last executing test programs: 18.81221121s ago: executing program 2 (id=2182): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@o_path={0x0, 0x0, 0x4000}, 0x18) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x20000, 0x49) openat(r0, 0x0, 0x6a000, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0xc0686611, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$radio(&(0x7f00000000c0), 0x3, 0x2) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) r6 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000080)={0xffffffff, 0x1f, 0x7, 0xfffffffa, 0x3, "a4c82192e6aed8e8950470331d04006c9957ed"}) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x3) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, 0x0) r7 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r7, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0xf0f041, 0x0, '\x00', @ptr}}) close_range(r2, 0xffffffffffffffff, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f00000005c0)="01000000020001000003be8c5ee17688", 0x10) 16.59036477s ago: executing program 3 (id=2189): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000300), 0x82880, 0x0) ioctl$FBIOBLANK(r1, 0x4611, 0x1) ioctl$FBIO_WAITFORVSYNC(r1, 0x40044620, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r2 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102384, 0x18ff0) fsopen(&(0x7f00000001c0)='binder\x00', 0x1) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000003, @mcast2, 0x6}, 0x1c) write(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r3}, 0x0, 0x0, 0x300}, 0x20) bind$alg(0xffffffffffffffff, 0x0, 0x0) r4 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond0\x00'}) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r5}, 0x5) 15.838094201s ago: executing program 3 (id=2191): ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000200)={0x9, @sliced={0x8, [0x4, 0x7, 0x101, 0x7ff, 0x8, 0x6, 0x8, 0x800, 0x1ff, 0x4, 0x400, 0x8, 0x4, 0x7, 0x0, 0x2, 0x7, 0x8, 0xb24c, 0x83, 0xff, 0x3, 0x6, 0xff, 0x7, 0x2, 0x4, 0x8, 0xe3b3, 0x5848, 0x5, 0x4006, 0xcc51, 0x2, 0x7, 0x1, 0x2, 0x8, 0x0, 0x8, 0xfff8, 0x541d, 0xff7d, 0x2, 0x4, 0x6, 0x8, 0xfe23], 0x9}}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000000), 0x4) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) getrandom(&(0x7f0000000040)=""/29, 0x1d, 0x3) r2 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f00000000c0)={0x0, 0x1, 0x100000, 0x0, 0x0, 0x6}) r3 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r3, 0x3b72, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 14.988519549s ago: executing program 3 (id=2192): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000340)={{@host, 0x2}, 0x1, 0x2, 0x6}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) r3 = getpid() ptrace$ARCH_SHSTK_ENABLE(0x1e, r3, 0x0, 0x5001) r4 = syz_open_procfs(r3, &(0x7f0000000000)='stat\x00') lseek(r4, 0x10000000005, 0x0) 14.568497343s ago: executing program 3 (id=2193): socket$inet(0x2, 0x3, 0x4) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @rand_addr=' \x01\x00', 0xb}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) futex(0x0, 0x8d, 0xfffffffd, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)='usrquota') 13.708154943s ago: executing program 3 (id=2196): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x3e) 9.77018933s ago: executing program 1 (id=2199): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000300), 0x82880, 0x0) ioctl$FBIOBLANK(r1, 0x4611, 0x1) ioctl$FBIO_WAITFORVSYNC(r1, 0x40044620, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r2 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102384, 0x18ff0) fsopen(&(0x7f00000001c0)='binder\x00', 0x1) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000003, @mcast2, 0x6}, 0x1c) write(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r3}, 0x0, 0x0, 0x300}, 0x20) bind$alg(0xffffffffffffffff, 0x0, 0x0) r4 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r5}, 0x5) 9.65674179s ago: executing program 0 (id=2200): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000000)=r0, 0x4) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) getrandom(&(0x7f0000000040)=""/29, 0x1d, 0x3) r3 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f00000000c0)={0x0, 0x1, 0x100000, 0x0, 0x0, 0x6}) r4 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r4, 0x3b72, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 9.181680128s ago: executing program 3 (id=2201): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r2, 0x7a5, &(0x7f0000000340)={{@host, 0x2}, 0x1, 0x2, 0x6}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = getpid() ptrace$ARCH_SHSTK_ENABLE(0x1e, r4, 0x0, 0x5001) r5 = syz_open_procfs(r4, &(0x7f0000000000)='stat\x00') lseek(r5, 0x10000000005, 0x0) 8.592495366s ago: executing program 1 (id=2202): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000480)='contention_begin\x00', r0, 0x0, 0x400200000100d}, 0x18) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) readv(r1, &(0x7f0000000080)=[{&(0x7f0000002600)=""/46, 0x2e}], 0x1) close_range(r1, r1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) 8.589231956s ago: executing program 0 (id=2203): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x66, &(0x7f0000000040)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x503, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @mcast1}}}}}}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0], 0x48}}, 0x0) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) 8.3040828s ago: executing program 1 (id=2204): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) set_mempolicy(0x8006, 0x0, 0x5) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c400000019000100"/48, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESOCT=r4], 0xc4}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x40000000000800, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000600)={{0x0, 0x400, 0x7, 0x101, 0x9, 0x2, 0xda, 0x7fff, 0xc, 0x175, 0x714f, 0x9, 0x4, 0x101, 0x8000000000000000}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@remote, @in6=@remote, 0x8, 0x0, 0xfffc, 0x41, 0x2, 0xa0}, {0x5, 0x3, 0xfffffffffffffffe, 0x0, 0x4, 0x0, 0x80000000000000}, {0x400, 0x3, 0x0, 0x800}, 0xb, 0x0, 0x1, 0x0, 0x2, 0x3}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d6, 0x2b}, 0x2, @in=@broadcast, 0xffffffff, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0x10001}}, 0xe8) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x61, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r2, &(0x7f00000006c0)="ff2a4048e7551e49", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240), 0x0, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1f, 0x12, r1, 0x100000000) 7.248305714s ago: executing program 0 (id=2205): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x4) ioctl$TCFLSH(r0, 0x400455c8, 0x4) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r7, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 7.233302916s ago: executing program 2 (id=2206): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f00000003c0)=@buf) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000305fcffff070000000000000000", @ANYRES32=0x0, @ANYBLOB="05030200157e0000140012800c0001006d61637674617000040002800800", @ANYRES32, @ANYBLOB="080004"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x48094) 5.975267877s ago: executing program 2 (id=2207): r0 = epoll_create1(0x0) poll(&(0x7f0000000040)=[{r0, 0x10}], 0x1, 0x8000db3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f0000000280)='g', 0x1, 0x4008891, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) r5 = openat$sysfs(0xffffffffffffff9c, 0x0, 0xa00, 0x60) read$FUSE(r5, &(0x7f0000002ec0)={0x2020}, 0x2020) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000f80)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000000ac0)={r7, 0xd0}, &(0x7f0000000b00)=0x8) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x28, &(0x7f00000001c0)=0xf66, 0x4) shutdown(r4, 0x1) recvmmsg(r4, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) add_key$keyring(&(0x7f0000000540), &(0x7f0000000140)={'syz', 0x2}, 0x1000000, 0x0, 0xffffffffffffffff) unlinkat$binderfs_device(0xffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00') ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f00000005c0)) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000080)) shutdown(r1, 0x0) 5.94173198s ago: executing program 1 (id=2208): r0 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x2000001, 0x55, 0x3}) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002300)=@o_path={0x0, 0x0, 0x4000, r0}, 0x18) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002340), 0x208400, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002200)={0x6, 0x8, &(0x7f0000002680)=ANY=[@ANYRES16, @ANYBLOB="0000000000000000850000000700000018260000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\a\x00\x00\x00'], &(0x7f0000001100)='GPL\x00', 0x1000004, 0x1000, &(0x7f0000001140)=""/4096, 0x1f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000002140)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000002180)={0x0, 0x20000, 0xb, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0x1, 0x1, r1, r2, r1, r2, r1], 0x0, 0x10, 0x5}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_open_dev$video(0x0, 0x7, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sysvipc/shm\x00', 0x0, 0x0) read$FUSE(r5, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000025c0)='./file0\x00', 0x0, 0xa0001c, &(0x7f0000002640)=ANY=[@ANYBLOB, @ANYRESDEC, @ANYRES64=r3, @ANYRESDEC=0x0, @ANYBLOB]) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000040)={0x80, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8, 0x8}, {0xd54, 0x0, 0x1}, {0x0, 0x20000000}, 0x0, 0x10, 0x0, 0x101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffffd, 0x0, 0x0, 0x0, 0x2, 0x6}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002004000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) r7 = socket$netlink(0x10, 0x3, 0x6) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x5, &(0x7f0000000280)={&(0x7f0000000340)=@newtaction={0x9c, 0x30, 0x48b, 0x0, 0x0, {}, [{0x88, 0x1, [@m_ctinfo={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x3a}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x8, 0x1, {{}, @multicast2, @remote}}]}, {0xffffff1a}, {0xc}, {0xc}}}]}]}, 0x9c}}, 0x0) 3.699578251s ago: executing program 2 (id=2209): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000000003"], 0x3e) 3.679313603s ago: executing program 1 (id=2210): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000300), 0x82880, 0x0) ioctl$FBIOBLANK(r1, 0x4611, 0x1) ioctl$FBIO_WAITFORVSYNC(r1, 0x40044620, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r2 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102384, 0x18ff0) fsopen(&(0x7f00000001c0)='binder\x00', 0x1) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000003, @mcast2, 0x6}, 0x1c) write(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r3}, 0x0, 0x0, 0x300}, 0x20) bind$alg(0xffffffffffffffff, 0x0, 0x0) r4 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r5}, 0x5) 3.501883267s ago: executing program 2 (id=2211): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000000)=r0, 0x4) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) getrandom(&(0x7f0000000040)=""/29, 0x1d, 0x3) r3 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f00000000c0)={0x0, 0x1, 0x100000, 0x0, 0x0, 0x6}) r4 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r4, 0x3b72, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 2.799723154s ago: executing program 0 (id=2212): openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi4\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x800, 0x1, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000004880), 0x0, 0x0) io_uring_enter(r1, 0x133d, 0x0, 0x8, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x1, {0x6, 0x6d4}, 0xf0}, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000300"], 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x7, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x5f, 0x5f]}}, 0x0, 0x28, 0x0, 0x0, 0x3}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0xed3, 0x0, 0x0, 0x40f00, 0x30, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x4, 0x3, 0x5, 0x7}, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x10, 0x8}, 0x94) 1.504159739s ago: executing program 1 (id=2213): sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001200)={0x57c, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x9}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1}, @NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_MATCH={0x33e, 0x5b, "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"}, @NL80211_ATTR_FRAME_MATCH={0x100, 0x5b, "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"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1ff}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xc}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x4}, @NL80211_ATTR_FRAME_MATCH={0xf5, 0x5b, "2537861a416172e1b3a4641f689e7128268d1c658d415db2a4a062885a2bced47cb6720eacc6e377961573f48e503a971c116892a4defcf1fdcda062dfbf3e7aabe23f1cbfdad14c8e50ab42677d34e5d1de13e5670d7a948fa03547a566b48a5b0b529334f38f00989ac8f9c4af14aa1d6f7923f034eaa15615e641dce7adf46324a7669f59b73e6d793886fefbeff2388ed14f2b826848e1009e8837d31c141b8154e4b1175f5935908b76f4cf686bb96c5a08a9b4b23a894bf84c18bb013702306fa8c94dcb33de65cd85d659fdbc55821a906a47490167f0fc01aee45814527289af1f4e581d66dca0fd8dcd40bab1"}]}, 0x57c}}, 0xc881) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000700)=[{&(0x7f0000000540)}, {0x0}, {&(0x7f0000000400)}, {&(0x7f0000002a00)="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", 0xfbe}, {&(0x7f0000003a00)}, {&(0x7f0000000640)="30117876826b04a4cd71f83c68076bbac59d0dc50a1594cd0fe8b96facc716302cfb257ac9d28f9b96b828d6f86a1a23", 0x30}, {&(0x7f0000000680)="726ca31e45f3e88c9cb1e08dff15b0056bd7fecd71b43a60d17820cf5369b94614ee323f80a84d9ceb5cbf18929e4aa5ba5910", 0x33}, {&(0x7f00000006c0)="7c3a4ac8166c14ccd19235060177cd99a6a3", 0x12}], 0x8) syz_genetlink_get_family_id$nl80211(0x0, r0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x418040, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r3, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r3, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) 1.23275887s ago: executing program 2 (id=2214): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x66, &(0x7f0000000040)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x503, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @mcast1}}}}}}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0], 0x48}}, 0x0) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) 1.179329625s ago: executing program 0 (id=2215): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f00000003c0)=@buf) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000305fcffff070000000000000000", @ANYRES32=0x0, @ANYBLOB="05030200157e0000140012800c0001006d61637674617000040002800800", @ANYRES32, @ANYBLOB="080004"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x48094) 0s ago: executing program 0 (id=2216): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="180000000003000000"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r0}, 0x18) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000a80)={0x4000000, 0x8, 0x3}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.56' (ED25519) to the list of known hosts. [ 71.969708][ T5778] cgroup: Unknown subsys name 'net' [ 72.103059][ T5778] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.860527][ T5778] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.444195][ T5789] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.454463][ T5799] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.476263][ T5793] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.484622][ T5799] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.484938][ T5793] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.493121][ T5799] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.500360][ T5793] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.514328][ T5793] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.522285][ T5793] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 75.526321][ T5799] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 75.530148][ T5793] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.544261][ T5789] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.552131][ T5799] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.565921][ T5789] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.578297][ T5799] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.587185][ T5799] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.595022][ T5799] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 75.602666][ T5799] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.657792][ T5799] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.668120][ T5799] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.686998][ T5799] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.698181][ T5799] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.707547][ T5799] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 75.715147][ T5799] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.037185][ T5790] chnl_net:caif_netlink_parms(): no params data found [ 