T30] audit: type=1326 audit(1759031760.440:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7322 comm="syz.4.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f02f8eec9 code=0x7ffc0000 [ 143.887013][ T30] audit: type=1326 audit(1759031760.440:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7322 comm="syz.4.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f02f8eec9 code=0x7ffc0000 [ 143.966089][ T7324] syzkaller0: entered promiscuous mode [ 143.974934][ T30] audit: type=1326 audit(1759031760.440:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7322 comm="syz.4.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f02f8eec9 code=0x7ffc0000 [ 143.978832][ T7324] syzkaller0: entered allmulticast mode [ 144.026437][ T7332] binder: 7328:7332 ioctl 4b61 0 returned -22 [ 145.273875][ T30] audit: type=1326 audit(1759031761.940:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7358 comm="syz.4.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f02f8eec9 code=0x7ffc0000 [ 145.296498][ T30] audit: type=1326 audit(1759031761.940:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7358 comm="syz.4.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f02f8eec9 code=0x7ffc0000 [ 145.322280][ T30] audit: type=1326 audit(1759031761.940:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7358 comm="syz.4.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f02f8eec9 code=0x7ffc0000 [ 145.499432][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.809274][ T7380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.537'. [ 146.844534][ T7380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.537'. [ 147.365847][ T7403] syzkaller0: entered promiscuous mode [ 147.371521][ T7403] syzkaller0: entered allmulticast mode [ 147.473229][ T7412] pim6reg1: entered promiscuous mode [ 147.478904][ T7412] pim6reg1: entered allmulticast mode [ 147.825027][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 147.825044][ T30] audit: type=1326 audit(1759031764.480:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7428 comm="syz.2.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08cb98eec9 code=0x7ffc0000 [ 147.953617][ T30] audit: type=1326 audit(1759031764.480:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7428 comm="syz.2.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08cb98eec9 code=0x7ffc0000 [ 148.051161][ T7432] : renamed from veth0_vlan (while UP) [ 148.056417][ T30] audit: type=1326 audit(1759031764.480:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7428 comm="syz.2.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f08cb98eec9 code=0x7ffc0000 [ 148.082490][ T30] audit: type=1326 audit(1759031764.480:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7428 comm="syz.2.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08cb98eec9 code=0x7ffc0000 [ 148.565783][ T7462] syzkaller0: entered promiscuous mode [ 148.574156][ T7462] syzkaller0: entered allmulticast mode [ 148.932731][ T30] audit: type=1326 audit(1759031765.600:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7470 comm="syz.2.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08cb98eec9 code=0x7ffc0000 [ 148.999454][ T30] audit: type=1326 audit(1759031765.670:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7470 comm="syz.2.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08cb98eec9 code=0x7ffc0000 [ 149.052898][ T30] audit: type=1326 audit(1759031765.690:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7470 comm="syz.2.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f08cb98eec9 code=0x7ffc0000 [ 149.129096][ T30] audit: type=1326 audit(1759031765.690:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7470 comm="syz.2.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08cb98eec9 code=0x7ffc0000 [ 149.217717][ T30] audit: type=1326 audit(1759031765.690:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7470 comm="syz.2.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08cb98eec9 code=0x7ffc0000 [ 149.910303][ T30] audit: type=1326 audit(1759031766.580:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7491 comm="syz.4.