last executing test programs: 1m0.521632663s ago: executing program 1 (id=2454): r0 = creat(0x0, 0xd931d3864d39dcca) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0x69) r1 = inotify_init() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r2 = gettid() rt_sigqueueinfo(r2, 0x0, &(0x7f0000001500)) inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x1) close(r0) syz_usb_connect(0x2, 0x6af, &(0x7f0000000480)={{0x12, 0x1, 0x201, 0xe, 0x68, 0xe3, 0x20, 0x1410, 0xa005, 0xd594, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69d, 0x2, 0x4, 0x98, 0x0, 0x5, [{{0x9, 0x4, 0x3, 0x7f, 0x3, 0xc3, 0xb9, 0xe, 0x58, [@cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, 'G'}, {0x5, 0x24, 0x0, 0x48f}, {0xd, 0x24, 0xf, 0x1, 0xffffffff, 0xfff7, 0x2, 0x93}, [@obex={0x5, 0x24, 0x15, 0x1}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0xe2}, @mbim={0xc, 0x24, 0x1b, 0x1000, 0x8, 0xae, 0x4, 0x3, 0x7f}]}, @generic={0xc4, 0xd, "5c5d0169fd915393d69c0c7eb62cf1c6bb30439521d077f8da4611cd51fa3bb584b0140b19e36c9d3d8a98586f0c84dbed6502954acbdc0d20c3dcb0155380c0aa08ef0dd6c3b03f508c529915a82ea0ef2bbbd85c493959e3ec596886fe558f1ef5fe6fd5fbdfc53a6fc460e924127bab85eaf2f1b855635b154b9968cdef7f50cbf4803cd149bab647886c539e050cad5dbb52429abaa3c17678b6066b64cd145c86b14878720ed157eb6a661b2180deb34b6220bc3024c1def56c47726bf68b48"}], [{{0x9, 0x5, 0x3, 0x3, 0x400, 0xd, 0x6, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x6b, 0x100}, @generic={0x7e, 0x1, "445c5f7f51add4f82eac78e9a7647f7f25ddb89175109319ebf17f2ecce7ea895713567ab014828f4b936e595965e5eeec56c0c4e7ecd181ec25bfcd68f5b70a52fa4b06d58f140aeb6a1540c9f7f1a30e5f4155e7f58d8332b4335150eee4f3869c1d718c3b2d8baf9eb79e45cb6fba7a48172c44dd8a3e81431cd5"}]}}, {{0x9, 0x5, 0xf, 0x2, 0xfabf4cff31587645, 0x0, 0x84, 0x9}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0x4, 0x34, 0x2, [@generic={0x101, 0x14, "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"}]}}]}}, {{0x9, 0x4, 0x35, 0xb9, 0xd, 0xc2, 0x45, 0x2b, 0x2, [@generic={0x78, 0x22, "44b89d237b9b6eb01b05cbf73840c9558277e0c93f57e154483a08c08bc29ac3832d19f418870f513bb533dc73963658b3982933a3a7e97919741f121da715bb5cf959a6227a9d8c5b5c79aaa22d52d89c29f553eb72bdc488d2a5a7d6f854b90bd76e9e697e6bc5fad165342887bdb254f8138f6aec"}, @uac_as={[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0xa, 0x1, 0x40, 0x10, "530714f2a73b"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x0, 0x4, 0x96, 0xd, "88"}]}], [{{0x9, 0x5, 0x1, 0x0, 0x3ff, 0x1, 0x5, 0x6, [@generic={0x78, 0x25, "ffc3c09183451eefe1c097a53348a09ce7c55d9c4dc1d351a9ccdf858df9879227f8a4f1788fe4b172c986f52c4ff5de21aa09ed0564cdc7d4576f05b552e3e0b9dd861c2a55ed00dc46ab3a91c097e99c013630368727c084f78f000a394b04a213a138ec88c2349096aaf6d867315cf525f8eff096"}, @generic={0x80, 0x0, "f922097200a8048b479f99a01922f9984ac40a311ba9a64e30729adb15c89bd4de2cffd689861f0802686e5a7acf28e4742f3219dde42893b5b107106e2025200e97503b3b8e4de51ca7310c6f2d960678ea7bb1f47632f54da4b8b7dd74500b70fd0d19c840840525c736a89640a308ddea0088308622ec7a72e94b88b6"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x400, 0x0, 0x4, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x40, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x65161cd48acfdbe, 0x6, 0x10af}]}}, {{0x9, 0x5, 0x382c93dc91eaed74, 0x4, 0x40, 0x9, 0x18, 0x7a, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x2d55}]}}, {{0x9, 0x5, 0xb, 0x10, 0x200, 0x9, 0x0, 0x9, [@generic={0x69, 0x2, "c9b6f47aca12c608cf43d3381305737690e313c7fc1862505b12a92cb664876d2bddd461be8e369cd0a907059de2ab26b7931ddd952fcd1802f67a85181252ec3f3c755d82df59625125e12b1a99ce7afd3d30f26e48dac960c66c63d96aba67b398f4ab459586"}, @generic={0xdd, 0x0, "6f6e1833f51eacac0a6262957a63f5f04a070fdb1718871daa06d91d478e7da6f28d87fe00f3c534425899a049a5d7ba46c81c0206128122470ba0f2216ac942dcd491a4e82cf95ef4290975937c31967228518bd513ee3927fab961d844ce401996fa6aa1c7c4e3efc9a5bc65a13d86f8c16797a31913914431716ca8ca6f8a1eef9d9b0ee80d9656cb8153ee01cb040a7a127ab45b6e26be1e078995bc6aef7514379fc08f5cac2708ec00bf346966e65b9d2e7cbac9c11e21d5510417357355fd28874ed66dab839867b8795056360f7c863c802ff1bcc12ea3"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x400, 0x6, 0x3, 0xc, [@generic={0x31, 0x1, "67798478c0822826f5a7462a1caa177c2bd6fe681ab780b0a51bba206507ab8f09a36a7af818dbd810b53d9789c197"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x4b, 0x3}]}}, {{0x9, 0x5, 0x2, 0xc, 0x3ff, 0xf8, 0x4, 0x6}}, {{0x9, 0x5, 0xc, 0x0, 0x0, 0x1, 0x3, 0x3}}, {{0x9, 0x5, 0x2, 0x10, 0x0, 0x1e, 0x10, 0xe}}, {{0x9, 0x5, 0x9, 0x0, 0x10, 0x6, 0x8, 0x3}}, {{0x9, 0x5, 0xf, 0x1, 0x10, 0x1, 0xe8, 0xeb, [@generic={0x52, 0xb, "6dafa98a7484b65606287649635b892e6d98bae2b6136e607a544230c1fce65f686356f429ae1bcab607eec7a4ab42ed885acce1e26e7f215a6ba8dfba1285dc59eac21a72a55b177b6da3bfec1b793d"}]}}, {{0x9, 0x5, 0xa, 0x9b9fbdeb57bf9045, 0x8, 0x9, 0xfe, 0x53, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xb2, 0xfff7}]}}, {{0x9, 0x5, 0x80, 0x2, 0x3ff, 0x0, 0x81, 0x82}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0xd4, 0x4, 0x3}}]}}]}}]}}, &(0x7f0000000c40)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x110, 0x4, 0x9, 0x6a, 0x20, 0x1}, 0x15, &(0x7f0000000240)={0x5, 0xf, 0x15, 0x1, [@ssp_cap={0x10, 0x10, 0xa, 0x9, 0x1, 0x1, 0xf0f, 0x588, [0xfff0]}]}, 0x7, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x419}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x40d}}, {0xc8, &(0x7f0000000300)=@string={0xc8, 0x3, "b835567584bba1ea7dd547d5f271ad7cc5a87e8938a7f841e48f1fb33075167b18ed7121c1845b32c5b531d6f1e55fe904419e888e64a38728e399fb1a0bce51764bf01330aa33015faf51b4a57cf87990a8b2797b8fe6a78815ee04f7dda0d1c2371530c3376094c892589a45f5e0bc537c8807f9f39dcec030db90e37576d687f540e41f5247127eb8c39d4e935e4c4b0593af97968fe12dac03e15eceb11062c7dc72e8dbc8dbc569f699b5f7834ca7609167ccd70489f31f0713772a4abc3ae80e9d9d15"}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x3c01}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x407}}, {0x4, &(0x7f0000000bc0)=@lang_id={0x4, 0x3, 0x1401}}, {0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x810}}]}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x8, 0x0, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x40}}, 0x0) r7 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100)={'fscrypt:', @desc3}, &(0x7f0000000140)={0x0, "01a4c75193b0ea386d6a5e4841493ebaf3468a50a1b4ab4e330fd8f6caea7dbb38657ceece3b546209342048c0a5921cca851d3df900ccc123ee59d4acf73cfa"}, 0x48, 0xfffffffffffffffe) keyctl$read(0xb, r7, 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @broadcast}}}}) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$PTP_PEROUT_REQUEST2(r9, 0x40383d0c, &(0x7f00000001c0)={{0x4e, 0x383}, {0x0, 0x1}, 0x9870, 0x1}) 56.876316941s ago: executing program 1 (id=2466): socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0xffffffffffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x21, 0x0, 0x128200}}, 0x50) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@random={'user.', '\x00'}, 0x0, 0x0, 0x0) capset(&(0x7f00000020c0)={0x19980330}, &(0x7f0000002100)) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r5 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r5, &(0x7f0000313000/0x1000)=nil, 0x4000) 55.756140812s ago: executing program 1 (id=2468): openat$random(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f00000000c0)) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffecc, &(0x7f0000000200)=0x101) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x2b22c0, 0x0) r2 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x10, r2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x20281, 0x0) r4 = socket(0xa, 0x40000000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x2, 0x208, [0x20000600, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"]}, 0x280) r5 = socket(0xa, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x2, 0x208, [0x0, 0x0, 0x0, 0x20000630], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"]}, 0x22f) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) 53.170501403s ago: executing program 1 (id=2476): syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x4c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}]}, 0x4c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket(0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x28, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 52.081326619s ago: executing program 1 (id=2480): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='kmem_cache_free\x00'}, 0x10) r0 = socket$inet6(0xa, 0x3, 0x0) sendmsg$inet6(r0, &(0x7f0000000440)={&(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="24000000000000002900000032000000ff010000000000000000000000000001d3"], 0x28}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) epoll_create1(0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net/xfrm_stat\x00') preadv(r2, &(0x7f0000000340)=[{&(0x7f0000000280)=""/173, 0xad}], 0x1, 0xfffffffc, 0x0) r3 = gettid() write$cgroup_pid(r2, &(0x7f00000002c0)=r3, 0x12) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000, 0x2, &(0x7f0000ffd000/0x1000)=nil) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r5}, 0x10) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x89a1, 0x0) 48.655799349s ago: executing program 1 (id=2485): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x13, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c6500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) close(r2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r6 = openat$cgroup_devices(r5, &(0x7f0000000540)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB="62202a3a340904"], 0xa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x1}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000fcdf000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) close(r0) 13.232975481s ago: executing program 3 (id=2552): gettid() r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = dup(r4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000050000f58f04"]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x56a, 0xb3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xff, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r6, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_REAPURB(r7, 0x4008550c, &(0x7f0000002680)) ioctl$USBDEVFS_FREE_STREAMS(r7, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002302230102090500000010000020d3"]) 11.967796335s ago: executing program 0 (id=2554): socket$alg(0x26, 0x5, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x7}) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x189080, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0xe6da) openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x400001, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') prlimit64(0x0, 0xe, 0x0, 0x0) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x74, &(0x7f0000000080)={r5, 0xa00, 0x30}, &(0x7f00000000c0)=0x18) 11.901847838s ago: executing program 2 (id=2555): r0 = syz_open_dev$vim2m(&(0x7f0000005f00), 0x7e5, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) syz_open_procfs(0x0, &(0x7f0000000200)='cmdline\x00') r1 = syz_open_dev$loop(0x0, 0x100000, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, 0x0) socket$qrtr(0x2a, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x7, 0xff, 0x84}, 0x48) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0x1, @link_local, 'geneve0\x00'}}, 0x1e) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) unshare(0x20000400) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000100)=0x1) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x14) ioctl$PPPIOCGUNIT(r4, 0x80047456, 0x0) r5 = socket(0x10, 0x4, 0x4) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 10.654754412s ago: executing program 0 (id=2557): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = fsopen(&(0x7f0000000000)='btrfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='smackfstransmute', &(0x7f0000000040)='u+\x1d\x00\x00.\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000600)='smackfstransmute', &(0x7f0000000700)='{\x00', 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000800)={'syz1\x00', {0xffff}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc6]}, 0x45c) syz_usb_connect$cdc_ecm(0x0, 0x77, &(0x7f0000000880)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x65, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, [@mdlm={0x15}, @mdlm={0x15}]}}}]}}]}}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000ac0)=@string={0x2}}, {0x46, &(0x7f0000000c00)=@string={0x46, 0x3, "9358565999623239ed0c1f7df45b93952556ad9ffa8fb8a8ab7e1e7a838585d20cd5b40e12812801bce28d326be4687cfe639d20cc479fa6626261b360602b92e5d921dc"}}]}) mount(0x0, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) r3 = dup(r2) ioctl$UI_DEV_CREATE(r3, 0x5501) write$uinput_user_dev(r3, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xe, 0x80, 0x0, 0x0, 0x0, 0x20000, 0xfffffffe, 0x0, 0x0, 0xab5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x1, 0xc29], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}, 0x45c) read$FUSE(r3, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r1, 0xae9a) ioctl$KVM_SET_REGS(r1, 0x4090ae82, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(r3, 0x4010aeab, &(0x7f0000000500)={0x8, 0x2000}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000200700000000000001000084060000000000000001"], 0x0, 0x42}, 0x20) 10.557534087s ago: executing program 2 (id=2558): socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet6(0xffffffffffffffff, &(0x7f0000003540)={0xa, 0x0, 0x0, @local, 0x80000001}, 0x1c) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="1f769a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x14) syz_usb_control_io(r1, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000002c0)=ANY=[@ANYBLOB="000002000000f96e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x0, 0x100000001, 0x10000, 0x1}, 0x1c) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="0000002373ad20dee9ebec5aa60200a8", 0x10) r3 = accept$alg(r0, 0x0, 0x0) r4 = accept(r3, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r4) 9.961303228s ago: executing program 3 (id=2559): socket$inet(0x2, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000400)='net/ip6_tables_names\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipmr_getroute={0x1c, 0x1a, 0x0, 0x0, 0x0, {0x80, 0x80}}, 0x1c}}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x2, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, 0x0, &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x48801) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000071122f0000000000950000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) 8.875572156s ago: executing program 4 (id=2560): bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) accept4$nfc_llcp(0xffffffffffffffff, 0x0, 0x0, 0x80800) r0 = fsopen(&(0x7f00000002c0)='rpc_pipefs\x00', 0x0) r1 = getpid() r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x9, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}, @generic={0x66}, @initr0, @exit, @alu={0x4, 0x0, 0x6, 0x3}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socket$unix(0x1, 0x5, 0x0) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x204, 0xa, 0x1}) 8.853853977s ago: executing program 3 (id=2561): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x3, 0x4, 0x4, 0x10001}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x128000, 0x800}, 0x20) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48}, {0x6}]}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000380)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x21, 0x0, @local, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xbd}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000000040), 0x8) shutdown(r2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='fdinfo/3\x00') read$FUSE(r3, &(0x7f00000020c0)={0x2020}, 0x52) syz_emit_ethernet(0x86, &(0x7f0000000340)=ANY=[], 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="74000000000201040000000000000000020000002400028014000180080001007f00000108000200ac1414000e00028005000100000000002400038014000180040001000000000008000200ac1414000c0002800500010000000000180001801400018008000100ac1414bb08000200ac141400"], 0x74}}, 0x0) 8.536625063s ago: executing program 0 (id=2562): syz_open_dev$vim2m(0x0, 0x0, 0x2) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sched_setscheduler(0xffffffffffffffff, 0x0, &(0x7f0000000200)=0xfffeffff) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) write$sysctl(r3, &(0x7f0000000000)='2\x00', 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) fstat(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000502, r4, &(0x7f00000000c0)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(r6, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001480)={0x1c, r7, 0x1}, 0x1c}}, 0x0) 7.711903875s ago: executing program 4 (id=2563): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x7ffcb000, &(0x7f0000000300)=[{&(0x7f00000000c0)='6', 0x18000}], 0x8}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r5 = inotify_init1(0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000440)=@security={'security\x00', 0x4, 0x4, 0x3b8, 0xffffffff, 0xd0, 0x1a8, 0xd0, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x7fffffe, 0x0, {[{{@ipv6={@dev, @ipv4={'\x00', '\xff\xff', @multicast1}, [], [], 'bridge_slave_1\x00', 'geneve0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@private1, @mcast1, [], [], 'geneve1\x00', 'macvlan0\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'syz0\x00'}}, @common=@ipv6header={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) bind$unix(r2, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) fcntl$setown(r5, 0x8, 0xffffffffffffffff) r7 = syz_open_procfs(0x0, &(0x7f0000000600)='fd/4\x00') open_by_handle_at(r7, &(0x7f0000000180)=ANY=[@ANYBLOB="0c00000001000000"], 0x0) 6.666015041s ago: executing program 4 (id=2564): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xfffffffffffffffb, 0x0}, 0x800) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x0, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x11, 0x800000003, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x2b) r2 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @private2}]}}]}, 0x48}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6.572242612s ago: executing program 0 (id=2565): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0) link(0x0, &(0x7f0000000bc0)='./file0\x00') bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x23, &(0x7f0000000300)=0x20, 0x4) write$binfmt_misc(r3, &(0x7f0000000300)=ANY=[], 0x6) recvmmsg(r3, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0) fchdir(0xffffffffffffffff) 4.918887965s ago: executing program 3 (id=2566): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000002c0)=0x1c) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000200)={0xa, 0x0, @private}, 0x1c) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x48) 4.371309742s ago: executing program 0 (id=2567): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x36, 0x0, 0x0, 0x3, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f00000007c0)=[{0x6, 0x0, 0x0, 0x2}]}) write$ppp(r1, &(0x7f0000000900)='\x00\x00', 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/1423], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) r3 = fcntl$dupfd(r2, 0x0, r2) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)=@generic={0x0, r3}, 0x14) fchmodat(r3, &(0x7f0000000000)='./file0\x00', 