last executing test programs: 50.078682584s ago: executing program 4 (id=3322): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x7, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000300000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000000300)=@base={0x10, 0x4, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000a40)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = syz_open_dev$usbfs(&(0x7f0000000040), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x802, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 48.558195614s ago: executing program 4 (id=3324): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x7, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000000300)=@base={0x10, 0x4, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x2, 0x3, 0x9) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) fspick(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0) r5 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x693, @empty}, 0x1c) write$binfmt_misc(r5, 0x0, 0xfff7) write$binfmt_misc(r5, &(0x7f0000001b40), 0xfff7) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000001640)=@raw={'raw\x00', 0x3c1, 0x3, 0x468, 0x170, 0x1170, 0x1170, 0x170, 0x1170, 0x398, 0x1398, 0x1398, 0x398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [], [], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x84, 0x0, 0x0, 0x10}, 0x0, 0x128, 0x170, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e20]}}, @common=@unspec=@connmark={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'netpci0\x00'}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @local, @remote, @remote, @private2, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @local}, @mcast1, @empty, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @mcast1, @remote]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c8) 47.481227876s ago: executing program 4 (id=3326): socket$alg(0x26, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x48000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x68431b178f719cb2}, 0x20000000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="7800000018002507b9409b14ffff00000202be04020506056403040c5c0009003f0020010a0000000d0085a168d0bf46d32345653600648d270012000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160008000a00000000", 0x69, 0x0, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 0000409'], 0x2a, 0xfffffffffffffffc) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040), &(0x7f0000000000), &(0x7f00000002c0)='s', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r7, @ANYBLOB="0c00990000000200000000000800a00094090000080026009409000008002700000000000800a1"], 0x48}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000005207157ebf96f6b334b524", @ANYRES32=r10, @ANYBLOB="0c00990009000000680000000400bf00"], 0x2c}, 0x1, 0x0, 0x0, 0xc854}, 0x0) 39.484537783s ago: executing program 4 (id=3342): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)=0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0x4141, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000019340), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$kcm(0x2, 0x3, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ct={0x58, 0x0, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @ipv4={'\x00', '\xff\xff', @multicast2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r3 = syz_io_uring_setup(0x24f5, &(0x7f0000000080)={0x0, 0x89aa, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r4, r5, 0x0) io_uring_enter(r3, 0x0, 0x400000, 0x1, 0x0, 0x0) io_uring_enter(r3, 0x52e, 0x0, 0x0, 0x0, 0x0) quotactl_fd$Q_GETINFO(0xffffffffffffffff, 0xffffffff80000501, r1, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000019380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b0400000000000000000200000028000480abdaadb0132678d0736f636b6574000014000280080002400000000b08000140000000010900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000aad26efaea2cb31fa860c400d"], 0x7c}, 0x1, 0x0, 0x0, 0x81}, 0x0) bind$phonet(0xffffffffffffffff, 0x0, 0x0) 15.022730276s ago: executing program 0 (id=3383): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$DRM_IOCTL_SET_MASTER(r1, 0x641e) 13.941295788s ago: executing program 0 (id=3384): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) connect$inet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) shutdown(r4, 0x0) sendfile(r4, r5, 0x0, 0xdc) 12.156513204s ago: executing program 2 (id=3387): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x93487000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x2ce, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r9}]}, 0x20}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000010018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r10}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) 10.223952407s ago: executing program 0 (id=3388): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000080000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') read$FUSE(r5, &(0x7f0000000080)={0x2020}, 0x2020) 9.885308727s ago: executing program 2 (id=3389): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f0000001040)=""/92, &(0x7f0000000480)=""/74, 0x1000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000e00)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f00000010c0)=ANY=[@ANYBLOB="12010000020000402505a1a4400000000101090244000101000000090400001202060000052406000005240000000d240f0100000000000000000009058103ff030653d7b4b5f2b2490000090582020004000000090503024000000000"], 0x0) eventfd(0x0) 9.255127316s ago: executing program 0 (id=3390): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) setgroups(0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b70300000000002085000000730000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) 9.221854182s ago: executing program 3 (id=3305): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0xd) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') creat(&(0x7f0000000000)='./file0\x00', 0x89) setxattr$security_ima(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100), &(0x7f00000001c0)=ANY=[], 0xff02, 0x0) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$nullb(0xffffff9c, 0x0, 0x101000, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000140)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, &(0x7f0000000300)={{0x6, @rose}, [@null, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@netrom={'nr', 0x0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f00000007c0)={0x1f, 0x0, @any, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000040)={0x0, 0xc, 0x0, 0x14}, 0xc) 7.941392432s ago: executing program 3 (id=3393): socket$pppoe(0x18, 0x1, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045003, &(0x7f0000000300)) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) 7.666299069s ago: executing program 2 (id=3394): r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x3, 0x1}) 6.58813476s ago: executing program 0 (id=3395): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$inet6(0xa, 0x3, 0x9) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="07000000000000000000000000000000a4535fb3"], 0x48}}, 0x0) 6.380291644s ago: executing program 2 (id=3396): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) connect$inet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) shutdown(r4, 0x0) sendfile(r4, r5, 0x0, 0xdc) 6.379809999s ago: executing program 3 (id=3397): sched_setaffinity(0x0, 0x8, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r3}, 0x18) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000fc0)=[@free_buffer], 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xa, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000004500)={0x0, 0x0, 0x81, 0x0, 0x3, "1241b72d7fffff5b000f000000462200"}) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r7, &(0x7f0000000100)={0x1f, 0x1}, 0xe) getsockopt$bt_BT_CHANNEL_POLICY(r7, 0x112, 0x4, 0x0, &(0x7f00000000c0)) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3c020000", @ANYBLOB, @ANYRES8=0x0], 0x23c}, 0x1, 0x0, 0x0, 0x48800}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) 4.9083439s ago: executing program 1 (id=3399): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000080000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') read$FUSE(r5, &(0x7f0000000080)={0x2020}, 0x2020) 4.780090719s ago: executing program 0 (id=3400): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1b96, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x0, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) syz_open_dev$evdev(0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xff7ffffffffe]}, 0x0, 0x8) r5 = gettid() rt_sigtimedwait(&(0x7f0000000100)={[0xc9f]}, 0x0, 0x0, 0x8) timer_create(0x0, &(0x7f0000000180)={0x0, 0xc, 0x4, @tid=r5}, &(0x7f0000000080)) 3.907822958s ago: executing program 1 (id=3401): r0 = gettid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200), 0xd) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0xf3a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) recvmsg(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) close(0xffffffffffffffff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup=r6, 0xffffffffffffffff, 0xa, 0x0, 0x4000, @void, @value}, 0x10) tee(r4, r2, 0x8, 0x0) write$binfmt_script(r5, 0x0, 0x4792f300) 3.858350455s ago: executing program 3 (id=3402): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = getpid() syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(r1, 0x3, &(0x7f00000001c0)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f40), r2) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x28, r6, 0x1, 0x800000, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.962830736s ago: executing program 1 (id=3403): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) mlockall(0x2) 2.801386994s ago: executing program 4 (id=3359): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000440)=ANY=[], 0xb0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x0, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x4f77}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd}}]}}}]}, 0x58}}, 0x0) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 2.750662389s ago: executing program 1 (id=3404): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x34}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) writev(r6, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) 2.488361997s ago: executing program 3 (id=3405): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000040)=ANY=[], 0x8) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 1.701452061s ago: executing program 1 (id=3406): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000002c00)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000300000000020000000200000000000000000000000000000105da73a24000000000000000"], 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 1.557395697s ago: executing program 1 (id=3407): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000000)=ANY=[], 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000110020850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r2}, 0x18) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x2000) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f00000001c0)=0x20000, 0x4) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0xc, r8}, 0x10) 1.55683294s ago: executing program 2 (id=3408): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x7, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000000300)=@base={0x10, 0x4, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0x2, 0x3, 0x9) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) fspick(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0) r6 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x693, @empty}, 0x1c) write$binfmt_misc(r6, 0x0, 0xfff7) write$binfmt_misc(r6, &(0x7f0000001b40), 0xfff7) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000001640)=@raw={'raw\x00', 0x3c1, 0x3, 0x468, 0x170, 0x1170, 0x1170, 0x170, 0x1170, 0x398, 0x1398, 0x1398, 0x398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [], [], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x84, 0x0, 0x0, 0x10}, 0x0, 0x128, 0x170, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e20]}}, @common=@unspec=@connmark={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'netpci0\x00'}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @local, @remote, @remote, @private2, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @local}, @mcast1, @empty, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @mcast1, @remote]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c8) 1.556638824s ago: executing program 3 (id=3409): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$inet6(0xa, 0x3, 0x9) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="07000000000000000000000000000000a4535fb3"], 0x48}}, 0x0) 551.975752ms ago: executing program 2 (id=3410): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000080000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') read$FUSE(r5, &(0x7f0000000080)={0x2020}, 0x2020) 0s ago: executing program 4 (id=3411): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0xffffa9d8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) connect$netrom(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): config [ 679.278593][ T938] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 679.316425][T14040] veth0_vlan: entered promiscuous mode [ 679.324800][ T938] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 679.342195][ T938] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 679.355687][T14040] veth1_vlan: entered promiscuous mode [ 679.363570][ T938] usb 5-1: SerialNumber: syz [ 679.390583][ T938] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 679.479894][T14296] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 679.495477][T14040] veth0_macvtap: entered promiscuous mode [ 679.505337][T14040] veth1_macvtap: entered promiscuous mode [ 679.522724][T14040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 679.585115][T14040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 679.629327][T14040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 679.654468][T14040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 679.674228][T14040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 679.694225][T14040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 679.715398][T14040] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 679.736684][T14040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 679.754513][T14040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 679.784291][T14040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 679.804309][T14040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 679.824248][T14040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 679.844236][T14040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 679.854088][T14040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 679.868768][ T938] usb 5-1: USB disconnect, device number 69 [ 679.885590][T14040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 679.905401][T14040] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 679.932025][T14040] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.964239][T14040] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.973073][T14040] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.994681][T14040] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.159716][ T2592] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 680.195718][ T2592] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 680.284275][ T46] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 680.325591][ T6719] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 680.348010][ T6719] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 680.445876][ T46] usb 2-1: Using ep0 maxpacket: 32 [ 680.503266][ T46] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 680.524283][ T46] usb 2-1: config 0 has no interface number 0 [ 680.639831][ T46] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 680.649242][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.657539][ T46] usb 2-1: Product: syz [ 680.853022][ T46] usb 2-1: Manufacturer: syz [ 680.858253][ T46] usb 2-1: SerialNumber: syz [ 680.867509][ T46] usb 2-1: config 0 descriptor?? [ 680.874456][ T46] smsc95xx v2.0.0 [ 680.911817][ T29] audit: type=1326 