76.190840][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 76.253533][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.260860][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.268747][ T5790] bridge_slave_0: entered allmulticast mode [ 76.276151][ T5790] bridge_slave_0: entered promiscuous mode [ 76.311848][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.319324][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.326870][ T5790] bridge_slave_1: entered allmulticast mode [ 76.333685][ T5790] bridge_slave_1: entered promiscuous mode [ 76.341059][ T5795] chnl_net:caif_netlink_parms(): no params data found [ 76.436901][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.444163][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.451797][ T5787] bridge_slave_0: entered allmulticast mode [ 76.458791][ T5787] bridge_slave_0: entered promiscuous mode [ 76.479958][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.491449][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.498847][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.506608][ T5787] bridge_slave_1: entered allmulticast mode [ 76.513497][ T5787] bridge_slave_1: entered promiscuous mode [ 76.547670][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.569610][ T5801] chnl_net:caif_netlink_parms(): no params data found [ 76.619422][ T5790] team0: Port device team_slave_0 added [ 76.628754][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.641663][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.669741][ T5790] team0: Port device team_slave_1 added [ 76.747900][ T5795] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.755100][ T5795] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.762697][ T5795] bridge_slave_0: entered allmulticast mode [ 76.770412][ T5795] bridge_slave_0: entered promiscuous mode [ 76.783931][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.791110][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.817457][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.831946][ T5787] team0: Port device team_slave_0 added [ 76.842768][ T5787] team0: Port device team_slave_1 added [ 76.849029][ T5795] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.856490][ T5795] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.863647][ T5795] bridge_slave_1: entered allmulticast mode [ 76.870707][ T5795] bridge_slave_1: entered promiscuous mode [ 76.892743][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.900149][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.926177][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.000252][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.008110][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.034076][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.047748][ T5795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.060415][ T5795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.088041][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.095037][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.121691][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.174484][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.181972][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.189855][ T5801] bridge_slave_0: entered allmulticast mode [ 77.197828][ T5801] bridge_slave_0: entered promiscuous mode [ 77.213734][ T5795] team0: Port device team_slave_0 added [ 77.222888][ T5795] team0: Port device team_slave_1 added [ 77.241133][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.248444][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.256441][ T5801] bridge_slave_1: entered allmulticast mode [ 77.263844][ T5801] bridge_slave_1: entered promiscuous mode [ 77.301242][ T5790] hsr_slave_0: entered promiscuous mode [ 77.307934][ T5790] hsr_slave_1: entered promiscuous mode [ 77.354231][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.361413][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.388080][ T5795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.417020][ T5801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.430272][ T5801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.455643][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.462791][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.489417][ T5795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.504142][ T5787] hsr_slave_0: entered promiscuous mode [ 77.510649][ T5787] hsr_slave_1: entered promiscuous mode [ 77.517730][ T5787] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.525789][ T5787] Cannot create hsr debugfs directory [ 77.561186][ T5799] Bluetooth: hci1: command tx timeout [ 77.595085][ T5795] hsr_slave_0: entered promiscuous mode [ 77.602033][ T5795] hsr_slave_1: entered promiscuous mode [ 77.608282][ T5795] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.616106][ T5795] Cannot create hsr debugfs directory [ 77.624331][ T5801] team0: Port device team_slave_0 added [ 77.634559][ T5801] team0: Port device team_slave_1 added [ 77.640357][ T5799] Bluetooth: hci2: command tx timeout [ 77.645479][ T5796] Bluetooth: hci0: command tx timeout [ 77.748965][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.756190][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.782445][ T5801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.795612][ T5796] Bluetooth: hci3: command tx timeout [ 77.829074][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.836376][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.862587][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.047632][ T5801] hsr_slave_0: entered promiscuous mode [ 78.054039][ T5801] hsr_slave_1: entered promiscuous mode [ 78.060614][ T5801] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.068343][ T5801] Cannot create hsr debugfs directory [ 78.183785][ T5790] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.203567][ T5790] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.223820][ T5790] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.244275][ T5790] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.351044][ T5795] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.362572][ T5795] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.373277][ T5795] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.402912][ T5795] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.462964][ T5787] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.482400][ T5787] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.494243][ T5787] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.506232][ T5787] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.626823][ T5801] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.638530][ T5801] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.650369][ T5801] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.662316][ T5801] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.708271][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.776292][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.804055][ T3553] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.811443][ T3553] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.839817][ T3553] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.847084][ T3553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.931162][ T5795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.973353][ T5790] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.014222][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.041888][ T5795] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.103615][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.110831][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.143138][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.171076][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.178350][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.192366][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.219022][ T5801] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.261085][ T3459] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.268316][ T3459] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.291841][ T3459] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.299111][ T3459] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.318945][ T3459] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.326240][ T3459] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.375077][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.382267][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.494389][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.636398][ T5796] Bluetooth: hci1: command tx timeout [ 79.667227][ T5790] veth0_vlan: entered promiscuous mode [ 79.689268][ T5790] veth1_vlan: entered promiscuous mode [ 79.716145][ T5796] Bluetooth: hci0: command tx timeout [ 79.719013][ T5799] Bluetooth: hci2: command tx timeout [ 79.810097][ T5790] veth0_macvtap: entered promiscuous mode [ 79.840438][ T5790] veth1_macvtap: entered promiscuous mode [ 79.875809][ T5799] Bluetooth: hci3: command tx timeout [ 79.935847][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.984111][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.024886][ T5790] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.034371][ T5790] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.044035][ T5790] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.053016][ T5790] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.069593][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.088718][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.160250][ T5795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.253639][ T168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.262629][ T168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.302950][ T5787] veth0_vlan: entered promiscuous mode [ 80.351687][ T5801] veth0_vlan: entered promiscuous mode [ 80.371990][ T5787] veth1_vlan: entered promiscuous mode [ 80.382374][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.385142][ T5801] veth1_vlan: entered promiscuous mode [ 80.404945][ T5795] veth0_vlan: entered promiscuous mode [ 80.410620][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.447289][ T5795] veth1_vlan: entered promiscuous mode [ 80.530887][ T5787] veth0_macvtap: entered promiscuous mode [ 80.544296][ T5787] veth1_macvtap: entered promiscuous mode [ 80.580621][ T5801] veth0_macvtap: entered promiscuous mode [ 80.619404][ T5801] veth1_macvtap: entered promiscuous mode [ 80.640132][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.657077][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.670538][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.698602][ T5795] veth0_macvtap: entered promiscuous mode [ 80.709887][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.720567][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.733193][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.748557][ T5795] veth1_macvtap: entered promiscuous mode [ 80.758208][ T5787] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.768520][ T5787] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.778265][ T5787] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.787511][ T5787] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.820760][ T5801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.831436][ T5801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.843607][ T5801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.854293][ T5801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.867116][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.882467][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.893180][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.903545][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.914502][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.926297][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.937140][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.949369][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.961710][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.972966][ T1186] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 80.979165][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.990765][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.002609][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.013985][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.032080][ T5801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.042981][ T5801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.054214][ T5801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.065061][ T5801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.077769][ T5801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.088877][ T5801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.101280][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.122812][ T5795] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.132033][ T5795] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.141150][ T5795] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.152591][ T5795] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.168369][ T5801] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.178385][ T5801] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.185371][ T1186] usb 2-1: Using ep0 maxpacket: 16 [ 81.187844][ T5801] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.201678][ T5801] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.212299][ T1186] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.224424][ T1186] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.235151][ T1186] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 81.266898][ T1186] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.286446][ T1186] usb 2-1: config 0 descriptor?? [ 81.419863][ T168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.435410][ T168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.463305][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.475370][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.529225][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.530828][ T5874] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 81.551023][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.635415][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.643351][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.694974][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.715432][ T5799] Bluetooth: hci1: command tx timeout [ 81.724594][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.738207][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.773441][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.795404][ T5799] Bluetooth: hci2: command tx timeout [ 81.796914][ T5796] Bluetooth: hci0: command tx timeout [ 81.873337][ T1186] hid-multitouch 0003:1FD2:6007.0001: unknown main item tag 0x0 [ 81.885707][ T1186] hid-multitouch 0003:1FD2:6007.0001: unknown main item tag 0x0 [ 81.893425][ T1186] hid-multitouch 0003:1FD2:6007.0001: item fetching failed at offset 3/5 [ 81.909215][ T1186] hid-multitouch: probe of 0003:1FD2:6007.0001 failed with error -22 [ 81.977290][ T5799] Bluetooth: hci3: command tx timeout [ 82.746941][ T5884] usb 2-1: USB disconnect, device number 2 [ 83.097062][ T5890] autofs4:pid:5890:autofs_fill_super: called with bogus options [ 83.795766][ T5799] Bluetooth: hci1: command tx timeout [ 83.876179][ T5799] Bluetooth: hci0: command tx timeout [ 83.876402][ T5796] Bluetooth: hci2: command tx timeout [ 84.045303][ T5796] Bluetooth: hci3: command tx timeout [ 84.215663][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.252021][ T5922] syz_tun: entered allmulticast mode [ 86.299275][ T5916] dvmrp1: entered allmulticast mode [ 86.318261][ T5915] syz_tun: left allmulticast mode [ 87.377290][ T8] cfg80211: failed to load regulatory.db [ 87.406160][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 87.874808][ T5932] xt_TPROXY: Can be used only with -p tcp or -p udp [ 87.905515][ T5877] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 87.935651][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 87.944213][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 88.194523][ T5943] process 'syz.1.16' launched './file0' with NULL argv: empty string added [ 88.495499][ T27] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 88.693148][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 35329, setting to 64 [ 88.870234][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 88.913841][ T27] usb 2-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 88.915906][ T5877] usb 1-1: Using ep0 maxpacket: 16 [ 88.924283][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.933528][ T5877] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.955569][ T5877] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.966028][ T27] usb 2-1: config 0 descriptor?? [ 88.966116][ T5877] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 88.981889][ T5877] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.988476][ T27] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 88.993930][ T5877] usb 1-1: config 0 descriptor?? [ 89.416486][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 89.585286][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 89.689110][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 