last executing test programs: 22.19587159s ago: executing program 3 (id=1030): ioperm(0x0, 0x5, 0x6) msgrcv(0x0, 0x0, 0x2, 0x0, 0x4800) 22.071327873s ago: executing program 3 (id=1031): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) msgget$private(0x0, 0x0) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000300)) openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)={0x100, 0x17, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0xe0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'ipvlan1\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'wg0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xdb2f}]}]}, 0x100}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x0, 0x4, 0x8}, 0x48) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r5, 0xfffffffd) r6 = socket$inet_smc(0x2b, 0x1, 0x0) sendto$inet(r6, 0x0, 0x0, 0x20000000, 0x0, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f0000000100)=0x8) setsockopt$inet_tcp_int(r6, 0x6, 0x19, &(0x7f00000000c0)=0x7, 0x4) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x7) connect$inet(r6, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendto$inet(r6, &(0x7f0000000040)='u', 0xa792a, 0x804, 0x0, 0x0) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000200)={'caif0\x00', 0x400}) ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f0000000100)={'erspan0\x00'}) 19.66363308s ago: executing program 3 (id=1041): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001400)={'#! ', './file0', [{0x20, 'cgroup.controllers\x00'}, {0x20, '\x01\x04p&O:]/..*('}, {0x20, '@('}]}, 0x2f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001940)="1f18e395312d0af6d9de516f9695d0191a15a3d0c6def5", 0x17) r2 = accept4(r1, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r3, r2, 0x0, 0x5) 19.47635374s ago: executing program 3 (id=1045): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r2, r0, 0x2, 0x0, @void}, 0x10) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r3, 0x2, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x3, 0x0, 0x0, 0x0, 0x0}, 0x40) 19.332971043s ago: executing program 3 (id=1046): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x37}, 0x20) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f00000003c0)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_CURSOR(r4, 0xc01c64a3, &(0x7f0000000400)={0x1, r5}) 16.774728172s ago: executing program 3 (id=1055): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r3 = memfd_create(&(0x7f0000000680)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2,\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc\xb7L\xf4\x93\x90\n#\xf6\au\xf5\x8a\xf16\xear\xa5\xe0m\'\xf8\xc7\xe9\x94\xa2%\xaa;\x9a\xb7\xf4>\xeetC\x17\x7f\x12\xe3\xc9\xd8\x9eU\xf5\xd2\xfc\x7f\xa3\xc9\xee\x85\x1bL\xb8\xc3\xa1\x17\xd8@\x14\xc3\xd0;\x8d)&\njC\xb85\xf1N\xa7\xc5\xfe\x19\x98\xb5\xb4\xdd\xaf\xeafx\xcaR\xe9s\x98\x06\xce\xf7R\xe3\v\xa0\xb1\x9d\xebg\x04\xfa\xc8\xe3\xce\xbb04\x01\xa0\x9bAZq8\xed\xb9', 0x3) ftruncate(r3, 0xffff) fcntl$addseals(r3, 0x409, 0x7) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8831, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='affs\x00', 0x0, 0x0) r7 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f00000002c0)={r3, 0x0, 0x0, 0x3000}) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r8}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000040)={0x3}, 0x8, 0x10, &(0x7f0000000000), 0xfffffffffffffcb4, 0x0, r8, 0x0, 0x0, 0x0, 0x10, 0x104}, 0x90) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f00000003c0)={'#! ', '', [], 0xa, "a4d6007de5e3bba3ff0c602136841e8a8adf7252dec2643f07e4101a32ef8af35bb7c3371d055eee6ab98fe00d7321cc79a6c14892528fc4fb2479b63f"}, 0x41) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r10, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r9, 0x40045402, &(0x7f0000000040)={{}, 0x0, 0x0, 'id0\x00', 'timer1\x00'}) 13.841569021s ago: executing program 2 (id=1067): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x0, 0x8, 0x8}, 0x48) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x2000070, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000019c0)={0x2020}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f0000008200)={0x2020}, 0x2020) sendmmsg$unix(r2, &(0x7f000000b040)=[{{0x0, 0x0, &(0x7f00000002c0)}}], 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48c8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r5, 0x11, 0xa, &(0x7f0000000040), 0x4) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000001180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) unshare(0xa000600) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f0000001280)={{0x0, 0x0, 0x9, 0x2, 0x0, 0x1, 0xb3f, 0xe194, 0x8000, 0x1f, 0x40, 0x1f, 0x64d3, 0xffffffffffffffe1, 0xc4}}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f00000001c0)={{0x0, 0x7fffffffffffffff, 0x8, 0x8001, 0x0, 0x0, 0x3, 0x9, 0x10001, 0x78229756, 0x101, 0x8, 0x1, 0xffff, 0x9}, 0x20, [0x0, 0x0, 0x0, 0x0]}) socketpair$unix(0x1, 0x0, 0x0, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSABS20(r6, 0x401845e0, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x23, 0xb, 0x7fffffffeff3) 12.717965561s ago: executing program 2 (id=1070): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000002100010000000000000000000200000000e6ffffffffffff040013"], 0x24}}, 0x0) 12.41425525s ago: executing program 2 (id=1071): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_pidfd_open(0x0, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) accept$alg(r4, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085020000060000009500000000000000"], &(0x7f0000001080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x10, r6, 0x0) setsockopt$WPAN_WANTLQI(r6, 0x0, 0x3, &(0x7f0000001040)=0x1, 0x4) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r7, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x0, 0x9}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f0000000940)={0x0, 0x9}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f00000002c0), 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 11.37804244s ago: executing program 2 (id=1074): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200a006005307000100000002000020d3"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) setresuid(0xee01, 0xee00, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550c, 0x0) 11.12569122s ago: executing program 2 (id=1075): r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e0d05000200"/16], 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, 0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x90) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$smackfs_netlabel(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000000a80)=[{0x0}, {&(0x7f00000005c0)="8245a0b1235ada4490a781d70c09103c", 0x10}], 0x2}, 0x0) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f00000006c0)={0xe, @pix_mp}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r5) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x44, r6, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}]}, 0x44}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 8.190729593s ago: executing program 2 (id=1077): sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x6) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0xfffffea7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x497d, &(0x7f0000000100)={0x0, 0x8ff3, 0x800, 0x0, 0x1ed}, &(0x7f0000000040), &(0x7f0000000180)) r2 = io_uring_setup(0x3eb1, &(0x7f0000000480)={0x0, 0x655f, 0x800, 0x0, 0x0, 0x0, r1}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0), 0x0) pipe2$9p(&(0x7f0000000000), 0x0) socket$packet(0x11, 0x0, 0x300) writev(0xffffffffffffffff, &(0x7f0000000340), 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r4) r6 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r7) r9 = dup3(r6, r3, 0x0) ioctl$NBD_DO_IT(r9, 0xab03) write$binfmt_misc(r8, &(0x7f0000000300)={'syz1', "d2216281721efe9bf1fdd1f3"}, 0x10) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r10 = socket$kcm(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="3400003ebd4b0510830027e1aaa2436f6004ea0df342350d02237083d692b6436169441f121c70a7648d493d6a8cac0bef4d8f06636408d50aa7c94509933e64171c0d7119ed316fbc2bb1998eb568c2c05907d321a427e7f232ca7b101f3bc3e148e6ed43cdea9138dae5f33f9957f5bb252a11fe059d98cde79c61aaa653beb307478fc29c61433267557ce8400f759a9a337b8d3daccf340a8c18ff8641409a61b55c8f711d4ad976dc78df58d2788e0af097da7448a245004c290a9766b7afae", @ANYRES16=0x0], 0x34}}, 0x0) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000500", 0x33fe0}], 0x1}, 0x0) syz_open_procfs(0x0, 0x0) socket$rds(0x15, 0x5, 0x0) 5.169910039s ago: executing program 4 (id=1085): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000c80)={0x8, @sliced}) 5.050993805s ago: executing program 4 (id=1086): r0 = socket$inet(0x2, 0x3, 0x6) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000001300)={0x2, 0x0, @loopback}, 0x10) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000080), 0x18) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="540100001000130700000000000000007f0000010000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb0000000000000000000000000000000032000000ac1914aa000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000015000d00000000000000000000000000000000000000000000000000000000000000000000000002000400000000000000000048000200656362286369706865725f6e756c6c290000000000"], 0x154}}, 0x0) r3 = syz_usbip_server_init(0x3) write$usbip_server(r3, &(0x7f0000000080)=@ret_unlink={{0x4, 0x5, 0x0, 0x0, 0x3}, {0x5}}, 0x30) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000200)={0x0, 0x1, 0x0, &(0x7f0000000100)=""/47, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_LOG_BASE(r4, 0x4008af00, &(0x7f00000000c0)) rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffffbfd]}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000000)) r5 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r5, &(0x7f0000001940)=""/4086, 0xff6) 3.423080075s ago: executing program 4 (id=1087): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10) shmdt(0x0) 2.842749073s ago: executing program 1 (id=1089): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a320000000008000440040000000900010073797a3000000000080003"], 0x64}}, 0x0) 2.754374046s ago: executing program 0 (id=1090): r0 = io_uring_setup(0x354a, &(0x7f0000000140)) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x10000000}}, 0x10) bind$tipc(r1, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x2}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f00000006c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x10000001}}}, 0x10) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f00000001c0)={0x42, 0x4}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 2.337617101s ago: executing program 1 (id=1091): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x24, r1, 0xd66771a5e8224ded, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_PID={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x24}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70300000000000085000000ad000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r4, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xffffffffffffffff, ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0xa, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, &(0x7f0000000300)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x0, 0x8, 0xfffffffffffffeff, &(0x7f0000000440)}}, 0x10) 2.271110605s ago: executing program 0 (id=1092): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000300)=0x208) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r0, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 2.002371474s ago: executing program 0 (id=1093): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, 0x0) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts={{0x13, 0x9}, {0x2, [{}, {0xc8, 0x7}]}}}, 0xc) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r6, 0x4b72, &(0x7f0000000200)={0x0, 0x1, 0x6, 0x21, 0x67, &(0x7f0000000340)="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"}) syz_emit_vhci(&(0x7f0000000280)=@HCI_VENDOR_PKT, 0x2) fchdir(0xffffffffffffffff) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f00000038c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x4, 0x2}}}}, 0xf) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000140)={{0x7f, 0xf7d1}, 0x100, './file0\x00'}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000540), 0x4) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x26f}]}) ioctl$sock_inet_SIOCGARP(r4, 0x8954, &(0x7f0000000040)={{0x2, 0x4e20, @private=0xa010100}, {0x306, @broadcast}, 0x0, {0x2, 0x4e24, @multicast1}, 'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x2c, 0x33, @action={{{}, {}, @broadcast}, @sp_mp_confirm={0xf, 0x2, {0x0, @default, {}, @val={0x72, 0x6}, @void}}}}]}, 0x48}}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r0, r10) 1.965487525s ago: executing program 1 (id=1094): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x4, [{0x4, 0x4}]}, @ptr={0x0, 0x0, 0x0, 0x4}, @func={0x4, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x5a}, 0x20) 1.812171s ago: executing program 4 (id=1095): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r0, &(0x7f0000001580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/56, 0x38}, {&(0x7f0000000040)=""/78, 0x4e}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/4096, 0x1000}], 0x4}}], 0x1, 0x0, 0x0) 1.770310382s ago: executing program 1 (id=1096): syz_emit_ethernet(0x76, &(0x7f00000003c0)={@link_local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "ff00", 0x40, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "edb56b", 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast2, [@srh={0x84}, @dstopts]}}}}}}}, 0x0) 1.563087434s ago: executing program 4 (id=1097): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffff0b3c}) write$snddsp(r2, &(0x7f0000000000)="ea09b7bafc1a5dbbe8165e69a528", 0xe) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0x40084146, &(0x7f0000000080)=0x1ff) 1.529211462s ago: executing program 1 (id=1098): socket$nl_netfilter(0x10, 0x3, 0xc) ftruncate(0xffffffffffffffff, 0xb58c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r3, 0xc034564b, &(0x7f0000000080)={0x0, 0x35315258, 0xf00}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0x80dc5521, 0xfffffffffffffffd) pipe2$9p(&(0x7f0000000240), 0x0) syz_emit_ethernet(0x36, 0x0, 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES32], 0x58) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000780)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000007c0)=0x10) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x7, 0x0, 0x7}, 0x10) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 1.202664174s ago: executing program 0 (id=1099): r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000040)=""/3, &(0x7f0000000280)=0x3) 392.184983ms ago: executing program 1 (id=1100): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0xffd8) mkdir(0x0, 0x0) chdir(0x0) open(&(0x7f0000000040)='./file0\x00', 0x40c5, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file2\x00', 0x10001, 0x85) socket$caif_stream(0x25, 0x1, 0x1) r2 = socket$inet6(0xa, 0x3, 0x0) setsockopt$inet6_int(r2, 0x29, 0x10, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x0, 0x1) syz_emit_ethernet(0xa2, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'lo\x00'}) close(r3) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f0000000100)=[{&(0x7f00000000c0)}], 0x1) open(&(0x7f0000000040)='./file2\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000300), 0x0, 0x0) r6 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_DQBUF(r6, 0xc0585611, &(0x7f0000000140)=@mmap={0x0, 0x9, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d3f61e4a"}, 0x0, 0x1, {}, 0x4}) ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x4c00, 0x3) socket$nl_route(0x10, 0x3, 0x0) 376.24091ms ago: executing program 4 (id=1101): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f3, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x2, 0x4, 0x0, @empty, @empty}}}}) ptrace(0x10, r0) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x78, 0x8, 0x2, 0x0, 0x1}, 0x48) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x3) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x2f, 0x0, 0xe, 0x6, 0xa, @remote, @rand_addr=' \x01\x00', 0x700, 0x7, 0xffffffff, 0x53204299}}) open_by_handle_at(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYRES32=r4], 0x400000) bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, r6, 0x25, 0x1, @val=@netkit={@prog_id}}, 0x40) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout_data(r7, 0x107, 0x16, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000140)={@random="5b1a033f2511", @remote, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x4578, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x10, 0x0, 0x0, "fdcdae25a7a296872a8a5290e48e30acf8afc7e67d70a62c979cefa10a0028bd", "ae0000000000000000e400", {"35f3c07eeca4a20a9858ac1500", "63081fe8fe001a08ed082ad7121d696f"}}}}}}}, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x10, 0xd, "5d5a904b472ef1d846e7e7d2e7f9df853b835c7c58f8a1594d8ecedfac90f0cc44ce47b81658177fd794cb4ee66afb126718bd7299f054c3727c03b484fccd9e", "dd1fe70c073da0e401c13db656b89cfe7d41974f81fb7fa3901939a8c5b8e9b55002ab2a56c26e42281dfa2de71d4e46eaad65f3e0cfc33b496e0bb5d59e0582", "9ee46b34bddd6159047e66ef382e708c03d731f44e6be0b294212033683bebc9", [0x100, 0x800]}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000000), &(0x7f0000000100)=@udp6=r8}, 0x20) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f00000002c0)={r2, &(0x7f0000000000), 0x0}, 0x20) ptrace$setopts(0x4200, r0, 0x30, 0x52) r9 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fcntl$dupfd(r9, 0x0, r9) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000600)=ANY=[@ANYRES64=r9], &(0x7f0000000100)='GPL\x00'}, 0x90) 289.399495ms ago: executing program 0 (id=1102): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0x10000) read$dsp(r0, &(0x7f00000000c0)=""/105, 0x69) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000a00)=0x40000) 0s ago: executing program 0 (id=1103): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000000)) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'geneve0\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) sendto$packet(r3, &(0x7f00000003c0)="3f030e00031b12000000000089e9aaa911d7c2290f00810000008100642c4a1b786100008d6b", 0x26, 0x0, &(0x7f00000000c0)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @random="009a00"}, 0x14) r5 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$inet6(r5, &(0x7f0000007a00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003800)=[{&(0x7f0000002680)="5bb431ef421e5b08449b89cbfc052e258149d1", 