last executing test programs: 2m27.203361535s ago: executing program 1 (id=152): socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0x0, &(0x7f0000006680)) syz_io_uring_setup(0x63e7, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000033a80)=""/102386, 0xffffffa8}], 0x1, 0x800, 0x0) mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @mcast2={0xff, 0x5}}, 0x1c) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff7f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 2m19.541858127s ago: executing program 1 (id=154): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x20, 0x6, 0x0, 0x8000}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='thermal_power_cpu_get_power\x00', r0}, 0x10) syz_open_dev$evdev(0x0, 0xffffffffffffffff, 0x2f8a96246c1993bc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={0x0}}, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r4 = eventfd(0x43) ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, 0x0) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) syz_clone(0x5d000100, 0x0, 0x3, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000001280), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r7, 0xc1205531, &(0x7f0000000540)={0x1000000, 0x0, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, "b6855a32474ffa64f778ddcf29c94337"}) sendto$inet6(0xffffffffffffffff, &(0x7f00000006c0), 0x0, 0x8801, &(0x7f0000000640)={0xa, 0x4e24, 0xfff, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}, 0x1c) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x1, 0xfffffffe, &(0x7f0000000380)=""/247, &(0x7f0000000140)=""/90, 0x0}) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f0000000480)={0x1, r4}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) syz_usb_connect(0x0, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000fd9e1a40f30c74933bbc0000000109021b0001040000000904000065d4695e000905", @ANYBLOB="e1ce74"], 0x0) 1m39.272545972s ago: executing program 1 (id=167): r0 = getpid() prlimit64(r0, 0x5, &(0x7f0000000140)={0x2000000000000005, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() getpgrp(r1) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f00009a3000/0x3000)=nil, 0x3000, 0xb635773f05ebbeee, 0x110, 0xffffffffffffffff, 0x8c756000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$sndpcmp(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r4, 0xc06c4124, 0xfffffffffffffffd) r5 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) syz_usb_connect(0x0, 0x58, &(0x7f0000002180)={{0x12, 0x1, 0x0, 0xe0, 0x1, 0x4, 0x8, 0x7366, 0xf8cb, 0x3a11, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xaa, 0x0, 0x5, 0xfd, 0x36, 0x9c, 0x0, [], [{{0x9, 0x5, 0xa, 0x0, 0x20, 0x5, 0x9, 0x6}}, {{0x9, 0x5, 0xa, 0x10, 0x8, 0xfc, 0x9, 0x1}}, {{0x9, 0x5, 0xf, 0x3, 0x200, 0x5, 0x40, 0xff, [@generic={0x7, 0x5, "9896d528ca"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x4, 0x0, 0x9}}, {{0x9, 0x5, 0xe, 0x12, 0x8, 0x8, 0x2, 0x1}}]}}]}}]}}, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSNPMODE(r6, 0x4008744b, &(0x7f0000000080)={0x21}) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000380), 0x1012c2, 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000200)='source', &(0x7f0000000000)='\\/\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\\\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xb1\xc3j$v\xefw\x96/\xff\xa2\xfc\xe3\xb8\xc7\x0f\xaaQ\x98F*T\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) syz_emit_ethernet(0x36, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f00000003c0)={0x10200, 0x0, 0x0, 0x2000, &(0x7f0000ad9000/0x2000)=nil}) 50.635758325s ago: executing program 0 (id=291): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0xfffd) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket(0x1d, 0x3, 0x1) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x65, 0x4, 0x0, 0x4) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x21400, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0) sendfile(r3, r2, 0x0, 0x6) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f00000000c0)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x840000000002, 0x3, 0x100) connect$inet(r5, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r5, &(0x7f0000002380)=[{{&(0x7f0000000280)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000400)="e7d38935b4c3a3111944391852acbf339d19ce8bfb811993a955130c3e1d50f6225438a7ea9c69e70be4352ffbd0826f705670a6fe0ce328d4e6d1960af4f2682747594b63b0f1c1bf5fe358764aa81e0502f0435ee8b555f1f40296f3f2cef024147a33929e8ba003fbd395e2c40cbd93de63d4ae7ed49da1f2057249ad8ad8dfa3f5628f8d1c5758dee16bcbdc0bf863d1b24d0816d6a5ae86", 0x9a}, {&(0x7f0000000340)="3849d33def1e082219f9f4d9cb5b44f5b700bfb818bc81881ca92110480759ab5be62130d6762834f3d4fc44f90b0532003c27070bbd59f623cb77618880dc8279515f02752850eb0b4d9e1b994ee9a3bf754a845948fb58fd6d04c0077f685d030482c1d2cd4717888b9e664c434817dff72a3c", 0x74}, {&(0x7f00000004c0)="dda06b641c2a433c8176fe2aa4f4207e0da429279cd62c5d22c79363d99740aeacd4886bf58c8bb1f9023b6e73c27603b5e4906f4da9e6908df2c7551cf4c2a6fa0c231623daa9e9bb0e1a4f5b6e3f4140b789537cab0568c0448c3e701be7d37c5b9e957c2eee41cd949268d45a645b674e540b21fd1460e435f4758891528680be857cf76f793b2a70e201d40514e30823a5782e161cfa634ccad4a00797cacf7ebae31e2a667bf3c99733c57c71669dde47a7f6", 0xb5}, {&(0x7f00000002c0)="5fad113c1576aaf74262a6d2b8e908a7af34996849376332269ddb5a2f3646c08148dcfefcdb276c09f88ca8596f675a09", 0x31}, {&(0x7f0000000700)="fc1c9391b68738371d63dc0d9459af02825a3cd6afc8614fe2e19aaf4b3b28a4f13f113bab6274699d851c0196550bb785c464358db2f641502a66b5f6bc03b9d6e237eb467bfc266dccb192f64c84e2962a7f3d08b1a6adadc01970d92b8cae28a52977699d1d3c5b5cf3fc957b41b86929f93bc35a4a32a890b74385103aae92a9c3d270e642aa7ab25de9114f0403bf450063674a7628f1f294", 0x9b}, {&(0x7f00000007c0)="9d1bbde2dcb636727f44dcdac8ef86d28fe804c44973ccbd78976d30ad10ec323ceee91b3b29695b1fbddef1bf483fff872a1229511fe4727be899fbf163dfea85f1df0bd939855ebafeb19954d384ba2dfc3afc856b49fc4389e0b63bbaf9cb1c19ee1be4498602ec6673b4b35d120a6c3eb3b99d1bae5fa8498024bd87697b7adfd8f98370c984c4a649eee7cdb0876330afae99085f77d9d5f21d629e7be7b50d2cae145041da5112db9e1309746c0688121fde8fe8b47fbd2dec350f95face45b5637197c593500dfaf0093050d056c9763b5b07", 0xd6}, {&(0x7f0000000580)='9g', 0x2}], 0x7, &(0x7f00000008c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_retopts={{0x50, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0xa8, [@local]}, @timestamp={0x44, 0xc, 0x60, 0x0, 0xe, [0x9, 0xa]}, @timestamp_addr={0x44, 0xc, 0x84, 0x1, 0x3, [{@loopback, 0xac}]}, @timestamp_addr={0x44, 0x1c, 0x53, 0x1, 0xb, [{@broadcast, 0x5}, {@rand_addr=0x64010101, 0x3f6c}, {@multicast1, 0x1ff}]}, @ra={0x94, 0x4, 0x1}]}}}], 0x68}}, {{&(0x7f0000000940)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000001e40)=[{&(0x7f0000000980)="6d2ad57f4466bc01024ee08d8fee7571a0fdb19f07c39fbd2086e6b3c741e50a90da30a726a93d31ba251f3bf9f5069ec79a561c347ab7905583f1c6d36f567c8f5196960249efac6812e1bfa53ad1090c38dee3e657e6b1e9531a1e48cd83aa8142f91db6f90702a4a5b1941620eb9d2109fac96944fc51a0f139215f26e233ef959f546c79754708887707698c3f9fbe83a02fca7d4b2baa11bf35b9d62ed1126e8ae4960ed24bf77dbe9eeba31ebe04e9", 0xb2}, {&(0x7f0000000a40)="702f54a246735168eea66784eb495c4d9eca546039f7f274df96e400128259fe3f598b134f7fc9e37588b986fab61f7e8f280356cda35f9ec8b26b4e49b644dce1d527a185daec03e4616f8f7bcdb1ab36ef1cf15fe9c8cb784fb78d361a5b51d34ec1c64cc1ac4a0786e3a14d0d9ed244b288d85bb04f0fe7fec4fc4f236fa7add4505b0b4403ad75dea09ab8fe3606ba6b979b2ebc76248d6e0816e4251a512f4629", 0xa3}, {&(0x7f0000000b00)="2bbce8c4b2bf48f3d7af0370d5cccd9ca1203534f65f35a00b272237bbbc42c160f3bf696cc1de906345e323d54b246103a524cc2b21d6634fdccfa924f6a290d67e436231bd20211b17808b77d9bf6100100ae809702678fe509c97e56bd50da7536b614cab39f82c5471b5e4b713dd38e4b8fca1578e1c9a2ca367418f", 0x7e}, {&(0x7f0000000b80)="c77719fe839a87f4eda4250514bb", 0xe}, {&(0x7f0000000bc0)="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", 0x1000}, {&(0x7f0000001bc0)="a27f731394be40a4918ead3a064fec56cf53dc55a15372fc07ec76e7fffcb210cb8881b6d31ef69cb1d31c8a5762dcf0f62f2168f5f465ffad2fdebd3b38f76f5ebb94b547e8342954f93991d90c13f0edcbdd28e981f8fed497ff78f0df09d46cb2daf0a1f36389a6fbef9da6dfaec710cf357fa75404ba8e3354e692391cdef5e413a049", 0x85}, {&(0x7f0000001c80)="484e04ce9a5f0957f610347cf98979bee3f5525b0e157fd40af7de0d12a86221dd6bfc19b7c8e7ac8ceccacdae2a9de7f5c1e2f2516532fb2e0bb7f7070929aa99c46015650b76fcae", 0x49}, {&(0x7f0000001d00)="8e6a01b74fa1578682e03f9e92eab781e10564c56cb939eeafd28bf7eee0abb939325470b9eed5d352820814e863ec9bd20d92e2929bf835af", 0x39}, {&(0x7f0000001d40)="321bcf66acd67072959db173634f1e4005a6cbed2bd4f0f3025114f75dca0dbe3a1d8ea052aaa40015e3026c99cebbb703e2aad6ee28b4bcee35294d0cb0b44583e77454f8c59a7708faaa36eaccd03f40fffce5f32e15620088e260dce5de2503832a8a6e348c1ed2f534a763f1c425948b808bf2f4d2b8cc1d04ac29d9725db3f19c591e36a260517e97943cae1fafaebfe2058a10a5da2b4cf3744394ee1d4214a26302e8463d4111e0d0acd820135c47b699e628441a4a5e7f0f8eb8adfb4e79ef2c981aa988ecf73108efd2fbdf259b7873dbbda89b081f9f89bd9158177f2264196583d16589454619c06ff7e9978c66e0faa5", 0xf6}], 0x9}}, {{&(0x7f0000001f00)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000002140)=[{&(0x7f0000001f40)="8e14fd62376a80b5254cae01ff9aea74bf901da3216475aa8de9c8292a429d812482c3a4d32d5e5e6dc9cf0a7225961778d2f6c8b1e4e28ab8c030bbac0cc401924859d6789d036cdc3556c5f7fb091339692b05b535b186d7239f931c549e38662b1c4e766fe15d8ef5a9ae8539", 0x6e}, {0x0}, {&(0x7f0000002040)="2af2f05a1872fc547c8b905a7bae9e3d65620e5d3076c1c7a5afd1865efde1a71b84d6615a140a978cac9b743b021ad0037958232eb33c9738aec2c34dcf8c2c22fa44cd3929547577e0bffba8e655ea2c7cb3e1ac24a3e6eaef7dddc2dd31ea65b7afb52b5ec96be88be59e85366592cda994a748dfd19475daf4cfad4c584cd36872945da8df83abfec9b7299900a41729465e0a807229592d6d626dcdab6a4c30c73d258ca84e65e621f35b195ac4f8e59dff8ce29e3413e2b611f8e7ef9867ccb98d9ca0a9dbca68f203c1fa3e718fdf0b7771dcfa9de50f01548ba0c932736ddefaa67378e38444", 0xea}], 0x3, &(0x7f00000022c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x32}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xc}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @loopback}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @dev={0xac, 0x14, 0x14, 0x43}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010102, @broadcast}}}], 0xb8}}], 0x3, 0x0) setsockopt$inet_group_source_req(r5, 0x0, 0x2b, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)=ANY=[@ANYBLOB="ec278ac0e901d7d12a1c4688b80e72824458c10770526462c19f2f4f15d40ed7f552fb65936b21d340", @ANYRES32], 0x34}}, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$unix(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1400000000000000f3be59d495b85a1f700a00000001000000", @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00'], 0x18}, 0x0) recvmsg$unix(r7, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 15.670352979s ago: executing program 4 (id=317): r0 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r0, 0xc06c4124, 0xfffffffffffffffd) 15.629262011s ago: executing program 0 (id=293): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@gettaction={0x20, 0x5a, 0xc6b747b6bf1c6f95, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc}]}, 0x20}}, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r1) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x130, r3, 0x400, 0x70bd2d, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7f}, {0x6, 0x11, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x2}}]}, 0x130}, 0x1, 0x0, 0x0, 0x20044815}, 0x4000000) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0xc4, r4, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1800}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xfb}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_hsr\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x800}, 0x20000004) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) r6 = socket$nl_rdma(0x10, 0x3, 0x14) r7 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x9, 0x80) ioctl$DRM_IOCTL_AUTH_MAGIC(r7, 0x40046411, &(0x7f0000000340)=0x6) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r6, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001100)={0x28, 0x140b, 0x1, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x28}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc028020", 0x12) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup2(r9, r8) r11 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r9, &(0x7f0000000000)) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r7) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x7c, r12, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7f}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xc3}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x4f}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x60044004) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r8, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r11, 0x2, r10, 0x0) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="000000f5"], 0xfdef) socket$packet(0x11, 0x2, 0x300) 15.405442222s ago: executing program 4 (id=319): r0 = eventfd2(0x0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = dup3(r1, r0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x10010, 0x0) listxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000080)=""/16, 0x10) io_setup(0x0, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, 0x0, 0x0) recvmmsg(r6, &(0x7f0000002ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4986beeb72c8e07e, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) socket$nl_crypto(0x10, 0x3, 0x15) bind$can_j1939(r2, &(0x7f0000000140)={0x1d, r7}, 0x18) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f0000000040)={&(0x7f00000005c0)="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", 0xfe}) 11.561047271s ago: executing program 4 (id=321): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pselect6(0xfffffffffffffe5e, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000004100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5043, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_route(0x10, 0x3, 0x0) getrlimit(0x2, &(0x7f0000000040)) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r5}, 0x10) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="d8000000180081034e81f783db4cb9040a1d020006007c09e8fc55a10a0015000400142603600e120800140000000401a80009000800024004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) keyctl$set_reqkey_keyring(0xe, 0x5) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@empty, @in6=@private1}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r7, 0xc0182101, 0x0) r8 = syz_open_dev$vbi(&(0x7f0000000200), 0x1, 0x2) r9 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) ioctl$USBDEVFS_CONTROL(r9, 0xc0185500, &(0x7f0000000240)={0x80, 0x6, 0x347, 0x0, 0x0, 0x0, 0x0}) ioctl$VIDIOC_G_SLICED_VBI_CAP(r8, 0xc0745645, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x4c, &(0x7f000002eff0)={0x20000000000003da, &(0x7f0000000000)=[{}]}, 0x10) sendto(r10, 0x0, 0x34000, 0x0, 0x0, 0x0) 10.785956038s ago: executing program 0 (id=324): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = open(&(0x7f0000000300)='./file0\x00', 0x602002, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x20040, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r4, @ANYBLOB="05"], 0x0) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000002c0)="07030357fa3f85cd282cb9ab7e0a6d90d11f30e1bc20889d43", 0x19}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000280)="7c3bec4b888c61da861ee9a2772cdd13828de4132ee4c0ae80c5da6bc63cc2097a6ae893", 0x24}], 0x1}}], 0x2, 0x240400c0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = dup(r6) ioctl$KVM_SET_MSRS(r7, 0x4140aecd, &(0x7f00000001c0)=ANY=[]) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(r8, 0x0, 0x0) fstat(r1, 0x0) 9.949773165s ago: executing program 2 (id=325): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) write$vga_arbiter(r3, &(0x7f0000000040)=@other={'unlock', ' ', 'none'}, 0xc) r4 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000280)={{{@in=@remote, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@mcast1, 0x0, 0x6c}, 0x0, @in=@multicast1}}, 0xe8) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97000288c19e9ace00000000000000002100000002ff020000000000000000000000000001"], 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0xc2604111, &(0x7f0000000180)) 9.850395274s ago: executing program 2 (id=327): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='syzkaller\x00', 0x7}, 0x90) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r0, r1, 0x26}, 0x10) syz_usb_connect(0x4, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100006b7bfb100809022468e043a3621b7905040d000100000000090400000241b906000905060200000000"], 0x0) 9.145283955s ago: executing program 2 (id=328): r0 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r0, 0xc06c4124, 0xfffffffffffffffd) 9.002191123s ago: executing program 2 (id=329): syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, &(0x7f0000000100)=0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = syz_io_uring_setup(0x2ddd, &(0x7f00000006c0)={0x0, 0x0, 0x10100}, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x5e2, &(0x7f0000000080), &(0x7f0000000180)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r4, r3, 0x0) io_uring_enter(r2, 0x381b, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000000040), 0x4) syz_io_uring_submit(0x0, r0, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r1, 0x0}) syz_open_dev$radio(0x0, 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x0, 0x16, &(0x7f0000000240)=ANY=[], 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x4030582b, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x48, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r8 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r8, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCSCLOCKID(r8, 0x400445a0, &(0x7f0000000140)=0x7) 7.573784897s ago: executing program 0 (id=331): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c000000000101040000000000000000020000002400018014000180080001007f00000108000200ac1e00010c0002800500010000000000240002801400018008000100ac"], 0x6c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="80000000", @ANYBLOB="100029bd7000fddbcba8b10e04326306dc3ff5df254b0000001300a9002200ca1bdeae69c7d70f12850e14120008000100706369001100020030303030"], 0x80}, 0x1, 0x0, 0x0, 0x840}, 0x4005d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x6) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000280), 0x2, r6}) ioctl$BTRFS_IOC_INO_PATHS(r4, 0xc0389423, &(0x7f00000003c0)={0x3, 0x0, [0x91, 0x3, 0x6, 