89.795276][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 89.986022][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 90.537424][ T5877] hid-multitouch 0003:1FD2:6007.0002: unknown main item tag 0x0 [ 90.552858][ T5877] hid-multitouch 0003:1FD2:6007.0002: unknown main item tag 0x0 [ 90.562586][ T5877] hid-multitouch 0003:1FD2:6007.0002: item fetching failed at offset 3/5 [ 90.572359][ T5877] hid-multitouch: probe of 0003:1FD2:6007.0002 failed with error -22 [ 90.668120][ T5884] usb 1-1: USB disconnect, device number 2 [ 91.112854][ T5877] usb 2-1: USB disconnect, device number 3 [ 92.894972][ T8] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 93.178605][ T8] usb 4-1: device descriptor read/64, error -71 [ 93.525386][ T8] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 94.152416][ T8] usb 4-1: device descriptor read/64, error -71 [ 94.288370][ T8] usb usb4-port1: attempt power cycle [ 94.317081][ T5990] xt_TPROXY: Can be used only with -p tcp or -p udp [ 94.378371][ T5875] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 94.565524][ T5875] usb 1-1: Using ep0 maxpacket: 16 [ 94.638207][ T5875] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.691845][ T5875] usb 1-1: config 0 has no interfaces? [ 94.768183][ T5875] usb 1-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.00 [ 94.816638][ T5875] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.851335][ T5875] usb 1-1: config 0 descriptor?? [ 95.766898][ T6007] binder: 6004:6007 ioctl 4018620d 0 returned -22 [ 96.059638][ T8] usb 1-1: USB disconnect, device number 3 [ 97.914604][ T6032] netlink: 4 bytes leftover after parsing attributes in process `syz.0.38'. [ 97.977411][ T27] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 98.135400][ T27] usb 3-1: device descriptor read/64, error -71 [ 98.473138][ T6041] xt_TPROXY: Can be used only with -p tcp or -p udp [ 98.596644][ T27] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 98.765472][ T27] usb 3-1: device descriptor read/64, error -71 [ 98.885835][ T27] usb usb3-port1: attempt power cycle [ 99.113809][ T6048] binder: 6045:6048 ioctl 4018620d 0 returned -22 [ 99.675326][ T27] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 99.784077][ T27] usb 3-1: device descriptor read/8, error -71 [ 100.535348][ T27] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 100.908210][ T27] usb 3-1: device not accepting address 5, error -71 [ 100.915844][ T27] usb usb3-port1: unable to enumerate USB device [ 100.975482][ T5884] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 102.352322][ T5884] usb 1-1: Using ep0 maxpacket: 16 [ 102.730999][ T5884] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.741278][ T5884] usb 1-1: config 0 has no interfaces? [ 102.747631][ T5884] usb 1-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.00 [ 102.757139][ T5884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.988330][ T5884] usb 1-1: config 0 descriptor?? [ 103.704517][ T6081] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 104.105998][ T6083] binder: 6077:6083 ioctl 4018620d 0 returned -22 [ 104.356741][ T5804] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 104.667805][ T5804] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 35329, setting to 64 [ 104.685948][ T5804] usb 3-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 104.719000][ T5804] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.806129][ T5804] usb 3-1: config 0 descriptor?? [ 104.860122][ T5804] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 105.261384][ T5884] usb 1-1: can't set config #0, error -71 [ 105.300266][ T5884] usb 1-1: USB disconnect, device number 4 [ 107.023511][ T9] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 107.393172][ T8] usb 3-1: USB disconnect, device number 6 [ 107.632696][ T9] usb 1-1: device descriptor read/64, error -71 [ 108.079925][ T9] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 108.644786][ T9] usb 1-1: device descriptor read/64, error -71 [ 108.765662][ T9] usb usb1-port1: attempt power cycle [ 108.947137][ T6115] binder: 6113:6115 ioctl 4018620d 0 returned -22 [ 109.755333][ T1194] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 110.795364][ T1194] usb 4-1: Using ep0 maxpacket: 16 [ 110.806840][ T5804] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 111.016275][ T1194] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.048226][ T5804] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 35329, setting to 64 [ 111.050574][ T1194] usb 4-1: config 0 has no interfaces? [ 111.066938][ T5804] usb 1-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 111.096089][ T1194] usb 4-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.00 [ 111.149232][ T5804] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.335676][ T5804] usb 1-1: config 0 descriptor?? [ 111.493559][ T5804] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 111.827319][ T1194] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.848505][ T1194] usb 4-1: config 0 descriptor?? [ 112.745737][ T5877] usb 4-1: USB disconnect, device number 5 [ 112.930416][ T5804] usb 1-1: USB disconnect, device number 8 [ 113.051355][ T6153] syz.0.73 uses obsolete (PF_INET,SOCK_PACKET) [ 113.353655][ T6160] binder: 6154:6160 ioctl 4018620d 0 returned -22 [ 113.485724][ T6162] tipc: Started in network mode [ 113.501055][ T6162] tipc: Node identity e69f8b6f028c, cluster identity 4711 [ 113.532952][ T6162] tipc: Enabled bearer , priority 0 [ 113.578622][ T6162] syzkaller0: entered promiscuous mode [ 113.603434][ T6162] syzkaller0: entered allmulticast mode [ 113.640215][ T6162] Zero length message leads to an empty skb [ 113.684777][ T6162] tipc: Resetting bearer [ 113.701560][ T6161] tipc: Resetting bearer [ 114.377797][ T6161] tipc: Disabling bearer [ 115.932925][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 116.285499][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 117.183546][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.196735][ T9] usb 4-1: config 0 has no interfaces? [ 117.202380][ T9] usb 4-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.00 [ 117.232885][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.262031][ T9] usb 4-1: config 0 descriptor?? [ 117.507579][ T27] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 117.650529][ T5804] usb 4-1: USB disconnect, device number 6 [ 117.707414][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 35329, setting to 64 [ 117.718657][ T27] usb 2-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 117.745291][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.765454][ T27] usb 2-1: config 0 descriptor?? [ 117.777441][ T27] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 117.785435][ T1194] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 117.967861][ T1194] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 35329, setting to 64 [ 117.986430][ T1194] usb 3-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 117.995719][ T1194] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.008991][ T1194] usb 3-1: config 0 descriptor?? [ 118.028683][ T1194] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 118.825427][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 118.907178][ T6207] binder: 6205:6207 ioctl 4018620d 0 returned -22 [ 119.017915][ T9] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 119.026898][ T9] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 119.038233][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 119.047391][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 119.058606][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 119.071769][ T9] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 119.082715][ T9] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 119.091042][ T9] usb 4-1: Product: syz [ 119.095454][ T9] usb 4-1: Manufacturer: syz [ 119.164719][ T9] cdc_wdm 4-1:1.0: skipping garbage [ 119.171352][ T9] cdc_wdm 4-1:1.0: skipping garbage [ 119.174742][ T27] usb 2-1: USB disconnect, device number 4 [ 119.223044][ T9] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 119.250666][ T9] cdc_wdm 4-1:1.0: Unknown control protocol [ 119.383622][ T9] usb 4-1: USB disconnect, device number 7 [ 120.319788][ T5877] usb 3-1: USB disconnect, device number 7 [ 122.925637][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 124.276261][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 124.283373][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.295086][ T9] usb 3-1: config 0 has no interfaces? [ 124.301862][ T9] usb 3-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.00 [ 124.311155][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.328331][ T6246] binder: 6241:6246 ioctl 4018620d 0 returned -22 [ 125.084715][ T9] usb 3-1: config 0 descriptor?? [ 125.112403][ T9] usb 3-1: can't set config #0, error -71 [ 125.135351][ T1194] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 125.165785][ T9] usb 3-1: USB disconnect, device number 8 [ 125.348768][ T1194] usb 4-1: Using ep0 maxpacket: 16 [ 125.376949][ T1194] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.425630][ T1194] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.437952][ T1194] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 125.449609][ T1194] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.502459][ T1194] usb 4-1: config 0 descriptor?? [ 127.085487][ T1194] hid-multitouch 0003:1FD2:6007.0003: unknown main item tag 0x0 [ 127.181977][ T1194] hid-multitouch 0003:1FD2:6007.0003: unknown main item tag 0x0 [ 127.205466][ T1194] hid-multitouch 0003:1FD2:6007.0003: item fetching failed at offset 3/5 [ 127.231319][ T1194] hid-multitouch: probe of 0003:1FD2:6007.0003 failed with error -22 [ 127.334827][ T5884] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 127.383641][ T1194] usb 4-1: USB disconnect, device number 8 [ 127.446387][ T6262] netlink: set zone limit has 8 unknown bytes [ 127.550753][ T5884] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 35329, setting to 64 [ 127.588862][ T5884] usb 1-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 127.635730][ T5884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.764861][ T6277] netlink: 96 bytes leftover after parsing attributes in process `syz.2.106'. [ 127.768530][ T5884] usb 1-1: config 0 descriptor?? [ 128.066614][ T5884] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 129.438171][ T6276] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 129.445457][ T6276] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 129.452516][ T6276] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 129.459108][ T6276] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 129.466232][ T6276] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 129.472671][ T6276] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 129.479374][ T6276] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 129.665840][ T6276] x_tables: duplicate underflow at hook 2 [ 129.702395][ T6287] binder: 6285:6287 ioctl 4018620d 0 returned -22 [ 130.019379][ T1194] usb 1-1: USB disconnect, device number 9 [ 130.125326][ T5884] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 130.138589][ T6291] tipc: Started in network mode [ 130.143523][ T6291] tipc: Node identity 8eecf339b756, cluster identity 4711 [ 130.159447][ T6291] tipc: Enabled bearer , priority 0 [ 130.171895][ T6291] syzkaller0: entered promiscuous mode [ 130.180430][ T6291] syzkaller0: entered allmulticast mode [ 130.209920][ T6291] tipc: Resetting bearer [ 130.232720][ T6290] tipc: Resetting bearer [ 130.276199][ T6290] tipc: Disabling bearer [ 130.306467][ T5884] usb 3-1: Using ep0 maxpacket: 16 [ 130.315111][ T5884] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.327084][ T5884] usb 3-1: config 0 has no interfaces? [ 130.332710][ T5884] usb 3-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.00 [ 130.342435][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.497240][ T5884] usb 3-1: config 0 descriptor?? [ 132.381301][ T9] usb 3-1: USB disconnect, device number 9 [ 133.598867][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.615373][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.619729][ T6333] binder: 6326:6333 ioctl 4018620d 0 returned -22 [ 136.324189][ T6334] fuse: Bad value for 'group_id' [ 141.373432][ T6375] binder: 6370:6375 ioctl 4018620d 0 returned -22 [ 141.876377][ T6377] fuse: Bad value for 'group_id' [ 144.380006][ T6395] fuse: Bad value for 'group_id' [ 146.979964][ T6418] fuse: Bad value for 'group_id' [ 148.046708][ T6424] autofs4:pid:6424:autofs_fill_super: called with bogus options [ 149.039375][ T6433] netlink: 'syz.1.149': attribute type 2 has an invalid length. [ 149.051717][ T6433] netlink: 12 bytes leftover after parsing attributes in process `syz.1.149'. [ 150.680204][ T6444] tipc: Enabled bearer , priority 0 [ 150.723415][ T6444] syzkaller0: entered promiscuous mode [ 150.731571][ T6444] syzkaller0: entered allmulticast mode [ 150.903473][ T6444] tipc: Resetting bearer [ 150.945928][ T6443] tipc: Resetting bearer [ 150.990302][ T6443] tipc: Disabling bearer [ 151.100687][ T6454] netlink: 20 bytes leftover after parsing attributes in process `syz.1.153'. [ 151.145770][ T6454] netlink: 4 bytes leftover after parsing attributes in process `syz.1.153'. [ 152.957021][ T6468] autofs4:pid:6468:autofs_fill_super: called with bogus options [ 154.436291][ T6482] xt_CT: No such helper "pptp" [ 154.845518][ T1194] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 154.985364][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 155.064261][ T1194] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 35329, setting to 64 [ 155.149657][ T1194] usb 2-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 155.222569][ T1194] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.276477][ T1194] usb 2-1: config 0 descriptor?? [ 155.288731][ T1194] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 155.476203][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 155.593984][ T6497] netlink: 20 bytes leftover after parsing attributes in process `syz.2.165'. [ 155.612801][ T6497] netlink: 4 bytes leftover after parsing attributes in process `syz.2.165'. [ 155.637913][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 155.694426][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 155.733246][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.861989][ T9] usb 1-1: Product: syz [ 155.929489][ T9] usb 1-1: Manufacturer: syz [ 155.986012][ T9] usb 1-1: SerialNumber: syz [ 156.107680][ T9] usb 1-1: config 0 descriptor?? [ 156.149232][ T9] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 156.189027][ T9] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 156.721216][ T5804] usb 2-1: USB disconnect, device number 5 [ 157.025728][ T9] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 158.161261][ T9] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 158.190491][ T6518] autofs4:pid:6518:autofs_fill_super: called with bogus options [ 158.875370][ T9] em28xx 1-1:0.0: board has no eeprom [ 159.175270][ T9] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 159.183233][ T9] em28xx 1-1:0.0: dvb set to bulk mode. [ 159.936591][ T1194] em28xx 1-1:0.0: Binding DVB extension [ 160.045677][ T9] usb 1-1: USB disconnect, device number 10 [ 160.066339][ T9] em28xx 1-1:0.0: Disconnecting em28xx [ 160.129480][ T1194] em28xx 1-1:0.0: Registering input extension [ 160.150145][ T9] em28xx 1-1:0.0: Closing input extension [ 160.303491][ T9] em28xx 1-1:0.0: Freeing device [ 163.355297][ T6558] netlink: 96 bytes leftover after parsing attributes in process `syz.2.181'. [ 164.073978][ T6567] autofs4:pid:6567:autofs_fill_super: called with bogus options [ 165.165709][ T5884] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 165.862856][ T5884] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 35329, setting to 64 [ 165.908749][ T5884] usb 3-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 166.027084][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.121791][ T5884] usb 3-1: config 0 descriptor?? [ 166.166063][ T5884] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 169.309151][ T5877] usb 3-1: USB disconnect, device number 10 [ 172.011494][ T6611] autofs4:pid:6611:autofs_fill_super: called with bogus options [ 175.905675][ T6652] fuse: Unknown parameter '00000000000000000000' [ 177.750842][ T6669] netlink: 96 bytes leftover after parsing attributes in process `syz.1.210'. [ 178.145393][ T5884] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 178.361974][ T5884] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 35329, setting to 64 [ 178.561021][ T5884] usb 1-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 178.696809][ T5884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.707884][ T5884] usb 1-1: config 0 descriptor?? [ 178.741216][ T5884] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 180.241610][ T6687] fuse: Unknown parameter '00000000000000000000' [ 181.100142][ T5877] usb 1-1: USB disconnect, device number 11 [ 183.673035][ T6720] netlink: 96 bytes leftover after parsing attributes in process `syz.0.224'. [ 185.945463][ T6737] fuse: Unknown parameter 'user00000000000000000000' [ 186.585461][ T5884] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 186.593277][ T5843] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 