0x13}, {&(0x7f00000026c0)="2a6f64929718f51db64e9ea73cb2ead5d41a499768827802c5fb51e9bbdf486567c7db724a17ce498bc5c66e2fb07888585f7e0e80080922889eb2f15b9db61f5772d0817083f38d482b10cdad65988e55820eb192fac120529b5de43e", 0x5d}, {&(0x7f0000002740)="f6618819ddefd0879a91b763f2ed0c06ffb3d16e8e05e85f", 0x18}, {&(0x7f0000002780)}, {&(0x7f00000027c0)="5ac384c6cb2e5a62fef219fc2c0e9a0d4aa8c6d4dd540af4548201cfa8cab51dd1de8b55c885287387bcd9b77293d918beab99c2aa1679f19b80d0309e1aa6ce4012fabdd67528c2d9cf0b6c6bb4984dbf1381135ad947965c7d1eab50bd5a34c946ccf9b6b0f167a817b44f4bd2ab05eed59cae9ee3cf70cab1bb291a5be9cf119bb3000822d3005db58426b9020891d0e8bc2cb84893f4c518e0633eadb7aa1267f7423bb0c366e93b21ccefa67b05edfa2b864ab878b8f80f9a301d6b4a2529fefbc6a1ea9e35bb0418691d1e169e9623efc3ca75001afd022f938b8a9da6cc9694cb0ccaee9ddd1e7e894434b7392a9f0d90ccd1e47dc2bf932b9cd426ae39f0ff21216dfb75f98748effd9b1b17f821681c353d6a16d7a327e16172cf6ab782016335a4e31483ede399b8a240ecbd7398e481db965a908d550a2cc47c4c4072da5900ed0f6e72704fa77f22085f9596bc5b08313ce3cf94563a70dcfcd11c31bd56a5c220590bd6ceee2021e717a60ee1f2b9c33568f704d697ba42ffd3730bf98271ad906387dab52a63c24f0c6572fd7a48f5f9d7f0c4d3a8b755774bd0c898d7be4310aceaad6f3c38dd3e4b707bf9737190f0e865db470f4811af0a19ae4ea9d271cbd36c2affdc4e79738ec0b2caf7cbd00f207e8dfc93c6478d7b312d3ce5e080c49ec139b51a685fa5e73e34190ccdd1c5408698fdc7eeacfb92ab74b6dbda5897aaebf16f0cb4f534a4bdb9f90844aa0bad675425fe0e540deb9969a45baa7d687ae48409c06fb7f5dd1b497cc384874040f8c2e413b2ae03c8059b63696c1c6d4dbd827b62112b784ebace78c3b84c04143d817645fa46db63231a5d878a63943ad5e99082480be94779e2059aaaafb675db0da577b9d53eb8f53263aa78e137bd24d0bc492a945abd7f0ccea399eb9f2be3580a54450a908f1f602fd3ef70b7d3a7fc313f5d4fa2375e51dbf3b106da6d2a0959c0fa931207923c74af2362f798ff192b92e2f3179de0b55cec8ca1e1958527541a373749852a74b2d21a9ed06dd603b4b696cfd95d64ed5af42e747589b7a29cf4c8200ab74f367754bc9138af7ba864ec6d6ab1e98cd7fb0093521090ba85218d77fe1a5da2b87f9af3e2e0c6b280be431c25f3a40f892c6fd1aa98657d1318944b0c5ec174af15888e73251d5e774b29486ae82e67122c2f3b51992f0c51ae173737dab13ebaef9930b3c1fe9c867074e0155ed3858c3792c4f4796bdefdcaf2f51875a1c97b463a3e8dc43a62bfa65d19f9c1fc2c8e16e5850e3cc74a7adbe80da7e09b305a65cf90a959119c33008a764e6a2625dcbc37052c548767fe36a21b5921bf681ba881b6d25fe643f8f779e1e1aab916742f2d7359caef9dd6b0e5d4e1c78aa9d938ce9a1d04696f3b52b8dd8644aff727eefbc71376c132a9ac6b0b0e1aa925fcc519383e20603726dfd5d1066c7a3248aae8e5ad799d8ac3b7adfe1c75cb97db80cd725f257cbab9627007ea8ddb106db04b6b02025e54ae13858aaaa125d24b6e0df09549599f332e80f4f1f49cf68ebbe35a54b3acb55b3e3ad544fc94a31eed0687d2fc84217c5d630d6bdb976a37c233433b612953c2847fc8ee01f83c2ae8e1102d6f5defe7be3aa9eaf691eb453fcbc27fcdbdfc47d2580c1dc2c7988ff78301f35bfa4ac5dced1485f59b69a81d1e1b95bd97931278fad151b18d418264479a99662970f8817fae04a09ba26eb552306d473bf3e96fb14f209aa0eb791ea70fab16efc0591fdb7a2f9f4697777dd2b93949e8c27a8f98c26e16630f27fbdd6c7fe71ebe64e809bbae4679fb01f0771f12ab4a6990e6d969e40dffb7a7f8ce4bdc4579b6b65599a015b95580f4c70d6f53f4aba40fd49aa75070b74fc23fcaea3b70d8620864aa54630705132c409d81661f00fc3c28f6a1fea843d26de3787492032f541a48aca5872d896b9e1f81589763b60a430ad56227c97e50ead2b616230213a91105a1a5bc9210816999b98ca892ed71077b094707ac6a4000cecd3ee79c2c3448711bc2f44b2adac4be33d59a23684bf9dd1424ef36345559424dd2dd935a1d038658102f2537197915293c140445273beb779723a66916e8a8f4e0f5a7aafa9a4688ab111dc72e025fa4b54b7361699b412c835bcacfa0fc460d7b134be51bc20405e62d953b3fcc5f000ac0074f1cf5070363dc6dae95a382a6497ff9ef43610ac8bb139d2374e7d46c2716cce34f679c2a7b68a0632fb9c3622a74bd64e6f7c7b120ebff68df3dbe07de60fda3820e7470b96f0d2d01d84578dca2c65627db11f9fc0e79db8c7c56c825ee2f8ef20bc746c81a52c565ec6c91e07e141d706cb311c0ef03d9eb00353db9198257c2bd968f4b46e1645cf0768a4fd5023121a08870fa3ba4a3f9fce42821f19352887383465fbf89ee49c8ca4605d11e44e4a95dea7f0086a16b188d85893306e61ca2834f4711286161015a2556ab72f42ce57695628db591af56b36b73aeb2a4f2cdf353a56ed8b556258560971145be27468856b179f63478be1b62a338abdef894bdd55698bad7bea313fa9970ea78489d74b50804770f1d4af6b31390baecd8b21359e855b3889d938ee4183e068c3c6e43165a1aae38daac8b7d9b745d80de758f8a20374f0f8fda1b2a87c57ebb076a182f1fffe9082ef250658a88ec30e60eb57ade0a0e3082844ba2a56b67e64448a5685c8270d2b92df9dbe5d529b82d45065a6130a6539c2bcb207929f1e55f2767ebf3534bf4919c8df8f06fd6fe6d49962a6ea37e7711dc7558bb2420e86cd01f29cd8c49f48d684922dd68882988ee7ebf12497ed78c3dcea4a98b47aff82144290bd922a9cafbbbe7cde999e4fba8eebd9c0ef8f5927d23f25210dae7ed63e8b648f198b37915595bfaba7991b8045aad45e8ad4c8eba0ced3f3693c9e17feccd057ccfd450d4cd500e9eb611b333150bd9af6e8ef8c63fd6a8bb3bb4871f3abe6b061ce28afc37432f8c9f6f277e9ac67124ea4f3421ba0691e6597942e37b76b7b5738edbefda25ea8e159bb00e6e7c0b8cae7eabb09999e483772f91f1d6708e7b2e821757f172b9714eb74ee17220d0fce59f8c7d8f2450a2390faff4f62746609886905a33a98076cd74f3d498215b00804dcdd714699ab7c5fdda7f439338e77f0bf467a49a47ebb313f43416e8441f51aee0faf92aa0f286f8963b003eae15226ad8c27b87bd2ce20a6c8eb1906fec3e7f9a41850bbdd01aba848418e9f841b1f1f277a644e3e662625b71a94776d1dfe17b435b5e2c19ff5e3a15eedaadcc8919651c409521461daf6c65ce33df2ddd30d6abf923fb8192e3f629c877998e411de4ac31b2855b602d817a72e02c44bb7308105dcf55744ac6b6b0d44c3f6859620e50835d3f3cc5510d00b9d20e728c3132efe97496d4075d3924c47780839ccbc9a164ac2a9e704fe2a44bbfc64204cc15a63b09b0bffd8b2591f7cc3a7f34c04c17fa2b98ad2218853f7f165e956f2860ac84ba6fff32d4df0c03b7204409ae401d3d9ff286e7ac0b90fa219e4718018f3f0a4906afd2f85b999c726bb4f20bdbdad6dfffc9abb43e9c96616f5569bf95a3e2f4b1af114231d47aa4e3bbe1d01c2739767b93cf88031aae878c77b8c2ce67d0626904cecf327a9a77d4bfc66d4ac46639c7b442874db9d401232ca3165733c0ea2169f615d0b08eda0d02d7a82c9292c70c95658e8be5e765859284d39b089e83c360424d916930bad1c5f73488616b5789ce0602ca105d1a34edb5e81d1a3dc394d206a7d0f9cdbe4ede47dc06ff3ff8134ce6bb904e309d26ee12949108780c686552f86e1d63b6c5e3248fc94dea6b95502e2509c05769f125cf69e2061e8b12f22665fb00b536ccd1244b173bd26f49849be2e34d880f43cfc2b45fd9b6212369b6799ee200899cccc92f5981b1c3bb546620d9ceb96d6f50547e886bff268139d95aa934c4ddc207dbf919c84c626b7e230516c9f5d5a56409aea83091d32d4091a90847aee76e0b82ac2a7202174d1d17c2034963df97256ea66744ef072b4eadd8c34df8831746967bd8d2bb7d17047363a48140fec64c8171eab19e4f97274fe912a4cee0a63784764b424d816a25c29dbf3ab1a68cb1a77278e4c09871892d4018b9eb0be6be061a045eaf5f0ab282720c9f2dadec2c0f1e87ff233b79a62fdce458c5ca2b670cf740c3bbfe68c893d472e1fd8ffb80562ca0261c3fe0e017e5d6de0d97d24b88ddba65645ec8d7433365b5d3c4a95803573b00b0684451e1d407a8c50993e09a8c56c386e0c094b9991ee9a2c6cba199ded6958b6282b8df8cb1d19af4eca411a096839698d3a4515e9a284b2372322f3ba69e83bb629d5302121a81161aae1349cbe5d0835a15ed9d3902684c2e860d12eb35bc08c62015725c9fbbce9389314a813d23eed1d602eb7559af67d880052c1ebac76d2c2847a5371f2624b9a71d9d99242719e366af5304c12b5a575efa52de1ba5b68639f4f51859b28566521ef137df1d874db4117afaecba0e3889d45d4ec448d1c800c852239a793bb0c3d53bb01ac72fd0de34bbc2ccbd4b5caf3ba8ffde477e5eaa15243ea39ccf55f2b5df8d0c7ea60ee6e3e2f634f841848733a5f7f729f831cf7e142d337321a2f03509567af8c3b52a0c71233845ebf7a5742c94cfd0ee46138c28b681a067a9f030622cc00021b3b1dee94d093a8c1abc0df3a6b40fa88afa0a4d5f4f5f17f4967d4777780dcd3ffd8037509a29c4e5dd6372238206f3ed118e8b7f3a8b0519f8b667949df8775d2c40ef40160d2b1fe808bab58164a527aa31ab203936726fb4791ef56b1d32eb4f2e5e6f2df5cb88c356c5ce2af7555a7410b89ab2a99a66da0b25c4e032f3d49dfbf83f7c3849abd5f9863626e649d6fb8cd4c8f270d154ce05ac2f09425fd53b636dd464983f873135bfed4f695e5620c7476090ac6483e02686ea4c60b1a42148d45fef4a2880fc652ec34ea4ef2f3b26fb9be13fde008aa13804a75733abb3428ab35be1604db10ebd097ab67169e507f0cae8037153049db5ef50cd38b6dae7fe09b3119be8001dd08948ffe001ca97b4c75aa00cd8a299c7590a13d77fce2d700233130870f8edb94727e1511e20d288df15a3bca48069ba36a963c687a7aaac75220157a6b2d78cfc1f007b303db9f2c0db0afacf31889e3d4b1937497909cbd46c5da9a49ff020bd79267fd03f524078f0440f799c0d21aa9fae526a48124aba03ffd72073edf75a81e9f913e9105898fb4accd3dd1f7ac45915b720d8e7022e785a485259fb2467f7766f881de09b8cfa8952e7a5cfcee315694cc50674cb098beb04c37d3304a29003e7ea9917612e1275b17b9fee9c0de1d5f2a340b621e856ef7868d5e8effd4c781f34730665252c96912422edbfd7d0a9864f9ea0c9bd88345f218fac9c9436ce2ce3ccfe25a2a683668d9edfabdc08ee0ec6e5ac8de8bf9b24940c4891bf820344a6fee25ba37654b6f9a602443340ea977b2a92f5c125019b6219adfe890697a9d914cf612d1589ab48d615034cfc40b32d0e2606fbfb6825b6dd242f534cf4a43154c6691b3384514022e66799ca46667d5176a2daa2b529eddc0e30a4b1939c64f8d49185460818d0d7da819453f8462553d9516ea5266ab4db97d4fb28fe3c625184073c65eacafdcc78f08f842a62bfb67b4fc981c612153e6a9ef9db6ac3c1d6bf0f7eb22552decea3f7e4d483d884e69156dd675b2086742624", 0x1000}, {&(0x7f00000037c0)="aced30157f14582844466e8217f93fac4e5b97e0dacabe6c1ec359e2da0f412f", 0x20}], 0x6, &(0x7f0000003880)=[@tclass={{0x14, 0x29, 0x43, 0x10001}}, @hoplimit={{0x14, 0x29, 0x34, 0x80}}, @dstopts_2292={{0xb0, 0x29, 0x4, {0x84, 0x12, '\x00', [@calipso={0x7, 0x40, {0x0, 0xe, 0x0, 0xffff, [0x9, 0x2, 0x9, 0x3, 0x7fffffff, 0xfff, 0x8e]}}, @generic={0x7f}, @pad1, @pad1, @pad1, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x23}}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x28, {0x0, 0x8, 0x0, 0xff, [0x0, 0x81, 0x1, 0x20]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @multicast2}, r4}}}, @rthdr={{0x68, 0x29, 0x39, {0x2, 0xa, 0x2, 0x4, 0x0, [@local, @private1, @private0, @rand_addr=' \x01\x00', @mcast1]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x6}}], 0x188}}, {{0x0, 0x0, &(0x7f0000003cc0)=[{&(0x7f0000003b40)="e248fd37aae54194959e56d2bf6ccd2214b9919d7cd6388cf8eb4fb150548500b01c814c18b4d195f5377e1cbc5304c6d04492cee065a6c11b955a1da04e59517214f3e99be6accf7892e909957aea137d140f9c09dc6fa9e2399e461732236e39d26eebe78cfdee9b6526922d3120a05a3c4fcbc62a61a1b2974c7dd86b318caac561b99ebb6937cbab25bec87651cfaf7b60cc75802322c7a2e775f3af1e814500918203d8196c2f6bd954a830d67b0b691719d81da641d1ca6400f9e58658bb90d04dbae1fca34e9b0730de2d0b049e59a4", 0xd3}, {0x0}], 0x2, &(0x7f0000003d00)=[@rthdr={{0x78, 0x29, 0x39, {0x2, 0xc, 0x2, 0x1, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @rand_addr=' \x01\x00']}}}], 0x78}}, {{0x0, 0x0, &(0x7f0000007380)=[{0x0}, {0x0}, {&(0x7f0000006300)}], 0x3}}, {{&(0x7f00000074c0)={0xa, 0x4e20, 0x1, @loopback, 0x4}, 0x1c, &(0x7f0000007880)=[{&(0x7f0000007500)="0aaca0e8dca3ea5aeb247b6116baf3e8b0a711321a29339fd95abf4695659acb3a10b61c4af998d987845e9ea3581976f992e1358219bfc8fe2601e3119a41fe971cebc9a24c450c083c96a5b51391e9b8a9788a27eda5149c86054ea4f4f515cd8bb73db97b386b65c97f86e37d2ae4cceaf0a103a63ffd16a518b8e19734721360ed30d02b35d1297978a06de20a651d9c2d6cf038d80a22f3b752134df45e03f5ab663c1d3f90f84b9d273d3763c313eef656c562d012f3186e875f15", 0xbe}, {&(0x7f00000075c0)="0db47024cdf9bd557c33b499de202b84006304d1facbeaf88448acb550c9de009a37ec8c033c482a781c1414a8c8e915d76dbd56f39d28e7bc68bac776a7b264cc42728804383f1bf922b57de0182eeca78e806778dd89a4741c7de783f53ece6a85068f74a2b6cd1d0d20fd3117b6005ee647f7ace27d7215c80af1b322b5494202b50db1a3cf385ae7a2d6d697a81bdb790d007055978bc45769de760c653d016a54e18da18d2f471ed4f1d5890b8634a0cf3e8caa5e279ae6e42912b1bb2dc4de104aa4d579fae299fda6ca26e418b8ba175e518b4fac293ac3", 0xdb}, {&(0x7f00000076c0)="f1d8ead5968d808a81a0e45d6fd56f9d751318626d3bbceb26d03356f75471c650bbb051f13b70c0fb5593dd6b86e8941ee4fd22151bdea9b0321dd92b32cdbc6b9f2c361b09906cbd4ae57b2d618c84185f85333399034f0778e58de4620f23021f5c9a44ca9775c9649bdf175d69731b3e12c24d4ff7e0a8dd2b61ee2e6671690e3fd34661641ccb52a71f5e3b288ba5819a60c35dd752686c209f12cca20a77d3fead5ad6dffe279d545c5ef19a3a957ee42a899ffb6e52df4e7817f47594a254bb", 0xc3}, {0x0}], 0x4, &(0x7f0000000600)=[@dstopts={{0xf8, 0x29, 0x37, {0x84, 0x1b, '\x00', [@generic={0x4, 0xcb, "88468e948a98150773ad5974590bd10ce07c760cc29075d9cccae366d9256647444337808fb7aef8d01928bfff42a29c9e982162e170280a1da6a59e4a86abf3a0bf2b51e74cfe2d878f050623eacf2b004529fd47e748bb560bcd60ab6383b094167bd07a30b24736e172d86bf46baff2a3573c062ae88f6dca81bf664a203844ccf77838e11f039ed34bdfa597b94d763e39ce1d06164f9649cbbcc4cf31ef04d8a670fb50e80b34f4d3f5c504b85ce6e4f73518bf864a3dca5f641871a5658dd8b70c19397f6913d19b"}, @jumbo={0xc2, 0x4, 0x200000}, @jumbo={0xc2, 0x4, 0x1}]}}}, @rthdr={{0xa8, 0x29, 0x39, {0x6c, 0x12, 0x1, 0xb8, 0x0, [@loopback, @dev, @private2, @private0, @mcast1, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}]}}}], 0x1a0}}], 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f0000000340)=@framed, &(0x7f0000000380)='syzkaller\x00', 0x2, 0x36, &(0x7f0000000080)=""/54, 0x0, 0x14}, 0x90) socket$packet(0x11, 0x0, 0x300) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x14, 0x4, 0x8, 0x8}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000200850000007500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r7}, &(0x7f0000000000), &(0x7f0000000180)=r9}, 0x20) sendmsg$nl_route_sched(r6, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newtaction={0x4c, 0x1e, 0x109, 0x0, 0x0, {}, [{0x38, 0x1, [@m_mirred={0x34, 0x8, 0x0, 0x0, {{0xb, 0x9}, {0x4}, {0x6, 0x6, "0300"}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0x4c}, 0x1, 0x2b1e}, 0x0) connect$ax25(r2, &(0x7f0000000000)={{0x3, @default}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast]}, 0x48) kernel console output (not intermixed with test programs): code=0x7ffc0000 [ 134.438278][ T29] audit: type=1326 audit(1723496110.357:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6088 comm="syz.4.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f50d3d799f9 code=0x7ffc0000 [ 134.591603][ T5266] gspca_sq905c: sq905c_read: usb_control_msg failed (-71) [ 134.638131][ T5266] sq905c 3-1:0.0: Reading version command failed [ 134.689891][ T5266] sq905c 3-1:0.0: probe with driver sq905c failed with error -71 [ 134.707855][ T29] audit: type=1326 audit(1723496110.367:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6088 comm="syz.4.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d3d799f9 code=0x7ffc0000 [ 134.796113][ T5266] usb 3-1: USB disconnect, device number 6 [ 134.815539][ T29] audit: type=1326 audit(1723496110.367:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6088 comm="syz.4.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d3d799f9 code=0x7ffc0000 [ 135.223071][ T29] audit: type=1326 audit(1723496110.367:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6088 comm="syz.4.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f50d3d799f9 code=0x7ffc0000 [ 135.383616][ T29] audit: type=1326 audit(1723496110.367:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6088 comm="syz.4.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d3d799f9 code=0x7ffc0000 [ 135.527775][ T29] audit: type=1326 audit(1723496110.367:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6088 comm="syz.4.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f50d3d709a7 code=0x7ffc0000 [ 136.608673][ T29] audit: type=1326 audit(1723496110.367:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6088 comm="syz.4.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f50d3d15369 code=0x7ffc0000 [ 136.663220][ T29] audit: type=1326 audit(1723496110.367:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6088 comm="syz.4.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f50d3d709a7 code=0x7ffc0000 [ 138.054082][ T6121] macvlan0: entered promiscuous mode [ 138.099464][ T6121] ipvlan0: entered promiscuous mode [ 138.139274][ T6121] ipvlan0: left promiscuous mode [ 138.186779][ T6121] macvlan0: left promiscuous mode [ 138.336513][ T6127] syz.4.185[6127] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 138.336659][ T6127] syz.4.185[6127] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 139.432577][ T5266] kernel read not supported for file /newroot/44/file0 (pid: 5266 comm: kworker/0:4) [ 139.619257][ T6143] netlink: 8 bytes leftover after parsing attributes in process `syz.2.189'. [ 139.653267][ T6143] netlink: 16 bytes leftover after parsing attributes in process `syz.2.189'. [ 139.701947][ T6143] gtp0: entered promiscuous mode [ 139.739707][ T6143] gtp0: entered allmulticast mode [ 139.881002][ T6149] Invalid ELF header len 5 [ 140.050144][ T6152] netlink: 4 bytes leftover after parsing attributes in process `syz.2.193'. [ 140.094555][ T1171] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 140.265775][ T6158] Bluetooth: MGMT ver 1.23 [ 140.372987][ T1171] usb 2-1: Using ep0 maxpacket: 16 [ 142.434660][ T1171] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.533358][ T1171] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.573170][ T1171] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 142.642139][ T1171] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.668912][ T1171] usb 2-1: config 0 descriptor?? [ 142.815749][ T1171] usbhid 2-1:0.0: can't add hid device: -71 [ 142.821790][ T1171] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 142.965394][ T1171] usb 2-1: USB disconnect, device number 2 [ 143.308139][ T6170] netlink: 44 bytes leftover after parsing attributes in process `syz.0.198'. [ 144.216292][ T6184] kvm: emulating exchange as write [ 150.316382][ T1171] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 150.531651][ T1171] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.562581][ T6235] netlink: 60 bytes leftover after parsing attributes in process `syz.3.219'. [ 150.594934][ T1171] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 42208, setting to 1024 [ 150.619916][ T1171] usb 3-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 150.637394][ T1171] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.660936][ T1171] usb 3-1: config 0 descriptor?? [ 150.675084][ T6213] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 150.756633][ T6237] syz.4.213[6237] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 150.756806][ T6237] syz.4.213[6237] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 150.771979][ T6237] netlink: 'syz.4.213': attribute type 4 has an invalid length. [ 151.114440][ T6243] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 151.121256][ T6243] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 151.973196][ T6243] vhci_hcd vhci_hcd.0: Device attached [ 152.017684][ T1171] appletouch 3-1:0.0: Failed to read mode from device. [ 152.053173][ T1171] appletouch 3-1:0.0: probe with driver appletouch failed with error -5 [ 152.062079][ T6244] vhci_hcd: connection closed [ 152.073790][ T1124] vhci_hcd: stop threads [ 152.105668][ T1171] usb 3-1: USB disconnect, device number 7 [ 152.120329][ T1124] vhci_hcd: release socket [ 152.125929][ T1124] vhci_hcd: disconnect device [ 153.133287][ T5219] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 153.393063][ T5219] usb 2-1: Using ep0 maxpacket: 32 [ 153.439456][ T5219] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.573001][ T5219] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.632474][ T5219] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 153.692861][ T5219] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 153.702074][ T5219] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 153.720574][ T5219] usb 2-1: Product: syz [ 153.729073][ T5219] usb 2-1: Manufacturer: syz [ 153.748327][ T5219] usb 2-1: SerialNumber: syz [ 155.113373][ T5219] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input8 [ 156.457901][ T54] Bluetooth: hci0: command 0x0406 tx timeout [ 156.556309][ T5334] usb 2-1: USB disconnect, device number 3 [ 156.710386][ T5334] appletouch 2-1:1.0: input: appletouch disconnected [ 156.853468][ T6291] unknown channel width for channel at 909000KHz? [ 157.272594][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88807ad79c00: rx timeout, send abort [ 157.294053][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 157.294073][ T29] audit: type=1326 audit(1723496133.257:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6302 comm="syz.4.239" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f50d3d799f9 code=0x0 [ 157.703090][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88807ad7b800: rx timeout, send abort [ 157.782595][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88807ad79c00: abort rx timeout. Force session deactivation [ 158.211440][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88807ad7b800: abort rx timeout. Force session deactivation [ 159.586787][ T6330] 9pnet: p9_errstr2errno: server reported unknown error /kernel/yama/ptrace_scope [ 159.724977][ T5334] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 159.773061][ T1171] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 160.149669][ T6340] openvswitch: netlink: Missing key (keys=40, expected=80) [ 160.253747][ T5266] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 160.626899][ T5266] usb 1-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=97.58 [ 160.701838][ T5266] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.748614][ T5266] usb 1-1: Product: syz [ 160.752837][ T5266] usb 1-1: Manufacturer: syz [ 160.772174][ T5266] usb 1-1: SerialNumber: syz [ 160.794370][ T5266] usb 1-1: config 0 descriptor?? [ 160.802837][ T5334] usb 2-1: config 0 has no interfaces? [ 160.816117][ T5334] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 160.826415][ T1171] usb 4-1: Using ep0 maxpacket: 32 [ 160.833316][ T5334] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 160.841438][ T5334] usb 2-1: SerialNumber: syz [ 160.844468][ T5266] usb 1-1: active config #0 != 1 ?? [ 160.848803][ T5334] usb 2-1: config 0 descriptor?? [ 160.859193][ T1171] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 160.886238][ T1171] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 16384, setting to 64 [ 160.909491][ T1171] usb 4-1: config 0 interface 0 has no altsetting 1 [ 160.933531][ T1171] usb 4-1: New USB device found, idVendor=1199, idProduct=9004, bcdDevice= f.8c [ 160.947746][ T1171] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.973035][ T1171] usb 4-1: Product: syz [ 160.977251][ T1171] usb 4-1: Manufacturer: syz [ 160.981871][ T1171] usb 4-1: SerialNumber: syz [ 161.000545][ T1171] usb 4-1: config 0 descriptor?? [ 161.011148][ T1171] qmi_wwan 4-1:0.0: probe with driver qmi_wwan failed with error -22 [ 161.097634][ T6349] netlink: 16 bytes leftover after parsing attributes in process `syz.4.256'. [ 161.266478][ T5334] usb 2-1: USB disconnect, device number 4 [ 162.213103][ T46] usb 1-1: USB disconnect, device number 6 [ 162.253215][ T29] audit: type=1326 audit(1723496138.237:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6325 comm="syz.3.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5593799f9 code=0x7ffc0000 [ 162.274995][ T5266] usb 4-1: USB disconnect, device number 6 [ 162.293391][ T29] audit: type=1326 audit(1723496138.237:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6325 comm="syz.3.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5593799f9 code=0x7ffc0000 [ 162.324198][ T29] audit: type=1326 audit(1723496138.237:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6325 comm="syz.3.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fd5593799f9 code=0x7ffc0000 [ 162.349549][ T29] audit: type=1326 audit(1723496138.237:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6325 comm="syz.3.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5593799f9 code=0x7ffc0000 [ 162.349599][ T29] audit: type=1326 audit(1723496138.247:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6325 comm="syz.3.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd5593799f9 code=0x7ffc0000 [ 162.349633][ T29] audit: type=1326 audit(1723496138.247:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6325 comm="syz.3.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5593799f9 code=0x7ffc0000 [ 162.349667][ T29] audit: type=1326 audit(1723496138.247:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6325 comm="syz.3.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5593799f9 code=0x7ffc0000 [ 162.349702][ T29] audit: type=1326 audit(1723496138.247:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6325 comm="syz.3.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7fd5593799f9 code=0x7ffc0000 [ 162.349740][ T29] audit: type=1326 audit(1723496138.247:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6325 comm="syz.3.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5593799f9 code=0x7ffc0000 [ 162.349778][ T29] audit: type=1326 audit(1723496138.247:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6325 comm="syz.3.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5593799f9 code=0x7ffc0000 [ 162.349815][ T29] audit: type=1326 audit(1723496138.247:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6325 comm="syz.3.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5593799f9 code=0x7ffc0000 [ 162.349853][ T29] audit: type=1326 audit(1723496138.247:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6325 comm="syz.3.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5593799f9 code=0x7ffc0000 [ 165.847667][ T6412] kvm: pic: non byte write [ 165.971855][ T6417] netlink: 72 bytes leftover after parsing attributes in process `syz.1.278'. [ 166.061482][ T6417] rdma_op ffff88801f25a9f0 conn xmit_rdma 0000000000000000 [ 170.282878][ T6456] [U] [ 170.285857][ T6456] [U] [ 170.288548][ T6456] [U] [ 170.291228][ T6456] [U] [ 170.371546][ T6458] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 171.069556][ T6456] [U] [ 171.072259][ T6456] [U] [ 171.074946][ T6456] [U] [ 171.077619][ T6456] [U] [ 171.128231][ T6456] [U] [ 171.130969][ T6456] [U] [ 171.133662][ T6456] [U] [ 171.138296][ T1171] IPVS: starting estimator thread 0... [ 171.385910][ T6463] IPVS: using max 20 ests per chain, 48000 per kthread [ 171.439666][ T6448] [U] [ 172.410694][ T6477] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 178.583877][ T6505] program syz.0.302 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 179.051070][ T6519] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 80 [ 179.072788][ T6523] netlink: 12 bytes leftover after parsing attributes in process `syz.3.311'. [ 179.534381][ T5291] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 179.738120][ T5291] usb 4-1: Using ep0 maxpacket: 16 [ 179.748041][ T5291] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.777836][ T5291] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.788422][ T5291] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 179.801315][ T5291] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 179.810593][ T5291] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.820283][ T5291] usb 4-1: config 0 descriptor?? [ 183.774575][ T5221] Bluetooth: hci4: command 0x0406 tx timeout [ 183.782541][ T5221] Bluetooth: hci1: command 0x0406 tx timeout [ 185.568889][ T5291] usbhid 4-1:0.0: can't add hid device: -32 [ 185.582166][ T5291] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 186.356031][ T5268] usb 4-1: USB disconnect, device number 7 [ 186.524836][ T1171] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 186.619852][ T6564] netlink: 'syz.2.324': attribute type 10 has an invalid length. [ 186.843870][ T6564] bond0: (slave team0): Releasing backup interface [ 187.776491][ T6564] batman_adv: batadv0: Adding interface: team0 [ 187.782743][ T6564] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.808246][ T6564] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 187.819375][ T6563] netlink: 'syz.2.324': attribute type 10 has an invalid length. [ 187.827332][ T6563] netlink: 2 bytes leftover after parsing attributes in process `syz.2.324'. [ 187.836729][ T6563] team0: entered promiscuous mode [ 187.841833][ T6563] team_slave_0: entered promiscuous mode [ 187.849586][ T6563] team_slave_1: entered promiscuous mode [ 187.855635][ T6563] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 187.867226][ T6563] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.874334][ T6563] batman_adv: batadv0: Interface activated: team0 [ 187.880937][ T6563] batman_adv: batadv0: Interface deactivated: team0 [ 187.887966][ T6563] batman_adv: batadv0: Removing interface: team0 [ 187.969139][ T6563] bridge0: port 3(team0) entered blocking state [ 187.976058][ T6563] bridge0: port 3(team0) entered disabled state [ 187.982630][ T6563] team0: entered allmulticast mode [ 187.988053][ T6563] team_slave_0: entered allmulticast mode [ 187.993885][ T6563] team_slave_1: entered allmulticast mode [ 187.999667][ T6563] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 188.012478][ T6563] bridge0: port 3(team0) entered blocking state [ 188.019229][ T6563] bridge0: port 3(team0) entered forwarding state [ 189.851832][ T6602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.337'. [ 194.183415][ T5219] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 194.187287][ T6644] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 194.235430][ T6644] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 194.375351][ T5334] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 194.531756][ T1263] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.540832][ T1263] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.599491][ T5334] usb 1-1: config 0 has no interfaces? [ 194.620876][ T5334] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 194.635231][ T5219] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.646388][ T5219] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.651004][ T5334] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.663243][ T5219] usb 4-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 194.676879][ T5219] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.706036][ T5219] usb 4-1: config 0 descriptor?? [ 194.711227][ T5334] usb 1-1: Product: syz [ 194.731408][ T5334] usb 1-1: Manufacturer: syz [ 194.746952][ T5334] usb 1-1: SerialNumber: syz [ 194.761472][ T5334] usb 1-1: config 0 descriptor?? [ 194.989853][ T6666] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 195.064860][ T5334] usb 1-1: USB disconnect, device number 7 [ 195.219064][ T5219] sony 0003:054C:024B.0003: unknown main item tag 0x0 [ 195.252069][ T5219] sony 0003:054C:024B.0003: unknown main item tag 0x0 [ 195.270565][ T5219] sony 0003:054C:024B.0003: unknown main item tag 0x0 [ 195.286806][ T5219] sony 0003:054C:024B.0003: unknown main item tag 0x0 [ 195.304397][ T5219] sony 0003:054C:024B.0003: item fetching failed at offset 4/5 [ 195.327851][ T5219] sony 0003:054C:024B.0003: parse failed [ 195.339214][ T5219] sony 0003:054C:024B.0003: probe with driver sony failed with error -22 [ 195.470640][ T6633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.499880][ T6633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.939862][ T6686] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 197.537695][ T5268] usb 4-1: USB disconnect, device number 8 [ 198.459957][ T6701] mmap: syz.0.370 (6701) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 200.566759][ T6727] usb usb8: usbfs: process 6727 (syz.3.377) did not claim interface 0 before use [ 200.669220][ T6733] netlink: 412 bytes leftover after parsing attributes in process `syz.0.380'. [ 200.913043][ T5334] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 201.228368][ T5334] usb 4-1: not running at top speed; connect to a high speed hub [ 201.345481][ T5334] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 256, setting to 64 [ 201.500934][ T5334] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 201.617804][ T5334] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.634528][ T5334] usb 4-1: Product: и [ 201.650768][ T6727] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 202.424443][ T6753] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 202.482416][ T5334] cdc_ncm 4-1:1.0: bind() failure [ 202.545615][ T5334] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 202.566049][ T5334] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 202.586066][ T5334] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 202.620957][ T5334] usb 4-1: USB disconnect, device number 9 [ 204.507717][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 204.507736][ T29] audit: type=1326 audit(1723496180.487:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6770 comm="syz.2.391" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f45837799f9 code=0x0 [ 204.583069][ T5334] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 204.790019][ T5334] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 204.802031][ T5334] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 204.830096][ T5334] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 204.839276][ T5334] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 204.848649][ T5334] usb 4-1: SerialNumber: syz [ 205.076107][ T6779] hub 9-0:1.0: USB hub found [ 205.083250][ T6779] hub 9-0:1.0: 8 ports detected [ 205.637715][ T5334] usb 4-1: 0:2 : does not exist [ 205.793359][ T5334] usb 4-1: USB disconnect, device number 10 [ 205.815728][ T6782] netlink: 8 bytes leftover after parsing attributes in process `syz.1.394'. [ 205.903111][ T5218] udevd[5218]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 206.399004][ T6802] serio: Serial port ptm0 [ 206.446228][ T6803] netlink: 'syz.3.402': attribute type 9 has an invalid length. [ 206.454011][ T6803] netlink: 399 bytes leftover after parsing attributes in process `syz.3.402'. [ 206.474846][ T5334] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 206.668665][ T5334] usb 2-1: config 0 has an invalid interface number: 156 but max is 1 [ 206.685910][ T5334] usb 2-1: config 0 has no interface number 1 [ 206.692189][ T5334] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 206.713011][ T5334] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 206.725287][ T5334] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 206.736191][ T5334] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 206.864669][ T46] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 206.878023][ T5334] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 206.887630][ T5334] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.902536][ T5334] usb 2-1: config 0 descriptor?? [ 206.917119][ T5334] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 206.933082][ T5334] usb 2-1: MIDIStreaming interface descriptor not found [ 208.383933][ T46] usb 4-1: Using ep0 maxpacket: 16 [ 208.418701][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.453018][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.478423][ T5334] gspca_main: spca561-2.14.0 probing abcd:cdee [ 208.503420][ T46] usb 4-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 208.540503][ T5334] spca561 2-1:0.0: probe with driver spca561 failed with error -22 [ 208.555624][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.573413][ T5334] usb 2-1: USB disconnect, device number 6 [ 208.588965][ T46] usb 4-1: config 0 descriptor?? [ 209.143529][ T941] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 209.393333][ T941] usb 1-1: Using ep0 maxpacket: 8 [ 209.516503][ T941] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 209.679179][ T941] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 209.726186][ T941] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 209.773891][ T46] bigben 0003:146B:0902.0004: unexpected rdesc, please submit for review [ 209.814644][ T46] bigben 0003:146B:0902.0004: hidraw0: USB HID v0.00 Device [HID 146b:0902] on usb-dummy_hcd.3-1/input0 [ 209.822000][ T941] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 209.833023][ T46] bigben 0003:146B:0902.0004: missing HID_OUTPUT_REPORT 0 [ 209.862749][ T46] bigben 0003:146B:0902.0004: no output report found [ 209.905005][ T46] usb 4-1: USB disconnect, device number 11 [ 209.913330][ T941] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 209.922412][ T941] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.969734][ T941] usb 1-1: Product: syz [ 209.990590][ T941] usb 1-1: Manufacturer: syz [ 209.995805][ T941] usb 1-1: SerialNumber: syz [ 210.016524][ T941] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 210.031275][ T941] usbtest 1-1:1.0: couldn't get endpoints, -22 [ 210.041697][ T941] usbtest 1-1:1.0: probe with driver usbtest failed with error -22 [ 210.334733][ T5291] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 210.594693][ T941] usb 1-1: USB disconnect, device number 8 [ 210.773069][ T5291] usb 3-1: Using ep0 maxpacket: 8 [ 210.803854][ T5291] usb 3-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 210.813519][ T5291] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.835211][ T5291] usb 3-1: config 0 descriptor?? [ 210.865983][ T5291] gspca_main: spca501-2.14.0 probing 0000:0000 [ 210.924509][ T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 210.936144][ T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 210.945699][ T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 210.973575][ T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 210.981504][ T54] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 210.991149][ T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 211.155731][ T6850] netlink: 16 bytes leftover after parsing attributes in process `syz.1.418'. [ 211.278018][ T5291] gspca_spca501: reg write: error -71 [ 211.284995][ T5291] spca501 3-1:0.0: Reg write failed for 0x02,0xa048,0x00 [ 211.305576][ T5291] spca501 3-1:0.0: probe with driver spca501 failed with error -22 [ 211.412988][ T5291] usb 3-1: USB disconnect, device number 8 [ 213.075535][ T5234] Bluetooth: hci5: command tx timeout [ 214.000882][ T6856] 9pnet_fd: Insufficient options for proto=fd [ 215.437709][ T6864] netlink: 16 bytes leftover after parsing attributes in process `syz.2.420'. [ 215.784332][ T6840] chnl_net:caif_netlink_parms(): no params data found [ 215.793095][ T5234] Bluetooth: hci5: command tx timeout [ 216.312477][ T6889] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 216.513603][ T6892] netlink: 12 bytes leftover after parsing attributes in process `syz.1.430'. [ 216.643715][ T6892] bond1: entered promiscuous mode [ 216.649288][ T6840] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.656748][ T6840] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.661394][ T6890] netlink: 'syz.2.428': attribute type 1 has an invalid length. [ 216.664064][ T6840] bridge_slave_0: entered allmulticast mode [ 216.679308][ T6840] bridge_slave_0: entered promiscuous mode [ 216.689921][ T6840] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.694232][ T6890] netlink: 157116 bytes leftover after parsing attributes in process `syz.2.428'. [ 216.697113][ T6840] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.713523][ T6840] bridge_slave_1: entered allmulticast mode [ 216.716707][ T6890] nbd: couldn't find a device at index 64 [ 216.723369][ T6840] bridge_slave_1: entered promiscuous mode [ 216.737657][ T6894] wg2: entered promiscuous mode [ 216.748937][ T6894] bond1: (slave wg2): The slave device specified does not support setting the MAC address [ 216.773298][ T6894] bond1: (slave wg2): Error -95 calling set_mac_address [ 216.789835][ T6898] IPv6: NLM_F_REPLACE set, but no existing node found! [ 216.808818][ T29] audit: type=1326 audit(1723496192.797:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6897 comm="syz.0.