0xea) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000540)='binfmt_misc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(r4, 0x4, 0x0) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)={{0x12, 0x1, 0x0, 0x10, 0xa0, 0xfd, 0x20, 0x2c42, 0x16f8, 0xbae3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb5, 0x51, 0xd2}}]}}]}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xe, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0x4a}, @jmp={0x5, 0x0, 0x9}], &(0x7f0000000280)='GPL\x00'}, 0x90) syz_usb_control_io$uac1(r5, 0x0, 0x0) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0x1d, 0x12, 0x26, 0x10, 0x18d1, 0x1eaf, 0x779, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe1, 0x15, 0x3d}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f0000000340)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="0017c8000000b8"], 0x0, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x4}}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x40, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{}]}, @NL80211_TXRATE_VHT={0x14}]}]}]}, 0x40}}, 0x0) 4.240410301s ago: executing program 2 (id=2568): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) syz_emit_ethernet(0x70, &(0x7f0000000100)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "6b88ef", 0x3a, 0x3a, 0x0, @private1, @local, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "a9d528", 0x0, 0x0, 0x0, @dev, @local, [@srh={0x2b}], "6ab0"}}}}}}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="000000007ef61a65ad8cd387bf4daf70d200432cf9292346a3db427eb8a4cf8299bd45942e5a6926ed25e9e09fcd9ef90e608be6020434f915567489ab008e9e4b969dfaa00dcbd03cb0f10b54c69ab5fbe03105b3c46dc42b2b41e78d21d96b7f0b08c41c082a18d431aa5fcbe4c85c3eb7b04678c9cf63423ea2dfe1b2e5803b76a65919e37544b00a410b41530301b6d78dcdb89b575a7dedee3934b43ac227bb317e0421dc4ac8e449e5dc8717b447", @ANYRES16=r2, @ANYBLOB="01000000000000000000110000000c0009800800010000000000"], 0x20}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r4, 0x89f7, &(0x7f00000000c0)={'sit0\x00', 0x0}) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r5, 0x1}, 0x14}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000001980), 0xffffffffffffffff) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000200)={0x10000010}) r10 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r10, &(0x7f0000000000)={0x24, @short}, 0x14) sendmsg$SMC_PNETID_ADD(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, r7, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}]}, 0x34}}, 0x0) 4.042129044s ago: executing program 4 (id=2569): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000300)=[@in={0x2, 0x4, @remote}, @in={0x2, 0x4e22, @local}, @in={0x2, 0x4e22}, @in6={0xa, 0x4e21, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e20, @multicast2}], 0x6c) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, &(0x7f0000000140)=0x98, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) io_submit(0x0, 0x1, &(0x7f0000000740)=[0x0]) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$kcm(0x10, 0x0, 0x4) 3.240078098s ago: executing program 3 (id=2570): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000002a000107000000000000000006000000ab7d693fbd523147aef47c26383826eba9d2cbd6e9ddfe"], 0x14}}, 0x0) recvmmsg(r1, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000140)='source', 0x0, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r2, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = fsopen(&(0x7f00000003c0)='nfsd\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r3, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) 1.963939066s ago: executing program 2 (id=2571): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000280)='fsi_master_aspeed_opb_read\x00'}, 0x10) syz_open_procfs(0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xffffffffffffffff, 0x4031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x0, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x13, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x6}, {0x15}}, [@printk={@p, {}, {0x5, 0x1, 0xb, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x65c}, {0x14, 0x9}}], {{0x4, 0x1, 0x4, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) listen(r3, 0x0) 1.821949052s ago: executing program 4 (id=2572): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd6000000000482b00fc020000000000000000000000000000fe8000000000000000000000000000aa0000"], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='pids.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00005d4000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000040)="5b0f01c2c29c028ed0660f388236af0083ee2c0f20c06635000004200f22c0643e1f0fb7c2", 0x25}], 0x1, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240), 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) socket(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 981.148356ms ago: executing program 2 (id=2573): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="b40500000000040079102800000000001e500000000000009500000000000000188dc3eff8a716a5a223700c2e2d294dd1ef01a773a5eadb21bd2cfa0554f6631ca18241148d24c0a57598a62ca622769b885f5940f351a622d08caa792cd285b9b43d9d481ac6b5d2ac4123c3977aa249ce8bfa34310836cd7196c62c61b1"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000), 0x4) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$unix(0xffffffffffffffff, &(0x7f00000000c0)=""/182, 0xb6, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setregid(0x0, 0x0) r1 = gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00', 0xfffffffc}) read(r2, &(0x7f0000000200)=""/213, 0xd5) setpgid(r1, r1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000040)={0x325}) tkill(r1, 0x7) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0x408c5333, &(0x7f0000000080)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/vmallocinfo\x00', 0x0, 0x0) pread64(r3, &(0x7f0000000440)=""/92, 0x5c, 0x58) flock(r0, 0x5) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x0, 0x8, 0x1014}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r4, 0x0, 0x0}, 0x20) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="74000000100083050000f61bad214f0000000200", @ANYRES32=0x0, @ANYBLOB="00000000000000004c0012800b00010067726574617000003c00028005000900f300000006001800010400000800040008000000060011"], 0x74}}, 0x0) 451.725101ms ago: executing program 2 (id=2574): ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x8) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)=ANY=[]) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000140)={0x80000002}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue0\x00'}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000080)=@assoc_value, &(0x7f00000000c0)=0x8) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$char_usb(r4, &(0x7f00000001c0)=""/4068, 0xfe4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000300000018000180040002800e0001"], 0x2c}}, 0x0) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r8, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c000780080005000000000008000600000000000800050000000000240007800800050000000000000005000000000061ff05000000000008000500000000f80400078014000780080006000049"], 0xd0}}, 0x0) keyctl$join(0x1, 0x0) 451.334577ms ago: executing program 3 (id=2575): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@private2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) r3 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4) r4 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCSMRU(r4, 0x40047452, 0x0) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000001d0001"], 0xb8}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xc3, 0xa1, 0xd7, 0x8, 0xccd, 0x99, 0x950d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbc, 0x71, 0xf9}}]}}]}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r8 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r6, 0xc0709411, &(0x7f00000002c0)={{0x0, 0xf5, 0x6, 0x4, 0x6, 0xa148, 0x808a, 0xfffffff4, 0xffffff15, 0x7, 0xff, 0xffffffffffffff60, 0x6, 0x4, 0x400}, 0x10, [0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH(r8, 0xd0009411, &(0x7f0000000600)={{r9, 0x8000000000, 0x8, 0xd82, 0xb, 0x5, 0x4, 0xfffffffe, 0x5b698fb8, 0x2, 0x9, 0x1, 0xffffffffffffffff, 0x10001, 0x1}}) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000002100004000000000ff"]) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 145.186164ms ago: executing program 0 (id=2576): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000180)=0x4, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) getsockname(r0, &(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000040)=0x80) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0x8000f28, 0x0) splice(r5, 0x0, r0, 0x0, 0x4, 0x0) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) writev(r7, &(0x7f00000002c0)=[{&(0x7f0000000040)="01000000", 0x4}], 0x1) 0s ago: executing program 4 (id=2577): openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7ffffdbc}]}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r0 = inotify_init1(0x0) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/96, 0x60}], 0x1) inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0x40000582) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) waitid(0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) rt_tgsigqueueinfo(r1, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) read$FUSE(r2, 0x0, 0x0) syncfs(0xffffffffffffffff) kernel console output (not intermixed with test programs): int 0x8B has an invalid bInterval 0, changing to 7 [ 1075.878404][ T9473] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1075.890293][ T9473] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1075.911417][ T9473] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1076.638487][ T944] usb 5-1: USB disconnect, device number 35 [ 1078.282338][ T9473] usb 2-1: can't set config #27, error -71 [ 1078.293893][ T9473] usb 2-1: USB disconnect, device number 35 [ 1080.552411][T14444] netlink: 'syz.2.1899': attribute type 4 has an invalid length. [ 1080.780682][T14444] netlink: 'syz.2.1899': attribute type 4 has an invalid length. [ 1080.893461][ T944] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1081.276706][ T944] usb 2-1: Using ep0 maxpacket: 32 [ 1081.982677][ T944] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1085.181520][ T944] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1085.193664][ T944] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1085.209470][ T944] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1085.372168][ T944] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1085.704560][ T944] usb 2-1: Product: syz [ 1085.775678][ T944] usb 2-1: Manufacturer: syz [ 1085.830214][ T944] usb 2-1: SerialNumber: syz [ 1085.870429][ T944] usb 2-1: can't set config #1, error -71 [ 1085.920618][ T944] usb 2-1: USB disconnect, device number 36 [ 1086.140042][T14471] vxcan0: entered promiscuous mode [ 1086.332823][T14471] vlan2: entered promiscuous mode [ 1086.395061][T14471] vlan2: entered allmulticast mode [ 1086.483505][T14471] vxcan0: entered allmulticast mode [ 1086.589875][T14471] vxcan0: left allmulticast mode [ 1086.610567][T14471] vxcan0: left promiscuous mode [ 1086.961182][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 1086.961200][ T29] audit: type=1326 audit(1723885105.753:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14487 comm="syz.1.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92dad79e79 code=0x7ffc0000 [ 1087.013674][ T29] audit: type=1326 audit(1723885105.753:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14487 comm="syz.1.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92dad79e79 code=0x7ffc0000 [ 1087.058322][ T29] audit: type=1326 audit(1723885105.753:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14487 comm="syz.1.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f92dad79e79 code=0x7ffc0000 [ 1087.100236][ T29] audit: type=1326 audit(1723885105.753:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14487 comm="syz.1.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92dad79e79 code=0x7ffc0000 [ 1087.133873][ T29] audit: type=1326 audit(1723885105.753:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14487 comm="syz.1.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f92dad79e79 code=0x7ffc0000 [ 1087.178676][ T29] audit: type=1326 audit(1723885105.753:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14487 comm="syz.1.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92dad79e79 code=0x7ffc0000 [ 1087.217626][ T29] audit: type=1326 audit(1723885105.753:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14487 comm="syz.1.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92dad79e79 code=0x7ffc0000 [ 1087.293358][ T29] audit: type=1326 audit(1723885105.753:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14487 comm="syz.1.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f92dad79e79 code=0x7ffc0000 [ 1087.316340][ T29] audit: type=1326 audit(1723885105.753:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14487 comm="syz.1.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92dad79e79 code=0x7ffc0000 [ 1087.350350][T11805] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1087.543465][T11805] usb 1-1: too many configurations: 65, using maximum allowed: 8 [ 1087.968499][T11805] usb 1-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 1087.978968][ T29] audit: type=1326 audit(1723885105.753:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14487 comm="syz.1.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f92dad79e79 code=0x7ffc0000 [ 1088.002528][T11805] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1088.118183][T14505] cifs: Unknown parameter '[bIT&:"1:ӭ'4,Zz-#F<]%gC [ 1088.118183][T14505] SȘȞZ6' [ 1088.290262][T14483] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1089.064007][T11805] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1089.136342][T14513] netlink: 'syz.3.1916': attribute type 1 has an invalid length. [ 1089.149522][T14513] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1916'. [ 1089.265102][T11805] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1089.310556][T11805] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1089.329846][T11805] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 895 [ 1089.362513][T11805] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1089.401587][T11805] usb 2-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice= 0.00 [ 1089.429247][T11805] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1089.442902][T14524] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1919'. [ 1089.457858][T11805] usb 2-1: SerialNumber: syz [ 1089.471979][T11805] usb 2-1: config 0 descriptor?? [ 1089.486185][T14508] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1089.538070][T11805] port100 2-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 1089.610403][ T5272] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1089.840427][ T5272] usb 5-1: Using ep0 maxpacket: 32 [ 1089.859925][ T5272] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1089.859955][ T5272] usb 5-1: config 0 has no interfaces? [ 1089.862084][ T6427] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1089.876930][ T5272] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1089.876962][ T5272] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.876984][ T5272] usb 5-1: Product: syz [ 1089.877000][ T5272] usb 5-1: Manufacturer: syz [ 1089.877017][ T5272] usb 5-1: SerialNumber: syz [ 1089.891334][ T5272] usb 5-1: config 0 descriptor?? [ 1089.894152][T14508] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1915'. [ 1089.920506][ T944] usb 2-1: USB disconnect, device number 37 [ 1090.052135][ T6427] usb 3-1: Using ep0 maxpacket: 32 [ 1090.056089][ T6427] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1090.056124][ T6427] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1090.059941][ T6427] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1090.059971][ T6427] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1090.059993][ T6427] usb 3-1: Product: syz [ 1090.060010][ T6427] usb 3-1: Manufacturer: syz [ 1090.071723][ T6427] hub 3-1:4.0: USB hub found [ 1090.295758][ T6427] hub 3-1:4.0: 2 ports detected [ 1090.710900][ T9470] usb 1-1: USB disconnect, device number 31 [ 1090.852611][ T6427] hub 3-1:4.0: set hub depth failed [ 1090.879059][ T6427] usb 3-1: USB disconnect, device number 44 [ 1090.890393][ T5272] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1091.814674][ T5272] usb 2-1: Using ep0 maxpacket: 32 [ 1091.836427][ T5272] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1091.854428][ T5272] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1091.878352][ T5272] usb 2-1: config 0 descriptor?? [ 1091.899508][ T5272] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1092.123491][T14530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1092.153436][T14530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1092.279355][ T9474] usb 5-1: USB disconnect, device number 36 [ 1092.420541][ T5272] gspca_vc032x: reg_r err -110 [ 1092.425418][ T5272] gspca_vc032x: I2c Bus Busy Wait 00 [ 1092.432740][ T5272] gspca_vc032x: I2c Bus Busy Wait 00 [ 1092.438537][ T5272] gspca_vc032x: I2c Bus Busy Wait 00 [ 1092.444993][ T5272] gspca_vc032x: I2c Bus Busy Wait 00 [ 1092.450886][ T5272] gspca_vc032x: I2c Bus Busy Wait 00 [ 1092.457283][ T5272] gspca_vc032x: I2c Bus Busy Wait 00 [ 1092.497378][ T5272] gspca_vc032x: I2c Bus Busy Wait 00 [ 1092.510986][ T5272] gspca_vc032x: I2c Bus Busy Wait 00 [ 1092.517631][ T5272] gspca_vc032x: I2c Bus Busy Wait 00 [ 1092.525802][ T5272] gspca_vc032x: I2c Bus Busy Wait 00 [ 1092.531949][ T5272] gspca_vc032x: I2c Bus Busy Wait 00 [ 1092.537966][ T5272] gspca_vc032x: I2c Bus Busy Wait 00 [ 1092.544160][ T5272] gspca_vc032x: I2c Bus Busy Wait 00 [ 1092.557779][ T5272] gspca_vc032x: I2c Bus Busy Wait 00 [ 1092.565982][ T5272] gspca_vc032x: I2c Bus Busy Wait 00 [ 1092.572956][ T5272] gspca_vc032x: I2c Bus Busy Wait 00 [ 1092.578668][ T5272] gspca_vc032x: I2c Bus Busy Wait 00 [ 1092.588103][ T5272] gspca_vc032x: I2c Bus Busy Wait 00 [ 1092.594278][ T5272] gspca_vc032x: Unknown sensor... [ 1092.600562][ T5272] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 1092.790498][T14552] fuse: Bad value for 'fd' [ 1093.102401][ T5272] usb 2-1: USB disconnect, device number 38 [ 1093.594290][T14564] tc_dump_action: action bad kind [ 1094.481055][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 1094.481108][ T29] audit: type=1326 audit(1723885625.251:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14565 comm="syz.4.1932" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efc48779e79 code=0x0 [ 1095.705689][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1099.047115][T14602] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1938'. [ 1099.630678][ T5272] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1099.842715][ T5272] usb 1-1: Using ep0 maxpacket: 32 [ 1099.866363][ T5272] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1099.866396][ T5272] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1099.866417][ T5272] usb 1-1: Product: syz [ 1099.866433][ T5272] usb 1-1: Manufacturer: syz [ 1099.866448][ T5272] usb 1-1: SerialNumber: syz [ 1099.868347][ T5272] usb 1-1: config 0 descriptor?? [ 1100.088412][ T5272] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: version d4.15 found at bus 001 address 032 [ 1100.931866][T14628] delete_channel: no stack [ 1101.099016][ T6427] usb 1-1: USB disconnect, device number 32 [ 1101.961701][T14632] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1947'. [ 1102.153857][T14632] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1947'. [ 1103.284236][T14661] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 1104.041786][T14662] netlink: 'syz.2.1951': attribute type 4 has an invalid length. [ 1107.772817][T14681] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1956'. [ 1107.792260][T14675] lo speed is unknown, defaulting to 1000 [ 1110.406850][T14689] delete_channel: no stack [ 1110.757177][ T6427] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1111.247795][ T6427] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1111.474611][ T6427] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1111.483285][ T6427] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1111.491404][ T6427] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1111.502759][ T6427] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1111.510850][ T6427] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1111.518649][ T6427] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1111.526546][ T6427] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1111.534377][ T6427] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1111.565840][ T6427] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1111.629377][ T6427] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1111.853325][ T5272] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1112.074103][ T5272] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1112.101029][ T5272] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1112.120285][ T5272] usb 1-1: Product: syz [ 1112.125600][ T5272] usb 1-1: Manufacturer: syz [ 1112.133763][ T5272] usb 1-1: SerialNumber: syz [ 1112.162660][ T5272] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1112.252129][T11805] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1112.514591][T14724] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1969'. [ 1112.631563][ T6427] usb 1-1: USB disconnect, device number 33 [ 1113.030927][ T5270] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1114.427002][T11805] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1114.596866][ T5270] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1114.649591][T11805] ath9k_htc: Failed to initialize the device [ 1114.658958][ T5270] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1114.689379][ T5270] usb 3-1: config 0 descriptor?? [ 1114.700351][ T6427] usb 1-1: ath9k_htc: USB layer deinitialized [ 1114.714938][ T5270] cp210x 3-1:0.0: cp210x converter detected [ 1115.665845][T14737] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1972'. [ 1115.697907][ T5270] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 1115.754841][ T5270] cp210x 3-1:0.0: querying part number failed [ 1115.765540][T14737] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1972'. [ 1115.795478][ T5270] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1115.820242][T14741] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 0, id = 0 [ 1115.832049][ T5270] usb 3-1: USB disconnect, device number 45 [ 1115.846357][T14740] IPVS: stopping backup sync thread 14741 ... [ 1115.855301][ T5270] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1115.894757][ T5270] cp210x 3-1:0.0: device disconnected [ 1116.800813][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 1117.591944][T11805] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1117.693305][T14764] fuse: Unknown parameter '0x0000000000000004' [ 1117.840462][T11805] usb 5-1: Using ep0 maxpacket: 16 [ 1117.857064][T14764] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 1118.061788][T11805] usb 5-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=f8.a6 [ 1118.070161][T14766] overlayfs: refusing to follow metacopy origin for (/file0) [ 1118.880480][T11805] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1118.890362][T11805] usb 5-1: Product: syz [ 1118.894738][T11805] usb 5-1: Manufacturer: syz [ 1118.899732][T11805] usb 5-1: SerialNumber: syz [ 1118.918869][T11805] usb 5-1: config 0 descriptor?? [ 1118.926344][T11805] usb 5-1: can't set config #0, error -71 [ 1118.936335][T11805] usb 5-1: USB disconnect, device number 37 [ 1119.326591][T14773] delete_channel: no stack [ 1119.415121][T14781] kernel profiling enabled (shift: 12) [ 1119.624291][ T29] audit: type=1326 audit(1723885650.391:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14777 comm="syz.0.1985" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f243ad79e79 code=0x0 [ 1124.838028][T14821] xt_l2tp: invalid flags combination: 0 [ 1127.063908][T14838] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1127.160306][ T5270] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1127.360342][ T5270] usb 1-1: Using ep0 maxpacket: 32 [ 1127.380478][ T5270] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1127.419817][ T5270] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1127.462843][ T5270] usb 1-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 1127.490378][ T5270] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1127.515954][ T5270] usb 1-1: Product: syz [ 1127.528174][ T5270] usb 1-1: Manufacturer: syz [ 1127.541757][ T5270] usb 1-1: SerialNumber: syz [ 1127.565372][ T5270] usb 1-1: config 0 descriptor?? [ 1128.002772][T14851] /dev/nullb0: Can't open blockdev [ 1128.019050][T14851] netlink: 'syz.1.2000': attribute type 49 has an invalid length. [ 1128.709099][T14834] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1996'. [ 1128.748384][T14834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1128.797034][T14834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1128.879885][T14857] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2005'. [ 1129.172882][ T9474] usb 1-1: USB disconnect, device number 34 [ 1129.460261][ T5270] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1129.650444][ T5270] usb 5-1: Using ep0 maxpacket: 8 [ 1129.665494][ T5270] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=95.0d [ 1129.679760][ T5270] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1129.698492][ T5270] usb 5-1: Product: syz [ 1129.708610][ T5270] usb 5-1: Manufacturer: syz [ 1129.721513][ T5270] usb 5-1: SerialNumber: syz [ 1129.735901][ T5270] usb 5-1: config 0 descriptor?? [ 1130.049150][ T5270] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1130.101951][ T5270] dvb_usb_af9015 5-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 1130.159656][ T5270] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1130.167692][ T5270] dvb_usb_af9035 5-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 1130.215372][ T5270] usb 5-1: USB disconnect, device number 38 [ 1130.263529][ T29] audit: type=1326 audit(1723885661.051:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14873 comm="syz.2.2007" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9b64979e79 code=0x0 [ 1131.288432][T14896] xt_l2tp: invalid flags combination: 0 [ 1132.620407][ T6427] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1132.888908][ T6427] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1132.963114][ T6427] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1134.000407][ T6427] usb 3-1: New USB device found, idVendor=056a, idProduct=00c6, bcdDevice= 0.00 [ 1134.012942][ T6427] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1134.026370][ T6427] usb 3-1: config 0 descriptor?? [ 1134.261822][ T29] audit: type=1326 audit(1723885665.051:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14917 comm="syz.0.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243ad79e79 code=0x7ffc0000 [ 1134.324952][ T29] audit: type=1326 audit(1723885665.071:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14917 comm="syz.0.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f243ad79e79 code=0x7ffc0000 [ 1134.355798][ T29] audit: type=1326 audit(1723885665.071:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14917 comm="syz.0.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243ad79e79 code=0x7ffc0000 [ 1134.427006][ T29] audit: type=1326 audit(1723885665.071:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14917 comm="syz.0.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243ad79e79 code=0x7ffc0000 [ 1134.458157][T14902] Bluetooth: MGMT ver 1.23 [ 1134.466420][T14902] Bluetooth: hci3: invalid length 0, exp 2 for type 17 [ 1134.662237][ T29] audit: type=1326 audit(1723885665.071:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14917 comm="syz.0.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243ad79e79 code=0x7ffc0000 [ 1135.233719][ T29] audit: type=1326 audit(1723885665.071:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14917 comm="syz.0.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243ad79e79 code=0x7ffc0000 [ 1135.269069][ T6427] wacom 0003:056A:00C6.0013: hidraw0: USB HID v0.00 Device [HID 056a:00c6] on usb-dummy_hcd.2-1/input0 [ 1135.380374][ T29] audit: type=1326 audit(1723885665.071:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14917 comm="syz.0.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f243ad79e79 code=0x7ffc0000 [ 1135.452896][ T29] audit: type=1326 audit(1723885665.071:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14917 comm="syz.0.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243ad79e79 code=0x7ffc0000 [ 1135.497404][ T5270] usb 3-1: USB disconnect, device number 46 [ 1135.536771][ T29] audit: type=1326 audit(1723885665.071:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14917 comm="syz.0.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243ad79e79 code=0x7ffc0000 [ 1135.609620][ T29] audit: type=1326 audit(1723885665.071:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14917 comm="syz.0.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f243ad79e79 code=0x7ffc0000 [ 1135.690277][ T29] audit: type=1326 audit(1723885665.071:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14917 comm="syz.0.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243ad79e79 code=0x7ffc0000 [ 1135.791425][ T29] audit: type=1326 audit(1723885665.071:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14917 comm="syz.0.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f243ad7895f code=0x7ffc0000 [ 1135.879815][ T29] audit: type=1326 audit(1723885665.071:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14917 comm="syz.0.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243ad79e79 code=0x7ffc0000 [ 1135.985425][ T29] audit: type=1326 audit(1723885665.071:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14917 comm="syz.0.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243ad79e79 code=0x7ffc0000 [ 1138.019642][T14948] xt_l2tp: invalid flags combination: 0 [ 1139.567356][T14961] Bluetooth: hci3: invalid length 0, exp 2 for type 19 [ 1139.618142][T14954] syzkaller1: entered promiscuous mode [ 1139.657068][T14954] syzkaller1: entered allmulticast mode [ 1140.519588][T14976] syz.2.2032[14976] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1140.519734][T14976] syz.2.2032[14976] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1140.549664][T14976] openvswitch: netlink: Missing key (keys=8040, expected=200000) [ 1146.052478][T14986] netlink: 'syz.1.2034': attribute type 14 has an invalid length. [ 1146.062809][T14986] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (204) [ 1152.170460][ T9473] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1152.824658][T15029] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1152.841403][ T29] audit: type=1326 audit(1723885683.631:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15023 comm="syz.2.2045" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9b64979e79 code=0x0 [ 1152.867927][T15029] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1152.880282][ T9473] usb 5-1: Using ep0 maxpacket: 16 [ 1152.885912][T15029] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1152.897884][T15029] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1152.899063][ T9473] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1152.920696][T15029] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1152.929359][T15029] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1153.010404][ T9473] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1153.025228][ T9473] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1153.035229][ T9473] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1153.043634][ T9473] usb 5-1: Manufacturer: syz [ 1153.071414][ T9473] usb 5-1: config 0 descriptor?? [ 1153.139163][T15026] lo speed is unknown, defaulting to 1000 [ 1154.571919][T15026] chnl_net:caif_netlink_parms(): no params data found [ 1154.990505][ T8861] Bluetooth: hci2: command tx timeout [ 1155.027933][T15057] lo speed is unknown, defaulting to 1000 [ 1155.100756][ T5272] usb 5-1: USB disconnect, device number 39 [ 1155.492992][T15063] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2052'. [ 1156.961674][T15026] bridge0: port 1(bridge_slave_0) entered blocking state [ 1156.968893][T15026] bridge0: port 1(bridge_slave_0) entered disabled state [ 1156.983238][T15026] bridge_slave_0: entered allmulticast mode [ 1157.283782][ T8861] Bluetooth: hci2: command tx timeout [ 1157.358643][T15026] bridge_slave_0: entered promiscuous mode [ 1157.470498][T15026] bridge0: port 2(bridge_slave_1) entered blocking state [ 1157.490315][T15026] bridge0: port 2(bridge_slave_1) entered disabled state [ 1157.530605][T15026] bridge_slave_1: entered allmulticast mode [ 1157.547215][T15026] bridge_slave_1: entered promiscuous mode [ 1158.470270][ T59] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1158.527198][T15091] netlink: 16126 bytes leftover after parsing attributes in process `syz.0.2057'. [ 1158.536771][T15091] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2057'. [ 1158.646337][T15026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1158.743846][ T59] usb 5-1: device descriptor read/all, error -71 [ 1158.760036][T15026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1158.951350][T15026] team0: Port device team_slave_0 added [ 1159.132313][T15026] team0: Port device team_slave_1 added [ 1159.310447][ T8861] Bluetooth: hci2: command tx timeout [ 1159.855240][T15100] vivid-000: kernel_thread() failed [ 1160.148205][T15026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1160.155717][T15026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1160.224242][T15104] sg_write: data in/out 93/14 bytes for SCSI command 0x0-- guessing data in; [ 1160.224242][T15104] program syz.4.2060 not setting count and/or reply_len properly [ 1160.277666][T15026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1160.302299][T15026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1160.325186][T15026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1160.366137][T15026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1160.457568][T15026] hsr_slave_0: entered promiscuous mode [ 1160.464665][T15026] hsr_slave_1: entered promiscuous mode [ 1160.482142][T15026] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1160.510361][T15026] Cannot create hsr debugfs directory [ 1161.400491][ T8861] Bluetooth: hci2: command tx timeout [ 1162.169764][T15128] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2065'. [ 1162.340344][ T59] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1162.374761][T15026] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1162.409791][ T9470] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1162.580396][ T59] usb 3-1: Using ep0 maxpacket: 16 [ 1162.632155][ T59] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1162.672845][T15112] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2063'. [ 1162.682381][T15112] bridge_slave_1: left allmulticast mode [ 1162.688045][T15112] bridge_slave_1: left promiscuous mode [ 1162.690396][ T59] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 1162.704504][T15112] bridge0: port 2(bridge_slave_1) entered disabled state [ 1162.705251][ T9470] usb 2-1: Using ep0 maxpacket: 16 [ 1162.717400][ T59] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 1162.731388][T15112] bridge_slave_0: left allmulticast mode [ 1162.737063][T15112] bridge_slave_0: left promiscuous mode [ 1162.752641][ T9470] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1162.769348][ T59] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 1162.781194][ T59] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1162.798257][ T9470] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1162.808240][ T59] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1162.817542][ T59] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1162.825707][ T9470] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1162.834056][ T59] usb 3-1: Product: syz [ 1162.838226][ T59] usb 3-1: Manufacturer: syz [ 1162.842901][ T9470] usb 2-1: Product: syz [ 1162.847077][ T9470] usb 2-1: Manufacturer: syz [ 1162.853906][ T59] usb 3-1: SerialNumber: syz [ 1162.859038][ T9470] usb 2-1: SerialNumber: syz [ 1162.867478][T15112] bridge0: port 1(bridge_slave_0) entered disabled state [ 1162.878208][ T9470] cdc_ether 2-1:1.0: skipping garbage [ 1162.897426][ T59] usb 3-1: config 0 descriptor?? [ 1162.925867][ T9470] usb 2-1: bad CDC descriptors [ 1163.095934][T15026] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1163.171592][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::1]:20002. Sending cookies. [ 1163.176623][ T59] appledisplay 3-1:0.0: Error while getting initial brightness: -71 [ 1163.201232][ T59] appledisplay 3-1:0.0: probe with driver appledisplay failed with error -71 [ 1163.265652][ T59] usb 3-1: USB disconnect, device number 47 [ 1163.314442][T15026] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1164.341732][T15026] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1164.431854][ T7164] bridge_slave_1: left allmulticast mode [ 1164.462850][ T7164] bridge_slave_1: left promiscuous mode [ 1164.475610][ T7164] bridge0: port 2(bridge_slave_1) entered disabled state [ 1164.499136][ T7164] bridge_slave_0: left allmulticast mode [ 1164.512983][ T7164] bridge_slave_0: left promiscuous mode [ 1164.528121][ T7164] bridge0: port 1(bridge_slave_0) entered disabled state [ 1165.688350][ T9474] usb 2-1: USB disconnect, device number 39 [ 1166.778327][T15157] block nbd2: shutting down sockets [ 1167.042631][T15173] 9pnet_fd: Insufficient options for proto=fd [ 1167.118101][ T7164] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1167.177399][ T7164] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1167.200389][ T59] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1167.226026][ T7164] bond0 (unregistering): Released all slaves [ 1167.398663][ T59] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1167.425086][ T59] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1167.479862][ T59] usb 2-1: Product: syz [ 1167.495888][ T59] usb 2-1: Manufacturer: syz [ 1167.509065][ T59] usb 2-1: SerialNumber: syz [ 1167.647277][ T59] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1168.535931][T11805] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1169.085389][T15026] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1169.297998][T15026] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1169.728778][T11805] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1169.803689][T11805] ath9k_htc: Failed to initialize the device [ 1170.063443][T11805] usb 2-1: ath9k_htc: USB layer deinitialized [ 1170.069866][T15193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1170.104955][T15193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1170.321297][T15026] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1170.341907][T15026] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1171.255032][ T5270] usb 2-1: USB disconnect, device number 40 [ 1171.611052][ T7164] hsr_slave_0: left promiscuous mode [ 1171.641933][ T7164] 0: left promiscuous mode [ 1171.691257][ T7164] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1171.899606][ T7164] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1171.913814][ T7164] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1171.922519][ T7164] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1172.723683][ T7164] veth1_macvtap: left promiscuous mode [ 1172.729243][ T7164] veth0_macvtap: left promiscuous mode [ 1172.774053][ T29] audit: type=1326 audit(1723885703.521:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15202 comm="syz.0.2087" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f243ad79e79 code=0x0 [ 1172.798122][ T7164] veth1_vlan: left promiscuous mode [ 1172.806673][ T7164] veth0_vlan: left promiscuous mode [ 1172.865475][T15224] trusted_key: encrypted_key: insufficient parameters specified [ 1172.918158][T15225] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2090'. [ 1173.001365][T15225] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 1173.007921][T15225] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1173.018964][T15225] vhci_hcd vhci_hcd.0: Device attached [ 1173.330315][ T5270] usb 17-1: new high-speed USB device number 2 using vhci_hcd [ 1173.683348][T15228] vhci_hcd: connection reset by peer [ 1173.702116][ T7140] vhci_hcd: stop threads [ 1173.719785][ T7140] vhci_hcd: release socket [ 1173.732414][ T7140] vhci_hcd: disconnect device [ 1174.243290][ T7164] team0 (unregistering): Port device team_slave_1 removed [ 1175.039835][ T7164] team0 (unregistering): Port device team_slave_0 removed [ 1175.157993][T15244] binder: 15242:15244 unknown command 0 [ 1175.163897][T15244] binder: 15242:15244 ioctl c0306201 200001c0 returned -22 [ 1176.021876][T15026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1176.086975][T15026] 8021q: adding VLAN 0 to HW filter on device team0 [ 1176.300690][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1176.308004][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1176.522519][ T7127] bridge0: port 2(bridge_slave_1) entered blocking state [ 1176.529716][ T7127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1176.683196][T15254] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2097'. [ 1176.808050][T15258] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2098'. [ 1176.830546][T15258] netlink: 'syz.2.2098': attribute type 15 has an invalid length. [ 1177.121723][T15263] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 325119 (only 8 groups) [ 1177.633735][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 1179.494377][ T5270] vhci_hcd: vhci_device speed not set [ 1181.298060][T15270] netlink: 'syz.4.2102': attribute type 1 has an invalid length. [ 1182.243540][T15026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1182.341050][T15026] veth0_vlan: entered promiscuous mode [ 1182.397220][T15026] veth1_vlan: entered promiscuous mode [ 1182.422258][ T29] audit: type=1804 audit(1723885713.201:375): pid=15283 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.2105" name="/newroot/205/file0/bus" dev="hugetlbfs" ino=57980 res=1 errno=0 [ 1182.482797][ T29] audit: type=1804 audit(1723885713.251:376): pid=15283 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.2105" name="/newroot/205/file0/bus" dev="hugetlbfs" ino=57980 res=1 errno=0 [ 1182.550422][ T29] audit: type=1804 audit(1723885713.261:377): pid=15283 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.2.2105" name="/newroot/205/file0/bus" dev="hugetlbfs" ino=57980 res=1 errno=0 [ 1183.211364][T15026] veth0_macvtap: entered promiscuous mode [ 1183.529665][T15026] veth1_macvtap: entered promiscuous mode [ 1183.599186][T15026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1183.616108][T15026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1183.626948][T15026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1183.640298][T15026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1183.661615][T15026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1183.678801][T15026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1183.697087][T15026] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1183.716672][T15026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1183.739349][T15026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1183.801110][T15026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1183.820242][T15026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1183.830712][T15026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1183.842465][T15026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1183.858232][T15026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1183.869167][T15026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1183.890266][T15026] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1184.689751][T15026] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1184.698916][T15026] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1184.709153][T15026] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1184.718114][T15026] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1184.834632][T15305] xt_hashlimit: size too large, truncated to 1048576 [ 1185.001936][ T7164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1185.043012][ T7164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1186.595677][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1186.623961][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1192.108915][T15359] netlink: 'syz.0.2120': attribute type 10 has an invalid length. [ 1192.156240][T15359] bond0: (slave bond_slave_0): Releasing backup interface [ 1197.160716][T15404] siw: device registration error -23 [ 1197.581102][T15411] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2125'. [ 1199.143850][T15029] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1199.159283][T15029] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1199.168337][T15029] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1199.182664][T15029] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1199.191008][T15029] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1199.199768][T15029] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1199.337372][T15418] lo speed is unknown, defaulting to 1000 [ 1201.138265][T15418] chnl_net:caif_netlink_parms(): no params data found [ 1201.321343][T15029] Bluetooth: hci0: command tx timeout [ 1203.308033][T15418] bridge0: port 1(bridge_slave_0) entered blocking state [ 1203.360322][T15418] bridge0: port 1(bridge_slave_0) entered disabled state [ 1203.391016][T15029] Bluetooth: hci0: command tx timeout [ 1203.500412][T15418] bridge_slave_0: entered allmulticast mode [ 1203.508124][T15418] bridge_slave_0: entered promiscuous mode [ 1203.541255][T15418] bridge0: port 2(bridge_slave_1) entered blocking state [ 1203.560808][T15418] bridge0: port 2(bridge_slave_1) entered disabled state [ 1203.612967][T15418] bridge_slave_1: entered allmulticast mode [ 1203.644040][T15463] rdma_op ffff8880222f11f0 conn xmit_rdma 0000000000000000 [ 1204.256705][T15418] bridge_slave_1: entered promiscuous mode [ 1204.564955][T15418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1205.618558][T15029] Bluetooth: hci0: command tx timeout [ 1206.066339][T15418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1206.126470][T15418] team0: Port device team_slave_0 added [ 1206.151843][T15418] team0: Port device team_slave_1 added [ 1206.241892][T15478] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2141'. [ 1206.251221][T15477] Bluetooth: MGMT ver 1.23 [ 1207.144058][T15418] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1207.151680][T15418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1207.177601][ C0] vkms_vblank_simulate: vblank timer overrun [ 1207.184630][T15418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1207.196927][T15418] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1207.204360][T15478] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2141'. [ 1207.250163][T15418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1207.379835][T15418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1207.489779][T15482] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2143'. [ 1207.573166][T15485] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2143'. [ 1207.630777][T15485] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2143'. [ 1207.639719][T15029] Bluetooth: hci0: command tx timeout [ 1207.804302][T15418] hsr_slave_0: entered promiscuous mode [ 1207.824077][T15418] hsr_slave_1: entered promiscuous mode [ 1207.901734][T15418] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1207.937693][T15418] Cannot create hsr debugfs directory [ 1208.238870][T15478] kexec: Could not allocate control_code_buffer [ 1208.251776][T15493] binder: Unknown parameter 'system.posix_acl_default' [ 1208.752313][T15498] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2147'. [ 1209.946351][T15418] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1210.338165][T15418] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1210.596631][T15418] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1211.977677][T15418] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1212.420925][ T5270] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1212.474122][T15418] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1212.514394][T15418] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1212.546312][T15418] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1212.579975][T15418] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1212.655731][ T5270] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1212.681202][ T5270] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1212.709758][ T5270] usb 4-1: Product: syz [ 1212.731539][ T5270] usb 4-1: Manufacturer: syz [ 1212.751573][ T5270] usb 4-1: SerialNumber: syz [ 1212.782847][ T5270] usb 4-1: config 0 descriptor?? [ 1212.825472][ T5270] ch341 4-1:0.0: ch341-uart converter detected [ 1212.901597][T15418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1213.006436][T15418] 8021q: adding VLAN 0 to HW filter on device team0 [ 1213.092220][ T8515] bridge0: port 1(bridge_slave_0) entered blocking state [ 1213.099426][ T8515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1213.144729][ T8515] bridge0: port 2(bridge_slave_1) entered blocking state [ 1213.151871][ T8515] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1213.476848][ T8515] bridge_slave_1: left allmulticast mode [ 1213.499215][ T8515] bridge_slave_1: left promiscuous mode [ 1213.556727][ T8515] bridge0: port 2(bridge_slave_1) entered disabled state [ 1213.934376][ T8515] bridge_slave_0: left allmulticast mode [ 1214.351758][ T5270] usb 4-1: failed to send control message: -110 [ 1214.370288][ T5270] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 1214.400017][ T8515] bridge_slave_0: left promiscuous mode [ 1214.431679][ T8515] bridge0: port 1(bridge_slave_0) entered disabled state [ 1214.811317][ T59] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1215.057962][ T59] usb 3-1: Using ep0 maxpacket: 16 [ 1215.075028][ T59] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1215.114247][ T59] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1215.144736][ T59] usb 3-1: config 0 has no interface number 0 [ 1215.169244][ T59] usb 3-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1215.200246][ T59] usb 3-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00 [ 1215.215157][ T59] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1215.243386][ T59] usb 3-1: config 0 descriptor?? [ 1215.259458][ T59] usbhid 3-1:0.1: couldn't find an input interrupt endpoint [ 1216.419948][ T59] usb 4-1: USB disconnect, device number 29 [ 1216.427338][ T59] ch341 4-1:0.0: device disconnected [ 1217.286363][ T8515] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1217.318423][ T8515] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1218.288248][ T8515] bond0 (unregistering): Released all slaves [ 1218.424083][ T8515] tipc: Left network mode [ 1218.530402][T15553] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2158'. [ 1218.556872][T15554] vlan3: entered promiscuous mode [ 1218.576918][T15554] team_slave_0: entered promiscuous mode [ 1218.583360][T15554] team_slave_1: entered promiscuous mode [ 1218.594594][T15554] team0: entered promiscuous mode [ 1218.608071][T15554] bond0: (slave vlan3): Enslaving as an active interface with an up link [ 1218.696177][T15576] kAFS: unparsable volume name [ 1219.247038][ T9474] usb 3-1: USB disconnect, device number 48 [ 1219.522556][T15418] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1219.523678][ T9473] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1220.392510][ T9473] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1220.434243][ T9473] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1220.504487][ T9473] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1220.579339][ T9473] usb 4-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 1220.599564][ T9473] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1220.622491][ T9473] usb 4-1: config 0 descriptor?? [ 1220.684586][ T8515] hsr_slave_0: left promiscuous mode [ 1220.733900][ T8515] 0: left promiscuous mode [ 1220.764688][ T8515] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1220.787124][ T8515] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1220.800063][ T8515] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1220.809612][ T8515] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1220.868201][ T9474] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1220.916930][ T8515] veth1_macvtap: left promiscuous mode [ 1220.923893][ T8515] veth0_macvtap: left promiscuous mode [ 1220.931291][ T8515] veth1_vlan: left promiscuous mode [ 1220.938450][ T8515] veth0_vlan: left promiscuous mode [ 1221.057619][ T9474] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1221.080707][ T9473] uclogic 0003:28BD:0055.0014: interface is invalid, ignoring [ 1221.094021][ T9474] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1221.143417][ T9474] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1221.157935][ T9474] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1221.176328][T15593] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1221.187783][ T9474] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1221.297556][ T9473] usb 4-1: USB disconnect, device number 30 [ 1221.960851][T11805] usb 2-1: USB disconnect, device number 41 [ 1222.447253][ T8515] team0 (unregistering): Port device virt_wifi0 removed [ 1222.550269][ T29] audit: type=1326 audit(1723885753.321:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15605 comm="syz.3.2168" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa424b79e79 code=0x0 [ 1223.328023][ T8515] team0 (unregistering): Port device team_slave_1 removed [ 1223.350205][ T9474] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1223.469740][ T8515] team0 (unregistering): Port device team_slave_0 removed [ 1223.542109][ T9474] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1223.579629][ T9474] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1223.643237][ T9474] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1223.674572][ T9474] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1223.692469][ T9474] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1223.706392][ T9474] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1223.736287][ T9474] usb 2-1: config 0 descriptor?? [ 1223.765101][T15615] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1224.224733][ T9474] plantronics 0003:047F:FFFF.0015: unknown main item tag 0xd [ 1224.252836][ T9474] plantronics 0003:047F:FFFF.0015: No inputs registered, leaving [ 1224.486784][ T9474] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1226.148692][T15639] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1226.183180][ T9474] usb 2-1: USB disconnect, device number 42 [ 1226.226116][T15636] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1227.254757][T15418] veth0_vlan: entered promiscuous mode [ 1227.330840][T15418] veth1_vlan: entered promiscuous mode [ 1227.508719][ T8515] IPVS: stop unused estimator thread 0... [ 1228.293244][T15418] veth0_macvtap: entered promiscuous mode [ 1228.306388][T15418] veth1_macvtap: entered promiscuous mode [ 1228.501681][T15418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1229.161692][T15418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1229.539324][T15418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1229.743674][T15418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1229.776031][T15418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1229.804381][T15418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1229.920522][ T5272] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1230.112635][T15418] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1230.151535][T15663] vlan2: entered promiscuous mode [ 1230.157147][T15663] veth0: entered promiscuous mode [ 1230.167230][T15663] team0: Port device vlan2 added [ 1230.210737][T15418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1230.230438][ T5272] usb 2-1: Using ep0 maxpacket: 16 [ 1230.245604][T15418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1230.266148][T15418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1230.276945][ T5272] usb 2-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=59.31 [ 1230.277062][T15418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1230.306299][T15418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1230.321077][ T5272] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1230.329722][ T5272] usb 2-1: Product: syz [ 1230.336695][ T5272] usb 2-1: Manufacturer: syz [ 1230.349687][T15418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1230.353431][ T5272] usb 2-1: SerialNumber: syz [ 1230.376851][T15418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1230.377800][ T5272] usb 2-1: config 0 descriptor?? [ 1230.408278][T15418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1230.419638][ T5272] usb 2-1: no audio or video endpoints found [ 1230.444518][ T5272] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1230.570613][T15418] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1230.587089][T15418] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1230.609890][T15418] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1230.670270][T15418] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1230.683481][T15418] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1230.906547][T11805] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1231.678201][T11805] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1231.694963][T11805] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1231.781728][T11805] usb 4-1: config 0 descriptor?? [ 1231.906469][T11805] cp210x 4-1:0.0: cp210x converter detected [ 