last executing test programs: 11m9.336487248s ago: executing program 32 (id=3015): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0xfffffecd) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback, 0xa09c}, {0xa, 0x0, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x1e}}, r1, 0x99d}}, 0x48) 10m6.649373126s ago: executing program 33 (id=3859): r0 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x101441) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000100)=0x22) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000400)={"78a16c0c", 0xa6, 0x4, 0x0, 0xe, 0x4, "cac6107738f660f37d936ff27185fe", "9377ad2e", "ee7628cc", "56041c45", ["fcd678d365f59591fc727013", "9f0b8e968518678b8a124fd7", "061a85a5e9ef8b9ba5c50606", "a45812748f798ffd62596f54"]}) 7m31.87593185s ago: executing program 34 (id=6265): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000073d000/0x3000)=nil) ioctl$SNAPSHOT_SET_SWAP_AREA(r0, 0x400c330d, 0x0) 6m54.802709846s ago: executing program 35 (id=6916): syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x4082) r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90b, 0xf4c, '\x00', @p_u16=&(0x7f00000000c0)}}) 2m53.495535925s ago: executing program 36 (id=10970): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x840000c0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x143) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') 2m29.411001186s ago: executing program 37 (id=11284): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={r1, @in={{0x2, 0x4e24, @empty}}, 0x100000, 0x7f, 0x500, 0x1f4, 0x36, 0x200}, 0x9c) 2m5.508807119s ago: executing program 9 (id=11601): r0 = io_uring_setup(0x4822, &(0x7f0000000180)) r1 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m5.426716872s ago: executing program 5 (id=11603): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7400000000010104000000000000000002000008240001801400018008000100e000000108000200e00000010c00028005000100000000003c00188008000340000000100800024000000005080003400000001e08000340000000030800024000000001080001"], 0x74}}, 0x0) 2m5.346160178s ago: executing program 4 (id=11604): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x3, 0x10004, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) setgid(0x0) 2m5.27640495s ago: executing program 5 (id=11605): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000980)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc0200000000000000000000000000006401010200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100be14140c0000000000000000000000007f000001000000000000000000000000fe880000000000000000000000000101fe8000000000000000000000000000aa3c040000020000000a"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2m5.261908613s ago: executing program 9 (id=11606): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000240), &(0x7f0000000380)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2m5.131581328s ago: executing program 4 (id=11608): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000000000fc9d000040"]) 2m5.112693946s ago: executing program 5 (id=11609): r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000880), 0x80, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x2a012, r1, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, 0x0) 2m5.045155633s ago: executing program 9 (id=11610): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x0, 0x7, 0x4, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m4.940837117s ago: executing program 4 (id=11611): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000240)="1059987c357f925a7cf0a300c7d9", 0xe, 0x4000884, &(0x7f0000000200)={0x11, 0x8100, r2, 0x1, 0xfc, 0x6, @multicast}, 0x14) 2m4.879508329s ago: executing program 5 (id=11612): r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000006900)="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", 0x139, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r2}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha3-512-generic\x00'}}) 2m4.839016511s ago: executing program 9 (id=11613): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x4, 0x0, &(0x7f0000001800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x481, 0x0) r1 = dup(r0) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40603d07, &(0x7f0000000040)) 2m4.755570214s ago: executing program 4 (id=11616): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="2f0000000400000004"], 0x20) 2m4.673716872s ago: executing program 5 (id=11617): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee0, 0x8031, 0xffffffffffffffff, 0x5fe2d000) r0 = socket$inet_sctp(0x2, 0x1, 0x84) unshare(0x20040600) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x4, 0x0}, 0x4e20, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0x0, 0x12d5c, 0x12d5c}}, 0x44) 2m4.632411219s ago: executing program 9 (id=11618): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="f7b920e49a48d1", 0x7) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=[0x1, 0x7], 0x0, 0x0, 0x2}}, 0x40) 2m4.528976839s ago: executing program 4 (id=11620): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000008702"]) 2m3.931630466s ago: executing program 38 (id=11621): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x53b, 0x70bd2b, 0x0, {0x9}, [{0x4c, 0x1, [@m_sample={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x0, 0x3, 0x6}]}, {0xd}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x60}}, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890c, &(0x7f0000000000)) 2m3.924817477s ago: executing program 5 (id=11623): r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x0, &(0x7f00000001c0)='=\n\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xd7\x1fch\x1a}#\xfa\xe4\n\xdc[\x03\x97\xcd\xf1\xa6b\x9a\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|') 2m3.600185645s ago: executing program 39 (id=11623): r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x0, &(0x7f00000001c0)='=\n\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xd7\x1fch\x1a}#\xfa\xe4\n\xdc[\x03\x97\xcd\xf1\xa6b\x9a\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|') 2m3.51158037s ago: executing program 9 (id=11625): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1, 0x4, 0x6, 0x3, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f00000003c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 2m3.23326277s ago: executing program 40 (id=11625): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1, 0x4, 0x6, 0x3, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f00000003c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 2m3.227239249s ago: executing program 4 (id=11626): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x0) ioctl$BLKROTATIONAL(r1, 0x127e, &(0x7f00000000c0)) 2m3.152527058s ago: executing program 41 (id=11626): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x0) ioctl$BLKROTATIONAL(r1, 0x127e, &(0x7f00000000c0)) 1m22.392543655s ago: executing program 8 (id=11966): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, 0x0) 1m22.277191036s ago: executing program 8 (id=11968): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r1) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x14, r2, 0x1, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x88c4) 1m22.161398531s ago: executing program 8 (id=11972): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x80}, @IFLA_VLAN_EGRESS_QOS={0x28, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5c0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40000000, 0x7}}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x6c}}, 0x0) 1m22.000066754s ago: executing program 8 (id=11974): r0 = socket$inet6(0xa, 0x3, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88bd9edace00000000000000002100000002ff020000000000000000000000000001"], 0x0) 1m21.818805948s ago: executing program 8 (id=11978): r0 = socket$unix(0x1, 0x2, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000200)=0x10) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1m21.628148384s ago: executing program 8 (id=11981): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x2, 0x3, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r2, 0x0, 0x0}, 0x10) 1m15.509894781s ago: executing program 3 (id=12042): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001a80100004800c"], 0x34}}, 0x0) 1m15.319438925s ago: executing program 3 (id=12045): socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo/3\x00') close(0x3) read$FUSE(r0, &(0x7f0000001180)={0x2020}, 0x2020) 1m15.204654381s ago: executing program 3 (id=12046): socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae09, &(0x7f0000000240)=""/90) 1m14.961268299s ago: executing program 3 (id=12051): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1041, 0x0) umount2(&(0x7f0000000000)='./file0/../file0\x00', 0x1) 1m14.742864761s ago: executing program 3 (id=12055): bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) r0 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x10}) io_uring_enter(r0, 0x15f1, 0xff98, 0x69, 0x0, 0x0) 1m14.3376058s ago: executing program 3 (id=12063): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x484b1e3341a13be1, 0x0) fchdir(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x9001, 0x0) 1m13.925724586s ago: executing program 42 (id=12063): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x484b1e3341a13be1, 0x0) fchdir(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x9001, 0x0) 1m5.37839595s ago: executing program 43 (id=11981): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x2, 0x3, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r2, 0x0, 0x0}, 0x10) 4.940247383s ago: executing program 7 (id=12912): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x49, &(0x7f0000000040)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 4.754946018s ago: executing program 7 (id=12915): unshare(0x22020400) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f00001b4000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x12, 0x0, 0x0) 4.284524079s ago: executing program 7 (id=12921): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) read(r0, &(0x7f00000001c0)=""/93, 0x5d) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000100)={0x2, 0xfe}, 0x2) 4.143602234s ago: executing program 0 (id=12922): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) 3.99152107s ago: executing program 0 (id=12924): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="000086dd000411000400000000006eec00be00442ffffe8000000000000000000000000000aaff020000000000000000000000000001042008"], 0xfdef) 3.861812978s ago: executing program 7 (id=12926): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) 3.587539508s ago: executing program 0 (id=12928): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000002380)=[{{&(0x7f0000000480)={0xa, 0x0, 0x0, @private0, 0x7fffffff}, 0x1c, &(0x7f0000000b00)=[{&(0x7f0000000580)='3', 0x1}], 0x1}}], 0x1, 0x44191) listen(r0, 0x100) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000180)={0x88}, 0x8) accept4(r0, 0x0, 0x0, 0x0) 3.484103417s ago: executing program 7 (id=12929): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="1200000040000000080000000100000000000000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000140), &(0x7f0000000240)=@udp6=r1}, 0x20) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000083c0)={r0, &(0x7f0000000080)='x', &(0x7f0000000180)=@udp=r2}, 0x20) 3.204230391s ago: executing program 7 (id=12931): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f00000011c0)={0x3, 0x100, 0x0, 0x2, 0x5911, 0x2}) 2.661313427s ago: executing program 6 (id=12934): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.488120495s ago: executing program 0 (id=12936): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r0}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) 2.395793918s ago: executing program 6 (id=12937): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000004c0)='kfree\x00', r0}, 0xe) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000c00)={0x38, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}]}, 0x38}}, 0x0) 2.390334619s ago: executing program 0 (id=12939): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000000280), &(0x7f0000000300)=0x4) 2.288297836s ago: executing program 6 (id=12940): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000002c0)='io_uring_register\x00', r0}, 0x18) r1 = syz_io_uring_setup(0x7ab9, &(0x7f00000005c0)={0x0, 0x20000021, 0x10100, 0x1, 0xfffffffd}, &(0x7f0000000100), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, 0x0, 0x1) 2.107788279s ago: executing program 6 (id=12942): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'erspan0\x00', &(0x7f0000000200)={'sit0\x00', 0x0, 0x8000, 0x20, 0xd64a, 0xe47a, {{0x5, 0x4, 0x2, 0x1, 0x14, 0x65, 0x0, 0x3, 0x4, 0x0, @loopback, @loopback}}}}) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e22, @remote}, 0x10) 1.950178507s ago: executing program 6 (id=12944): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, &(0x7f0000000140)={@my=0x1, 0x2}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000000180)={&(0x7f00000026c0)=[0x200, 0x5, 0xfffff19e, 0x100, 0xe, 0x80, 0x1ff, 0x9, 0x1, 0x1, 0x81, 0x7, 0x1ff, 0x3, 0x1, 0x21, 0xc6, 0x4c4f, 0x0, 0x4, 0x5, 0x0, 0x5, 0x9, 0x6, 0x800, 0x5, 0x61, 0xffffffff, 0x4, 0x8, 0x8, 0x5, 0x1, 0x5, 0x8, 0x3, 0x2, 0x3, 0x5, 0x8, 0x7fffffff, 0xff, 0x6, 0x8, 0x7, 0x6, 0x4, 0x4, 0x4, 0x7aa1, 0x6c9, 0x80000000, 0x7, 0xb, 0xfffffff8, 0x3, 0x10, 0x0, 0x632a, 0xffffff01, 0x8, 0xe, 0x0, 0x2, 0x8, 0x1, 0x5, 0x5, 0x7, 0x7fff, 0x2, 0x0, 0x5, 0x855a, 0x7f, 0x4, 0x80, 0x6, 0x8, 0x1, 0x5, 0x8a, 0x5, 0x5, 0x7, 0x0, 0xfffffff8, 0x5, 0x400, 0x5, 0x3, 0x7, 0x8000, 0x7f, 0x5, 0xffff, 0xffffffc0, 0x808d, 0x1, 0x10001, 0x8, 0x2, 0x0, 0x1, 0x2, 0x100, 0x10, 0x9, 0xc4, 0xfffffff9, 0x8, 0x8, 0x9, 0x7, 0x69, 0x9, 0x186, 0xd, 0xb98, 0x0, 0x1, 0xfffffd73, 0x7, 0x6, 0xfffffff7, 0x5, 0x0, 0x197, 0x2, 0x401, 0x9, 0x80000001, 0x1, 0x0, 0x4, 0x1, 0x40, 0xffffffc0, 0x7, 0x8000, 0x4, 0x0, 0x6, 0xe, 0x9b17, 0x0, 0x4, 0x0, 0x2, 0x8, 0xff, 0x99a, 0x8, 0x9, 0x8, 0xbe7, 0xfffffffb, 0x9, 0x39f7, 0x63e, 0x9, 0x25a2, 0x5, 0x4, 0x7f, 0x10, 0x3f6, 0x7, 0x9, 0xc0, 0xfffffffa, 0x4, 0xf, 0x3, 0x200, 0x4, 0xe, 0x1, 0x8, 0x40, 0x738, 0x4, 0x9, 0xfff, 0xbdc, 0x8, 0xe, 0x7, 0xfffffff9, 0x3, 0xfffffffc, 0x9, 0x20f9, 0x2, 0xb8, 0xd92a, 0xcc82, 0x401, 0x63, 0xfffffffd, 0x66, 0x4, 0x5, 0x1, 0xf, 0x9, 0xfffffff8, 0x9a8, 0x6, 0x7, 0x1, 0x1, 0x1, 0xffff0001, 0x1000, 0x3, 0x7, 0x2, 0x5, 0x4, 0x0, 0x10000, 0x7, 0xc34, 0xe7, 0x8, 0x113, 0x1, 0xe, 0x2, 0x200, 0x0, 0x2, 0x4, 0x10, 0x6, 0x2, 0x9, 0x6, 0x4, 0xb, 0x6, 0xffffc148, 0x1, 0x4f, 0x5, 0x4, 0x6, 0x9, 0x3, 0x7f, 0xd0, 0x100, 0x5, 0x7ff, 0x9, 0xc95e, 0xfffffffe, 0x46, 0x5, 0x547, 0xdc, 0x600, 0x7, 0xf, 0x6, 0x8, 0x716, 0x10000, 0x8, 0xc, 0x43b, 0x10, 0x5, 0x2, 0x9, 0x9, 0xfffffff8, 0x5db, 0x32, 0x7, 0x6, 0x1, 0x0, 0x7, 0xfe6b, 0x5, 0x7, 0x3, 0x7f, 0x759cc18e, 0x677, 0xfa, 0x1000, 0x619d, 0x9, 0x1, 0x4, 0x8, 0x7, 0x5, 0xb3b5, 0xa3, 0x101, 0x6, 0x5, 0x5, 0x7ff, 0x5, 0x402c9, 0x2, 0x8, 0x3, 0x0, 0x3, 0x8649, 0xcff, 0x10, 0xfffffffb, 0x5, 0x5, 0x80000000, 0x560, 0x3, 0x5, 0x5, 0xd8b, 0x2, 0x1ff, 0x7, 0x6, 0x9, 0x7, 0x4, 0x3, 0x37e, 0x9, 0x5c0b, 0x0, 0x2, 0x5, 0x6, 0x6, 0xfffffff9, 0xfffffffc, 0x2, 0x2, 0x9, 0x5, 0x800004, 0x1, 0x80, 0x6, 0x81, 0x1, 0xa6b, 0x2, 0x2, 0xfffffffe, 0x6, 0x2, 0xdd8, 0xfffffffa, 0x3fff800, 0xbb1, 0xffff, 0x24, 0x2b, 0x2, 0x8000, 0x5, 0x4, 0xfffffff7, 0x2, 0x8, 0x6, 0x380000, 0xe7af, 0x3, 0x10040, 0x3, 0x4, 0x1c0, 0x4, 0x360, 0x2, 0xd5, 0x5, 0xa, 0x6, 0xfffffffd, 0x5, 0x8, 0x14d2635f, 0xa62000, 0x6, 0x5, 0x1ff, 0x7a2, 0x7d01, 0x10, 0x1, 0x6, 0x9, 0x2, 0x28, 0x7fff, 0x5, 0x0, 0x9, 0x4, 0xfffffffe, 0xc026, 0x81, 0x1e, 0x5, 0xffffffff, 0x101, 0x6, 0x3bd26b80, 0x4, 0x7, 0x4, 0x29, 0xe00, 0x7, 0x7, 0xfffffffe, 0x7, 0xf, 0x8, 0x8, 0x9, 0x9, 0x8001, 0x6, 0x7fff, 0x4, 0x6, 0x0, 0x3ff, 0x5, 0x3, 0x0, 0x6, 0xc7, 0x4, 0x7, 0x2, 0x100, 0x0, 0x8000, 0x0, 0x6714, 0x81, 0x3, 0x80000001, 0x6, 0xa0, 0x6, 0x5da5, 0x3, 0x8, 0xffff8001, 0x223, 0x76, 0x5, 0x1, 0x3, 0x5bcef1c2, 0x7, 0x9ed, 0xe, 0x6, 0x19, 0x8, 0xfff, 0x40, 0x80000001, 0x4226, 0x8, 0x9, 0x9, 0x80000001, 0x5, 0x0, 0x7, 0x3, 0x9, 0x6, 0x7fffffff, 0x5, 0x1, 0x8, 0x5, 0x8, 0x3659, 0x7235, 0x9, 0xe, 0x453a4c49, 0xfffffffc, 0x1, 0x473, 0xfffffffa, 0x3, 0xf6, 0x9, 0x5, 0x4, 0x2, 0x2, 0x7, 0x7, 0x2, 0x4, 0x6, 0x3ff, 0x7cf5443, 0x80000001, 0x8, 0x6, 0x8, 0x8001, 0x5, 0x5, 0x2, 0x1ff, 0x9, 0x2, 0xe551, 0x80000001, 0x8b01, 0x7fffffff, 0x0, 0xffff, 0x8, 0xfffffff2, 0x5, 0x37, 0x10000, 