audit(1727486018.247:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14331 comm="syz.2.2899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa97877df39 code=0x7ffc0000 [ 681.030611][ T29] audit: type=1326 audit(1727486018.307:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14331 comm="syz.2.2899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7fa97877df39 code=0x7ffc0000 [ 681.408644][ T46] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 681.523284][ T46] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 681.543278][ T29] audit: type=1326 audit(1727486018.307:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14331 comm="syz.2.2899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa97877df39 code=0x7ffc0000 [ 681.591630][ T29] audit: type=1326 audit(1727486018.307:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14331 comm="syz.2.2899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa97877df39 code=0x7ffc0000 [ 681.613830][ T29] audit: type=1107 audit(1727486018.357:967): pid=14322 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='O' [ 681.618295][T14336] veth0_vlan: left promiscuous mode [ 681.625886][ T29] audit: type=1326 audit(1727486018.447:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14331 comm="syz.2.2899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fa97877df39 code=0x7ffc0000 [ 681.654881][T14336] veth0_vlan: entered promiscuous mode [ 681.694224][ T29] audit: type=1326 audit(1727486018.447:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14331 comm="syz.2.2899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa97877df39 code=0x7ffc0000 [ 681.756158][ T29] audit: type=1326 audit(1727486018.477:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14331 comm="syz.2.2899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa97877df39 code=0x7ffc0000 [ 681.964246][ T29] audit: type=1326 audit(1727486018.477:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14331 comm="syz.2.2899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7fa97877df39 code=0x7ffc0000 [ 682.026014][ T29] audit: type=1326 audit(1727486018.487:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14331 comm="syz.2.2899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa97877df39 code=0x7ffc0000 [ 682.903292][T14357] usb usb8: usbfs: process 14357 (syz.0.2903) did not claim interface 0 before use [ 683.311576][ T46] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -32 [ 683.323744][ T46] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -32 [ 683.668442][T14041] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 683.686359][T14041] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 683.725270][T14041] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 683.776096][T14041] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 683.784081][T14041] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 683.791724][T14041] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 684.047946][T11798] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 684.049322][T14377] chnl_net:caif_netlink_parms(): no params data found [ 684.249884][T14377] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.264495][T14377] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.272268][T14377] bridge_slave_0: entered allmulticast mode [ 684.305140][T11798] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 684.318058][T14377] bridge_slave_0: entered promiscuous mode [ 684.329696][T11798] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 684.346751][T14377] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.353891][T14377] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.374555][T11798] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.380044][ T8] usb 2-1: USB disconnect, device number 61 [ 684.390746][T11798] usb 3-1: config 0 descriptor?? [ 684.396053][T14377] bridge_slave_1: entered allmulticast mode [ 684.421931][T14377] bridge_slave_1: entered promiscuous mode [ 684.550106][T14377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 684.711702][T14377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 684.936542][T14377] team0: Port device team_slave_0 added [ 684.981404][T14377] team0: Port device team_slave_1 added [ 684.998056][T11798] keytouch 0003:0926:3333.0031: fixing up Keytouch IEC report descriptor [ 685.024900][T11798] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0031/input/input59 [ 685.197402][T14377] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 685.240341][T14377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 685.267558][T14377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 685.285451][T14377] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 685.292463][T14377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 685.318526][T14377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 686.094289][ T5218] Bluetooth: hci1: command tx timeout [ 686.123300][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.138799][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.304884][T11798] keytouch 0003:0926:3333.0031: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 686.347146][T11798] usb 3-1: USB disconnect, device number 45 [ 686.398499][T14377] hsr_slave_0: entered promiscuous mode [ 686.437790][T14377] hsr_slave_1: entered promiscuous mode [ 686.479462][T14377] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 686.700434][T14377] Cannot create hsr debugfs directory [ 687.084586][T11798] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 687.893921][T14377] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.969919][T11798] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 687.992172][T11798] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 688.002048][T11798] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 688.018360][T11798] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 688.034823][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 688.034840][ T29] audit: type=1326 audit(1727486025.357:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14436 comm="syz.0.2915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4957df39 code=0x7ffc0000 [ 688.072293][ T29] audit: type=1326 audit(1727486025.367:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14436 comm="syz.0.2915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4957df39 code=0x7ffc0000 [ 688.072347][ T29] audit: type=1326 audit(1727486025.397:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14436 comm="syz.0.2915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7fcc4957df39 code=0x7ffc0000 [ 688.072381][ T29] audit: type=1326 audit(1727486025.397:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14436 comm="syz.0.2915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4957df39 code=0x7ffc0000 [ 688.072415][ T29] audit: type=1326 audit(1727486025.397:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14436 comm="syz.0.2915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4957df39 code=0x7ffc0000 [ 688.073413][ T29] audit: type=1326 audit(1727486025.407:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14436 comm="syz.0.2915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fcc4957df39 code=0x7ffc0000 [ 688.101753][T11798] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 688.178983][ T29] audit: type=1326 audit(1727486025.407:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14436 comm="syz.0.2915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4957df39 code=0x7ffc0000 [ 688.198967][T11798] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 688.228548][ T5218] Bluetooth: hci1: command tx timeout [ 688.237189][ T29] audit: type=1326 audit(1727486025.407:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14436 comm="syz.0.2915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4957df39 code=0x7ffc0000 [ 688.240742][T14377] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.259475][ T29] audit: type=1326 audit(1727486025.407:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14436 comm="syz.0.2915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7fcc4957df39 code=0x7ffc0000 [ 688.291227][ T29] audit: type=1326 audit(1727486025.437:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14436 comm="syz.0.2915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4957df39 code=0x7ffc0000 [ 688.311708][T11798] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 688.322404][T11798] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 688.330650][T11798] usb 5-1: SerialNumber: syz [ 688.336090][T14439] veth0_vlan: entered allmulticast mode [ 688.359455][T11798] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 688.368706][T11798] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -12 [ 688.406947][T14437] veth0_vlan: left promiscuous mode [ 688.416830][T14437] veth0_vlan: entered promiscuous mode [ 688.469496][T14377] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.587412][T14377] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.705329][T11798] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 688.728477][T14377] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 688.739081][T14377] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 688.750236][T14377] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 688.775260][T14377] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 688.966541][T14377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 689.024725][T14377] 8021q: adding VLAN 0 to HW filter on device team0 [ 689.032891][T11798] usb 1-1: Using ep0 maxpacket: 32 [ 689.039707][T11798] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 689.047932][T11798] usb 1-1: config 0 has no interface number 0 [ 689.059365][T11798] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 689.068708][T11798] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.076952][T11798] usb 1-1: Product: syz [ 689.081215][T11798] usb 1-1: Manufacturer: syz [ 689.082808][ T6720] bridge0: port 1(bridge_slave_0) entered blocking state [ 689.085928][T11798] usb 1-1: SerialNumber: syz [ 689.093013][ T6720] bridge0: port 1(bridge_slave_0) entered forwarding state [ 689.101338][T11798] usb 1-1: config 0 descriptor?? [ 689.120206][T11798] smsc95xx v2.0.0 [ 689.140731][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 689.148038][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 689.528184][T11798] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 689.542878][T11798] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 689.718862][T12712] usb 5-1: USB disconnect, device number 70 [ 689.826616][T14377] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 689.948782][T14377] veth0_vlan: entered promiscuous mode [ 689.996119][T14377] veth1_vlan: entered promiscuous mode [ 690.068478][T14377] veth0_macvtap: entered promiscuous mode [ 690.093767][T14377] veth1_macvtap: entered promiscuous mode [ 690.131628][T14377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 690.152578][T14377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 690.172845][T14377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 690.194275][ T8] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 690.204299][T14377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 690.224258][T14377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 690.254924][T14377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 690.264991][T14377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 690.275540][T14377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 690.287501][T14377] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 690.299606][T14377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 690.310256][T14377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 690.320189][T14377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 690.330703][T14377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 690.340612][T14377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 690.351137][T14377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 690.361042][T14377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 690.362345][ T5218] Bluetooth: hci1: command tx timeout [ 690.371610][T14377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 690.371633][T14377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 690.397959][T14377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 690.409366][T14377] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 690.423507][T14377] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.432371][T14377] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.441183][T14377] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.450038][T14377] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.554642][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 690.569424][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 690.583706][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 690.624271][ T8] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 690.633347][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.654245][ T6720] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 690.669679][ T6720] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 690.696128][ T8] usb 5-1: config 0 descriptor?? [ 690.738828][ T6718] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 690.794258][ T6718] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 690.831095][T14468] syz.2.2923[14468] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 690.831220][T14468] syz.2.2923[14468] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 690.843644][T14468] syz.2.2923[14468] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 691.115806][ T8] savu 0003:1E7D:2D5A.0032: item fetching failed at offset 2/5 [ 691.164717][ T8] savu 0003:1E7D:2D5A.0032: parse failed [ 691.167594][T11798] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -32 [ 691.187652][ T8] savu 0003:1E7D:2D5A.0032: probe with driver savu failed with error -22 [ 691.203139][T11798] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -32 [ 691.318799][T12712] usb 5-1: USB disconnect, device number 71 [ 692.504758][ T5218] Bluetooth: hci1: command tx timeout [ 692.607118][ T5226] usb 1-1: USB disconnect, device number 52 [ 693.009529][T14494] input: syz1 as /devices/virtual/input/input60 [ 693.685671][ T5226] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 693.925459][ T5226] usb 1-1: config 1 has an invalid descriptor of length 180, skipping remainder of the config [ 694.039007][ T5226] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 694.131184][ T5226] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 694.177153][ T5226] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 694.273879][ T5226] usb 1-1: SerialNumber: syz [ 694.287393][ T5226] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 694.514674][ T8] usb 1-1: USB disconnect, device number 53 [ 694.954428][ T5275] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 694.984649][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 694.984667][ T29] audit: type=1326 audit(1727486032.327:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14529 comm="syz.2.2941" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa97877df39 code=0x0 [ 695.124489][ T5275] usb 4-1: Using ep0 maxpacket: 32 [ 695.136687][ T5275] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 695.155986][ T5275] usb 4-1: config 0 has no interface number 0 [ 695.271226][ T5275] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 695.294434][ T5275] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.304357][ T5275] usb 4-1: Product: syz [ 695.308556][ T5275] usb 4-1: Manufacturer: syz [ 695.313160][ T5275] usb 4-1: SerialNumber: syz [ 695.336289][ T5275] usb 4-1: config 0 descriptor?? [ 695.346781][ T5275] smsc95xx v2.0.0 [ 695.374330][T14538] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2943'. [ 695.889313][ T5275] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 695.903054][ T5275] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 698.608100][ T5275] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -32 [ 698.703992][ T5275] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -32 [ 699.115893][T14578] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2955'. [ 699.891277][ T5275] usb 4-1: USB disconnect, device number 47 [ 700.091042][ T29] audit: type=1326 audit(1727486037.427:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14585 comm="syz.2.2957" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa97877df39 code=0x0 [ 700.415999][T14581] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2956'. [ 700.425806][T14581] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2956'. [ 701.425631][T14614] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2966'. [ 703.374242][ T46] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 703.534034][ T46] usb 3-1: Using ep0 maxpacket: 32 [ 703.545900][ T46] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 703.554024][ T46] usb 3-1: config 0 has no interface number 0 [ 703.583267][ T46] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 703.603436][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.612818][ T46] usb 3-1: Product: syz [ 703.624228][ T46] usb 3-1: Manufacturer: syz [ 703.634467][ T46] usb 3-1: SerialNumber: syz [ 703.645406][ T46] usb 3-1: config 0 descriptor?? [ 703.656197][ T46] smsc95xx v2.0.0 [ 703.662487][ T29] audit: type=1326 audit(1727486040.997:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14633 comm="syz.4.2973" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f06cf77df39 code=0x0 [ 703.664279][ T5271] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 703.874275][ T5271] usb 4-1: Using ep0 maxpacket: 32 [ 703.881212][ T5271] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 703.895554][ T5271] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 703.922916][T14640] xt_CT: You must specify a L4 protocol and not use inversions on it [ 703.950279][ T5271] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 703.990127][ T5271] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 704.023643][ T5271] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 704.062320][ T5271] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 704.101070][ T5271] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 704.132607][ T5271] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.195633][ T5271] usb 4-1: config 0 descriptor?? [ 704.234407][ T46] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 704.250081][ T46] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 704.410115][T14632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 704.464577][T14632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 704.506773][ T5271] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 48 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 704.531850][ T5271] usb 4-1: USB disconnect, device number 48 [ 704.550529][ T5271] usblp0: removed [ 705.076075][ T5271] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 705.235430][ T5271] usb 4-1: Using ep0 maxpacket: 16 [ 705.293758][ T5271] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 705.410034][ T5271] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 705.526765][ T5271] usb 4-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 705.544269][ T5271] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.589425][ T5271] usb 4-1: Product: syz [ 705.593642][ T5271] usb 4-1: Manufacturer: syz [ 705.605376][ T29] audit: type=1326 audit(1727486042.947:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14651 comm="syz.0.2977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4957df39 code=0x7ffc0000 [ 705.608827][ T5271] usb 4-1: SerialNumber: syz [ 705.635825][ T29] audit: type=1326 audit(1727486042.947:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14651 comm="syz.0.2977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fcc4957df39 code=0x7ffc0000 [ 705.643899][T14652] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2975'. [ 705.665419][ T29] audit: type=1326 audit(1727486042.947:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14651 comm="syz.0.2977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4957df39 code=0x7ffc0000 [ 705.687200][ T5271] usb 4-1: config 0 descriptor?? [ 705.698309][ T5271] port100 4-1:0.0: NFC: Could not get supported command types [ 705.699586][T14652] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2975'. [ 705.722162][ T29] audit: type=1326 audit(1727486042.967:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14651 comm="syz.0.2977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcc4957df39 code=0x7ffc0000 [ 705.774377][ T29] audit: type=1326 audit(1727486042.977:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14651 comm="syz.0.2977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4957df39 code=0x7ffc0000 [ 705.822279][ T29] audit: type=1326 audit(1727486042.977:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14651 comm="syz.0.2977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7fcc4957df39 code=0x7ffc0000 [ 706.032883][ T29] audit: type=1326 audit(1727486042.977:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14651 comm="syz.0.2977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4957df39 code=0x7ffc0000 [ 706.294535][ T8] usb 4-1: USB disconnect, device number 49 [ 706.846454][ T46] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -32 [ 706.858746][ T46] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -32 [ 707.917714][ T5275] usb 3-1: USB disconnect, device number 46 [ 709.141417][T14041] Bluetooth: hci2: command 0x0406 tx timeout [ 711.777240][T14713] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2994'. [ 712.699286][T14721] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2993'. [ 712.708558][T14721] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2993'. [ 712.754922][ T938] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 712.935691][ T938] usb 1-1: Using ep0 maxpacket: 32 [ 712.946124][ T938] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 712.964261][ T938] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 712.983656][ T938] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 712.994376][ T5275] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 713.003216][ T938] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 713.024746][ T938] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 713.034557][ T938] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 713.048292][ T938] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 713.057460][ T938] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.068523][ T938] usb 1-1: config 0 descriptor?? [ 713.075902][ T8] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 713.154286][ T5275] usb 3-1: Using ep0 maxpacket: 32 [ 713.165885][ T5275] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 713.184257][ T5275] usb 3-1: config 0 has no interface number 0 [ 713.206565][ T5275] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 713.221630][ T5275] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.248085][ T5275] usb 3-1: Product: syz [ 713.262677][ T5275] usb 3-1: Manufacturer: syz [ 713.273077][ T5275] usb 3-1: SerialNumber: syz [ 713.295672][ T5275] usb 3-1: config 0 descriptor?? [ 713.302780][ T5275] smsc95xx v2.0.0 [ 713.330678][T14719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 713.360301][T14719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 713.377208][ T938] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 54 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 713.390537][ T938] usb 1-1: USB disconnect, device number 54 [ 713.398675][ T938] usblp0: removed [ 713.415779][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 713.426987][ T8] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 713.460375][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.507399][ T8] usb 2-1: config 0 descriptor?? [ 713.723955][ T5275] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 713.760506][ T5275] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 714.060479][ T8] keytouch 0003:0926:3333.0033: fixing up Keytouch IEC report descriptor [ 714.070026][ T5226] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 714.103321][ T8] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0033/input/input61 [ 714.224513][ T5226] usb 1-1: Using ep0 maxpacket: 16 [ 714.276132][ T5226] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 714.342963][ T5226] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 714.473054][ T5226] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 714.731844][ T5226] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.771321][ T5226] usb 1-1: Product: syz [ 714.794097][ T5226] usb 1-1: Manufacturer: syz [ 714.816103][ T5226] usb 1-1: SerialNumber: syz [ 714.843970][ T5226] usb 1-1: config 0 descriptor?? [ 714.893025][ T8] keytouch 0003:0926:3333.0033: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 714.929894][ T8] usb 2-1: USB disconnect, device number 62 [ 714.953032][ T5226] port100 1-1:0.0: NFC: Could not get supported command types [ 715.396351][ T5226] usb 1-1: USB disconnect, device number 55 [ 715.765320][ T5275] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -61 [ 715.779791][ T5275] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -61 [ 717.184746][ T8] usb 3-1: USB disconnect, device number 47 [ 717.701310][T14770] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3005'. [ 717.942911][T14769] xt_hashlimit: size too large, truncated to 1048576 [ 719.248567][T14779] xt_CT: You must specify a L4 protocol and not use inversions on it [ 721.289254][T14787] netlink: 'syz.0.3011': attribute type 4 has an invalid length. [ 721.297151][T14787] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3011'. [ 722.954452][T14810] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3016'. [ 723.554439][T14810] xt_hashlimit: size too large, truncated to 1048576 [ 725.696816][ T5275] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 726.187063][ T5275] usb 4-1: config 1 has an invalid descriptor of length 180, skipping remainder of the config [ 726.197725][ T5275] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 726.253101][ T5275] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 726.267056][ T5275] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 726.315671][T14839] netlink: 'syz.2.3024': attribute type 4 has an invalid length. [ 726.323485][T14839] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3024'. [ 726.350951][ T5275] usb 4-1: SerialNumber: syz [ 726.916104][ T5275] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 727.138938][ T5275] usb 4-1: USB disconnect, device number 50 [ 727.275598][T12712] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 727.564356][T12712] usb 1-1: Using ep0 maxpacket: 32 [ 727.576623][T12712] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 727.676611][T12712] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 727.887252][T12712] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 728.194270][T12712] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.259020][T12712] usb 1-1: config 0 descriptor?? [ 728.277037][T14841] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 728.318153][T12712] hub 1-1:0.0: USB hub found [ 731.627893][T12712] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 731.647341][T12712] usbhid 1-1:0.0: can't add hid device: -71 [ 731.658296][T12712] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 731.696286][T12712] usb 1-1: USB disconnect, device number 56 [ 733.953200][ T29] audit: type=1326 audit(1727486071.287:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14908 comm="syz.3.3046" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9dc5f7df39 code=0x0 [ 734.174290][ T8] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 734.326125][ T8] usb 5-1: config 1 has an invalid descriptor of length 180, skipping remainder of the config [ 734.345390][ T8] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 734.377011][ T8] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 734.394199][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 734.402227][ T8] usb 5-1: SerialNumber: syz [ 734.439666][ T8] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 734.663543][ T8] usb 5-1: USB disconnect, device number 72 [ 741.308947][T14997] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3070'. [ 741.634282][ T5275] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 741.796005][ T5275] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 741.809524][ T5275] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 741.819638][ T5275] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.834714][ T5275] usb 1-1: Product: syz [ 741.839347][ T5275] usb 1-1: Manufacturer: syz [ 741.843956][ T5275] usb 1-1: SerialNumber: syz [ 742.034229][ T29] audit: type=1326 audit(1727486079.367:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14996 comm="syz.4.3071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06cf77df39 code=0x7ffc0000 [ 742.148721][ T29] audit: type=1326 audit(1727486079.367:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14996 comm="syz.4.3071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7f06cf77df39 code=0x7ffc0000 [ 742.171640][ T29] audit: type=1326 audit(1727486079.367:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14996 comm="syz.4.3071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06cf77df39 code=0x7ffc0000 [ 743.447430][T15019] fuse: Bad value for 'group_id' [ 743.452482][T15019] fuse: Bad value for 'group_id' [ 744.165291][ T5275] cdc_ncm 1-1:1.0: failed to get mac address [ 744.175191][ T5275] cdc_ncm 1-1:1.0: bind() failure [ 744.247878][T15025] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3079'. [ 744.258567][ T25] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 744.266335][ T5275] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 744.298696][ T5275] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 744.308545][T15025] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3079'. [ 744.334087][ T5275] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 744.345353][T15025] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3079'. [ 744.404630][ T5275] usb 1-1: USB disconnect, device number 57 [ 744.507575][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 744.549331][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 744.580105][ T25] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 744.814491][ T25] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 744.823660][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.922945][ T25] usb 4-1: config 0 descriptor?? [ 745.161237][ T5235] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 745.174251][ T5235] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 745.325063][ T5235] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 745.348892][ T5235] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 745.535050][ T5235] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 745.542665][ T5235] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 745.896013][ T25] usb 4-1: can't set config #0, error -71 [ 745.904259][ T25] usb 4-1: USB disconnect, device number 51 [ 746.846641][T15035] chnl_net:caif_netlink_parms(): no params data found [ 747.034227][ T8] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 747.115892][T15035] bridge0: port 1(bridge_slave_0) entered blocking state [ 747.124034][T15035] bridge0: port 1(bridge_slave_0) entered disabled state [ 747.132746][T15035] bridge_slave_0: entered allmulticast mode [ 747.140041][T15035] bridge_slave_0: entered promiscuous mode [ 747.150214][T15035] bridge0: port 2(bridge_slave_1) entered blocking state [ 747.158043][T15035] bridge0: port 2(bridge_slave_1) entered disabled state [ 747.165986][T15035] bridge_slave_1: entered allmulticast mode [ 747.175136][T15035] bridge_slave_1: entered promiscuous mode [ 747.184356][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 747.193150][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 747.216812][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 747.218890][T15035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 747.250463][ T8] usb 2-1: New USB device found, idVendor=1b96, idProduct=000c, bcdDevice= 0.00 [ 747.259890][T15035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 747.282610][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.302876][T15047] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3085'. [ 747.323095][ T8] usb 2-1: config 0 descriptor?? [ 747.461507][T15035] team0: Port device