1232.321506][T15388] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1232.329520][T15388] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1233.867384][ T9474] usb 2-1: USB disconnect, device number 43 [ 1233.978942][T11805] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1234.031811][ T7117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1234.039664][ T7117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1235.380832][T11805] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1235.736221][T15711] xt_hashlimit: invalid interval [ 1236.417060][ T5272] usb 4-1: USB disconnect, device number 31 [ 1236.449708][T15709] netlink: 'syz.2.2192': attribute type 21 has an invalid length. [ 1236.451995][ T5272] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1236.509729][T15715] 9pnet_virtio: no channels available for device syz [ 1236.511391][T15709] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2192'. [ 1236.567734][ T5272] cp210x 4-1:0.0: device disconnected [ 1237.034742][ T59] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1237.550363][T15734] syz.0.2196: attempt to access beyond end of device [ 1237.550363][T15734] nbd0: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 1237.563502][T15734] hfsplus: unable to find HFS+ superblock [ 1237.658482][ T59] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1237.742036][ T59] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1237.759822][ T59] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1237.769214][ T59] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1237.778318][ T59] usb 3-1: SerialNumber: syz [ 1238.533678][ T59] usb 3-1: 0:2 : does not exist [ 1238.541892][ T59] usb 3-1: unit 255 not found! [ 1238.558015][ T59] usb 3-1: USB disconnect, device number 49 [ 1238.585561][T15578] udevd[15578]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1238.776681][T15747] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2200'. [ 1239.072720][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 1242.490230][ T9474] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1242.740330][ T9474] usb 4-1: Using ep0 maxpacket: 32 [ 1242.755729][ T9474] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1242.784171][ T9474] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1242.817030][ T9474] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1242.829055][ T9474] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1242.850957][ T9473] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1242.872929][ T9474] usb 4-1: config 0 descriptor?? [ 1242.894851][ T9474] usb 4-1: can't set config #0, error -71 [ 1242.902870][ T9474] usb 4-1: USB disconnect, device number 32 [ 1243.045842][ T9473] usb 1-1: New USB device found, idVendor=468c, idProduct=90ea, bcdDevice=99.6d [ 1243.132323][ T9473] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1243.162960][ T9473] usb 1-1: Product: syz [ 1243.896268][T15784] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 1244.078992][ T9473] usb 1-1: Manufacturer: syz [ 1244.094098][ T9473] usb 1-1: SerialNumber: syz [ 1244.102080][ T9473] usb 1-1: config 0 descriptor?? [ 1244.111791][ T9473] usb 1-1: can't set config #0, error -71 [ 1244.123303][ T9473] usb 1-1: USB disconnect, device number 35 [ 1244.175880][T15788] netlink: 'syz.3.2209': attribute type 2 has an invalid length. [ 1244.264540][T15791] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2212'. [ 1244.416187][T15794] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2213'. [ 1244.660247][ T9473] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1244.866193][ T9473] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1244.885784][ T9473] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1245.028346][ T9473] usb 1-1: config 0 descriptor?? [ 1245.037047][ T9473] cp210x 1-1:0.0: cp210x converter detected [ 1245.579821][ T9473] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1245.767494][ T9473] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1245.890523][T15790] Bluetooth: MGMT ver 1.23 [ 1245.972315][T15804] netlink: 'syz.4.2215': attribute type 11 has an invalid length. [ 1246.017366][T15790] 9pnet: Could not find request transport: fd/Zŗ6_+ rrfdno= [ 1246.043812][ T5272] usb 1-1: USB disconnect, device number 36 [ 1246.077225][ T5272] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1246.119238][ T5272] cp210x 1-1:0.0: device disconnected [ 1246.350442][T15029] Bluetooth: hci0: command tx timeout [ 1246.603239][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1246.850183][T15818] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1246.866812][T15818] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1249.553467][T15851] No such timeout policy "syz1" [ 1249.880841][T15029] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1250.100379][ T9473] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1250.180641][T15856] hub 9-0:1.0: USB hub found [ 1250.185877][T15856] hub 9-0:1.0: 8 ports detected [ 1250.207813][T15858] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2227'. [ 1250.297181][ T9473] usb 5-1: New USB device found, idVendor=a766, idProduct=7cb5, bcdDevice=55.3a [ 1250.340731][ T9473] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1250.402964][ T9473] usb 5-1: config 0 descriptor?? [ 1250.431212][ T9473] usb-storage 5-1:0.0: USB Mass Storage device detected [ 1250.726941][ T5271] usb 5-1: USB disconnect, device number 42 [ 1251.122450][T15881] netlink: 'syz.2.2232': attribute type 11 has an invalid length. [ 1253.813800][T15904] usb usb8: usbfs: process 15904 (syz.1.2235) did not claim interface 0 before use [ 1254.578663][T15914] misc userio: Can't change port type on an already running userio instance [ 1255.018054][T15921] lo speed is unknown, defaulting to 1000 [ 1255.900373][T15927] netlink: 4096 bytes leftover after parsing attributes in process `syz.0.2242'. [ 1255.924306][T15927] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1256.260401][ T5272] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1256.456639][ T5272] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1256.466961][ T5272] usb 4-1: config 0 has no interfaces? [ 1256.474751][ T5272] usb 4-1: New USB device found, idVendor=1235, idProduct=000e, bcdDevice=f0.ee [ 1256.492066][ T5272] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1256.565992][ T5272] usb 4-1: config 0 descriptor?? [ 1256.822096][ T5271] usb 4-1: USB disconnect, device number 33 [ 1257.216441][T15946] netlink: 201412 bytes leftover after parsing attributes in process `syz.2.2248'. [ 1257.228540][T15946] netlink: zone id is out of range [ 1257.234341][T15946] netlink: zone id is out of range [ 1257.239576][T15946] netlink: zone id is out of range [ 1257.244899][T15946] netlink: zone id is out of range [ 1257.250219][T15946] netlink: zone id is out of range [ 1257.255452][T15946] netlink: zone id is out of range [ 1257.260748][T15946] netlink: zone id is out of range [ 1257.265969][T15946] netlink: zone id is out of range [ 1257.271297][T15946] netlink: zone id is out of range [ 1259.210251][ T5271] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1259.540362][ T5272] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1259.809817][ T5272] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1259.991457][ T5272] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1260.002351][ T5272] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1260.012511][ T5272] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1260.024367][ T5272] usb 2-1: config 0 descriptor?? [ 1260.164292][ T5271] usb 3-1: New USB device found, idVendor=047e, idProduct=1001, bcdDevice=c6.06 [ 1260.175172][ T5271] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1260.195445][ T5271] usb 3-1: Product: syz [ 1260.211503][ T5271] usb 3-1: Manufacturer: syz [ 1260.225204][ T5271] usb 3-1: SerialNumber: syz [ 1260.246635][ T5271] usb 3-1: config 0 descriptor?? [ 1260.740056][ T5272] usb 2-1: string descriptor 0 read error: -22 [ 1261.262624][ T5272] uclogic 0003:256C:006D.0016: failed retrieving string descriptor #100: -71 [ 1261.409446][ T5272] uclogic 0003:256C:006D.0016: failed retrieving pen parameters: -71 [ 1261.435485][ T5272] uclogic 0003:256C:006D.0016: failed probing pen v1 parameters: -71 [ 1261.473329][ T5272] uclogic 0003:256C:006D.0016: failed probing parameters: -71 [ 1261.514619][ T5272] uclogic 0003:256C:006D.0016: probe with driver uclogic failed with error -71 [ 1261.596250][ T5272] usb 2-1: USB disconnect, device number 44 [ 1261.694619][T15994] Cannot find add_set index 0 as target [ 1262.340275][ T5272] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1262.720493][ T5271] usb 3-1: USB disconnect, device number 50 [ 1262.740359][ T5272] usb 1-1: Using ep0 maxpacket: 16 [ 1262.844966][ T5272] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1263.289602][ T5272] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1263.329065][ T5272] usb 1-1: Product: syz [ 1263.340172][ T5272] usb 1-1: Manufacturer: syz [ 1263.363966][ T5272] usb 1-1: SerialNumber: syz [ 1263.380826][ T5272] usb 1-1: config 0 descriptor?? [ 1264.280257][ T59] usb 1-1: USB disconnect, device number 37 [ 1264.396164][T16016] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2266'. [ 1264.428019][T16016] veth0_vlan: left promiscuous mode [ 1264.434227][T16016] veth0_vlan: entered allmulticast mode [ 1264.442833][T16016] veth0_vlan: entered promiscuous mode [ 1264.477602][T16031] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2268'. [ 1266.745914][T16060] can: request_module (can-proto-0) failed. [ 1266.967879][T16073] netlink: 4096 bytes leftover after parsing attributes in process `syz.2.2278'. [ 1266.977991][T16073] net_ratelimit: 70 callbacks suppressed [ 1266.978048][T16073] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1267.325284][T16078] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2279'. [ 1268.293521][ T5271] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1268.302569][T16089] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1268.303428][ T5271] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1268.321339][T16089] batadv_slave_0: entered promiscuous mode [ 1268.324198][ T5271] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1268.547902][ T5271] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1268.555409][ T5271] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1268.562961][ T5271] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1268.570398][ T5271] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1268.577823][ T5271] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1268.588527][ T5271] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1268.613968][T16096] netlink: 'syz.2.2282': attribute type 14 has an invalid length. [ 1268.622023][T16096] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (204) [ 1268.649225][ T5271] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1268.669099][ T5271] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1268.690733][ T5271] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1268.700399][ T9473] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1268.714744][ T5271] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1268.723825][ T5271] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1269.487737][ T5271] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1269.508852][ T5271] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1269.541742][ T5271] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1269.565556][ T5271] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1269.585275][ T5271] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1269.592954][ T5271] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1269.604206][ T5271] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1269.618063][ T5271] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1269.625738][ T5271] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1269.633974][ T5271] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1269.643055][ T9473] usb 1-1: config index 0 descriptor too short (expected 25970, got 36) [ 1269.651488][ T5271] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1269.659036][ T9473] usb 1-1: config 116 has too many interfaces: 99, using maximum allowed: 32 [ 1269.670842][ T5271] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1269.678622][ T5271] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1269.698679][ T9473] usb 1-1: config 116 has an invalid descriptor of length 0, skipping remainder of the config [ 1269.745335][ T5271] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1269.753606][ T9473] usb 1-1: config 116 has 0 interfaces, different from the descriptor's value: 99 [ 1269.772287][ T5271] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1269.796323][ T9473] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1269.807701][ T5271] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1269.817548][ T9473] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1269.827214][ T5271] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1269.840595][ T5271] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1269.857642][ T5271] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1270.749417][ T9474] usb 1-1: USB disconnect, device number 38 [ 1270.760224][ T59] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1271.762059][ T59] usb 2-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 1271.771364][ T59] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1271.797926][ T59] usb 2-1: config 0 descriptor?? [ 1271.814259][ T59] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 1271.846160][T16123] netlink: 4096 bytes leftover after parsing attributes in process `syz.3.2293'. [ 1271.868787][T16123] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1272.341064][ T59] gspca_sn9c2028: read1 error -110 [ 1272.352128][ T59] gspca_sn9c2028: read1 error -32 [ 1272.397216][ T59] gspca_sn9c2028: read1 error -32 [ 1272.404934][ T59] sn9c2028 2-1:0.0: probe with driver sn9c2028 failed with error -32 [ 1272.895387][T16131] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2295'. [ 1272.904800][T16131] 0XD: renamed from gretap0 (while UP) [ 1273.385978][T16131] 0XD: entered allmulticast mode [ 1274.688811][T16146] netlink: 25 bytes leftover after parsing attributes in process `syz.2.2299'. [ 1274.813109][ T59] usb 2-1: USB disconnect, device number 45 [ 1274.957803][T15029] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1275.150367][T15029] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1275.166426][T15029] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1275.177797][T15029] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1275.188965][T15029] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1275.196469][T15029] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1275.300720][ T8861] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1275.343465][ T8861] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1275.351066][ T8861] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1275.359140][ T8861] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1275.370852][ T8861] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1275.378315][ T8861] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1275.446777][T16157] xt_CONNSECMARK: invalid mode: 0 [ 1275.838800][T16153] lo speed is unknown, defaulting to 1000 [ 1277.555822][ T8861] Bluetooth: hci3: command tx timeout [ 1277.910172][T16186] block device autoloading is deprecated and will be removed. [ 1277.932566][T16186] syz.0.2305: attempt to access beyond end of device [ 1277.932566][T16186] md17: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1278.286360][T16182] syz.2.2306: attempt to access beyond end of device [ 1278.286360][T16182] nbd2: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 1278.299619][T16182] hfsplus: unable to find HFS+ superblock [ 1278.343970][T16182] zonefs (nbd2) ERROR: Not a zoned block device [ 1278.626411][T16153] chnl_net:caif_netlink_parms(): no params data found [ 1279.630269][ T8861] Bluetooth: hci3: command tx timeout [ 1280.790355][T16153] bridge0: port 1(bridge_slave_0) entered blocking state [ 1280.819576][T16153] bridge0: port 1(bridge_slave_0) entered disabled state [ 1280.991003][T16153] bridge_slave_0: entered allmulticast mode [ 1280.998389][T16153] bridge_slave_0: entered promiscuous mode [ 1281.019886][T16153] bridge0: port 2(bridge_slave_1) entered blocking state [ 1281.043929][T16153] bridge0: port 2(bridge_slave_1) entered disabled state [ 1281.060421][T16153] bridge_slave_1: entered allmulticast mode [ 1281.096413][T16153] bridge_slave_1: entered promiscuous mode [ 1281.482845][T16153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1281.496192][T16153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1281.560727][ T9473] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1281.571647][T16153] team0: Port device team_slave_0 added [ 1281.594256][T16153] team0: Port device team_slave_1 added [ 1281.720463][ T8861] Bluetooth: hci3: command tx timeout [ 1282.666300][ T9473] usb 2-1: Using ep0 maxpacket: 16 [ 1282.671665][ T29] audit: type=1326 audit(1723885813.451:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16231 comm="syz.3.2316" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa424b79e79 code=0x0 [ 1282.717106][ T9473] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1282.754753][T16153] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1282.829363][ T9473] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1282.842766][ T9473] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1282.854423][ T9473] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1282.856166][T16153] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1282.866674][ T9473] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1283.070512][T16153] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1283.191540][T16249] delete_channel: no stack [ 1285.033636][ T9473] usb 2-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b5.89 [ 1285.092183][T16153] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1285.133890][ T8861] Bluetooth: hci3: command tx timeout [ 1285.264305][T16153] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1285.281385][T16153] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1285.324647][T16255] xt_NFQUEUE: number of total queues is 0 [ 1286.101698][ T9473] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1286.101729][ T9473] usb 2-1: Product: syz [ 1286.101745][ T9473] usb 2-1: Manufacturer: syz [ 1286.101762][ T9473] usb 2-1: SerialNumber: syz [ 1286.107816][ T9473] usb 2-1: config 0 descriptor?? [ 1286.108276][ T9473] usb 2-1: can't set config #0, error -71 [ 1286.308257][ T9473] usb 2-1: USB disconnect, device number 46 [ 1289.542335][T16153] hsr_slave_0: entered promiscuous mode [ 1289.571347][T16153] hsr_slave_1: entered promiscuous mode [ 1289.764586][T16274] netlink: 'syz.3.2324': attribute type 21 has an invalid length. [ 1289.779107][T16274] netlink: 'syz.3.2324': attribute type 20 has an invalid length. [ 1289.788845][T16274] IPv6: NLM_F_CREATE should be specified when creating new route [ 1290.888946][T16291] syz.1.2327: attempt to access beyond end of device [ 1290.888946][T16291] md17: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1291.502087][T16153] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1291.538436][T16288] lo