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce3d3799f9 code=0x7ffc0000 [ 216.856392][ T29] audit: type=1326 audit(1723496192.797:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6897 comm="syz.0.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7fce3d3799f9 code=0x7ffc0000 [ 216.943602][ T29] audit: type=1326 audit(1723496192.797:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6897 comm="syz.0.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce3d3799f9 code=0x7ffc0000 [ 216.987158][ T6840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.993565][ T29] audit: type=1326 audit(1723496192.837:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6897 comm="syz.0.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce3d3799f9 code=0x7ffc0000 [ 217.041498][ T6840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.210564][ T6840] team0: Port device team_slave_0 added [ 217.225319][ T6840] team0: Port device team_slave_1 added [ 217.305933][ T6840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.313216][ T1171] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 217.321400][ T6840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.349623][ T6840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.364889][ T6840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.367432][ T6912] syz.0.435 (6912) used greatest stack depth: 19568 bytes left [ 217.372081][ T6840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.406793][ T6840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.503036][ T1171] usb 2-1: Using ep0 maxpacket: 16 [ 217.512803][ T1171] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE5, changing to 0x85 [ 217.529675][ T6840] hsr_slave_0: entered promiscuous mode [ 217.541798][ T6840] hsr_slave_1: entered promiscuous mode [ 217.554251][ T1171] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 217.575515][ T6840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 217.576811][ T1171] usb 2-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice=3d.25 [ 217.593400][ T6840] Cannot create hsr debugfs directory [ 217.599204][ T1171] usb 2-1: New USB device strings: Mfr=4, Product=106, SerialNumber=3 [ 217.613035][ T1171] usb 2-1: Product: syz [ 217.617411][ T1171] usb 2-1: Manufacturer: syz [ 217.623396][ T1171] usb 2-1: SerialNumber: syz [ 217.663281][ T1171] usb 2-1: config 0 descriptor?? [ 217.702295][ T1171] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input10 [ 217.873308][ T5234] Bluetooth: hci5: command tx timeout [ 218.157285][ T1171] usb 2-1: USB disconnect, device number 7 [ 218.401038][ T6919] kAFS: Can only specify source 'none' with -o dyn [ 218.434640][ T6840] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.645524][ T6840] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.805768][ T6840] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.029813][ T5291] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 219.084380][ T6840] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.047348][ T5234] Bluetooth: hci5: command tx timeout [ 220.594663][ T5291] usb 4-1: Using ep0 maxpacket: 8 [ 220.624032][ T5291] usb 4-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 220.653030][ T5291] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.677902][ T5291] usb 4-1: config 0 descriptor?? [ 220.737968][ T6840] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 220.750841][ T6946] ALSA: mixer_oss: invalid OSS volume 'ß' [ 220.753835][ T6840] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 220.919165][ T5291] usb 4-1: string descriptor 0 read error: -71 [ 220.947782][ T5291] usb 4-1: Found UVC 0.00 device (2833:0201) [ 220.948505][ T6840] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 220.980019][ T5291] usb 4-1: No valid video chain found. [ 221.030192][ T5291] usb 4-1: USB disconnect, device number 12 [ 221.195433][ T6840] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 221.341818][ T6955] netlink: 1068 bytes leftover after parsing attributes in process `syz.0.448'. [ 221.973022][ T29] audit: type=1326 audit(1723496197.947:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6949 comm="syz.2.449" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f45837799f9 code=0x0 [ 222.053283][ T29] audit: type=1326 audit(1723496197.997:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6949 comm="syz.2.449" exe="/root/syz-executor" sig=31 arch=c000003e syscall=230 compat=0 ip=0x7f45837ab9e5 code=0x0 [ 222.119348][ T6840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.134168][ T6960] netlink: 8 bytes leftover after parsing attributes in process `syz.3.451'. [ 222.144376][ T6960] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0) [ 222.154929][ T6960] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535 [ 222.264828][ T6840] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.345011][ T6554] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.352184][ T6554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.418844][ T6554] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.426087][ T6554] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.579950][ T29] audit: type=1326 audit(1723496198.567:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6949 comm="syz.2.449" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f45837799f9 code=0x0 [ 222.670889][ T6840] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 222.686419][ T6840] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 223.112044][ T6840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.687878][ T6840] veth0_vlan: entered promiscuous mode [ 223.721315][ T6840] veth1_vlan: entered promiscuous mode [ 224.938643][ T6840] veth0_macvtap: entered promiscuous mode [ 225.020860][ T6840] veth1_macvtap: entered promiscuous mode [ 225.102719][ T6840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.122829][ T6840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.149703][ T6840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.193038][ T6840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.215734][ T6840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.250254][ T7007] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 225.254809][ T6840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.283898][ T6840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.298366][ T29] audit: type=1804 audit(1723496201.287:88): pid=7009 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.466" name="/newroot/104/bus/bus" dev="overlay" ino=606 res=1 errno=0 [ 225.329346][ T6840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.356706][ T6840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.386358][ T6840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.577921][ T6840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.621733][ T6840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.663661][ T6840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.886015][ T6840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.116657][ T6840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.273004][ T6840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.326087][ T6840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.387240][ T6840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.397807][ T6840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.407860][ T6840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.426592][ T6840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.439334][ T6840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.495083][ T6840] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.521805][ T6840] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.539442][ T6840] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.551437][ T6840] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.580224][ T7025] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.669353][ T7037] vivid-003: disconnect [ 226.704868][ T7034] vivid-003: reconnect [ 226.935554][ T5750] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.028771][ T5750] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.243623][ T1302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.273581][ T1302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.537311][ T7063] netlink: 'syz.4.409': attribute type 16 has an invalid length. [ 227.557562][ T7063] netlink: 'syz.4.409': attribute type 17 has an invalid length. [ 230.531008][ T7109] syz.2.497(7109): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 233.695598][ T7130] netlink: 8 bytes leftover after parsing attributes in process `syz.3.500'. [ 233.813695][ T7130] bond1: entered promiscuous mode [ 233.820878][ T7130] bond1: entered allmulticast mode [ 233.826815][ T7133] netlink: 'syz.2.501': attribute type 5 has an invalid length. [ 234.075662][ T1171] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 234.259548][ T7148] netlink: 'syz.3.505': attribute type 10 has an invalid length. [ 234.279759][ T7148] batman_adv: batadv0: Adding interface: team0 [ 234.286163][ T7148] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.323965][ T1171] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.340990][ T7148] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 234.375672][ T7149] netlink: 'syz.3.505': attribute type 10 has an invalid length. [ 234.383701][ T7149] netlink: 2 bytes leftover after parsing attributes in process `syz.3.505'. [ 234.413879][ T7149] team0: entered promiscuous mode [ 234.419080][ T7149] team_slave_0: entered promiscuous mode [ 234.425472][ T7149] team_slave_1: entered promiscuous mode [ 234.437535][ T7149] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.445569][ T7149] batman_adv: batadv0: Interface activated: team0 [ 234.452203][ T7149] batman_adv: batadv0: Interface deactivated: team0 [ 234.458975][ T7149] batman_adv: batadv0: Removing interface: team0 [ 234.525338][ T1171] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.547488][ T7149] bridge0: port 3(team0) entered blocking state [ 234.583304][ T7149] bridge0: port 3(team0) entered disabled state [ 234.589932][ T7149] team0: entered allmulticast mode [ 234.596237][ T7149] team_slave_0: entered allmulticast mode [ 234.602052][ T7149] team_slave_1: entered allmulticast mode [ 234.611520][ T7149] bridge0: port 3(team0) entered blocking state [ 234.619042][ T7149] bridge0: port 3(team0) entered forwarding state [ 234.683096][ T1171] usb 1-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 235.073195][ T1171] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.087736][ T1171] usb 1-1: config 0 descriptor?? [ 235.146032][ T7153] netlink: 20 bytes leftover after parsing attributes in process `syz.1.507'. [ 235.288879][ T7159] xt_SECMARK: unable to map security context 'unconfined' [ 235.504777][ T1171] holtek 0003:1241:5015.0005: unknown main item tag 0x0 [ 235.712411][ T1171] holtek 0003:1241:5015.0005: unknown main item tag 0x0 [ 235.893722][ T1171] holtek 0003:1241:5015.0005: unknown main item tag 0x0 [ 235.919998][ T1171] holtek 0003:1241:5015.0005: unknown main item tag 0x0 [ 235.944205][ T1171] holtek 0003:1241:5015.0005: unknown main item tag 0x0 [ 236.373771][ T7174] netlink: 116 bytes leftover after parsing attributes in process `syz.2.514'. [ 236.449814][ T1171] holtek 0003:1241:5015.0005: hidraw0: USB HID v0.00 Device [HID 1241:5015] on usb-dummy_hcd.0-1/input0 [ 236.503635][ T1171] holtek 0003:1241:5015.0005: no inputs found [ 236.600611][ T1171] usb 1-1: USB disconnect, device number 9 [ 236.738528][ T7184] Unsupported ieee802154 address type: 0 [ 238.329000][ T7201] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 238.492013][ T29] audit: type=1800 audit(1723496214.477:89): pid=7205 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.524" name="/" dev="fuse" ino=1 res=0 errno=0 [ 239.867857][ T7223] netlink: 4 bytes leftover after parsing attributes in process `syz.2.528'. [ 240.798473][ T7235] PKCS7: Unknown OID: [5] (bad) [ 240.924767][ T7235] PKCS7: Only support pkcs7_signedData type [ 241.117686][ T7247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 241.613396][ T7261] ebt_limit: overflow, try lower: 0/0 [ 246.038879][ T7281] netlink: 32 bytes leftover after parsing attributes in process `syz.0.545'. [ 246.065009][ C0] Unknown status report in ack skb [ 247.320561][ T29] audit: type=1326 audit(1723496223.307:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7288 comm="syz.3.550" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd5593799f9 code=0x0 [ 247.333778][ T7294] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 248.247787][ T7311] netlink: 72 bytes leftover after parsing attributes in process `syz.1.554'. [ 250.947140][ T7342] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 250.966292][ T7343] input: syz0 as /devices/virtual/input/input11 [ 251.273067][ T5219] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 251.473909][ T5219] usb 4-1: Using ep0 maxpacket: 32 [ 251.474563][ T29] audit: type=1326 audit(1723496227.467:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7357 comm="syz.4.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f8f9799f9 code=0x7ffc0000 [ 251.508586][ T7358] Bluetooth: MGMT ver 1.23 [ 251.532875][ T5219] usb 4-1: New USB device found, idVendor=10fd, idProduct=de00, bcdDevice= 0.01 [ 251.547281][ T29] audit: type=1326 audit(1723496227.497:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7357 comm="syz.4.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f8f9799f9 code=0x7ffc0000 [ 251.552856][ T5219] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.595197][ T5219] usb 4-1: config 0 descriptor?? [ 251.625323][ T5219] go7007 4-1:0.0: The Lifeview TV Walker Ultra is not supported. Sorry! [ 251.627346][ T29] audit: type=1326 audit(1723496227.497:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7357 comm="syz.4.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f8f8f9799f9 code=0x7ffc0000 [ 251.710233][ T29] audit: type=1326 audit(1723496227.497:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7357 comm="syz.4.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f8f9799f9 code=0x7ffc0000 [ 251.768193][ T29] audit: type=1326 audit(1723496227.497:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7357 comm="syz.4.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f8f8f9799f9 code=0x7ffc0000 [ 251.797900][ T29] audit: type=1326 audit(1723496227.497:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7357 comm="syz.4.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f8f9799f9 code=0x7ffc0000 [ 251.896021][ T29] audit: type=1326 audit(1723496227.497:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7357 comm="syz.4.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f8f9799f9 code=0x7ffc0000 [ 251.949741][ T5219] usb 4-1: USB disconnect, device number 13 [ 251.961430][ T29] audit: type=1326 audit(1723496227.497:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7357 comm="syz.4.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8f8f9799f9 code=0x7ffc0000 [ 252.000520][ T29] audit: type=1326 audit(1723496227.497:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7357 comm="syz.4.