0x2], &(0x7f0000000100)}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000480)={&(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000640)={0x3, 0x0, &(0x7f0000000600)=[0x0, 0x0, 0x0]}) writev(0xffffffffffffffff, 0x0, 0x0) r7 = socket(0x840000000002, 0x3, 0x100) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="700000001e00050300000000000000007f0000010000000000000000000000000000000000000000ac1e00010000000000000000000000000000000000000000240009"], 0x70}}, 0x0) connect$inet(r7, &(0x7f0000000900)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r7, &(0x7f0000005240), 0x264e33, 0xfffe) 7.532465429s ago: executing program 3 (id=332): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="180800003800db65307200008f00000000000000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b9a", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0x25dfdbfd, {0x7, r8}, [@MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x1, 0x0, 0x0, {@ip4=@broadcast}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) accept4(r9, 0x0, 0x0, 0x800) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000080), 0x0) sendto$inet6(r5, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f9104", 0xa2, 0x1, 0x0, 0x0) splice(r5, 0x0, r4, 0x0, 0x406f413, 0x2) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) add_key$keyring(&(0x7f0000000080), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) 7.387972214s ago: executing program 1 (id=239): timerfd_create(0x3, 0x0) clock_gettime(0x0, &(0x7f0000000000)) listen(0xffffffffffffffff, 0x6) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$vbi(0x0, 0x3, 0x2) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100), 0x4) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000), 0xf) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89f1, &(0x7f0000000040)={'ip6_vti0\x00', @random='\a\x00\x00 \x00'}) connect(r1, &(0x7f0000000200)=@nl=@unspec, 0x80) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000080)={0xf0f041}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x1f4, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xfff2}}, [@TCA_CHAIN={0x8}, @TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @filter_kind_options=@f_route={{0xa}, {0x1ac, 0x2, [@TCA_ROUTE4_ACT={0x124, 0x6, [@m_csum={0xc4, 0xa, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x38000000, 0x20000000, 0x8, 0x4}, 0x57}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x6, 0x10000006, 0x10001, 0x60}, 0x49}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x4, 0xffffffffffffffff, 0x6, 0x2}, 0x45}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x400, 0x10000000, 0x1d4ff1bb, 0x4}, 0x1c}}]}, {0x25, 0x6, "991484448f1d00330606eae8262acc6b874adb0b5f39b5acc02b0f0c146eb28c42"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_nat={0x2c, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x0, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}, @TCA_ROUTE4_ACT={0x6c, 0x6, [@m_connmark={0x68, 0x0, 0x0, 0x0, {{0xd}, {0x4}, {0x35, 0x6, "91a991d04aa8cb411880b88050856c4a5b99aafe5cf70a535f4e162db7c30535ebf5e9ab54237bf6d2780785c80bcf9eae"}, {0xc}, {0xc}}}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0x4}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xa3}]}}]}, 0x1f4}}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) recvmsg$kcm(r4, &(0x7f0000000100)={&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/29, 0x1d}], 0x1}, 0x60) 5.555992526s ago: executing program 0 (id=333): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000007060102000000000000e1ff00000000050001000700000008000640000000"], 0x24}}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000010bd283409000000000001090224000100000000fff58e85080071090400000103000000092100000001220500090181230000000000"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x3, &(0x7f0000000140)=ANY=[@ANYRES16=r1], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) syz_usb_control_io(r1, &(0x7f0000000ac0)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="030005"], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = fsopen(&(0x7f00000000c0)='nilfs2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x82) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) io_uring_setup(0x2602, &(0x7f0000000380)={0x0, 0x6, 0x0, 0x3, 0x1a2, 0x0, r4}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0xfff}], 0x1) open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x1) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, 0x0, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000300)={0x43, 0x0, 0x80000001, 0x0, 0x81, "11e06893f55334da8db2923c8d277373c9bacd", 0x1ff}) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="54000036020601010000000000000000000000040500050003000000050005000300000012e60200686155683a6e65742c706f727400000005000500000000000900020073797a30000000000500050007000000"], 0x54}, 0x1, 0x0, 0x0, 0x80c0}, 0x20004000) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x48) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, r7, 0x5}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x240000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) 5.071817863s ago: executing program 4 (id=334): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x43}}, 0x10) creat(&(0x7f0000000100)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$tipc(r1, &(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x78ba66196777f893, {0x43}}, 0x10) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) r6 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r6, &(0x7f0000000080), 0x10) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, 0x0, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_raw(r6, &(0x7f0000000040)={0x1d, r8}, 0x10) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000340)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', r5, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @multicast1}}}}) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000040)=0x3, 0x4) 4.816682321s ago: executing program 2 (id=335): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={@ipv4, @local, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r1}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000e00)=[{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000440)="d4e666e247641d8d52a3ef9c12c8178a747bbd0977ea55bea644a3797cd4bd60", 0x20}], 0x1, &(0x7f0000000740)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f00000008c0)) r4 = io_uring_setup(0xb3e, &(0x7f0000000340)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) r6 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r5, &(0x7f0000000380), &(0x7f0000000040)=@udp=r6}, 0x20) recvmsg(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f0000000280)=""/149, 0x95}, {&(0x7f0000002440)=""/4096, 0x1000}, {&(0x7f0000000480)=""/169, 0xa9}, {&(0x7f0000000780)=""/184, 0xb8}, {&(0x7f0000000100)=""/49, 0x31}, {&(0x7f0000000a80)=""/147, 0x93}, {&(0x7f0000000140)=""/19, 0x13}, {&(0x7f0000000900)=""/157, 0x9d}], 0x9}, 0x1) recvmsg$kcm(r3, &(0x7f0000000880)={&(0x7f0000000600)=@pppol2tpv3, 0x80, &(0x7f0000000540)=[{&(0x7f0000000400)=""/27, 0x1b}, {&(0x7f00000006c0)=""/76, 0x4c}, {&(0x7f0000000b40)=""/209, 0xd1}, {&(0x7f0000003440)=""/4096, 0x1000}], 0x4, &(0x7f0000000840)=""/50, 0x32}, 0x40000103) close_range(r4, 0xffffffffffffffff, 0x0) recvmsg(r3, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)=""/74, 0xf}, {&(0x7f0000000580)=""/66, 0x42}], 0x2}, 0x0) 3.983635563s ago: executing program 3 (id=336): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) write$vga_arbiter(r3, &(0x7f0000000040)=@other={'unlock', ' ', 'none'}, 0xc) r4 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000280)={{{@in=@remote, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@mcast1, 0x0, 0x6c}, 0x0, @in=@multicast1}}, 0xe8) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97000288c19e9ace00000000000000002100000002ff020000000000000000000000000001"], 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0xc2604111, &(0x7f0000000180)) 3.981065311s ago: executing program 4 (id=337): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) madvise(&(0x7f00004fb000/0x3000)=nil, 0x3000, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev, [], [], 'batadv0\x00', 'wg1\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x4c00}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x80000]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e8) r3 = eventfd2(0x0, 0x0) fcntl$notify(r3, 0x5, 0x20000000) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0xc008ae91, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_FEATURES(0xffffffffffffffff, 0x80189439, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c0000000400000002000000000000440200000002000000000000110300000000000000002e5f00"], 0x0, 0x38}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, r4}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000080)=0xb4) r6 = syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/ipc\x00') syz_clone(0x1100, &(0x7f0000000440)="507e8192211a69955cb025d5b753bd07411c84b19ca6e7a9595c2a6717025d1d887b4ed4541be9c48be2efcef4207f58541c62b52173816963f6904fb336bf4eb250fe85ba5e81", 0x47, &(0x7f0000000040), &(0x7f00000004c0), &(0x7f0000000500)="24a03d7f580dbdd8ae") dup2(r6, 0xffffffffffffffff) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r7, 0x40049421, 0x7) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x24}}, 0x0) 3.883107641s ago: executing program 1 (id=338): syz_emit_ethernet(0xfdef, &(0x7f0000000100)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "92c01f", 0x8, 0x2f, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @private}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}}}}}}}, 0x0) (fail_nth: 12) 3.562009453s ago: executing program 3 (id=339): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = dup(r1) getdents64(r2, &(0x7f0000002f40)=""/4098, 0x1002) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000100070000000900020073797a31000000001400078008000600000000f1070013400000000010000300686173683a69702c6d6163000500050002000000050004"], 0x5c}}, 0x0) 3.145866337s ago: executing program 1 (id=340): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_DECODER_CMD(r3, 0xc0485660, &(0x7f0000000240)={0x0, 0x0, @stop_pts=0x6}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000c000000180001801400020067656e657665310000000000000000001c00038014f0c5bae51e8116a4547a7d0003800c0001800800010000"], 0x48}}, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0xc, 0x109042) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0xa, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[], 0x57}, 0x1, 0x7}, 0x90) syz_open_dev$amidi(&(0x7f0000000040), 0x2, 0x2) r5 = socket$packet(0x11, 0x3, 0x300) r6 = getpid() syz_pidfd_open(r6, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBMETA(r7, 0x4b63, 0x0) timer_create(0x5, &(0x7f0000000200)={0x0, 0x36, 0x2, @tid=r6}, &(0x7f00000002c0)) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000000)=0x930d, 0x4) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r8, 0x0, 0xd, &(0x7f00000001c0)="01", 0x1) getsockopt$inet_opts(r8, 0x0, 0x9, 0x0, &(0x7f00000000c0)) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x7, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond_slave_1\x00', 0x0}) sendto$packet(r5, &(0x7f0000000180), 0x0, 0x40810, &(0x7f00000000c0)={0x11, 0x9, r9, 0x1, 0x82, 0x6, @multicast}, 0x14) setpriority(0x0, r6, 0xfffffffffffffffb) r10 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) fsmount(r10, 0x0, 0x0) 2.976786577s ago: executing program 3 (id=341): r0 = eventfd2(0x0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = dup3(r1, r0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x10010, 0x0) listxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000080)=""/16, 0x10) io_setup(0x0, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x6f}, 0xc) recvmmsg(r6, 0x0, 0x0, 0x4986beeb72c8e07e, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) socket$nl_crypto(0x10, 0x3, 0x15) bind$can_j1939(r2, &(0x7f0000000140)={0x1d, r7}, 0x18) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f0000000040)={&(0x7f00000005c0)="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", 0xfe}) 2.970282654s ago: executing program 2 (id=342): socket$packet(0x11, 0x2, 0x300) r0 = socket$tipc(0x1e, 0x4, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) io_setup(0x7, &(0x7f0000000140)=0x0) io_submit(r2, 0x1, &(0x7f00000004c0)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e1e, @empty}, 0x10) listen(r3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000003200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@enum={0x0, 0x2, 0x0, 0x6, 0x4, [{0x2}, {}]}]}, {0x0, [0x0, 0x5f]}}, &(0x7f0000000f40)=""/4089, 0x38, 0xff9, 0x8}, 0x20) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000280)=0x0) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r6, 0x1, 0x5004) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x3, &(0x7f0000000340)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 1.745770737s ago: executing program 3 (id=343): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c000000000101040000000000000000020000002400018014000180080001007f00000108000200ac1e00010c0002800500010000000000240002801400018008000100ac"], 0x6c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="80000000", @ANYBLOB="100029bd7000fddbcba8b10e04326306dc3ff5df254b0000001300a9002200ca1bdeae69c7d70f12850e14120008000100706369001100020030303030"], 0x80}, 0x1, 0x0, 0x0, 0x840}, 0x4005d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x6) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000280), 0x2, r6}) ioctl$BTRFS_IOC_INO_PATHS(r4, 0xc0389423, &(0x7f00000003c0)={0x3, 0x0, [0x91, 0x3, 0x6, 0x2], &(0x7f0000000100)}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000480)={&(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000640)={0x3, 0x0, &(0x7f0000000600)=[0x0, 0x0, 0x0]}) writev(0xffffffffffffffff, 0x0, 0x0) r7 = socket(0x840000000002, 0x3, 0x100) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="700000001e00050300000000000000007f0000010000000000000000000000000000000000000000ac1e00010000000000000000000000000000000000000000240009"], 0x70}}, 0x0) connect$inet(r7, &(0x7f0000000900)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r7, &(0x7f0000005240), 0x264e33, 0xfffe) 600.903416ms ago: executing program 3 (id=344): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1, 0x2}, 0x18) connect$can_j1939(r0, &(0x7f0000000200)={0x1d, r1, 0x3}, 0x18) sendmmsg(r0, &(0x7f00000038c0)=[{{0x0, 0x0, 0x0}}], 0x3ffffffffffff06, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000000)=0x44, &(0x7f0000000040)=0x4) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7e9, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000000)={0x2, 0x1, 0x0, "abd657bebbdd23613cfda38214fc0e59299e701cef6329784aa62d2f521ee9cc"}) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x200002, 0x0) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) write$binfmt_script(r7, 0x0, 0xfffffe5d) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r8, @ANYBLOB="01ff00e1c2ed00001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x401, 0x70bd2d, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bond_slave_0\x00'}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x50}, 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000000f530aea144f04649007b4e3ee996ddfbe3ad7a18d572"], 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4c8c0}, 0x0) 474.950721ms ago: executing program 0 (id=345): syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, &(0x7f0000000100)=0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = syz_io_uring_setup(0x2ddd, &(0x7f00000006c0)={0x0, 0x0, 0x10100}, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x5e2, &(0x7f0000000080), &(0x7f0000000180)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r4, r3, 0x0) io_uring_enter(r2, 0x381b, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000000040), 0x4) syz_io_uring_submit(0x0, r0, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r1, 0x0}) syz_open_dev$radio(0x0, 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x0, 0x16, &(0x7f0000000240)=ANY=[], 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x4030582b, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x48, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r8 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r8, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCSCLOCKID(r8, 0x400445a0, &(0x7f0000000140)=0x7) 0s ago: executing program 4 (id=346): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="180800003800db65307200008f00000000000000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b9a", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0x25dfdbfd, {0x7, r8}, [@MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x1, 0x0, 0x0, {@ip4=@broadcast}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) accept4(r9, 0x0, 0x0, 0x800) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000080), 0x0) sendto$inet6(r5, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f9104", 0xa2, 0x1, 0x0, 0x0) splice(r5, 0x0, r4, 0x0, 0x406f413, 0x2) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) add_key$keyring(&(0x7f0000000080), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) kernel console output (not intermixed with test programs): 83.653669][ T5335] netlink: 76 bytes leftover after parsing attributes in process `syz.1.12'. [ 83.791599][ T5218] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 83.867296][ T5218] usb 1-1: device descriptor read/8, error -71 [ 84.072226][ T5349] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_macvtap, syncid = 0, id = 0 [ 84.112200][ T5347] IPVS: stopping backup sync thread 5349 ... [ 84.176186][ T5218] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 84.266137][ T5218] usb 1-1: device descriptor read/8, error -71 [ 84.269267][ T58] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 84.281724][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 84.327676][ T5353] netlink: 80 bytes leftover after parsing attributes in process `syz.1.18'. [ 84.370724][ T5353] netlink: 80 bytes leftover after parsing attributes in process `syz.1.18'. [ 84.416397][ T5218] usb usb1-port1: unable to enumerate USB device [ 84.540823][ T58] usb 4-1: unable to get BOS descriptor or descriptor too short [ 84.587927][ T58] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 84.614927][ T58] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 84.627796][ T58] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 84.647051][ T58] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 84.670218][ T58] usb 4-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 84.684143][ T58] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.700222][ T5361] netlink: 20 bytes leftover after parsing attributes in process `syz.2.22'. [ 84.719152][ T58] usb 4-1: Product: syz [ 84.723579][ T58] usb 4-1: Manufacturer: syz [ 84.729408][ T58] usb 4-1: SerialNumber: syz [ 84.764959][ T58] usb 4-1: config 0 descriptor?? [ 84.775151][ T5343] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 84.805601][ C1] usb 4-1: NFC: Urb failure (status -71) [ 84.820612][ T58] usb 4-1: NFC: Unable to get FW version [ 84.831190][ T58] pn533_usb 4-1:0.0: probe with driver pn533_usb failed with error -90 [ 84.836567][ T5268] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 85.079963][ T2516] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.199495][ T5339] usb 4-1: USB disconnect, device number 2 [ 85.335364][ T2516] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.370499][ T5228] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 85.456567][ T2516] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.481769][ T5268] usb 5-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 85.497797][ T5268] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.527397][ T5268] usb 5-1: config 0 descriptor?? [ 85.573493][ T2516] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.576058][ T5228] usb 2-1: Using ep0 maxpacket: 16 [ 85.630666][ T5228] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 85.646768][ T5228] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.665070][ T5228] usb 2-1: Product: syz [ 85.683680][ T5228] usb 2-1: Manufacturer: syz [ 85.691325][ T5228] usb 2-1: SerialNumber: syz [ 85.777555][ T5228] r8152-cfgselector 2-1: Unknown version 0x0000 [ 85.824714][ T5228] r8152-cfgselector 2-1: config 0 descriptor?? [ 85.846119][ T5268] gs_usb 5-1:0.0: Couldn't send data format (err=-71) [ 85.863413][ T5268] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -71 [ 85.912595][ T5369] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 85.912859][ T5268] usb 5-1: USB disconnect, device number 2 [ 86.114518][ T2516] bridge_slave_1: left allmulticast mode [ 86.137271][ T2516] bridge_slave_1: left promiscuous mode [ 86.162932][ T2516] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.222134][ T2516] bridge_slave_0: left allmulticast mode [ 86.234586][ T2516] bridge_slave_0: left promiscuous mode [ 86.234955][ T5222] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.241784][ T5267] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 86.264569][ T2516] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.272506][ T5222] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.286482][ T5222] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.297778][ T5222] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.310353][ T5222] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 86.322246][ T5222] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.507661][ T5267] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.527542][ T5267] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 86.571724][ T5267] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.615107][ T5267] usb 4-1: config 0 descriptor?? [ 86.726187][ T5268] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 86.848572][ T5305] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 86.880430][ T1168] cfg80211: failed to load regulatory.db [ 86.918953][ T5268] usb 3-1: Using ep0 maxpacket: 16 [ 86.927179][ T5268] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 86.949391][ T5268] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 86.958961][ T5268] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.969254][ T5268] usb 3-1: Product: syz [ 86.972386][ T2516] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 86.973453][ T5268] usb 3-1: Manufacturer: syz [ 86.973475][ T5268] usb 3-1: SerialNumber: syz [ 86.983168][ T5268] usb 3-1: config 0 descriptor?? [ 87.003958][ T2516] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.018638][ T2516] bond0 (unregistering): Released all slaves [ 87.051638][ T5305] usb 5-1: config 0 has an invalid interface number: 156 but max is 1 [ 87.082003][ T5305] usb 5-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 87.083724][ T5267] lenovo 0003:17EF:6047.0001: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.3-1/input0 [ 87.118355][ T5305] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 87.139354][ T5305] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 87.166415][ T5305] usb 5-1: config 0 has no interface number 0 [ 87.172730][ T5305] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 87.224633][ T5305] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 87.271522][ T5268] usb 3-1: Unknown endpoint type found, address 0x06 [ 87.273133][ T5305] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 87.294596][ T5305] usb 5-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 87.316464][ T5268] usb 3-1: Not enough endpoints found in device, aborting! [ 87.318704][ T5305] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 87.349937][ T5305] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.380131][ T5305] usb 5-1: config 0 descriptor?? [ 87.411522][ T5305] gspca_main: spca561-2.14.0 probing abcd:cdee [ 87.423634][ T5267] lenovo 0003:17EF:6047.0001: Failed to switch F7/9/11 mode: -71 [ 87.457354][ T5267] lenovo 0003:17EF:6047.0001: Failed to switch middle button: -71 [ 87.476530][ T1168] r8152-cfgselector 2-1: USB disconnect, device number 2 [ 87.488313][ T5267] lenovo 0003:17EF:6047.0001: Fn-lock setting failed: -71 [ 87.531666][ T5268] usb 3-1: USB disconnect, device number 2 [ 87.546048][ T5267] lenovo 0003:17EF:6047.0001: Sensitivity setting failed: -71 [ 87.591666][ T5267] usb 4-1: USB disconnect, device number 3 [ 88.798717][ T0] NOHZ tick-stop error: local softirq work is pending, handler #180!!! [ 88.807788][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 88.904327][ T5222] Bluetooth: hci4: command tx timeout [ 88.948318][ T5305] spca561 5-1:0.156: probe with driver spca561 failed with error -22 [ 88.989137][ T5305] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 88.993012][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 89.059461][ T5305] usb 5-1: MIDIStreaming interface descriptor not found [ 89.163308][ T5406] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 89.607121][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 89.616470][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 89.625539][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 89.645992][ T5305] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 89.748840][ T2516] hsr_slave_0: left promiscuous mode [ 89.772284][ T2516] hsr_slave_1: left promiscuous mode [ 89.788061][ T2516] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.801558][ T2516] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.823542][ T2516] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.847740][ T5305] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.869514][ T2516] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.883931][ T5305] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.911674][ T5305] usb 3-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 89.952538][ T5305] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.998068][ T2516] veth1_macvtap: left promiscuous mode [ 90.002975][ T5268] usb 5-1: USB disconnect, device number 3 [ 90.017059][ T2516] veth0_macvtap: left promiscuous mode [ 90.022664][ T2516] veth1_vlan: left promiscuous mode [ 90.079180][ T5305] usb 3-1: config 0 descriptor?? [ 90.108455][ T2516] veth0_vlan: left promiscuous mode [ 90.135198][ T5424] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 90.965982][ T5222] Bluetooth: hci4: command tx timeout [ 91.887267][ T5437] syz.4.36: attempt to access beyond end of device [ 91.887267][ T5437] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 91.899994][ T5437] hpfs: hpfs_map_sector(): read error [ 92.393874][ T2516] team0 (unregistering): Port device team_slave_1 removed [ 92.459001][ T2516] team0 (unregistering): Port device team_slave_0 removed [ 93.020592][ T5222] Bluetooth: hci4: command tx timeout [ 93.086041][ T5421] netlink: 60 bytes leftover after parsing attributes in process `syz.1.35'. [ 93.611715][ T5305] usbhid 3-1:0.0: can't add hid device: -71 [ 93.624844][ T5375] chnl_net:caif_netlink_parms(): no params data found [ 93.656414][ T5305] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 93.706775][ T5305] usb 3-1: USB disconnect, device number 3 [ 94.105985][ T1168] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 94.218867][ T5305] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 94.321454][ T1168] usb 2-1: device descriptor read/64, error -71 [ 94.393914][ T5468] netlink: 96 bytes leftover after parsing attributes in process `syz.4.41'. [ 94.460729][ T5305] usb 3-1: Using ep0 maxpacket: 16 [ 94.469710][ T5375] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.532252][ T5305] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 94.549569][ T5375] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.581965][ T5375] bridge_slave_0: entered allmulticast mode [ 94.598729][ T5305] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 94.612225][ T5375] bridge_slave_0: entered promiscuous mode [ 94.626845][ T5305] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.638908][ T5375] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.659703][ T5305] usb 3-1: Product: syz [ 94.663929][ T5305] usb 3-1: Manufacturer: syz [ 94.672068][ T5475] x_tables: duplicate underflow at hook 1 [ 94.679055][ T5375] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.686126][ T1168] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 94.705041][ T5305] usb 3-1: SerialNumber: syz [ 94.711564][ T5375] bridge_slave_1: entered allmulticast mode [ 94.721550][ T5305] usb 3-1: config 0 descriptor?? [ 94.737634][ T5375] bridge_slave_1: entered promiscuous mode [ 94.849039][ T1168] usb 2-1: device descriptor read/64, error -71 [ 94.915428][ T5375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.958363][ T5375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.966771][ T5305] usb 3-1: Unknown endpoint type found, address 0x06 [ 94.984348][ T5305] usb 3-1: Not enough endpoints found in device, aborting! [ 94.993069][ T1168] usb usb2-port1: attempt power cycle [ 95.095955][ T5222] Bluetooth: hci4: command tx timeout [ 95.173243][ T5305] usb 3-1: USB disconnect, device number 4 [ 95.179896][ T5375] team0: Port device team_slave_0 added [ 95.184021][ T5375] team0: Port device team_slave_1 added [ 95.328122][ T5375] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.342093][ T5375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.388712][ T5375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.420497][ T5375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.445689][ T5375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.446122][ T1168] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 95.485355][ T5375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.511075][ T5495] overlayfs: failed to resolve './file1': -2 [ 95.534562][ T5497] netlink: 28 bytes leftover after parsing attributes in process `syz.4.47'. [ 95.549983][ T5497] netlink: 28 bytes leftover after parsing attributes in process `syz.4.47'. [ 95.611157][ T1168] usb 2-1: device descriptor read/8, error -71 [ 95.689329][ T5375] hsr_slave_0: entered promiscuous mode [ 95.708308][ T5375] hsr_slave_1: entered promiscuous mode [ 95.735455][ T5375] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.753058][ T5375] Cannot create hsr debugfs directory [ 95.896948][ T1168] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 95.953728][ T1168] usb 2-1: device descriptor read/8, error -71 [ 96.096496][ T1168] usb usb2-port1: unable to enumerate USB device [ 97.235880][ C1] sched: RT throttling activated [ 98.996201][ T5533] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 99.008211][ T5533] xt_SECMARK: unable to map security context 'system_u:object_r:dbusd_etc_t:s0' [ 101.435695][ T5551] syz.3.57: attempt to access beyond end of device [ 101.435695][ T5551] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 101.448670][ T5551] hpfs: hpfs_map_sector(): read error [ 102.497610][ T5305] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 102.654886][ T5375] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 102.709855][ T5375] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 102.729170][ T5305] usb 4-1: unable to get BOS descriptor or descriptor too short [ 102.756826][ T5305] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.760595][ T5375] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 102.790452][ T5305] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 102.870872][ T5375] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 103.016206][ T5268] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 103.049152][ T5305] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 103.059154][ T5305] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 103.076044][ T5305] usb 4-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 103.085224][ T5305] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.104779][ T5305] usb 4-1: Product: syz [ 103.109070][ T5305] usb 4-1: Manufacturer: syz [ 103.114318][ T5305] usb 4-1: SerialNumber: syz [ 103.136518][ T5305] usb 4-1: config 0 descriptor?? [ 103.143627][ T5560] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 103.167939][ C1] usb 4-1: NFC: Urb failure (status -71) [ 103.174950][ T5305] usb 4-1: NFC: Unable to get FW version [ 103.191585][ T5305] pn533_usb 4-1:0.0: probe with driver pn533_usb failed with error -90 [ 103.257300][ T5268] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 103.271848][ T5268] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 103.281667][ T5375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.290080][ T5268] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 103.314858][ T5268] usb 3-1: config 0 interface 0 has no altsetting 0 [ 103.330531][ T5375] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.332255][ T5268] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 103.355239][ T5268] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 103.379457][ T5268] usb 3-1: config 0 interface 0 has no altsetting 0 [ 103.395158][ T5268] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 103.404820][ T2516] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.412025][ T2516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.413947][ T5268] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 103.443748][ T2516] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.451553][ T2516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.474405][ T25] usb 4-1: USB disconnect, device number 4 [ 103.491216][ T5268] usb 3-1: config 0 interface 0 has no altsetting 0 [ 103.527590][ T5268] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 103.558182][ T5268] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 103.585713][ T5268] usb 3-1: config 0 interface 0 has no altsetting 0 [ 103.733463][ T5268] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 103.756120][ T5268] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 103.768412][ T5268] usb 3-1: config 0 interface 0 has no altsetting 0 [ 103.792776][ T5268] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 103.805198][ T5268] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 103.828637][ T5268] usb 3-1: config 0 interface 0 has no altsetting 0 [ 103.844597][ T5268] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 103.863910][ T5268] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 103.886392][ T5268] usb 3-1: config 0 interface 0 has no altsetting 0 [ 103.906699][ T5268] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 103.915652][ T5268] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 103.949420][ T5268] usb 3-1: config 0 interface 0 has no altsetting 0 [ 103.972162][ T5268] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 103.985267][ T5268] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 104.004149][ T5268] usb 3-1: Product: syz [ 104.008803][ T5268] usb 3-1: Manufacturer: syz [ 104.013432][ T5268] usb 3-1: SerialNumber: syz [ 104.077026][ T5268] usb 3-1: config 0 descriptor?? [ 104.145133][ T5268] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 104.654961][ T5375] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.830861][ T5612] tipc: Started in network mode [ 104.871839][ T5612] tipc: Node identity ac1414aa, cluster identity 4711 [ 104.931745][ T5612] tipc: Enabled bearer , priority 10 [ 105.103054][ T5618] mmap: syz.3.68 (5618) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 105.119082][ T5618] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 105.130038][ T5618] cramfs: wrong magic [ 105.539638][ T5375] veth0_vlan: entered promiscuous mode [ 105.701280][ T5375] veth1_vlan: entered promiscuous mode [ 105.917502][ T5267] tipc: Node number set to 2886997162 [ 105.937988][ T5625] netlink: 288 bytes leftover after parsing attributes in process `syz.3.72'. [ 106.003321][ T5630] netlink: 'syz.3.72': attribute type 1 has an invalid length. [ 106.035690][ T5375] veth0_macvtap: entered promiscuous mode [ 106.062121][ T5630] netlink: 9372 bytes leftover after parsing attributes in process `syz.3.72'. [ 106.096469][ T5375] veth1_macvtap: entered promiscuous mode [ 106.122399][ T5633] Bluetooth: MGMT ver 1.23 [ 106.125958][ T5630] netlink: 'syz.3.72': attribute type 1 has an invalid length. [ 106.161317][ T5375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.179687][ T5375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.193918][ T5375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.217639][ T5375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.237770][ T5375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.254982][ T5375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.303157][ T5375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.367604][ T5375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.438985][ T5375] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.621915][ T5375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.674019][ T5375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.746116][ T5375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.765378][ T5375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.785982][ T5375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.811568][ T5375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.829139][ T5375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.852932][ T5375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.913139][ T5375] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.993587][ T5375] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.045959][ T5375] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.066002][ T5375] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.106395][ T5375] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.296485][ T25] usb 3-1: USB disconnect, device number 5 [ 107.361883][ T25] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 107.549934][ T2516] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.614231][ T2516] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.699249][ T2573] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.746762][ T2573] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.937766][ T5267] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 108.186052][ T5267] usb 3-1: Using ep0 maxpacket: 8 [ 108.200088][ T5267] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 108.230288][ T5267] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.274727][ T5267] usb 3-1: config 0 descriptor?? [ 108.348605][ T1168] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 108.548610][ T1168] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.573366][ T1168] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 108.601686][ T5267] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 108.636108][ T1168] usb 1-1: New USB device found, idVendor=0469, idProduct=c262, bcdDevice= 0.40 [ 108.648553][ T5267] asix 3-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 108.671628][ T1168] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.680458][ T5267] asix 3-1:0.0: probe with driver asix failed with error -71 [ 108.690818][ T1168] usb 1-1: config 0 descriptor?? [ 109.119333][ T1168] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 109.136147][ T5267] usb 3-1: USB disconnect, device number 6 [ 109.875926][ T25] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 110.298895][ T25] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.392026][ T25] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 110.491922][ T25] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 110.583388][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 110.656778][ T25] usb 2-1: SerialNumber: syz [ 111.158013][ T25] usb 2-1: 0:2 : does not exist [ 111.374851][ T25] usb 2-1: USB disconnect, device number 7 [ 111.500762][ T5267] usb 1-1: USB disconnect, device number 6 [ 111.740804][ T5217] udevd[5217]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 112.026067][ T5730] fuse: Bad value for 'group_id' [ 112.031175][ T5730] fuse: Bad value for 'group_id' [ 112.158715][ T5723] tc_dump_action: action bad kind [ 112.799944][ T5267] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 112.874520][ T5731] syz.1.90: attempt to access beyond end of device [ 112.874520][ T5731] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 112.888543][ T5731] hpfs: hpfs_map_sector(): read error [ 113.057745][ T5267] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 113.072610][ T5748] warning: `syz.2.92' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 113.104329][ T5267] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.200046][ T5267] usb 1-1: config 0 descriptor?? [ 113.432895][ T5267] cp210x 1-1:0.0: cp210x converter detected [ 113.446310][ T5750] sctp: [Deprecated]: syz.4.91 (pid 5750) Use of struct sctp_assoc_value in delayed_ack socket option. [ 113.446310][ T5750] Use struct sctp_sack_info instead [ 113.577557][ T5222] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 113.586484][ T5222] Bluetooth: hci1: Injecting HCI hardware error event [ 113.595001][ T5222] Bluetooth: hci1: hardware error 0x00 [ 113.896504][ T5267] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 114.198636][ T5267] usb 1-1: cp210x converter now attached to ttyUSB0 [ 114.256056][ T5763] syz.1.96 uses obsolete (PF_INET,SOCK_PACKET) [ 115.040244][ T5267] usb 1-1: USB disconnect, device number 7 [ 115.051592][ T5267] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 115.087232][ T5761] vivid-004: disconnect [ 115.107154][ T5267] cp210x 1-1:0.0: device disconnected [ 115.289191][ T5777] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 115.680993][ T5222] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 116.008876][ T5760] vivid-004: reconnect [ 117.783029][ T5792] fuse: Bad value for 'group_id' [ 117.788107][ T5792] fuse: Bad value for 'group_id' [ 118.709990][ T5810] netlink: 'syz.4.102': attribute type 21 has an invalid length. [ 118.717925][ T5810] netlink: 'syz.4.102': attribute type 20 has an invalid length. [ 118.725799][ T5810] IPv6: NLM_F_CREATE should be specified when creating new route [ 118.770570][ T29] audit: type=1326 audit(1724656098.658:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5798 comm="syz.4.102" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f415e979e79 code=0x0 [ 119.450162][ T5812] sctp: [Deprecated]: syz.1.105 (pid 5812) Use of struct sctp_assoc_value in delayed_ack socket option. [ 119.450162][ T5812] Use struct sctp_sack_info instead [ 119.566058][ T29] audit: type=1326 audit(1724656099.478:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5816 comm="syz.2.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65a4d79e79 code=0x7ffc0000 [ 119.616371][ T5820] IPVS: stopping backup sync thread 5821 ... [ 119.622555][ T5821] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_macvtap, syncid = 0, id = 0 [ 119.801542][ T29] audit: type=1326 audit(1724656099.478:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5816 comm="syz.2.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65a4d79e79 code=0x7ffc0000 [ 119.846351][ T29] audit: type=1326 audit(1724656099.478:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5816 comm="syz.2.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f65a4d79e79 code=0x7ffc0000 [ 119.940860][ T29] audit: type=1326 audit(1724656099.508:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5816 comm="syz.2.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65a4d79e79 code=0x7ffc0000 [ 119.991602][ T5819] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 120.002336][ T5819] netlink: 8 bytes leftover after parsing attributes in process `syz.0.107'. [ 120.035975][ T29] audit: type=1326 audit(1724656099.508:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5816 comm="syz.2.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65a4d79e79 code=0x7ffc0000 [ 120.126712][ T5828] netlink: 830 bytes leftover after parsing attributes in process `syz.1.110'. [ 120.716170][ T1168] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 120.728983][ T5305] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 120.862525][ T5845] fuse: Bad value for 'group_id' [ 120.867648][ T5845] fuse: Bad value for 'group_id' [ 124.019888][ T5847] netlink: 'syz.2.116': attribute type 21 has an invalid length. [ 124.027854][ T5847] netlink: 'syz.2.116': attribute type 20 has an invalid length. [ 124.035679][ T5847] IPv6: NLM_F_CREATE should be specified when creating new route [ 124.079589][ T29] audit: type=1326 audit(1724656103.968:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5843 comm="syz.2.116" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f65a4d79e79 code=0x0 [ 124.196598][ T1168] usb 5-1: Using ep0 maxpacket: 32 [ 124.288506][ T5305] usb 4-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=b5.55 [ 124.318919][ T5305] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.370350][ T5305] usb 4-1: Product: syz [ 124.427663][ T1168] usb 5-1: device descriptor read/all, error -71 [ 124.612191][ T5305] usb 4-1: config 0 descriptor?? [ 124.893348][ T5305] usb 4-1: can't set config #0, error -71 [ 124.906358][ T5305] usb 4-1: USB disconnect, device number 5 [ 124.910853][ T29] audit: type=1326 audit(1724656104.818:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5853 comm="syz.3.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f4f79e79 code=0x7ffc0000 [ 124.910903][ T29] audit: type=1326 audit(1724656104.818:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5853 comm="syz.3.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f4f79e79 code=0x7ffc0000 [ 125.189553][ T29] audit: type=1326 audit(1724656105.038:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5853 comm="syz.3.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f51f4f79e79 code=0x7ffc0000 [ 128.919583][ T29] audit: type=1326 audit(1724656105.068:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5853 comm="syz.3.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f4f79e79 code=0x7ffc0000 [ 128.920784][ T29] audit: type=1326 audit(1724656108.838:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5853 comm="syz.3.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f51f4f79e79 code=0x7ffc0000 [ 129.327551][ T29] audit: type=1326 audit(1724656109.248:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5853 comm="syz.3.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f4f79e79 code=0x7ffc0000 [ 129.328628][ T29] audit: type=1326 audit(1724656109.248:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5853 comm="syz.3.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f4f79e79 code=0x7ffc0000 [ 129.441186][ T29] audit: type=1326 audit(1724656109.358:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5853 comm="syz.3.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f51f4f79e79 code=0x7ffc0000 [ 129.441244][ T29] audit: type=1326 audit(1724656109.358:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5853 comm="syz.3.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f4f79e79 code=0x7ffc0000 [ 129.441410][ T29] audit: type=1326 audit(1724656109.358:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5853 comm="syz.3.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f4f79e79 code=0x7ffc0000 [ 129.444092][ T29] audit: type=1326 audit(1724656109.358:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5853 comm="syz.3.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f51f4f78810 code=0x7ffc0000 [ 129.444147][ T29] audit: type=1326 audit(1724656109.358:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5853 comm="syz.3.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f4f79e79 code=0x7ffc0000 [ 129.465616][ T29] audit: type=1326 audit(1724656109.378:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5853 comm="syz.3.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f51f4f79e79 code=0x7ffc0000 [ 129.548613][ T29] audit: type=1326 audit(1724656109.468:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5853 comm="syz.3.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f4f79e79 code=0x7ffc0000 [ 129.561120][ T29] audit: type=1326 audit(1724656109.478:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5853 comm="syz.3.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f4f79e79 code=0x7ffc0000 [ 130.317991][ T5885] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 130.836035][ T5305] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 130.948677][ T5897] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_macvtap, syncid = 0, id = 0 [ 130.950536][ T5859] tty tty28: ldisc open failed (-12), clearing slot 27 [ 130.959642][ T5895] IPVS: stopping backup sync thread 5897 ... [ 130.997086][ T4608] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 131.010701][ T4608] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 131.021826][ T4608] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 131.030477][ T4608] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 131.038370][ T4608] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 131.046694][ T4608] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 131.216907][ T5305] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 131.224400][ T5305] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 131.237555][ T5305] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 131.247848][ T5305] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 131.261206][ T5305] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 131.274956][ T5305] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 131.287160][ T5305] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 131.297503][ T5305] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 131.307648][ T5305] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 131.342794][ T5305] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 131.374181][ T5305] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 131.381203][ T5904] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 131.396409][ T5305] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 131.436860][ T5305] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 131.473153][ T5305] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 131.519918][ T5305] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 131.549960][ T1825] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.676638][ T5305] usb 3-1: string descriptor 0 read error: -22 [ 131.696166][ T5305] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 131.705270][ T5305] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.927869][ T5305] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 132.946704][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.960399][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.993579][ T1825] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.176934][ T4608] Bluetooth: hci4: command tx timeout [ 133.701140][ T1825] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.747113][ T5917] netlink: 'syz.1.129': attribute type 21 has an invalid length. [ 133.754921][ T5917] netlink: 'syz.1.129': attribute type 20 has an invalid length. [ 133.763232][ T5917] IPv6: NLM_F_CREATE should be specified when creating new route [ 133.923362][ T1825] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.052430][ T5924] netlink: 16 bytes leftover after parsing attributes in process `syz.1.131'. [ 134.106098][ T5218] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 134.357227][ T5915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.376325][ T25] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 134.403799][ T5915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.521101][ T5896] chnl_net:caif_netlink_parms(): no params data found [ 134.586222][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 134.604519][ T1825] bridge_slave_1: left allmulticast mode [ 134.622468][ T1825] bridge_slave_1: left promiscuous mode [ 134.624235][ T25] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 134.633246][ T1825] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.660697][ T1825] bridge_slave_0: left allmulticast mode [ 134.669735][ T25] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 134.677053][ T1825] bridge_slave_0: left promiscuous mode [ 134.695668][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.697097][ T1825] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.725342][ T25] usb 2-1: Product: syz [ 134.729723][ T25] usb 2-1: Manufacturer: syz [ 134.734398][ T25] usb 2-1: SerialNumber: syz [ 134.760987][ T25] usb 2-1: config 0 descriptor?? [ 134.777684][ T5924] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 134.787509][ T25] hub 2-1:0.0: bad descriptor, ignoring hub [ 134.793517][ T25] hub 2-1:0.0: probe with driver hub failed with error -5 [ 134.815142][ T25] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input5 [ 134.982183][ T5268] usb 3-1: USB disconnect, device number 7 [ 135.306245][ T4608] Bluetooth: hci4: command tx timeout [ 135.475004][ T5218] usb 4-1: unable to get BOS descriptor or descriptor too short [ 135.485692][ T5218] usb 4-1: no configurations [ 135.491880][ T5218] usb 4-1: can't read configurations, error -22 [ 135.635667][ T5937] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 135.648438][ T5937] cramfs: wrong magic [ 136.494035][ T1825] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.521826][ T1825] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 136.541182][ T1825] bond0 (unregistering): Released all slaves [ 136.642442][ T25] usb 2-1: USB disconnect, device number 8 [ 136.648352][ C1] usbtouchscreen 2-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 137.336066][ T5955] vivid-000: disconnect [ 137.336248][ T4608] Bluetooth: hci4: command tx timeout [ 137.605065][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 137.871445][ T5946] vivid-000: reconnect [ 139.461885][ T4608] Bluetooth: hci4: command tx timeout [ 139.639084][ T5896] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.692403][ T5896] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.719870][ T5896] bridge_slave_0: entered allmulticast mode [ 139.744090][ T5896] bridge_slave_0: entered promiscuous mode [ 139.772215][ T5979] netlink: 'syz.3.140': attribute type 21 has an invalid length. [ 139.780397][ T5979] netlink: 'syz.3.140': attribute type 20 has an invalid length. [ 139.793226][ T5979] IPv6: NLM_F_CREATE should be specified when creating new route [ 139.919852][ T1825] hsr_slave_0: left promiscuous mode [ 139.960549][ T1825] hsr_slave_1: left promiscuous mode [ 139.963512][ T5268] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 140.001564][ T1825] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.036094][ T1825] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.048368][ T1825] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.068836][ T1825] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.148908][ T5268] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.177820][ T1825] veth1_macvtap: left promiscuous mode [ 140.184002][ T1825] veth0_macvtap: left promiscuous mode [ 140.190798][ T5268] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.202468][ T1825] veth1_vlan: left promiscuous mode [ 140.208097][ T1825] veth0_vlan: left promiscuous mode [ 140.214352][ T5268] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 140.258265][ T5268] usb 2-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00 [ 140.308354][ T5268] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.348991][ T5268] usb 2-1: config 0 descriptor?? [ 140.796908][ T5268] logitech-hidpp-device 0003:046D:C262.0002: item fetching failed at offset 2/5 [ 140.833346][ T5268] logitech-hidpp-device 0003:046D:C262.0002: hidpp_probe:parse failed [ 140.872016][ T5268] logitech-hidpp-device 0003:046D:C262.0002: probe with driver logitech-hidpp-device failed with error -22 [ 140.983806][ T5297] usb 2-1: USB disconnect, device number 9 [ 141.338239][ T1825] team0 (unregistering): Port device team_slave_1 removed [ 141.383053][ T1825] team0 (unregistering): Port device team_slave_0 removed [ 142.308489][ T5896] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.326562][ T5896] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.333950][ T5896] bridge_slave_1: entered allmulticast mode [ 142.365134][ T5896] bridge_slave_1: entered promiscuous mode [ 142.591157][ T5896] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.634791][ T5896] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.128137][ T5896] team0: Port device team_slave_0 added [ 150.368672][ T5896] team0: Port device team_slave_1 added [ 151.638739][ T6037] netlink: 'syz.3.153': attribute type 21 has an invalid length. [ 151.647273][ T6037] netlink: 'syz.3.153': attribute type 20 has an invalid length. [ 151.806014][ T5896] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.813014][ T5896] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.065224][ T5896] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.081564][ T5896] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.132959][ T5896] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.044145][ T5896] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.771348][ T5896] hsr_slave_0: entered promiscuous mode [ 154.031212][ T5896] hsr_slave_1: entered promiscuous mode [ 154.149526][ T5896] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 154.268348][ T5896] Cannot create hsr debugfs directory [ 154.470391][ T6072] netlink: 'syz.2.159': attribute type 20 has an invalid length. [ 155.267343][ T6094] FAULT_INJECTION: forcing a failure. [ 155.267343][ T6094] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 155.282814][ T6094] CPU: 0 UID: 0 PID: 6094 Comm: syz.4.161 Not tainted 6.11.0-rc5-syzkaller #0 [ 155.291707][ T6094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 155.301791][ T6094] Call Trace: [ 155.305086][ T6094] [ 155.308025][ T6094] dump_stack_lvl+0x241/0x360 [ 155.312732][ T6094] ? __pfx_dump_stack_lvl+0x10/0x10 [ 155.317943][ T6094] ? __pfx__printk+0x10/0x10 [ 155.322554][ T6094] ? __pfx_lock_release+0x10/0x10 [ 155.327597][ T6094] should_fail_ex+0x3b0/0x4e0 [ 155.332287][ T6094] _copy_from_user+0x2f/0xe0 [ 155.336894][ T6094] snd_pcm_oss_write+0xa39/0x11f0 [ 155.342107][ T6094] ? __lock_acquire+0x137a/0x2040 [ 155.347162][ T6094] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 155.352653][ T6094] ? bpf_lsm_file_permission+0x9/0x10 [ 155.358042][ T6094] ? security_file_permission+0x7f/0xa0 [ 155.363606][ T6094] ? rw_verify_area+0x1d2/0x6b0 [ 155.368471][ T6094] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 155.374031][ T6094] vfs_write+0x2a2/0xc90 [ 155.378292][ T6094] ? __pfx_vfs_write+0x10/0x10 [ 155.383065][ T6094] ? __fget_files+0x29/0x470 [ 155.387667][ T6094] ? __fget_files+0x3f6/0x470 [ 155.392348][ T6094] ? __fget_files+0x29/0x470 [ 155.396974][ T6094] ksys_write+0x1a0/0x2c0 [ 155.401367][ T6094] ? __pfx_ksys_write+0x10/0x10 [ 155.406239][ T6094] ? do_syscall_64+0x100/0x230 [ 155.411021][ T6094] ? do_syscall_64+0xb6/0x230 [ 155.415719][ T6094] do_syscall_64+0xf3/0x230 [ 155.420236][ T6094] ? clear_bhb_loop+0x35/0x90 [ 155.424931][ T6094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.430854][ T6094] RIP: 0033:0x7f415e979e79 [ 155.435286][ T6094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.454938][ T6094] RSP: 002b:00007f415f76b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 155.463382][ T6094] RAX: ffffffffffffffda RBX: 00007f415eb16130 RCX: 00007f415e979e79 [ 155.471385][ T6094] RDX: 0000000000004000 RSI: 00000000200012c0 RDI: 0000000000000004 [ 155.479369][ T6094] RBP: 00007f415f76b090 R08: 0000000000000000 R09: 0000000000000000 [ 155.487352][ T6094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 155.495336][ T6094] R13: 0000000000000001 R14: 00007f415eb16130 R15: 00007ffe152fc328 [ 155.503332][ T6094] [ 164.336345][ T5305] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 164.706189][ T25] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 164.837488][ T5305] usb 5-1: device descriptor read/64, error -71 [ 164.971686][ T25] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 164.983259][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.017867][ T25] usb 4-1: Product: syz [ 165.025882][ T25] usb 4-1: Manufacturer: syz [ 165.048909][ T25] usb 4-1: SerialNumber: syz [ 165.087443][ T25] usb 4-1: config 0 descriptor?? [ 165.128728][ T5305] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 165.160811][ T5222] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 165.180513][ T5222] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 165.190213][ T5222] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 165.211831][ T5222] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 165.229411][ T5222] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 165.246136][ T5222] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 165.372992][ T5305] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 165.390778][ T25] hso 4-1:0.0: Failed to find INT IN ep [ 165.397869][ T5305] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.416575][ T25] usb-storage 4-1:0.0: USB Mass Storage device detected [ 165.423602][ T5305] usb 5-1: Product: syz [ 165.432088][ T5305] usb 5-1: Manufacturer: syz [ 165.459597][ T5305] usb 5-1: SerialNumber: syz [ 165.472062][ T5305] usb 5-1: config 0 descriptor?? [ 165.497530][ T5305] ch341 5-1:0.0: ch341-uart converter detected [ 165.822419][ T5297] usb 4-1: USB disconnect, device number 8 [ 165.868766][ T2463] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.966451][ T2463] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.991307][ T5896] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 166.048701][ T5896] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 166.071042][ T5896] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 166.161990][ T2463] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.343521][ T5896] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 166.445623][ T2463] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.844903][ T6130] chnl_net:caif_netlink_parms(): no params data found [ 167.337541][ T4608] Bluetooth: hci5: command tx timeout [ 167.711908][ T5896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.802302][ T5305] ch341-uart ttyUSB0: failed to read break control: -71 [ 167.856081][ T5305] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 167.883400][ T5305] usb 5-1: USB disconnect, device number 7 [ 167.891203][ T5305] ch341 5-1:0.0: device disconnected [ 168.073182][ T6130] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.097522][ T6130] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.104815][ T6130] bridge_slave_0: entered allmulticast mode [ 168.171710][ T6130] bridge_slave_0: entered promiscuous mode [ 168.262310][ T6130] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.299466][ T6130] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.376246][ T6130] bridge_slave_1: entered allmulticast mode [ 168.410849][ T6130] bridge_slave_1: entered promiscuous mode [ 168.563249][ T5896] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.570533][ T5267] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 169.011433][ T6185] netlink: 12 bytes leftover after parsing attributes in process `syz.3.179'. [ 169.527369][ T4608] Bluetooth: hci5: command tx timeout [ 169.683609][ T2463] bridge_slave_1: left allmulticast mode [ 169.706008][ T2463] bridge_slave_1: left promiscuous mode [ 169.742982][ T2463] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.806920][ T2463] bridge_slave_0: left allmulticast mode [ 169.830224][ T2463] bridge_slave_0: left promiscuous mode [ 169.866312][ T5267] usb 3-1: Using ep0 maxpacket: 16 [ 169.871702][ T2463] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.901313][ T5267] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 169.924635][ T5267] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 169.946068][ T5267] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.954114][ T5267] usb 3-1: Product: syz [ 169.976262][ T5267] usb 3-1: Manufacturer: syz [ 169.988141][ T5267] usb 3-1: SerialNumber: syz [ 170.008675][ T5267] usb 3-1: config 0 descriptor?? [ 170.233413][ T5267] usb 3-1: Unknown endpoint type found, address 0x06 [ 170.251599][ T5267] usb 3-1: Not enough endpoints found in device, aborting! [ 170.440714][ T5218] usb 3-1: USB disconnect, device number 8 [ 170.888174][ T2463] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 170.924128][ T2463] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.967929][ T2463] bond0 (unregistering): Released all slaves [ 171.102777][ T6130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.158764][ T6130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.471565][ T2573] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.478804][ T2573] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.621701][ T2573] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.628982][ T2573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.676695][ T4608] Bluetooth: hci5: command tx timeout [ 172.269834][ T6130] team0: Port device team_slave_0 added [ 172.332707][ T6130] team0: Port device team_slave_1 added [ 173.340265][ T6130] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.375961][ T6130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.506677][ T6130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.616294][ T2463] hsr_slave_0: left promiscuous mode [ 173.633325][ T2463] hsr_slave_1: left promiscuous mode [ 173.649513][ T2463] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.677836][ T2463] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.728052][ T2463] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.735527][ T2463] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.748306][ T4608] Bluetooth: hci5: command tx timeout [ 173.858380][ T2463] veth1_macvtap: left promiscuous mode [ 173.884778][ T2463] veth0_macvtap: left promiscuous mode [ 173.905974][ T1168] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 173.926220][ T2463] veth1_vlan: left promiscuous mode [ 173.931621][ T2463] veth0_vlan: left promiscuous mode [ 174.124657][ T1168] usb 3-1: unable to get BOS descriptor or descriptor too short [ 174.152744][ T1168] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.177406][ T1168] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 174.199531][ T1168] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 174.242975][ T1168] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 174.276783][ T1168] usb 3-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 174.298070][ T1168] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.324006][ T1168] usb 3-1: Product: syz [ 174.335738][ T1168] usb 3-1: Manufacturer: syz [ 174.349072][ T1168] usb 3-1: SerialNumber: syz [ 174.388259][ T1168] usb 3-1: config 0 descriptor?? [ 174.421445][ T6238] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 174.439089][ C0] usb 3-1: NFC: Urb failure (status -71) [ 174.463325][ T1168] usb 3-1: NFC: Unable to get FW version [ 174.504279][ T1168] pn533_usb 3-1:0.0: probe with driver pn533_usb failed with error -90 [ 174.644350][ T25] usb 3-1: USB disconnect, device number 9 [ 174.736028][ T5305] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 174.964794][ T5305] usb 4-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 175.000782][ T5305] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.043614][ T5305] usb 4-1: config 0 descriptor?? [ 175.729916][ T2463] team0 (unregistering): Port device team_slave_1 removed [ 176.724465][ T2463] team0 (unregistering): Port device team_slave_0 removed [ 177.614726][ T6130] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.631263][ T6130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.662073][ T6130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.000341][ T5305] kaweth 4-1:0.0: Firmware present in device. [ 178.021849][ T5305] kaweth 4-1:0.0: Error reading configuration (-71), no net device created [ 178.031241][ T5305] kaweth 4-1:0.0: probe with driver kaweth failed with error -5 [ 178.075673][ T5305] usb 4-1: USB disconnect, device number 9 [ 178.157570][ T6130] hsr_slave_0: entered promiscuous mode [ 178.164675][ T6130] hsr_slave_1: entered promiscuous mode [ 178.196321][ T6130] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 178.352516][ T6130] Cannot create hsr debugfs directory [ 178.415995][ T1168] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 178.457946][ T6299] fuse: Unknown parameter 'grou00000000000000000000' [ 179.416097][ T1168] usb 3-1: Using ep0 maxpacket: 16 [ 179.496437][ T1168] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 179.537600][ T1168] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 179.555977][ T1168] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.595775][ T1168] usb 3-1: Product: syz [ 179.600289][ T1168] usb 3-1: Manufacturer: syz [ 179.604918][ T1168] usb 3-1: SerialNumber: syz [ 179.669784][ T1168] usb 3-1: config 0 descriptor?? [ 179.909604][ T1168] usb 3-1: Unknown endpoint type found, address 0x06 [ 179.954446][ T1168] usb 3-1: Not enough endpoints found in device, aborting! [ 180.107895][ T1168] usb 3-1: USB disconnect, device number 10 [ 180.165351][ T5896] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.404570][ T5896] veth0_vlan: entered promiscuous mode [ 180.458339][ T5896] veth1_vlan: entered promiscuous mode [ 180.664216][ T5896] veth0_macvtap: entered promiscuous mode [ 181.166929][ T5896] veth1_macvtap: entered promiscuous mode [ 181.286856][ T6324] vivid-002: disconnect [ 181.291663][ T5896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.316493][ T5896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.336199][ T5896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.355565][ T5896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.380641][ T5896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.425879][ T5896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.449092][ T5896] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.481716][ T6322] vivid-002: reconnect [ 181.547369][ T5896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.571279][ T5896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.607587][ T5896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.633318][ T5896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.653261][ T5896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.671553][ T5896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.684647][ T5896] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.696572][ T5896] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.712223][ T5896] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.721681][ T5896] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.730785][ T5896] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.848311][ T6130] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 181.884614][ T6333] @: renamed from vlan0 (while UP) [ 181.910310][ T6130] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 182.004099][ T6130] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 182.048232][ T6130] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 182.214723][ T1108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.260940][ T1108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.424220][ T2463] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.871313][ T2463] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.371009][ T6130] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.625654][ T6130] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.718365][ T6362] fuse: Unknown parameter 'grou00000000000000000000' [ 183.812182][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.819628][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.914642][ T1108] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.921870][ T1108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.347183][ T6130] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.404455][ T6391] libceph: resolve '# [ 185.404455][ T6391] $)-.