186.825683][ T5884] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 35329, setting to 64 [ 186.837398][ T5843] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 35329, setting to 64 [ 186.935845][ T5884] usb 4-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 186.945071][ T5884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.953594][ T5843] usb 3-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 186.968927][ T5843] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.993285][ T5884] usb 4-1: config 0 descriptor?? [ 187.037173][ T5843] usb 3-1: config 0 descriptor?? [ 187.050566][ T5884] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 187.107320][ T5843] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 189.338234][ T5843] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 189.379294][ T1194] usb 4-1: USB disconnect, device number 9 [ 189.436761][ T5884] usb 3-1: USB disconnect, device number 11 [ 190.579382][ T6766] netlink: 96 bytes leftover after parsing attributes in process `syz.0.234'. [ 191.483584][ T6776] fuse: Unknown parameter 'user00000000000000000000' [ 191.704855][ T6774] binder: 6772:6774 ioctl 4018620d 0 returned -22 [ 191.713023][ T6774] binder: 6772:6774 ioctl c0306201 0 returned -14 [ 191.720300][ T6774] binder: 6772:6774 ioctl c0306201 200000000140 returned -11 [ 192.615373][ T1194] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 192.887548][ T1194] usb 2-1: device descriptor read/64, error -71 [ 193.258886][ T1194] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 193.515506][ T1194] usb 2-1: device descriptor read/64, error -71 [ 193.739664][ T1194] usb usb2-port1: attempt power cycle [ 194.602891][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.609404][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.625509][ T5877] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 195.905374][ T5877] usb 4-1: device descriptor read/64, error -71 [ 196.432401][ T5877] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 196.665458][ T5877] usb 4-1: device descriptor read/64, error -71 [ 196.876511][ T5877] usb usb4-port1: attempt power cycle [ 197.408085][ T5877] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 197.474933][ T6792] syzkaller0: entered promiscuous mode [ 197.550887][ T6792] syzkaller0: entered allmulticast mode [ 197.590758][ T5877] usb 4-1: device descriptor read/8, error -71 [ 200.412848][ T6806] netlink: 96 bytes leftover after parsing attributes in process `syz.2.248'. [ 200.765715][ T5884] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 201.025614][ T6817] binder: 6811:6817 ioctl 4018620d 0 returned -22 [ 201.039765][ T6817] binder: 6811:6817 ioctl c0306201 0 returned -14 [ 201.048820][ T6817] binder: 6811:6817 ioctl c0306201 200000000140 returned -11 [ 201.946178][ T5884] usb 2-1: device descriptor read/64, error -71 [ 202.225337][ T5884] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 202.440988][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 202.447706][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 202.453886][ T5796] Bluetooth: hci1: command 0x0406 tx timeout [ 202.460152][ T5793] Bluetooth: hci3: command 0x0406 tx timeout [ 205.217017][ T5804] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 205.516582][ T5804] usb 1-1: device descriptor read/64, error -71 [ 205.621655][ T6841] binder: 6835:6841 ioctl 4018620d 0 returned -22 [ 205.632438][ T6841] binder: 6835:6841 ioctl c0306201 0 returned -14 [ 205.640466][ T6841] binder: 6835:6841 ioctl c0306201 200000000140 returned -11 [ 206.591527][ T6827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.600539][ T6827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.609539][ T5804] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 206.643855][ T6844] netlink: 96 bytes leftover after parsing attributes in process `syz.2.261'. [ 207.525285][ T5804] usb 1-1: device descriptor read/64, error -71 [ 207.657171][ T5804] usb usb1-port1: attempt power cycle [ 209.795355][ T27] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 210.685565][ T27] usb 3-1: device descriptor read/64, error -71 [ 211.970649][ T6871] tipc: Enabled bearer , priority 0 [ 212.048447][ T6855] Driver unsupported XDP return value 0 on prog (id 59) dev N/A, expect packet loss! [ 212.059929][ T6871] syzkaller0: entered promiscuous mode [ 212.075309][ T6871] syzkaller0: entered allmulticast mode [ 212.339902][ T6876] binder: 6866:6876 ioctl 4018620d 0 returned -22 [ 212.350832][ T6876] binder: 6866:6876 ioctl c0306201 0 returned -14 [ 212.359193][ T6876] binder: 6866:6876 ioctl c0306201 200000000140 returned -11 [ 213.061255][ T6877] tipc: Resetting bearer [ 213.096668][ T5804] tipc: Node number set to 968553273 [ 213.139722][ T6865] tipc: Resetting bearer [ 213.206071][ T6865] tipc: Disabling bearer [ 214.685457][ T27] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 216.179458][ T27] usb 4-1: device descriptor read/64, error -71 [ 216.639791][ T27] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 217.121849][ T27] usb 4-1: device descriptor read/64, error -71 [ 217.420309][ T27] usb usb4-port1: attempt power cycle [ 218.405391][ T1194] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 218.484991][ T6917] binder: 6909:6917 ioctl 4018620d 0 returned -22 [ 218.496021][ T6917] binder: 6909:6917 ioctl c0306201 0 returned -14 [ 218.504118][ T6917] binder: 6909:6917 ioctl c0306201 200000000140 returned -11 [ 218.915531][ T1194] usb 1-1: Using ep0 maxpacket: 16 [ 219.067405][ T1194] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.558555][ T6923] fuseblk: Bad value for 'fd' [ 219.982051][ T1194] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.992111][ T1194] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 220.005434][ T1194] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 220.014724][ T1194] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.029938][ T1194] usb 1-1: config 0 descriptor?? [ 220.710211][ T1186] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 221.780078][ T1194] input: HID 0955:7214 Haptics as /devices/virtual/input/input15 [ 221.811230][ T1186] usb 4-1: device descriptor read/64, error -71 [ 223.001593][ T1194] shield 0003:0955:7214.0004: Registered Thunderstrike controller [ 223.079779][ T1186] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 223.866775][ T1194] shield 0003:0955:7214.0004: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 223.977414][ T5877] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 223.991832][ T1194] usb 1-1: USB disconnect, device number 15 [ 224.043648][ T5877] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 224.267025][ T5877] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 224.623695][ T5877] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 226.307157][ T6969] fuse: Unknown parameter 'group_i00000000000000000000' [ 228.307351][ T6982] input: syz1 as /devices/virtual/input/input17 [ 229.277521][ T6995] fuse: Unknown parameter 'group_id00000000000000000000' [ 231.552743][ T7011] xt_TPROXY: Can be used only with -p tcp or -p udp [ 231.815092][ T7019] fuse: Unknown parameter 'group_id00000000000000000000' [ 238.195552][ T5877] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 241.563135][ T7067] overlayfs: missing 'lowerdir' [ 245.346180][ T7100] netlink: 96 bytes leftover after parsing attributes in process `syz.1.327'. [ 246.110927][ T7113] overlayfs: missing 'lowerdir' [ 246.845338][ T1186] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 247.565270][ T1186] usb 2-1: Using ep0 maxpacket: 16 [ 247.572357][ T1186] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 247.594176][ T1186] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 247.704707][ T7121] wg1 speed is unknown, defaulting to 1000 [ 247.722757][ T7121] wg1 speed is unknown, defaulting to 1000 [ 247.757792][ T1186] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.779569][ T1186] usb 2-1: Product: syz [ 247.916788][ T7121] wg1 speed is unknown, defaulting to 1000 [ 247.922772][ T1186] usb 2-1: Manufacturer: syz [ 247.927817][ T1186] usb 2-1: SerialNumber: syz [ 247.946184][ T1186] usb 2-1: config 0 descriptor?? [ 248.011185][ T1186] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 248.382709][ T1186] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 248.658672][ T7121] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 248.879307][ T7121] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 249.052120][ T1186] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 249.240337][ T7121] wg1 speed is unknown, defaulting to 1000 [ 249.330387][ T7134] fuse: Unknown parameter 'group_id00000000000000000000' [ 250.121828][ T7121] wg1 speed is unknown, defaulting to 1000 [ 250.131117][ T7121] wg1 speed is unknown, defaulting to 1000 [ 250.167428][ T7121] wg1 speed is unknown, defaulting to 1000 [ 250.197551][ T1186] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 250.231848][ T1186] em28xx 2-1:0.0: board has no eeprom [ 251.773383][ T1186] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 251.804226][ T7144] netlink: 96 bytes leftover after parsing attributes in process `syz.0.337'. [ 251.835340][ T1186] em28xx 2-1:0.0: dvb set to bulk mode. [ 251.851702][ T8] em28xx 2-1:0.0: Binding DVB extension [ 252.017432][ T1186] usb 2-1: USB disconnect, device number 13 [ 252.195713][ T1186] em28xx 2-1:0.0: Disconnecting em28xx [ 253.007498][ T8] em28xx 2-1:0.0: Registering input extension [ 253.013960][ T1186] em28xx 2-1:0.0: Closing input extension [ 253.848302][ T1186] em28xx 2-1:0.0: Freeing device [ 254.684843][ T8] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 254.888425][ T7171] netlink: 96 bytes leftover after parsing attributes in process `syz.0.341'. [ 255.187479][ T8] usb 4-1: device descriptor read/64, error -71 [ 255.576439][ T1186] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 255.592293][ T8] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 255.795271][ T8] usb 4-1: device descriptor read/64, error -71 [ 255.852443][ T1186] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 35329, setting to 64 [ 256.041240][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.047981][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.473170][ T8] usb usb4-port1: attempt power cycle [ 256.529366][ T1186] usb 2-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 256.642429][ T1186] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.972456][ T1186] usb 2-1: config 0 descriptor?? [ 257.172159][ T8] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 257.210670][ T1186] usb 2-1: can't set config #0, error -71 [ 257.265354][ T1194] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 257.296683][ T1186] usb 2-1: USB disconnect, device number 14 [ 257.325634][ T8] usb 4-1: device descriptor read/8, error -71 [ 257.485375][ T1194] usb 3-1: Using ep0 maxpacket: 16 [ 257.503387][ T1194] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.856387][ T7163] x_tables: duplicate underflow at hook 2 [ 257.897938][ T1194] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.942270][ T1194] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 257.962242][ T1194] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.049682][ T1194] usb 3-1: config 0 descriptor?? [ 258.662328][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 258.755971][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 258.769324][ T1194] usbhid 3-1:0.0: can't add hid device: -71 [ 258.794040][ T1194] usbhid: probe of 3-1:0.0 failed with error -71 [ 258.985487][ T1194] usb 3-1: USB disconnect, device number 14 [ 261.945520][ T5855] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 262.145397][ T5855] usb 4-1: device descriptor read/64, error -71 [ 266.675234][ T7245] binder: 7237:7245 ioctl 4018620d 0 returned -22 [ 266.720499][ T7245] binder: 7237:7245 ioctl c0306201 0 returned -14 [ 270.815337][ T5877] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 271.299892][ T5877] usb 2-1: device descriptor read/64, error -71 [ 271.955244][ T5877] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 272.355348][ T5877] usb 2-1: device descriptor read/64, error -71 [ 272.652021][ T5877] usb usb2-port1: attempt power cycle [ 273.895143][ C0] sched: RT throttling activated [ 276.913536][ T7315] sctp: [Deprecated]: syz.3.381 (pid 7315) Use of int in max_burst socket option deprecated. [ 276.913536][ T7315] Use struct sctp_assoc_value instead [ 277.015346][ T5877] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 277.280027][ T7323] fuse: Bad value for 'fd' [ 277.381140][ T7324] fuse: Unknown parameter 'fd0x0000000000000006' [ 278.045250][ T5877] usb 3-1: Using ep0 maxpacket: 32 [ 278.066544][ T5877] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.205395][ T5877] usb 3-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 278.438606][ T1194] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 278.474442][ T5877] usb 3-1: config 0 interface 0 has no altsetting 0 [ 278.567953][ T5877] usb 3-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 278.667749][ T5877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.708294][ T1194] usb 4-1: device descriptor read/64, error -71 [ 278.842834][ T5877] usb 3-1: config 0 descriptor?? [ 279.083251][ T1194] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 282.282904][ T7337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.293191][ T7337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.435747][ T1194] usb 4-1: device descriptor read/64, error -71 [ 282.981371][ T1194] usb usb4-port1: attempt power cycle [ 283.013311][ T5877] usbhid 3-1:0.0: can't add hid device: -71 [ 283.055835][ T5877] usbhid: probe of 3-1:0.0 failed with error -71 [ 283.089110][ T5877] usb 3-1: USB disconnect, device number 15 [ 285.065291][ T7353] autofs4:pid:7353:autofs_fill_super: called with bogus options [ 287.222912][ T7369] fuse: Unknown parameter 'fd0x0000000000000006' [ 287.281352][ T7370] overlayfs: missing 'lowerdir' [ 290.145838][ T7381] overlayfs: failed to decode file handle (len=24, type=196859, flags=0, err=-22) [ 290.164045][ T7381] No source specified [ 291.017868][ T7396] xt_TPROXY: Can be used only with -p tcp or -p udp [ 292.374487][ T7411] overlayfs: missing 'lowerdir' [ 293.269441][ T7414] autofs4:pid:7414:autofs_fill_super: called with bogus options [ 301.344763][ T7455] overlayfs: missing 'lowerdir' [ 303.025381][ T5843] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 304.046284][ T5843] usb 1-1: Using ep0 maxpacket: 16 [ 304.078607][ T5843] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.094625][ T5843] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 304.122348][ T5843] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 304.143927][ T5843] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.176906][ T5843] usb 1-1: config 0 descriptor?? [ 304.809278][ T5843] usbhid 1-1:0.0: can't add hid device: -71 [ 304.818414][ T5843] usbhid: probe of 1-1:0.0 failed with error -71 [ 304.851437][ T5843] usb 1-1: USB disconnect, device number 16 [ 305.686508][ T7496] xt_TPROXY: Can be used only with -p tcp or -p udp [ 307.388354][ T7506] overlayfs: missing 'lowerdir' [ 310.243476][ T7536] netlink: 96 bytes leftover after parsing attributes in process `syz.1.438'. [ 311.059246][ T7543] overlayfs: missing 'lowerdir' [ 311.599548][ T7534] process '/newroot/106/file0' started with executable stack [ 312.919832][ T7557] binder: 7551:7557 ioctl 4018620d 0 returned -22 [ 312.931423][ T7557] binder: 7551:7557 ioctl c0306201 0 returned -14 [ 316.670435][ T7588] overlayfs: missing 'lowerdir' [ 317.897126][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.909426][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.115655][ T7596] syz.0.455[7596]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 320.775817][ T7621] syz.0.460: attempt to access beyond end of device [ 320.775817][ T7621] loop0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 326.708370][ T5855] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 327.295714][ T5855] usb 2-1: device descriptor read/64, error -71 [ 327.575350][ T5855] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 327.764958][ T7649] vcan0: tx drop: invalid sa for name 0xfffffffffffffffc [ 327.772820][ T5855] usb 2-1: device descriptor read/64, error -71 [ 328.002161][ T5855] usb usb2-port1: attempt power cycle [ 328.180416][ T7653] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 333.332866][ T27] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 334.272933][ T27] usb 4-1: device descriptor read/64, error -71 [ 334.555602][ T27] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 334.725445][ T27] usb 4-1: device descriptor read/64, error -71 [ 334.898110][ T27] usb usb4-port1: attempt power cycle [ 336.457080][ T7715] batadv_slave_1: entered promiscuous mode [ 336.470290][ T7715] netlink: set zone limit has 8 unknown bytes [ 337.032643][ T7711] batadv_slave_1: left promiscuous mode [ 338.605029][ T7733] vcan0: tx drop: invalid sa for name 0xfffffffffffffffc [ 341.120299][ T7745] autofs4:pid:7745:autofs_fill_super: called with bogus options [ 341.729065][ T7754] batadv_slave_1: entered promiscuous mode [ 342.245876][ T7746] batadv_slave_1: left promiscuous mode [ 342.584971][ T7766] vcan0: tx drop: invalid sa for name 0xfffffffffffffffc [ 345.778723][ T7804] syz.2.507: attempt to access beyond end of device [ 345.778723][ T7804] loop2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 345.902964][ T7796] batadv_slave_1: entered promiscuous mode [ 346.282768][ T7795] batadv_slave_1: left promiscuous mode [ 346.601769][ T7812] xt_CT: No such helper "pptp" [ 349.551857][ T7839] batadv_slave_1: entered promiscuous mode [ 349.945525][ T7845] vcan0: tx drop: invalid sa for name 0xfffffffffffffffc [ 350.335034][ T7835] batadv_slave_1: left promiscuous mode [ 351.447549][ T1194] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 351.635423][ T1194] usb 3-1: Using ep0 maxpacket: 16 [ 351.825213][ T1194] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.995198][ T1194] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 352.005030][ T1194] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 352.163243][ T1194] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.407401][ T1194] usb 3-1: config 0 descriptor?? [ 353.147043][ T1194] hid-multitouch 0003:1FD2:6007.0005: unknown main item tag 0x0 [ 353.165671][ T1194] hid-multitouch 0003:1FD2:6007.0005: unknown main item tag 0x0 [ 353.173490][ T1194] hid-multitouch 0003:1FD2:6007.0005: item fetching failed at offset 3/5 [ 353.184523][ T1194] hid-multitouch: probe of 0003:1FD2:6007.0005 failed with error -22 [ 354.140232][ T5804] usb 3-1: USB disconnect, device number 16 [ 355.440544][ T7887] autofs4:pid:7887:autofs_fill_super: called with bogus options [ 356.065364][ T7890] batadv_slave_1: entered promiscuous mode [ 357.012299][ T7880] batadv_slave_1: left promiscuous mode [ 359.771254][ T7913] Bluetooth: MGMT ver 1.22 [ 360.009215][ T7922] netlink: 'syz.2.542': attribute type 1 has an invalid length. [ 360.257854][ T7915] xt_CT: No such helper "pptp" [ 361.397653][ T7931] netlink: 96 bytes leftover after parsing attributes in process `syz.1.544'. [ 361.544850][ T7937] batadv_slave_1: entered promiscuous mode [ 362.573213][ T7932] batadv_slave_1: left promiscuous mode [ 363.785277][ T7956] fuseblk: Bad value for 'fd' [ 365.831972][ T7975] tipc: Enabling of bearer rejected, failed to enable media [ 366.274722][ T7985] syz_tun: entered allmulticast mode [ 367.870069][ T7990] batadv_slave_1: entered promiscuous mode [ 368.327581][ T7977] batadv_slave_1: left promiscuous mode [ 369.145069][ T7984] syz_tun: left allmulticast mode [ 369.646385][ T8003] fuseblk: Bad value for 'fd' [ 372.482448][ T8025] siw: device registration error -23 [ 372.783941][ T8038] syz.0.573: attempt to access beyond end of device [ 372.783941][ T8038] loop0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 373.667240][ T8039] batadv_slave_1: entered promiscuous mode [ 374.155881][ T8022] batadv_slave_1: left promiscuous mode [ 374.222450][ T8040] xt_CT: No such helper "pptp" [ 378.022348][ T8084] binder: 8075:8084 ioctl 4018620d 0 returned -22 [ 378.084318][ T8084] binder: 8075:8084 ioctl c0306201 0 returned -14 [ 378.953044][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.959539][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.262395][ T8087] batadv_slave_1: entered promiscuous mode [ 379.837292][ T8077] batadv_slave_1: left promiscuous mode [ 380.540523][ T8090] xt_CT: No such helper "pptp" [ 381.039900][ T8106] libceph: resolve '4' (ret=-3): failed [ 383.572703][ T8124] binder: 8118:8124 ioctl 4018620d 0 returned -22 [ 383.617557][ T8124] binder: 8118:8124 ioctl c0306201 0 returned -14 [ 386.964136][ T8136] xt_CT: No such helper "pptp" [ 389.314705][ T8162] binder: 8152:8162 ioctl 4018620d 0 returned -22 [ 389.385726][ T8162] binder: 8152:8162 ioctl c0306201 0 returned -14 [ 392.935585][ T8177] autofs4:pid:8177:autofs_fill_super: called with bogus options [ 394.466443][ T8197] binder: 8190:8197 ioctl 4018620d 0 returned -22 [ 394.477624][ T8197] binder: 8190:8197 ioctl c0306201 0 returned -14 [ 399.600704][ T8232] binder: 8227:8232 ioctl 4018620d 0 returned -22 [ 399.612136][ T8232] binder: 8227:8232 ioctl c0306201 0 returned -14 [ 400.756105][ T8237] autofs4:pid:8237:autofs_fill_super: called with bogus options [ 400.885063][ T8239] xt_CT: No such helper "pptp" [ 404.193826][ T8273] binder: 8267:8273 ioctl 4018620d 0 returned -22 [ 404.202477][ T8273] binder: 8267:8273 ioctl c0306201 0 returned -14 [ 404.694910][ T8277] vxcan1: entered allmulticast mode [ 404.713919][ T8277] vxcan1: left allmulticast mode [ 404.888139][ T8279] xt_CT: No such helper "pptp" [ 408.684792][ T8307] binder: 8300:8307 ioctl 4018620d 0 returned -22 [ 408.694532][ T8307] binder: 8300:8307 ioctl c0306201 0 returned -14 [ 409.122623][ T8310] xt_CT: No such helper "pptp" [ 412.165297][ T5912] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 412.218475][ T8353] binder: 8342:8353 ioctl 4018620d 0 returned -22 [ 412.229432][ T8353] binder: 8342:8353 ioctl c0306201 0 returned -14 [ 412.372590][ T5912] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 35329, setting to 64 [ 412.937202][ T5912] usb 3-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 412.994240][ T5912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.209518][ T5912] usb 3-1: config 0 descriptor?? [ 413.274938][ T5912] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 413.380169][ T8358] xt_CT: No such helper "pptp" [ 413.521371][ T5912] usb 3-1: USB disconnect, device number 17 [ 415.930192][ T8387] binder: 8383:8387 ioctl 4018620d 0 returned -22 [ 415.941619][ T8387] binder: 8383:8387 ioctl c0306201 0 returned -14 [ 417.214889][ T8393] xt_CT: No such helper "pptp" [ 418.057205][ T5855] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 418.515828][ T5855] usb 4-1: Using ep0 maxpacket: 16 [ 418.541944][ T5855] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 418.565210][ T5855] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 418.591031][ T5855] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 418.625345][ T5855] usb 4-1: config 1 interface 0 has no altsetting 0 [ 418.651329][ T5855] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 418.661075][ T5855] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.775208][ T5855] usb 4-1: Product: syz [ 418.779816][ T5855] usb 4-1: Manufacturer: syz [ 418.784865][ T5855] usb 4-1: SerialNumber: syz [ 419.076403][ T5855] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 31 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 419.489688][ T8427] binder: 8422:8427 ioctl 4018620d 0 returned -22 [ 419.499486][ T8427] binder: 8422:8427 ioctl c0306201 0 returned -14 [ 420.292416][ T8428] autofs4:pid:8428:autofs_fill_super: called with bogus options [ 420.323468][ T8394] usblp0:failed reading printer status (-32) [ 420.340327][ T23] usb 4-1: USB disconnect, device number 31 [ 420.371292][ T23] usblp0: removed [ 420.876037][ T8435] netlink: 96 bytes leftover after parsing attributes in process `syz.0.681'. [ 420.907928][ T8435] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 420.914530][ T8435] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 420.926054][ T8435] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 420.933468][ T8435] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 420.941115][ T8435] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 420.947962][ T8435] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 420.958399][ T8435] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 421.072904][ T8435] x_tables: duplicate underflow at hook 2 [ 421.505297][ T8440] xt_CT: No such helper "pptp" [ 423.835584][ T8460] binder: 8457:8460 ioctl 4018620d 0 returned -22 [ 423.846386][ T8460] binder: 8457:8460 ioctl c0306201 0 returned -14 [ 424.798169][ T8466] netlink: 96 bytes leftover after parsing attributes in process `syz.2.691'. [ 424.835604][ T8466] x_tables: duplicate underflow at hook 2 [ 425.191832][ T8467] capability: warning: `syz.0.690' uses 32-bit capabilities (legacy support in use) [ 427.701610][ T8491] binder: 8488:8491 ioctl 4018620d 0 returned -22 [ 427.712283][ T8491] binder: 8488:8491 ioctl c0306201 0 returned -14 [ 428.701903][ T8496] netlink: 96 bytes leftover after parsing attributes in process `syz.1.701'. [ 428.775023][ T8496] x_tables: duplicate underflow at hook 2 [ 430.816533][ T8509] xt_CT: No such helper "pptp" [ 432.209029][ T8526] binder: 8521:8526 ioctl 4018620d 0 returned -22 [ 432.219172][ T8526] binder: 8521:8526 ioctl c0306201 0 returned -14 [ 433.523173][ T8532] netlink: 96 bytes leftover after parsing attributes in process `syz.1.711'. [ 433.537421][ T8532] x_tables: duplicate underflow at hook 2 [ 434.319874][ T8541] ipvlan2: entered promiscuous mode [ 434.329198][ T8541] bridge0: port 3(ipvlan2) entered blocking state [ 434.346496][ T8541] bridge0: port 3(ipvlan2) entered disabled state [ 434.370176][ T8541] ipvlan2: entered allmulticast mode [ 434.398625][ T8541] bridge0: entered allmulticast mode [ 434.442944][ T8541] ipvlan2: left allmulticast mode [ 434.491619][ T8541] bridge0: left allmulticast mode [ 437.147971][ T8564] binder: 8559:8564 ioctl 4018620d 0 returned -22 [ 437.195206][ T8564] binder: 8559:8564 ioctl c0306201 0 returned -14 [ 438.090449][ T8567] x_tables: duplicate underflow at hook 2 [ 440.372579][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.382078][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.323217][ T8594] syz.3.729: attempt to access beyond end of device [ 441.323217][ T8594] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 441.324564][ T8589] netlink: 12 bytes leftover after parsing attributes in process `syz.2.725'. [ 441.644898][ T8589] vlan2: entered promiscuous mode [ 441.690013][ T8589] dummy0: entered promiscuous mode [ 442.136953][ T8604] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 442.143782][ T8604] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 442.154140][ T8604] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 442.163994][ T8604] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 442.210107][ T8604] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 442.222080][ T8604] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 442.229892][ T8604] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 442.385457][ T8600] x_tables: duplicate underflow at hook 2 [ 447.599654][ T8636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.739'. [ 447.780989][ T8650] x_tables: duplicate underflow at hook 2 [ 451.617588][ T8678] netlink: 16 bytes leftover after parsing attributes in process `syz.0.752'. [ 451.667482][ T8678] bridge0: entered promiscuous mode [ 451.676500][ T8678] bridge0: port 3(macvlan2) entered blocking state [ 451.684186][ T8678] bridge0: port 3(macvlan2) entered disabled state [ 451.691691][ T8678] macvlan2: entered allmulticast mode [ 451.699021][ T8678] bridge0: entered allmulticast mode [ 451.973293][ T8678] macvlan2: left allmulticast mode [ 452.006911][ T8678] bridge0: left allmulticast mode [ 453.737359][ T8678] bridge0: left promiscuous mode [ 454.328316][ T8691] x_tables: duplicate underflow at hook 2 [ 454.781717][ T8693] autofs4:pid:8693:autofs_fill_super: called with bogus options [ 461.816318][ T8767] syz.1.778: attempt to access beyond end of device [ 461.816318][ T8767] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 466.559191][ T8807] syz.0.789: attempt to access beyond end of device [ 466.559191][ T8807] loop0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 471.097163][ T8840] syz.0.800: attempt to access beyond end of device [ 471.097163][ T8840] loop0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 475.555849][ T8876] syz.2.811: attempt to access beyond end of device [ 475.555849][ T8876] loop2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 476.339267][ T8888] batadv_slave_1: entered promiscuous mode [ 476.504262][ T8888] netlink: set zone limit has 8 unknown bytes [ 476.911786][ T8882] batadv_slave_1: left promiscuous mode [ 478.299308][ T8916] netlink: 4 bytes leftover after parsing attributes in process `syz.2.819'. [ 479.930315][ T8928] syz.2.822: attempt to access beyond end of device [ 479.930315][ T8928] loop2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 481.350983][ T23] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 481.362833][ T5804] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 481.550248][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 35329, setting to 64 [ 481.566170][ T5804] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 35329, setting to 64 [ 481.578472][ T23] usb 4-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 481.588556][ T5804] usb 2-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 481.598139][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.606680][ T5804] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.645335][ T23] usb 4-1: config 0 descriptor?? [ 481.661460][ T5804] usb 2-1: config 0 descriptor?? [ 481.671007][ T8941] batadv_slave_1: entered promiscuous mode [ 481.674592][ T23] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 481.711348][ T5804] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 481.812268][ T8941] netlink: set zone limit has 8 unknown bytes [ 482.147122][ T8931] batadv_slave_1: left promiscuous mode [ 482.395125][ C0] hrtimer: interrupt took 80188 ns [ 483.841131][ T5804] usb 4-1: USB disconnect, device number 32 [ 484.331365][ T23] usb 2-1: USB disconnect, device number 21 [ 485.819562][ T8986] netlink: 16 bytes leftover after parsing attributes in process `syz.1.841'. [ 485.851766][ T8986] bridge0: entered promiscuous mode [ 485.873895][ T8986] bridge0: port 3(macvlan2) entered blocking state [ 485.907816][ T8986] bridge0: port 3(macvlan2) entered disabled state [ 485.961280][ T8986] macvlan2: entered allmulticast mode [ 486.001246][ T8986] bridge0: entered allmulticast mode [ 486.054896][ T8986] macvlan2: left allmulticast mode [ 486.102157][ T8986] bridge0: left allmulticast mode [ 486.158238][ T8986] bridge0: left promiscuous mode [ 490.020681][ T9018] syz.3.850: attempt to access beyond end of device [ 490.020681][ T9018] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 495.638972][ T9065] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 495.648132][ T9065] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 495.656946][ T9065] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 495.665697][ T9065] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 498.685406][ T5804] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 498.985310][ T5804] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 35329, setting to 64 [ 499.731613][ T5804] usb 2-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 499.741266][ T5804] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.752215][ T5804] usb 2-1: config 0 descriptor?? [ 499.762535][ T5804] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 500.830099][ T5804] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 501.194527][ T5804] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 35329, setting to 64 [ 501.217070][ T9120] batadv_slave_1: entered promiscuous mode [ 501.217418][ T5804] usb 4-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 501.240393][ T5804] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.278923][ T5804] usb 4-1: config 0 descriptor?? [ 501.307842][ T5804] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 501.416589][ T9120] netlink: set zone limit has 8 unknown bytes [ 501.691663][ T9123] syz.0.877: attempt to access beyond end of device [ 501.691663][ T9123] loop0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 501.728063][ T9114] batadv_slave_1: left promiscuous mode [ 501.801413][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.808063][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.822057][ T9] usb 2-1: USB disconnect, device number 22 [ 502.990277][ T5912] usb 4-1: USB disconnect, device number 33 [ 504.166605][ T5912] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 504.365184][ T5912] usb 4-1: Using ep0 maxpacket: 16 [ 505.157090][ T5912] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 505.201201][ T5912] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 505.222722][ T5912] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 505.245961][ T5912] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 505.261076][ T5912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.282580][ T5912] usb 4-1: config 0 descriptor?? [ 505.930581][ T5912] input: HID 0955:7214 Haptics as /devices/virtual/input/input27 [ 505.972332][ T5912] shield 0003:0955:7214.0006: Registered Thunderstrike controller [ 506.026067][ T5912] shield 0003:0955:7214.0006: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 506.192435][ T1186] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 506.227982][ T9151] batadv_slave_1: entered promiscuous mode [ 506.330845][ T5912] usb 4-1: USB disconnect, device number 34 [ 506.341028][ T1186] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 506.403069][ T1186] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 506.416339][ T9151] netlink: set zone limit has 8 unknown bytes [ 506.448170][ T1186] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 506.462271][ T9150] batadv_slave_1: left promiscuous mode [ 508.605345][ T23] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 509.441778][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 35329, setting to 64 [ 509.484746][ T23] usb 