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f8f9799f9 code=0x7ffc0000 [ 252.506757][ T7378] netlink: 20 bytes leftover after parsing attributes in process `syz.4.572'. [ 254.059918][ T7392] netlink: 256 bytes leftover after parsing attributes in process `syz.3.582'. [ 254.333069][ T5219] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 254.553129][ T5219] usb 1-1: Using ep0 maxpacket: 16 [ 254.564818][ T5219] usb 1-1: config 0 descriptor has 1 excess byte, ignoring [ 254.588593][ T5219] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 254.629632][ T5219] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 254.647718][ T5219] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 255 [ 254.667039][ T5219] usb 1-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 254.678467][ T5219] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.686769][ T5219] usb 1-1: Product: syz [ 254.690933][ T5219] usb 1-1: Manufacturer: syz [ 254.695640][ T5219] usb 1-1: SerialNumber: syz [ 254.702782][ T5219] usb 1-1: config 0 descriptor?? [ 254.708458][ T7393] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 254.815009][ T7393] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 255.477923][ T5219] mcba_usb 1-1:0.0: Microchip CAN BUS Analyzer connected [ 255.485061][ C0] mcba_usb 1-1:0.0 can0: Tx URB aborted (-71) [ 255.485165][ C0] mcba_usb 1-1:0.0 can0: Tx URB aborted (-71) [ 255.500955][ T5219] usb 1-1: USB disconnect, device number 10 [ 255.520091][ T5219] mcba_usb 1-1:0.0 can0: device disconnected [ 255.955043][ T1263] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.961465][ T1263] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.174304][ T7423] netlink: 'syz.4.592': attribute type 1 has an invalid length. [ 256.184327][ T7423] netlink: 157116 bytes leftover after parsing attributes in process `syz.4.592'. [ 256.197705][ T7423] nbd: couldn't find a device at index 64 [ 256.935668][ T7430] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 258.357408][ T7447] netlink: 8 bytes leftover after parsing attributes in process `syz.0.595'. [ 258.357501][ T54] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 258.423099][ T54] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 258.434093][ T54] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 258.436356][ T7449] netlink: 40 bytes leftover after parsing attributes in process `syz.3.598'. [ 258.471816][ T54] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 258.497614][ T54] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 258.506505][ T54] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 259.348608][ T7443] chnl_net:caif_netlink_parms(): no params data found [ 267.014767][ T5234] Bluetooth: hci6: command tx timeout [ 268.496729][ T7443] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.536115][ T7443] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.563499][ T7443] bridge_slave_0: entered allmulticast mode [ 268.570906][ T7443] bridge_slave_0: entered promiscuous mode [ 268.607610][ T7443] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.628344][ T7443] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.656051][ T7443] bridge_slave_1: entered allmulticast mode [ 268.676649][ T7443] bridge_slave_1: entered promiscuous mode [ 269.123436][ T54] Bluetooth: hci6: command tx timeout [ 269.136565][ T7443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.206762][ T7443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.311801][ T5234] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 269.321928][ T5234] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 269.331021][ T5234] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 269.339263][ T5234] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 269.347123][ T5234] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 269.447852][ T5234] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 270.398695][ T7443] team0: Port device team_slave_0 added [ 270.446840][ T7443] team0: Port device team_slave_1 added [ 270.658019][ T7515] netlink: 12 bytes leftover after parsing attributes in process `syz.4.614'. [ 270.705641][ T54] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 270.778502][ T54] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 270.790377][ T54] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 270.811286][ T54] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 270.823848][ T54] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 270.831321][ T54] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 270.943330][ T7443] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.950317][ T7443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.016234][ T7443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.032810][ T7443] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.040745][ T7443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.145497][ T7443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.156650][ T54] Bluetooth: hci6: command tx timeout [ 271.241223][ T5212] syz-executor (5212) used greatest stack depth: 19536 bytes left [ 271.442509][ T2580] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.554777][ T5234] Bluetooth: hci7: command tx timeout [ 271.701112][ T2580] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.757915][ T7443] hsr_slave_0: entered promiscuous mode [ 271.784124][ T7443] hsr_slave_1: entered promiscuous mode [ 271.808632][ T7443] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 271.850307][ T7443] Cannot create hsr debugfs directory [ 271.953841][ T2580] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.171948][ T2580] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.913404][ T5234] Bluetooth: hci8: command tx timeout [ 272.975538][ T7443] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.037599][ T2580] bridge_slave_1: left allmulticast mode [ 273.062983][ T2580] bridge_slave_1: left promiscuous mode [ 273.075768][ T2580] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.106480][ T2580] bridge_slave_0: left allmulticast mode [ 273.118165][ T2580] bridge_slave_0: left promiscuous mode [ 273.124176][ T2580] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.206602][ T7569] netlink: 104 bytes leftover after parsing attributes in process `syz.4.631'. [ 273.235313][ T5234] Bluetooth: hci6: command tx timeout [ 273.405229][ T5234] Bluetooth: hci2: command 0x0406 tx timeout [ 273.692389][ T54] Bluetooth: hci7: command tx timeout [ 274.993195][ T54] Bluetooth: hci8: command tx timeout [ 275.083473][ T2580] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 275.115055][ T2580] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 275.130392][ T2580] bond0 (unregistering): Released all slaves [ 275.247652][ T7443] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.309346][ T7516] chnl_net:caif_netlink_parms(): no params data found [ 275.351817][ T7497] chnl_net:caif_netlink_parms(): no params data found [ 275.558891][ T7443] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.713537][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 275.713555][ T29] audit: type=1326 audit(1723496251.697:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7596 comm="syz.4.637" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8f8f9799f9 code=0x0 [ 275.723176][ T54] Bluetooth: hci7: command tx timeout [ 275.873881][ T7443] netdevsim netdevsim2 netdevsim0 (unregistering): left promiscuous mode [ 275.923076][ T7443] netdevsim netdevsim2 netdevsim0 (unregistering): left allmulticast mode [ 276.024413][ T7443] team0: Port device netdevsim0 removed [ 276.052546][ T7443] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.327807][ T7613] hub 9-0:1.0: USB hub found [ 276.334672][ T7613] hub 9-0:1.0: 8 ports detected [ 277.073142][ T54] Bluetooth: hci8: command tx timeout [ 277.796126][ T54] Bluetooth: hci7: command tx timeout [ 278.240823][ T7516] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.249849][ T7516] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.258837][ T7516] bridge_slave_0: entered allmulticast mode [ 278.400394][ T7516] bridge_slave_0: entered promiscuous mode [ 278.420955][ T2580] hsr_slave_0: left promiscuous mode [ 278.427293][ T2580] hsr_slave_1: left promiscuous mode [ 278.441935][ T2580] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.450583][ T2580] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.473058][ T5219] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 278.953858][ T2580] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.988370][ T2580] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 279.152354][ T2580] veth1_macvtap: left promiscuous mode [ 279.163502][ T2580] veth0_macvtap: left promiscuous mode [ 279.179469][ T2580] veth1_vlan: left promiscuous mode [ 279.193288][ T2580] veth0_vlan: left promiscuous mode [ 279.223165][ T54] Bluetooth: hci8: command tx timeout [ 279.585630][ T5219] usb 2-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 279.601716][ T5219] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.617334][ T5219] usb 2-1: Product: syz [ 279.623772][ T5219] usb 2-1: Manufacturer: syz [ 279.628393][ T5219] usb 2-1: SerialNumber: syz [ 279.653146][ T5219] usb 2-1: config 0 descriptor?? [ 280.001718][ T2580] team0 (unregistering): Port device team_slave_1 removed [ 280.049358][ T2580] team0 (unregistering): Port device team_slave_0 removed [ 280.297814][ T5219] usb 2-1: f81604_read: reg: 105 failed: -EPROTO [ 280.314103][ T5219] f81604 2-1:0.0: Setting termination of CH#1 failed: -EPROTO [ 280.333256][ T5219] f81604 2-1:0.0: probe with driver f81604 failed with error -71 [ 280.356550][ T5219] usb 2-1: USB disconnect, device number 8 [ 280.538149][ T7497] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.551405][ T7497] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.561881][ T7497] bridge_slave_0: entered allmulticast mode [ 280.571001][ T7497] bridge_slave_0: entered promiscuous mode [ 280.579814][ T7497] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.587933][ T7497] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.596415][ T7497] bridge_slave_1: entered allmulticast mode [ 280.604007][ T7497] bridge_slave_1: entered promiscuous mode [ 280.630345][ T7516] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.637603][ T7516] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.645126][ T7516] bridge_slave_1: entered allmulticast mode [ 280.652463][ T7516] bridge_slave_1: entered promiscuous mode [ 280.757116][ T7497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.787887][ T7516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.802242][ T7516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 280.815775][ T7497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.719298][ T7497] team0: Port device team_slave_0 added [ 281.823959][ T7516] team0: Port device team_slave_0 added [ 281.938357][ T7497] team0: Port device team_slave_1 added [ 282.072195][ T7516] team0: Port device team_slave_1 added [ 282.144897][ T7497] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.162140][ T7497] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.484549][ T7664] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 282.538716][ T7497] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 283.278466][ T7516] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 283.319634][ T7516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.388206][ T7516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 283.416983][ T7497] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 283.445785][ T7497] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.528460][ T7497] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 283.642312][ T7516] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 283.661535][ T7516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.690316][ T7516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 283.747338][ T7443] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 283.832795][ T7497] hsr_slave_0: entered promiscuous mode [ 283.848805][ T7497] hsr_slave_1: entered promiscuous mode [ 283.863246][ T7497] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 283.871408][ T7497] Cannot create hsr debugfs directory [ 283.889385][ T7443] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 283.906585][ T7443] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 283.925983][ T7676] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (4) [ 283.978037][ T7443] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 284.103821][ T2580] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.340487][ T2580] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.415118][ T7516] hsr_slave_0: entered promiscuous mode [ 284.447857][ T7516] hsr_slave_1: entered promiscuous mode [ 284.469330][ T7516] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 284.496970][ T7516] Cannot create hsr debugfs directory [ 284.683289][ T2580] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.924829][ T7698] fuse: Unknown parameter '0x000000000000000a' [ 285.785874][ T2580] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.921907][ T2580] team0: left allmulticast mode [ 286.938638][ T2580] team_slave_0: left allmulticast mode [ 286.945119][ T2580] team_slave_1: left allmulticast mode [ 286.962764][ T2580] bridge0: port 3(team0) entered disabled state [ 286.983745][ T2580] bridge_slave_1: left allmulticast mode [ 286.989423][ T2580] bridge_slave_1: left promiscuous mode [ 287.001432][ T2580] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.026106][ T2580] bridge_slave_0: left allmulticast mode [ 287.031830][ T2580] bridge_slave_0: left promiscuous mode [ 287.043066][ T2580] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.508302][ T2580] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 288.528730][ T2580] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 288.553694][ T2580] bond0 (unregistering): Released all slaves [ 288.585545][ T2580] bond1 (unregistering): Released all slaves [ 288.982183][ T7726] tipc: Started in network mode [ 289.003285][ T7726] tipc: Node identity 1, cluster identity 4711 [ 289.026217][ T7726] tipc: Node number set to 1 [ 289.764761][ T7443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.997854][ T2580] hsr_slave_0: left promiscuous mode [ 290.019291][ T2580] hsr_slave_1: left promiscuous mode [ 290.042232][ T2580] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 290.064907][ T2580] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 290.078017][ T2580] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 290.138321][ T2580] veth1_macvtap: left promiscuous mode [ 290.158723][ T2580] veth0_macvtap: left promiscuous mode [ 290.176489][ T2580] veth1_vlan: left promiscuous mode [ 290.189246][ T2580] veth0_vlan: left promiscuous mode [ 292.010333][ T2580] team_slave_1 (unregistering): left promiscuous mode [ 292.021729][ T2580] team0 (unregistering): Port device team_slave_1 removed [ 292.062096][ T2580] team_slave_0 (unregistering): left promiscuous mode [ 292.076238][ T2580] team0 (unregistering): Port device team_slave_0 removed [ 292.577065][ T7443] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.650683][ T1124] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.657908][ T1124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.711781][ T1124] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.719096][ T1124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.173544][ T7516] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 293.560119][ T7516] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 293.606706][ T7516] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 293.617396][ T7516] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 293.862655][ T7497] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 293.909810][ T7497] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 293.926694][ T7497] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 293.973148][ T7497] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 294.117106][ T7443] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 294.366332][ T7787] netlink: 4 bytes leftover after parsing attributes in process `syz.4.676'. [ 294.430912][ T7443] veth0_vlan: entered promiscuous mode [ 294.453090][ T7788] team0: entered promiscuous mode [ 294.458172][ T7788] team_slave_0: entered promiscuous mode [ 294.494233][ T7788] team_slave_1: entered promiscuous mode [ 294.594158][ T7790] team_slave_0: entered allmulticast mode [ 294.674361][ T7790] team0: Port device team_slave_0 removed [ 294.731422][ T7497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.776074][ T7516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.794244][ T7785] team0: left promiscuous mode [ 294.800259][ T7785] team_slave_1: left promiscuous mode [ 294.840256][ T7443] veth1_vlan: entered promiscuous mode [ 294.912201][ T7516] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.986338][ T1124] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.993533][ T1124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.015016][ T1124] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.022185][ T1124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.089124][ T7497] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.133621][ T7443] veth0_macvtap: entered promiscuous mode [ 295.171623][ T2580] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.178813][ T2580] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.235616][ T7805] netlink: 8 bytes leftover after parsing attributes in process `syz.4.678'. [ 295.293619][ T7443] veth1_macvtap: entered promiscuous mode [ 295.330385][ T7805] netlink: 44 bytes leftover after parsing attributes in process `syz.4.678'. [ 295.368194][ T1124] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.375407][ T1124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.536966][ T7443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.563008][ T7443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.580297][ T7443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.603162][ T7443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.620124][ T7443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.630855][ T7443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.652010][ T7443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.662667][ T7443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.686277][ T7443] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 295.796789][ T7443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.826412][ T7443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.877446][ T7443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.912014][ T7443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.932184][ T7443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.946915][ T7443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.956998][ T7443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.968164][ T7443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.982661][ T7443] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 296.056037][ T7443] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.083361][ T7443] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.092158][ T7443] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.164071][ T7443] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.471027][ T1124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.497639][ T1124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.622050][ T1302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.646996][ T1302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.652192][ T7516] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 296.817878][ T7497] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 296.865861][ T7846] netlink: 'syz.1.685': attribute type 4 has an invalid length. [ 296.889886][ T7846] netlink: 17 bytes leftover after parsing attributes in process `syz.1.685'. [ 296.954916][ T7516] veth0_vlan: entered promiscuous mode [ 297.020207][ T7516] veth1_vlan: entered promiscuous mode [ 297.132537][ T7497] veth0_vlan: entered promiscuous mode [ 297.230892][ T7516] veth0_macvtap: entered promiscuous mode [ 297.269956][ T7497] veth1_vlan: entered promiscuous mode [ 297.338320][ T7516] veth1_macvtap: entered promiscuous mode [ 297.361408][ T7872] netlink: 68 bytes leftover after parsing attributes in process `syz.4.690'. [ 297.434050][ T7872] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 