team_slave_0 added [ 747.481222][T15035] team0: Port device team_slave_1 added [ 747.496207][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.502640][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.654761][ T5235] Bluetooth: hci4: command tx timeout [ 749.817199][T15035] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 749.895095][T15035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 749.921164][ T5235] Bluetooth: hci4: command tx timeout [ 749.929578][T15035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 749.942487][T15035] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 749.949507][T15035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 749.975722][T15035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 751.199501][T15035] hsr_slave_0: entered promiscuous mode [ 751.424589][T15035] hsr_slave_1: entered promiscuous mode [ 752.024773][ T5235] Bluetooth: hci4: command tx timeout [ 752.164292][T15035] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 752.171906][T15035] Cannot create hsr debugfs directory [ 752.459438][ T8] usbhid 2-1:0.0: can't add hid device: -71 [ 752.475722][ T8] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 752.510780][ T8] usb 2-1: USB disconnect, device number 63 [ 752.525625][ T25] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 752.697689][T15035] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.754264][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 752.836008][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 752.854230][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 752.864010][ T25] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 752.876903][ T25] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 752.886196][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.925798][ T25] usb 1-1: config 0 descriptor?? [ 752.991991][T15035] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.231658][T15035] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.814362][ T25] koneplus 0003:1E7D:2E22.0034: item fetching failed at offset 0/2 [ 753.904733][ T25] koneplus 0003:1E7D:2E22.0034: parse failed [ 753.921368][ T25] koneplus 0003:1E7D:2E22.0034: probe with driver koneplus failed with error -22 [ 754.029644][T15035] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.065024][ T5218] Bluetooth: hci4: command tx timeout [ 754.100344][T12712] usb 1-1: USB disconnect, device number 58 [ 754.254928][ T8] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 754.261818][T15035] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 754.282406][T15035] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 754.315004][T15035] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 754.333178][T15035] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 754.406657][T15035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 754.427838][T15035] 8021q: adding VLAN 0 to HW filter on device team0 [ 754.448347][ T8] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 754.461036][ T1836] bridge0: port 1(bridge_slave_0) entered blocking state [ 754.468219][ T1836] bridge0: port 1(bridge_slave_0) entered forwarding state [ 754.477156][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 754.495925][ T1836] bridge0: port 2(bridge_slave_1) entered blocking state [ 754.503061][ T1836] bridge0: port 2(bridge_slave_1) entered forwarding state [ 754.519655][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 754.543208][ T8] usb 5-1: New USB device found, idVendor=056a, idProduct=4001, bcdDevice= 0.00 [ 754.560851][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.573466][ T8] usb 5-1: config 0 descriptor?? [ 755.003988][ T8] wacom 0003:056A:4001.0035: unknown main item tag 0x0 [ 755.036569][ T8] wacom 0003:056A:4001.0035: item fetching failed at offset 8/11 [ 755.076514][ T8] wacom 0003:056A:4001.0035: parse failed [ 755.107038][T15035] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 755.114386][ T8] wacom 0003:056A:4001.0035: probe with driver wacom failed with error -22 [ 755.196304][ T8] usb 5-1: USB disconnect, device number 73 [ 755.261442][T15035] veth0_vlan: entered promiscuous mode [ 755.280876][T15035] veth1_vlan: entered promiscuous mode [ 755.326931][T15035] veth0_macvtap: entered promiscuous mode [ 755.346001][T15035] veth1_macvtap: entered promiscuous mode [ 755.370367][T15035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 755.381612][T15035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 755.392431][T15035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 755.419586][T15035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 755.438970][T15035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 755.452440][T15035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 755.472149][T15035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 755.483200][T15035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 755.502227][T15035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 755.523150][T15035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 755.543034][T15035] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 755.571475][T15035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 755.590661][T15035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 755.603243][T15035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 755.623959][T15035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 755.645211][T15035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 755.665758][T15035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 755.682263][T15035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 755.731784][T15035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 755.784258][T15035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 755.837189][T15035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 755.888690][T15035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 755.953070][T15035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 756.101397][T15035] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 756.286683][T15035] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.331488][T15035] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.394896][T15035] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.458413][T15035] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.517481][T15149] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3111'. [ 756.904378][ T29] audit: type=1326 audit(1727486094.237:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15154 comm="syz.0.3113" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcc4957df39 code=0x0 [ 757.040628][ T6719] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 757.325027][ T6719] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 758.062794][ T6720] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 758.094806][ T6720] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 758.884515][T12712] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 758.923949][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 759.084822][T12712] usb 5-1: device descriptor read/64, error -32 [ 759.394994][T12712] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 760.476258][T12712] usb 5-1: config 1 has an invalid descriptor of length 180, skipping remainder of the config [ 760.497796][T12712] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 761.247108][T12712] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 761.258346][T12712] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 761.266493][T12712] usb 5-1: SerialNumber: syz [ 761.275198][T12712] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 761.417922][ T5226] usb 5-1: USB disconnect, device number 75 [ 762.165384][ T5226] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 762.371937][ T5226] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 762.403953][ T5226] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 762.425264][T15216] could not allocate digest TFM handle hmac(sha256-ce) [ 762.444934][ T5226] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 762.464044][ T5226] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.489708][ T5226] usb 5-1: Product: syz [ 762.504692][ T5226] usb 5-1: Manufacturer: syz [ 762.509928][ T29] audit: type=1326 audit(1727486099.847:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15230 comm="syz.3.3134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dc5f7df39 code=0x7ffc0000 [ 762.533296][ T5226] usb 5-1: SerialNumber: syz [ 762.567572][ T5226] usb 5-1: config 0 descriptor?? [ 762.583956][ T5226] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 762.615370][ T29] audit: type=1326 audit(1727486099.847:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15230 comm="syz.3.3134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dc5f7df39 code=0x7ffc0000 [ 762.708292][ T29] audit: type=1326 audit(1727486099.877:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15230 comm="syz.3.3134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9dc5f7df39 code=0x7ffc0000 [ 762.778728][ T29] audit: type=1326 audit(1727486099.877:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15230 comm="syz.3.3134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dc5f7df39 code=0x7ffc0000 [ 762.868646][ T29] audit: type=1326 audit(1727486099.877:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15230 comm="syz.3.3134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dc5f7df39 code=0x7ffc0000 [ 762.903979][ T5226] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 762.926868][ T29] audit: type=1326 audit(1727486099.907:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15230 comm="syz.3.3134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9dc5f7df39 code=0x7ffc0000 [ 762.945479][ T5226] usb 5-1: USB disconnect, device number 76 [ 763.034314][ T46] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 763.089438][T15240] udevd[15240]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 763.160579][ T29] audit: type=1326 audit(1727486099.907:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15230 comm="syz.3.3134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dc5f7df39 code=0x7ffc0000 [ 763.184010][ T29] audit: type=1326 audit(1727486099.907:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15230 comm="syz.3.3134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dc5f7df39 code=0x7ffc0000 [ 763.237728][ T29] audit: type=1326 audit(1727486099.917:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15230 comm="syz.3.3134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9dc5f7df39 code=0x7ffc0000 [ 763.562300][ T29] audit: type=1326 audit(1727486099.917:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15230 comm="syz.3.3134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dc5f7df39 code=0x7ffc0000 [ 764.016644][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 764.027856][ T46] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 764.037027][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.050074][ T46] usb 4-1: config 0 descriptor?? [ 764.476888][ T46] keytouch 0003:0926:3333.0036: fixing up Keytouch IEC report descriptor [ 764.527102][ T46] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0036/input/input62 [ 764.639470][ T25] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 764.699393][ T46] keytouch 0003:0926:3333.0036: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 764.891339][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 765.004430][ T5226] usb 2-1: new full-speed USB device number 64 using dummy_hcd [ 765.151262][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 765.251143][ T46] usb 4-1: USB disconnect, device number 52 [ 765.305295][ T25] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 765.360312][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.408923][ T25] usb 1-1: config 0 descriptor?? [ 765.415313][ T5271] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 765.423698][ T5226] usb 2-1: config 0 has no interfaces? [ 765.443864][ T5226] usb 2-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 765.463238][ T5226] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.573593][ T5271] usb 5-1: config 1 has an invalid descriptor of length 180, skipping remainder of the config [ 765.599353][ T5271] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 765.652439][ T5271] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 765.672631][ T5271] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 765.703898][ T5271] usb 5-1: SerialNumber: syz [ 765.727999][ T5226] usb 2-1: config 0 descriptor?? [ 765.750640][ T5271] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 765.849403][T15266] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3146'. [ 766.260279][ T25] hid-steam 0003:28DE:1142.0037: unknown main item tag 0x0 [ 766.381329][T15261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 766.425186][ T25] hid-steam 0003:28DE:1142.0037: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 766.454669][T15261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 766.506217][ T5271] usb 5-1: USB disconnect, device number 77 [ 766.534668][ T25] hid-steam 0003:28DE:1142.0037: Steam wireless receiver connected [ 766.613093][ T25] hid-steam 0003:28DE:1142.0038: unknown main item tag 0x0 [ 766.647948][ T938] usb 2-1: USB disconnect, device number 64 [ 766.656270][ T25] hid-steam 0003:28DE:1142.0038: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 766.697726][ T25] usb 1-1: USB disconnect, device number 59 [ 766.872199][ T25] hid-steam 0003:28DE:1142.0037: Steam wireless receiver disconnected [ 770.744285][ T938] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 771.427508][ T938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 771.446379][ T938] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 771.473525][ T938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.781282][ T938] usb 4-1: config 0 descriptor?? [ 772.797791][ T938] keytouch 0003:0926:3333.0039: fixing up Keytouch IEC report descriptor [ 772.834844][ T938] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0039/input/input63 [ 773.034014][ T938] keytouch 0003:0926:3333.0039: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 773.325466][ T938] usb 4-1: USB disconnect, device number 53 [ 774.293354][T15331] xt_CT: You must specify a L4 protocol and not use inversions on it [ 775.499430][T15347] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 778.474382][ T25] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 778.647488][ T25] usb 5-1: config 0 has an invalid interface number: 32 but max is 0 [ 778.664478][ T25] usb 5-1: config 0 has no interface number 0 [ 778.680287][ T25] usb 5-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 778.925951][ T25] usb 5-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 779.697815][ T25] usb 5-1: New USB device found, idVendor=056a, idProduct=00fa, bcdDevice= 0.00 [ 779.707065][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.099619][ T25] usb 5-1: config 0 descriptor?? [ 781.124952][ T25] usb 5-1: can't set config #0, error -71 [ 781.142462][ T25] usb 5-1: USB disconnect, device number 78 [ 782.242878][ T5271] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 782.587113][T15400] tipc: Started in network mode [ 782.602865][T15400] tipc: Node identity ffffffff, cluster identity 4711 [ 782.651340][T15400] tipc: Node number set to 4294967295 [ 782.874704][ T5271] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 782.907728][ T5271] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 782.927885][ T5271] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.959344][ T5271] usb 3-1: config 0 descriptor?? [ 783.043054][ T5271] usbhid 3-1:0.0: can't add hid device: -71 [ 783.059276][ T5271] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 784.363660][ T5271] usb 3-1: USB disconnect, device number 48 [ 784.420612][T15416] input: syz1 as /devices/virtual/input/input64 [ 786.649155][T15428] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3192'. [ 786.664424][ T5218] Bluetooth: hci0: command 0x0406 tx timeout [ 787.124348][ T25] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 787.222711][T15454] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3200'. [ 787.231967][T15454] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3200'. [ 