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f02f8eec9 code=0x7ffc0000 [ 150.023868][ T7501] fuse: Unknown parameter 'user_i00000000000000000000' [ 150.191861][ T7506] pim6reg1: entered promiscuous mode [ 150.199390][ T7506] pim6reg1: entered allmulticast mode [ 150.560083][ T7522] syzkaller1: entered promiscuous mode [ 150.576709][ T7522] syzkaller1: entered allmulticast mode [ 150.906000][ T7540] fuse: Unknown parameter 'user_i00000000000000000000' [ 151.526947][ T7563] syzkaller1: entered promiscuous mode [ 151.553404][ T7563] syzkaller1: entered allmulticast mode [ 151.566207][ T7568] fuse: Unknown parameter 'user_id00000000000000000000' [ 151.948924][ T7585] pim6reg1: entered promiscuous mode [ 151.967639][ T7585] pim6reg1: entered allmulticast mode [ 152.538846][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 152.557235][ T7608] syzkaller1: entered promiscuous mode [ 152.613260][ T7608] syzkaller1: entered allmulticast mode [ 152.698430][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.710921][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.738505][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.786104][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 152.841115][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 152.880919][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.919905][ T9] usb 1-1: config 0 descriptor?? [ 153.239674][ T7638] pim6reg1: entered promiscuous mode [ 153.245027][ T7638] pim6reg1: entered allmulticast mode [ 153.399301][ T9] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 153.585373][ T7650] syzkaller1: entered promiscuous mode [ 153.605328][ T5869] usb 1-1: USB disconnect, device number 9 [ 153.614343][ T7650] syzkaller1: entered allmulticast mode [ 154.148965][ T5938] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 154.243823][ T7679] pim6reg1: entered promiscuous mode [ 154.251129][ T7679] pim6reg1: entered allmulticast mode [ 154.319010][ T5938] usb 2-1: Using ep0 maxpacket: 8 [ 154.329077][ T5938] usb 2-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2 [ 154.338450][ T5938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.346491][ T5938] usb 2-1: Product: syz [ 154.351362][ T5938] usb 2-1: Manufacturer: syz [ 154.356038][ T5938] usb 2-1: SerialNumber: syz [ 154.371435][ T5938] usb 2-1: config 0 descriptor?? [ 154.609918][ T5938] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 154.695834][ T7690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.666'. [ 154.839534][ T7664] bridge_slave_0: left allmulticast mode [ 154.845451][ T7664] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.908032][ T7664] bridge_slave_1: left allmulticast mode [ 154.914981][ T7664] bridge_slave_1: left promiscuous mode [ 154.922411][ T7664] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.957644][ T7664] bond0: (slave bond_slave_0): Releasing backup interface [ 155.030938][ T7664] bond0: (slave bond_slave_1): Releasing backup interface [ 155.126424][ T7664] team0: Port device team_slave_0 removed [ 155.138507][ T5938] gspca_sunplus: reg_w_riv err -110 [ 155.147887][ T5938] sunplus 2-1:0.0: probe with driver sunplus failed with error -110 [ 155.182074][ T7664] team0: Port device team_slave_1 removed [ 155.194930][ T7664] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.229045][ T7664] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.273396][ T7664] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.304733][ T7664] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.383817][ T7664] bond1: (slave bridge1): Releasing backup interface [ 155.477700][ T5938] usb 2-1: USB disconnect, device number 7 [ 155.818604][ T7722] wg2: entered promiscuous mode [ 155.825279][ T7722] wg2: entered allmulticast mode [ 156.111427][ T7737] netlink: 24 bytes leftover after parsing attributes in process `syz.1.687'. [ 156.336479][ T7746] wg2: left promiscuous mode [ 156.346443][ T7746] wg2: left allmulticast mode [ 156.370325][ T7746] wg2: entered promiscuous mode [ 156.386982][ T7746] wg2: entered allmulticast mode [ 156.922285][ T7772] netlink: 24 bytes leftover after parsing attributes in process `syz.0.702'. [ 157.235420][ T7780] netlink: 24 bytes leftover after parsing attributes in