0x0, 0x0, 0x7, 0xc0c, 0x9, 0x7fff, 0x40, 0x40, 0x5, 0xfffffffc, 0x7230, 0xb73d, 0xffffffff, 0x401, 0x3, 0x3, 0x2, 0x7, 0x1, 0x0, 0x7fff, 0x401, 0x8090, 0x101, 0x6, 0x5, 0x0, 0x8, 0x3, 0x1, 0x9ea0, 0x4, 0x1, 0x9, 0x2, 0x7ff, 0x1, 0x100, 0xad14580d, 0x7, 0xf0, 0x8, 0x8, 0x6, 0x4, 0x3, 0x8, 0x8, 0x9, 0x4, 0x1, 0x2, 0x35c, 0x779, 0x7, 0x9, 0xd, 0x2, 0x1, 0x8001, 0x1, 0x5, 0xfff, 0x9, 0x8, 0x2, 0x6, 0xfff, 0x9, 0x4, 0x97, 0xaca, 0x7, 0x4, 0x71, 0x101, 0x1, 0x0, 0x3, 0xfeff0001, 0x10000, 0x9, 0x9, 0x7fff, 0x28d400, 0x0, 0x2, 0x2, 0x1, 0x8000, 0x1, 0x9, 0x3, 0x0, 0xff, 0x2000000, 0x3f, 0x4563, 0x3, 0xa70, 0x0, 0x2, 0xa0000, 0xbe7f, 0x9, 0x0, 0x7, 0x7f, 0x3ff, 0x3, 0xfffffff3, 0x0, 0x875, 0x9, 0x64, 0x4, 0x5, 0x2, 0xffff, 0x7, 0xffff, 0x85b, 0x5, 0x9, 0x1, 0x81, 0x8000, 0xd, 0x4, 0xc, 0x4, 0xfffffffa, 0x8, 0x4, 0x2, 0x8, 0x8, 0x10000, 0xd, 0x2000, 0x9, 0x0, 0x8, 0xfa20, 0x5, 0x8246, 0x2, 0x8, 0xb, 0xffffffc0, 0x1ff, 0x3, 0x4, 0x7, 0x9, 0x9b4, 0x1, 0x0, 0x8, 0x9, 0x6, 0x1, 0x8, 0x5, 0x4, 0x80000001, 0x2, 0x4, 0xa02, 0x8001, 0x6, 0x8, 0x7, 0xb22e, 0xedc, 0x80000000, 0xe95, 0xf24, 0x4, 0x9, 0x9, 0x6, 0xd, 0x80000001, 0x4, 0x60000000, 0x40c, 0x0, 0x7fffffff, 0x0, 0x81, 0x41f, 0x1, 0x8, 0x0, 0x5, 0x1, 0x7, 0x5, 0x400, 0x7fff, 0xe93f, 0x4, 0x6, 0x1, 0x8, 0x13, 0x7fffffff, 0xf, 0x6, 0x6, 0x2, 0xbb, 0x80, 0x7f, 0x7, 0x6, 0x40, 0x0, 0x9, 0x7f, 0x3496534c, 0x8001, 0x6, 0x6, 0x6, 0x400, 0x32c, 0x6, 0x10000, 0x1, 0x400, 0x40008, 0xf79d, 0x0, 0x1, 0x8, 0xb5f, 0x7, 0x4, 0x8, 0x7ff, 0x4, 0x401, 0x3fb, 0x6, 0x2, 0xf, 0x1000, 0xe01, 0xa26c, 0x2, 0xbd, 0x1780, 0x0, 0x4, 0xff, 0x3ff, 0x1000, 0x872, 0x5, 0x5, 0x4, 0x7, 0x7fff, 0x80000001, 0x9, 0x6, 0x0, 0x95c, 0x1f2b, 0x0, 0x7, 0x3, 0x4, 0x6, 0x1, 0x3, 0xffff0000, 0x1676, 0x3, 0xffff, 0x2, 0x7f, 0x8, 0xffffff7f, 0x9, 0x9, 0x7823, 0x9, 0x4, 0x2, 0x9, 0x4, 0x4, 0x69b99992, 0xfffff000, 0x5, 0xfffffff9, 0x1, 0xe39, 0x35f, 0x9, 0x101, 0x46f, 0x7b98, 0x3, 0x1, 0x1, 0x100, 0x5, 0x3, 0xe9ba, 0xd, 0x7, 0x7f, 0xffff, 0x5, 0x1, 0x7, 0x7fffffff, 0x7, 0xda0, 0x0, 0x3, 0xfffffffc, 0xfffffff8, 0x534e, 0x14, 0x6, 0x9, 0x952c11e, 0x1, 0x8, 0xe, 0x9, 0x5, 0x9, 0x80000001, 0x4, 0xff, 0x0, 0x3, 0x80000000, 0xe000000, 0x3ff, 0xbf36, 0xc, 0x9, 0xca6d, 0x7, 0x790, 0x6, 0x7, 0x5, 0x6, 0x6, 0x80000000, 0x6, 0x4, 0x3, 0x80, 0x1, 0x3, 0x1, 0x6, 0xa, 0xffff, 0x4, 0x10000, 0x1, 0x1b90400, 0x0, 0x4, 0x1000009, 0x10000, 0x5, 0x1, 0xe73d, 0xad6, 0xa, 0x9, 0xe, 0x7, 0x4, 0x7, 0x2f1, 0x2, 0x8000, 0x5, 0x7f, 0x20, 0x2, 0x3, 0x1000, 0x6, 0x3, 0x6, 0x5b2, 0x40, 0xd, 0xba3, 0x8, 0x2782, 0x6, 0x0, 0x101, 0x6, 0x5024, 0x0, 0x1ff, 0x24000000, 0x400, 0x401, 0x5, 0x210, 0x5, 0x200, 0x80000000, 0x4, 0xbd26, 0x4a, 0x0, 0x7, 0x6, 0x8, 0x3, 0x1, 0x7fffffff, 0x0, 0x6, 0x40000004, 0x7ff, 0x7, 0xa566, 0x4, 0x9a, 0x2, 0x10000, 0x5ae, 0xf0, 0x0, 0x2, 0xc, 0x2, 0x884, 0x1, 0x8, 0xc, 0x912, 0x5, 0xfffffff9, 0x5, 0x7, 0x1, 0xfff, 0x8, 0x5, 0xfffffff7, 0x5, 0x0, 0x2400000, 0xf, 0x8, 0x3, 0x9, 0x10001, 0xffffa1f5, 0x3, 0x5, 0x535, 0x4, 0xa, 0xb071, 0x3, 0x1, 0x6, 0x2001, 0x5, 0x4, 0x343, 0x81], 0x1, 0x400, 0x3}) 1.908359401s ago: executing program 0 (id=12945): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x20, 0x0, &(0x7f0000000000)=[@request_death={0x400c630e, 0x0, 0x700}, @clear_death], 0x0, 0x1000000, 0x0}) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x41, 0x3f, 0x5f, 0x20, 0x61d, 0xc150, 0xce6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x33, 0x0, 0x1, 0x18, 0x70, 0xfd, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x4}}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100003f7a7e40720c8600972201020101"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b"]) 1.771056076s ago: executing program 6 (id=12947): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000dc0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d34, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000a00)={0x2c, &(0x7f0000000780)={0x20, 0x7bcd6c10878fe23, 0x8, {0x8, 0x21, "50b1aee0a564"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) 1.519522466s ago: executing program 1 (id=12950): recvmmsg(0xffffffffffffffff, &(0x7f000000ab40)=[{{&(0x7f00000003c0)=@l2={0x1f, 0x0, @none}, 0x80, 0x0}, 0x8}, {{&(0x7f0000000a00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, 0x0}, 0x7}], 0x2, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x1, @rand_addr=0x64010101}, 0xa, 0x0, 0x800}}, 0x26) sendmmsg$inet(r1, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040) 1.42957132s ago: executing program 1 (id=12952): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="82000000000000001f0001c0"]) 1.2721745s ago: executing program 1 (id=12954): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000002c0)={0xc, r1}) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"]) 1.18095027s ago: executing program 1 (id=12955): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x0, 0x4}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000340)={0x6, 0x201, 0x8, 0x2, r1}, &(0x7f0000000380)=0x10) 1.077778503s ago: executing program 1 (id=12956): r0 = syz_io_uring_setup(0x24f9, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x24fb, &(0x7f00000002c0), &(0x7f0000000240)=0x0, &(0x7f0000000280)) r3 = socket$pppl2tp(0x18, 0x1, 0x1) syz_io_uring_submit(r2, r1, &(0x7f0000000180)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x0, 0x0}) io_uring_enter(r0, 0x22, 0x0, 0x0, 0x0, 0x0) 955.113353ms ago: executing program 1 (id=12957): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001340)={0x84, &(0x7f0000001400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0d, &(0x7f0000000040)) 423.707182ms ago: executing program 2 (id=12964): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x17, 0x44, &(0x7f0000000200)=""/68}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 323.505957ms ago: executing program 2 (id=12965): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x7f, @dev={0xfe, 0x80, '\x00', 0x41}, 0xca}, 0x1c) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0x200, 0x0, 0x0, {0x0, 0x0, 0x74}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 322.013716ms ago: executing program 2 (id=12966): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x1, 0x1}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x4) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) 265.463468ms ago: executing program 2 (id=12967): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000c50000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioprio_set$uid(0x3, 0x0, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r2, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, 0x0, r0, 0x0}]) 151.384732ms ago: executing program 2 (id=12968): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000140)={0x3, 0x1, 0x46}) 0s ago: executing program 2 (id=12969): r0 = timerfd_create(0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) clock_adjtime(0x0, &(0x7f0000000480)={0xd54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}) kernel console output (not intermixed with test programs): rnel read not supported for file /dsp (pid: 5940 comm: kworker/0:5) [ 791.954589][T29937] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11119'. [ 791.979298][T29937] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11119'. [ 793.257496][T29990] netlink: 182 bytes leftover after parsing attributes in process `syz.6.11142'. [ 794.356853][T30007] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11150'. [ 794.403107][T30007] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11150'. [ 794.606100][T30015] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available [ 795.225020][T30036] netlink: 'syz.0.11164': attribute type 2 has an invalid length. [ 795.245426][T30036] netlink: 'syz.0.11164': attribute type 2 has an invalid length. [ 795.271893][T30036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11164'. [ 796.233346][T30057] program syz.9.11174 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 796.811371][T29618] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 796.971712][T29618] usb 7-1: Using ep0 maxpacket: 16 [ 796.984070][T29618] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 797.003803][T29618] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 797.013668][T29618] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 797.047921][T29618] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 797.056999][T29618] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 797.078600][T29618] usb 7-1: SerialNumber: syz [ 797.086774][T30059] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 797.325223][T30075] block nbd1: server does not support multiple connections per device. [ 797.334495][T29618] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 797.336896][T30075] block nbd1: shutting down sockets [ 797.360062][T29618] usb 7-1: USB disconnect, device number 59 [ 798.202782][T30107] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11198'. [ 798.693224][T30129] can0: slcan on ttyS3. [ 798.696932][T30130] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11208'. [ 798.811215][T30128] can0 (unregistered): slcan off ttyS3. [ 799.757343][ T30] audit: type=1326 audit(2000000012.609:3370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30159 comm="syz.9.11222" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbaaaf8e929 code=0x0 [ 799.821942][T30164] netlink: 40 bytes leftover after parsing attributes in process `syz.6.11223'. [ 799.911480][T30167] Falling back ldisc for ptm0. [ 800.011784][T30174] netlink: 'syz.0.11228': attribute type 14 has an invalid length. [ 801.037645][ T5940] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 801.215938][ T5940] usb 7-1: Using ep0 maxpacket: 16 [ 801.229129][ T5940] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 801.253116][ T5940] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 801.274472][ T5940] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 801.286072][ T5940] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.303648][ T5940] usb 7-1: Product: syz [ 801.310312][ T5940] usb 7-1: Manufacturer: syz [ 801.318861][ T5940] usb 7-1: SerialNumber: syz [ 801.338565][ T5940] usb 7-1: config 0 descriptor?? [ 801.351281][ T5940] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 801.372541][ T5940] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 801.472074][T30236] netlink: 44 bytes leftover after parsing attributes in process `syz.0.11256'. [ 801.674669][T30245] netlink: 32 bytes leftover after parsing attributes in process `syz.5.11260'. [ 801.708181][T30245] sch_tbf: peakrate 4 is lower than or equals to rate 5 ! [ 801.792063][T30248] netlink: 'syz.0.11262': attribute type 9 has an invalid length. [ 801.816661][T30248] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11262'. [ 801.841020][T30248] hsr0: entered promiscuous mode [ 801.846190][T30248] macvlan2: entered promiscuous mode [ 801.856635][T30248] macvlan2: entered allmulticast mode [ 801.865671][T30248] hsr0: entered allmulticast mode [ 801.882812][T30248] hsr_slave_0: entered allmulticast mode [ 801.891398][T30248] hsr_slave_1: entered allmulticast mode [ 802.013180][ T5940] em28xx 7-1:0.0: chip ID is em2874 [ 802.239085][ T5940] usb 7-1: USB disconnect, device number 60 [ 802.247315][ T5940] em28xx 7-1:0.0: Disconnecting em28xx [ 802.274070][ T5940] em28xx 7-1:0.0: Freeing device [ 802.301200][T30269] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11270'. [ 802.569300][T29618] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 802.710170][T24851] bridge0: port 4(syz_tun) entered disabled state [ 802.741167][T24851] syz_tun (unregistering): left allmulticast mode [ 802.748344][T24851] syz_tun (unregistering): left promiscuous mode [ 802.754831][T24851] bridge0: port 4(syz_tun) entered disabled state [ 802.760411][T29618] usb 10-1: Using ep0 maxpacket: 32 [ 802.769424][T29618] usb 10-1: config 0 has no interfaces? [ 802.775264][T29618] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 802.793343][T29618] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.814239][T29618] usb 10-1: config 0 descriptor?? [ 803.043755][T28451] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 803.089129][T28451] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.130851][T22522] usb 10-1: USB disconnect, device number 3 [ 803.214607][T28451] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 803.225411][T28451] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.431173][T28451] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 803.461097][T28451] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.668810][T28451] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 803.719419][T28451] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.030700][T28451] veth0_to_bridge: left allmulticast mode [ 804.047639][T28451] veth0_to_bridge: left promiscuous mode [ 804.064549][T28451] bridge0: port 3(veth0_to_bridge) entered disabled state [ 804.078553][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 804.094146][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 804.103620][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 804.112689][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 804.121622][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 804.146773][T28451] bridge_slave_1: left promiscuous mode [ 804.152559][T28451] bridge0: port 2(bridge_slave_1) entered disabled state [ 804.232357][T28451] bridge_slave_0: left allmulticast mode [ 804.238263][T28451] bridge_slave_0: left promiscuous mode [ 804.248571][T28451] bridge0: port 1(bridge_slave_0) entered disabled state [ 804.842621][T29618] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 805.013110][T29618] usb 6-1: Using ep0 maxpacket: 32 [ 805.020359][T29618] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 805.037718][T29618] usb 6-1: config 0 has no interface number 0 [ 805.047694][T29618] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 805.066057][T29618] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.085066][T29618] usb 6-1: Product: syz [ 805.092756][T28451] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 805.092919][T29618] usb 6-1: Manufacturer: syz [ 805.109593][T29618] usb 6-1: SerialNumber: syz [ 805.114826][T28451] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 805.119504][T29618] usb 6-1: config 0 descriptor?? [ 805.132716][T29618] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 805.135217][T28451] bond0 (unregistering): Released all slaves [ 805.727095][T30366] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 805.732863][T29618] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 805.733662][T30366] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 805.757330][T30366] vhci_hcd vhci_hcd.0: Device attached [ 805.781837][T29618] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 805.823105][T30368] netlink: 32 bytes leftover after parsing attributes in process `syz.9.11315'. [ 805.947844][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 805.948510][ T5940] usb 6-1: USB disconnect, device number 52 [ 805.992820][ T5940] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 806.008288][ T5815] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 806.025849][ T5940] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 806.037701][T28451] hsr_slave_0: left promiscuous mode [ 806.048500][T28451] hsr_slave_1: left promiscuous mode [ 806.054642][T28451] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 806.063531][ T5940] quatech2 6-1:0.51: device disconnected [ 806.071182][T28451] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 806.088419][T28451] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 806.099630][T30379] netlink: 'syz.6.11319': attribute type 10 has an invalid length. [ 806.124384][T28451] veth1_macvtap: left promiscuous mode [ 806.130135][T28451] veth0_macvtap: left promiscuous mode [ 806.140170][T28451] veth1_vlan: left promiscuous mode [ 806.146452][T28451] veth0_vlan: left promiscuous mode [ 806.323673][T16226] Bluetooth: hci1: command tx timeout [ 806.898855][T28451] team0 (unregistering): Port device team_slave_1 removed [ 806.954554][T28451] team0 (unregistering): Port device team_slave_0 removed [ 807.587195][T30325] chnl_net:caif_netlink_parms(): no params data found [ 807.907457][T30325] bridge0: port 1(bridge_slave_0) entered blocking state [ 807.915145][T30325] bridge0: port 1(bridge_slave_0) entered disabled state [ 807.944578][T30325] bridge_slave_0: entered allmulticast