2-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 509.514746][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.544656][ T23] usb 2-1: config 0 descriptor?? [ 509.584412][ T23] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 511.268672][ T9202] autofs4:pid:9202:autofs_fill_super: called with bogus options [ 512.104355][ T9203] batadv_slave_1: entered promiscuous mode [ 512.120996][ T9203] netlink: set zone limit has 8 unknown bytes [ 512.213995][ T9195] batadv_slave_1: left promiscuous mode [ 513.513241][ T9220] netlink: 96 bytes leftover after parsing attributes in process `syz.2.905'. [ 513.612757][ T23] usb 2-1: USB disconnect, device number 23 [ 517.733210][ T9248] netlink: 96 bytes leftover after parsing attributes in process `syz.3.915'. [ 519.172588][ T9] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 519.266711][ T9268] autofs4:pid:9268:autofs_fill_super: called with bogus options [ 519.768360][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 35329, setting to 64 [ 519.792313][ T9] usb 4-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 519.812138][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.855584][ T9] usb 4-1: config 0 descriptor?? [ 519.882690][ T9] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 522.183997][ T9] usb 4-1: USB disconnect, device number 35 [ 522.845187][ T9277] netlink: 8 bytes leftover after parsing attributes in process `syz.3.923'. [ 523.117108][ T9287] netlink: 96 bytes leftover after parsing attributes in process `syz.2.926'. [ 523.497943][ T9294] autofs4:pid:9294:autofs_fill_super: called with bogus options [ 526.645876][ T9310] netlink: 'syz.0.934': attribute type 10 has an invalid length. [ 526.687667][ T9310] syz_tun: entered promiscuous mode [ 526.697700][ T9312] ptrace attach of "./syz-executor exec"[5795] was attempted by ""[9312] [ 526.811148][ T9310] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 527.816075][ T9321] netlink: 8 bytes leftover after parsing attributes in process `syz.0.937'. [ 527.920985][ T9324] netlink: 96 bytes leftover after parsing attributes in process `syz.2.938'. [ 528.875336][ T9] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 529.108178][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 35329, setting to 64 [ 529.225205][ T9] usb 2-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 529.243298][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.265627][ T9] usb 2-1: config 0 descriptor?? [ 530.931329][ T9] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 531.136164][ T9] usb 2-1: USB disconnect, device number 24 [ 531.698952][ T9353] netlink: 96 bytes leftover after parsing attributes in process `syz.3.948'. [ 533.169256][ T9360] netlink: 8 bytes leftover after parsing attributes in process `syz.3.949'. [ 534.935200][ T23] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 535.488996][ T9369] vivid-000: disconnect [ 535.498879][ T9369] vivid-000: reconnect [ 535.575559][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 35329, setting to 64 [ 535.597300][ T23] usb 4-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 535.616420][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.650594][ T23] usb 4-1: config 0 descriptor?? [ 535.678229][ T23] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 536.512537][ T9387] netlink: 96 bytes leftover after parsing attributes in process `syz.1.958'. [ 537.973675][ T9397] netlink: 44 bytes leftover after parsing attributes in process `syz.1.959'. [ 538.414400][ T1186] usb 4-1: USB disconnect, device number 36 [ 539.002588][ T9401] netlink: 'syz.2.962': attribute type 10 has an invalid length. [ 539.061152][ T9401] syz_tun: entered promiscuous mode [ 539.102644][ T9401] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 540.266874][ T9410] syz.0.964: attempt to access beyond end of device [ 540.266874][ T9410] loop0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 540.415421][ T9416] netlink: 96 bytes leftover after parsing attributes in process `syz.2.967'. [ 542.661500][ T9437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.971'. [ 542.685594][ T9437] netlink: 4 bytes leftover after parsing attributes in process `syz.2.971'. [ 543.917113][ T9444] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 543.923627][ T9444] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 543.972401][ T9444] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 544.000600][ T9444] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 544.034353][ T9444] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 544.135263][ T9444] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 544.163365][ T9444] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 544.266341][ T9444] x_tables: duplicate underflow at hook 2 [ 544.293862][ T9450] netlink: 96 bytes leftover after parsing attributes in process `syz.1.976'. [ 548.191552][ T9478] x_tables: duplicate underflow at hook 2 [ 548.234743][ T9480] netlink: 96 bytes leftover after parsing attributes in process `syz.2.987'. [ 549.181069][ T9485] bridge1: entered promiscuous mode [ 549.340066][ T9485] bridge1: entered allmulticast mode [ 549.368679][ T9485] team0: Port device bridge1 added [ 552.777871][ T9508] vxcan1: entered allmulticast mode [ 553.534695][ T9514] x_tables: duplicate underflow at hook 2 [ 553.536136][ T9516] netlink: 96 bytes leftover after parsing attributes in process `syz.0.997'. [ 558.767004][ T9553] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 558.807229][ T9553] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 558.813922][ T9553] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 558.821445][ T9553] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 558.837326][ T9553] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 558.897729][ T9554] x_tables: duplicate underflow at hook 2 [ 558.915156][ T9553] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 558.921970][ T9553] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 559.225771][ T9559] netlink: 'syz.2.1009': attribute type 10 has an invalid length. [ 560.508257][ T9564] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1010'. [ 561.058473][ T9569] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 561.067290][ T9569] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 561.076068][ T9569] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 561.084782][ T9569] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 561.612476][ T9582] x_tables: duplicate underflow at hook 2 [ 561.900242][ T9586] ======================================================= [ 561.900242][ T9586] WARNING: The mand mount option has been deprecated and [ 561.900242][ T9586] and is ignored by this kernel. Remove the mand [ 561.900242][ T9586] option from the mount to silence this warning. [ 561.900242][ T9586] ======================================================= [ 563.336021][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.342497][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.365336][ T5804] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 563.581537][ T5804] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 35329, setting to 64 [ 563.790637][ T5804] usb 3-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 563.800459][ T5804] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.817097][ T9598] netlink: 'syz.3.1021': attribute type 10 has an invalid length. [ 563.829029][ T5804] usb 3-1: config 0 descriptor?? [ 563.859558][ T5804] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 563.883147][ T9598] syz_tun: entered promiscuous mode [ 564.412229][ T9598] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 565.395345][ T9615] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1023'. [ 565.933196][ T5804] usb 3-1: USB disconnect, device number 18 [ 566.013536][ T9617] x_tables: duplicate underflow at hook 2 [ 566.436964][ T9622] vivid-002: disconnect [ 566.468242][ T9622] vivid-002: reconnect [ 568.817781][ T9650] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 568.841703][ T9650] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 568.931318][ T9650] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 569.424362][ T9650] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 569.461908][ T9654] x_tables: duplicate underflow at hook 2 [ 569.482681][ T9650] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 569.902619][ T9650] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 569.936158][ T9650] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 570.711218][ T9651] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1036'. [ 572.652917][ T9661] vivid-000: disconnect [ 572.735735][ T9659] vivid-000: reconnect [ 574.142421][ T9685] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1047'. [ 574.557432][ T9688] x_tables: duplicate underflow at hook 2 [ 575.900579][ T9704] bridge1: entered promiscuous mode [ 575.927957][ T9704] bridge1: entered allmulticast mode [ 577.098231][ T9714] x_tables: duplicate underflow at hook 2 [ 577.125640][ T9716] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1057'. [ 578.849780][ T9742] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 578.866461][ T9742] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 578.878455][ T9742] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 578.888202][ T9742] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 578.898215][ T9742] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 578.905741][ T9742] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 578.908267][ T9746] x_tables: duplicate underflow at hook 2 [ 578.912502][ T9742] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 578.929258][ T9747] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1069'. [ 580.445157][ T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 582.605380][ T9] usb 3-1: device not accepting address 19, error -71 [ 582.634331][ T9777] x_tables: duplicate underflow at hook 2 [ 584.069644][ T9794] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1085'. [ 586.538442][ T9807] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 586.545169][ T9807] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 586.551846][ T9807] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 586.559176][ T9807] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 586.567462][ T9807] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 586.574083][ T9807] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 586.584078][ T9807] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 586.599924][ T9807] x_tables: duplicate underflow at hook 2 [ 588.087039][ T9821] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1095'. [ 588.724200][ T9829] x_tables: duplicate underflow at hook 2 [ 591.523279][ T9853] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1106'. [ 591.817488][ T9856] x_tables: duplicate underflow at hook 2 [ 594.012235][ T9881] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 594.018897][ T9881] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 594.025838][ T9881] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 594.032847][ T9881] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 594.040330][ T9881] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 594.047313][ T9881] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 594.054129][ T9881] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 594.065945][ T9881] x_tables: duplicate underflow at hook 2 [ 596.466929][ T9905] siw: device registration error -23 [ 597.262616][ T9909] x_tables: duplicate underflow at hook 2 [ 598.658098][ T9920] bridge2: entered promiscuous mode [ 598.663422][ T9920] bridge2: entered allmulticast mode [ 599.316707][ T9938] x_tables: duplicate underflow at hook 2 [ 599.805774][ T9946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1139'. [ 601.766946][ T9960] syz.1.1142: attempt to access beyond end of device [ 601.766946][ T9960] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 602.048176][ T23] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 602.672320][ T23] usb 4-1: device descriptor read/64, error -71 [ 603.155448][ T23] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 603.232191][ T9969] x_tables: duplicate underflow at hook 2 [ 603.335316][ T23] usb 4-1: device descriptor read/64, error -71 [ 603.455361][ T23] usb usb4-port1: attempt power cycle [ 605.636165][ T9993] syz.2.1153: attempt to access beyond end of device [ 605.636165][ T9993] loop2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 607.315366][ T5804] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 607.961260][ T5804] usb 3-1: device descriptor read/64, error -71 [ 608.285128][ T5804] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 608.475249][ T5804] usb 3-1: device descriptor read/64, error -71 [ 608.597120][ T5804] usb usb3-port1: attempt power cycle [ 609.065646][ T5804] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 609.129107][ T5804] usb 3-1: device descriptor read/8, error -71 [ 609.400777][T10026] wg1 speed is unknown, defaulting to 1000 [ 609.425578][ T5804] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 609.474520][ T5804] usb 3-1: device descriptor read/8, error -71 [ 609.595479][ T5804] usb usb3-port1: unable to enumerate USB device [ 610.296891][T10044] syz.1.1167: attempt to access beyond end of device [ 610.296891][T10044] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 612.190641][T10061] netlink: 'syz.1.1177': attribute type 1 has an invalid length. [ 612.303149][T10061] 8021q: adding VLAN 0 to HW filter on device bond1 [ 612.385866][T10064] bond1: (slave geneve2): making interface the new active one [ 612.400418][T10064] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 613.215306][ T5912] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 613.638545][ T5912] usb 2-1: device descriptor read/64, error -71 [ 613.986056][T10076] x_tables: duplicate underflow at hook 2 [ 614.132547][T10077] can0: slcan on ttyS3. [ 614.171381][ T5912] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 614.429111][T10077] can0 (unregistered): slcan off ttyS3. [ 614.545113][ T5912] usb 2-1: device descriptor read/64, error -71 [ 614.755819][ T5912] usb usb2-port1: attempt power cycle [ 615.888909][ T5912] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 616.185952][ T5912] usb 2-1: device descriptor read/8, error -71 [ 616.605596][ T5912] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 617.580010][ T5912] usb 2-1: device descriptor read/8, error -71 [ 617.802369][T10100] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1186'. [ 617.821783][ T5912] usb usb2-port1: unable to enumerate USB device [ 618.463881][T10108] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 618.471729][T10108] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 618.478356][T10108] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 618.485374][T10108] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 618.492681][T10108] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 618.499656][T10108] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 618.506787][T10108] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 618.517849][T10108] x_tables: duplicate underflow at hook 2 [ 621.977259][T10135] autofs4:pid:10135:autofs_fill_super: called with bogus options [ 622.636472][T10142] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 622.660165][T10142] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 622.684707][T10142] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 622.694862][T10142] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 622.733245][T10142] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 622.741121][T10144] x_tables: duplicate underflow at hook 2 [ 622.743361][T10142] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 622.802487][T10142] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 624.758455][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.764962][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.986741][T10178] syz.3.1206: attempt to access beyond end of device [ 626.986741][T10178] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 627.785630][T10182] autofs4:pid:10182:autofs_fill_super: called with bogus options [ 628.432527][T10189] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 628.445174][T10189] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 628.461991][T10189] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 628.472217][T10189] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 628.494164][T10189] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 628.510041][T10189] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 628.529211][T10189] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 628.542673][T10189] x_tables: duplicate underflow at hook 2 [ 628.857675][T10198] ALSA: mixer_oss: invalid index 40000 [ 630.945282][ T23] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 631.234965][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 35329, setting to 64 [ 631.347971][ T23] usb 2-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 631.433882][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.559032][ T23] usb 2-1: config 0 descriptor?? [ 631.668667][ T23] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 633.520183][ T23] usb 2-1: USB disconnect, device number 29 [ 