process `syz.4.706'. [ 157.420984][ T7791] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 157.778741][ T7811] usb usb4: usbfs: process 7811 (syz.0.719) did not claim interface 0 before use [ 158.075909][ T7822] input: syz1 as /devices/virtual/input/input11 [ 158.219853][ T5869] hid_parser_main: 25 callbacks suppressed [ 158.219871][ T5869] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x4 [ 158.274357][ T5869] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x2 [ 158.293072][ T5869] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x3 [ 158.329330][ T5869] hid-generic 0000:3000000:0000.000B: hidraw0: HID v0.00 Device [sy] on syz0 [ 158.363900][ T7834] warning: `syz.4.728' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 158.496266][ T7835] fido_id[7835]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 158.729566][ T7846] syz_tun: entered allmulticast mode [ 158.776025][ T7846] dvmrp8: entered allmulticast mode [ 158.794555][ T7842] syz_tun: left allmulticast mode [ 158.897576][ T7851] netlink: 12 bytes leftover after parsing attributes in process `syz.1.734'. [ 159.186066][ T7859] netlink: 24 bytes leftover after parsing attributes in process `syz.1.738'. [ 159.325143][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 159.325160][ T30] audit: type=1326 audit(1759031775.990:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7862 comm="syz.1.740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c24b8eec9 code=0x7ffc0000 [ 159.428544][ T30] audit: type=1326 audit(1759031776.000:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7862 comm="syz.1.740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c24b8eec9 code=0x7ffc0000 [ 159.513812][ T7871] netlink: 28 bytes leftover after parsing attributes in process `syz.3.743'. [ 159.536312][ T30] audit: type=1326 audit(1759031776.000:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7862 comm="syz.1.740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f1c24b8eec9 code=0x7ffc0000 [ 159.609956][ T30] audit: type=1326 audit(1759031776.000:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7862 comm="syz.1.740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c24b8eec9 code=0x7ffc0000 [ 159.662104][ T30] audit: type=1326 audit(1759031776.000:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7862 comm="syz.1.740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7f1c24b8eec9 code=0x7ffc0000 [ 159.761083][ T30] audit: type=1326 audit(1759031776.000:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7862 comm="syz.1.740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c24b8eec9 code=0x7ffc0000 [ 159.934212][ T30] audit: type=1326 audit(1759031776.590:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7884 comm="syz.4.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f02f8eec9 code=0x7ffc0000 [ 160.016553][ T30] audit: type=1326 audit(1759031776.630:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7884 comm="syz.4.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f02f8eec9 code=0x7ffc0000 [ 160.041626][ T30] audit: type=1326 audit(1759031776.630:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7884 comm="syz.4.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7f6f02f8eec9 code=0x7ffc0000 [ 160.107638][ T30] audit: type=1326 audit(1759031776.630:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7884 comm="syz.4.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f02f8eec9 code=0x7ffc0000 [ 162.283563][ T7926] fuse: Unknown parameter '0x0000000000000003' [ 162.700805][ T7934] tipc: Enabling of bearer rejected, failed to enable media [ 162.715848][ T7934] syzkaller0: entered promiscuous mode [ 162.722921][ T7934] syzkaller0: entered allmulticast mode [ 162.748798][ T7936] netlink: 28 bytes leftover after parsing attributes in process `syz.1.769'. [ 162.984192][ T5945] hid-generic 0003:0004:0000.000C: unknown main item tag 0x0 [ 163.009237][ T5945] hid-generic 0003:0004:0000.000C: unknown main item tag 0x0 [ 163.033750][ T5945] hid-generic 0003:0004:0000.000C: unknown main item tag 0x0 [ 163.064112][ T5945] hid-generic 0003:0004:0000.000C: unknown main item tag 0x0 [ 163.101736][ T5945] hid-generic 