mode [ 807.953530][T30325] bridge_slave_0: entered promiscuous mode [ 807.990233][T30325] bridge0: port 2(bridge_slave_1) entered blocking state [ 808.011772][T30325] bridge0: port 2(bridge_slave_1) entered disabled state [ 808.026336][T30325] bridge_slave_1: entered allmulticast mode [ 808.034242][T30325] bridge_slave_1: entered promiscuous mode [ 808.117416][T30325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 808.138216][T30325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 808.374472][T30325] team0: Port device team_slave_0 added [ 808.403760][T30325] team0: Port device team_slave_1 added [ 808.539361][ T5837] Bluetooth: hci1: command tx timeout [ 808.576304][T30325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 808.606173][T30325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 808.692982][T30325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 808.715464][T30325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 808.723054][T30325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 808.775228][T30325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 808.913003][T30325] hsr_slave_0: entered promiscuous mode [ 808.920478][T30325] hsr_slave_1: entered promiscuous mode [ 808.927828][T30325] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 808.948918][T30369] vhci_hcd: connection reset by peer [ 808.957490][T30325] Cannot create hsr debugfs directory [ 808.963923][T25766] vhci_hcd: stop threads [ 808.974867][T30434] ptp: physical clock is free running [ 808.984892][T25766] vhci_hcd: release socket [ 809.012280][T25766] vhci_hcd: disconnect device [ 809.877970][T30469] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 810.531190][T30325] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 810.588058][T30325] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 810.622364][T30325] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 810.670692][T30325] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 810.763281][ T5837] Bluetooth: hci1: command 0x040f tx timeout [ 810.881665][T30325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 810.949429][T30325] 8021q: adding VLAN 0 to HW filter on device team0 [ 811.013725][T25766] bridge0: port 1(bridge_slave_0) entered blocking state [ 811.020975][T25766] bridge0: port 1(bridge_slave_0) entered forwarding state [ 811.029971][ T5896] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 811.053802][T25766] bridge0: port 2(bridge_slave_1) entered blocking state [ 811.061021][T25766] bridge0: port 2(bridge_slave_1) entered forwarding state [ 811.206981][ T5896] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 811.234343][ T5896] usb 10-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 811.254440][ T5896] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.294613][ T5896] usb 10-1: config 0 descriptor?? [ 811.527906][ T5815] vhci_hcd: vhci_device speed not set [ 811.601106][T30546] netlink: 'syz.6.11391': attribute type 12 has an invalid length. [ 811.670372][T30325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 811.917198][ T5919] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 811.974463][ T5896] razer 0003:1532:010E.008B: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.9-1/input0 [ 812.098938][ T5919] usb 6-1: Using ep0 maxpacket: 32 [ 812.107049][ T5919] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 812.134662][ T5919] usb 6-1: config 0 interface 0 altsetting 16 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 812.167310][T30567] netlink: ct family unspecified [ 812.172442][T30567] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 812.177797][ T5919] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 812.207824][ T5896] usb 10-1: USB disconnect, device number 4 [ 812.257661][ T5919] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x8F has invalid wMaxPacketSize 0 [ 812.274710][ T5919] usb 6-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 812.296043][ T5919] usb 6-1: config 0 interface 0 has no altsetting 0 [ 812.304659][T30325] veth0_vlan: entered promiscuous mode [ 812.316793][ T5919] usb 6-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 812.328739][ T5919] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.349834][ T5919] usb 6-1: config 0 descriptor?? [ 812.358205][T30325] veth1_vlan: entered promiscuous mode [ 812.439697][T30325] veth0_macvtap: entered promiscuous mode [ 812.448106][T30573] kvm: kvm [30572]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x200000000400 [ 812.468334][T30325] veth1_macvtap: entered promiscuous mode [ 812.515233][T30325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 812.551962][T30325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 812.577565][T30325] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.602748][T30325] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.633640][T30325] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.642426][T30325] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.689516][T30578] loop6: detected capacity change from 0 to 524287999 [ 812.708469][T30578] buffer_io_error: 6 callbacks suppressed [ 812.708490][T30578] Buffer I/O error on dev loop6, logical block 0, async page read [ 812.722573][T30578] Buffer I/O error on dev loop6, logical block 0, async page read [ 812.733069][T30578] Buffer I/O error on dev loop6, logical block 0, async page read [ 812.821771][ T5919] hid-thrustmaster 0003:044F:B65D.008C: unknown main item tag 0x0 [ 812.846617][ T5919] hid-thrustmaster 0003:044F:B65D.008C: unknown main item tag 0x0 [ 812.854934][T30578] Buffer I/O error on dev loop6, logical block 0, async page read [ 812.855083][T30578] Buffer I/O error on dev loop6, logical block 0, async page read [ 812.885288][ T5919] hid-thrustmaster 0003:044F:B65D.008C: unknown main item tag 0x0 [ 812.899284][T28479] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 812.907992][ T5919] hid-thrustmaster 0003:044F:B65D.008C: unknown main item tag 0x0 [ 812.923135][T30578] Buffer I/O error on dev loop6, logical block 0, async page read [ 812.931010][T28479] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 812.939243][ T5919] hid-thrustmaster 0003:044F:B65D.008C: unknown main item tag 0x0 [ 812.964715][T30578] Buffer I/O error on dev loop6, logical block 0, async page read [ 812.973241][ T5919] hid-thrustmaster 0003:044F:B65D.008C: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.5-1/input0 [ 812.986646][T16226] Bluetooth: hci1: command 0x040f tx timeout [ 813.000970][ T5919] hid-thrustmaster 0003:044F:B65D.008C: setup data couldn't be sent [ 813.010800][T28479] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 813.013179][T30578] Buffer I/O error on dev loop6, logical block 0, async page read [ 813.038494][ C1] hid-thrustmaster 0003:044F:B65D.008C: URB to get model id failed with error -71 [ 813.039558][T28479] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 813.077606][ T5919] usb 6-1: USB disconnect, device number 53 [ 813.106282][T30578] ldm_validate_partition_table(): Disk read failed. [ 813.113049][T30578] Buffer I/O error on dev loop6, logical block 0, async page read [ 813.200276][T30578] Buffer I/O error on dev loop6, logical block 0, async page read [ 813.252096][T30578] Dev loop6: unable to read RDB block 0 [ 813.273995][T30578] loop6: unable to read partition table [ 813.289391][T30578] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 813.308707][T30594] netlink: 'syz.9.11410': attribute type 10 has an invalid length. [ 813.336524][T30580] ldm_validate_partition_table(): Disk read failed. [ 813.410630][T30594] team0: Port device geneve1 added [ 813.428143][T30580] Dev loop6: unable to read RDB block 0 [ 813.448183][T30580] loop6: unable to read partition table [ 813.454156][T30580] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 813.937741][ T5940] usb 7-1: new full-speed USB device number 61 using dummy_hcd [ 814.103167][ T5940] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 814.126181][ T5940] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 814.154895][ T5940] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 814.180441][ T5940] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 814.210062][ T5940] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 814.223412][ T5940] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 814.233290][ T5940] usb 7-1: Manufacturer: syz [ 814.245165][ T5940] usb 7-1: config 0 descriptor?? [ 814.611841][ T5940] rc_core: IR keymap rc-hauppauge not found [ 814.617961][ T5940] Registered IR keymap rc-empty [ 814.632819][ T5940] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 814.673708][ T5940] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 814.713220][ T5940] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 814.741811][ T5940] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input61 [ 814.792141][ T5940] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 814.836468][ T5940] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 814.858237][ T5940] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 814.879585][ T5940] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 814.911974][ T5940] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 814.943007][ T5940] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 814.977943][ T5940] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 815.007039][ T5940] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 815.049720][ T5940] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 815.081731][ T5940] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 815.117352][ T5940] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 815.157375][ T5940] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 815.212481][T16226] Bluetooth: hci1: command 0x040f tx timeout [ 815.226787][ T5940] usb 7-1: USB disconnect, device number 61 [ 816.008426][T30685] 9pnet_virtio: no channels available for device syz [ 816.016828][T30684] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 816.762384][T30704] netlink: 24 bytes leftover after parsing attributes in process `syz.9.11450'. [ 816.908387][T30707] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11455'. [ 817.298534][T30723] netlink: 14593 bytes leftover after parsing attributes in process `syz.6.11463'. [ 817.493166][T30728] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11464'. [ 817.755599][T30739] kvm: apic: phys broadcast and lowest prio [ 818.087030][T30749] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11474'. [ 818.635456][T30769] macsec0: entered promiscuous mode [ 818.663895][T30769] macvtap1: entered allmulticast mode [ 818.681044][T30769] macsec0: entered allmulticast mode [ 818.706950][T30769] veth1_macvtap: entered allmulticast mode [ 818.803631][T28479] wlan1: Trigger new scan to find an IBSS to join [ 819.829702][ T1210] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 819.999663][ T1210] usb 7-1: Using ep0 maxpacket: 16 [ 820.021771][ T1210] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 820.044024][ T1210] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 820.074306][ T1210] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 820.102766][ T1210] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 820.123004][ T1210] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.135907][T30815] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11504'. [ 820.148405][T30815] netlink: 152 bytes leftover after parsing attributes in process `syz.5.11504'. [ 820.154248][ T1210] usb 7-1: config 0 descriptor?? [ 820.629668][ T1210] microsoft 0003:045E:07DA.008D: unknown main item tag 0x1 [ 820.648127][ T1210] microsoft 0003:045E:07DA.008D: report is too long [ 820.674186][ T1210] microsoft 0003:045E:07DA.008D: item 0 2 0 11 parsing failed [ 820.682658][ T1210] microsoft 0003:045E:07DA.008D: parse failed [ 820.700679][ T1210] microsoft 0003:045E:07DA.008D: probe with driver microsoft failed with error -22 [ 820.887035][ T1210] usb 7-1: USB disconnect, device number 62 [ 822.534810][T30888] netlink: 36 bytes leftover after parsing attributes in process `syz.5.11536'. [ 822.992941][ T1210] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 823.170106][ T1210] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 823.197964][ T1210] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 823.251085][ T1210] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 823.263085][ T1210] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 823.283679][ T1210] usb 6-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 823.302803][ T1210] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.303726][T30915] sg_read: process 225 (syz.9.11549) changed security contexts after opening file descriptor, this is not allowed. [ 823.324612][ T1210] usb 6-1: Product: syz [ 823.328847][ T1210] usb 6-1: Manufacturer: syz [ 823.356716][ T1210] usb 6-1: SerialNumber: syz [ 823.366391][ T1210] usb 6-1: config 0 descriptor?? [ 823.374396][ T1210] ums-isd200 6-1:0.0: USB Mass Storage device detected [ 823.385080][T30919] netlink: 140 bytes leftover after parsing attributes in process `syz.6.11551'. [ 823.497424][ T30] audit: type=1326 audit(2000000034.815:3371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30922 comm="syz.0.11552" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f545bf8e929 code=0x0 [ 823.618847][ T1210] scsi host1: usb-storage 6-1:0.0 [ 823.852891][ T1210] usb 6-1: USB disconnect, device number 54 [ 824.109499][T28599] wlan1: Trigger new scan to find an IBSS to join [ 824.910906][T30960] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 825.101152][T28451] wlan1: Creating new IBSS network, BSSID 6a:78:15:0b:b0:4a [ 825.657793][T30988] netlink: 'syz.5.11580': attribute type 11 has an invalid length. [ 825.666205][T30988] netlink: 149476 bytes leftover after parsing attributes in process `syz.5.11580'. [ 825.708794][T30987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 826.245358][ T43] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 826.439858][ T43] usb 7-1: Using ep0 maxpacket: 16 [ 826.452202][ T43] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 826.465892][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 826.483648][ T43] usb 7-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 826.496709][ T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.506606][ T43] usb 7-1: Product: syz [ 826.515855][ T43] usb 7-1: Manufacturer: syz [ 826.523441][ T43] usb 7-1: SerialNumber: syz [ 826.537280][ T43] usb 7-1: config 0 descriptor?? [ 826.821042][ T43] appledisplay 7-1:0.0: Error while getting initial brightness: -110 [ 826.842839][ T43] appledisplay 7-1:0.0: probe with driver appledisplay failed with error -110 [ 826.923447][T31019] netlink: 44 bytes leftover after parsing attributes in process `syz.4.11595'. [ 827.300642][T31036] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11603'. [ 827.414395][ T5919] usb 7-1: USB disconnect, device number 63 [ 827.714619][T31052] QAT: failed to copy from user cfg_data. [ 828.985013][T25766] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.184933][T25766] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.345414][T25766] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.496209][T25766] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.920834][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 829.935046][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 829.944437][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 829.956464][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 829.964744][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 830.032102][T25766] bridge_slave_1: left allmulticast mode [ 830.048853][T25766] bridge_slave_1: left promiscuous mode [ 830.054846][T25766] bridge0: port 2(bridge_slave_1) entered disabled state [ 830.094602][T25766] bridge_slave_0: left allmulticast mode [ 830.100340][T25766] bridge_slave_0: left promiscuous mode [ 830.123640][T25766] bridge0: port 1(bridge_slave_0) entered disabled state [ 830.134198][ T43] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 830.245485][T16226] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 830.258193][T16226] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 830.267170][T16226] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 830.275484][T16226] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 