speed is unknown, defaulting to 1000 [ 1291.634232][T16153] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1291.912144][T16305] syz.1.2331: attempt to access beyond end of device [ 1291.912144][T16305] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1291.925786][T16305] FAT-fs (loop1): unable to read boot sector [ 1292.456892][T16153] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1292.676619][T16153] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1292.974189][T16153] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1292.984399][T16153] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1293.029035][T16153] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1293.048728][T16153] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1293.272913][T16153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1293.435694][T16153] 8021q: adding VLAN 0 to HW filter on device team0 [ 1293.460599][ T7117] bridge0: port 1(bridge_slave_0) entered blocking state [ 1293.467748][ T7117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1294.267754][ T7117] bridge0: port 2(bridge_slave_1) entered blocking state [ 1294.274987][ T7117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1294.373673][T16330] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2337'. [ 1294.450591][T16327] 9pnet: Could not find request transport: f [ 1297.041726][T16354] Bluetooth: MGMT ver 1.23 [ 1297.158209][T16153] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1297.264709][T16354] 9pnet: Could not find request transport: fdo= [ 1297.480307][ T9474] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1297.740437][ T944] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1297.760412][ T9474] usb 1-1: Using ep0 maxpacket: 16 [ 1298.123025][ T9474] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1298.134415][ T9474] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1298.144925][ T9474] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1298.157923][ T944] usb 2-1: Using ep0 maxpacket: 8 [ 1298.163576][ T9474] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 1298.173894][ T9474] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1298.201057][ T9474] usb 1-1: config 0 descriptor?? [ 1298.206553][ T944] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 1298.220472][ T944] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1298.228697][ T944] usb 2-1: Product: syz [ 1298.236855][ T944] usb 2-1: Manufacturer: syz [ 1298.245718][ T944] usb 2-1: SerialNumber: syz [ 1298.268340][ T944] usb 2-1: config 0 descriptor?? [ 1298.496724][ T944] dvb_usb_rtl28xxu 2-1:0.0: chip type detection failed -71 [ 1298.511336][ T944] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1298.539962][ T944] usb 2-1: USB disconnect, device number 47 [ 1298.627265][T16153] veth0_vlan: entered promiscuous mode [ 1298.644822][T16153] veth1_vlan: entered promiscuous mode [ 1298.664827][ T9474] koneplus 0003:1E7D:2E22.0018: item fetching failed at offset 0/2 [ 1298.700049][T16153] veth0_macvtap: entered promiscuous mode [ 1298.711071][ T9474] koneplus 0003:1E7D:2E22.0018: parse failed [ 1298.725987][T16153] veth1_macvtap: entered promiscuous mode [ 1298.727309][ T9474] koneplus 0003:1E7D:2E22.0018: probe with driver koneplus failed with error -22 [ 1298.804084][T16153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1298.817992][T16153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1298.836029][T16153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1298.848321][T16153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1298.865018][T16153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1298.877344][T16153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1298.895287][T16153] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1298.917850][T16153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1298.929200][T16153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1298.947215][T16153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1298.958559][T16153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1298.970006][T16153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1298.981243][T16153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1298.992235][T16153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1299.004214][T16153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1299.025150][T16153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1299.041546][ T944] usb 1-1: USB disconnect, device number 39 [ 1299.058482][T16153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1299.096406][T16153] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1299.148090][T16153] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1299.187311][T16153] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1299.221868][T16153] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1299.274982][T16153] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1299.475074][T15388] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1299.497800][T15388] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1299.531092][ T7162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1299.539420][ T7162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1300.949826][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 1303.339579][T16435] netlink: 'syz.4.2359': attribute type 29 has an invalid length. [ 1304.105566][T16440] netlink: 'syz.4.2360': attribute type 5 has an invalid length. [ 1304.116693][T16440] /dev/nullb0: Can't open blockdev [ 1304.313505][T16441] netlink: 191416 bytes leftover after parsing attributes in process `syz.4.2360'. [ 1305.525395][T16452] netlink: 'syz.3.2364': attribute type 4 has an invalid length. [ 1309.658550][T16487] 9pnet_fd: p9_fd_create_unix (16487): problem connecting socket: ./cgroup: -1 [ 1311.307992][T16510] binder: BINDER_SET_CONTEXT_MGR already set [ 1311.314777][T16510] binder: 16507:16510 ioctl 4018620d 200001c0 returned -16 [ 1312.635985][T16525] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2381'. [ 1312.645172][T16525] netlink: 'syz.3.2381': attribute type 2 has an invalid length. [ 1312.653189][T16525] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2381'. [ 1317.462068][T16573] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 1317.471535][T16573] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 1317.620268][T16574] syz.0.2391: attempt to access beyond end of device [ 1317.620268][T16574] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1317.634181][T16574] hpfs: hpfs_map_sector(): read error [ 1319.662843][ T5271] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1319.828501][T16591] fuse: Bad value for 'fd' [ 1320.050551][ T5271] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1320.096103][ T5271] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1320.226888][ T5271] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1320.393903][ T5272] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1320.405295][ T5271] usb 1-1: New USB device found, idVendor=b5c7, idProduct=5746, bcdDevice=a6.21 [ 1320.416791][ T5271] usb 1-1: New USB device strings: Mfr=127, Product=212, SerialNumber=3 [ 1320.425526][ T5271] usb 1-1: Product: syz [ 1320.429712][ T5271] usb 1-1: Manufacturer: syz [ 1320.434863][ T5271] usb 1-1: SerialNumber: syz [ 1320.474204][ T5271] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 1320.517379][ T5271] cdc_acm 1-1:1.0: This needs exactly 3 endpoints [ 1320.535963][ T5271] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -22 [ 1320.792233][T16598] vlan0: entered allmulticast mode [ 1320.870252][ T5272] usb 2-1: Using ep0 maxpacket: 32 [ 1320.889568][ T5272] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1320.972278][ T5272] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1321.014696][ T5272] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1321.444698][ T5272] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1323.312846][ T5270] usb 1-1: USB disconnect, device number 40 [ 1323.338117][ T5272] usb 2-1: can't set config #4, error -71 [ 1323.390565][ T5272] usb 2-1: USB disconnect, device number 48 [ 1323.771146][ T944] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1324.835734][ T944] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1324.908078][ T944] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1324.980608][T16634] input: syz0 as /devices/virtual/input/input35 [ 1325.206827][ T944] usb 5-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 1325.218113][ T944] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1325.234567][ T944] usb 5-1: config 0 descriptor?? [ 1326.252726][ T944] hid-led 0003:1D34:000A.0019: unknown main item tag 0x0 [ 1327.187354][T15388] Bluetooth: hci6: Frame reassembly failed (-84) [ 1327.216896][ T944] hid-led 0003:1D34:000A.0019: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.4-1/input0 [ 1327.361737][ T944] hid-led 0003:1D34:000A.0019: Dream Cheeky Webmail Notifier initialized [ 1327.770324][ T5270] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1327.970533][ T5270] usb 4-1: Using ep0 maxpacket: 32 [ 1327.992087][ T5270] usb 4-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=ba.e3 [ 1328.001510][ T5270] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1328.009527][ T5270] usb 4-1: Product: syz [ 1328.019225][ T5270] usb 4-1: Manufacturer: syz [ 1328.025176][ T5270] usb 4-1: SerialNumber: syz [ 1328.037873][ T5270] usb 4-1: config 0 descriptor?? [ 1328.925944][T16663] netlink: 'syz.1.2416': attribute type 27 has an invalid length. [ 1329.002166][ T5270] f81534a_ctrl 4-1:0.0: failed to set register 0x116: -5 [ 1329.010290][ T5270] f81534a_ctrl 4-1:0.0: failed to enable ports: -5 [ 1329.020256][ T5270] f81534a_ctrl 4-1:0.0: probe with driver f81534a_ctrl failed with error -5 [ 1329.033662][ T5270] usb 4-1: USB disconnect, device number 34 [ 1329.087034][T16667] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2415'. [ 1329.230363][ T8861] Bluetooth: hci6: command 0x1003 tx timeout [ 1329.230539][T15029] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1329.315566][T16387] usb 5-1: USB disconnect, device number 43 [ 1330.696392][T16684] lo speed is unknown, defaulting to 1000 [ 1333.069948][T16705] netlink: 'syz.4.2424': attribute type 1 has an invalid length. [ 1334.044637][T16709] fuse: Bad value for 'fd' [ 1334.233459][T16689] ecryptfs_parse_options: eCryptfs: unrecognized option [&@] [ 1334.245988][T16689] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 1334.266714][T16689] Error parsing options; rc = [-22] [ 1334.379792][T16719] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2437'. [ 1334.450902][ T59] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1334.631771][T16723] syz.3.2427: attempt to access beyond end of device [ 1334.631771][T16723] nbd3: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 1334.645122][T16723] hfsplus: unable to find HFS+ superblock [ 1335.200331][ T944] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1335.321338][ T59] usb 5-1: Using ep0 maxpacket: 8 [ 1335.337211][ T59] usb 5-1: config 0 has no interfaces? [ 1335.401309][ T59] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 0.40 [ 1335.411604][ T59] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1335.429007][ T59] usb 5-1: SerialNumber: syz [ 1335.448664][ T944] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1335.603418][ T944] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=16.64 [ 1335.612734][ T944] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1335.621486][ T944] usb 3-1: Product: syz [ 1335.624722][ T59] usb 5-1: config 0 descriptor?? [ 1335.626097][ T944] usb 3-1: Manufacturer: syz [ 1335.637786][ T944] usb 3-1: SerialNumber: syz [ 1335.666913][ T944] usb 3-1: config 0 descriptor?? [ 1336.525165][ T944] usb 3-1: can't set config #0, error -71 [ 1336.539152][ T944] usb 3-1: USB disconnect, device number 51 [ 1336.572397][ T5272] usb 5-1: USB disconnect, device number 44 [ 1339.542804][T16755] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1340.005668][ T29] audit: type=1326 audit(1723885870.781:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16756 comm="syz.3.2436" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa424b79e79 code=0x0 [ 1340.953193][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1341.806026][T16786] : renamed from ipvlan1 (while UP) [ 1343.770879][T16387] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1344.772696][T16387] usb 1-1: Using ep0 maxpacket: 8 [ 1344.779811][T16387] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1344.795568][T16387] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1344.805751][T16387] usb 1-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 1344.818197][T16387] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1344.836633][T16387] usb 1-1: config 0 descriptor?? [ 1345.726832][T16802] netlink: 9412 bytes leftover after parsing attributes in process `syz.0.2448'. [ 1345.781032][T16387] usbhid 1-1:0.0: can't add hid device: -71 [ 1345.799217][T16387] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1345.847523][T16387] usb 1-1: USB disconnect, device number 41 [ 1346.028507][T16824] syz.1.2453: attempt to access beyond end of device [ 1346.028507][T16824] nbd1: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 1346.041764][T16824] hfsplus: unable to find HFS+ superblock [ 1346.588692][T16818] lo speed is unknown, defaulting to 1000 [ 1347.002523][ T29] audit: type=1326 audit(1723885877.771:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16825 comm="syz.1.2454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92dad79e79 code=0x7ffc0000 [ 1347.024090][ C0] vkms_vblank_simulate: vblank timer overrun [ 1347.094038][ T29] audit: type=1326 audit(1723885877.771:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16825 comm="syz.1.2454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92dad79e79 code=0x7ffc0000 [ 1347.151432][ T29] audit: type=1326 audit(1723885877.771:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16825 comm="syz.1.2454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f92dad79e79 code=0x7ffc0000 [ 1347.232670][ T29] audit: type=1326 audit(1723885877.771:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16825 comm="syz.1.2454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92dad79e79 code=0x7ffc0000 [ 1347.254872][ T5270] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 1347.281280][ T29] audit: type=1326 audit(1723885877.771:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16825 comm="syz.1.2454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7f92dad79e79 code=0x7ffc0000 [ 1347.303496][ T29] audit: type=1326 audit(1723885877.771:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16825 comm="syz.1.2454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92dad79e79 code=0x7ffc0000 [ 1347.325155][ C0] vkms_vblank_simulate: vblank timer overrun [ 1347.408390][ T29] audit: type=1326 audit(1723885877.771:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16825 comm="syz.1.2454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f92dad79e79 code=0x7ffc0000 [ 1347.544219][ T29] audit: type=1326 audit(1723885877.771:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16825 comm="syz.1.2454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92dad79e79 code=0x7ffc0000 [ 1347.923147][ T5270] usb 2-1: not running at top speed; connect to a high speed hub [ 1348.016418][ T29] audit: type=1326 audit(1723885877.771:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16825 comm="syz.1.2454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92dad79e79 code=0x7ffc0000 [ 1348.171817][ T5270] usb 2-1: config 4 has an invalid interface number: 3 but max is 1 [ 1348.180936][ T5270] usb 2-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 1348.189649][ T5270] usb 2-1: config 4 has an invalid descriptor of length 1, skipping remainder of the config [ 1348.240327][ T5270] usb 2-1: config 4 has 1 interface, different from the descriptor's value: 2 [ 1348.249233][ T5270] usb 2-1: config 4 has no interface number 0 [ 1348.272578][ T29] audit: type=1326 audit(1723885877.771:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16825 comm="syz.1.2454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f92dad79e79 code=0x7ffc0000 [ 1348.321741][ T5270] usb 2-1: config 4 interface 3 altsetting 127 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 1348.379767][ T5270] usb 2-1: config 4 interface 3 altsetting 127 endpoint 0xF has invalid maxpacket 30277, setting to 64 [ 1348.447342][ T5270] usb 2-1: config 4 interface 3 altsetting 127 has a duplicate endpoint with address 0xF, skipping [ 1348.511141][ T5270] usb 2-1: config 4 interface 3 has no altsetting 0 [ 1348.537868][ T5270] usb 2-1: New USB device found, idVendor=1410, idProduct=a005, bcdDevice=d5.94 [ 1348.565319][ T5270] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1348.587224][ T5270] usb 2-1: Product: 㖸畖뮄핽핇燲粭ꣅ襾Ꜹ䇸迤댟田笖ⅱ蓁㉛뗅혱䄄袞撎螣ﮙଚ凎䭶Ᏸꨰij꽟둑粥秸ꢐ禲轻꟦ᖈӮ토㟂〕㟃鑠鋈驘볠籓ވ캝ダ郛痣홶刟ቇ롾鷃鍎䱞Ջ꾓隗갭칞Ⴑ읢狜槅駶䲃悧枑ퟌ褄ῳጇ⩷뱊鴎ᖝ [ 1348.666885][ T5270] usb 2-1: Manufacturer: Ѝ [ 1348.676852][ T5270] usb 2-1: SerialNumber: 㰁 [ 1348.698033][T16826] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1348.709858][T16826] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1348.841500][T16851] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2460'. [ 1349.414580][ T5270] usb 2-1: USB disconnect, device number 49 [ 1349.540354][ T5272] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1349.657192][T16843] ALSA: mixer_oss: invalid OSS volume '' [ 1350.450317][ T5272] usb 4-1: Using ep0 maxpacket: 32 [ 1350.467245][ T5272] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1350.491342][ T5272] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1350.511641][ T5272] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=a6.13 [ 1350.529674][ T5272] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1350.568122][ T5272] usb 4-1: Product: syz [ 1350.583116][ T5272] usb 4-1: Manufacturer: syz [ 1350.592323][ T5272] usb 4-1: SerialNumber: syz [ 1350.740818][ T5272] usb 4-1: config 0 descriptor?? [ 1350.752806][ T5272] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1350.765881][ T5272] pvrusb2: ********** [ 1350.770467][ T5272] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1350.923009][ T5272] pvrusb2: Important functionality might not be entirely working. [ 1351.014251][ T5272] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1351.481483][ T5272] pvrusb2: ********** [ 1351.486386][ T5272] usb 4-1: selecting invalid altsetting 0 [ 1351.510763][ T2038] pvrusb2: Invalid write control endpoint [ 1351.707779][ T2038] pvrusb2: Invalid write control endpoint [ 1351.748834][ T2038] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1351.790311][ T2038] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1351.799083][ T2038] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1351.817074][ T2038] pvrusb2: Device being rendered inoperable [ 1351.839715][ T2038] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1351.866934][ T2038] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1352.073809][ T2038] pvrusb2: Attached sub-driver cx25840 [ 1352.083080][ T2038] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1352.100025][ T2038] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1352.900990][T15029] Bluetooth: hci3: unexpected event for opcode 0x040d [ 