0003:0004:0000.000C: unknown main item tag 0x0 [ 163.115291][ T5945] hid-generic 0003:0004:0000.000C: unknown main item tag 0x0 [ 163.158431][ T5945] hid-generic 0003:0004:0000.000C: unknown main item tag 0x0 [ 163.195341][ T5945] hid-generic 0003:0004:0000.000C: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 163.395472][ T7944] fido_id[7944]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 163.851047][ T7966] netlink: 20 bytes leftover after parsing attributes in process `syz.2.782'. [ 165.439590][ T8006] tipc: Enabling of bearer rejected, failed to enable media [ 165.631999][ T8008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.797'. [ 166.009342][ T8017] usb usb8: usbfs: process 8017 (syz.0.800) did not claim interface 0 before use [ 166.172807][ T8025] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 166.413998][ T8032] tipc: Enabling of bearer rejected, failed to enable media [ 166.426006][ T8035] netlink: 8 bytes leftover after parsing attributes in process `syz.3.808'. [ 166.438126][ T8032] syzkaller0: entered promiscuous mode [ 166.467483][ T8032] syzkaller0: entered allmulticast mode [ 166.579729][ T5959] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 166.606148][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 166.606164][ T30] audit: type=1326 audit(1759031783.270:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8040 comm="syz.3.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd53958eec9 code=0x7ffc0000 [ 166.663079][ T30] audit: type=1326 audit(1759031783.300:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8040 comm="syz.3.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd53958eec9 code=0x7ffc0000 [ 166.738302][ T5959] usb 2-1: Using ep0 maxpacket: 8 [ 166.749621][ T30] audit: type=1326 audit(1759031783.300:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8040 comm="syz.3.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd53958eec9 code=0x7ffc0000 [ 166.754200][ T5959] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 166.780464][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.806864][ T8048] syzkaller0: entered promiscuous mode [ 166.812757][ T8048] syzkaller0: entered allmulticast mode [ 166.828644][ T5959] usb 2-1: config 179 has no interface number 0 [ 166.846164][ T5959] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 166.864545][ T5959] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 166.876546][ T5959] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 166.889038][ T5959] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 166.907033][ T5959] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 166.920641][ T5959] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 166.929779][ T5959] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.943817][ T8030] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 167.147336][ T8056] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 167.411107][ T5869] usb 2-1: USB disconnect, device number 8 [ 167.411103][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 167.427893][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 167.969016][ T30] audit: type=1326 audit(1759031784.640:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8070 comm="syz.4.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f02f8eec9 code=0x7ffc0000 [ 168.143117][ T30] audit: type=1326 audit(1759031784.660:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8070 comm="syz.4.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f02f8eec9 code=0x7ffc0000 [ 168.181453][ T30] audit: type=1326 audit(1759031784.660:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8070 comm="syz.4.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f02f8eec9 code=0x7ffc0000 [ 168.577016][ T8094] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 169.016656][ T30] audit: type=1326 audit(1759031785.680:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8103 comm="syz.1.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c24b8eec9 code=0x7ffc0000 [ 169.068785][ T30] audit: type=1326 audit(1759031785.680:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8103 comm="syz.1.