787.246135][T15454] bridge0: port 2(bridge_slave_1) entered disabled state [ 788.163924][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 788.175183][ T25] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 788.185417][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.195811][ T25] usb 4-1: config 0 descriptor?? [ 788.399002][T15472] input: syz0 as /devices/virtual/input/input65 [ 788.494602][ T5226] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 788.689014][ T5226] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 788.816823][T15471] xt_CT: No such helper "snmp_trap" [ 788.844919][ T5226] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 788.923640][ T5226] usb 1-1: New USB device found, idVendor=04b3, idProduct=3108, bcdDevice= 0.00 [ 788.931657][T15474] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3202'. [ 788.934437][ T5226] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.982289][ T5226] usb 1-1: config 0 descriptor?? [ 789.012492][T15474] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 789.025763][T15474] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 789.040046][ T25] keytouch 0003:0926:3333.003A: fixing up Keytouch IEC report descriptor [ 789.094339][ T25] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.003A/input/input66 [ 791.029625][ T5226] hid (null): report_id 0 is invalid [ 791.037498][ T5226] lenovo 0003:04B3:3108.003B: report_id 0 is invalid [ 791.044360][ T5226] lenovo 0003:04B3:3108.003B: item 0 0 1 8 parsing failed [ 791.052644][ T5226] lenovo 0003:04B3:3108.003B: hid_parse failed [ 791.061367][ T5226] lenovo 0003:04B3:3108.003B: probe with driver lenovo failed with error -22 [ 792.081750][ T25] keytouch 0003:0926:3333.003A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 792.146565][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 792.146578][ T29] audit: type=1326 audit(1727486129.487:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15500 comm="syz.3.3213" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9dc5f7df39 code=0x0 [ 792.191816][ T25] usb 4-1: USB disconnect, device number 54 [ 792.497515][T15507] bridge_slave_1: left allmulticast mode [ 792.503256][T15507] bridge_slave_1: left promiscuous mode [ 792.510489][T15507] bridge0: port 2(bridge_slave_1) entered disabled state [ 793.267469][T15514] Driver unsupported XDP return value 0 on prog (id 1327) dev N/A, expect packet loss! [ 793.375437][ T25] usb 1-1: USB disconnect, device number 60 [ 793.584764][ T29] audit: type=1326 audit(1727486130.877:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15517 comm="syz.4.3221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06cf77df39 code=0x7ffc0000 [ 793.606603][ T29] audit: type=1326 audit(1727486130.877:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15517 comm="syz.4.3221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06cf77df39 code=0x7ffc0000 [ 794.246049][ T29] audit: type=1326 audit(1727486131.577:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15517 comm="syz.4.3221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f06cf77df39 code=0x7ffc0000 [ 794.273110][ T29] audit: type=1326 audit(1727486131.577:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15517 comm="syz.4.3221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06cf77df39 code=0x7ffc0000 [ 794.326064][ T29] audit: type=1326 audit(1727486131.607:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15517 comm="syz.4.3221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06cf77df39 code=0x7ffc0000 [ 794.486220][ T29] audit: type=1326 audit(1727486131.607:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15517 comm="syz.4.3221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f06cf77df39 code=0x7ffc0000 [ 794.508345][ T29] audit: type=1326 audit(1727486131.607:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15517 comm="syz.4.3221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06cf77df39 code=0x7ffc0000 [ 795.198051][ T29] audit: type=1326 audit(1727486131.607:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15517 comm="syz.4.3221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06cf77df39 code=0x7ffc0000 [ 795.219808][ T29] audit: type=1326 audit(1727486131.607:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15517 comm="syz.4.3221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f06cf77df39 code=0x7ffc0000 [ 796.076056][ T938] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 796.238990][ T938] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 796.250214][ T938] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 796.277728][ T938] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.348787][ T938] usb 5-1: config 0 descriptor?? [ 796.360245][T15548] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 796.375595][T15548] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 797.139273][T15548] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 797.203339][T15548] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 797.276755][T15548] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 797.287688][T15548] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 797.311697][T15548] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 797.317953][T15548] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 797.331911][ T938] keytouch 0003:0926:3333.003C: fixing up Keytouch IEC report descriptor [ 797.374618][ T938] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.003C/input/input67 [ 797.390351][T15548] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 797.407470][T15548] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 797.413503][T15548] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 797.443665][T15548] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 797.506931][ T938] keytouch 0003:0926:3333.003C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 797.728893][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 797.728910][ T29] audit: type=1326 audit(1727486135.067:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15559 comm="syz.0.3234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4957df39 code=0x7ffc0000 [ 797.757438][ T29] audit: type=1326 audit(1727486135.067:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15559 comm="syz.0.3234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fcc4957df39 code=0x7ffc0000 [ 797.779565][ T29] audit: type=1326 audit(1727486135.067:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15559 comm="syz.0.3234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4957df39 code=0x7ffc0000 [ 798.410921][ T5235] Bluetooth: hci5: command 0x0406 tx timeout [ 798.424415][ T29] audit: type=1326 audit(1727486135.067:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15559 comm="syz.0.3234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4957df39 code=0x7ffc0000 [ 798.503546][ T5271] usb 5-1: USB disconnect, device number 79 [ 798.574204][ T29] audit: type=1326 audit(1727486135.067:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15559 comm="syz.0.3234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcc4957df39 code=0x7ffc0000 [ 798.866405][ T29] audit: type=1326 audit(1727486135.067:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15559 comm="syz.0.3234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4957df39 code=0x7ffc0000 [ 799.154418][ T29] audit: type=1326 audit(1727486135.067:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15559 comm="syz.0.3234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4957df39 code=0x7ffc0000 [ 799.174282][ T5235] Bluetooth: hci2: command 0x0406 tx timeout [ 799.229773][T15571] ======================================================= [ 799.229773][T15571] WARNING: The mand mount option has been deprecated and [ 799.229773][T15571] and is ignored by this kernel. Remove the mand [ 799.229773][T15571] option from the mount to silence this warning. [ 799.229773][T15571] ======================================================= [ 799.317091][ T29] audit: type=1326 audit(1727486135.077:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15559 comm="syz.0.3234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fcc4957df39 code=0x7ffc0000 [ 799.348948][ T5235] Bluetooth: hci1: command 0x0c1a tx timeout [ 799.355049][ T5218] Bluetooth: hci0: command 0x0406 tx timeout [ 799.373209][ T29] audit: type=1326 audit(1727486135.077:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15559 comm="syz.0.3234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4957df39 code=0x7ffc0000 [ 799.395830][ T29] audit: type=1326 audit(1727486135.077:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15559 comm="syz.0.3234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4957df39 code=0x7ffc0000 [ 799.422169][T15577] Bluetooth: hci4: command 0x0c1a tx timeout [ 799.518936][T15581] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3242'. [ 800.911152][T15595] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3243'. [ 801.089207][ T5235] Bluetooth: hci5: command 0x0406 tx timeout [ 801.098156][T14041] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 801.206648][T15603] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 801.277437][T15603] Bluetooth: hci2: command 0x0406 tx timeout [ 801.346571][T15603] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 801.356437][T15603] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 801.365186][T15603] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 801.372543][T15603] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 801.434275][T15603] Bluetooth: hci1: command 0x0c1a tx timeout [ 801.440300][T15603] Bluetooth: hci0: command 0x0406 tx timeout [ 802.104537][T15577] Bluetooth: hci4: command 0x0c1a tx timeout [ 802.463394][T15616] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3252'. [ 802.485137][ T5271] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 802.599375][T15624] usb usb9: usbfs: process 15624 (syz.3.3253) did not claim interface 0 before use [ 802.638821][T15624] usb usb9: selecting invalid altsetting 21783 [ 802.655799][ T5271] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 802.667480][ T5271] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 802.682481][ T5271] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.715062][T15590] chnl_net:caif_netlink_parms(): no params data found [ 802.722737][ T5271] usb 3-1: config 0 descriptor?? [ 802.795045][T15577] Bluetooth: hci2: unexpected event for opcode 0x0401 [ 803.273358][ T5271] keytouch 0003:0926:3333.003D: fixing up Keytouch IEC report descriptor [ 803.490108][ T5271] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.003D/input/input68 [ 803.503989][T15577] Bluetooth: hci3: command tx timeout [ 803.509981][T15603] Bluetooth: hci1: command 0x0c1a tx timeout [ 803.824716][ T5271] keytouch 0003:0926:3333.003D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 803.984920][ T5271] usb 3-1: USB disconnect, device number 49 [ 804.174780][T15603] Bluetooth: hci4: command 0x0c1a tx timeout [ 804.205064][T15647] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3259'. [ 805.077075][T15590] bridge0: port 1(bridge_slave_0) entered blocking state [ 805.084367][T15590] bridge0: port 1(bridge_slave_0) entered disabled state [ 805.091670][T15590] bridge_slave_0: entered allmulticast mode [ 805.100941][T15653] overlayfs: failed to resolve './file1': -2 [ 805.101282][T15590] bridge_slave_0: entered promiscuous mode [ 805.115623][T15590] bridge0: port 2(bridge_slave_1) entered blocking state [ 805.123406][T15590] bridge0: port 2(bridge_slave_1) entered disabled state [ 805.134505][T15590] bridge_slave_1: entered allmulticast mode [ 805.141591][T15590] bridge_slave_1: entered promiscuous mode [ 805.182379][T15590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 805.195414][T15590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 805.336560][T15590] team0: Port device team_slave_0 added [ 805.352891][T15590] team0: Port device team_slave_1 added [ 805.489279][T15590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 805.505711][T15590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 805.551034][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 805.551050][ T29] audit: type=1326 audit(1727486142.887:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15664 comm="syz.0.3266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4957df39 code=0x7ffc0000 [ 805.581843][T15603] Bluetooth: hci3: command tx timeout [ 805.620790][T15590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 805.634694][ T29] audit: type=1326 audit(1727486142.887:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15664 comm="syz.0.3266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4957df39 code=0x7ffc0000 [ 805.657232][ T29] audit: type=1326 audit(1727486142.927:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15664 comm="syz.0.3266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fcc4957df39 code=0x7ffc0000 [ 805.692078][ T29] audit: type=1326 audit(1727486142.927:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15664 comm="syz.0.3266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4957df39 code=0x7ffc0000 [ 805.734567][T15590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 805.764383][T15590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 805.821392][T15590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 805.852605][ T29] audit: type=1326 audit(1727486142.927:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15664 comm="syz.0.3266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4957df39 code=0x7ffc0000 [ 805.983022][T15590] hsr_slave_0: entered promiscuous mode [ 805.990156][ T29] audit: type=1326 audit(1727486142.927:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15664 comm="syz.0.3266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcc4957df39 code=0x7ffc0000 [ 806.025510][T15590] hsr_slave_1: entered promiscuous mode [ 806.045927][T15590] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 806.053524][T15590] Cannot create hsr debugfs directory [ 806.066487][ T29] audit: type=1326 audit(1727486142.927:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15664 comm="syz.0.3266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4957df39 code=0x7ffc0000 [ 806.125850][ T29] audit: type=1326 audit(1727486142.927:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15664 comm="syz.0.3266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fcc4957df39 code=0x7ffc0000 [ 806.214595][ T29] audit: type=1326 audit(1727486142.927:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15664 comm="syz.0.3266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4957df39 code=0x7ffc0000 [ 806.278546][ T29] audit: type=1326 audit(1727486142.927:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15664 comm="syz.0.3266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcc4957df39 code=0x7ffc0000 [ 806.667066][T15590] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.911803][T15603] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 806.924201][T15603] Bluetooth: hci2: Injecting HCI hardware error event [ 806.929907][T15677] program syz.4.3271 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 806.943016][T15603] Bluetooth: hci2: hardware error 0x00 [ 807.186441][T15590] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.251793][T15681] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3272'. [ 807.658318][T15577] Bluetooth: hci3: command tx timeout [ 807.897182][T15590] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.398626][T15590] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.080671][T15603] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 809.572242][T15577] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 809.583127][T15577] Bluetooth: hci0: Injecting HCI hardware error event [ 809.593566][T15577] Bluetooth: hci0: hardware error 0x00 [ 809.611888][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.618570][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.745054][T15603] Bluetooth: hci3: command tx timeout [ 809.951921][T15590] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 810.199791][T15714] 9pnet_virtio: no channels available for device syz [ 810.220979][T15590] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 