ÌײfÍY¹Ç²a×ïÅ2sˆ [ 185.404455][ T6391] ' (ret=-3): failed [ 185.491903][ T6130] veth0_vlan: entered promiscuous mode [ 185.526525][ T6130] veth1_vlan: entered promiscuous mode [ 185.574494][ T6130] veth0_macvtap: entered promiscuous mode [ 185.593928][ T6130] veth1_macvtap: entered promiscuous mode [ 185.673889][ T6130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.702318][ T6130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.715925][ T58] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 185.723633][ T6130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.754871][ T6130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.771863][ T6130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.805244][ T6130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.832749][ T6130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.857380][ T6130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.894782][ T6130] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.923442][ T6130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.934193][ T58] usb 3-1: Using ep0 maxpacket: 16 [ 185.952537][ T6130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.976369][ T58] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.075230][ T6130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.093996][ T6130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.104425][ T6130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.115704][ T6130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.137254][ T6130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.153956][ T6130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.183759][ T6130] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.203144][ T6130] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.222787][ T6130] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.233935][ T6130] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.255052][ T58] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.255474][ T6130] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.264929][ T58] usb 3-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 186.264960][ T58] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.273067][ T58] usb 3-1: config 0 descriptor?? [ 187.394308][ T58] aquacomputer_d5next 0003:0C70:F0B6.0003: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.2-1/input0 [ 187.623899][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.676686][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.939437][ T6433] fuse: Unknown parameter 'grou00000000000000000000' [ 190.108255][ T5339] usb 3-1: reset high-speed USB device number 11 using dummy_hcd [ 190.199248][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.249787][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.226127][ T5228] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 191.283604][ T58] usb 3-1: USB disconnect, device number 11 [ 191.485986][ T5228] usb 2-1: Using ep0 maxpacket: 8 [ 191.530647][ T5228] usb 2-1: config 0 has an invalid interface number: 170 but max is 0 [ 191.541592][ T5228] usb 2-1: config 0 has no interface number 0 [ 191.548234][ T5228] usb 2-1: config 0 interface 170 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 191.560705][ T5228] usb 2-1: config 0 interface 170 altsetting 0 has an endpoint descriptor with address 0x98, changing to 0x88 [ 191.580105][ T5228] usb 2-1: config 0 interface 170 altsetting 0 endpoint 0x88 has invalid maxpacket 10453, setting to 1024 [ 191.616344][ T5228] usb 2-1: config 0 interface 170 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1024 [ 191.627175][ T5228] usb 2-1: config 0 interface 170 altsetting 0 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 191.638613][ T5228] usb 2-1: config 0 interface 170 altsetting 0 bulk endpoint 0xE has invalid maxpacket 8 [ 191.748265][ T5228] usb 2-1: config 0 interface 170 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 5 [ 193.123775][ T5228] usb 2-1: New USB device found, idVendor=7366, idProduct=f8cb, bcdDevice=3a.11 [ 193.311232][ T5228] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.320193][ T5228] usb 2-1: Product: syz [ 193.324607][ T5228] usb 2-1: Manufacturer: syz [ 193.329517][ T5228] usb 2-1: SerialNumber: syz [ 193.387679][ T5228] usb 2-1: config 0 descriptor?? [ 193.392670][ T6474] netlink: 160 bytes leftover after parsing attributes in process `syz.2.223'. [ 193.392707][ T6474] netlink: 8 bytes leftover after parsing attributes in process `syz.2.223'. [ 193.450532][ T6450] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 193.716151][ T6476] netlink: 28 bytes leftover after parsing attributes in process `syz.0.224'. [ 193.721295][ T6450] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 193.738100][ T6476] netlink: 28 bytes leftover after parsing attributes in process `syz.0.224'. [ 193.821614][ T6482] fuse: Unknown parameter 'group_i00000000000000000000' [ 194.457130][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.464018][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.922126][ T6484] FAULT_INJECTION: forcing a failure. [ 194.922126][ T6484] name failslab, interval 1, probability 0, space 0, times 0 [ 194.935023][ T6484] CPU: 0 UID: 0 PID: 6484 Comm: syz.2.228 Not tainted 6.11.0-rc5-syzkaller #0 [ 194.943919][ T6484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 194.954009][ T6484] Call Trace: [ 194.957325][ T6484] [ 194.960288][ T6484] dump_stack_lvl+0x241/0x360 [ 194.965016][ T6484] ? __pfx_dump_stack_lvl+0x10/0x10 [ 194.970311][ T6484] ? __pfx__printk+0x10/0x10 [ 194.974920][ T6484] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 194.980396][ T6484] ? __pfx___might_resched+0x10/0x10 [ 194.985702][ T6484] should_fail_ex+0x3b0/0x4e0 [ 194.990395][ T6484] should_failslab+0xac/0x100 [ 194.995083][ T6484] ? dev_ethtool+0x145/0x1bc0 [ 194.999774][ T6484] __kmalloc_cache_noprof+0x6c/0x2c0 [ 195.005076][ T6484] dev_ethtool+0x145/0x1bc0 [ 195.009861][ T6484] ? dev_load+0x21/0x1f0 [ 195.014116][ T6484] ? __pfx_dev_ethtool+0x10/0x10 [ 195.019074][ T6484] ? dev_load+0x21/0x1f0 [ 195.023327][ T6484] dev_ioctl+0x785/0x1340 [ 195.027674][ T6484] sock_do_ioctl+0x240/0x460 [ 195.032287][ T6484] ? __pfx_sock_do_ioctl+0x10/0x10 [ 195.037428][ T6484] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 195.043473][ T6484] ? __asan_memset+0x23/0x50 [ 195.048072][ T6484] ? smack_file_ioctl+0x2a1/0x3a0 [ 195.053111][ T6484] sock_ioctl+0x629/0x8e0 [ 195.057459][ T6484] ? __pfx_sock_ioctl+0x10/0x10 [ 195.062335][ T6484] ? bpf_lsm_file_ioctl+0x9/0x10 [ 195.067287][ T6484] ? security_file_ioctl+0x87/0xb0 [ 195.072411][ T6484] ? __pfx_sock_ioctl+0x10/0x10 [ 195.077293][ T6484] __se_sys_ioctl+0xfc/0x170 [ 195.081896][ T6484] do_syscall_64+0xf3/0x230 [ 195.086410][ T6484] ? clear_bhb_loop+0x35/0x90 [ 195.091101][ T6484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.097005][ T6484] RIP: 0033:0x7f65a4d79e79 [ 195.101429][ T6484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.121042][ T6484] RSP: 002b:00007f65a5bac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 195.129465][ T6484] RAX: ffffffffffffffda RBX: 00007f65a4f15f80 RCX: 00007f65a4d79e79 [ 195.137459][ T6484] RDX: 0000000020000040 RSI: 0000000000008946 RDI: 0000000000000003 [ 195.145436][ T6484] RBP: 00007f65a5bac090 R08: 0000000000000000 R09: 0000000000000000 [ 195.153412][ T6484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.161387][ T6484] R13: 0000000000000000 R14: 00007f65a4f15f80 R15: 00007ffce0ca8de8 [ 195.169378][ T6484] [ 196.593499][ T6508] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 196.612203][ T4608] Bluetooth: hci2: command 0x0406 tx timeout [ 196.621511][ T4608] Bluetooth: hci0: command 0x0406 tx timeout [ 198.499531][ T5228] usb 2-1: can't set config #0, error -110 [ 199.693939][ T5305] usb 2-1: USB disconnect, device number 10 [ 199.904401][ T5297] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 201.103583][ T6533] Invalid ELF section header size [ 201.181511][ T5297] usb 3-1: device not accepting address 12, error -71 [ 204.634118][ T5267] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 205.419860][ T6562] sctp: [Deprecated]: syz.2.249 (pid 6562) Use of struct sctp_assoc_value in delayed_ack socket option. [ 205.419860][ T6562] Use struct sctp_sack_info instead [ 205.458861][ T5224] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 205.469617][ T5224] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 205.480638][ T5224] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 205.504295][ T5224] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 205.517350][ T5224] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 205.525487][ T5224] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 205.574038][ T2573] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.627123][ T5267] usb 5-1: Using ep0 maxpacket: 8 [ 205.634466][ T5267] usb 5-1: config 0 has an invalid interface number: 128 but max is 0 [ 205.656040][ T5267] usb 5-1: config 0 has no interface number 0 [ 205.673396][ T5267] usb 5-1: config 0 interface 128 has no altsetting 0 [ 205.684888][ T5267] usb 5-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=4a.2f [ 205.711106][ T5267] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.738412][ T5267] usb 5-1: Product: syz [ 205.756934][ T5267] usb 5-1: Manufacturer: syz [ 205.774321][ T5267] usb 5-1: SerialNumber: syz [ 205.804772][ T5267] usb 5-1: config 0 descriptor?? [ 205.853403][ T5267] peak_usb 5-1:0.128: probe with driver peak_usb failed with error 128 [ 205.920687][ T2573] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.082064][ T6556] xt_recent: hitcount (2147483648) is larger than allowed maximum (65535) [ 206.176231][ T2573] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.305092][ T5218] usb 5-1: USB disconnect, device number 8 [ 206.382913][ T2573] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.975917][ T6589] tipc: Started in network mode [ 206.980801][ T6589] tipc: Node identity 92374a93b63a, cluster identity 4711 [ 207.026598][ T6587] xt_CT: You must specify a L4 protocol and not use inversions on it [ 207.029836][ T6589] tipc: Enabled bearer , priority 0 [ 207.481562][ T6584] tipc: Disabling bearer [ 207.579948][ T5222] Bluetooth: hci3: command tx timeout [ 209.927058][ T5222] Bluetooth: hci3: command tx timeout [ 211.460442][ T6566] chnl_net:caif_netlink_parms(): no params data found [ 211.481011][ T2573] bridge_slave_1: left allmulticast mode [ 211.498656][ T2573] bridge_slave_1: left promiscuous mode [ 211.546480][ T2573] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.582320][ T2573] bridge_slave_0: left allmulticast mode [ 211.590464][ T2573] bridge_slave_0: left promiscuous mode [ 211.607417][ T2573] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.456359][ T5222] Bluetooth: hci3: command tx timeout [ 213.286770][ T6617] xt_SECMARK: unable to map security context 'system_u:object_r:dbusd_etc_t:s0' [ 214.535314][ T5222] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 214.537470][ T5222] Bluetooth: hci3: command tx timeout [ 215.819927][ T2573] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 215.885202][ T2573] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 215.918014][ T2573] bond0 (unregistering): Released all slaves [ 216.475919][ T5305] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 216.706040][ T5305] usb 1-1: Using ep0 maxpacket: 16 [ 216.766934][ T5305] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 216.824032][ T5305] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.880872][ T5305] usb 1-1: Product: syz [ 216.897126][ T5305] usb 1-1: Manufacturer: syz [ 216.919634][ T5305] usb 1-1: SerialNumber: syz [ 216.966864][ T5305] r8152-cfgselector 1-1: Unknown version 0x0000 [ 217.015321][ T5305] r8152-cfgselector 1-1: config 0 descriptor?? [ 217.149013][ T6566] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.184249][ T6566] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.220997][ T6566] bridge_slave_0: entered allmulticast mode [ 217.252503][ T6566] bridge_slave_0: entered promiscuous mode [ 217.322915][ T6566] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.359240][ T6566] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.386931][ T6566] bridge_slave_1: entered allmulticast mode [ 217.394520][ T6566] bridge_slave_1: entered promiscuous mode [ 218.063889][ T6655] vivid-004: disconnect [ 218.354714][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 218.354734][ T29] audit: type=1804 audit(1724656198.268:32): pid=6653 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.2.268" name="/newroot/70/bus/file0" dev="overlay" ino=395 res=1 errno=0 [ 218.381514][ T6654] vivid-004: reconnect [ 218.576579][ T6566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.695689][ T6661] FAULT_INJECTION: forcing a failure. [ 218.695689][ T6661] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 218.728644][ T6661] CPU: 1 UID: 0 PID: 6661 Comm: syz.3.270 Not tainted 6.11.0-rc5-syzkaller #0 [ 218.737603][ T6661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 218.747673][ T6661] Call Trace: [ 218.750956][ T6661] [ 218.753895][ T6661] dump_stack_lvl+0x241/0x360 [ 218.758591][ T6661] ? __pfx_dump_stack_lvl+0x10/0x10 [ 218.763799][ T6661] ? __pfx__printk+0x10/0x10 [ 218.768418][ T6661] should_fail_ex+0x3b0/0x4e0 [ 218.773109][ T6661] prepare_alloc_pages+0x1da/0x5d0 [ 218.778240][ T6661] __alloc_pages_noprof+0x166/0x6c0 [ 218.783453][ T6661] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 218.789190][ T6661] ? validate_chain+0x11e/0x5900 [ 218.794142][ T6661] ? __pfx_validate_chain+0x10/0x10 [ 218.799366][ T6661] alloc_pages_mpol_noprof+0x3e8/0x680 [ 218.804841][ T6661] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 218.810832][ T6661] vma_alloc_folio_noprof+0x12e/0x230 [ 218.816213][ T6661] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 218.822120][ T6661] ? do_raw_spin_unlock+0x13c/0x8b0 [ 218.827372][ T6661] folio_prealloc+0x31/0x170 [ 218.831978][ T6661] do_wp_page+0x11cc/0x52f0 [ 218.836520][ T6661] ? __pfx_do_wp_page+0x10/0x10 [ 218.841396][ T6661] ? __pfx_lock_acquire+0x10/0x10 [ 218.846437][ T6661] ? do_raw_spin_lock+0x14f/0x370 [ 218.851488][ T6661] handle_pte_fault+0x115a/0x6fc0 [ 218.856543][ T6661] ? mark_lock+0x9a/0x350 [ 218.860891][ T6661] ? __pfx_handle_pte_fault+0x10/0x10 [ 218.866393][ T6661] ? mt_find+0x226/0x850 [ 218.870664][ T6661] ? __pfx_lock_release+0x10/0x10 [ 218.875714][ T6661] handle_mm_fault+0xf70/0x1880 [ 218.880593][ T6661] ? __pfx_handle_mm_fault+0x10/0x10 [ 218.885902][ T6661] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 218.892251][ T6661] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 218.897547][ T6661] exc_page_fault+0x2b9/0x8c0 [ 218.902246][ T6661] asm_exc_page_fault+0x26/0x30 [ 218.907105][ T6661] RIP: 0010:__put_user_4+0x11/0x20 [ 218.912229][ T6661] Code: 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 [ 218.931841][ T6661] RSP: 0018:ffffc9000cf37c78 EFLAGS: 00050206 [ 218.937918][ T6661] RAX: 00000000fffffff2 RBX: 0000000000000000 RCX: 0000000020007000 [ 218.945898][ T6661] RDX: 0000000000000000 RSI: ffffffff8beae6c0 RDI: ffffffff8c3f9b00 [ 218.953884][ T6661] RBP: ffffc9000cf37f00 R08: ffffffff8ff6cbaf R09: 1ffffffff1fed975 [ 218.961865][ T6661] R10: dffffc0000000000 R11: fffffbfff1fed976 R12: 1ffff920019e6fa8 [ 218.969843][ T6661] R13: 0000000000001c00 R14: 00000000fffffff2 R15: 0000000020000000 [ 218.977833][ T6661] __se_sys_move_pages+0xbda/0x1e60 [ 218.983063][ T6661] ? __pfx___se_sys_move_pages+0x10/0x10 [ 218.988708][ T6661] ? __fget_files+0x3f6/0x470 [ 218.993410][ T6661] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 218.999406][ T6661] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 219.005744][ T6661] ? do_syscall_64+0x100/0x230 [ 219.010520][ T6661] ? __x64_sys_move_pages+0x21/0xf0 [ 219.015733][ T6661] do_syscall_64+0xf3/0x230 [ 219.020248][ T6661] ? clear_bhb_loop+0x35/0x90 [ 219.024934][ T6661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.030834][ T6661] RIP: 0033:0x7f51f4f79e79 [ 219.035255][ T6661] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.054881][ T6661] RSP: 002b:00007f51f5cd0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 219.063311][ T6661] RAX: ffffffffffffffda RBX: 00007f51f5115f80 RCX: 00007f51f4f79e79 [ 219.071294][ T6661] RDX: 0000000020000040 RSI: 0000000000002064 RDI: 0000000000000000 [ 219.079278][ T6661] RBP: 00007f51f5cd0090 R08: 0000000020000000 R09: 0000000000000000 [ 219.087253][ T6661] R10: 0000000020001180 R11: 0000000000000246 R12: 0000000000000001 [ 219.095227][ T6661] R13: 0000000000000000 R14: 00007f51f5115f80 R15: 00007ffefb13bf58 [ 219.103215][ T6661] [ 219.123106][ T2573] hsr_slave_0: left promiscuous mode [ 219.221574][ T2573] hsr_slave_1: left promiscuous mode [ 219.231932][ T2573] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.271845][ T2573] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.314086][ T2573] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.333451][ T2573] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.434744][ T1168] r8152-cfgselector 1-1: USB disconnect, device number 8 [ 219.445600][ T2573] veth1_macvtap: left promiscuous mode [ 219.659771][ T2573] veth0_macvtap: left promiscuous mode [ 219.668176][ T2573] veth1_vlan: left promiscuous mode [ 220.559123][ T2573] veth0_vlan: left promiscuous mode [ 227.166493][ T2573] team0 (unregistering): Port device team_slave_1 removed [ 227.253158][ T2573] team0 (unregistering): Port device team_slave_0 removed [ 228.075491][ T6566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.543085][ T6566] team0: Port device team_slave_0 added [ 228.610051][ T6566] team0: Port device team_slave_1 added [ 233.174748][ T6566] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.209334][ T6566] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.314839][ T5305] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 233.335893][ T6566] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.370871][ T6566] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.385992][ T6566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.456140][ T6566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.525906][ T5305] usb 1-1: Using ep0 maxpacket: 16 [ 233.533034][ T5305] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 233.559036][ T5305] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 233.585277][ T5305] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.616826][ T5305] usb 1-1: Product: syz [ 233.621853][ T5305] usb 1-1: Manufacturer: syz [ 233.634898][ T5305] usb 1-1: SerialNumber: syz [ 233.865546][ T5305] usb 1-1: config 0 descriptor?? [ 233.893319][ T5305] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 233.901846][ T5224] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 233.914293][ T5224] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 233.927058][ T5224] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 233.948437][ T5305] usb 1-1: Detected FT232R [ 233.956033][ T5224] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 233.967225][ T5224] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 233.977416][ T5224] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 234.104487][ T5305] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 234.121844][ T5224] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 234.132891][ T5224] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 234.153606][ T5224] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 234.168090][ T5224] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 234.176725][ T5224] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 234.192726][ T5224] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 234.273092][ T6566] hsr_slave_0: entered promiscuous mode [ 234.280606][ T6566] hsr_slave_1: entered promiscuous mode [ 234.288757][ T6566] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 234.298312][ T6566] Cannot create hsr debugfs directory [ 234.344536][ T5305] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 234.537993][ T5268] usb 1-1: USB disconnect, device number 9 [ 234.597771][ T5268] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 234.644247][ T5268] ftdi_sio 1-1:0.0: device disconnected [ 234.709159][ T6739] netlink: 5 bytes leftover after parsing attributes in process `syz.3.285'. [ 234.824595][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.074049][ T5218] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 235.410084][ T5218] usb 4-1: Using ep0 maxpacket: 16 [ 235.441647][ T5218] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.488856][ T5218] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.499926][ T5218] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 