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c24b8eec9 code=0x7ffc0000 [ 169.105928][ T30] audit: type=1326 audit(1759031785.680:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8103 comm="syz.1.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c24b8eec9 code=0x7ffc0000 [ 169.131026][ T30] audit: type=1326 audit(1759031785.680:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8103 comm="syz.1.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c24b8eec9 code=0x7ffc0000 [ 170.020944][ T8130] syzkaller0: entered promiscuous mode [ 170.027656][ T8130] syzkaller0: entered allmulticast mode [ 170.461144][ T8133] netlink: 4 bytes leftover after parsing attributes in process `syz.4.850'. [ 171.213298][ T8153] binder: 8149:8153 ioctl 4b61 0 returned -22 [ 171.226671][ T8153] binder_alloc: 8149: binder_alloc_buf, no vma [ 171.946546][ T8147] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 173.418428][ T5945] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 173.548453][ T8186] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 173.611460][ T5945] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.638343][ T5945] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.666924][ T5945] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 173.890657][ T5945] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 173.915694][ T5945] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.946258][ T5945] usb 3-1: config 0 descriptor?? [ 174.304395][ T5878] Bluetooth: hci4: unexpected cc 0x0c03 length: 33 > 1 [ 174.424695][ T5945] usbhid 3-1:0.0: can't add hid device: -71 [ 174.438723][ T5945] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 174.472315][ T5945] usb 3-1: USB disconnect, device number 6 [ 174.631149][ T8203] tipc: Started in network mode [ 174.646662][ T8203] tipc: Node identity fe79f2d920f5, cluster identity 4711 [ 174.662729][ T8203] tipc: Enabled bearer , priority 0 [ 174.672215][ T8203] syzkaller0: entered promiscuous mode [ 174.678013][ T8203] syzkaller0: entered allmulticast mode [ 174.714097][ T8202] tipc: Resetting bearer [ 174.734097][ T8202] tipc: Disabling bearer [ 175.156907][ T8222] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 175.436405][ T8229] veth0_to_batadv: entered allmulticast mode [ 176.309105][ T8244] syzkaller0: entered promiscuous mode [ 176.359964][ T8244] syzkaller0: entered allmulticast mode [ 176.910705][ T5869] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 176.943014][ T8262] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 176.989002][ T5938] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 177.006893][ T8264] input: syz0 as /devices/virtual/input/input13 [ 177.078701][ T5869] usb 2-1: Using ep0 maxpacket: 16 [ 177.087524][ T5869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.104303][ T5869] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 177.120197][ T5869] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 177.129689][ T5869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.145058][ T5869] usb 2-1: config 0 descriptor?? [ 177.158409][ T5938] usb 1-1: Using ep0 maxpacket: 16 [ 177.171581][ T5938] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 177.194761][ T5938] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 177.231319][ T5938] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 177.258775][ T5938] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.274536][ T5938] usb 1-1: Product: syz [ 177.288429][ T5938] usb 1-1: Manufacturer: syz [ 177.297861][ T5938] usb 1-1: SerialNumber: syz [ 177.574586][ T5869] HID 045e:07da: Invalid code 65791 type 1 [ 177.646461][ T5869] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.000D/input/input14 [ 177.647794][ T8274] netlink: 60 bytes leftover after parsing attributes in process `syz.2.896'. [ 177.719342][ T5938] usb 1-1: cannot find UAC_HEADER [ 177.725231][ T5869] microsoft 0003:045E:07DA.000D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 177.914581][ T5938] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 177.995503][ T5938] usb 1-1: USB disconnect, device number 10 [ 178.102644][ T6120] udevd[6120]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 178.286189][ T5869] usb 2-1: USB disconnect, device number 9 [ 178.373543][ T8293] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 182.458650][ T5938] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 182.638273][ T5938] usb 4-1: Using ep0 maxpacket: 16 [ 182.664244][ T5938] usb 4-1: config 0 interface 0 has no altsetting 0 [ 182.686432][ T5938] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=29.82 [ 182.720076][ T8381] netlink: 68 bytes leftover after parsing attributes in process `syz.4.931'. [ 182.726716][ T5938] usb 4-1: New USB device strings: Mfr=83, Product=5, SerialNumber=10 [ 182.770028][ T5938] usb 4-1: Product: syz [ 182.786388][ T5938] usb 4-1: Manufacturer: syz [ 182.794896][ T5938] usb 4-1: SerialNumber: syz [ 182.810148][ T5938] usb 4-1: config 0 descriptor?? [ 183.141084][ T5938] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 183.252931][ T6120] udevd[6120]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 183.934196][ T8418] netlink: 8 bytes leftover after parsing attributes in process `syz.4.944'. [ 183.983192][ T8420] netlink: 68 bytes leftover after parsing attributes in process `syz.0.945'. [ 184.295604][ T30] audit: type=1326 audit(1759031800.950:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8424 comm="syz.2.948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08cb98eec9 code=0x7ffc0000 [ 184.395315][ T30] audit: type=1326 audit(1759031800.950:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8424 comm="syz.2.948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f08cb98eec9 code=0x7ffc0000 [ 184.456509][ T30] audit: type=1326 audit(1759031800.950:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8424 comm="syz.2.948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08cb98eec9 code=0x7ffc0000 [ 185.272799][ T8450] netlink: 68 bytes leftover after parsing attributes in process `syz.0.957'. [ 185.339960][ T9] usb 4-1: USB disconnect, device number 10 [ 185.524481][ T8454] input: syz0 as /devices/virtual/input/input15 [ 185.580025][ T8457] netlink: 'syz.0.960': attribute type 4 has an invalid length. [ 185.818812][ T8467] netlink: 4 bytes leftover after parsing attributes in process `syz.0.965'. [ 185.882302][ T8470] netlink: 4 bytes leftover after parsing attributes in process `syz.0.965'. [ 185.956338][ T8474] loop3: detected capacity change from 0 to 7 [ 185.973628][ T8474] Dev loop3: unable to read RDB block 7 [ 185.979863][ T8474] loop3: unable to read partition table [ 185.985945][ T8474] loop3: partition table beyond EOD, truncated [ 185.996305][ T8474] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 187.498871][ T5938] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 187.802091][ T5938] usb 1-1: Using ep0 maxpacket: 8 [ 187.828383][ T5938] usb 1-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2 [ 187.837486][ T5938] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.850044][ T5938] usb 1-1: Product: syz [ 187.854241][ T5938] usb 1-1: Manufacturer: syz [ 187.873462][ T5938] usb 1-1: SerialNumber: syz [ 187.993391][ T5938] usb 1-1: config 0 descriptor?? [ 188.251177][ T5938] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 188.564486][ T8516] bridge_slave_0: left allmulticast mode [ 188.608119][ T8516] bridge_slave_0: left promiscuous mode [ 188.657768][ T8516] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.759675][ T8516] bridge_slave_1: left allmulticast mode [ 188.765873][ T8516] bridge_slave_1: left promiscuous mode [ 188.798579][ T8516] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.829448][ T5938] gspca_sunplus: reg_w_riv err -110 [ 188.834843][ T5938] sunplus 1-1:0.0: probe with driver sunplus failed with error -110 [ 188.858809][ T8546] capability: warning: `syz.2.996' uses deprecated v2 capabilities in a way that may be insecure [ 188.961800][ T8516] bond0: (slave bond_slave_0): Releasing backup interface [ 188.997722][ T8550] netlink: 'syz.4.998': attribute type 1 has an invalid length. [ 189.042372][ T8516] bond0: (slave bond_slave_1): Releasing backup interface [ 189.082838][ T8516] team0: Port device team_slave_0 removed [ 189.143649][ T8516] team0: Port device team_slave_1 removed [ 189.160987][ T8516] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.173456][ T8556] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1000'. [ 189.197827][ T8516] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.223872][ T8516] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.239980][ T8516] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.282714][ T5869] usb 1-1: USB disconnect, device number 11 [ 191.184549][ T8577] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1004'. [ 191.453759][ T8582] tipc: Enabled bearer , priority 0 [ 191.546104][ T8585] syzkaller0: entered promiscuous mode [ 191.555731][ T8585] syzkaller0: entered allmulticast mode [ 191.615112][ T8582] tipc: Resetting bearer [ 191.622702][ T8581] tipc: Resetting bearer [ 191.693754][ T8581] tipc: Disabling bearer [ 192.311393][ T8604] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1014'. [ 192.438128][ T5878] Bluetooth: hci0: Malformed Event: 0x2f [ 192.748504][ T5945] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 192.949626][ T5945] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 192.978234][ T5945] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 193.004269][ T5945] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 193.015752][ T5945] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 193.064403][ T5945] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 193.088317][ T5945] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.112539][ T5945] usb 2-1: config 0 descriptor?? [ 193.125287][ T8609] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 193.208406][ T8619] ------------[ cut here ]------------ [ 193.214182][ T8619] WARNING: CPU: 1 PID: 8619 at fs/exec.c:119 path_noexec+0x1af/0x200 [ 193.222379][ T8619] Modules linked in: [ 193.226981][ T8619] CPU: 1 UID: 0 PID: 8619 Comm: syz.2.1015 Not tainted syzkaller #0 PREEMPT(full) [ 193.236390][ T8619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 193.247608][ T8619] RIP: 0010:path_noexec+0x1af/0x200 [ 193.252918][ T8619] Code: 02 31 ff 48 89 de e8 d0 e3 89 ff d1 eb eb 07 e8 e7 de 89 ff b3 01 89 d8 5b 41 5e 41 5f 5d e9 08 90 47 09 cc e8 d2 de 89 ff 90 <0f> 0b 90 e9 48 ff ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c a6 [ 193.273389][ T8619] RSP: 0018:ffffc9001c08fbd8 EFLAGS: 00010287 [ 193.280117][ T8619] RAX: ffffffff8235dc1e RBX: ffff888076c45040 RCX: 0000000000080000 [ 193.289091][ T8619] RDX: ffffc9000fa22000 RSI: 000000000000006b RDI: 000000000000006c [ 193.297155][ T8619] RBP: 0000000000080000 R08: ffff88802df93c00 R09: 0000000000000003 [ 193.306994][ T8619] R10: 0000000000000003 R11: 0000000000000002 R12: 0000000000000011 [ 193.315198][ T8619] R13: 1ffff92003811f90 R14: 0000000000000000 R15: dffffc0000000000 [ 193.324918][ T8619] FS: 00007f08cc7dc6c0(0000) GS:ffff888125d12000(0000) knlGS:0000000000000000 [ 193.333954][ T8619] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 193.340633][ T8619] CR2: 000000110c3a5f22 CR3: 00000000755cc000 CR4: 00000000003526f0 [ 193.348695][ T8619] Call Trace: [ 193.352017][ T8619] [ 193.354987][ T8619] do_mmap+0xa43/0x10d0 [ 193.359331][ T8619] ? __pfx_do_mmap+0x10/0x10 [ 193.363964][ T8619] ? down_write_killable+0x178/0x230 [ 193.369417][ T8619] ? __pfx_down_write_killable+0x10/0x10 [ 193.375844][ T8619] ? common_file_perm+0x1b5/0x230 [ 193.381405][ T8619] vm_mmap_pgoff+0x2a6/0x4d0 [ 193.386040][ T8619] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 193.391249][ T8619] ? __fget_files+0x2a/0x420 [ 193.395857][ T8619] ? __fget_files+0x3a0/0x420 [ 193.400590][ T8619] ? __fget_files+0x2a/0x420 [ 193.405197][ T8619] ksys_mmap_pgoff+0x51f/0x760 [ 193.410041][ T8619] do_syscall_64+0xfa/0x3b0 [ 193.414564][ T8619] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.420936][ T8619] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 193.427116][ T8619] ? clear_bhb_loop+0x60/0xb0 [ 193.431880][ T8619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.438007][ T8619] RIP: 0033:0x7f08cb98eec9 [ 193.442587][ T8619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.462268][ T8619] RSP: 002b:00007f08cc7dc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 193.470757][ T8619] RAX: ffffffffffffffda