830.284105][T16226] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 830.327080][ T43] usb 7-1: Using ep0 maxpacket: 32 [ 830.344826][ T43] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 830.375074][ T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.395573][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 830.411218][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 830.420941][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 830.437225][ T43] usb 7-1: config 0 descriptor?? [ 830.450378][T31087] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 830.450864][T31088] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 830.471402][T31087] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 830.471448][T31088] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 830.492982][T31087] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 830.516789][T31087] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 830.528240][T16226] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 830.663891][ T43] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 830.686022][ T43] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 830.712366][ T43] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 830.720726][ T43] usb 7-1: media controller created [ 830.750661][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 830.826674][T25766] team0: Port device geneve1 removed [ 830.887494][ T43] az6027: usb out operation failed. (-71) [ 830.900572][ T43] az6027: usb out operation failed. (-71) [ 830.906920][ T43] stb0899_attach: Driver disabled by Kconfig [ 830.912949][ T43] az6027: no front-end attached [ 830.912949][ T43] [ 830.921327][ T43] az6027: usb out operation failed. (-71) [ 830.931079][T25766] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 830.933007][ T43] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 830.951767][T25766] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 830.958552][ T43] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input62 [ 830.975514][ T43] dvb-usb: schedule remote query interval to 400 msecs. [ 830.978729][T25766] bond0 (unregistering): Released all slaves [ 830.982703][ T43] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 831.004028][ T43] usb 7-1: USB disconnect, device number 64 [ 831.117277][ T43] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 831.633419][ T30] audit: type=1326 audit(2000000042.429:3372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31095 comm="syz.6.11633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f124c18e929 code=0x7ffc0000 [ 831.657438][ T30] audit: type=1326 audit(2000000042.429:3373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31095 comm="syz.6.11633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f124c18e929 code=0x7ffc0000 [ 831.680087][ T30] audit: type=1326 audit(2000000042.448:3374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31095 comm="syz.6.11633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f124c18e929 code=0x7ffc0000 [ 831.702212][ T30] audit: type=1326 audit(2000000042.448:3375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31095 comm="syz.6.11633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f124c18e929 code=0x7ffc0000 [ 831.726675][ T30] audit: type=1326 audit(2000000042.448:3376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31095 comm="syz.6.11633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f124c18e929 code=0x7ffc0000 [ 831.749290][ T30] audit: type=1326 audit(2000000042.448:3377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31095 comm="syz.6.11633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f124c18e929 code=0x7ffc0000 [ 831.771858][ T30] audit: type=1326 audit(2000000042.448:3378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31095 comm="syz.6.11633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f124c18e929 code=0x7ffc0000 [ 831.794424][ T30] audit: type=1326 audit(2000000042.448:3379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31095 comm="syz.6.11633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f124c18e929 code=0x7ffc0000 [ 831.816187][ C0] vkms_vblank_simulate: vblank timer overrun [ 831.823484][ T30] audit: type=1326 audit(2000000042.448:3380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31095 comm="syz.6.11633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f124c18e929 code=0x7ffc0000 [ 831.845668][T25766] hsr_slave_0: left promiscuous mode [ 831.852296][T25766] hsr_slave_1: left promiscuous mode [ 831.863194][T25766] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 831.871393][T25766] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 831.881790][T25766] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 831.891066][T25766] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 831.925632][T25766] veth1_macvtap: left promiscuous mode [ 831.931756][T25766] veth0_macvtap: left promiscuous mode [ 831.937534][T25766] veth1_vlan: left promiscuous mode [ 831.943150][T25766] veth0_vlan: left promiscuous mode [ 832.145014][T16226] Bluetooth: hci1: command tx timeout [ 832.487487][T16226] Bluetooth: hci2: command tx timeout [ 832.665365][T16226] Bluetooth: hci3: command tx timeout [ 832.719104][T25766] team0 (unregistering): Port device team_slave_1 removed [ 832.743093][T16226] Bluetooth: hci4: command tx timeout [ 832.743093][ T43] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 832.799552][T25766] team0 (unregistering): Port device team_slave_0 removed [ 832.945864][ T43] usb 7-1: Using ep0 maxpacket: 32 [ 832.966509][ T43] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 832.990615][ T43] usb 7-1: config 0 has no interface number 0 [ 833.006685][ T43] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 833.016253][ T43] usb 7-1: New USB device strings: Mfr=1, Product=229, SerialNumber=2 [ 833.025060][ T43] usb 7-1: Product: syz [ 833.029292][ T43] usb 7-1: Manufacturer: syz [ 833.034022][ T43] usb 7-1: SerialNumber: syz [ 833.043179][ T43] usb 7-1: config 0 descriptor?? [ 833.051519][ T43] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 833.312453][ T43] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 833.335816][ T43] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 833.528559][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - xmit_empty message too short [ 833.754197][ C1] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 833.762761][ T43] usb 7-1: USB disconnect, device number 65 [ 833.802022][ T43] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 833.834054][ T43] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 833.855279][ T43] quatech2 7-1:0.51: device disconnected [ 833.919803][T31079] chnl_net:caif_netlink_parms(): no params data found [ 834.011116][T31083] chnl_net:caif_netlink_parms(): no params data found [ 834.219768][T31085] chnl_net:caif_netlink_parms(): no params data found [ 834.291704][T31081] chnl_net:caif_netlink_parms(): no params data found [ 834.324390][T31079] bridge0: port 1(bridge_slave_0) entered blocking state [ 834.332171][T31079] bridge0: port 1(bridge_slave_0) entered disabled state [ 834.343352][T31079] bridge_slave_0: entered allmulticast mode [ 834.351329][T31079] bridge_slave_0: entered promiscuous mode [ 834.368757][T16226] Bluetooth: hci1: command tx timeout [ 834.448829][T31079] bridge0: port 2(bridge_slave_1) entered blocking state [ 834.473331][T31079] bridge0: port 2(bridge_slave_1) entered disabled state [ 834.480933][T31079] bridge_slave_1: entered allmulticast mode [ 834.489409][T31079] bridge_slave_1: entered promiscuous mode [ 834.677838][T31079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 834.687193][T31083] bridge0: port 1(bridge_slave_0) entered blocking state [ 834.705747][T31083] bridge0: port 1(bridge_slave_0) entered disabled state [ 834.714285][T31083] bridge_slave_0: entered allmulticast mode [ 834.720402][T16226] Bluetooth: hci2: command tx timeout [ 834.733039][T31083] bridge_slave_0: entered promiscuous mode [ 834.744835][T31083] bridge0: port 2(bridge_slave_1) entered blocking state [ 834.752014][T31083] bridge0: port 2(bridge_slave_1) entered disabled state [ 834.760493][T31083] bridge_slave_1: entered allmulticast mode [ 834.768976][T31083] bridge_slave_1: entered promiscuous mode [ 834.830344][T31079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 834.880931][T16226] Bluetooth: hci3: command tx timeout [ 834.900896][T31085] bridge0: port 1(bridge_slave_0) entered blocking state [ 834.923499][T31085] bridge0: port 1(bridge_slave_0) entered disabled state [ 834.930881][T31085] bridge_slave_0: entered allmulticast mode [ 834.939180][T31085] bridge_slave_0: entered promiscuous mode [ 834.960704][T31085] bridge0: port 2(bridge_slave_1) entered blocking state [ 834.973544][T31085] bridge0: port 2(bridge_slave_1) entered disabled state [ 834.977239][T16226] Bluetooth: hci4: command tx timeout [ 834.984974][T31085] bridge_slave_1: entered allmulticast mode [ 834.993192][T31135] netlink: 104 bytes leftover after parsing attributes in process `syz.6.11642'. [ 835.004218][T31085] bridge_slave_1: entered promiscuous mode [ 835.132360][T31083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 835.153466][T31083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 835.248890][ T30] audit: type=1326 audit(2000000045.806:3381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31138 comm="syz.6.11644" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f124c18e929 code=0x0 [ 835.255016][T31085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 835.286733][T31079] team0: Port device team_slave_0 added [ 835.300837][T31079] team0: Port device team_slave_1 added [ 835.333127][T31081] bridge0: port 1(bridge_slave_0) entered blocking state [ 835.341069][T31081] bridge0: port 1(bridge_slave_0) entered disabled state [ 835.348407][T31081] bridge_slave_0: entered allmulticast mode [ 835.356812][T31081] bridge_slave_0: entered promiscuous mode [ 835.369670][T31085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 835.461380][T31083] team0: Port device team_slave_0 added [ 835.467739][T31081] bridge0: port 2(bridge_slave_1) entered blocking state [ 835.477498][T31081] bridge0: port 2(bridge_slave_1) entered disabled state [ 835.485272][T31081] bridge_slave_1: entered allmulticast mode [ 835.493837][T31081] bridge_slave_1: entered promiscuous mode [ 835.557703][T25766] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 835.569329][T25766] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.595977][T31079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 835.604422][T31079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 835.630891][T31079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 835.652508][T31083] team0: Port device team_slave_1 added [ 835.701996][T31085] team0: Port device team_slave_0 added [ 835.745352][T25766] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 835.756060][T25766] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.775394][T31079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 835.782846][T31079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 835.809234][T31079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 835.862283][T31085] team0: Port device team_slave_1 added [ 835.900391][T25766] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 835.911361][T25766] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.929272][T31083] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 835.937049][T31083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 835.969810][T31083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 835.984705][T31081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 836.032902][T31085] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 836.039994][T31085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 836.066614][T31085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 836.087205][T31083] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 836.094300][T31083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 836.121487][T31083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 836.206709][T25766] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 836.226296][T25766] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.245233][T31081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 836.286842][T31085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 836.301171][T31085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 836.333292][T31085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 836.356498][T31142] block nbd1: server does not support multiple connections per device. [ 836.365023][T31142] block nbd1: shutting down sockets [ 836.403485][T31081] team0: Port device team_slave_0 added [ 836.443357][T31079] hsr_slave_0: entered promiscuous mode [ 836.450186][T31079] hsr_slave_1: entered promiscuous mode [ 836.508553][T31081] team0: Port device team_slave_1 added [ 836.569054][T31083] hsr_slave_0: entered promiscuous mode [ 836.576765][T31083] hsr_slave_1: entered promiscuous mode [ 836.584500][T31083] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 836.593392][T16226] Bluetooth: hci1: command tx timeout [ 836.598948][T31083] Cannot create hsr debugfs directory [ 836.707224][T31081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 836.717842][T31081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 836.745615][T31081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 836.761866][T31085] hsr_slave_0: entered promiscuous mode [ 836.769827][T31085] hsr_slave_1: entered promiscuous mode [ 836.777234][T31085] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 836.784938][T31085] Cannot create hsr debugfs directory [ 836.815814][ T5940] usb 7-1: new full-speed USB device number 66 using dummy_hcd [ 836.837987][T31081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 836.844983][T31081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 836.871799][T31081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 836.933950][T16226] Bluetooth: hci2: command tx timeout [ 837.002653][ T5940] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 837.010413][T25766] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.018192][ T5940] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 837.054586][ T5940] usb 7-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 837.064042][ T5940] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.090825][ T5940] usb 7-1: config 0 descriptor?? [ 837.104977][T16226] Bluetooth: hci3: command tx timeout [ 837.170016][T25766] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.190487][T16226] Bluetooth: hci4: command tx timeout [ 837.203516][T31081] hsr_slave_0: entered promiscuous mode [ 837.210194][T31081] hsr_slave_1: entered promiscuous mode [ 837.217400][T31081] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 837.225727][T31081] Cannot create hsr debugfs directory [ 837.290257][T25766] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.427627][T25766] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.562702][ T5940] isku 0003:1E7D:319C.008E: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.6-1/input0 [ 837.887021][T25766] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.984087][ T43] usb 7-1: USB disconnect, device number 66 [ 837.995632][T25766] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.094247][T25766] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.160701][T25766] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.307244][T25766] batadv2: left allmulticast mode [ 838.312575][T25766] batadv2: left promiscuous mode [ 838.318665][T25766] bridge0: port 3(batadv2) entered disabled state [ 838.333854][T25766] bridge_slave_1: left allmulticast mode [ 838.340005][T25766] bridge_slave_1: left promiscuous mode [ 838.346598][T25766] bridge0: port 2(bridge_slave_1) entered disabled state [ 838.356265][T25766] bridge_slave_0: left allmulticast mode [ 838.361946][T25766] bridge_slave_0: left promiscuous mode [ 838.368578][T25766] bridge0: port 1(bridge_slave_0) entered disabled state [ 838.388993][T25766] bridge_slave_1: left allmulticast mode [ 838.395082][T25766] bridge0: port 2(bridge_slave_1) entered disabled state [ 838.404315][T25766] bridge_slave_0: left allmulticast mode [ 838.410385][T25766] bridge_slave_0: left promiscuous mode [ 838.416178][T25766] bridge0: port 1(bridge_slave_0) entered disabled state [ 838.432883][T25766] bridge_slave_1: left allmulticast mode [ 838.438596][T25766] bridge_slave_1: left promiscuous mode [ 838.444380][T25766] bridge0: port 2(bridge_slave_1) entered disabled state [ 838.461138][T25766] bridge_slave_0: left allmulticast mode [ 838.466902][T25766] bridge_slave_0: left promiscuous mode [ 838.479734][T25766] bridge0: port 1(bridge_slave_0) entered disabled state [ 838.823563][T16226] Bluetooth: hci1: command tx timeout [ 839.031567][T25766] team0: Port device geneve0 removed [ 839.165982][T16226] Bluetooth: hci2: command tx timeout [ 839.328443][T16226] Bluetooth: hci3: command tx timeout [ 839.401017][T25766] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 839.413269][T25766] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 839.424219][T16226] Bluetooth: hci4: command tx timeout [ 839.435995][T25766] bond0 (unregistering): Released all slaves [ 839.457212][T25766] bond1 (unregistering): Released all slaves [ 839.905212][T25766] team0: Port device bridge2 removed [ 840.100656][T25766] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 840.112596][T25766] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 840.123065][T25766] bond0 (unregistering): Released all slaves [ 840.515198][T25766] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 840.532564][T25766] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 840.543346][T25766] bond0 (unregistering): Released all slaves [ 841.439683][T31079] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 841.457735][T31079] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 841.469493][T31079] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 841.482665][T31079] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 841.600244][T31083] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 841.618088][T31083] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 841.648434][T31083] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 841.662838][T31083] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 841.760145][T31085] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 841.786482][T31085] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 841.816306][T31085] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 841.858916][T31085] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 842.036524][T31079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 842.059826][T31081] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 842.110036][T31081] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 842.131222][T31081] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 842.156824][T31081] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 842.216949][T31079] 8021q: adding VLAN 0 to HW filter on device team0 [ 842.281216][T25770] bridge0: port 1(bridge_slave_0) entered blocking state [ 842.288528][T25770] bridge0: port 1(bridge_slave_0) entered forwarding state [ 842.304322][T31083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 842.329057][T25766] lm;-: left promiscuous mode [ 842.373915][T25771] bridge0: port 2(bridge_slave_1) entered blocking state [ 842.381217][T25771] bridge0: port 2(bridge_slave_1) entered forwarding state [ 842.409735][T25766] ave_0: left promiscuous mode [ 842.459589][T31083] 8021q: adding VLAN 0 to HW filter on device team0 [ 842.538047][T25766] tipc: Disabling bearer [ 842.543490][T25766] tipc: Disabling bearer [ 842.571503][T25766] tipc: Left network mode [ 842.591663][T28599] bridge0: port 1(bridge_slave_0) entered blocking state [ 842.598897][T28599] bridge0: port 1(bridge_slave_0) entered forwarding state [ 842.708218][T25766] tipc: Disabling bearer [ 842.714584][T25766] tipc: Left network mode [ 842.789865][T28599] bridge0: port 2(bridge_slave_1) entered blocking state [ 842.797140][T28599] bridge0: port 2(bridge_slave_1) entered forwarding state [ 842.876959][T31085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 842.901254][T31079] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 843.044769][T31085] 8021q: adding VLAN 0 to HW filter on device team0 [ 843.092619][T28479] bridge0: port 1(bridge_slave_0) entered blocking state [ 843.099835][T28479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 843.160896][T31205] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 843.182518][T31205] bridge_slave_0: default FDB implementation only supports local addresses [ 843.211276][T31083] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 843.257477][T28479] bridge0: port 2(bridge_slave_1) entered blocking state [ 843.264730][T28479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 843.468823][T25766] mac80211_hwsim hwsim2 wlan0 (unregistering): left allmulticast mode [ 843.484918][T25766] mac80211_hwsim hwsim2 wlan0 (unregistering): left promiscuous mode [ 843.652667][T31085] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 843.676075][T31085] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 843.720581][T31081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 843.899652][T31081] 8021q: adding VLAN 0 to HW filter on device team0 [ 843.935942][ T43] usb 7-1: new full-speed USB device number 67 using dummy_hcd [ 843.952962][T28613] bridge0: port 1(bridge_slave_0) entered blocking state [ 843.960196][T28613] bridge0: port 1(bridge_slave_0) entered forwarding state [ 844.051924][T31079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 844.075790][T28471] bridge0: port 2(bridge_slave_1) entered blocking state [ 844.083002][T28471] bridge0: port 2(bridge_slave_1) entered forwarding state [ 844.116069][T31083] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 844.133768][ T43] usb 7-1: config 0 has no interfaces? [ 844.139626][ T43] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 844.149120][ T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.210312][ T43] usb 7-1: config 0 descriptor?? [ 844.383453][T31079] veth0_vlan: entered promiscuous mode [ 844.442268][T31085] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 844.471482][ T43] usb 7-1: USB disconnect, device number 67 [ 844.483439][T31079] veth1_vlan: entered promiscuous mode [ 844.518249][T25766] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 844.526126][T25766] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 844.553859][T25766] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 844.572920][T25766] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 844.596908][T25766] hsr_slave_0: left promiscuous mode [ 844.609337][T25766] hsr_slave_1: left promiscuous mode [ 844.615609][T25766] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 844.623609][T25766] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 844.634228][T25766] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 844.642065][T25766] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 844.657387][T25766] hsr_slave_0: left promiscuous mode [ 844.664990][T25766] hsr_slave_1: left promiscuous mode [ 844.670932][T25766] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 844.678788][T25766] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 844.687578][T25766] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 844.698329][T25766] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 844.764185][T25766] hsr0: left allmulticast mode [ 844.769497][T25766] veth1_macvtap: left promiscuous mode [ 844.775049][T25766] veth0_macvtap: left promiscuous mode [ 844.780759][T25766] veth1_vlan: left promiscuous mode [ 844.788923][T25766] @: left allmulticast mode [ 844.793591][T25766] veth0_vlan: left allmulticast mode [ 844.798931][T25766] @: left promiscuous mode [ 844.804477][T25766] veth1_vlan: left promiscuous mode [ 844.810008][T25766] veth0_vlan: left promiscuous mode [ 844.819200][T25766] veth1_macvtap: left promiscuous mode [ 844.825227][T25766] veth0_macvtap: left promiscuous mode [ 844.830925][T25766] veth1_vlan: left promiscuous mode [ 844.839745][T25766] veth0_vlan: left promiscuous mode [ 845.230316][T25766] pimreg (unregistering): left allmulticast mode [ 845.952214][T25766] team0 (unregistering): Port device team_slave_1 removed [ 846.007150][T25766] team0 (unregistering): Port device team_slave_0 removed [ 847.878285][T25766] team0 (unregistering): Port device team_slave_1 removed [ 847.944637][T25766] team0 (unregistering): Port device team_slave_0 removed [ 849.109596][T25766] team0 (unregistering): Port device team_slave_1 removed [ 849.174969][T25766] team0 (unregistering): Port device team_slave_0 removed [ 849.787481][T31083] veth0_vlan: entered promiscuous mode [ 849.864955][T31083] veth1_vlan: entered promiscuous mode [ 849.936787][T31079] veth0_macvtap: entered promiscuous mode [ 850.027071][T31079] veth1_macvtap: entered promiscuous mode [ 850.077049][T31083] veth0_macvtap: entered promiscuous mode [ 850.118869][T31083] veth1_macvtap: entered promiscuous mode [ 850.161733][T31079] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 850.263328][T31079] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 850.312642][T31083] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 850.367328][T31083] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 850.429335][T31083] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.481407][T31083] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.491156][T31083] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.500041][T31083] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.522117][T31079] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.531011][T31079] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.575416][T31079] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.584391][T31079] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.743645][T31081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 851.044171][T31085] veth0_vlan: entered promiscuous mode [ 851.126193][T31085] veth1_vlan: entered promiscuous mode [ 851.136038][T28471] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 851.149041][T28471] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 851.185709][T28479] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 851.198764][T28479] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 851.372585][T28471] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 851.375255][T25770] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 851.400912][T28471] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 851.409783][T31081] veth0_vlan: entered promiscuous mode [ 851.432696][T25770] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 851.477417][T31081] veth1_vlan: entered promiscuous mode [ 851.538613][T31085] veth0_macvtap: entered promiscuous mode [ 851.607857][T31085] veth1_macvtap: entered promiscuous mode [ 851.655582][T31081] veth0_macvtap: entered promiscuous mode [ 851.681392][T31081] veth1_macvtap: entered promiscuous mode [ 851.717365][T31085] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 851.739185][T31085] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 851.847627][T31085] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.856433][T31085] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.874138][T31085] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.884545][T31085] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.940873][T31081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 852.261255][T31276] bridge0: port 2(bridge_slave_1) entered disabled state [ 852.269155][T31276] bridge0: port 1(bridge_slave_0) entered disabled state [ 852.457821][T31276] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 852.483279][T31276] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 852.656381][T31276] veth1_macvtap: left allmulticast mode [ 852.669200][T31276] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.679117][T31276] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.689299][T31276] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.698738][T31276] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.764545][T31276] macvlan2: left promiscuous mode [ 852.771017][T31276] macvlan2: left allmulticast mode [ 852.783391][T31276] macsec0: left allmulticast mode [ 852.791652][T31276] macvtap1: left allmulticast mode [ 852.808557][T31081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 852.826227][T25766] IPVS: stop unused estimator thread 0... [ 852.869282][T25766] IPVS: stop unused estimator thread 0... [ 852.882317][T31081] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 852.905080][T31081] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 852.913869][T31081] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 852.953663][T31081] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.217999][T28613] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 853.238867][T28613] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 853.291205][T31297] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.11688'. [ 853.341778][T25766] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 853.357718][T25766] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 853.458772][T25766] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 853.481006][T25766] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 853.548220][T25771] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 853.581744][T25771] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 854.118153][T31328] netlink: 36 bytes leftover after parsing attributes in process `syz.8.11700'. [ 854.312372][T31338] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11705'. [ 854.846716][T30581] kernel write not supported for file /3517/loginuid (pid: 30581 comm: kworker/0:1) [ 855.041291][T31371] syz.8.11719 uses old SIOCAX25GETINFO [ 855.226787][T31375] netlink: 'syz.6.11723': attribute type 2 has an invalid length. [ 855.234806][T31375] netlink: 132 bytes leftover after parsing attributes in process `syz.6.11723'. [ 855.605183][T31395] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 856.262198][T29618] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 856.436070][T29618] usb 3-1: Using ep0 maxpacket: 8 [ 856.459960][T29618] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 856.476450][T29618] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.484633][T29618] usb 3-1: Product: syz [ 856.492673][T29618] usb 3-1: Manufacturer: syz [ 856.498879][T29618] usb 3-1: SerialNumber: syz [ 856.506950][T29618] usb 3-1: config 0 descriptor?? [ 856.523525][T29618] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 856.543821][T29618] usb 3-1: setting power ON [ 856.548538][T29618] dvb-usb: bulk message failed: -22 (2/0) [ 856.559597][T29618] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 856.570959][T29618] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 856.579771][T29618] usb 3-1: media controller created [ 856.631445][T29618] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 856.659552][T29618] usb 3-1: selecting invalid altsetting 6 [ 856.668318][T29618] usb 3-1: digital interface selection failed (-22) [ 856.677312][T29618] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 856.686770][T29618] usb 3-1: setting power OFF [ 856.694188][T29618] dvb-usb: bulk message failed: -22 (2/0) [ 856.700043][T29618] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 856.710577][T29618] (NULL device *): no alternate interface [ 856.742122][T31410] dvb-usb: bulk message failed: -22 (3/0) [ 856.778061][T31410] cxusb: i2c wr: len=79 is too big! [ 856.778061][T31410] [ 856.819650][T29618] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 856.832664][T29618] usb 3-1: USB disconnect, device number 47 [ 857.099631][T31439] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11752'. [ 857.587566][T29618] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 857.597402][T31458] syz.2.11761: attempt to access beyond end of device [ 857.597402][T31458] nbd2: rw=0, sector=64, nr_sectors = 1 limit=0 [ 857.631607][T31458] syz.2.11761: attempt to access beyond end of device [ 857.631607][T31458] nbd2: rw=0, sector=256, nr_sectors = 1 limit=0 [ 857.660170][T31458] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 857.683406][T31458] syz.2.11761: attempt to access beyond end of device [ 857.683406][T31458] nbd2: rw=0, sector=512, nr_sectors = 1 limit=0 [ 857.699026][T31458] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 857.711445][T31458] syz.2.11761: attempt to access beyond end of device [ 857.711445][T31458] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 