633.720101][T10233] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1220'. [ 636.765208][ T5912] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 638.249059][ T5912] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 35329, setting to 64 [ 638.316224][ T5912] usb 4-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 638.320095][T10268] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1230'. [ 638.325623][ T5912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.567993][ T5912] usb 4-1: config 0 descriptor?? [ 638.696044][ T5912] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 643.587407][ T5912] usb 4-1: USB disconnect, device number 40 [ 643.670960][T10281] vivid-003: disconnect [ 643.700926][T10281] vivid-003: reconnect [ 645.651291][T10294] warning: `syz.3.1238' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 645.873218][T10296] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1240'. [ 647.953368][T10314] vivid-000: disconnect [ 647.958416][T10314] vivid-000: reconnect [ 649.674511][T10330] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1247'. [ 650.086439][T10334] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1250'. [ 650.402580][T10344] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1254'. [ 651.728721][T10360] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1260'. [ 651.854390][T10365] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1261'. [ 652.715319][T10378] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1265'. [ 652.724553][T10378] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1265'. [ 653.567430][T10386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1267'. [ 655.573437][T10396] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1270'. [ 655.606134][T10404] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1272'. [ 656.254276][T10410] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1274'. [ 656.264824][T10410] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1274'. [ 657.348792][T10428] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1281'. [ 657.758838][T10435] syz.0.1280: attempt to access beyond end of device [ 657.758838][T10435] loop0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 658.523539][T10433] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1282'. [ 658.680714][T10439] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1284'. [ 658.698525][T10439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1284'. [ 659.485654][T10449] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1285'. [ 662.967617][T10473] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1293'. [ 663.071728][T10477] syz.0.1294: attempt to access beyond end of device [ 663.071728][T10477] loop0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 663.902653][T10479] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1295'. [ 663.911905][T10479] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1295'. [ 664.285343][T10490] bridge1: entered promiscuous mode [ 664.301245][T10490] bridge1: entered allmulticast mode [ 664.609010][T10490] team0: Port device bridge1 added [ 665.079889][T10499] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1302'. [ 665.768806][T10510] syz.1.1304: attempt to access beyond end of device [ 665.768806][T10510] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 666.410071][T10514] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1307'. [ 666.468539][T10514] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1307'. [ 671.334277][T10540] bridge2: entered promiscuous mode [ 671.352246][T10540] bridge2: entered allmulticast mode [ 671.422364][T10540] team0: Port device bridge2 added [ 671.648677][T10546] syz.3.1315: attempt to access beyond end of device [ 671.648677][T10546] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 686.123324][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.129795][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 697.400504][T10767] syz.3.1381: attempt to access beyond end of device [ 697.400504][T10767] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 699.162351][T10784] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1385'. [ 705.879181][T10834] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1399'. [ 705.888431][T10834] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1399'. [ 709.205079][ T5912] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 709.437389][ T5912] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 709.476854][ T5912] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 709.718002][ T5912] usb 2-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 709.751808][ T5912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.780231][ T5912] usb 2-1: config 0 descriptor?? [ 709.811933][ T5912] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 711.358268][ T5912] usb 2-1: USB disconnect, device number 30 [ 712.047098][T10874] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1410'. [ 712.130533][T10874] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1410'. [ 713.198277][T10885] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1413'. [ 716.642798][T10912] netlink: 'syz.1.1421': attribute type 10 has an invalid length. [ 716.652255][T10912] syz_tun: entered promiscuous mode [ 716.688692][T10912] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 725.095450][ T5804] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 725.340467][ T5804] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 725.385952][ T5804] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 725.588266][ T5804] usb 3-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 725.683732][ T5804] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.684607][ T5804] usb 3-1: config 0 descriptor?? [ 728.515456][ T5855] usb 3-1: USB disconnect, device number 25 [ 734.341475][T11035] netlink: 'syz.1.1454': attribute type 10 has an invalid length. [ 736.652932][T11053] syz.0.1457: attempt to access beyond end of device [ 736.652932][T11053] loop0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 747.665571][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.671947][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 751.436415][T11150] netlink: 'syz.0.1482': attribute type 10 has an invalid length. [ 758.458635][T11203] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1492'. [ 766.381320][T11277] syz.3.1510: attempt to access beyond end of device [ 766.381320][T11277] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 767.636181][T11284] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1511'. [ 770.561134][T11318] vivid-000: disconnect [ 770.568484][T11318] vivid-000: reconnect [ 773.060031][T11351] vivid-001: disconnect [ 773.065337][T11351] vivid-001: reconnect [ 773.221302][T11352] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1529'. [ 776.542294][T11383] vivid-003: disconnect [ 776.547954][T11383] vivid-003: reconnect [ 776.998219][T11393] syz.3.1543: attempt to access beyond end of device [ 776.998219][T11393] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 780.495345][T11416] vivid-002: disconnect [ 780.526521][T11416] vivid-002: reconnect [ 781.062412][T11423] syz.3.1553: attempt to access beyond end of device [ 781.062412][T11423] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 790.206449][T11506] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1574'. [ 792.658498][T11530] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1583'. [ 792.728829][ T28] audit: type=1804 audit(1755744386.414:2): pid=11532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1581" name="file0" dev="ramfs" ino=30435 res=1 errno=0 [ 795.734609][T11551] vivid-002: disconnect [ 795.740115][T11551] vivid-002: reconnect [ 796.601862][T11566] syz.1.1590: attempt to access beyond end of device [ 796.601862][T11566] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 800.177304][T11593] vivid-000: disconnect [ 800.182151][T11593] vivid-000: reconnect [ 801.237493][T11606] syz.3.1600: attempt to access beyond end of device [ 801.237493][T11606] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 801.567482][ T5789] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 803.864972][T11633] vivid-003: disconnect [ 803.901357][T11633] vivid-003: reconnect [ 805.912814][ T2924] Bluetooth: hci4: Frame reassembly failed (-84) [ 807.955091][ T5789] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 807.955179][T11591] Bluetooth: hci4: command 0xfc11 tx timeout [ 809.005874][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.023296][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 811.423939][T11709] syz.1.1625: attempt to access beyond end of device [ 811.423939][T11709] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 815.435492][T11744] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1636'. [ 820.268171][ T23] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 820.693084][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 35329, setting to 64 [ 820.775050][ T23] usb 2-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 820.791987][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.833263][ T23] usb 2-1: config 0 descriptor?? [ 820.867810][ T23] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 820.879187][T11791] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1647'. [ 822.999948][ T23] usb 2-1: USB disconnect, device number 31 [ 827.664957][T11752] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 828.289160][T11864] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 828.297967][T11864] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 828.308080][T11864] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 828.317019][T11864] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 829.036569][T11752] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 35329, setting to 64 [ 829.064997][T11752] usb 4-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 829.074195][T11752] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.102965][T11752] usb 4-1: config 0 descriptor?? [ 829.130304][T11752] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 830.754596][ T23] usb 4-1: USB disconnect, device number 41 [ 832.479987][T11899] syz.2.1670: attempt to access beyond end of device [ 832.479987][T11899] loop2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 840.236442][T11944] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 853.150441][T12075] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1723'. [ 855.125513][T12092] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1725'. [ 856.455439][ T5855] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 856.723283][ T5855] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 35329, setting to 64 [ 856.905353][ T5855] usb 2-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 856.953425][ T5855] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 856.993957][ T5855] usb 2-1: config 0 descriptor?? [ 857.087291][ T5855] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 858.770317][T12129] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 858.780126][T12129] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 858.862134][T12130] mmap: syz.2.1735 (12130) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 859.814498][T11752] usb 2-1: USB disconnect, device number 32 [ 870.546477][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.552838][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 874.523871][T12215] delete_channel: no stack [ 876.429322][T12246] trusted_key: syz.1.1765 sent an empty control message without MSG_MORE. [ 882.949609][T12287] JFS: discard option not supported on device [ 882.958700][T12287] Mount JFS Failure: -22 [ 882.963005][T12287] jfs_mount failed w/return code = -22 [ 882.981499][T12296] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1777'. [ 882.994288][T12296] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1777'. [ 885.304527][T12312] UBIFS error (pid: 12312): cannot open "", error -22 [ 886.375072][T12195] Bluetooth: hci4: Frame reassembly failed (-84) [ 886.424119][T12327] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 888.436519][ T5105] Bluetooth: hci4: command 0x1003 tx timeout [ 888.444285][T11672] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 892.399347][T12379] ISOFS: Unable to identify CD-ROM format. [ 893.953026][T12386] overlayfs: failed to resolve './file0': -2 [ 893.960632][T12386] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1806'. [ 897.235335][ T5105] Bluetooth: hci0: command 0x0406 tx timeout [ 897.266109][T11672] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 900.604484][T12472] netlink: 'syz.2.1831': attribute type 20 has an invalid length. [ 900.745189][ T5804] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 900.782936][T12472] dvmrp17: entered allmulticast mode [ 901.285056][ T5804] usb 4-1: Using ep0 maxpacket: 8 [ 901.309974][ T5804] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 901.321103][ T5804] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 902.069530][ T5105] Bluetooth: hci0: command 0x0406 tx timeout [ 902.071861][T11672] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 902.105253][ T5804] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 902.137514][ T5804] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 902.200102][ T5804] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 902.222384][ T5804] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.265965][ T5804] hub 4-1:1.0: bad descriptor, ignoring hub [ 902.288862][ T5804] hub: probe of 4-1:1.0 failed with error -5 [ 902.400196][T12482] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1834'. [ 902.436999][ T5804] cdc_wdm 4-1:1.0: skipping garbage [ 902.793244][ T5804] cdc_wdm 4-1:1.0: skipping garbage [ 902.846371][ T5804] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 902.861336][ T5804] cdc_wdm 4-1:1.0: Unknown control protocol [ 902.929154][T12485] ISOFS: Unable to identify CD-ROM format. [ 902.955736][ T5804] usb 4-1: USB disconnect, device number 42 [ 908.956587][T12515] ISOFS: Unable to identify CD-ROM format. [ 911.100098][T11672] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 911.108853][ T5105] Bluetooth: hci0: command 0x0406 tx timeout [ 914.867954][T12583] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1868'. [ 917.873358][T12597] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1872'. [ 918.201119][T12617] fuse: Bad value for 'fd' [ 919.444179][T12627] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1880'. [ 922.901002][T12655] fuse: Bad value for 'fd' [ 924.199358][T12660] syz.0.1890: attempt to access beyond end of device [ 924.199358][T12660] loop0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 924.813317][T12665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1892'. [ 927.234719][T12684] fuse: Bad value for 'fd' [ 929.006294][T12695] syz.3.1900: attempt to access beyond end of device [ 929.006294][T12695] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 931.965311][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.971730][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.118756][T12721] UBIFS error (pid: 12721): cannot open "usrquota", error -22 [ 933.843404][T12732] sctp: [Deprecated]: syz.0.1910 (pid 12732) Use of struct sctp_assoc_value in delayed_ack socket option. [ 933.843404][T12732] Use struct sctp_sack_info instead [ 935.141933][T12743] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1913'. [ 939.067699][T12756] UBIFS error (pid: 12756): cannot open "usrquota", error -22 [ 940.054978][T12768] usb usb8: usbfs: process 12768 (syz.0.1921) did not claim interface 63 before use [ 941.096460][T12777] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1924'. [ 947.072332][T12796] bpq0: entered allmulticast mode [ 947.192481][T12805] ISOFS: Unable to identify CD-ROM format. [ 947.427664][T12812] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1933'. [ 950.989094][T12852] UBIFS error (pid: 12852): cannot open "usrquota", error -22 [ 957.091885][T12884] UBIFS error (pid: 12884): cannot open "usrquota", error -22 [ 962.498225][T12913] UBIFS error (pid: 12913): cannot open "usrquota", error -22 [ 962.867960][T12920] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1965'. [ 965.083822][T12930] vivid-001: disconnect [ 965.159252][T12927] vivid-001: reconnect [ 969.755472][T12948] UBIFS error (pid: 12948): cannot open "usrquota", error -22 [ 970.094293][T12959] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1976'. [ 972.059752][T12969] syz.3.1979: attempt to access beyond end of device [ 972.059752][T12969] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 973.013882][T12986] UBIFS error (pid: 12986): cannot open "usrquota", error -22 [ 973.914676][T12973] vivid-001: disconnect [ 973.932100][T12973] vivid-001: reconnect [ 974.124934][T12999] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1987'. [ 975.130979][T13019] UBIFS error (pid: 13019): cannot open "usrquota", error -22 [ 975.230709][T13022] syz.2.1992: attempt to access beyond end of device [ 975.230709][T13022] loop2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 976.345867][T13027] vivid-000: disconnect [ 976.364071][T13027] vivid-000: reconnect [ 977.302203][T13037] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1998'. [ 