810.829614][T15717] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3280'. [ 810.864198][T15590] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 810.915950][T15720] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3281'. [ 810.966888][T15590] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 811.161748][T15725] pim6reg: entered allmulticast mode [ 811.224487][T15590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 811.264956][T15590] 8021q: adding VLAN 0 to HW filter on device team0 [ 811.278290][ T6720] bridge0: port 1(bridge_slave_0) entered blocking state [ 811.285665][ T6720] bridge0: port 1(bridge_slave_0) entered forwarding state [ 811.333627][T15590] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 811.344540][T15590] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 811.368418][ T6720] bridge0: port 2(bridge_slave_1) entered blocking state [ 811.375684][ T6720] bridge0: port 2(bridge_slave_1) entered forwarding state [ 811.615503][ T25] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 811.654765][T15577] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 811.784225][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 811.828383][ T25] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 811.848652][ T25] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 812.409782][T15590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 812.417278][ T25] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 812.487742][T15742] input: syz0 as /devices/virtual/input/input70 [ 812.563024][T15590] veth0_vlan: entered promiscuous mode [ 812.646947][T15590] veth1_vlan: entered promiscuous mode [ 812.651874][ T25] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 812.662329][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.686198][ T25] hub 1-1:1.0: bad descriptor, ignoring hub [ 812.692152][ T25] hub 1-1:1.0: probe with driver hub failed with error -5 [ 812.702269][ T25] cdc_wdm 1-1:1.0: skipping garbage [ 812.707972][ T25] cdc_wdm 1-1:1.0: skipping garbage [ 812.713206][ T25] cdc_wdm 1-1:1.0: skipping garbage [ 812.718559][ T25] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 813.468182][T15590] veth0_macvtap: entered promiscuous mode [ 813.525425][T15590] veth1_macvtap: entered promiscuous mode [ 813.619274][T15590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 813.638974][T15590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 814.576876][T15590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 814.587454][T15590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 814.597433][T15590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 814.608102][T15590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 814.618138][T15590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 814.628763][T15590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 814.641442][T15590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 814.652262][T15590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 814.662578][T15590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 814.673072][T15590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 814.685670][T15590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 814.726021][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 814.726037][ T29] audit: type=1326 audit(1727486152.067:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15754 comm="syz.4.3290" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f06cf77df39 code=0x0 [ 814.855168][ T8] usb 1-1: USB disconnect, device number 61 [ 814.883162][T15590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 814.941173][T15590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 814.956124][ T29] audit: type=1326 audit(1727486152.277:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15758 comm="syz.4.3291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06cf77df39 code=0x7ffc0000 [ 815.014394][T15590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 815.140829][ T29] audit: type=1326 audit(1727486152.277:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15758 comm="syz.4.3291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06cf77df39 code=0x7ffc0000 [ 815.610024][T15590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.620413][ T29] audit: type=1326 audit(1727486152.317:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15758 comm="syz.4.3291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f06cf77df39 code=0x7ffc0000 [ 815.691879][ T29] audit: type=1326 audit(1727486152.317:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15758 comm="syz.4.3291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06cf77df39 code=0x7ffc0000 [ 815.724431][T15590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 815.750773][T15590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.754218][ T29] audit: type=1326 audit(1727486152.317:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15758 comm="syz.4.3291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06cf77df39 code=0x7ffc0000 [ 815.774888][T15590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 815.798055][T15590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.809108][T15590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 815.809497][ T29] audit: type=1326 audit(1727486152.317:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15758 comm="syz.4.3291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f06cf77df39 code=0x7ffc0000 [ 815.830016][T15590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.863200][T15590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 815.884496][T15590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.904557][T15590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 815.923058][T15590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.946465][T15590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 816.008575][ T29] audit: type=1326 audit(1727486152.327:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15758 comm="syz.4.3291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06cf77df39 code=0x7ffc0000 [ 816.074742][T15590] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.116420][T15590] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.158059][T15590] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.194282][ T29] audit: type=1326 audit(1727486152.327:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15758 comm="syz.4.3291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06cf77df39 code=0x7ffc0000 [ 816.238869][T15590] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.280020][T15767] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3292'. [ 816.512708][ T29] audit: type=1326 audit(1727486152.327:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15758 comm="syz.4.3291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f06cf77df39 code=0x7ffc0000 [ 817.260149][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 817.308523][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 817.386287][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 817.424201][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 817.602696][T15787] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3235'. [ 818.509214][T15792] 9pnet_virtio: no channels available for device syz [ 819.445754][T15802] 9pnet_fd: Insufficient options for proto=fd [ 820.734607][T15823] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3308'. [ 821.073341][T15828] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3306'. [ 821.686730][T15603] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 821.709003][T15835] 9pnet_virtio: no channels available for device syz [ 821.769753][T15825] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3307'. [ 821.784672][T15603] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 821.824956][T15603] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 821.866585][T15603] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 821.875325][T15603] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 821.882659][T15603] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 823.566137][ T25] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 823.754396][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 823.776358][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 824.080652][T15603] Bluetooth: hci5: command tx timeout [ 824.419168][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 824.442836][ T25] usb 3-1: New USB device found, idVendor=1b96, idProduct=000c, bcdDevice= 0.00 [ 825.167678][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.179145][ T25] usb 3-1: config 0 descriptor?? [ 825.556835][T15836] bridge0: port 2(bridge_slave_1) entered disabled state [ 825.565899][T15836] bridge0: port 1(bridge_slave_0) entered disabled state [ 826.134343][T15603] Bluetooth: hci5: command tx timeout [ 826.173564][T15870] netlink: 'syz.0.3318': attribute type 1 has an invalid length. [ 826.216711][T15870] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3318'. [ 826.535482][T15836] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 826.600873][T15836] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 827.118118][T15836] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.127188][T15836] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.144291][T15836] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.153446][T15836] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 828.214579][T15603] Bluetooth: hci5: command tx timeout [ 829.748543][T15900] xt_CT: You must specify a L4 protocol and not use inversions on it [ 830.366209][T15603] Bluetooth: hci5: command tx timeout [ 830.444733][ T67] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.611912][ T25] usbhid 3-1:0.0: can't add hid device: -32 [ 830.618532][ T25] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 831.478513][T15831] chnl_net:caif_netlink_parms(): no params data found [ 831.547186][T15919] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3326'. [ 831.615995][ T67] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.661290][T15919] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 831.684367][T15919] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 831.741384][ T938] usb 3-1: USB disconnect, device number 50 [ 831.779064][ T67] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 832.918024][ T67] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.963859][T15831] bridge0: port 1(bridge_slave_0) entered blocking state [ 834.005199][T15831] bridge0: port 1(bridge_slave_0) entered disabled state [ 834.026737][T15831] bridge_slave_0: entered allmulticast mode [ 834.762543][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 834.762561][ T29] audit: type=1326 audit(1727486172.097:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15950 comm="syz.2.3338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f242f17df39 code=0x7ffc0000 [ 834.820512][T15831] bridge_slave_0: entered promiscuous mode [ 834.850313][ T29] audit: type=1326 audit(1727486172.107:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15950 comm="syz.2.3338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f242f17df39 code=0x7ffc0000 [ 834.881732][T15831] bridge0: port 2(bridge_slave_1) entered blocking state [ 834.912219][ T29] audit: type=1326 audit(1727486172.107:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15950 comm="syz.2.3338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f242f17df39 code=0x7ffc0000 [ 834.919902][T15831] bridge0: port 2(bridge_slave_1) entered disabled state [ 834.959737][T15831] bridge_slave_1: entered allmulticast mode [ 834.996548][T15831] bridge_slave_1: entered promiscuous mode [ 835.017686][ T29] audit: type=1326 audit(1727486172.107:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15950 comm="syz.2.3338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f242f17df39 code=0x7ffc0000 [ 835.043155][ T67] bridge_slave_0: left allmulticast mode [ 835.054214][ T67] bridge_slave_0: left promiscuous mode [ 835.062529][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 835.099912][ T29] audit: type=1326 audit(1727486172.107:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15950 comm="syz.2.3338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f242f17df39 code=0x7ffc0000 [ 835.124614][ T29] audit: type=1326 audit(1727486172.107:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15950 comm="syz.2.3338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f242f17df39 code=0x7ffc0000 [ 835.177012][ T29] audit: type=1326 audit(1727486172.107:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15950 comm="syz.2.3338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f242f17df39 code=0x7ffc0000 [ 835.644339][ T29] audit: type=1326 audit(1727486172.107:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15950 comm="syz.2.3338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f242f17df39 code=0x7ffc0000 [ 835.673872][ T29] audit: type=1326 audit(1727486172.107:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15950 comm="syz.2.3338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f242f17df39 code=0x7ffc0000 [ 835.727862][ T29] audit: type=1326 audit(1727486172.107:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15950 comm="syz.2.3338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f242f17df39 code=0x7ffc0000 [ 838.437939][ T938] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 838.618074][ T938] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 838.647632][ T938] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 838.694156][ T938] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.712121][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 838.735367][ T938] usb 1-1: config 0 descriptor?? [ 838.866635][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 838.957552][ T67] bond0 (unregistering): Released all slaves [ 838.974684][T15953] veth0_vlan: entered allmulticast mode [ 839.030726][T15955] veth0_vlan: left promiscuous mode [ 839.062084][T15955] veth0_vlan: entered promiscuous mode [ 839.262632][ T938] keytouch 0003:0926:3333.003E: fixing up Keytouch IEC report descriptor [ 839.277137][ T938] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.003E/input/input71 [ 839.421923][ T938] keytouch 0003:0926:3333.003E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 839.727322][ T46] usb 1-1: USB disconnect, device number 62 [ 840.820112][T15995] overlayfs: failed to resolve './file1': -2 [ 840.895754][T15831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 840.974852][T15831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 843.864224][ T938] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 844.070481][T15831] team0: Port device team_slave_0 added [ 844.088254][T15831] team0: Port device team_slave_1 added [ 844.108571][ T938] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 844.206460][ T938] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 844.226611][ T938] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 844.236771][ T938] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 844.255191][ T938] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 844.276368][ T938] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 844.296923][ T67] hsr_slave_0: left promiscuous mode [ 844.303531][ T67] hsr_slave_1: left promiscuous mode [ 844.312877][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 844.351408][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 844.375708][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 844.384900][ T938] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 844.394726][ T938] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 844.446007][ T938] usb 1-1: SerialNumber: syz [ 844.535004][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 845.272155][ T938] usb 1-1: can't set config #1, error -71 [ 845.315326][ T938] usb 1-1: USB disconnect, device number 63 [ 845.412879][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 845.412897][ T29] audit: type=1326 audit(1727486182.747:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16028 comm="syz.2.3352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f242f17df39 code=0x7ffc0000 [ 845.477242][ T29] audit: type=1326 audit(1727486182.747:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16028 