RBX: 00007f08cbbe6180 RCX: 00007f08cb98eec9 [ 193.479562][ T8619] RDX: 0000000003000007 RSI: 0000000000003000 RDI: 0000200000000000 [ 193.487546][ T8619] RBP: 00007f08cba11f91 R08: 0000000000000009 R09: 0000000000000000 [ 193.496029][ T8619] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 193.504134][ T8619] R13: 00007f08cbbe6218 R14: 00007f08cbbe6180 R15: 00007f08cbd0fa28 [ 193.512185][ T8619] [ 193.515216][ T8619] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 193.522506][ T8619] CPU: 1 UID: 0 PID: 8619 Comm: syz.2.1015 Not tainted syzkaller #0 PREEMPT(full) [ 193.531796][ T8619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 193.541860][ T8619] Call Trace: [ 193.545146][ T8619] [ 193.548074][ T8619] dump_stack_lvl+0x99/0x250 [ 193.552748][ T8619] ? __asan_memcpy+0x40/0x70 [ 193.557328][ T8619] ? __pfx_dump_stack_lvl+0x10/0x10 [ 193.562516][ T8619] ? __pfx__printk+0x10/0x10 [ 193.567105][ T8619] vpanic+0x281/0x750 [ 193.571074][ T8619] ? __pfx__printk+0x10/0x10 [ 193.575652][ T8619] ? __pfx_vpanic+0x10/0x10 [ 193.580147][ T8619] ? is_bpf_text_address+0x292/0x2b0 [ 193.585439][ T8619] panic+0xb9/0xc0 [ 193.589148][ T8619] ? __pfx_panic+0x10/0x10 [ 193.593567][ T8619] __warn+0x31b/0x4b0 [ 193.597536][ T8619] ? path_noexec+0x1af/0x200 [ 193.602115][ T8619] ? path_noexec+0x1af/0x200 [ 193.606690][ T8619] report_bug+0x2be/0x4f0 [ 193.611016][ T8619] ? path_noexec+0x1af/0x200 [ 193.615632][ T8619] ? path_noexec+0x1af/0x200 [ 193.620209][ T8619] ? path_noexec+0x1b1/0x200 [ 193.624785][ T8619] handle_bug+0x84/0x160 [ 193.629019][ T8619] exc_invalid_op+0x1a/0x50 [ 193.633510][ T8619] asm_exc_invalid_op+0x1a/0x20 [ 193.638357][ T8619] RIP: 0010:path_noexec+0x1af/0x200 [ 193.643548][ T8619] Code: 02 31 ff 48 89 de e8 d0 e3 89 ff d1 eb eb 07 e8 e7 de 89 ff b3 01 89 d8 5b 41 5e 41 5f 5d e9 08 90 47 09 cc e8 d2 de 89 ff 90 <0f> 0b 90 e9 48 ff ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c a6 [ 193.663135][ T8619] RSP: 0018:ffffc9001c08fbd8 EFLAGS: 00010287 [ 193.669188][ T8619] RAX: ffffffff8235dc1e RBX: ffff888076c45040 RCX: 0000000000080000 [ 193.677234][ T8619] RDX: ffffc9000fa22000 RSI: 000000000000006b RDI: 000000000000006c [ 193.685188][ T8619] RBP: 0000000000080000 R08: ffff88802df93c00 R09: 0000000000000003 [ 193.693165][ T8619] R10: 0000000000000003 R11: 0000000000000002 R12: 0000000000000011 [ 193.701121][ T8619] R13: 1ffff92003811f90 R14: 0000000000000000 R15: dffffc0000000000 [ 193.709086][ T8619] ? path_noexec+0x1ae/0x200 [ 193.713679][ T8619] ? path_noexec+0x1ae/0x200 [ 193.718256][ T8619] do_mmap+0xa43/0x10d0 [ 193.722415][ T8619] ? __pfx_do_mmap+0x10/0x10 [ 193.726988][ T8619] ? down_write_killable+0x178/0x230 [ 193.732261][ T8619] ? __pfx_down_write_killable+0x10/0x10 [ 193.737882][ T8619] ? common_file_perm+0x1b5/0x230 [ 193.742897][ T8619] vm_mmap_pgoff+0x2a6/0x4d0 [ 193.747483][ T8619] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 193.752584][ T8619] ? __fget_files+0x2a/0x420 [ 193.757161][ T8619] ? __fget_files+0x3a0/0x420 [ 193.761819][ T8619] ? __fget_files+0x2a/0x420 [ 193.766419][ T8619] ksys_mmap_pgoff+0x51f/0x760 [ 193.771179][ T8619] do_syscall_64+0xfa/0x3b0 [ 193.775673][ T8619] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.781722][ T8619] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 193.787869][ T8619] ? clear_bhb_loop+0x60/0xb0 [ 193.792536][ T8619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.798415][ T8619] RIP: 0033:0x7f08cb98eec9 [ 193.802817][ T8619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.822407][ T8619] RSP: 002b:00007f08cc7dc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 193.830817][ T8619] RAX: ffffffffffffffda RBX: 00007f08cbbe6180 RCX: 00007f08cb98eec9 [ 193.838774][ T8619] RDX: 0000000003000007 RSI: 0000000000003000 RDI: 0000200000000000 [ 193.846727][ T8619] RBP: 00007f08cba11f91 R08: 0000000000000009 R09: 0000000000000000 [ 193.854682][ T8619] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 193.862635][ T8619] R13: 00007f08cbbe6218 R14: 00007f08cbbe6180 R15: 00007f08cbd0fa28 [ 193.870606][ T8619] [ 193.873913][ T8619] Kernel Offset: disabled [ 193.878221][ T8619] Rebooting in 86400 seconds..