857.764240][T29618] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 857.773705][T29618] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.782198][T31458] syz.2.11761: attempt to access beyond end of device [ 857.782198][T31458] nbd2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 857.804250][T29618] usb 4-1: config 0 descriptor?? [ 857.818757][T29618] cp210x 4-1:0.0: cp210x converter detected [ 857.823076][T31458] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 857.870123][T31458] syz.2.11761: attempt to access beyond end of device [ 857.870123][T31458] nbd2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 857.916293][T31458] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 857.949409][T31458] syz.2.11761: attempt to access beyond end of device [ 857.949409][T31458] nbd2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 857.994051][T31458] syz.2.11761: attempt to access beyond end of device [ 857.994051][T31458] nbd2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 858.025878][T31458] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 858.040590][T31458] syz.2.11761: attempt to access beyond end of device [ 858.040590][T31458] nbd2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 858.099913][T31458] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 858.119216][T31458] syz.2.11761: attempt to access beyond end of device [ 858.119216][T31458] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 858.153453][T31458] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 858.165651][T31458] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 858.176776][T31458] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 858.185405][T31465] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11764'. [ 858.474090][T29618] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 858.485107][T29618] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 858.525960][T29618] usb 4-1: cp210x converter now attached to ttyUSB0 [ 858.544918][T29618] usb 4-1: USB disconnect, device number 58 [ 858.570135][T29618] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 858.591112][T29618] cp210x 4-1:0.0: device disconnected [ 858.915415][T31497] openvswitch: netlink: Multiple metadata blocks provided [ 860.134310][T31554] netlink: 28 bytes leftover after parsing attributes in process `syz.8.11806'. [ 860.787462][T31581] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 861.158422][T30581] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 861.286459][ T1210] usb 9-1: new full-speed USB device number 27 using dummy_hcd [ 861.318635][T30581] usb 3-1: Using ep0 maxpacket: 16 [ 861.342334][T30581] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 861.374094][T30581] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 861.389662][T30581] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 861.400780][T30581] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.419189][T30581] usb 3-1: Product: syz [ 861.423420][T30581] usb 3-1: Manufacturer: syz [ 861.432175][T30581] usb 3-1: SerialNumber: syz [ 861.440011][T30581] usb 3-1: config 0 descriptor?? [ 861.451266][ T1210] usb 9-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 861.465842][T30581] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 861.475448][ T1210] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.488100][ T1210] usb 9-1: Product: syz [ 861.492440][T30581] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 861.501636][ T1210] usb 9-1: Manufacturer: syz [ 861.506284][ T1210] usb 9-1: SerialNumber: syz [ 861.515464][ T1210] usb 9-1: config 0 descriptor?? [ 861.671396][ T5940] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 861.857091][ T5940] usb 7-1: Using ep0 maxpacket: 32 [ 861.879223][ T5940] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 861.895905][ T5940] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 861.906205][ T5940] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 861.918621][ T5940] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.931993][ T5940] usb 7-1: config 0 descriptor?? [ 861.957711][ T1210] airspy 9-1:0.0: Board ID: 00 [ 861.966888][ T1210] airspy 9-1:0.0: Firmware version: [ 861.975301][T31615] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 861.986944][T31615] batadv_slave_1: entered promiscuous mode [ 862.000431][T31615] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11836'. [ 862.092050][T31617] team0: Port device virt_wifi0 added [ 862.100049][T31617] net veth1_virt_wifi virt_wifi0: refused to change device tx_queue_len [ 862.108771][T31617] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 862.125524][T30581] em28xx 3-1:0.0: chip ID is em2710/2820 [ 862.164451][T31603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 862.173296][ T1210] airspy 9-1:0.0: usb_control_msg() failed -71 request 11 [ 862.182566][T31603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 862.207330][ T1210] airspy 9-1:0.0: Registered as swradio24 [ 862.213919][ T1210] airspy 9-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 862.230629][ T1210] usb 9-1: USB disconnect, device number 27 [ 862.346279][T30581] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 862.359928][T30581] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 862.372079][T30581] em28xx 3-1:0.0: No AC97 audio processor [ 862.383828][T30581] usb 3-1: USB disconnect, device number 48 [ 862.397220][T30581] em28xx 3-1:0.0: Disconnecting em28xx [ 862.404724][T30581] em28xx 3-1:0.0: Freeing device [ 862.428313][ T5940] savu 0003:1E7D:2D5A.008F: unbalanced collection at end of report description [ 862.443602][ T5940] savu 0003:1E7D:2D5A.008F: parse failed [ 862.449589][ T5940] savu 0003:1E7D:2D5A.008F: probe with driver savu failed with error -22 [ 862.639856][T29618] usb 7-1: USB disconnect, device number 68 [ 863.146918][ T5940] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 863.328403][ T5940] usb 9-1: Using ep0 maxpacket: 16 [ 863.341465][ T5940] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 863.368423][ T5940] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 863.438368][ T5940] usb 9-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 863.460994][ T5940] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.488718][ T5940] usb 9-1: Product: syz [ 863.492967][ T5940] usb 9-1: Manufacturer: syz [ 863.510123][ T5940] usb 9-1: SerialNumber: syz [ 863.539246][ T5940] usb 9-1: config 0 descriptor?? [ 863.549145][ T5940] ums-onetouch 9-1:0.0: USB Mass Storage device detected [ 863.767877][ T5940] usb 9-1: USB disconnect, device number 28 [ 863.999003][T31664] sp0: Synchronizing with TNC [ 864.067561][T31664] sp0: Synchronizing with TNC [ 864.226572][ T5940] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 864.258531][T29618] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 864.397552][ T5940] usb 3-1: Using ep0 maxpacket: 32 [ 864.411423][ T5940] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 864.423255][ T5940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.443202][T29618] usb 4-1: Using ep0 maxpacket: 8 [ 864.453157][T29618] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 864.456273][ T5940] usb 3-1: config 0 descriptor?? [ 864.473761][T29618] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 864.507370][T29618] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 864.522827][T29618] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 864.536625][T29618] usb 4-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 864.548438][T29618] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.564731][T29618] usb 4-1: config 0 descriptor?? [ 864.633316][T31689] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 864.713998][ T5940] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 864.724886][ T5940] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 864.768224][ T5940] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 864.786488][ T5940] usb 3-1: media controller created [ 864.863244][ T5940] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 864.940699][ T5940] az6027: usb out operation failed. (-71) [ 864.953758][ T5940] az6027: usb out operation failed. (-71) [ 864.959627][ T5940] stb0899_attach: Driver disabled by Kconfig [ 864.997801][ T5940] az6027: no front-end attached [ 864.997801][ T5940] [ 865.016283][ T5940] az6027: usb out operation failed. (-71) [ 865.037475][ T5940] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 865.057210][ T5940] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input63 [ 865.063618][T29618] redragon 0003:0C45:760B.0090: unknown main item tag 0x6 [ 865.083572][ T5940] dvb-usb: schedule remote query interval to 400 msecs. [ 865.103092][ T5940] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 865.122064][T29618] redragon 0003:0C45:760B.0090: item fetching failed at offset 7/133 [ 865.139799][T29618] redragon 0003:0C45:760B.0090: probe with driver redragon failed with error -22 [ 865.144190][ T5940] usb 3-1: USB disconnect, device number 49 [ 865.258163][ T5940] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 865.270847][T31708] netlink: 'syz.1.11877': attribute type 9 has an invalid length. [ 865.301679][T31708] netlink: 146708 bytes leftover after parsing attributes in process `syz.1.11877'. [ 865.315444][T29618] usb 4-1: USB disconnect, device number 59 [ 865.686645][T31719] xt_cgroup: invalid path, errno=-2 [ 866.299793][T31740] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11891'. [ 866.890747][T31760] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 867.293823][T31779] netlink: 24 bytes leftover after parsing attributes in process `syz.8.11911'. [ 867.321234][T31779] netlink: 24 bytes leftover after parsing attributes in process `syz.8.11911'. [ 867.521135][T31790] netlink: 'syz.1.11916': attribute type 49 has an invalid length. [ 867.617299][ T43] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 867.801695][ T43] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 867.816580][ T43] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 867.854139][ T43] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 867.877943][ T43] usb 4-1: config 220 has no interface number 2 [ 867.896616][ T43] usb 4-1: config 220 interface 1 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 32 [ 867.913315][ T43] usb 4-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 867.950380][ T43] usb 4-1: config 220 interface 0 has no altsetting 0 [ 867.967820][ T43] usb 4-1: config 220 interface 76 has no altsetting 0 [ 867.977050][ T43] usb 4-1: config 220 interface 1 has no altsetting 0 [ 867.990749][ T43] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 868.004877][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.022363][ T43] usb 4-1: Product: syz [ 868.026611][ T43] usb 4-1: Manufacturer: syz [ 868.031261][ T43] usb 4-1: SerialNumber: syz [ 868.281456][ T43] uvcvideo 4-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 868.397691][ T43] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 868.404148][ T43] usb 4-1: No valid video chain found. [ 868.431502][ T43] usb 4-1: selecting invalid altsetting 0 [ 868.466620][ T43] usb 4-1: selecting invalid altsetting 0 [ 868.492225][ T43] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 868.515820][ T43] usb 4-1: USB disconnect, device number 60 [ 870.262437][T31895] Mount JFS Failure: -22 [ 870.303522][ T5940] hid-generic 0005:16C0:0009.0091: unknown main item tag 0x0 [ 870.388318][ T5940] hid-generic 0005:16C0:0009.0091: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 871.540482][T31952] netlink: 44 bytes leftover after parsing attributes in process `syz.6.11986'. [ 873.554032][T32006] team_slave_1: entered promiscuous mode [ 875.256032][T32037] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12024'. [ 875.790918][T32050] netlink: 252 bytes leftover after parsing attributes in process `syz.2.12030'. [ 876.051814][T32052] bridge0: port 2(bridge_slave_1) entered disabled state [ 876.059690][T32052] bridge0: port 1(bridge_slave_0) entered disabled state [ 876.452717][T32052] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 876.502210][T32052] batadv_slave_1: left promiscuous mode [ 876.742148][T32052] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.766480][T32052] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.810880][T32052] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.834367][T32052] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.266024][T32110] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12060'. [ 879.010061][T32127] netlink: 52 bytes leftover after parsing attributes in process `syz.1.12069'. [ 879.035723][T32127] netlink: 32 bytes leftover after parsing attributes in process `syz.1.12069'. [ 879.497176][T28470] bridge_slave_1: left allmulticast mode [ 879.526977][T28470] bridge_slave_1: left promiscuous mode [ 879.532940][T28470] bridge0: port 2(bridge_slave_1) entered disabled state [ 879.630079][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 879.641484][T28470] bridge_slave_0: left allmulticast mode [ 879.653132][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 879.661303][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 879.663583][T28470] bridge_slave_0: left promiscuous mode [ 879.676559][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 879.695892][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 879.696240][T28470] bridge0: port 1(bridge_slave_0) entered disabled state [ 880.715548][T28470] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 880.742370][T28470] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 880.784952][T28470] bond0 (unregistering): Released all slaves [ 880.837758][T32144] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12077'. [ 880.847585][T32147] netlink: 'syz.2.12078': attribute type 25 has an invalid length. [ 881.118367][T32159] netlink: 2 bytes leftover after parsing attributes in process `syz.1.12083'. [ 881.543152][T32137] chnl_net:caif_netlink_parms(): no params data found [ 881.605362][T32173] sctp: [Deprecated]: syz.6.12089 (pid 32173) Use of int in maxseg socket option. [ 881.605362][T32173] Use struct sctp_assoc_value instead [ 881.740430][T28470] hsr_slave_0: left promiscuous mode [ 881.759903][T28470] hsr_slave_1: left promiscuous mode [ 881.766122][T28470] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 881.806812][T28470] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 881.919575][T16226] Bluetooth: hci2: command tx timeout [ 882.255256][T28470] team0 (unregistering): Port device virt_wifi0 removed [ 882.618885][T28470] team0 (unregistering): Port device team_slave_1 removed [ 882.688542][T28470] team0 (unregistering): Port device team_slave_0 removed [ 883.764178][T32137] bridge0: port 1(bridge_slave_0) entered blocking state [ 883.774494][T32137] bridge0: port 1(bridge_slave_0) entered disabled state [ 883.784030][T32137] bridge_slave_0: entered allmulticast mode [ 883.792755][T32137] bridge_slave_0: entered promiscuous mode [ 883.816773][T32137] bridge0: port 2(bridge_slave_1) entered blocking state [ 883.824309][T32137] bridge0: port 2(bridge_slave_1) entered disabled state [ 883.845240][T32137] bridge_slave_1: entered allmulticast mode [ 883.853043][T32137] bridge_slave_1: entered promiscuous mode [ 884.071763][T32137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 884.085214][T32137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 884.151814][T16226] Bluetooth: hci2: command tx timeout [ 884.211266][T32137] team0: Port device team_slave_0 added [ 884.243574][T32137] team0: Port device team_slave_1 added [ 884.334063][T32137] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 884.342980][T32137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 884.423953][T32137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 884.456402][T32137] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 884.470684][T32137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 884.502956][T32137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 884.523199][T32195] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12098'. [ 884.758863][T32137] hsr_slave_0: entered promiscuous mode [ 884.765950][T32137] hsr_slave_1: entered promiscuous mode [ 884.773156][T32137] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 884.792759][T32137] Cannot create hsr debugfs directory [ 885.223057][T31264] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 