comm="syz.2.3352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f242f17df39 code=0x7ffc0000 [ 845.499231][ T29] audit: type=1326 audit(1727486182.747:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16028 comm="syz.2.3352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f242f17df39 code=0x7ffc0000 [ 845.521199][ T29] audit: type=1326 audit(1727486182.747:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16028 comm="syz.2.3352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f242f17df39 code=0x7ffc0000 [ 845.544685][ T29] audit: type=1326 audit(1727486182.747:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16028 comm="syz.2.3352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f242f17df39 code=0x7ffc0000 [ 845.568153][ T29] audit: type=1326 audit(1727486182.747:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16028 comm="syz.2.3352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f242f17df39 code=0x7ffc0000 [ 845.594340][ T29] audit: type=1326 audit(1727486182.747:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16028 comm="syz.2.3352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f242f17df39 code=0x7ffc0000 [ 845.616125][ T29] audit: type=1326 audit(1727486182.757:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16028 comm="syz.2.3352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f242f17df39 code=0x7ffc0000 [ 845.634644][ T67] veth1_macvtap: left promiscuous mode [ 845.638158][ T29] audit: type=1326 audit(1727486182.757:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16028 comm="syz.2.3352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f242f17df39 code=0x7ffc0000 [ 845.665145][ T29] audit: type=1326 audit(1727486182.757:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16028 comm="syz.2.3352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f242f17df39 code=0x7ffc0000 [ 845.674041][ T67] veth0_macvtap: left promiscuous mode [ 845.713100][ T67] veth1_vlan: left promiscuous mode [ 845.747278][ T67] veth0_vlan: left promiscuous mode [ 849.242888][ T67] team0 (unregistering): Port device team_slave_1 removed [ 849.478326][ T67] team0 (unregistering): Port device team_slave_0 removed [ 849.607943][T16056] 9pnet_fd: Insufficient options for proto=fd [ 849.733077][T15577] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 849.771504][T15577] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 849.780827][T15577] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 849.789063][T15577] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 849.801976][T15577] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 849.809823][T15577] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 851.541491][T16034] veth0_vlan: left promiscuous mode [ 852.061911][T15577] Bluetooth: hci1: command tx timeout [ 852.076035][T16034] veth0_vlan: entered promiscuous mode [ 852.086722][T16055] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3360'. [ 852.127453][T15831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 852.134742][T15831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 852.206742][T15831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 852.226264][T15831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 852.233256][T15831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 852.259347][T15831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 853.863229][T15831] hsr_slave_0: entered promiscuous mode [ 853.908001][T15831] hsr_slave_1: entered promiscuous mode [ 853.954396][ T5302] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 853.955021][T15831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 854.032598][T15831] Cannot create hsr debugfs directory [ 854.076105][T16083] overlayfs: failed to resolve './file1': -2 [ 854.118655][ T5302] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 854.135528][T15577] Bluetooth: hci1: command tx timeout [ 854.198646][ T5302] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 854.233881][ T5302] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 854.243984][ T5302] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 854.253970][ T5302] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 854.264258][ T5302] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 854.317667][ T5302] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 854.326972][ T5302] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 854.335493][ T5302] usb 3-1: SerialNumber: syz [ 854.559641][ T5302] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 854.568221][ T5302] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -12 [ 855.173639][T16057] chnl_net:caif_netlink_parms(): no params data found [ 855.682557][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 855.682574][ T29] audit: type=1326 audit(1727486193.017:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16115 comm="syz.0.3370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4957df39 code=0x7ffc0000 [ 855.721846][T16057] bridge0: port 1(bridge_slave_0) entered blocking state [ 855.733203][T16057] bridge0: port 1(bridge_slave_0) entered disabled state [ 855.778191][T16057] bridge_slave_0: entered allmulticast mode [ 855.801766][T16057] bridge_slave_0: entered promiscuous mode [ 855.834247][ T29] audit: type=1326 audit(1727486193.047:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16115 comm="syz.0.3370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4957df39 code=0x7ffc0000 [ 855.884352][ T5302] usb 3-1: USB disconnect, device number 51 [ 855.889504][T16057] bridge0: port 2(bridge_slave_1) entered blocking state [ 855.904165][ T29] audit: type=1326 audit(1727486193.047:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16115 comm="syz.0.3370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7fcc4957df39 code=0x7ffc0000 [ 856.084377][T16057] bridge0: port 2(bridge_slave_1) entered disabled state [ 856.085173][ T29] audit: type=1326 audit(1727486193.047:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16115 comm="syz.0.3370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4957df39 code=0x7ffc0000 [ 856.091632][T16057] bridge_slave_1: entered allmulticast mode [ 856.301859][T16057] bridge_slave_1: entered promiscuous mode [ 856.341123][T15577] Bluetooth: hci1: command tx timeout [ 856.954165][ T29] audit: type=1326 audit(1727486193.047:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16115 comm="syz.0.3370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4957df39 code=0x7ffc0000 [ 856.997578][T16057] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 857.047648][T16057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 857.085451][ T29] audit: type=1326 audit(1727486193.087:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16115 comm="syz.0.3370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fcc4957df39 code=0x7ffc0000 [ 857.195859][ T29] audit: type=1326 audit(1727486193.087:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16115 comm="syz.0.3370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4957df39 code=0x7ffc0000 [ 857.318069][ T29] audit: type=1326 audit(1727486193.087:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16115 comm="syz.0.3370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4957df39 code=0x7ffc0000 [ 857.359551][T16057] team0: Port device team_slave_0 added [ 857.403114][T16057] team0: Port device team_slave_1 added [ 857.435293][T15831] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 857.483729][ T29] audit: type=1326 audit(1727486193.087:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16115 comm="syz.0.3370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7fcc4957df39 code=0x7ffc0000 [ 857.532382][T15831] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 857.584692][T15831] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 857.642315][ T29] audit: type=1326 audit(1727486193.087:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16115 comm="syz.0.3370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4957df39 code=0x7ffc0000 [ 857.643811][T16057] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 858.474257][T16057] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 858.500331][T15577] Bluetooth: hci1: command tx timeout [ 858.532286][T16057] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 858.545092][T16057] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 858.552057][T16057] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 858.578013][ C1] vkms_vblank_simulate: vblank timer overrun [ 858.584833][T16057] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 858.662493][T15831] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 858.790361][T16057] hsr_slave_0: entered promiscuous mode [ 858.807190][T16057] hsr_slave_1: entered promiscuous mode [ 858.981070][T16057] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 858.994280][T16057] Cannot create hsr debugfs directory [ 859.409157][T16057] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.648163][T16057] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.602992][T16057] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.766870][T15831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 860.808857][T15831] 8021q: adding VLAN 0 to HW filter on device team0 [ 861.619891][ T6720] bridge0: port 1(bridge_slave_0) entered blocking state [ 861.627079][ T6720] bridge0: port 1(bridge_slave_0) entered forwarding state [ 861.640123][ T6720] bridge0: port 2(bridge_slave_1) entered blocking state [ 861.647346][ T6720] bridge0: port 2(bridge_slave_1) entered forwarding state [ 862.729841][T16057] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.518106][T15831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 864.558967][T16057] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 864.748203][T16057] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 864.891777][T16057] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 864.944192][ T8] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 864.975855][T16057] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 865.010252][T15831] veth0_vlan: entered promiscuous mode [ 865.101835][T15831] veth1_vlan: entered promiscuous mode [ 865.302793][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 865.344372][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 865.364395][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 865.388406][ T8] usb 2-1: New USB device found, idVendor=1b96, idProduct=000c, bcdDevice= 0.00 [ 865.434483][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 865.479228][ T8] usb 2-1: config 0 descriptor?? [ 865.673806][T15831] veth0_macvtap: entered promiscuous mode [ 865.691609][T16057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 865.753053][T15831] veth1_macvtap: entered promiscuous mode [ 865.821976][T15831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 865.874453][T15831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 866.234278][T15831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 866.250385][T15831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 866.280316][T15831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 866.336541][T15831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 866.372252][T15831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 866.437584][T15831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 866.484856][T15831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 866.524143][T15831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 866.745951][T15831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 866.756016][T16057] 8021q: adding VLAN 0 to HW filter on device team0 [ 866.776731][T15831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 866.831332][T15831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 866.938934][T15831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 867.155362][T15831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.206749][T15831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 867.256832][T15831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.298937][T15831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 867.346401][T15831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.388683][T15831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 867.439020][T15831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.477343][T15831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 867.522321][T15831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.567275][T15831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 867.706738][T15831] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.731151][T15831] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.747488][ T8] usbhid 2-1:0.0: can't add hid device: -71 [ 867.761942][T15831] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.781217][T15831] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.798834][ T8] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 867.811608][ T1836] bridge0: port 1(bridge_slave_0) entered blocking state [ 867.818711][ T1836] bridge0: port 1(bridge_slave_0) entered forwarding state [ 867.946818][ T1836] bridge0: port 2(bridge_slave_1) entered blocking state [ 867.953933][ T1836] bridge0: port 2(bridge_slave_1) entered forwarding state [ 868.122044][ T8] usb 2-1: USB disconnect, device number 65 [ 868.170717][ T1836] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 868.201144][ T1836] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 868.234413][ T25] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 868.374011][ T1836] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 868.428073][ T25] usb 3-1: config 1 has an invalid descriptor of length 180, skipping remainder of the config [ 868.445782][ T1836] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 868.556695][ T25] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 868.616390][ T25] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 868.619464][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 868.619478][ T29] audit: type=1326 audit(1727486205.957:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16265 comm="syz.0.3390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4957df39 code=0x7ffc0000 [ 868.698543][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 868.728213][ T25] usb 3-1: SerialNumber: syz [ 868.785867][ T25] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 868.788521][T16270] veth0_vlan: left promiscuous mode [ 868.830184][ T29] audit: type=1326 audit(1727486206.007:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16265 comm="syz.0.3390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4957df39 code=0x7ffc0000 [ 868.932083][T16270] veth0_vlan: entered promiscuous mode [ 868.993071][T16057] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 869.004901][T16273] overlayfs: missing 'lowerdir' [ 869.012186][ T29] audit: type=1326 audit(1727486206.007:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16265 comm="syz.0.3390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7fcc4957df39 code=0x7ffc0000 [ 869.154377][ T29] audit: type=1326 audit(1727486206.007:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16265 comm="syz.0.3390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4957df39 code=0x7ffc0000 [ 869.240978][ T25] usb 3-1: USB disconnect, device number 52 [ 869.315275][ T29] audit: type=1326 audit(1727486206.007:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16265 comm="syz.0.3390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4957df39 code=0x7ffc0000 [ 869.459542][ T29] audit: type=1326 audit(1727486206.037:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16265 comm="syz.0.3390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fcc4957df39 code=0x7ffc0000 [ 869.512612][ T29] audit: type=1326 audit(1727486206.037:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16265 comm="syz.0.3390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4957df39 code=0x7ffc0000 [ 869.542924][ T29] audit: type=1326 audit(1727486206.037:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16265 comm="syz.0.3390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7fcc4957df39 code=0x7ffc0000 [ 869.573189][ T29] audit: type=1326 audit(1727486206.037:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16265 