979.246696][T13067] syz.0.2004: attempt to access beyond end of device [ 979.246696][T13067] loop0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 980.343130][T13069] vivid-003: disconnect [ 980.361798][T13069] vivid-003: reconnect [ 981.114895][T13078] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2009'. [ 983.762087][T13109] syz.2.2016: attempt to access beyond end of device [ 983.762087][T13109] loop2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 985.045352][T13113] vivid-001: disconnect [ 985.247883][T13113] vivid-001: reconnect [ 985.408842][T13122] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2021'. [ 991.447586][T13166] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2033'. [ 992.484730][T13182] syz.0.2036: attempt to access beyond end of device [ 992.484730][T13182] loop0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 992.650626][T12195] Bluetooth: hci4: Frame reassembly failed (-84) [ 993.330456][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.338012][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.787269][T11672] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 994.809552][ T5105] Bluetooth: hci4: command 0xfc11 tx timeout [ 995.885214][T13211] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2043'. [ 998.830279][ T9356] Bluetooth: hci4: Frame reassembly failed (-84) [ 999.911168][T13251] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1000.835236][ T5789] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 1000.842564][T11672] Bluetooth: hci4: command 0xfc11 tx timeout [ 1001.684607][T13270] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2059'. [ 1002.370405][T13278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2064'. [ 1006.741091][ T12] Bluetooth: hci4: Frame reassembly failed (-84) [ 1007.500709][T13304] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1007.514357][T13304] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1008.595038][ T5789] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 1008.602896][ T5105] Bluetooth: hci4: command 0xfc11 tx timeout [ 1008.840472][T13315] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2076'. [ 1015.576234][ T48] Bluetooth: hci4: Frame reassembly failed (-84) [ 1015.909168][T13364] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2088'. [ 1017.364749][ T5789] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 1022.120983][ T6608] Bluetooth: hci4: Frame reassembly failed (-84) [ 1024.196227][ T5105] Bluetooth: hci4: command 0xfc11 tx timeout [ 1024.203349][ T5789] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 1031.395003][ T5789] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 1032.035106][T13448] vivid-001: disconnect [ 1032.044953][T13448] vivid-001: reconnect [ 1048.555195][T13544] vivid-000: disconnect [ 1048.592016][T13544] vivid-000: reconnect [ 1055.405879][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.412443][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1059.337745][T13625] vivid-001: disconnect [ 1059.376877][T13625] vivid-001: reconnect [ 1060.046891][T13641] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1060.058070][T13641] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1067.565158][ T23] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1067.771442][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 35329, setting to 64 [ 1067.805135][ T23] usb 3-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 1067.847557][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1067.898167][ T23] usb 3-1: config 0 descriptor?? [ 1067.933140][ T23] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1070.880568][ T5912] usb 3-1: USB disconnect, device number 26 [ 1074.997516][T13727] vivid-000: disconnect [ 1075.094086][T13734] vivid-000: reconnect [ 1084.860111][T13802] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1084.869742][T13802] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1084.878534][T13802] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1084.887368][T13802] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1090.037035][ T5789] Bluetooth: hci4: command 0x1003 tx timeout [ 1090.050136][ T5105] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1092.177287][T13839] bpq0: left allmulticast mode [ 1093.144944][T13845] ================================================================== [ 1093.153073][T13845] BUG: KASAN: slab-use-after-free in rose_transmit_link+0x5ba/0x740 [ 1093.161078][T13845] Read of size 1 at addr ffff8880196c3032 by task syz.1.2213/13845 [ 1093.169001][T13845] [ 1093.171386][T13845] CPU: 1 PID: 13845 Comm: syz.1.2213 Not tainted 6.6.102-syzkaller #0 [ 1093.179543][T13845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1093.189622][T13845] Call Trace: [ 1093.192918][T13845] [ 1093.195861][T13845] dump_stack_lvl+0x16c/0x230 [ 1093.200559][T13845] ? __lock_acquire+0x7c80/0x7c80 [ 1093.205622][T13845] ? show_regs_print_info+0x20/0x20 [ 1093.210859][T13845] ? load_image+0x3b0/0x3b0 [ 1093.215410][T13845] ? _raw_spin_lock_irqsave+0xb4/0xf0 [ 1093.220831][T13845] ? __virt_addr_valid+0x18c/0x540 [ 1093.225964][T13845] ? __virt_addr_valid+0x469/0x540 [ 1093.231091][T13845] print_report+0xac/0x220 [ 1093.235517][T13845] ? rose_transmit_link+0x5ba/0x740 [ 1093.240720][T13845] kasan_report+0x117/0x150 [ 1093.245247][T13845] ? kmem_cache_alloc_node+0x17f/0x330 [ 1093.250750][T13845] ? rose_transmit_link+0x5ba/0x740 [ 1093.256002][T13845] rose_transmit_link+0x5ba/0x740 [ 1093.261043][T13845] ? skb_put+0x11b/0x210 [ 1093.265327][T13845] rose_write_internal+0x11d1/0x1ab0 [ 1093.270662][T13845] ? rose_validate_nr+0x120/0x120 [ 1093.275743][T13845] ? __timer_delete+0x6b/0x290 [ 1093.280549][T13845] ? skb_queue_purge_reason+0x6c/0x1c0 [ 1093.286124][T13845] rose_release+0x24e/0x510 [ 1093.290645][T13845] sock_close+0xbd/0x230 [ 1093.294934][T13845] ? sock_mmap+0xa0/0xa0 [ 1093.299191][T13845] __fput+0x234/0x970 [ 1093.303192][T13845] task_work_run+0x1ce/0x250 [ 1093.307800][T13845] ? task_work_cancel+0x240/0x240 [ 1093.312896][T13845] get_signal+0x1235/0x1400 [ 1093.317433][T13845] ? task_work_add+0x3a3/0x440 [ 1093.322228][T13845] ? __ia32_sys_pidfd_getfd+0x90/0x90 [ 1093.327622][T13845] ? wake_bit_function+0x200/0x200 [ 1093.332749][T13845] ? __might_fault+0xaa/0x120 [ 1093.337528][T13845] arch_do_signal_or_restart+0x96/0x780 [ 1093.343089][T13845] ? __sys_connect+0x240/0x420 [ 1093.347862][T13845] ? get_sigframe_size+0x20/0x20 [ 1093.352826][T13845] ? exit_to_user_mode_loop+0x3b/0x110 [ 1093.358292][T13845] exit_to_user_mode_loop+0x70/0x110 [ 1093.363586][T13845] exit_to_user_mode_prepare+0xb1/0x140 [ 1093.369150][T13845] syscall_exit_to_user_mode+0x1a/0x50 [ 1093.374622][T13845] do_syscall_64+0x61/0xb0 [ 1093.379059][T13845] ? clear_bhb_loop+0x40/0x90 [ 1093.383748][T13845] ? clear_bhb_loop+0x40/0x90 [ 1093.388484][T13845] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1093.394388][T13845] RIP: 0033:0x7fa28ab8ebe9 [ 1093.398807][T13845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1093.420470][T13845] RSP: 002b:00007fa28ba35038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1093.428901][T13845] RAX: fffffffffffffe00 RBX: 00007fa28adb6090 RCX: 00007fa28ab8ebe9 [ 1093.436992][T13845] RDX: 0000000000000040 RSI: 0000200000000100 RDI: 0000000000000009 [ 1093.445008][T13845] RBP: 00007fa28ac11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1093.452986][T13845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1093.460961][T13845] R13: 00007fa28adb6128 R14: 00007fa28adb6090 R15: 00007ffd931986f8 [ 1093.469033][T13845] [ 1093.472053][T13845] [ 1093.474377][T13845] Allocated by task 12801: [ 1093.478797][T13845] kasan_set_track+0x4e/0x70 [ 1093.483398][T13845] __kasan_kmalloc+0x8f/0xa0 [ 1093.487993][T13845] rose_add_node+0x23a/0xdd0 [ 1093.492585][T13845] rose_rt_ioctl+0xa42/0xfb0 [ 1093.497182][T13845] rose_ioctl+0x3cf/0x8b0 [ 1093.501513][T13845] sock_do_ioctl+0xd7/0x2f0 [ 1093.506023][T13845] sock_ioctl+0x623/0x7a0 [ 1093.510359][T13845] __se_sys_ioctl+0xfd/0x170 [ 1093.514951][T13845] do_syscall_64+0x55/0xb0 [ 1093.519370][T13845] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1093.525276][T13845] [ 1093.527597][T13845] Freed by task 13839: [ 1093.531670][T13845] kasan_set_track+0x4e/0x70 [ 1093.536268][T13845] kasan_save_free_info+0x2e/0x50 [ 1093.541296][T13845] ____kasan_slab_free+0x126/0x1e0 [ 1093.546430][T13845] slab_free_freelist_hook+0x130/0x1b0 [ 1093.551984][T13845] __kmem_cache_free+0xba/0x1f0 [ 1093.556844][T13845] rose_rt_device_down+0x43d/0x490 [ 1093.561965][T13845] rose_device_event+0x604/0x690 [ 1093.566918][T13845] notifier_call_chain+0x197/0x390 [ 1093.572125][T13845] __dev_notify_flags+0x18e/0x2e0 [ 1093.577164][T13845] dev_change_flags+0xe8/0x1a0 [ 1093.581932][T13845] dev_ifsioc+0x6a7/0xe20 [ 1093.586260][T13845] dev_ioctl+0x7e2/0x1170 [ 1093.590587][T13845] sock_do_ioctl+0x226/0x2f0 [ 1093.595202][T13845] sock_ioctl+0x623/0x7a0 [ 1093.599540][T13845] __se_sys_ioctl+0xfd/0x170 [ 1093.604135][T13845] do_syscall_64+0x55/0xb0 [ 1093.608554][T13845] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1093.614571][T13845] [ 1093.616896][T13845] Last potentially related work creation: [ 1093.622609][T13845] kasan_save_stack+0x3e/0x60 [ 1093.627297][T13845] __kasan_record_aux_stack+0xaf/0xc0 [ 1093.632772][T13845] insert_work+0x3d/0x310 [ 1093.637107][T13845] __queue_work+0xd2c/0x1020 [ 1093.641703][T13845] call_timer_fn+0x16e/0x530 [ 1093.646293][T13845] __run_timers+0x558/0x7d0 [ 1093.650797][T13845] run_timer_softirq+0x67/0xf0 [ 1093.655571][T13845] handle_softirqs+0x280/0x820 [ 1093.660333][T13845] __irq_exit_rcu+0xc7/0x190 [ 1093.664926][T13845] irq_exit_rcu+0x9/0x20 [ 1093.669255][T13845] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1093.674898][T13845] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1093.680895][T13845] [ 1093.683218][T13845] Second to last potentially related work creation: [ 1093.689797][T13845] kasan_save_stack+0x3e/0x60 [ 1093.694474][T13845] __kasan_record_aux_stack+0xaf/0xc0 [ 1093.699854][T13845] insert_work+0x3d/0x310 [ 1093.704206][T13845] __queue_work+0xd2c/0x1020 [ 1093.708807][T13845] call_timer_fn+0x16e/0x530 [ 1093.713396][T13845] __run_timers+0x558/0x7d0 [ 1093.717900][T13845] run_timer_softirq+0x67/0xf0 [ 1093.722858][T13845] handle_softirqs+0x280/0x820 [ 1093.727628][T13845] __irq_exit_rcu+0xc7/0x190 [ 1093.732222][T13845] irq_exit_rcu+0x9/0x20 [ 1093.736467][T13845] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1093.742105][T13845] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1093.748099][T13845] [ 1093.750426][T13845] The buggy address belongs to the object at ffff8880196c3000 [ 1093.750426][T13845] which belongs to the cache kmalloc-512 of size 512 [ 1093.764504][T13845] The buggy address is located 50 bytes inside of [ 1093.764504][T13845] freed 512-byte region [ffff8880196c3000, ffff8880196c3200) [ 1093.778229][T13845] [ 1093.780559][T13845] The buggy address belongs to the physical page: [ 1093.786979][T13845] page:ffffea000065b000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x196c0 [ 1093.797150][T13845] head:ffffea000065b000 order:2 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1093.806535][T13845] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1093.814554][T13845] page_type: 0xffffffff() [ 1093.818895][T13845] raw: 00fff00000000840 ffff888017841c80 ffffea00017a7e00 dead000000000002 [ 1093.827482][T13845] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 1093.836076][T13845] page dumped because: kasan: bad access detected [ 1093.842575][T13845] page_owner tracks the page as allocated [ 1093.848300][T13845] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 4040903135, free_ts 3999948427 [ 1093.868720][T13845] post_alloc_hook+0x1cd/0x210 [ 1093.873531][T13845] get_page_from_freelist+0x195c/0x19f0 [ 1093.879094][T13845] __alloc_pages+0x1e3/0x460 [ 1093.883703][T13845] alloc_page_interleave+0x24/0x1e0 [ 1093.888919][T13845] alloc_slab_page+0x5d/0x170 [ 1093.893606][T13845] new_slab+0x87/0x2e0 [ 1093.897684][T13845] ___slab_alloc+0xc6d/0x12f0 [ 1093.902369][T13845] __kmem_cache_alloc_node+0x1a2/0x260 [ 1093.907836][T13845] kmalloc_trace+0x2a/0xe0 [ 1093.912256][T13845] device_add+0xbe/0xc20 [ 1093.916511][T13845] tty_register_device_attr+0x401/0x8f0 [ 1093.922152][T13845] tty_register_driver+0x5a9/0xb20 [ 1093.927269][T13845] vty_init+0x1fa/0x300 [ 1093.931439][T13845] tty_init+0x152/0x190 [ 1093.935615][T13845] do_one_initcall+0x1fd/0x750 [ 1093.940395][T13845] do_initcall_level+0x137/0x1f0 [ 1093.945344][T13845] page last free stack trace: [ 1093.950014][T13845] free_unref_page_prepare+0x7ce/0x8e0 [ 1093.955483][T13845] free_unref_page+0x32/0x2e0 [ 1093.960169][T13845] __stack_depot_save+0x572/0x630 [ 1093.965197][T13845] kasan_set_track+0x5f/0x70 [ 1093.969787][T13845] __kasan_kmalloc+0x8f/0xa0 [ 1093.974377][T13845] __tty_alloc_driver+0x9c/0x410 [ 1093.979322][T13845] vty_init+0xc5/0x300 [ 1093.983471][T13845] tty_init+0x152/0x190 [ 1093.987628][T13845] do_one_initcall+0x1fd/0x750 [ 1093.992419][T13845] do_initcall_level+0x137/0x1f0 [ 1093.997368][T13845] do_initcalls+0x69/0xd0 [ 1094.001703][T13845] kernel_init_freeable+0x3d2/0x570 [ 1094.006911][T13845] kernel_init+0x1d/0x1c0 [ 1094.011242][T13845] ret_from_fork+0x48/0x80 [ 1094.015689][T13845] ret_from_fork_asm+0x11/0x20 [ 1094.020501][T13845] [ 1094.022827][T13845] Memory state around the buggy address: [ 1094.028474][T13845] ffff8880196c2f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1094.036553][T13845] ffff8880196c2f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1094.044633][T13845] >ffff8880196c3000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1094.052693][T13845] ^ [ 1094.058323][T13845] ffff8880196c3080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1094.066390][T13845] ffff8880196c3100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1094.074449][T13845] ================================================================== [ 1094.115582][T13845] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1094.122829][T13845] CPU: 0 PID: 13845 Comm: syz.1.2213 Not tainted 6.6.102-syzkaller #0 [ 1094.130990][T13845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1094.142453][T13845] Call Trace: [ 1094.145731][T13845] [ 1094.148671][T13845] dump_stack_lvl+0x16c/0x230 [ 1094.153348][T13845] ? show_regs_print_info+0x20/0x20 [ 1094.158719][T13845] ? load_image+0x3b0/0x3b0 [ 1094.163227][T13845] panic+0x2c0/0x710 [ 1094.167118][T13845] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1094.173284][T13845] ? bpf_jit_dump+0xd0/0xd0 [ 1094.177786][T13845] ? _raw_spin_unlock_irqrestore+0xfa/0x110 [ 1094.183720][T13845] ? _raw_spin_unlock+0x40/0x40 [ 1094.188596][T13845] ? rose_transmit_link+0x5ba/0x740 [ 1094.193818][T13845] check_panic_on_warn+0x84/0xa0 [ 1094.198758][T13845] ? rose_transmit_link+0x5ba/0x740 [ 1094.203954][T13845] end_report+0x6f/0x140 [ 1094.208195][T13845] kasan_report+0x128/0x150 [ 1094.212693][T13845] ? kmem_cache_alloc_node+0x17f/0x330 [ 1094.218150][T13845] ? rose_transmit_link+0x5ba/0x740 [ 1094.223346][T13845] rose_transmit_link+0x5ba/0x740 [ 1094.228391][T13845] ? skb_put+0x11b/0x210 [ 1094.232652][T13845] rose_write_internal+0x11d1/0x1ab0 [ 1094.237956][T13845] ? rose_validate_nr+0x120/0x120 [ 1094.242979][T13845] ? __timer_delete+0x6b/0x290 [ 1094.247741][T13845] ? skb_queue_purge_reason+0x6c/0x1c0 [ 1094.253200][T13845] rose_release+0x24e/0x510 [ 1094.257699][T13845] sock_close+0xbd/0x230 [ 1094.261950][T13845] ? sock_mmap+0xa0/0xa0 [ 1094.266202][T13845] __fput+0x234/0x970 [ 1094.270217][T13845] task_work_run+0x1ce/0x250 [ 1094.274930][T13845] ? task_work_cancel+0x240/0x240 [ 1094.280083][T13845] get_signal+0x1235/0x1400 [ 1094.284680][T13845] ? task_work_add+0x3a3/0x440 [ 1094.289437][T13845] ? __ia32_sys_pidfd_getfd+0x90/0x90 [ 1094.294810][T13845] ? wake_bit_function+0x200/0x200 [ 1094.299930][T13845] ? __might_fault+0xaa/0x120 [ 1094.304621][T13845] arch_do_signal_or_restart+0x96/0x780 [ 1094.310181][T13845] ? __sys_connect+0x240/0x420 [ 1094.314941][T13845] ? get_sigframe_size+0x20/0x20 [ 1094.319962][T13845] ? exit_to_user_mode_loop+0x3b/0x110 [ 1094.325421][T13845] exit_to_user_mode_loop+0x70/0x110 [ 1094.330714][T13845] exit_to_user_mode_prepare+0xb1/0x140 [ 1094.336256][T13845] syscall_exit_to_user_mode+0x1a/0x50 [ 1094.341711][T13845] do_syscall_64+0x61/0xb0 [ 1094.346121][T13845] ? clear_bhb_loop+0x40/0x90 [ 1094.350798][T13845] ? clear_bhb_loop+0x40/0x90 [ 1094.355467][T13845] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1094.361353][T13845] RIP: 0033:0x7fa28ab8ebe9 [ 1094.365767][T13845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1094.385378][T13845] RSP: 002b:00007fa28ba35038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1094.393785][T13845] RAX: fffffffffffffe00 RBX: 00007fa28adb6090 RCX: 00007fa28ab8ebe9 [ 1094.401764][T13845] RDX: 0000000000000040 RSI: 0000200000000100 RDI: 0000000000000009 [ 1094.409769][T13845] RBP: 00007fa28ac11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1094.417746][T13845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1094.425724][T13845] R13: 00007fa28adb6128 R14: 00007fa28adb6090 R15: 00007ffd931986f8 [ 1094.433697][T13845] [ 1094.436845][T13845] Kernel Offset: disabled [ 1094.441167][T13845] Rebooting in 86400 seconds..