235.516699][ T5218] usb 4-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 235.528375][ T5218] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.552416][ T5218] usb 4-1: config 0 descriptor?? [ 235.689844][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.910665][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.065968][ T5224] Bluetooth: hci5: command tx timeout [ 236.217169][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.296317][ T5224] Bluetooth: hci1: command tx timeout [ 237.352133][ T35] bridge_slave_1: left allmulticast mode [ 237.362772][ T35] bridge_slave_1: left promiscuous mode [ 237.457303][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.531294][ T35] bridge_slave_0: left allmulticast mode [ 237.548541][ T35] bridge_slave_0: left promiscuous mode [ 237.630786][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.633356][ T5218] usbhid 4-1:0.0: can't add hid device: -71 [ 237.656705][ T5218] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 238.137243][ T5224] Bluetooth: hci5: command tx timeout [ 238.376948][ T5224] Bluetooth: hci1: command tx timeout [ 238.424721][ T5218] usb 4-1: USB disconnect, device number 10 [ 238.786435][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 238.799372][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 238.813634][ T35] bond0 (unregistering): Released all slaves [ 238.847451][ T5218] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 239.021460][ T6728] chnl_net:caif_netlink_parms(): no params data found [ 239.055875][ T35] tipc: Left network mode [ 239.064128][ T5218] usb 4-1: Using ep0 maxpacket: 16 [ 239.106267][ T5218] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 239.176214][ T5218] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 239.185326][ T5218] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.237145][ T5218] usb 4-1: Product: syz [ 239.241387][ T5218] usb 4-1: Manufacturer: syz [ 239.246149][ T5218] usb 4-1: SerialNumber: syz [ 239.254041][ T5218] usb 4-1: config 0 descriptor?? [ 239.809653][ T5218] usb 4-1: Cannot retrieve CPort count: -110 [ 239.922213][ T5218] usb 4-1: Cannot retrieve CPort count: -110 [ 240.025393][ T5218] es2_ap_driver 4-1:0.0: probe with driver es2_ap_driver failed with error -110 [ 240.237283][ T5224] Bluetooth: hci5: command tx timeout [ 240.463959][ T5224] Bluetooth: hci1: command tx timeout [ 242.386269][ T5224] Bluetooth: hci5: command tx timeout [ 242.628489][ T5224] Bluetooth: hci1: command tx timeout [ 245.203665][ T5268] usb 4-1: USB disconnect, device number 11 [ 245.321973][ T6728] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.346231][ T6728] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.353523][ T6728] bridge_slave_0: entered allmulticast mode [ 245.377728][ T6728] bridge_slave_0: entered promiscuous mode [ 245.446545][ T6725] chnl_net:caif_netlink_parms(): no params data found [ 245.542302][ T6728] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.732550][ T6728] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.267177][ T6728] bridge_slave_1: entered allmulticast mode [ 249.274886][ T6728] bridge_slave_1: entered promiscuous mode [ 249.822990][ T5222] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 249.837742][ T5222] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 249.876564][ T5222] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 249.914243][ T5222] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 249.929560][ T5222] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 249.952508][ T5222] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 250.046026][ T6725] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.053197][ T6725] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.067694][ T6725] bridge_slave_0: entered allmulticast mode [ 250.076510][ T6725] bridge_slave_0: entered promiscuous mode [ 250.088176][ T6725] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.097338][ T6725] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.104603][ T6725] bridge_slave_1: entered allmulticast mode [ 250.112135][ T6725] bridge_slave_1: entered promiscuous mode [ 250.193667][ T6728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.214615][ T6728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.401778][ T6725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.434065][ T35] hsr_slave_0: left promiscuous mode [ 250.442470][ T35] hsr_slave_1: left promiscuous mode [ 250.463026][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.474948][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.484739][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.499926][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.522049][ T35] veth1_macvtap: left promiscuous mode [ 250.528734][ T35] veth0_macvtap: left promiscuous mode [ 250.534429][ T35] veth1_vlan: left promiscuous mode [ 250.539940][ T35] veth0_vlan: left promiscuous mode [ 251.020378][ T35] team0 (unregistering): Port device team_slave_1 removed [ 251.109216][ T35] team0 (unregistering): Port device team_slave_0 removed [ 251.540812][ T6825] ntfs3: nullb0: Primary boot signature is not NTFS. [ 251.572869][ T6825] ntfs3: nullb0: try to read out of volume at offset 0x3e7ffffe00 [ 251.753891][ T6728] team0: Port device team_slave_0 added [ 251.781842][ T6728] team0: Port device team_slave_1 added [ 251.842959][ T6725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.976568][ T5224] Bluetooth: hci0: command tx timeout [ 252.072317][ T6566] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 252.102796][ T6566] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 252.180524][ T6566] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 252.292406][ T6566] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 252.446736][ T6728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.532052][ T6728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.789465][ T6728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.892386][ T6725] team0: Port device team_slave_0 added [ 252.909973][ T6725] team0: Port device team_slave_1 added [ 252.933418][ T6728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.948078][ T6728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.974669][ T6728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.064140][ T6725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.071296][ T6725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.097384][ T6725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.130264][ T6725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.137693][ T6725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.164796][ T6725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.187768][ T6728] hsr_slave_0: entered promiscuous mode [ 253.194339][ T6728] hsr_slave_1: entered promiscuous mode [ 253.310495][ T6725] hsr_slave_0: entered promiscuous mode [ 253.326695][ T6725] hsr_slave_1: entered promiscuous mode [ 253.352299][ T6725] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 253.360422][ T6725] Cannot create hsr debugfs directory [ 253.594050][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.758531][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.874550][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.010561][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.057420][ T5224] Bluetooth: hci0: command tx timeout [ 254.078145][ T6805] chnl_net:caif_netlink_parms(): no params data found [ 254.337122][ T6805] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.344459][ T6805] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.352392][ T6805] bridge_slave_0: entered allmulticast mode [ 254.361489][ T6805] bridge_slave_0: entered promiscuous mode [ 254.372402][ T6805] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.380730][ T6805] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.388173][ T6805] bridge_slave_1: entered allmulticast mode [ 254.395316][ T6805] bridge_slave_1: entered promiscuous mode [ 254.434293][ T6805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.465569][ T6566] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.501065][ T6805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.538930][ T6725] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.645519][ T6725] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.687454][ T6805] team0: Port device team_slave_0 added [ 254.709735][ T6566] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.727890][ T6805] team0: Port device team_slave_1 added [ 254.749406][ T6725] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.815419][ T2463] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.822677][ T2463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.850585][ T2573] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.857792][ T2573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.920501][ T6725] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.051392][ T6805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.088513][ T6805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.131736][ T6805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.176426][ T6805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.183525][ T6805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.210249][ T6805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.232866][ T35] bridge_slave_1: left allmulticast mode [ 255.238871][ T35] bridge_slave_1: left promiscuous mode [ 255.244559][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.255201][ T35] bridge_slave_0: left allmulticast mode [ 255.269699][ T35] bridge_slave_0: left promiscuous mode [ 255.275477][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.295285][ T35] bridge_slave_1: left allmulticast mode [ 255.301101][ T35] bridge_slave_1: left promiscuous mode [ 255.307857][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.318743][ T35] bridge_slave_0: left allmulticast mode [ 255.324406][ T35] bridge_slave_0: left promiscuous mode [ 255.330409][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.820874][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.828076][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.139100][ T5224] Bluetooth: hci0: command tx timeout [ 256.174945][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 256.192942][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 256.210124][ T35] bond0 (unregistering): Released all slaves [ 256.455833][ T29] audit: type=1326 audit(1724656236.368:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6862 comm="syz.3.300" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f51f4f79e79 code=0x0 [ 256.760356][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 256.887529][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 256.910226][ T35] bond0 (unregistering): Released all slaves [ 257.083929][ T6865] netlink: 'syz.3.300': attribute type 21 has an invalid length. [ 257.091855][ T6865] netlink: 'syz.3.300': attribute type 20 has an invalid length. [ 257.202788][ T35] tipc: Disabling bearer [ 257.224348][ T35] tipc: Left network mode [ 257.323962][ T6805] hsr_slave_0: entered promiscuous mode [ 257.339581][ T6805] hsr_slave_1: entered promiscuous mode [ 257.350353][ T6805] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 257.359542][ T6805] Cannot create hsr debugfs directory [ 257.609873][ T6728] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 257.715158][ T6728] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 257.873463][ T6728] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 257.912247][ T6728] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 258.158178][ T6725] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 258.171182][ T6725] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 258.208960][ T6566] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.217640][ T6725] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 258.227156][ T5224] Bluetooth: hci0: command tx timeout [ 258.238136][ T6725] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 258.587115][ T35] hsr_slave_0: left promiscuous mode [ 258.597614][ T35] hsr_slave_1: left promiscuous mode [ 258.617149][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.634938][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.652442][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.666773][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.733734][ T35] hsr_slave_0: left promiscuous mode [ 258.745411][ T35] hsr_slave_1: left promiscuous mode [ 258.767434][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.777998][ T6901] netlink: 12 bytes leftover after parsing attributes in process `syz.3.303'. [ 258.787663][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.807175][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.814635][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.913769][ T35] veth1_macvtap: left promiscuous mode [ 258.919916][ T35] veth0_macvtap: left promiscuous mode [ 258.925620][ T35] veth1_vlan: left promiscuous mode [ 258.932537][ T35] veth0_vlan: left promiscuous mode [ 258.942666][ T35] veth1_macvtap: left promiscuous mode [ 258.949167][ T35] veth0_macvtap: left promiscuous mode [ 258.955465][ T35] veth1_vlan: left promiscuous mode [ 258.963393][ T35] veth0_vlan: left promiscuous mode [ 260.466832][ T35] team0 (unregistering): Port device team_slave_1 removed [ 260.510769][ T35] team0 (unregistering): Port device team_slave_0 removed [ 261.335501][ T35] team0 (unregistering): Port device team_slave_1 removed [ 261.382659][ T35] team0 (unregistering): Port device team_slave_0 removed [ 261.460759][ T5222] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 261.475212][ T5222] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 261.487450][ T5222] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 261.509918][ T5222] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 261.525388][ T5222] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 261.551612][ T5222] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 262.598455][ T6728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.774746][ T6805] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 262.872046][ T6805] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 262.913864][ T6805] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 262.993308][ T6725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.027947][ T6728] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.049085][ T6805] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 263.259717][ T29] audit: type=1326 audit(1724656243.168:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6933 comm="syz.3.307" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f51f4f79e79 code=0x0 [ 263.559558][ T6939] netlink: 'syz.3.307': attribute type 21 has an invalid length. [ 263.567576][ T6939] netlink: 'syz.3.307': attribute type 20 has an invalid length. [ 263.721272][ T5224] Bluetooth: hci4: command tx timeout [ 263.753584][ T6725] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.824423][ T6792] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.831742][ T6792] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.920119][ T6792] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.927378][ T6792] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.981232][ T6792] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.988525][ T6792] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.073648][ T6792] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.080852][ T6792] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.830738][ T6805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.936838][ T6916] chnl_net:caif_netlink_parms(): no params data found [ 265.046282][ T6947] netlink: 20 bytes leftover after parsing attributes in process `syz.3.308'. [ 265.117242][ T6805] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.395599][ T4593] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.402840][ T4593] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.455520][ T4593] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.462816][ T4593] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.736162][ T5224] Bluetooth: hci4: command tx timeout [ 265.763918][ T6916] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.776805][ T6916] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.786388][ T6916] bridge_slave_0: entered allmulticast mode [ 265.801435][ T6916] bridge_slave_0: entered promiscuous mode [ 265.835476][ T6916] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.854320][ T6916] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.863677][ T6916] bridge_slave_1: entered allmulticast mode [ 265.879598][ T6916] bridge_slave_1: entered promiscuous mode [ 266.003607][ T6916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.024727][ T6916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.076851][ T6725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.302528][ T6916] team0: Port device team_slave_0 added [ 266.443246][ T6916] team0: Port device team_slave_1 added [ 266.591833][ T6728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.670253][ T6916] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.697888][ T6916] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.785846][ T6916] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.847858][ T35] bridge_slave_1: left allmulticast mode [ 266.853577][ T35] bridge_slave_1: left promiscuous mode [ 266.894628][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.120536][ T35] bridge_slave_0: left allmulticast mode [ 267.142897][ T35] bridge_slave_0: left promiscuous mode [ 267.157149][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.816430][ T5224] Bluetooth: hci4: command tx timeout [ 268.622168][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 268.643489][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 268.658665][ T35] bond0 (unregistering): Released all slaves [ 268.711844][ T6916] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 268.720805][ T6916] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.778225][ T6916] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 268.869228][ T35] hsr_slave_0: left promiscuous mode [ 268.884094][ T35] hsr_slave_1: left promiscuous mode [ 268.891678][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 268.909517][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 269.338362][ T35] team0 (unregistering): Port device team_slave_1 removed [ 269.379211][ T35] team0 (unregistering): Port device