1352.946553][ T5271] usb 4-1: USB disconnect, device number 35 [ 1354.249556][T16918] 9pnet_fd: Insufficient options for proto=fd [ 1354.524044][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1354.680251][ T5272] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1354.870331][ T5272] usb 5-1: Using ep0 maxpacket: 32 [ 1354.891070][ T5272] usb 5-1: New USB device found, idVendor=054c, idProduct=0025, bcdDevice= 1.00 [ 1354.921896][ T5272] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1354.943154][ T5272] usb 5-1: Product: syz [ 1354.958702][ T5272] usb 5-1: Manufacturer: syz [ 1354.968875][ T5272] usb 5-1: SerialNumber: syz [ 1354.982819][ T5272] usb 5-1: config 0 descriptor?? [ 1355.000402][ T5272] usb 5-1: bad CDC descriptors [ 1355.008954][ T5272] usb-storage 5-1:0.0: USB Mass Storage device detected [ 1355.022938][ T5272] usb-storage 5-1:0.0: Quirks match for vid 054c pid 0025: 1 [ 1355.656780][ T5272] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1358.119729][T16959] syz.2.2481: attempt to access beyond end of device [ 1358.119729][T16959] nbd2: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 1358.133361][T16959] hfsplus: unable to find HFS+ superblock [ 1358.604792][ T5272] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1358.621696][ T5272] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1358.631090][ T5272] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1358.639504][ T5272] usb 1-1: SerialNumber: syz [ 1358.645376][ T9474] usb 5-1: USB disconnect, device number 45 [ 1358.649493][ T5272] usb 1-1: bad CDC descriptors [ 1358.968986][ T9474] usb 1-1: USB disconnect, device number 42 [ 1359.057736][T16964] nvme_fabrics: missing parameter 'transport=%s' [ 1359.065111][T16964] nvme_fabrics: missing parameter 'nqn=%s' [ 1359.073690][T16969] syzkaller0: entered promiscuous mode [ 1359.079183][T16969] syzkaller0: entered allmulticast mode [ 1359.087154][T16970] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 1360.024417][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 1360.024435][ T29] audit: type=1326 audit(1723885890.811:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16976 comm="syz.3.2486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa424b79e79 code=0x7ffc0000 [ 1360.065845][ T29] audit: type=1326 audit(1723885890.841:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16976 comm="syz.3.2486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa424b79e79 code=0x7ffc0000 [ 1360.099200][ T29] audit: type=1326 audit(1723885890.841:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16976 comm="syz.3.2486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa424b78810 code=0x7ffc0000 [ 1360.125209][ T29] audit: type=1326 audit(1723885890.851:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16976 comm="syz.3.2486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fa424b7b6a7 code=0x7ffc0000 [ 1360.148121][ T29] audit: type=1326 audit(1723885890.851:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16976 comm="syz.3.2486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa424b79e79 code=0x7ffc0000 [ 1360.170883][ T29] audit: type=1326 audit(1723885890.851:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16976 comm="syz.3.2486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fa424b7b6a7 code=0x7ffc0000 [ 1360.407979][T16984] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1360.887470][ T29] audit: type=1326 audit(1723885890.851:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16976 comm="syz.3.2486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa424b78b0a code=0x7ffc0000 [ 1360.959952][ T29] audit: type=1326 audit(1723885890.851:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16976 comm="syz.3.2486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa424b79e79 code=0x7ffc0000 [ 1360.992244][ T29] audit: type=1326 audit(1723885890.851:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16976 comm="syz.3.2486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa424b79e79 code=0x7ffc0000 [ 1361.015180][ T29] audit: type=1326 audit(1723885890.911:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16976 comm="syz.3.2486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa424b79e79 code=0x7ffc0000 [ 1361.037039][ T9474] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1361.260313][ T9474] usb 1-1: Using ep0 maxpacket: 16 [ 1361.275273][ T9474] usb 1-1: config 0 has an invalid interface number: 107 but max is 0 [ 1361.290613][ T9474] usb 1-1: config 0 has no interface number 0 [ 1361.297060][ T9474] usb 1-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1361.319763][ T9474] usb 1-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 1361.332880][ T9474] usb 1-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 1361.341714][ T9474] usb 1-1: Product: syz [ 1361.346103][ T9474] usb 1-1: Manufacturer: syz [ 1361.351330][ T9474] usb 1-1: SerialNumber: syz [ 1361.375465][ T9474] usb 1-1: config 0 descriptor?? [ 1361.385527][ T9474] keyspan 1-1:0.107: Keyspan 4 port adapter converter detected [ 1361.394008][ T9474] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 81 [ 1361.402711][ T9474] keyspan 1-1:0.107: unsupported endpoint type 0 [ 1361.535044][ T9474] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 1 [ 1361.544471][ T9474] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 1361.556413][ T9474] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 2 [ 1361.570170][ T9474] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 1361.579964][ T9474] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 4 [ 1361.600874][ T9474] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 1361.628041][ T9474] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 6 [ 1361.656855][ T9474] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 1361.699518][ T9474] usb 1-1: USB disconnect, device number 43 [ 1361.721121][ T9474] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 1361.763923][ T9474] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 1361.821468][ T9474] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 1361.911841][ T9474] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 1361.961066][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.985362][ T9474] keyspan 1-1:0.107: device disconnected [ 1363.150406][ T9470] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1363.358562][T17012] syz.4.2494: attempt to access beyond end of device [ 1363.358562][T17012] nbd4: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 1363.371916][T17012] hfsplus: unable to find HFS+ superblock [ 1363.481112][ T9470] usb 4-1: Using ep0 maxpacket: 8 [ 1363.494844][ T9470] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1363.544848][ T9470] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1363.592840][ T9470] usb 4-1: New USB device found, idVendor=056a, idProduct=00e5, bcdDevice= 0.00 [ 1363.629633][ T9470] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1363.651635][ T9470] usb 4-1: config 0 descriptor?? [ 1364.432669][T17025] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1364.835869][ T9470] wacom 0003:056A:00E5.001A: unknown main item tag 0x0 [ 1364.862108][ T9470] wacom 0003:056A:00E5.001A: unknown main item tag 0x0 [ 1364.869025][ T9470] wacom 0003:056A:00E5.001A: unknown main item tag 0x0 [ 1365.321505][ T9470] wacom 0003:056A:00E5.001A: unknown main item tag 0x0 [ 1365.335963][ T9470] wacom 0003:056A:00E5.001A: unknown main item tag 0x0 [ 1365.343460][ T9470] wacom 0003:056A:00E5.001A: unknown main item tag 0x0 [ 1365.363991][ T9470] wacom 0003:056A:00E5.001A: hidraw0: USB HID v0.00 Device [HID 056a:00e5] on usb-dummy_hcd.3-1/input0 [ 1365.384562][ T9470] usb 4-1: USB disconnect, device number 36 [ 1365.791138][ T5271] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1366.001860][ T5271] usb 5-1: Using ep0 maxpacket: 16 [ 1366.579655][ T5271] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1366.630795][ T5271] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1366.658826][ T5271] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1366.687835][ T5271] usb 5-1: Product: syz [ 1366.694948][ T5271] usb 5-1: Manufacturer: syz [ 1366.763550][ T5271] usb 5-1: SerialNumber: syz [ 1367.506170][ T5271] usb 5-1: config 0 descriptor?? [ 1367.556252][ T5271] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1367.565601][ T5271] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 1367.903121][ T5271] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1368.075207][ T5271] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1368.085831][ T5271] em28xx 5-1:0.0: board has no eeprom [ 1368.161678][ T5271] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1368.169799][ T5271] em28xx 5-1:0.0: dvb set to bulk mode. [ 1368.185220][ T944] em28xx 5-1:0.0: Binding DVB extension [ 1368.216816][ T5271] usb 5-1: USB disconnect, device number 46 [ 1368.239108][ T5271] em28xx 5-1:0.0: Disconnecting em28xx [ 1368.354783][ T944] em28xx 5-1:0.0: Registering input extension [ 1368.373815][ T5271] em28xx 5-1:0.0: Closing input extension [ 1368.498521][ T5271] em28xx 5-1:0.0: Freeing device [ 1370.811433][T17056] netlink: 'syz.3.2506': attribute type 23 has an invalid length. [ 1370.819299][T17056] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2506'. [ 1371.249175][T17056] bridge0: port 2(bridge_slave_1) entered disabled state [ 1371.257072][T17056] bridge0: port 1(bridge_slave_0) entered disabled state [ 1371.307299][T17056] bridge0: entered promiscuous mode [ 1371.652598][ T8861] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1371.688629][ T8861] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1371.734235][ T8861] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1371.744997][ T8861] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1371.753492][ T8861] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1371.763004][ T8861] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1372.965571][ T8515] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1373.036579][T17080] netlink: 'syz.3.2512': attribute type 23 has an invalid length. [ 1373.070361][T17080] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2512'. [ 1373.770852][T17066] lo speed is unknown, defaulting to 1000 [ 1373.870456][T15029] Bluetooth: hci6: command tx timeout [ 1374.055781][ T8515] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1374.192042][T17091] netlink: 'syz.0.2513': attribute type 10 has an invalid length. [ 1374.856753][ T8515] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1375.056695][ T8515] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1375.514430][T17103] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1375.889535][T17066] chnl_net:caif_netlink_parms(): no params data found [ 1375.957200][T15029] Bluetooth: hci6: command tx timeout [ 1376.326638][ T8515] bridge_slave_1: left allmulticast mode [ 1376.372612][ T8515] bridge_slave_1: left promiscuous mode [ 1376.487082][ T8515] bridge0: port 2(bridge_slave_1) entered disabled state [ 1377.184503][ T8515] bridge_slave_0: left allmulticast mode [ 1377.209330][ T8515] bridge_slave_0: left promiscuous mode [ 1377.236334][T17130] Cannot find del_set index 0 as target [ 1377.245430][ T8515] bridge0: port 1(bridge_slave_0) entered disabled state [ 1378.030247][T15029] Bluetooth: hci6: command tx timeout [ 1378.259970][ T8515] dvmrp0 (unregistering): left allmulticast mode [ 1379.082333][ T8515] bridge0 (unregistering): left allmulticast mode [ 1379.462325][ T8515] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1379.484420][ T8515] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1379.503188][ T8515] bond0 (unregistering): (slave vlan3): Releasing backup interface [ 1379.518335][ T8515] team0: left promiscuous mode [ 1379.524723][ T8515] team_slave_0: left promiscuous mode [ 1379.530930][ T8515] team_slave_1: left promiscuous mode [ 1379.544329][ T8515] bond0 (unregistering): Released all slaves [ 1379.564048][ T8515] bond1 (unregistering): Released all slaves [ 1379.826236][ T8515] tipc: Disabling bearer [ 1379.999485][ T8515] tipc: Left network mode [ 1379.999663][T17066] bridge0: port 1(bridge_slave_0) entered blocking state [ 1380.071480][T17162] netlink: 'syz.3.2526': attribute type 3 has an invalid length. [ 1380.079353][T17162] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2526'. [ 1380.661092][T17066] bridge0: port 1(bridge_slave_0) entered disabled state [ 1380.730385][T15029] Bluetooth: hci6: command tx timeout [ 1380.785848][T17066] bridge_slave_0: entered allmulticast mode [ 1380.849715][T17066] bridge_slave_0: entered promiscuous mode [ 1381.935973][T17066] bridge0: port 2(bridge_slave_1) entered blocking state [ 1381.964352][T17166] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2528'. [ 1381.973464][T17066] bridge0: port 2(bridge_slave_1) entered disabled state [ 1381.973680][T17066] bridge_slave_1: entered allmulticast mode [ 1382.037846][T17066] bridge_slave_1: entered promiscuous mode [ 1382.932948][T17066] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1383.077327][T17066] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1383.350403][ T8515] hsr_slave_0: left promiscuous mode [ 1383.369827][ T8515] hsr_slave_1: left promiscuous mode [ 1383.445353][ T8515] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1383.452631][T16387] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1383.501041][ T8515] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1383.526991][ T8515] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1383.578482][T17202] Process accounting resumed [ 1383.670270][T16387] usb 3-1: Using ep0 maxpacket: 32 [ 1383.681969][ T8515] batadv0: left promiscuous mode [ 1383.694736][T16387] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1383.729573][T16387] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1383.739649][ T8515] veth1_macvtap: left promiscuous mode [ 1383.747856][ T8515] veth0_macvtap: left promiscuous mode [ 1383.757075][T16387] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1383.772131][ T8515] veth1_vlan: left promiscuous mode [ 1383.782182][ T8515] veth0_vlan: left promiscuous mode [ 1383.794095][T16387] usb 3-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00 [ 1383.823928][T16387] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1383.858442][T16387] usb 3-1: config 0 descriptor?? [ 1384.336206][T16387] itetech 0003:048D:8595.001B: hidraw0: USB HID v0.00 Device [HID 048d:8595] on usb-dummy_hcd.2-1/input0 [ 1385.354590][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 1385.354612][ T29] audit: type=1800 audit(1723885916.131:472): pid=17216 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.2537" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 [ 1385.429912][ T8515] team0 (unregistering): Port device vlan2 removed [ 1386.397761][ T5272] usb 3-1: USB disconnect, device number 52 [ 1389.078637][ C1] sd 0:0:1:0: [sda] tag#6470 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1389.089069][ C1] sd 0:0:1:0: [sda] tag#6470 CDB: Read(6) 08 00 00 00 00 00 00 00 8b 00 00 01 [ 1390.151987][ T29] audit: type=1326 audit(1723885920.931:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17245 comm="syz.0.2545" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f243ad79e79 code=0x0 [ 1390.463214][T16387] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1390.770411][T16387] usb 4-1: Using ep0 maxpacket: 32 [ 1391.062093][T16387] usb 4-1: New USB device found, idVendor=04b4, idProduct=861f, bcdDevice=f9.d6 [ 1391.073094][T16387] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1391.101640][T16387] usb 4-1: config 0 descriptor?? [ 1391.111583][T16387] usb 4-1: dvb_usb_v2: found a 'Anysee' in warm state [ 1391.119541][T16387] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1391.129129][T16387] dvb_usb_anysee 4-1:0.0: probe with driver dvb_usb_anysee failed with error -22 [ 1391.197524][ T8515] team0 (unregistering): Port device team_slave_1 removed [ 1391.383201][ T8515] team0 (unregistering): Port device team_slave_0 removed [ 1392.669396][ T9470] usb 4-1: USB disconnect, device number 37 [ 1394.405066][T17280] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2551'. [ 1394.414221][T17280] netlink: 'syz.4.2551': attribute type 2 has an invalid length. [ 1394.422133][T17280] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2551'. [ 1395.163503][ T59] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1395.303658][T17066] team0: Port device team_slave_0 added [ 1395.327779][ T9474] lo speed is unknown, defaulting to 1000 [ 1395.378716][ T59] usb 4-1: Using ep0 maxpacket: 32 [ 1395.451014][ T59] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1395.485280][ T59] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1395.507566][ T59] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1395.518309][ T59] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1395.523861][T17066] team0: Port device team_slave_1 added [ 1395.541120][ T59] usb 4-1: New USB device found, idVendor=056a, idProduct=00b3, bcdDevice= 0.00 [ 1395.565860][ T59] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1395.598812][ T59] usb 4-1: config 0 descriptor?? [ 1395.722022][T17066] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1395.734014][T17066] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1395.768665][T17066] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1395.813601][T17066] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1396.115119][T17298] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1396.692279][ T59] usbhid 4-1:0.0: can't add hid device: -71 [ 1396.698332][ T59] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1396.700142][T17066] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1396.742954][ T59] usb 4-1: USB disconnect, device number 38 [ 1396.794772][T17066] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1396.932752][T17304] Smack: duplicate mount options [ 1396.972588][T17066] hsr_slave_0: entered promiscuous mode [ 1397.018046][T17066] hsr_slave_1: entered promiscuous mode [ 1397.032205][T17066] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1397.047193][T17066] Cannot create hsr debugfs directory [ 1397.210639][T16387] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1397.220274][ T9474] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1397.422447][ T9474] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1397.433577][ T9474] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1397.442589][T16387] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1397.478397][ T9474] usb 3-1: config 0 descriptor?? [ 1397.483917][T16387] usb 1-1: language id specifier not provided by device, defaulting to English [ 1397.520025][T16387] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1397.547184][T16387] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1397.579842][T16387] usb 1-1: Product: syz [ 1397.590175][T16387] usb 1-1: Manufacturer: 墓奖抙㤲೭紟寴間嘥龭迺ꢸ纫稞薃튅플ິ脒Ĩ㊍籨揾₝䟌ꚟ扢덡恠鈫򉐡 [ 1397.628348][T16387] usb 1-1: SerialNumber: syz [ 1397.661442][T16387] usb 1-1: bad CDC descriptors [ 1398.037324][T17304] input: syz1 as /devices/virtual/input/input42 [ 1398.163122][ T59] usb 1-1: USB disconnect, device number 44 [ 1398.350489][T15029] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1398.351341][T17066] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1398.477585][T17066] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1398.553661][T17066] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1398.594824][T17066] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1399.789173][T17339] dccp_invalid_packet: P.Data Offset(68) too large [ 1399.798992][ T9474] usb 3-1: Cannot set autoneg [ 1399.820288][ T9474] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -32 [ 1399.911055][T17353] xt_CONNSECMARK: invalid mode: 0 [ 1400.734766][T17066] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1400.821309][T17339] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2561'. [ 1400.854854][T17066] 8021q: adding VLAN 0 to HW filter on device team0 [ 1400.942963][ T7140] bridge0: port 1(bridge_slave_0) entered blocking state [ 1400.950220][ T7140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1402.445038][ T7140] bridge0: port 2(bridge_slave_1) entered blocking state [ 1402.452262][ T7140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1402.992679][ T8861] Bluetooth: hci6: command 0x0405 tx timeout [ 1403.070773][ T5271] usb 3-1: USB disconnect, device number 53 [ 1403.385654][T17372] RDS: rds_bind could not find a transport for ::4006:20:0:0, load rds_tcp or rds_rdma? [ 1404.991177][ T5270] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1405.049927][T17380] smc: net device vxcan1 applied user defined pnetid SYZ1 [ 1405.260698][ T5270] usb 1-1: Using ep0 maxpacket: 32 [ 1405.286911][ T5270] usb 1-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=ba.e3 [ 1405.300763][ T5270] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1405.359026][ T5270] usb 1-1: Product: syz [ 1405.379251][ T5270] usb 1-1: Manufacturer: syz [ 1405.433378][ T5270] usb 1-1: SerialNumber: syz [ 1405.462398][ T5270] usb 1-1: config 0 descriptor?? [ 1405.479921][T17066] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1406.407277][T17066] veth0_vlan: entered promiscuous mode [ 1406.447284][T17066] veth1_vlan: entered promiscuous mode [ 1406.505022][T17367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1406.530981][T17367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1406.598390][ T944] usb 1-1: USB disconnect, device number 45 [ 1406.600651][T17066] veth0_macvtap: entered promiscuous mode [ 1406.631995][ T944] f81534a_ctrl 1-1:0.0: failed to set register 0x116: -19 [ 1406.639154][ T944] f81534a_ctrl 1-1:0.0: failed to enable ports: -19 [ 1406.664187][T17066] veth1_macvtap: entered promiscuous mode [ 1406.727638][T17412] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2573'. [ 1406.756149][T17412] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2573'. [ 1406.792025][T17066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1406.829900][T17066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1406.850265][T17066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1406.870258][T17066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1406.890376][T17066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1406.916623][T17066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1406.946713][T17066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1406.970013][T17066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1406.992036][T17066] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1407.020060][T17066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1407.059083][T17066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1407.089536][T17423] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2575'. [ 1407.089916][T17066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1407.122686][T17066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1407.147683][T17066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1407.188695][T17066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1407.225621][T17066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1407.256027][T17066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1407.279085][T17066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1407.296837][T17066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1407.318536][T17066] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1407.348034][T17430] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2574'. [ 1407.365950][T17066] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1407.386970][T17430] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2574'. [ 1407.397693][T17430] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2574'. [ 1407.421050][T17066] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1407.446728][T17066] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1407.460245][ T944] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1407.484705][T17066] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1407.671555][ T944] usb 4-1: Using ep0 maxpacket: 8 [ 1423.430719][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 1513.880136][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1513.887176][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P17446/1:b..l [ 1513.896041][ C1] rcu: (detected by 1, t=10502 jiffies, g=99157, q=379 ncpus=2) [ 1513.903779][ C1] task:modprobe state:R running task stack:24784 pid:17446 tgid:17446 ppid:7127 flags:0x00000000 [ 1513.917644][ C1] Call Trace: [ 1513.920945][ C1] [ 1513.923888][ C1] __schedule+0x17ae/0x4a10 [ 1513.928436][ C1] ? __pfx___schedule+0x10/0x10 [ 1513.933306][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1513.939315][ C1] ? preempt_schedule_irq+0xf0/0x1c0 [ 1513.944628][ C1] preempt_schedule_irq+0xfb/0x1c0 [ 1513.949761][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1513.955506][ C1] ? mas_preallocate+0xfca/0x1730 [ 1513.960545][ C1] ? __split_vma+0x2e5/0xc30 [ 1513.965146][ C1] ? do_vmi_align_munmap+0x388/0x18c0 [ 1513.970545][ C1] irqentry_exit+0x5e/0x90 [ 1513.974974][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1513.980979][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x37/0x70 [ 1513.987156][ C1] Code: 00 d7 03 00 65 8b 15 90 4c 70 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 1c 16 00 00 00 74 2c 8b 91 f8 15 00 00 <83> fa 02 75 21 48 8b 91 00 16 00 00 48 8b 32 48 8d 7e 01 8b 89 fc [ 1514.006782][ C1] RSP: 0018:ffffc9001789f2b8 EFLAGS: 00000246 [ 1514.013038][ C1] RAX: ffffffff8ba3ad11 RBX: 0000000000000001 RCX: ffff88806d760000 [ 1514.021192][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000004 [ 1514.029170][ C1] RBP: ffffc9001789f4b0 R08: ffffffff8ba3ad02 R09: ffffffff8ba3ac4c [ 1514.037150][ C1] R10: 0000000000000003 R11: ffff88806d760000 R12: ffffc9001789f428 [ 1514.045145][ C1] R13: 0000000000000001 R14: ffff888063baba00 R15: ffff888063baba08 [ 1514.053654][ C1] ? mt_validate+0x44c/0x4aa0 [ 1514.058352][ C1] ? mt_validate+0x502/0x4aa0 [ 1514.063036][ C1] ? mt_validate+0x511/0x4aa0 [ 1514.067748][ C1] mt_validate+0x511/0x4aa0 [ 1514.072284][ C1] ? mt_validate+0x1a1/0x4aa0 [ 1514.076974][ C1] ? __pfx_mt_validate+0x10/0x10 [ 1514.081918][ C1] ? vma_complete+0x543/0xb60 [ 1514.086606][ C1] ? __pfx_lock_release+0x10/0x10 [ 1514.091663][ C1] ? mas_store_prealloc+0x2db/0x5f0 [ 1514.096906][ C1] validate_mm+0xe7/0x530 [ 1514.101276][ C1] ? __pfx_validate_mm+0x10/0x10 [ 1514.106237][ C1] ? vma_complete+0xaef/0xb60 [ 1514.110941][ C1] __split_vma+0xa69/0xc30 [ 1514.115377][ C1] ? mark_lock+0x9a/0x350 [ 1514.119741][ C1] ? __pfx___split_vma+0x10/0x10 [ 1514.124722][ C1] do_vmi_align_munmap+0x388/0x18c0 [ 1514.129946][ C1] ? mtree_range_walk+0x6fd/0x8e0 [ 1514.135001][ C1] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 1514.140659][ C1] ? mtree_range_walk+0x6fd/0x8e0 [ 1514.145716][ C1] ? mas_find+0x8c0/0xbb0 [ 1514.150070][ C1] do_vmi_munmap+0x261/0x2f0 [ 1514.154679][ C1] mmap_region+0x72f/0x2090 [ 1514.159200][ C1] ? mark_lock+0x9a/0x350 [ 1514.163580][ C1] ? __pfx_mmap_region+0x10/0x10 [ 1514.168570][ C1] ? thp_get_unmapped_area_vmflags+0x269/0x380 [ 1514.174740][ C1] ? cap_mmap_addr+0x163/0x2c0 [ 1514.179536][ C1] ? __get_unmapped_area+0x2f0/0x360 [ 1514.184848][ C1] do_mmap+0x8f9/0x1010 [ 1514.189032][ C1] ? __pfx_do_mmap+0x10/0x10 [ 1514.193636][ C1] ? __pfx_down_write_killable+0x10/0x10 [ 1514.199287][ C1] ? __pfx_ima_file_mmap+0x10/0x10 [ 1514.204421][ C1] ? security_mmap_file+0x178/0x1a0 [ 1514.209638][ C1] vm_mmap_pgoff+0x1dd/0x3d0 [ 1514.214251][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1514.219379][ C1] ? __fget_files+0x29/0x470 [ 1514.223983][ C1] ? __fget_files+0x3f6/0x470 [ 1514.228681][ C1] ksys_mmap_pgoff+0x4f1/0x720 [ 1514.233460][ C1] ? __x64_sys_mmap+0x7f/0x140 [ 1514.238245][ C1] do_syscall_64+0xf3/0x230 [ 1514.242763][ C1] ? clear_bhb_loop+0x35/0x90 [ 1514.247456][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1514.253369][ C1] RIP: 0033:0x7f176367bb74 [ 1514.257807][ C1] RSP: 002b:00007ffec4ffdad8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1514.266241][ C1] RAX: ffffffffffffffda RBX: 00007ffec4ffdb18 RCX: 00007f176367bb74 [ 1514.274222][ C1] RDX: 0000000000000005 RSI: 0000000000123000 RDI: 00007f176340b000 [ 1514.282201][ C1] RBP: 00007ffec4ffe270 R08: 0000000000000000 R09: 0000000000028000 [ 1514.290189][ C1] R10: 0000000000000812 R11: 0000000000000246 R12: 00007f17636575c0 [ 1514.298258][ C1] R13: 00007ffec4ffe2f8 R14: 0000000000027f38 R15: 0000000000000000 [ 1514.306260][ C1] [ 1514.309286][ C1] rcu: rcu_preempt kthread starved for 10447 jiffies! g99157 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1514.320492][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1514.330466][ C1] rcu: RCU grace-period kthread stack dump: [ 1514.336358][ C1] task:rcu_preempt state:R running task stack:26448 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 1514.348110][ C1] Call Trace: [ 1514.351398][ C1] [ 1514.354338][ C1] __schedule+0x17ae/0x4a10 [ 1514.358883][ C1] ? __pfx___schedule+0x10/0x10 [ 1514.364185][ C1] ? __pfx_lock_release+0x10/0x10 [ 1514.369221][ C1] ? __asan_memset+0x23/0x50 [ 1514.373821][ C1] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 1514.379644][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1514.385988][ C1] ? schedule+0x90/0x320 [ 1514.390251][ C1] schedule+0x14b/0x320 [ 1514.394432][ C1] schedule_timeout+0x1be/0x310 [ 1514.399304][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1514.404687][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1514.409993][ C1] ? prepare_to_swait_event+0x32e/0x350 [ 1514.415558][ C1] rcu_gp_fqs_loop+0x2df/0x1330 [ 1514.420423][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 1514.425641][ C1] ? rcu_gp_init+0x1256/0x1630 [ 1514.430424][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 1514.435387][ C1] ? __pfx_rcu_implicit_dynticks_qs+0x10/0x10 [ 1514.441471][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1514.446785][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 1514.451397][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1514.456609][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1514.462522][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1514.467566][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1514.472776][ C1] kthread+0x2f0/0x390 [ 1514.476860][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1514.482066][ C1] ? __pfx_kthread+0x10/0x10 [ 1514.486670][ C1] ret_from_fork+0x4b/0x80 [ 1514.491104][ C1] ? __pfx_kthread+0x10/0x10 [ 1514.495713][ C1] ret_from_fork_asm+0x1a/0x30 [ 1514.500505][ C1] [ 1514.503529][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1514.509865][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.11.0-rc3-syzkaller-00279-ge5fa841af679 #0 [ 1514.520196][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1514.530271][ C1] RIP: 0010:acpi_safe_halt+0x21/0x30 [ 1514.535581][ C1] Code: 90 90 90 90 90 90 90 90 90 65 48 8b 04 25 00 d7 03 00 48 f7 00 08 00 00 00 75 10 66 90 0f 00 2d 95 07 9b 00 f3 0f 1e fa fb f4 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 [ 1514.555212][ C1] RSP: 0018:ffffc900001a7d08 EFLAGS: 00000246 [ 1514.561302][ C1] RAX: ffff888017af0000 RBX: ffff88801b6ee064 RCX: 0000000007bf5161 [ 1514.569285][ C1] RDX: 0000000000000001 RSI: ffff88801b6ee000 RDI: ffff88801b6ee064 [ 1514.577274][ C1] RBP: 000000000003a678 R08: ffff8880b9337c7b R09: 1ffff11017266f8f [ 1514.585264][ C1] R10: dffffc0000000000 R11: ffffffff8bae3ce0 R12: ffff88801836f800 [ 1514.593247][ C1] R13: 0000000000000000 R14: 0000000000000001 R15: ffffffff8eecad60 [ 1514.601232][ C1] FS: 0000000000000000(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 1514.610172][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1514.616764][ C1] CR2: 00007f45db1b035b CR3: 00000000634fc000 CR4: 00000000003526f0 [ 1514.624746][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1514.632724][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1514.640701][ C1] Call Trace: [ 1514.643986][ C1] [ 1514.646841][ C1] ? rcu_check_gp_kthread_starvation+0x278/0x310 [ 1514.653206][ C1] ? print_other_cpu_stall+0x1470/0x15a0 [ 1514.658877][ C1] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 1514.664700][ C1] ? __pfx_lock_release+0x10/0x10 [ 1514.669755][ C1] ? kvm_check_and_clear_guest_paused+0x6a/0xd0 [ 1514.676015][ C1] ? rcu_sched_clock_irq+0xa2c/0x10d0 [ 1514.681420][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 1514.687070][ C1] ? hrtimer_run_queues+0x16c/0x460 [ 1514.692285][ C1] ? update_process_times+0x1ce/0x230 [ 1514.697687][ C1] ? tick_nohz_handler+0x37c/0x500 [ 1514.702826][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 1514.708302][ C1] ? __hrtimer_run_queues+0x551/0xd50 [ 1514.713687][ C1] ? ktime_get_update_offsets_now+0x3c/0x250 [ 1514.719700][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1514.725431][ C1] ? ktime_get_update_offsets_now+0x22d/0x250 [ 1514.731518][ C1] ? hrtimer_interrupt+0x396/0x990 [ 1514.736662][ C1] ? __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 1514.742833][ C1] ? sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1514.748656][ C1] [ 1514.751592][ C1] [ 1514.754529][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1514.760698][ C1] ? __pfx_acpi_idle_enter+0x10/0x10 [ 1514.766432][ C1] ? acpi_safe_halt+0x21/0x30 [ 1514.771125][ C1] acpi_idle_enter+0xe4/0x140 [ 1514.775816][ C1] cpuidle_enter_state+0x112/0x480 [ 1514.780937][ C1] ? __pfx_menu_select+0x10/0x10 [ 1514.785894][ C1] cpuidle_enter+0x5d/0xa0 [ 1514.790328][ C1] do_idle+0x375/0x5d0 [ 1514.794408][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1514.800757][ C1] ? __pfx_do_idle+0x10/0x10 [ 1514.805358][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 1514.810589][ C1] cpu_startup_entry+0x42/0x60 [ 1514.815368][ C1] start_secondary+0x100/0x100 [ 1514.820143][ C1] common_startup_64+0x13e/0x147 [ 1514.825103][ C1] [ 1515.387986][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 1515.983139][ T944] usb 4-1: device descriptor read/all, error -71 SYZFAIL: failed to send rpc fd=3 want=137864 sent=0 n=-1 (errno 32: Broken pipe) [ 1516.411339][ T7117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1516.458418][ T7117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1517.284903][ T7117] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1517.508620][ T7117] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1517.623717][ T7117] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1517.704066][ T7117] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1517.913804][ T7117] bridge_slave_1: left allmulticast mode [ 1517.919510][ T7117] bridge_slave_1: left promiscuous mode [ 1517.925833][ T7117] bridge0: port 2(bridge_slave_1) entered disabled state [ 1517.941001][ T7117] bridge_slave_0: left allmulticast mode [ 1517.946686][ T7117] bridge_slave_0: left promiscuous mode [ 1517.953850][ T7117] bridge0: port 1(bridge_slave_0) entered disabled state [ 1517.964954][T15029] Bluetooth: hci6: command 0x0405 tx timeout [ 1518.715384][ T7117] team0: Port device bond0 removed [ 1518.726917][ T7117] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1518.738217][ T7117] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1518.748846][ T7117] bond0 (unregistering): Released all slaves [ 1518.761172][ T7117] bond1 (unregistering): Released all slaves [ 1518.850454][ T7117] tipc: Left network mode [ 1519.335779][ T7117] hsr_slave_0: left promiscuous mode [ 1519.363864][ T7117] 0: left promiscuous mode [ 1519.369495][ T7117] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1519.378827][ T7117] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1519.391767][ T7117] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1519.399207][ T7117] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1519.442080][ T7117] veth1_macvtap: left promiscuous mode [ 1519.447860][ T7117] veth0_macvtap: left promiscuous mode [ 1519.454312][ T7117] veth1_vlan: left promiscuous mode [ 1519.459604][ T7117] veth0_vlan: left promiscuous mode [ 1520.073890][ T7117] team0 (unregistering): Port device team_slave_1 removed [ 1520.137320][ T7117] team0 (unregistering): Port device team_slave_0 removed [ 1520.437628][ T7117] smc: removing net device vxcan1 with user defined pnetid SYZ1 [ 1521.043092][ T7117] IPVS: stop unused estimator thread 0... [ 1521.175360][ T7117] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1521.284028][ T7117] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1521.396378][ T7117] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1521.469135][ T7117] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1521.683377][ T7117] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1521.813910][ T7117] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1521.903276][ T7117] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1522.004950][ T7117] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1522.197275][ T7117] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1522.300936][ T7117] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1522.392353][ T7117] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1522.470811][ T7117] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1522.703390][ T7117] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1522.786589][ T7117] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1522.882302][ T7117] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1522.975439][ T7117] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1523.099820][ T7117] bridge_slave_1: left allmulticast mode [ 1523.114802][ T7117] bridge_slave_1: left promiscuous mode [ 1523.130646][ T7117] bridge0: port 2(bridge_slave_1) entered disabled state [ 1523.151399][ T7117] bridge_slave_0: left allmulticast mode [ 1523.157173][ T7117] bridge_slave_0: left promiscuous mode [ 1523.168739][ T7117] bridge0: port 1(bridge_slave_0) entered disabled state [ 1523.179892][ T7117] bridge_slave_1: left allmulticast mode [ 1523.191413][ T7117] bridge_slave_1: left promiscuous mode [ 1523.197823][ T7117] bridge0: port 2(bridge_slave_1) entered disabled state [ 1523.208879][ T7117] bridge_slave_0: left allmulticast mode [ 1523.214785][ T7117] bridge_slave_0: left promiscuous mode [ 1523.222545][ T7117] bridge0: port 1(bridge_slave_0) entered disabled state [ 1523.234430][ T7117] bridge_slave_1: left allmulticast mode [ 1523.240228][ T7117] bridge_slave_1: left promiscuous mode [ 1523.245961][ T7117] bridge0: port 2(bridge_slave_1) entered disabled state [ 1523.255526][ T7117] bridge_slave_0: left allmulticast mode [ 1523.261816][ T7117] bridge_slave_0: left promiscuous mode [ 1523.267578][ T7117] bridge0: port 1(bridge_slave_0) entered disabled state