297.483916][ T7516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.503070][ T7516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.525738][ T7516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.571315][ T7516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.613098][ T7516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.647141][ T7516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.686261][ T7516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.705760][ T7516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.716470][ T7516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.731804][ T7516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.744489][ T7516] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 297.790796][ T7516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.806087][ T7516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.817138][ T7516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.830170][ T7516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.844326][ T7516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.855557][ T7516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.865493][ T7516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.877325][ T7516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.909151][ T7516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.955512][ T7516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.977467][ T7516] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 297.995525][ T7516] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.021357][ T7516] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.073190][ T7516] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.081945][ T7516] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.148128][ T7497] veth0_macvtap: entered promiscuous mode [ 298.206037][ T7497] veth1_macvtap: entered promiscuous mode [ 298.405855][ T7497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.493077][ T7497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.532563][ T7497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.573339][ T7497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.586782][ T7497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.641340][ T7497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.671763][ T7497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.703285][ T7497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.729204][ T7497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.753930][ T7497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.773202][ T7497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.788543][ T7497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.868532][ T7497] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 299.365500][ T7497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.402845][ T7497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.423457][ T7497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.487109][ T7497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.516195][ T7497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.536653][ T7497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.552359][ T7497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.573307][ T7497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.593447][ T7497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.615923][ T7497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.625976][ T7497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.648951][ T7497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.671034][ T7497] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.811582][ T7497] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.851221][ T7497] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.878555][ T7497] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.893862][ T7497] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.993317][ T2580] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.016715][ T2580] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.206317][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.253518][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.345245][ T7936] netlink: 256 bytes leftover after parsing attributes in process `syz.1.700'. [ 300.395356][ T7936] xt_policy: neither incoming nor outgoing policy selected [ 300.467678][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.501847][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.561834][ T7941] 9pnet_fd: p9_fd_create_tcp (7941): problem binding to privport [ 300.583070][ T1057] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.638704][ T1057] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.699110][ T29] audit: type=1326 audit(1723496276.687:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7931 comm="syz.1.700" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9eedd799f9 code=0x0 [ 300.719620][ T7945] netlink: 'syz.3.608': attribute type 1 has an invalid length. [ 300.763805][ T7945] netlink: 9352 bytes leftover after parsing attributes in process `syz.3.608'. [ 300.818266][ T7945] netlink: 'syz.3.608': attribute type 1 has an invalid length. [ 300.856249][ T7945] netlink: 'syz.3.608': attribute type 2 has an invalid length. [ 301.265481][ T7958] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1222729745 (39127351840 ns) > initial count (25964891200 ns). Using initial count to start timer. [ 302.246197][ T7969] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 302.506734][ T7977] nbd: device at index 3 is going down [ 302.667466][ T7984] dccp_invalid_packet: P.Data Offset(100) too large [ 303.187909][ T8009] mkiss: ax0: crc mode is auto. [ 303.863627][ T5312] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 303.923507][ T5334] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 304.734820][ T5312] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 304.883168][ T5334] usb 2-1: Using ep0 maxpacket: 8 [ 304.892186][ T5312] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 304.903320][ T5312] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.005201][ T8038] affs: No valid root block on device nullb0 [ 305.502819][ T5334] usb 2-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice=13.13 [ 305.600384][ T5334] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.626744][ T5312] usb 3-1: config 0 descriptor?? [ 305.681026][ T5334] usb 2-1: config 0 descriptor?? [ 305.687354][ T5312] usb 3-1: Found UVC 0.00 device (046d:08c1) [ 305.746118][ T5312] usb 3-1: No valid video chain found. [ 305.817709][ T5334] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input12 [ 305.959172][ T5266] usb 3-1: USB disconnect, device number 9 [ 307.260643][ T8057] netlink: 'syz.0.734': attribute type 4 has an invalid length. [ 307.370658][ T8053] netlink: 36 bytes leftover after parsing attributes in process `syz.2.732'. [ 307.431319][ T8057] netlink: 'syz.0.734': attribute type 17 has an invalid length. [ 307.520597][ T8057] syz.0.734 (8057) used greatest stack depth: 19120 bytes left [ 307.707396][ T8063] netlink: 'syz.3.736': attribute type 12 has an invalid length. [ 307.727337][ T8063] netlink: del zone limit has 8 unknown bytes [ 307.994270][ T4655] bcm5974 2-1:0.0: could not read from device [ 308.054751][ T4655] bcm5974 2-1:0.0: could not read from device [ 308.070032][ T5334] usb 2-1: USB disconnect, device number 9 [ 308.084450][ T4655] bcm5974 2-1:0.0: could not read from device [ 309.000436][ T7479] udevd[7479]: Error opening device "/dev/input/event4": No such file or directory [ 309.076545][ T7479] udevd[7479]: Unable to EVIOCGABS device "/dev/input/event4" [ 309.096921][ T7479] udevd[7479]: Unable to EVIOCGABS device "/dev/input/event4" [ 309.130058][ T7479] udevd[7479]: Unable to EVIOCGABS device "/dev/input/event4" [ 309.161052][ T7479] udevd[7479]: Unable to EVIOCGABS device "/dev/input/event4" [ 309.464014][ T8080] ======================================================= [ 309.464014][ T8080] WARNING: The mand mount option has been deprecated and [ 309.464014][ T8080] and is ignored by this kernel. Remove the mand [ 309.464014][ T8080] option from the mount to silence this warning. [ 309.464014][ T8080] ======================================================= [ 309.498918][ C0] vkms_vblank_simulate: vblank timer overrun [ 309.630983][ T8080] netlink: 4 bytes leftover after parsing attributes in process `syz.0.742'. [ 312.623809][ T5268] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 312.956117][ T8131] xt_hashlimit: size too large, truncated to 1048576 [ 312.981336][ T8131] xt_hashlimit: overflow, try lower: 0/0 [ 313.114275][ T5268] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.143170][ T5268] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.188964][ T5268] usb 2-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00 [ 313.229880][ T5268] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.258347][ T5268] usb 2-1: config 0 descriptor?? [ 313.298117][ T8143] netlink: 12 bytes leftover after parsing attributes in process `syz.4.763'. [ 313.330006][ T8143] netlink: 40 bytes leftover after parsing attributes in process `syz.4.763'. [ 314.838670][ T5268] wacom 0003:056A:5000.0006: hidraw0: USB HID v0.00 Device [HID 056a:5000] on usb-dummy_hcd.1-1/input0 [ 315.003344][ T5268] usb 2-1: USB disconnect, device number 10 [ 315.024398][ T5334] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 315.345621][ T5334] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 315.363726][ T5334] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.376314][ T5334] usb 3-1: too many endpoints for config 1 interface 1 altsetting 237: 105, using maximum allowed: 30 [ 315.828775][ T5334] usb 3-1: config 1 interface 1 altsetting 237 has 0 endpoint descriptors, different from the interface descriptor's value: 105 [ 315.858697][ T5334] usb 3-1: config 1 interface 1 has no altsetting 0 [ 315.881405][ T5334] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 316.063151][ T5334] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.071402][ T5334] usb 3-1: Product: syz [ 316.126396][ T5334] usb 3-1: Manufacturer: syz [ 316.148069][ T5334] usb 3-1: SerialNumber: syz [ 317.034337][ T5334] usb 3-1: selecting invalid altsetting 1 [ 317.040636][ T5334] usb 3-1: selecting invalid altsetting 0 [ 317.058380][ T5334] usb 3-1: selecting invalid altsetting 0 [ 317.064434][ T5334] cdc_ncm 3-1:1.0: bind() failure [ 317.127715][ T5334] usb 3-1: selecting invalid altsetting 0 [ 317.143042][ T5334] usbtest 3-1:1.1: probe with driver usbtest failed with error -22 [ 317.322386][ T5334] usb 3-1: USB disconnect, device number 10 [ 317.401323][ T1263] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.408797][ T1263] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.955129][ T29] audit: type=1326 audit(1723496293.937:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8185 comm="syz.3.777" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9ebcd799f9 code=0x0 [ 318.046636][ T8198] input: syz0 as /devices/virtual/input/input16 [ 322.794491][ T8229] netlink: 12 bytes leftover after parsing attributes in process `syz.0.785'. [ 322.913379][ T8233] tipc: Failed to remove unknown binding: 66,1,1/0:359175939/359175941 [ 322.965900][ T8233] tipc: Failed to remove unknown binding: 66,1,1/0:359175939/359175941 [ 323.023040][ T8233] tipc: Failed to remove unknown binding: 66,1,1/0:359175939/359175941 [ 323.292516][ T29] audit: type=1326 audit(1723496299.275:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8248 comm="syz.4.793" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8f8f9799f9 code=0x0 [ 323.444856][ T8253] netlink: 28 bytes leftover after parsing attributes in process `syz.4.793'. [ 323.609289][ T8253] netlink: 'syz.4.793': attribute type 4 has an invalid length. [ 323.806924][ T8265] kvm_intel: kvm [8264]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x1 [ 323.993185][ T29] audit: type=1326 audit(1723496299.985:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8268 comm="syz.2.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d4ab799f9 code=0x7ffc0000 [ 324.019626][ T29] audit: type=1326 audit(1723496299.985:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8268 comm="syz.2.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d4ab799f9 code=0x7ffc0000 [ 324.044266][ T29] audit: type=1326 audit(1723496300.005:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8268 comm="syz.2.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6d4ab799f9 code=0x7ffc0000 [ 324.074292][ T29] audit: type=1326 audit(1723496300.005:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8268 comm="syz.2.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d4ab799f9 code=0x7ffc0000 [ 324.099114][ T5268] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 324.127194][ T29] audit: type=1326 audit(1723496300.005:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8268 comm="syz.2.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d4ab799f9 code=0x7ffc0000 [ 324.184233][ T29] audit: type=1326 audit(1723496300.005:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8268 comm="syz.2.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f6d4ab799f9 code=0x7ffc0000 [ 324.252015][ T29] audit: type=1326 audit(1723496300.005:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8268 comm="syz.2.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d4ab799f9 code=0x7ffc0000 [ 324.276037][ T46] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 325.037392][ T5268] usb 2-1: New USB device found, idVendor=03f0, idProduct=0307, bcdDevice= 0.01 [ 325.099948][ T29] audit: type=1326 audit(1723496300.005:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8268 comm="syz.2.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f6d4ab799f9 code=0x7ffc0000 [ 325.103088][ T46] usb 1-1: Using ep0 maxpacket: 16 [ 325.132624][ T5268] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.144375][ T5268] usb 2-1: Product: syz [ 325.148552][ T5268] usb 2-1: Manufacturer: syz [ 325.153330][ T5268] usb 2-1: SerialNumber: syz [ 325.159700][ T46] usb 1-1: config 0 has an invalid interface number: 107 but max is 0 [ 325.180627][ T46] usb 1-1: config 0 has no interface number 0 [ 325.197859][ T5268] usb 2-1: config 0 descriptor?? [ 325.205060][ T29] audit: type=1326 audit(1723496300.005:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8268 comm="syz.2.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d4ab799f9 code=0x7ffc0000 [ 325.232763][ T46] usb 1-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 325.271280][ T5268] ums-usbat 2-1:0.0: USB Mass Storage device detected [ 325.295606][ T46] usb 1-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 325.319489][ T46] usb 1-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 325.333830][ T46] usb 1-1: Product: syz [ 325.346561][ T8287] netlink: 8 bytes leftover after parsing attributes in process `syz.3.806'. [ 325.358279][ T46] usb 1-1: Manufacturer: syz [ 325.372055][ T8287] netlink: 4 bytes leftover after parsing attributes in process `syz.3.806'. [ 325.373231][ T46] usb 1-1: SerialNumber: syz [ 325.424445][ T46] usb 1-1: config 0 descriptor?? [ 325.430697][ T54] block nbd0: Receive control failed (result -107) [ 325.446058][ T46] keyspan 1-1:0.107: Keyspan 4 port adapter converter detected [ 325.453821][ T5334] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 325.463906][ T46] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 81 [ 325.488149][ T46] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 1 [ 325.516314][ T46] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 325.538827][ T8195] block nbd0: NBD_DISCONNECT [ 325.539622][ T46] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 2 [ 325.555676][ T5268] usb 2-1: USB disconnect, device number 11 [ 325.566303][ T8195] block nbd0: Send disconnect failed -32 [ 325.578305][ T46] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 325.586875][ T8195] block nbd0: shutting down sockets [ 325.616406][ T46] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 4 [ 325.639407][ T46] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 325.668235][ T5334] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 325.692063][ T46] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 6 [ 325.700476][ T5334] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.721319][ T5334] usb 3-1: Product: syz [ 325.727836][ T46] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 325.736119][ T5334] usb 3-1: Manufacturer: syz [ 325.740736][ T5334] usb 3-1: SerialNumber: syz [ 325.751835][ T46] usb 1-1: USB disconnect, device number 11 [ 325.762778][ T5334] usb 3-1: config 0 descriptor?? [ 325.943734][ T46] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 326.815923][ T46] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 327.001264][ T46] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 327.025833][ T46] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 327.053272][ T46] keyspan 1-1:0.107: device disconnected [ 328.624130][ T5334] kernel write not supported for file [eventfd] (pid: 5334 comm: kworker/1:6) [ 329.889874][ T5234] Bluetooth: hci8: command 0x0405 tx timeout [ 329.988873][ T1171] usb 3-1: USB disconnect, device number 11 [ 332.250728][ T8347] netlink: 56 bytes leftover after parsing attributes in process `syz.2.823'. [ 332.260833][ T8347] netlink: 12 bytes leftover after parsing attributes in process `syz.2.823'. [ 333.901349][ T8375] Unknown options in mask 5 [ 334.494025][ T8368] syz.0.831 (8368) used greatest stack depth: 18704 bytes left [ 334.636513][ T5269] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 334.895042][ T5269] usb 2-1: unable to get BOS descriptor or descriptor too short [ 334.907578][ T5269] usb 2-1: not running at top speed; connect to a high speed hub [ 334.920605][ T5234] Bluetooth: hci5: command 0x0406 tx timeout [ 334.930455][ T5269] usb 2-1: config 1 interface 0 has no altsetting 0 [ 334.940634][ T5269] usb 2-1: string descriptor 0 read error: -22 [ 334.947334][ T5269] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 334.956560][ T5269] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.529237][ T5269] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 337.227475][ T5269] usb 1-1: Using ep0 maxpacket: 8 [ 337.257736][ T5269] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 337.280426][ T5268] usb 2-1: USB disconnect, device number 12 [ 337.286572][ T5269] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 337.312652][ T5269] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 337.353171][ T5269] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 337.391953][ T5269] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 337.420053][ T5269] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 337.460550][ T5269] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 337.508936][ T5269] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.540848][ T5269] usb 1-1: Product: syz [ 337.566661][ T5269] usb 1-1: Manufacturer: syz [ 337.583223][ T5269] usb 1-1: SerialNumber: syz [ 337.618234][ T5269] usb 1-1: config 0 descriptor?? [ 337.636070][ T5269] hub 1-1:0.0: bad descriptor, ignoring hub [ 337.642068][ T5269] hub 1-1:0.0: probe with driver hub failed with error -5 [ 337.964209][ T5268] usb 1-1: USB disconnect, device number 12 [ 341.686533][ T1171] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 341.983536][ T1171] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 342.035602][ T1171] usb 1-1: New USB device found, idVendor=0b05, idProduct=1822, bcdDevice= 0.40 [ 342.065500][ T1171] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.114168][ T1171] usb 1-1: Product: syz [ 342.118371][ T1171] usb 1-1: SerialNumber: syz [ 342.157881][ T1171] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 342.427308][ T1171] usb 1-1: USB disconnect, device number 13 [ 344.114746][ T8478] netlink: 8 bytes leftover after parsing attributes in process `syz.0.866'. [ 344.537837][ T8488] netlink: 'syz.1.871': attribute type 1 has an invalid length. [ 344.584322][ T8490] netlink: 16 bytes leftover after parsing attributes in process `syz.4.872'. [ 345.661204][ T8495] netlink: 'syz.2.874': attribute type 9 has an invalid length. [ 345.669646][ T8495] netlink: 'syz.2.874': attribute type 7 has an invalid length. [ 345.677605][ T8495] netlink: 'syz.2.874': attribute type 8 has an invalid length. [ 345.690532][ T8495] ax25_connect(): syz.2.874 uses autobind, please contact jreuter@yaina.de [ 349.187761][ T8533] Invalid option length (210910) for dns_resolver key [ 349.275718][ T46] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 349.461376][ T8544] kernel profiling enabled (shift: 9) [ 349.503909][ T46] usb 3-1: config 0 has an invalid interface number: 107 but max is 0 [ 349.516222][ T46] usb 3-1: config 0 has no interface number 0 [ 349.526560][ T46] usb 3-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 349.538834][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.569809][ T46] usb 3-1: Product: syz [ 349.919506][ T46] usb 3-1: Manufacturer: syz [ 349.928172][ T46] usb 3-1: SerialNumber: syz [ 350.017395][ T46] usb 3-1: config 0 descriptor?? [ 350.181388][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 350.181402][ T29] audit: type=1326 audit(1723496326.165:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8548 comm="syz.1.890" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9eedd799f9 code=0x0 [ 350.252631][ T8552] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 351.263409][ T8570] netlink: 16 bytes leftover after parsing attributes in process `syz.4.895'. [ 351.493573][ T8570] netlink: 4 bytes leftover after parsing attributes in process `syz.4.895'. [ 351.840953][ T8583] netlink: 24 bytes leftover after parsing attributes in process `syz.4.900'. [ 351.994372][ T29] audit: type=1326 audit(1723496327.975:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8591 comm="syz.3.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ebcd799f9 code=0x7ffc0000 [ 352.059080][ T29] audit: type=1326 audit(1723496327.975:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8591 comm="syz.3.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ebcd799f9 code=0x7ffc0000 [ 352.139886][ T29] audit: type=1326 audit(1723496328.005:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8591 comm="syz.3.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f9ebcd799f9 code=0x7ffc0000 [ 352.201463][ T29] audit: type=1326 audit(1723496328.005:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8591 comm="syz.3.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ebcd799f9 code=0x7ffc0000 [ 352.415872][ T8600] netlink: 32 bytes leftover after parsing attributes in process `syz.1.906'. [ 352.460028][ T8602] netlink: 44 bytes leftover after parsing attributes in process `syz.4.908'. [ 352.890847][ T29] audit: type=1326 audit(1723496328.875:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8598 comm="syz.3.907" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9ebcd799f9 code=0x0 [ 353.025759][ T5269] usb 3-1: USB disconnect, device number 12 [ 353.444970][ T5268] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 353.643103][ T5268] usb 1-1: Using ep0 maxpacket: 16 [ 353.661036][ T5268] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 353.682463][ T5268] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 353.692361][ T5268] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 353.703899][ T5268] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 353.725846][ T5268] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 353.746710][ T5268] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.820815][ T5268] usb 1-1: Product: syz [ 353.827785][ T5268] usb 1-1: Manufacturer: syz [ 353.859089][ T5268] usb 1-1: SerialNumber: syz [ 354.272791][ T8632] netlink: 4 bytes leftover after parsing attributes in process `syz.1.916'. [ 354.377892][ T8634] netlink: 16 bytes leftover after parsing attributes in process `syz.1.916'. [ 355.021504][ T8633] netlink: 4 bytes leftover after parsing attributes in process `syz.1.916'. [ 355.591862][ T5268] usb 1-1: USB disconnect, device number 14 [ 355.660570][ T8195] udevd[8195]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 356.089226][ T8650] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 359.746128][ T8682] xt_CT: You must specify a L4 protocol and not use inversions on it [ 360.658973][ T29] audit: type=1326 audit(1723496336.635:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8694 comm="syz.1.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9eedd799f9 code=0x7ffc0000 [ 360.687747][ T29] audit: type=1326 audit(1723496336.645:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8694 comm="syz.1.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9eedd799f9 code=0x7ffc0000 [ 360.713937][ T29] audit: type=1326 audit(1723496336.645:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8694 comm="syz.1.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7f9eedd799f9 code=0x7ffc0000 [ 360.742309][ T29] audit: type=1326 audit(1723496336.705:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8694 comm="syz.1.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9eedd799f9 code=0x7ffc0000 [ 360.772092][ T29] audit: type=1326 audit(1723496336.705:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8694 comm="syz.1.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9eedd799f9 code=0x7ffc0000 [ 362.087083][ T8730] input: syz0 as /devices/virtual/input/input17 [ 362.093706][ T8730] input: failed to attach handler leds to device input17, error: -6 [ 362.234705][ T8736] pim6reg: entered allmulticast mode [ 362.245123][ T8736] pim6reg: left allmulticast mode [ 362.268433][ T5268] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 362.466119][ T5268] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 362.485556][ T5268] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 362.499577][ T5268] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 362.517515][ T5268] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 362.531340][ T5268] usb 1-1: SerialNumber: syz [ 362.771775][ T5268] usb 1-1: 0:2 : does not exist [ 363.502787][ T46] usb 1-1: USB disconnect, device number 15 [ 364.429617][ T8782] netlink: 236 bytes leftover after parsing attributes in process `syz.1.966'. [ 364.655735][ T8789] netlink: 4 bytes leftover after parsing attributes in process `syz.1.970'. [ 368.018241][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 368.028894][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 368.037151][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 368.046616][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 368.056371][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 368.065180][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 368.102410][ T8832] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 368.124300][ T1171] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 368.352754][ T1171] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 368.390528][ T1171] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 368.438076][ T1171] usb 3-1: New USB device found, idVendor=1a7d, idProduct=30d4, bcdDevice= 0.00 [ 368.478744][ T1171] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.534429][ T1171] usb 3-1: config 0 descriptor?? [ 368.577632][ T1171] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 368.680327][ T8835] chnl_net:caif_netlink_parms(): no params data found [ 369.802378][ T8864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.958087][ T8864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.283022][ T54] Bluetooth: hci0: command tx timeout [ 370.660023][ T8835] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.694902][ T8835] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.705689][ T8835] bridge_slave_0: entered allmulticast mode [ 370.713454][ T8835] bridge_slave_0: entered promiscuous mode [ 370.721517][ T8872] netlink: 'syz.1.995': attribute type 21 has an invalid length. [ 370.746556][ T8872] netlink: 132 bytes leftover after parsing attributes in process `syz.1.995'. [ 370.747084][ T8875] netlink: 68 bytes leftover after parsing attributes in process `syz.0.997'. [ 370.771218][ T8835] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.780640][ T8835] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.788257][ T8835] bridge_slave_1: entered allmulticast mode [ 370.798071][ T8835] bridge_slave_1: entered promiscuous mode [ 370.802532][ T8875] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 370.855191][ T8835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 370.868179][ T8835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.908409][ T8835] team0: Port device team_slave_0 added [ 370.917734][ T8835] team0: Port device team_slave_1 added [ 370.951652][ T8835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.960088][ T8835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.986126][ T8835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.999074][ T8835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.006098][ T8835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.032286][ T5269] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 371.042508][ T8835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.088575][ T8835] hsr_slave_0: entered promiscuous mode [ 371.095444][ T8835] hsr_slave_1: entered promiscuous mode [ 371.242322][ T5269] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 371.256887][ T8835] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.267698][ T5269] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 371.277546][ T5269] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 371.287346][ T5269] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 371.301830][ T5269] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 371.311080][ T5269] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.319175][ T5269] usb 4-1: Product: syz [ 371.324486][ T5269] usb 4-1: Manufacturer: syz [ 371.329086][ T5269] usb 4-1: SerialNumber: syz [ 371.337023][ T5269] usb 4-1: config 0 descriptor?? [ 371.350389][ T5269] ums-isd200 4-1:0.0: USB Mass Storage device detected [ 371.391999][ T8835] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.522448][ T8835] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.577727][ T5219] usb 3-1: USB disconnect, device number 13 [ 371.974455][ T8876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.139599][ T8876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.224397][ T5219] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 372.341230][ T8835] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.392760][ T54] Bluetooth: hci0: command tx timeout [ 372.410850][ T8876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.431618][ T8876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.509832][ T5219] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.529883][ T5219] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 372.539837][ T5219] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 372.576287][ T5219] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.606814][ T5219] usb 2-1: config 0 descriptor?? [ 372.724954][ T5269] scsi host1: usb-storage 4-1:0.0 [ 372.761615][ T5269] usb 4-1: USB disconnect, device number 14 [ 372.926902][ T8835] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 372.968124][ T8835] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 373.000666][ T8835] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 373.033481][ T8835] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 373.130690][ T5219] usbhid 2-1:0.0: can't add hid device: -71 [ 373.174273][ T5219] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 373.232392][ T5219] usb 2-1: USB disconnect, device number 13 [ 373.352057][ T8835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.428016][ T8835] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.499005][ T2580] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.506154][ T2580] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.555653][ T2580] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.562804][ T2580] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.963754][ T5268] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 374.195646][ T5268] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 374.261281][ T5268] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 374.279277][ T5268] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.349329][ T5268] usb 1-1: config 0 descriptor?? [ 374.353279][ T8835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 374.435448][ T54] Bluetooth: hci0: command tx timeout [ 374.587529][ T8924] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1008'. [ 374.759627][ T29] audit: type=1326 audit(1723496350.735:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8918 comm="syz.3.1007" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9ebcd799f9 code=0x0 [ 374.842027][ T5268] keytouch 0003:0926:3333.0007: fixing up Keytouch IEC report descriptor [ 374.887068][ T5268] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0007/input/input18 [ 375.154838][ T5268] keytouch 0003:0926:3333.0007: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 375.487018][ T8835] veth0_vlan: entered promiscuous mode [ 375.559835][ T8835] veth1_vlan: entered promiscuous mode [ 375.576767][ T29] audit: type=1326 audit(1723496351.565:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8904 comm="syz.0.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f445799f9 code=0x7ffc0000 [ 375.794243][ T29] audit: type=1326 audit(1723496351.565:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8904 comm="syz.0.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f445799f9 code=0x7ffc0000 [ 375.820036][ T8944] binder: 8938:8944 ioctl c0306201 20000580 returned -14 [ 375.841718][ T8835] veth0_macvtap: entered promiscuous mode [ 376.334005][ T8835] veth1_macvtap: entered promiscuous mode [ 376.344706][ T29] audit: type=1326 audit(1723496351.565:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8904 comm="syz.0.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f5f445799f9 code=0x7ffc0000 [ 376.453836][ T8835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.489385][ T29] audit: type=1326 audit(1723496351.635:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8904 comm="syz.0.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f445799f9 code=0x7ffc0000 [ 376.514280][ T54] Bluetooth: hci0: command tx timeout [ 376.522961][ T8835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.571638][ T8835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.598522][ T29] audit: type=1326 audit(1723496351.635:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8904 comm="syz.0.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f445799f9 code=0x7ffc0000 [ 376.631048][ T8835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.661000][ T8835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.693160][ T29] audit: type=1326 audit(1723496351.695:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8904 comm="syz.0.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f5f445799f9 code=0x7ffc0000 [ 377.416523][ T8835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.426850][ T29] audit: type=1326 audit(1723496351.695:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8904 comm="syz.0.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f445799f9 code=0x7ffc0000 [ 377.500664][ T8835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.500815][ T29] audit: type=1326 audit(1723496351.695:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8904 comm="syz.0.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f445799f9 code=0x7ffc0000 [ 377.552729][ T29] audit: type=1326 audit(1723496351.705:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8904 comm="syz.0.