team_slave_0 removed [ 269.823602][ T6916] hsr_slave_0: entered promiscuous mode [ 269.835010][ T6916] hsr_slave_1: entered promiscuous mode [ 269.841517][ T6916] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 269.849396][ T6916] Cannot create hsr debugfs directory [ 269.906595][ T5224] Bluetooth: hci4: command tx timeout [ 269.967306][ T6805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.148080][ T6728] veth0_vlan: entered promiscuous mode [ 270.216971][ T6725] veth0_vlan: entered promiscuous mode [ 270.255817][ T6728] veth1_vlan: entered promiscuous mode [ 270.320470][ T6725] veth1_vlan: entered promiscuous mode [ 270.644400][ T6805] veth0_vlan: entered promiscuous mode [ 270.702686][ T6728] veth0_macvtap: entered promiscuous mode [ 270.749716][ T6728] veth1_macvtap: entered promiscuous mode [ 270.832779][ T7065] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 271.564052][ T6805] veth1_vlan: entered promiscuous mode [ 271.626876][ T6728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.660393][ T6728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.672442][ T6728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.701161][ T6728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.712839][ T6728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.725066][ T6728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 271.748472][ T6725] veth0_macvtap: entered promiscuous mode [ 271.868169][ T6728] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.884755][ T6728] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.894314][ T6728] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.909889][ T6728] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.937332][ T6725] veth1_macvtap: entered promiscuous mode [ 272.162987][ T29] audit: type=1326 audit(1724656252.078:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7069 comm="syz.3.314" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f51f4f79e79 code=0x0 [ 272.523952][ T6805] veth0_macvtap: entered promiscuous mode [ 272.608616][ T7072] netlink: 'syz.3.314': attribute type 21 has an invalid length. [ 272.616763][ T7072] netlink: 'syz.3.314': attribute type 20 has an invalid length. [ 272.637691][ T6725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.671536][ T6725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.684104][ T6725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.699091][ T6725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.719946][ T6725] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.769109][ T6805] veth1_macvtap: entered promiscuous mode [ 272.790573][ T6725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.807165][ T6725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.828734][ T6725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.842681][ T6725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.891507][ T6725] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.988960][ T6725] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.002528][ T6725] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.012573][ T6725] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.022405][ T6725] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.079169][ T6805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.090624][ T6805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.101621][ T6805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.112968][ T6805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.123095][ T6805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.133620][ T6805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.147835][ T6805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.207869][ T6805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.223033][ T6805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.233097][ T6805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.243716][ T6805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.253832][ T6805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.264969][ T6805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.277606][ T6805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.305209][ T6792] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.337429][ T6792] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.340531][ T6805] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.356870][ T6805] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.365701][ T6805] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.375551][ T6805] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.459038][ T6916] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 273.480706][ T6916] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 273.532706][ T6916] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 273.555869][ T4593] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.563809][ T4593] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.586739][ T6916] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 273.655917][ T4593] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.670684][ T4593] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.814501][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.822924][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.885178][ T6792] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.912212][ T6792] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.021105][ T2557] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.046372][ T2557] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.046913][ T6916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.102515][ T6916] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.124429][ T6792] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.131680][ T6792] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.173968][ T6792] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.181230][ T6792] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.316930][ T7087] netlink: 'syz.0.293': attribute type 2 has an invalid length. [ 275.245368][ T7102] netlink: 12 bytes leftover after parsing attributes in process `syz.3.320'. [ 279.317767][ T7112] process 'syz.2.323' launched './file0' with NULL argv: empty string added [ 280.043166][ T6916] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.116528][ T5305] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 280.153187][ T5224] Bluetooth: hci2: unexpected event for opcode 0x203e [ 280.182837][ T6916] veth0_vlan: entered promiscuous mode [ 280.204666][ T6916] veth1_vlan: entered promiscuous mode [ 280.260381][ T6916] veth0_macvtap: entered promiscuous mode [ 280.272795][ T6916] veth1_macvtap: entered promiscuous mode [ 280.308882][ T6916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.327138][ T5305] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 280.337511][ T6916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.350743][ T5305] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 280.359785][ T6916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.371523][ T6916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.383750][ T5305] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 280.397352][ T6916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.409293][ T5305] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 280.418189][ T6916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.428346][ T29] audit: type=1326 audit(1724656260.338:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7104 comm="syz.4.321" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc8f9979e79 code=0x0 [ 280.449368][ T5305] usb 1-1: SerialNumber: syz [ 280.458160][ T6916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.482406][ T6916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.498613][ T6916] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.513909][ T7125] netlink: 'syz.4.321': attribute type 21 has an invalid length. [ 280.521895][ T7125] netlink: 'syz.4.321': attribute type 20 has an invalid length. [ 280.529914][ T7125] IPv6: NLM_F_CREATE should be specified when creating new route [ 280.558431][ T6916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.586050][ T6916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.609015][ T6916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.639896][ T6916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.662844][ T6916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.689169][ T6916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.717542][ T6916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.751149][ T6916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.778352][ T6916] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.823870][ T6916] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.853757][ T6916] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.925845][ T6916] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.946775][ T6916] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.073219][ T5305] usb 1-1: 0:2 : does not exist [ 281.113208][ T5305] usb 1-1: unit 5: unexpected type 0x09 [ 281.223323][ T5305] usb 1-1: USB disconnect, device number 10 [ 281.340994][ T2557] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.403775][ T2557] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.428213][ T7048] udevd[7048]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 282.173024][ T2573] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.226962][ T2573] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.284852][ T7150] netlink: 12 bytes leftover after parsing attributes in process `syz.0.331'. [ 284.228221][ T5224] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 284.237603][ T5224] Bluetooth: hci2: Injecting HCI hardware error event [ 284.248615][ T5224] Bluetooth: hci2: hardware error 0x00 [ 284.770558][ T7147] vivid-003: disconnect [ 285.026019][ T5218] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 285.038855][ T7145] vivid-003: reconnect [ 285.936009][ T5218] usb 1-1: Using ep0 maxpacket: 16 [ 285.954772][ T5218] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 285.977162][ T5218] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 285.998541][ T5218] usb 1-1: New USB device found, idVendor=28bd, idProduct=0934, bcdDevice= 0.00 [ 286.015893][ T5218] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.102381][ T7172] FAULT_INJECTION: forcing a failure. [ 286.102381][ T7172] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 286.107400][ T7173] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 286.157161][ T7172] CPU: 1 UID: 0 PID: 7172 Comm: syz.1.338 Not tainted 6.11.0-rc5-syzkaller #0 [ 286.166165][ T7172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 286.176248][ T7172] Call Trace: [ 286.180395][ T7172] [ 286.180407][ T7172] dump_stack_lvl+0x241/0x360 [ 286.180433][ T7172] ? __pfx_dump_stack_lvl+0x10/0x10 [ 286.180451][ T7172] ? __pfx__printk+0x10/0x10 [ 286.180478][ T7172] ? __pfx_lock_release+0x10/0x10 [ 286.180507][ T7172] should_fail_ex+0x3b0/0x4e0 [ 286.180531][ T7172] _copy_from_iter+0x1f6/0x1960 [ 286.180557][ T7172] ? __virt_addr_valid+0x183/0x530 [ 286.180572][ T7172] ? skb_set_owner_w+0x238/0x3e0 [ 286.180598][ T7172] ? __pfx__copy_from_iter+0x10/0x10 [ 286.180619][ T7172] ? __pfx__copy_from_iter+0x10/0x10 [ 286.180645][ T7172] ? page_copy_sane+0x154/0x260 [ 286.180668][ T7172] copy_page_from_iter+0x7a/0x100 [ 286.180691][ T7172] skb_copy_datagram_from_iter+0x2d8/0x6c0 [ 286.180724][ T7172] tun_get_user+0xec3/0x4720 [ 286.180756][ T7172] ? __lock_acquire+0x137a/0x2040 [ 286.180783][ T7172] ? __pfx_tun_get_user+0x10/0x10 [ 286.180817][ T7172] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 286.180837][ T7172] ? tun_get+0x1e/0x2f0 [ 286.180856][ T7172] ? __pfx_lock_release+0x10/0x10 [ 286.180889][ T7172] ? tun_get+0x1e/0x2f0 [ 286.180907][ T7172] ? tun_get+0x27d/0x2f0 [ 286.180927][ T7172] tun_chr_write_iter+0x113/0x1f0 [ 286.180950][ T7172] vfs_write+0xa72/0xc90 [ 286.180969][ T7172] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 286.180990][ T7172] ? __pfx_vfs_write+0x10/0x10 [ 286.181021][ T7172] ksys_write+0x1a0/0x2c0 [ 286.181042][ T7172] ? __pfx_ksys_write+0x10/0x10 [ 286.181058][ T7172] ? do_syscall_64+0x100/0x230 [ 286.181077][ T7172] ? do_syscall_64+0xb6/0x230 [ 286.181095][ T7172] do_syscall_64+0xf3/0x230 [ 286.181120][ T7172] ? clear_bhb_loop+0x35/0x90 [ 286.181142][ T7172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.181161][ T7172] RIP: 0033:0x7f031bb7895f [ 286.181176][ T7172] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 286.181190][ T7172] RSP: 002b:00007f031c98a000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 286.181209][ T7172] RAX: ffffffffffffffda RBX: 00007f031bd15f80 RCX: 00007f031bb7895f [ 286.181222][ T7172] RDX: 000000000000fdef RSI: 0000000020000100 RDI: 00000000000000c8 [ 286.181233][ T7172] RBP: 00007f031c98a090 R08: 0000000000000000 R09: 0000000000000000 [ 286.181244][ T7172] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000002 [ 286.181254][ T7172] R13: 0000000000000001 R14: 00007f031bd15f80 R15: 00007ffdda9ca8b8 [ 286.181277][ T7172] [ 286.248758][ T5218] usb 1-1: config 0 descriptor?? [ 286.516072][ T5224] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 286.756182][ T7181] netlink: 'syz.3.339': attribute type 19 has an invalid length. [ 286.936851][ T7184] netlink: 24 bytes leftover after parsing attributes in process `syz.1.340'. [ 288.497174][ T7209] netlink: 12 bytes leftover after parsing attributes in process `syz.3.343'. [ 289.327436][ T5305] usb 1-1: USB disconnect, device number 11 [ 289.655941][ T5218] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 289.728809][ T7173] tty tty29: ldisc open failed (-12), clearing slot 28 [ 289.744287][ T7184] tty tty1: ldisc open failed (-12), clearing slot 0 [ 289.753819][ T7193] tty tty1: ldisc open failed (-12), clearing slot 0 [ 289.761648][ T2557] Oops: general protection fault, probably for non-canonical address 0xdffffc000000044c: 0000 [#1] PREEMPT SMP KASAN PTI [ 289.774252][ T2557] KASAN: probably user-memory-access in range [0x0000000000002260-0x0000000000002267] [ 289.783814][ T2557] CPU: 0 UID: 0 PID: 2557 Comm: kworker/u8:9 Not tainted 6.11.0-rc5-syzkaller #0 [ 289.792946][ T2557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 289.803037][ T2557] Workqueue: events_unbound flush_to_ldisc [ 289.803067][ T2557] RIP: 0010:n_tty_receive_buf_common+0x13a/0x12e0 [ 289.803115][ T2557] Code: c0 48 89 84 24 b0 00 00 00 48 89 8c 24 f0 00 00 00 48 c1 e9 03 48 89 8c 24 f8 00 00 00 48 89 5c 24 60 48 8b 84 24 f8 00 00 00 <42> 80 3c 38 00 74 0d 48 8b bc 24 f0 00 00 00 e8 52 75 cc fc 4c 89 [ 289.803135][ T2557] RSP: 0018:ffffc900090079a0 EFLAGS: 00010202 [ 289.803154][ T2557] RAX: 000000000000044c RBX: ffff8880615a4438 RCX: 000000000000044c [ 289.803170][ T2557] RDX: 0000000000000001 RSI: 0000000000000008 RDI: 0000000000000001 [ 289.803183][ T2557] RBP: ffff8880615a4000 R08: ffff8880615a4287 R09: 1ffff1100c2b4850 [ 289.803199][ T2557] R10: dffffc0000000000 R11: ffffed100c2b4851 R12: ffff888149c0d825 [ 289.803216][ T2557] R13: ffff888149c0d825 R14: 000000000000001b R15: dffffc0000000000 [ 289.803232][ T2557] FS: 0000000000000000(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 289.803250][ T2557] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 289.803266][ T2557] CR2: 00007f093e5dfd58 CR3: 000000002a5f4000 CR4: 00000000003506f0 [ 289.803285][ T2557] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 289.803298][ T2557] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 289.803312][ T2557] Call Trace: [ 289.803321][ T2557] [ 289.803330][ T2557] ? __die_body+0x88/0xe0 [ 289.803363][ T2557] ? die_addr+0x108/0x140 [ 289.803396][ T2557] ? exc_general_protection+0x3dd/0x5d0 [ 289.803438][ T2557] ? asm_exc_general_protection+0x26/0x30 [ 289.803487][ T2557] ? n_tty_receive_buf_common+0x13a/0x12e0 [ 289.803525][ T2557] ? __pfx_ldsem_down_read_trylock+0x10/0x10 [ 289.803559][ T2557] ? tty_ldisc_receive_buf+0x91/0x170 [ 289.803584][ T2557] tty_port_default_receive_buf+0x6d/0xa0 [ 289.803610][ T2557] flush_to_ldisc+0x328/0x860 [ 289.803640][ T2557] ? process_scheduled_works+0x945/0x1830 [ 289.803669][ T2557] process_scheduled_works+0xa2c/0x1830 [ 289.803715][ T2557] ? __pfx_process_scheduled_works+0x10/0x10 [ 289.803750][ T2557] ? assign_work+0x364/0x3d0 [ 289.803782][ T2557] worker_thread+0x86d/0xd10 [ 289.803820][ T2557] ? __kthread_parkme+0x169/0x1d0 [ 289.803854][ T2557] ? __pfx_worker_thread+0x10/0x10 [ 289.803884][ T2557] kthread+0x2f0/0x390 [ 289.803918][ T2557] ? __pfx_worker_thread+0x10/0x10 [ 289.803947][ T2557] ? __pfx_kthread+0x10/0x10 [ 289.803987][ T2557] ret_from_fork+0x4b/0x80 [ 289.804017][ T2557] ? __pfx_kthread+0x10/0x10 [ 289.804050][ T2557] ret_from_fork_asm+0x1a/0x30 [ 289.804089][ T2557] [ 290.041693][ T2557] Modules linked in: [ 290.100488][ T2557] ---[ end trace 0000000000000000 ]--- [ 290.109056][ T2557] RIP: 0010:n_tty_receive_buf_common+0x13a/0x12e0 [ 290.115521][ T2557] Code: c0 48 89 84 24 b0 00 00 00 48 89 8c 24 f0 00 00 00 48 c1 e9 03 48 89 8c 24 f8 00 00 00 48 89 5c 24 60 48 8b 84 24 f8 00 00 00 <42> 80 3c 38 00 74 0d 48 8b bc 24 f0 00 00 00 e8 52 75 cc fc 4c 89 [ 290.135383][ T5218] usb 4-1: Using ep0 maxpacket: 16 [ 290.150450][ T5218] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 290.162531][ T2557] RSP: 0018:ffffc900090079a0 EFLAGS: 00010202 [ 290.169658][ T2557] RAX: 000000000000044c RBX: ffff8880615a4438 RCX: 000000000000044c [ 290.179563][ T5218] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 290.191149][ T5218] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.199752][ T2557] RDX: 0000000000000001 RSI: 0000000000000008 RDI: 0000000000000001 [ 290.209015][ T2557] RBP: ffff8880615a4000 R08: ffff8880615a4287 R09: 1ffff1100c2b4850 [ 290.217224][ T2557] R10: dffffc0000000000 R11: ffffed100c2b4851 R12: ffff888149c0d825 [ 290.220047][ T5218] usb 4-1: Product: syz [ 290.225733][ T2557] R13: ffff888149c0d825 R14: 000000000000001b R15: dffffc0000000000 [ 290.225792][ T2557] FS: 0000000000000000(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 290.225814][ T2557] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 290.225831][ T2557] CR2: 00007fc8fa6c2f98 CR3: 00000000290c0000 CR4: 00000000003506f0 [ 290.225851][ T2557] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 290.225865][ T2557] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 290.225883][ T2557] Kernel panic - not syncing: Fatal exception [ 290.230273][ T2557] Kernel Offset: disabled