comm="syz.0.3390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4957df39 code=0x7ffc0000 [ 869.608085][ T29] audit: type=1326 audit(1727486206.037:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16265 comm="syz.0.3390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4957df39 code=0x7ffc0000 [ 869.882051][T16057] veth0_vlan: entered promiscuous mode [ 869.912784][T16057] veth1_vlan: entered promiscuous mode [ 870.758071][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.764662][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.215072][T16057] veth0_macvtap: entered promiscuous mode [ 871.369772][T16057] veth1_macvtap: entered promiscuous mode [ 871.649280][T16057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 871.663041][T16057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 872.387770][T16309] netlink: 'syz.1.3398': attribute type 4 has an invalid length. [ 872.396198][T16309] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3398'. [ 872.488669][T16057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 872.499898][T16057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 872.510511][T16057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 872.521254][T16057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 872.531358][T16057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 872.654484][T16057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 872.664747][T16057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 872.675566][T16057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 872.685442][T16057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 872.695921][T16057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 872.708361][T16057] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 872.900192][T16057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 872.996855][T16057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 873.035312][T16057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 873.056057][T16057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 873.066258][T16057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 873.077452][T16057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 873.087777][T16057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 873.098342][T16057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 873.108417][T16057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 873.119282][T16057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 873.129550][T16057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 873.140327][T16057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 873.150300][T16057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 873.160986][T16057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 873.176439][T16057] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 873.873809][T16057] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.927370][T16057] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.955944][T16057] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.971598][T16057] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 874.114240][ T938] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 874.239500][ T2592] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 874.276905][ T938] usb 1-1: Using ep0 maxpacket: 16 [ 874.312566][ T2592] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 874.325910][ T938] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 874.593794][ T938] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 874.603681][ T938] usb 1-1: New USB device found, idVendor=1b96, idProduct=000c, bcdDevice= 0.00 [ 874.613099][ T938] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 874.624606][ T938] usb 1-1: config 0 descriptor?? [ 874.668422][ T1836] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 874.694522][ T1836] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 876.575055][T16355] xt_CT: You must specify a L4 protocol and not use inversions on it [ 880.143283][ T938] usbhid 1-1:0.0: can't add hid device: -32 [ 880.149454][ T938] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 907.489458][ T25] usb 1-1: USB disconnect, device number 64 [ 931.515294][ T5218] Bluetooth: hci3: command 0x0406 tx timeout [ 949.446582][T15577] Bluetooth: hci5: command 0x0406 tx timeout [ 955.574854][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 955.581181][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 987.500525][T15577] Bluetooth: hci1: command 0x0405 tx timeout [ 993.504518][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.510847][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1041.585133][ T30] INFO: task kworker/u8:6:1836 blocked for more than 151 seconds. [ 1041.592990][ T30] Not tainted 6.11.0-syzkaller-11624-ge477dba5442c #0 SYZFAIL: failed to send rpc fd=3 want=2256 sent=0 n=-1 (errno 32: Broken pipe) [ 1043.773781][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1043.787898][ T30] task:kworker/u8:6 state:I stack:20944 pid:1836 tgid:1836 ppid:2 flags:0x00004000 [ 1043.799461][ T30] Workqueue: 0x0 (events_unbound) [ 1043.812675][ T30] Call Trace: [ 1043.818297][ T30] [ 1043.821237][ T30] __schedule+0x1843/0x4ae0 [ 1043.834176][ T30] ? __pfx___schedule+0x10/0x10 [ 1043.844574][ T30] ? __pfx_lock_release+0x10/0x10 [ 1043.850295][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1043.856562][ T30] ? schedule+0x90/0x320 [ 1043.860807][ T30] ? wq_worker_sleeping+0x66/0x240 [ 1043.873386][ T30] ? schedule+0x90/0x320 [ 1043.903068][ T30] schedule+0x14b/0x320 [ 1043.919960][ T30] worker_thread+0xa30/0xd30 [ 1043.939540][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1043.958262][ T30] ? __kthread_parkme+0x169/0x1d0 [ 1043.963329][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1043.985251][ T30] kthread+0x2f0/0x390 [ 1043.989349][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1044.014122][ T30] ? __pfx_kthread+0x10/0x10 [ 1044.026468][ T30] ret_from_fork+0x4b/0x80 [ 1044.030934][ T30] ? __pfx_kthread+0x10/0x10 [ 1044.036006][ T30] ret_from_fork_asm+0x1a/0x30 [ 1044.040787][ T30] [ 1044.054830][ T30] [ 1044.054830][ T30] Showing all locks held in the system: [ 1044.062587][ T30] 3 locks held by kworker/u8:0/11: [ 1044.093827][ T30] 6 locks held by kworker/u8:1/12: [ 1044.104744][ T30] #0: ffff88801baeb148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1044.144141][ T30] #1: ffffc90000117d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1044.204113][ T30] #2: ffffffff8fcb2450 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 1044.213619][ T30] #3: ffffffff8fcbef48 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1f/0x1e0 [ 1044.254099][ T30] #4: ffff888030155428 (&wg->device_update_lock){+.+.}-{3:3}, at: wg_netns_pre_exit+0xba/0x1e0 [ 1044.284133][ T30] #5: ffffffff8e93d338 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 1044.334101][ T30] 2 locks held by kworker/1:0/25: [ 1044.339177][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1044.414057][ T30] #1: ffffc900001f7d00 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1044.454087][ T30] 1 lock held by khungtaskd/30: [ 1044.458990][ T30] #0: ffffffff8e937da0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 1044.544239][ T30] 2 locks held by kworker/u8:7/2592: [ 1044.549542][ T30] 2 locks held by getty/4972: [ 1044.578361][ T30] #0: ffff8880333aa0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1044.588216][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 1044.605681][ T30] 1 lock held by syz-executor/14040: [ 1044.610975][ T30] #0: ffffffff8fcbef48 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 1044.633417][ T30] 1 lock held by syz-executor/15035: [ 1044.641240][ T30] #0: ffffffff8fcbef48 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 1044.653224][ T30] 3 locks held by syz-executor/15831: [ 1044.658770][ T30] #0: ffff88806cb74d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 1044.674113][ T30] #1: ffff88806cb74078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 1044.724187][ T30] #2: ffffffff8fe2b7a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 1044.737429][ T30] 3 locks held by syz-executor/16057: [ 1044.742831][ T30] #0: ffff88807a280d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 1044.754208][ T30] #1: ffff88807a280078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 1044.774204][ T30] #2: ffffffff8fe2b7a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 1044.794744][ T30] 1 lock held by syz.1.3407/16346: [ 1044.799889][ T30] #0: ffffffff8e93d338 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 1044.810916][ T30] 1 lock held by dhcpcd/16369: [ 1044.815842][ T30] #0: ffff88805ed50808 (&sb->s_type->i_mutex_key#9){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 1044.828235][ T30] [ 1044.830589][ T30] ============================================= [ 1044.830589][ T30] [ 1044.840212][ T30] NMI backtrace for cpu 0 [ 1044.844581][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-11624-ge477dba5442c #0 [ 1044.854759][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1044.864830][ T30] Call Trace: [ 1044.868117][ T30] [ 1044.871068][ T30] dump_stack_lvl+0x241/0x360 [ 1044.875770][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1044.880981][ T30] ? __pfx__printk+0x10/0x10 [ 1044.885599][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 1044.890554][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1044.896026][ T30] ? _printk+0xd5/0x120 [ 1044.900198][ T30] ? __pfx__printk+0x10/0x10 [ 1044.904822][ T30] ? __wake_up_klogd+0xcc/0x110 [ 1044.909698][ T30] ? __pfx__printk+0x10/0x10 [ 1044.914304][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 1044.919359][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1044.925362][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 1044.931453][ T30] watchdog+0xff4/0x1040 [ 1044.935720][ T30] ? watchdog+0x1ea/0x1040 [ 1044.940151][ T30] ? __pfx_watchdog+0x10/0x10 [ 1044.944925][ T30] kthread+0x2f0/0x390 [ 1044.948987][ T30] ? __pfx_watchdog+0x10/0x10 [ 1044.953658][ T30] ? __pfx_kthread+0x10/0x10 [ 1044.958243][ T30] ret_from_fork+0x4b/0x80 [ 1044.962654][ T30] ? __pfx_kthread+0x10/0x10 [ 1044.967321][ T30] ret_from_fork_asm+0x1a/0x30 [ 1044.972092][ T30] [ 1044.976001][ T30] Sending NMI from CPU 0 to CPUs 1: [ 1044.981757][ C1] NMI backtrace for cpu 1 [ 1044.981769][ C1] CPU: 1 UID: 0 PID: 6720 Comm: kworker/u8:12 Not tainted 6.11.0-syzkaller-11624-ge477dba5442c #0 [ 1044.981789][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1044.981801][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 1044.981826][ C1] RIP: 0010:deref_stack_reg+0x96/0x210 [ 1044.981851][ C1] Code: e8 2f f6 b9 00 4c 89 fe 4c 8b 04 24 48 ba 00 00 00 00 00 fc ff df 48 89 5c 24 10 4d 8b 7e 10 4c 89 f3 48 c1 eb 03 0f b6 04 13 <84> c0 0f 85 14 01 00 00 41 83 3e 00 74 1c 4c 39 c6 77 17 4d 39 c7 [ 1044.981871][ C1] RSP: 0018:ffffc900045cf278 EFLAGS: 00000a02 [ 1044.981885][ C1] RAX: 0000000000000000 RBX: 1ffff920008b9e80 RCX: 0000000000000000 [ 1044.981896][ C1] RDX: dffffc0000000000 RSI: ffffc900045c8000 RDI: ffffc900045cf400 [ 1044.981909][ C1] RBP: ffffc900045cf408 R08: ffffc900045cf490 R09: 0000000000000000 [ 1044.981920][ C1] R10: ffffc900045cf450 R11: fffff520008b9e8c R12: 1ffff920008b9e81 [ 1044.981933][ C1] R13: 1ffff920008b9e82 R14: ffffc900045cf400 R15: ffffc900045d0000 [ 1044.981945][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 1044.981959][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1044.981971][ C1] CR2: 0000562486982600 CR3: 000000000e734000 CR4: 00000000003506f0 [ 1044.981988][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1044.981998][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1044.982009][ C1] Call Trace: [ 1044.982014][ C1] [ 1044.982021][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 1044.982040][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1044.982065][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1044.982083][ C1] ? nmi_handle+0x2a/0x5a0 [ 1044.982106][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1044.982126][ C1] ? nmi_handle+0x14f/0x5a0 [ 1044.982141][ C1] ? nmi_handle+0x2a/0x5a0 [ 1044.982157][ C1] ? deref_stack_reg+0x96/0x210 [ 1044.982179][ C1] ? default_do_nmi+0x63/0x160 [ 1044.982199][ C1] ? exc_nmi+0x123/0x1f0 [ 1044.982217][ C1] ? end_repeat_nmi+0xf/0x53 [ 1044.982245][ C1] ? deref_stack_reg+0x96/0x210 [ 1044.982267][ C1] ? deref_stack_reg+0x96/0x210 [ 1044.982290][ C1] ? deref_stack_reg+0x96/0x210 [ 1044.982313][ C1] [ 1044.982318][ C1] [ 1044.982326][ C1] ? stack_trace_save+0x118/0x1d0 [ 1044.982343][ C1] unwind_next_frame+0x1799/0x22d0 [ 1044.982370][ C1] ? arch_stack_walk+0xe5/0x150 [ 1044.982390][ C1] __unwind_start+0x59a/0x740 [ 1044.982414][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1044.982432][ C1] arch_stack_walk+0xe5/0x150 [ 1044.982450][ C1] ? stack_trace_save+0x118/0x1d0 [ 1044.982469][ C1] stack_trace_save+0x118/0x1d0 [ 1044.982487][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1044.982507][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1044.982532][ C1] kasan_save_track+0x3f/0x80 [ 1044.982578][ C1] kasan_save_free_info+0x40/0x50 [ 1044.982595][ C1] __kasan_slab_free+0x59/0x70 [ 1044.982614][ C1] ? ieee80211_ibss_rx_queued_mgmt+0x1b1e/0x2d70 [ 1044.982635][ C1] kfree+0x1a0/0x440 [ 1044.982649][ C1] ? ieee80211_ibss_rx_queued_mgmt+0x1b1e/0x2d70 [ 1044.982672][ C1] ieee80211_ibss_rx_queued_mgmt+0x1b1e/0x2d70 [ 1044.982699][ C1] ? ieee80211_ibss_rx_queued_mgmt+0xf7e/0x2d70 [ 1044.982719][ C1] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 1044.982744][ C1] ? mark_lock+0x9a/0x360 [ 1044.982761][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1044.982784][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1044.982806][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1044.982833][ C1] ieee80211_iface_work+0x8a5/0xf20 [ 1044.982858][ C1] cfg80211_wiphy_work+0x2db/0x490 [ 1044.982878][ C1] ? process_scheduled_works+0x976/0x1850 [ 1044.982898][ C1] process_scheduled_works+0xa63/0x1850 [ 1044.982932][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1044.982956][ C1] ? assign_work+0x364/0x3d0 [ 1044.982978][ C1] worker_thread+0x870/0xd30 [ 1044.983008][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1044.983031][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1044.983054][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1044.983074][ C1] kthread+0x2f0/0x390 [ 1044.983088][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1044.983108][ C1] ? __pfx_kthread+0x10/0x10 [ 1044.983123][ C1] ret_from_fork+0x4b/0x80 [ 1044.983144][ C1] ? __pfx_kthread+0x10/0x10 [ 1044.983158][ C1] ret_from_fork_asm+0x1a/0x30 [ 1044.983186][ C1] [ 1044.998189][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1044.998206][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-11624-ge477dba5442c #0 [ 1044.998226][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1044.998237][ T30] Call Trace: [ 1044.998244][ T30] [ 1044.998252][ T30] dump_stack_lvl+0x241/0x360 [ 1044.998276][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1044.998293][ T30] ? __pfx__printk+0x10/0x10 [ 1044.998314][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1044.998343][ T30] ? vscnprintf+0x5d/0x90 [ 1044.998363][ T30] panic+0x349/0x880 [ 1044.998387][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1044.998408][ T30] ? __pfx_panic+0x10/0x10 [ 1044.998427][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 1044.998445][ T30] ? __irq_work_queue_local+0x137/0x410 [ 1044.998468][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1044.998486][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1044.998505][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 1044.998525][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 1044.998547][ T30] watchdog+0x1033/0x1040 [ 1044.998569][ T30] ? watchdog+0x1ea/0x1040 [ 1044.998595][ T30] ? __pfx_watchdog+0x10/0x10 [ 1044.998614][ T30] kthread+0x2f0/0x390 [ 1044.998629][ T30] ? __pfx_watchdog+0x10/0x10 [ 1044.998648][ T30] ? __pfx_kthread+0x10/0x10 [ 1044.998665][ T30] ret_from_fork+0x4b/0x80 [ 1044.998686][ T30] ? __pfx_kthread+0x10/0x10 [ 1044.998701][ T30] ret_from_fork_asm+0x1a/0x30 [ 1044.998734][ T30] [ 1045.560193][ T30] Kernel Offset: disabled [ 1045.564507][ T30] Rebooting in 86400 seconds..