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5f445799f9 code=0x7ffc0000 [ 377.574430][ T8835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.574461][ T8835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.574480][ T8835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.574499][ T8835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.574513][ T8835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.574524][ T8835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.574537][ T8835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.576188][ T8835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 377.661972][ T5312] usb 1-1: USB disconnect, device number 16 [ 377.690863][ T8956] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1016'. [ 377.856421][ T8835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.908546][ T8835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.924389][ T8835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.935179][ T8835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.945784][ T8835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.957859][ T8835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.969771][ T8835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.980422][ T8835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.992260][ T8835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.005129][ T8835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.016601][ T8835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.027214][ T8835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.037188][ T8835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.047832][ T8835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.067403][ T8835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 378.123693][ T8835] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.132439][ T8835] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.142643][ T8835] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.152138][ T8835] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.437156][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.473551][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.854837][ T1263] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.863237][ T1263] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.520815][ T6554] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.545602][ T6554] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.836901][ T8981] ALSA: mixer_oss: invalid OSS volume '' [ 380.915114][ T5234] Bluetooth: hci6: command 0x0406 tx timeout [ 381.032766][ T9013] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1034'. [ 384.772779][ T9046] MPI: mpi too large (187712 bits) [ 386.218729][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.327735][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.276392][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.608035][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.808338][ T5234] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 387.823878][ T5234] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 387.836590][ T5234] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 387.856902][ T5234] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 387.863455][ T9096] xt_hashlimit: max too large, truncated to 1048576 [ 387.873569][ T5234] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 387.882712][ T5234] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 387.978686][ T35] bridge_slave_1: left allmulticast mode [ 387.986259][ T35] bridge_slave_1: left promiscuous mode [ 387.992024][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.039248][ T35] bridge_slave_0: left allmulticast mode [ 388.053156][ T35] bridge_slave_0: left promiscuous mode [ 388.066723][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.723064][ T5219] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 388.947610][ T5219] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 389.003079][ T5219] usb 2-1: New USB device found, idVendor=0499, idProduct=1058, bcdDevice=31.95 [ 389.012153][ T5219] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.062415][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 389.079954][ T5219] usb 2-1: config 0 descriptor?? [ 389.087948][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 389.136081][ T5219] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 389.154836][ T35] bond0 (unregistering): Released all slaves [ 389.269404][ T5219] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 389.342570][ T9108] netlink: 'syz.2.1070': attribute type 19 has an invalid length. [ 389.371570][ T5219] usb 2-1: USB disconnect, device number 14 [ 390.004611][ T5234] Bluetooth: hci4: command tx timeout [ 393.492998][ T5234] Bluetooth: hci4: command tx timeout [ 393.498460][ T5234] Bluetooth: hci6: command 0x0406 tx timeout [ 394.077805][ T35] hsr_slave_0: left promiscuous mode [ 395.196994][ T35] hsr_slave_1: left promiscuous mode [ 395.569100][ T5234] Bluetooth: hci4: command tx timeout [ 395.793401][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 395.800864][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 395.830303][ T9146] block nbd2: NBD_DISCONNECT [ 395.877123][ T9146] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1077'. [ 395.889645][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 395.903072][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 395.918127][ T9146] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 395.990729][ T35] veth1_macvtap: left promiscuous mode [ 396.001068][ T35] veth0_macvtap: left promiscuous mode [ 396.027140][ T35] veth1_vlan: left promiscuous mode [ 396.032512][ T29] kauditd_printk_skb: 67 callbacks suppressed [ 396.032527][ T29] audit: type=1326 audit(1723496372.015:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9163 comm="syz.0.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f445799f9 code=0x7ffc0000 [ 396.092378][ T35] veth0_vlan: left promiscuous mode [ 396.106535][ T29] audit: type=1326 audit(1723496372.015:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9163 comm="syz.0.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f445799f9 code=0x7ffc0000 [ 396.229498][ T29] audit: type=1326 audit(1723496372.035:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9163 comm="syz.0.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5f445799f9 code=0x7ffc0000 [ 396.250981][ C0] vkms_vblank_simulate: vblank timer overrun [ 396.273232][ T5234] Bluetooth: hci7: command 0x0406 tx timeout [ 396.387111][ T29] audit: type=1326 audit(1723496372.035:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9163 comm="syz.0.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f445799f9 code=0x7ffc0000 [ 396.483399][ T29] audit: type=1326 audit(1723496372.035:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9163 comm="syz.0.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f445799f9 code=0x7ffc0000 [ 396.510999][ T29] audit: type=1326 audit(1723496372.035:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9163 comm="syz.0.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f5f445799f9 code=0x7ffc0000 [ 396.537844][ T29] audit: type=1326 audit(1723496372.035:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9163 comm="syz.0.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f445799f9 code=0x7ffc0000 [ 396.562001][ T29] audit: type=1326 audit(1723496372.035:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9163 comm="syz.0.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f5f445799f9 code=0x7ffc0000 [ 396.616003][ T29] audit: type=1326 audit(1723496372.035:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9163 comm="syz.0.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f445799f9 code=0x7ffc0000 [ 396.671967][ T29] audit: type=1326 audit(1723496372.035:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9163 comm="syz.0.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f5f445799f9 code=0x7ffc0000 [ 397.051127][ T9174] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1086'. [ 397.114678][ T9174] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 397.121224][ T9174] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 397.129371][ T9174] vhci_hcd vhci_hcd.0: Device attached [ 397.171435][ T9175] vhci_hcd: cannot find the pending unlink 5 [ 397.402988][ T5312] usb 17-1: new high-speed USB device number 2 using vhci_hcd [ 397.597527][ T35] team0 (unregistering): Port device team_slave_1 removed [ 397.633926][ T54] Bluetooth: hci4: command tx timeout [ 397.714595][ T35] team0 (unregistering): Port device team_slave_0 removed [ 397.893233][ T9175] vhci_hcd: connection reset by peer [ 397.901337][ T1302] vhci_hcd: stop threads [ 397.912932][ T1302] vhci_hcd: release socket [ 397.941787][ T1302] vhci_hcd: disconnect device [ 399.009700][ T9093] chnl_net:caif_netlink_parms(): no params data found [ 399.745619][ T9093] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.793192][ T9093] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.800459][ T9093] bridge_slave_0: entered allmulticast mode [ 399.831745][ T9093] bridge_slave_0: entered promiscuous mode [ 399.888380][ T9093] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.953688][ T9093] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.991498][ T9093] bridge_slave_1: entered allmulticast mode [ 400.030242][ T9093] bridge_slave_1: entered promiscuous mode [ 400.139543][ T54] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 400.256527][ T9093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 400.307019][ T9093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 400.530784][ T9093] team0: Port device team_slave_0 added [ 400.861846][ T9093] team0: Port device team_slave_1 added [ 401.815362][ T9093] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 401.832150][ T9093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.882248][ T9093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.934486][ T9093] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 401.951367][ T9093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 402.113697][ T9244] netlink: 'syz.0.1103': attribute type 9 has an invalid length. [ 402.121533][ T9244] netlink: 'syz.0.1103': attribute type 7 has an invalid length. [ 402.129445][ T9244] netlink: 'syz.0.1103': attribute type 8 has an invalid length. [ 402.141661][ T9244] ax25_connect(): syz.0.1103 uses autobind, please contact jreuter@yaina.de [ 402.153007][ T9093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 406.573225][ T30] INFO: task syz.2.552:7307 blocked for more than 147 seconds. [ 406.580846][ T30] Not tainted 6.11.0-rc3-syzkaller-00007-gd74da846046a #0 [ 406.704172][ T5312] vhci_hcd: vhci_device speed not set [ 406.723026][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 406.731831][ T30] task:syz.2.552 state:D stack:24752 pid:7307 tgid:7304 ppid:5213 flags:0x00004004 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 406.833948][ T30] Call Trace: [ 406.935589][ T30] [ 406.955170][ T30] __schedule+0x17ae/0x4a10 [ 407.008839][ T30] ? __pfx___schedule+0x10/0x10 [ 407.042949][ T30] ? __pfx_lock_release+0x10/0x10 [ 407.048039][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 407.070832][ T30] ? schedule+0x90/0x320 [ 407.133464][ T30] nfsd_create_serv+0x3f0/0x760 [ 407.143857][ T30] ? __mutex_lock+0x9a5/0xd70 [ 407.163257][ T30] ? __pfx_nfsd_create_serv+0x10/0x10 [ 407.168699][ T30] ? __mutex_lock+0x527/0xd70 [ 407.215653][ T30] ? nfsd_nl_listener_set_doit+0x12d/0x1a90 [ 407.221575][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 407.226757][ T30] ? __asan_memset+0x23/0x50 [ 407.231347][ T30] ? netlink_unicast+0x7f0/0x990 [ 407.236399][ T30] ? __sock_sendmsg+0x221/0x270 [ 407.241246][ T30] ? __sys_sendmsg+0x2b0/0x3a0 [ 407.246107][ T30] ? nfsd_nl_listener_set_doit+0x135/0x1a90 [ 407.252021][ T30] ? __pfx___nla_validate_parse+0x10/0x10 [ 407.257867][ T30] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 407.264118][ T30] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 407.273791][ T30] ? __nla_parse+0x40/0x60 [ 407.278233][ T30] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 407.303140][ T30] ? genl_rcv_msg+0xb14/0xec0 [ 407.307863][ T30] ? mark_lock+0x9a/0x350 [ 407.312189][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 407.333021][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 407.338979][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 407.373297][ T30] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 407.379484][ T30] ? __pfx___might_resched+0x10/0x10 [ 407.423276][ T30] ? netlink_rcv_skb+0x1e3/0x430 [ 407.428255][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 407.463217][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 407.468550][ T30] ? __netlink_deliver_tap+0x77e/0x7c0 [ 407.503201][ T30] ? genl_rcv+0x28/0x40 [ 407.507391][ T30] ? netlink_unicast+0x7f0/0x990 [ 407.512325][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 407.551452][ T30] ? __virt_addr_valid+0x183/0x530 [ 407.565371][ T30] ? __check_object_size+0x49c/0x900 [ 407.570715][ T30] ? bpf_lsm_netlink_send+0x9/0x10 [ 407.595058][ T30] ? netlink_sendmsg+0x8e4/0xcb0 [ 407.600028][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 407.624056][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 407.638590][ T30] ? security_socket_sendmsg+0x87/0xb0 [ 407.653628][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 407.658944][ T30] ? __sock_sendmsg+0x221/0x270 [ 407.684075][ T30] ? ____sys_sendmsg+0x525/0x7d0 [ 407.694175][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 407.719584][ T30] ? __sys_sendmsg+0x2b0/0x3a0 [ 407.733131][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 407.753058][ T30] ? __schedule+0x17b6/0x4a10 [ 407.757827][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 407.793576][ T30] ? do_syscall_64+0x100/0x230 [ 407.799640][ T30] ? do_syscall_64+0xb6/0x230 [ 407.840420][ T30] ? do_syscall_64+0xf3/0x230 [ 407.853579][ T30] ? clear_bhb_loop+0x35/0x90 [ 407.873137][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.879241][ T30] [ 407.884767][ T30] [ 407.884767][ T30] Showing all locks held in the system: [ 408.136511][ T30] 1 lock held by khungtaskd/30: [ 408.141823][ T30] #0: ffffffff8e7382e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 408.264881][ T30] 3 locks held by kworker/u8:10/2580: [ 408.270309][ T30] #0: ffff888015489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 408.394820][ T30] #1: ffffc9000975fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 408.440347][ T30] #2: ffffffff8fa6fe48 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 408.482561][ T30] 2 locks held by getty/4973: [ 408.503196][ T30] #0: ffff88802b1760a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 408.551862][ T30] #1: ffffc90002efe2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 [ 408.582573][ T30] 2 locks held by syz.4.374/6724: [ 408.588719][ T30] #0: ffffffff8fa6fe48 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 408.612989][ T30] #1: ffffffff8e73d6b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 408.632757][ T30] 2 locks held by syz.2.552/7307: [ 408.638952][ T30] #0: ffffffff8fad55b0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 408.653277][ T30] #1: ffffffff8ea054a8 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_nl_listener_set_doit+0x12d/0x1a90 [ 408.676462][ T30] 2 locks held by syz.4.925/8664: [ 408.681522][ T30] #0: ffff88805728e0e0 (&type->s_umount_key#89){+.+.}-{3:3}, at: deactivate_super+0xb5/0xf0 [ 408.707619][ T30] #1: ffffffff8ea054a8 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_shutdown_threads+0x4e/0xd0 [ 408.733752][ T30] 4 locks held by syz-executor/9093: [ 408.762387][ T30] #0: ffff88805baa4d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 408.813086][ T30] #1: ffff88805baa4078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 408.843070][ T30] #2: ffffffff8fbdb768 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 408.862972][ T30] #3: ffffffff8e73d6b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 408.883194][ T30] 3 locks held by syz.0.1103/9242: [ 408.888318][ T30] #0: ffff888050930d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 408.898906][ T30] #1: ffff888050930078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 408.943162][ T30] #2: ffffffff8fbdb768 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 408.975153][ T30] 5 locks held by dhcpcd-run-hook/9259: [ 409.056646][ T30] [ 409.059977][ T30] ============================================= [ 409.059977][ T30] [ 409.176844][ T30] NMI backtrace for cpu 0 [ 409.181216][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc3-syzkaller-00007-gd74da846046a #0 [ 409.191707][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 409.201760][ T30] Call Trace: [ 409.205031][ T30] [ 409.207952][ T30] dump_stack_lvl+0x241/0x360 [ 409.212630][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 409.217824][ T30] ? __pfx__printk+0x10/0x10 [ 409.222411][ T30] ? vprintk_emit+0x631/0x770 [ 409.227080][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 409.232099][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 409.237055][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 409.242518][ T30] ? _printk+0xd5/0x120 [ 409.246677][ T30] ? __pfx__printk+0x10/0x10 [ 409.251294][ T30] ? __wake_up_klogd+0xcc/0x110 [ 409.256147][ T30] ? __pfx__printk+0x10/0x10 [ 409.260734][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 409.265750][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 409.271723][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 409.277699][ T30] watchdog+0xfee/0x1030 [ 409.281939][ T30] ? watchdog+0x1ea/0x1030 [ 409.286354][ T30] ? __pfx_watchdog+0x10/0x10 [ 409.291022][ T30] kthread+0x2f0/0x390 [ 409.295089][ T30] ? __pfx_watchdog+0x10/0x10 [ 409.299759][ T30] ? __pfx_kthread+0x10/0x10 [ 409.304347][ T30] ret_from_fork+0x4b/0x80 [ 409.308758][ T30] ? __pfx_kthread+0x10/0x10 [ 409.313342][ T30] ret_from_fork_asm+0x1a/0x30 [ 409.318109][ T30] [ 409.322615][ T30] Sending NMI from CPU 0 to CPUs 1: [ 409.328375][ C1] NMI backtrace for cpu 1 skipped: idling at acpi_safe_halt+0x21/0x30 [ 409.551142][ T2580] bridge_slave_1: left allmulticast mode [ 409.604723][ T2580] bridge_slave_1: left promiscuous mode [ 409.610525][ T2580] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.623429][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 409.630312][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc3-syzkaller-00007-gd74da846046a #0 [ 409.640803][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 409.650866][ T30] Call Trace: [ 409.654133][ T30] [ 409.657047][ T30] dump_stack_lvl+0x241/0x360 [ 409.661714][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 409.666900][ T30] ? __pfx__printk+0x10/0x10 [ 409.671473][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 409.677441][ T30] ? vscnprintf+0x5d/0x90 [ 409.681753][ T30] panic+0x349/0x860 [ 409.685635][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 409.691769][ T30] ? __pfx_panic+0x10/0x10 [ 409.696171][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 409.701521][ T30] ? __irq_work_queue_local+0x137/0x410 [ 409.707054][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 409.712406][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 409.718541][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 409.724679][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 409.730813][ T30] watchdog+0x102d/0x1030 [ 409.735127][ T30] ? watchdog+0x1ea/0x1030 [ 409.739528][ T30] ? __pfx_watchdog+0x10/0x10 [ 409.744198][ T30] kthread+0x2f0/0x390 [ 409.748258][ T30] ? __pfx_watchdog+0x10/0x10 [ 409.752931][ T30] ? __pfx_kthread+0x10/0x10 [ 409.757521][ T30] ret_from_fork+0x4b/0x80 [ 409.761922][ T30] ? __pfx_kthread+0x10/0x10 [ 409.766495][ T30] ret_from_fork_asm+0x1a/0x30 [ 409.771250][ T30] [ 409.774512][ T30] Kernel Offset: disabled [ 409.778824][ T30] Rebooting in 86400 seconds..