885.407329][T31264] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 885.428092][T31264] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 885.457962][T31264] usb 3-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 885.488847][T31264] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.524820][T31264] usb 3-1: config 0 descriptor?? [ 885.896771][T32137] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 885.911468][T32137] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 885.925369][T32137] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 885.942285][T32137] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 885.976513][T31264] samsung 0003:0419:0600.0092: unknown main item tag 0x0 [ 886.000063][T31264] samsung 0003:0419:0600.0092: unknown main item tag 0x0 [ 886.019159][T31264] samsung 0003:0419:0600.0092: unknown main item tag 0x0 [ 886.039832][T31264] samsung 0003:0419:0600.0092: unknown main item tag 0x0 [ 886.047959][T31264] samsung 0003:0419:0600.0092: unknown main item tag 0x0 [ 886.072435][T31264] samsung 0003:0419:0600.0092: hidraw0: USB HID v0.00 Device [HID 0419:0600] on usb-dummy_hcd.2-1/input0 [ 886.149720][T32137] 8021q: adding VLAN 0 to HW filter on device bond0 [ 886.182436][T32137] 8021q: adding VLAN 0 to HW filter on device team0 [ 886.222319][T28470] bridge0: port 1(bridge_slave_0) entered blocking state [ 886.229619][T28470] bridge0: port 1(bridge_slave_0) entered forwarding state [ 886.244935][ T43] usb 3-1: USB disconnect, device number 50 [ 886.252935][T25766] bridge0: port 2(bridge_slave_1) entered blocking state [ 886.260197][T25766] bridge0: port 2(bridge_slave_1) entered forwarding state [ 886.370749][T16226] Bluetooth: hci2: command tx timeout [ 886.886600][T32137] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 887.841739][T32137] veth0_vlan: entered promiscuous mode [ 887.893113][T32137] veth1_vlan: entered promiscuous mode [ 888.074810][T32137] veth0_macvtap: entered promiscuous mode [ 888.126158][T32137] veth1_macvtap: entered promiscuous mode [ 888.298768][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 888.310635][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 888.324760][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 888.339310][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 888.360974][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 888.448746][T32137] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 888.480711][T32137] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 888.591245][T16226] Bluetooth: hci2: command tx timeout [ 888.599900][T32137] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.622550][T32137] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.643925][T32137] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.652726][T32137] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.851863][T28471] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.899975][T32303] veth0: entered promiscuous mode [ 888.911570][T32303] veth0: left promiscuous mode [ 889.073686][T28471] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.313750][T28471] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.490967][T28471] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.507850][T32318] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12143'. [ 889.520452][T32318] tipc: Invalid UDP bearer configuration [ 889.520519][T32318] tipc: Enabling of bearer rejected, failed to enable media [ 889.558778][T25770] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 889.576942][T25770] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 889.867386][T32288] chnl_net:caif_netlink_parms(): no params data found [ 889.887646][T25770] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 889.907468][T25770] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 890.165457][T28471] bridge_slave_1: left allmulticast mode [ 890.173232][T28471] bridge_slave_1: left promiscuous mode [ 890.179114][T28471] bridge0: port 2(bridge_slave_1) entered disabled state [ 890.202128][ T30] audit: type=1804 audit(2000000098.207:3382): pid=32344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.7.12065" name="/" dev="pidfs" ino=32343 res=1 errno=0 [ 890.228130][T28471] bridge_slave_0: left allmulticast mode [ 890.233866][T28471] bridge_slave_0: left promiscuous mode [ 890.253641][T28471] bridge0: port 1(bridge_slave_0) entered disabled state [ 890.567739][T16226] Bluetooth: hci4: command tx timeout [ 890.777714][T32358] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.12158'. [ 891.120349][T32372] netlink: 'syz.2.12165': attribute type 15 has an invalid length. [ 891.451543][T28471] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 891.464024][T28471] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 891.476330][T28471] bond0 (unregistering): Released all slaves [ 891.547228][T32379] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 891.556192][T32379] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 891.565200][T32379] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 891.574310][T32379] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 891.594672][T30581] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 891.612027][T32379] vxlan1: entered promiscuous mode [ 891.639612][T32379] vxlan1: entered allmulticast mode [ 891.779933][T30581] usb 3-1: config 0 has an invalid interface number: 156 but max is 1 [ 891.793000][T30581] usb 3-1: config 0 has no interface number 1 [ 891.835559][T30581] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 891.867882][T30581] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.880256][T30581] usb 3-1: config 0 descriptor?? [ 891.922638][T30581] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 891.946939][T32288] bridge0: port 1(bridge_slave_0) entered blocking state [ 891.963187][T30581] usb 3-1: MIDIStreaming interface descriptor not found [ 891.990160][T32288] bridge0: port 1(bridge_slave_0) entered disabled state [ 892.010540][T32288] bridge_slave_0: entered allmulticast mode [ 892.032820][T32288] bridge_slave_0: entered promiscuous mode [ 892.045972][T32288] bridge0: port 2(bridge_slave_1) entered blocking state [ 892.064252][T32288] bridge0: port 2(bridge_slave_1) entered disabled state [ 892.066858][T30581] gspca_main: spca561-2.14.0 probing abcd:cdee [ 892.082610][T29618] kernel read not supported for file /usbmon9 (pid: 29618 comm: kworker/1:2) [ 892.104740][T32288] bridge_slave_1: entered allmulticast mode [ 892.142066][T30581] spca561 3-1:0.0: probe with driver spca561 failed with error -22 [ 892.142105][T32288] bridge_slave_1: entered promiscuous mode [ 892.176032][T30581] usb 3-1: USB disconnect, device number 51 [ 892.279804][T32394] netlink: 12 bytes leftover after parsing attributes in process `syz.7.12174'. [ 892.462016][T32288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 892.603401][T32288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 892.770558][T32288] team0: Port device team_slave_0 added [ 892.794921][T16226] Bluetooth: hci4: command tx timeout [ 892.827328][T32288] team0: Port device team_slave_1 added [ 893.022002][T28471] hsr_slave_0: left promiscuous mode [ 893.060238][T28471] hsr_slave_1: left promiscuous mode [ 893.074027][T28471] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 893.086648][T28471] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 893.116360][T28471] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 893.126233][T28471] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 893.231384][T28471] veth1_macvtap: left promiscuous mode [ 893.237027][T28471] veth0_macvtap: left promiscuous mode [ 893.242992][T28471] veth1_vlan: left promiscuous mode [ 893.267530][T28471] veth0_vlan: left promiscuous mode [ 894.183541][T28471] team0 (unregistering): Port device team_slave_1 removed [ 894.250405][T28471] team0 (unregistering): Port device team_slave_0 removed [ 894.905253][T32288] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 894.914091][T32288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 894.940913][T32288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 895.011458][T16226] Bluetooth: hci4: command tx timeout [ 895.206421][T32288] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 895.231843][T32288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 895.314753][T32288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 895.582932][T32288] hsr_slave_0: entered promiscuous mode [ 895.589804][T32288] hsr_slave_1: entered promiscuous mode [ 895.625374][T32288] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 895.633795][T32288] Cannot create hsr debugfs directory [ 895.729388][T32469] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 895.784170][T32471] program syz.7.12205 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 896.003670][T32479] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12210'. [ 896.075756][T32481] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 896.278692][T32489] bond0: entered promiscuous mode [ 896.287464][T32489] bond_slave_0: entered promiscuous mode [ 896.309307][T32489] bond_slave_1: entered promiscuous mode [ 896.335065][T32489] batadv0: entered promiscuous mode [ 896.353384][T32489] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 896.375082][T32489] bond0: left promiscuous mode [ 896.379959][T32489] bond_slave_0: left promiscuous mode [ 896.386121][T32489] bond_slave_1: left promiscuous mode [ 896.392712][T32489] batadv0: left promiscuous mode [ 896.754509][T29618] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 896.807687][T32288] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 896.821144][T32288] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 896.831448][T32288] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 896.842845][T32288] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 896.936454][T29618] usb 7-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 896.959284][T32288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 896.966098][T29618] usb 7-1: config 0 interface 0 has no altsetting 0 [ 896.989318][T29618] usb 7-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 897.002328][T32288] 8021q: adding VLAN 0 to HW filter on device team0 [ 897.009720][T29618] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 897.024513][T25766] bridge0: port 1(bridge_slave_0) entered blocking state [ 897.031749][T25766] bridge0: port 1(bridge_slave_0) entered forwarding state [ 897.037979][T29618] usb 7-1: config 0 descriptor?? [ 897.059920][T25771] bridge0: port 2(bridge_slave_1) entered blocking state [ 897.067193][T25771] bridge0: port 2(bridge_slave_1) entered forwarding state [ 897.232536][T16226] Bluetooth: hci4: command tx timeout [ 897.408990][T32288] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 897.470704][T32288] veth0_vlan: entered promiscuous mode [ 897.489008][T32288] veth1_vlan: entered promiscuous mode [ 897.507263][T29618] hid-thrustmaster 0003:044F:B65D.0093: hidraw0: USB HID v1.03 Device [HID 044f:b65d] on usb-dummy_hcd.6-1/input0 [ 897.534320][T29618] hid-thrustmaster 0003:044F:B65D.0093: Wrong number of endpoints? [ 897.541676][T32288] veth0_macvtap: entered promiscuous mode [ 897.564669][T32288] veth1_macvtap: entered promiscuous mode [ 897.603250][T32288] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 897.626656][T32288] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 897.652050][T32288] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.665780][T32288] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.676849][T32288] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.691543][T32288] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.725535][ C1] hid-thrustmaster 0003:044F:B65D.0093: Unknown packet type 0x0, unable to proceed further with wheel init [ 897.841117][T28613] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 897.862438][T28613] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 897.904815][T25766] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 897.914165][T25766] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 897.975453][T29618] usb 7-1: USB disconnect, device number 69 [ 898.303593][T32520] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 899.430951][T32553] netlink: 32 bytes leftover after parsing attributes in process `syz.0.12237'. [ 900.478327][T16226] Bluetooth: hci0: command tx timeout [ 901.183886][T32616] sctp: [Deprecated]: syz.6.12267 (pid 32616) Use of struct sctp_assoc_value in delayed_ack socket option. [ 901.183886][T32616] Use struct sctp_sack_info instead [ 901.312297][T32622] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 901.318914][T32622] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 901.363425][T32622] vhci_hcd vhci_hcd.0: Device attached [ 901.381564][T32623] vhci_hcd: connection closed [ 901.382364][T28613] vhci_hcd: stop threads [ 901.413615][T28613] vhci_hcd: release socket [ 901.434740][T28613] vhci_hcd: disconnect device [ 901.515630][T32629] netlink: 28 bytes leftover after parsing attributes in process `syz.7.12272'. [ 901.544355][T32629] netlink: 28 bytes leftover after parsing attributes in process `syz.7.12272'. [ 901.558035][T32631] netlink: 28 bytes leftover after parsing attributes in process `syz.6.12273'. [ 901.861608][ T30] audit: type=1800 audit(2000000109.095:3383): pid=32641 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.7.12278" name="dmabuf" dev="dmabuf" ino=12 res=0 errno=0 [ 902.218864][T32653] netlink: 60 bytes leftover after parsing attributes in process `syz.0.12283'. [ 902.229617][T32653] netlink: 60 bytes leftover after parsing attributes in process `syz.0.12283'. [ 902.739095][T32677] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12294'. [ 902.822808][T29618] hid-generic 009C:0008:0003.0094: unknown main item tag 0x0 [ 902.851317][T29618] hid-generic 009C:0008:0003.0094: unknown main item tag 0x0 [ 902.874049][T29618] hid-generic 009C:0008:0003.0094: unknown main item tag 0x0 [ 902.881557][T29618] hid-generic 009C:0008:0003.0094: unknown main item tag 0x0 [ 902.921096][T29618] hid-generic 009C:0008:0003.0094: unknown main item tag 0x0 [ 902.955526][T29618] hid-generic 009C:0008:0003.0094: unknown main item tag 0x0 [ 902.985097][T29618] hid-generic 009C:0008:0003.0094: unknown main item tag 0x0 [ 903.005072][T29618] hid-generic 009C:0008:0003.0094: unknown main item tag 0x0 [ 903.033675][T29618] hid-generic 009C:0008:0003.0094: unknown main item tag 0x0 [ 903.052087][T29618] hid-generic 009C:0008:0003.0094: unknown main item tag 0x0 [ 903.076624][T29618] hid-generic 009C:0008:0003.0094: unknown main item tag 0x0 [ 903.095254][T29618] hid-generic 009C:0008:0003.0094: unknown main item tag 0x0 [ 903.130453][T29618] hid-generic 009C:0008:0003.0094: unknown main item tag 0x0 [ 903.137951][T29618] hid-generic 009C:0008:0003.0094: unknown main item tag 0x0 [ 903.166218][ T43] hid-generic 0000:0000:0000.0095: unknown main item tag 0x0 [ 903.175617][T29618] hid-generic 009C:0008:0003.0094: unknown main item tag 0x0 [ 903.194438][ T43] hid-generic 0000:0000:0000.0095: hidraw0: HID v0.00 Device [syz0] on syz0 [ 903.206513][T29618] hid-generic 009C:0008:0003.0094: hidraw1: HID v0.05 Device [syz1] on syz0 [ 905.475504][ T30] audit: type=1326 audit(2000000112.500:3384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32758 comm="syz.6.12331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f124c18e929 code=0x7ffc0000 [ 905.546017][ T30] audit: type=1326 audit(2000000112.518:3385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32758 comm="syz.6.12331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f124c18e929 code=0x7ffc0000 [ 905.578454][ T30] audit: type=1326 audit(2000000112.518:3386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32758 comm="syz.6.12331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f124c18e929 code=0x7ffc0000 [ 905.627255][ T30] audit: type=1326 audit(2000000112.518:3387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32758 comm="syz.6.12331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f124c18e929 code=0x7ffc0000 [ 905.706365][ T30] audit: type=1326 audit(2000000112.518:3388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32758 comm="syz.6.12331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f124c18e929 code=0x7ffc0000 [ 906.226035][ T307] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12339'. [ 907.073058][ T333] openvswitch: netlink: Multiple metadata blocks provided [ 907.443259][ T345] netlink: 'syz.7.12357': attribute type 5 has an invalid length. [ 907.570320][ T353] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input64 [ 907.993890][T29618] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 908.188203][T29618] usb 7-1: Using ep0 maxpacket: 16 [ 908.247842][T29618] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 908.261070][T29618] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 908.301315][T29618] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 908.338434][T29618] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 908.361695][T29618] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 908.396815][T29618] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 908.406679][T29618] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 908.429035][T29618] usb 7-1: Manufacturer: syz [ 908.445787][T29618] usb 7-1: config 0 descriptor?? [ 908.728042][ T393] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 908.795531][T29618] rc_core: IR keymap rc-hauppauge not found [ 908.817720][T29618] Registered IR keymap rc-empty [ 908.827608][T29618] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 908.857594][ T389] cgroup: fork rejected by pids controller in /syz2 [ 908.870811][T29618] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 908.905473][T29618] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 908.938908][T29618] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input65 [ 909.195717][T29618] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 909.259200][T29618] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 909.309866][T29618] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 909.344968][T29618] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 909.385206][T29618] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 909.426844][T29618] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 909.479880][T29618] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 909.513224][T29618] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 909.544095][T29618] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 909.565323][T29618] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 909.593936][T29618] mceusb 7-1:0.0: Registered with mce emulator interface version 1 [ 909.606872][T29618] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 909.660126][T29618] usb 7-1: USB disconnect, device number 70 [ 910.126253][ T1651] netlink: 16 bytes leftover after parsing attributes in process `syz.7.12387'. [ 910.182783][ T1651] netlink: 16 bytes leftover after parsing attributes in process `syz.7.12387'. [ 910.913219][ T1672] bridge0: port 2(bridge_slave_1) entered disabled state [ 911.105964][ T1687] netlink: 36 bytes leftover after parsing attributes in process `syz.2.12402'. [ 911.223927][ T1693] netlink: 'syz.1.12404': attribute type 12 has an invalid length. [ 911.247204][ T1693] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.12404'. [ 912.290853][ T1733] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 913.161242][ T1756] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 913.362850][ T1756] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 913.538415][ T1756] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 913.676155][ T1756] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 913.754461][ T1784] netlink: 40 bytes leftover after parsing attributes in process `syz.7.12446'. [ 913.934885][ T1756] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 913.950886][ T1793] input: syz0 as /devices/virtual/input/input66 [ 914.061276][ T1756] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 914.125999][ T1756] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 914.271790][ T1756] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 914.748128][ T1832] netlink: 16 bytes leftover after parsing attributes in process `syz.6.12467'. [ 915.420070][ T1863] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12481'. [ 915.745651][ T1879] overlay: filesystem on ./file0 not supported as upperdir [ 916.417145][ T1902] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12499'. [ 917.477655][ T1940] netlink: 'syz.7.12515': attribute type 1 has an invalid length. [ 917.508733][ T1940] netlink: 'syz.7.12515': attribute type 2 has an invalid length. [ 917.673960][ T1950] sp0: Synchronizing with TNC [ 918.011589][ T1972] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12530'. [ 918.281946][ T1983] Bluetooth: hci5: Frame reassembly failed (-84) [ 918.322584][T25766] Bluetooth: hci5: Frame reassembly failed (-84) [ 918.478403][ T1993] netlink: 16 bytes leftover after parsing attributes in process `syz.7.12540'. [ 920.441200][T31264] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 920.502283][T16226] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 920.514604][ T2065] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12572'. [ 920.634114][T31264] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 920.694166][T31264] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 920.717215][T31264] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 920.742077][T31264] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 920.765946][T31264] usb 7-1: SerialNumber: syz [ 921.014294][T31264] usb 7-1: 0:2 : does not exist [ 921.045662][T31264] usb 7-1: USB disconnect, device number 71 [ 921.311910][ T2098] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12588'. [ 921.342460][ T2098] netlink: 'syz.0.12588': attribute type 9 has an invalid length. [ 921.375501][ T2098] macvlan2: entered allmulticast mode [ 921.382015][ T2098] veth0_macvtap: entered allmulticast mode [ 921.603917][T31264] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 921.793091][T31264] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 921.809446][T31264] usb 3-1: config 0 has no interface number 0 [ 921.832233][T31264] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 921.842596][ T2114] gretap0: entered promiscuous mode [ 921.876940][ T2118] netlink: 31 bytes leftover after parsing attributes in process `syz.7.12596'. [ 921.891528][T31264] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 921.910436][T31264] usb 3-1: Product: syz [ 921.923622][T31264] usb 3-1: Manufacturer: syz [ 921.928331][T31264] usb 3-1: SerialNumber: syz [ 921.947338][T31264] usb 3-1: config 0 descriptor?? [ 922.190275][T31264] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 922.232375][T31264] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 922.257805][T31264] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 922.278061][T31264] usb 3-1: media controller created [ 922.346676][T31264] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 922.387242][ T2129] team0: Device gtp0 is of different type [ 922.616560][ T2137] program syz.0.12607 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 923.322653][ T2157] netlink: 'syz.0.12614': attribute type 2 has an invalid length. [ 923.322687][ T2157] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12614'. [ 923.600694][T31264] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 923.773488][T31264] usb 3-1: USB disconnect, device number 52 [ 924.304428][ T30] audit: type=1326 audit(2000000130.104:3389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2176 comm="syz.1.12623" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f433258e929 code=0x0 [ 925.686399][ T2217] program syz.6.12641 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 925.910788][ T2221] xt_CT: You must specify a L4 protocol and not use inversions on it [ 926.167751][ T30] audit: type=1326 audit(2000000131.834:3390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2229 comm="syz.2.12647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f611918e929 code=0x7ffc0000 [ 926.220543][ T30] audit: type=1326 audit(2000000131.834:3391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2229 comm="syz.2.12647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f611918e929 code=0x7ffc0000 [ 926.265300][ T30] audit: type=1326 audit(2000000131.834:3392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2229 comm="syz.2.12647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f611918e929 code=0x7ffc0000 [ 926.295333][ T30] audit: type=1326 audit(2000000131.834:3393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2229 comm="syz.2.12647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f611918e929 code=0x7ffc0000 [ 926.347066][ T30] audit: type=1326 audit(2000000131.900:3394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2231 comm="syz.7.12649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a6478e929 code=0x7ffc0000 [ 926.410698][ T30] audit: type=1326 audit(2000000131.900:3395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2231 comm="syz.7.12649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a6478e929 code=0x7ffc0000 [ 926.440255][ T2239] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12651'. [ 926.491730][ T30] audit: type=1326 audit(2000000131.947:3396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2231 comm="syz.7.12649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f9a6478e929 code=0x7ffc0000 [ 926.545521][ T30] audit: type=1326 audit(2000000131.947:3397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2231 comm="syz.7.12649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a6478e929 code=0x7ffc0000 [ 926.616759][ T30] audit: type=1326 audit(2000000131.947:3398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2231 comm="syz.7.12649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a6478e929 code=0x7ffc0000 [ 927.541014][ T2283] mkiss: ax0: crc mode is auto. [ 928.220866][ T2314] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12686'. [ 928.237720][ T2317] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12687'. [ 928.274203][ T5837] Bluetooth: hci2: command tx timeout [ 928.654766][ T2329] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12693'. [ 928.960856][ T2343] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12700'. [ 929.319495][ T2352] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12703'. [ 930.684494][ T2387] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12720'. [ 930.730870][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 930.730893][ T30] audit: type=1326 audit(2000000136.118:3403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2388 comm="syz.1.12721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f433258e929 code=0x7ffc0000 [ 930.784699][ T30] audit: type=1326 audit(2000000136.118:3404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2388 comm="syz.1.12721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f433258e929 code=0x7ffc0000 [ 930.835064][ T30] audit: type=1326 audit(2000000136.156:3405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2388 comm="syz.1.12721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f433258e929 code=0x7ffc0000 [ 930.896304][ T30] audit: type=1326 audit(2000000136.156:3406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2388 comm="syz.1.12721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f433258e929 code=0x7ffc0000 [ 930.982215][ T30] audit: type=1326 audit(2000000136.156:3407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2388 comm="syz.1.12721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7f433258e929 code=0x7ffc0000 [ 931.102038][ T30] audit: type=1326 audit(2000000136.156:3408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2388 comm="syz.1.12721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f433258e929 code=0x7ffc0000 [ 931.366598][ T2410] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12730'. [ 932.266112][ T2454] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 932.426488][ T2454] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 932.530962][ T2454] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 932.661151][ T2454] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 932.772146][ T2454] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 932.792378][ T2454] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 932.809468][ T2454] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 932.826834][ T2454] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 932.938077][ T2470] syzkaller1: entered promiscuous mode [ 932.943836][ T2470] syzkaller1: entered allmulticast mode [ 935.223221][ T43] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 935.393798][ T43] usb 7-1: Using ep0 maxpacket: 32 [ 935.401932][ T43] usb 7-1: config 0 interface 0 has no altsetting 0 [ 935.411811][ T43] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 935.421076][ T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 935.429250][ T43] usb 7-1: Product: syz [ 935.433442][ T43] usb 7-1: Manufacturer: syz [ 935.438124][ T43] usb 7-1: SerialNumber: syz [ 935.445127][ T43] usb 7-1: config 0 descriptor?? [ 935.543076][ T2551] sctp: [Deprecated]: syz.1.12780 (pid 2551) Use of int in maxseg socket option. [ 935.543076][ T2551] Use struct sctp_assoc_value instead [ 935.645256][ T2553] bridge0: entered promiscuous mode [ 935.651686][ T2553] macvlan3: entered promiscuous mode [ 935.686126][ T2553] macvlan4: entered promiscuous mode [ 935.777151][T30581] IPVS: starting estimator thread 0... [ 935.888118][ T2561] IPVS: using max 28 ests per chain, 67200 per kthread [ 935.901587][ T43] gs_usb 7-1:0.0: Configuring for 1 interfaces [ 935.937535][ T2568] netlink: 'syz.0.12786': attribute type 1 has an invalid length. [ 935.946436][ T2568] netlink: 144 bytes leftover after parsing attributes in process `syz.0.12786'. [ 935.959687][ T2568] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12786'. [ 936.179648][ T2578] netlink: 48 bytes leftover after parsing attributes in process `syz.0.12789'. [ 936.311842][ T2582] loop8: detected capacity change from 0 to 8 [ 936.319890][ T2582] Dev loop8: unable to read RDB block 8 [ 936.327247][ T2582] loop8: unable to read partition table [ 936.333495][ T2582] loop8: partition table beyond EOD, truncated [ 936.341557][ T2582] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 936.588931][ T43] usb 7-1: USB disconnect, device number 72 [ 937.125301][ T2606] netlink: 'syz.1.12798': attribute type 4 has an invalid length. [ 937.140686][ T2606] netlink: 32 bytes leftover after parsing attributes in process `syz.1.12798'. [ 937.453256][ T2625] syzkaller1: entered promiscuous mode [ 937.459415][ T2625] syzkaller1: entered allmulticast mode [ 938.111717][ T5919] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 938.315308][ T5919] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 938.330897][ T5919] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 938.341552][ T5919] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 938.351351][ T5919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 938.360730][ T5919] usb 3-1: SerialNumber: syz [ 938.616274][ T5919] usb 3-1: 0:2 : does not exist [ 938.642412][ T5919] usb 3-1: USB disconnect, device number 53 [ 938.708270][T29618] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 938.891833][T29618] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 938.910494][T29618] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 938.926949][T29618] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 938.938976][T29618] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 938.953813][T29618] usb 7-1: SerialNumber: syz [ 939.195491][T29618] usb 7-1: 0:2 : does not exist [ 939.249564][T29618] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 939.338963][T29618] usb 7-1: USB disconnect, device number 73 [ 939.432052][ T2694] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000000004 [ 940.065632][T29618] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 940.091618][ T2727] batadv_slave_1: entered promiscuous mode [ 940.099451][ T2726] batadv_slave_1: left promiscuous mode [ 940.230173][T29618] usb 3-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 940.241004][T29618] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.249348][T29618] usb 3-1: Product: syz [ 940.253547][T29618] usb 3-1: Manufacturer: syz [ 940.258365][T29618] usb 3-1: SerialNumber: syz [ 940.265584][T29618] usb 3-1: config 0 descriptor?? [ 941.136954][T29618] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 941.152568][T29618] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 941.164157][T29618] asix 3-1:0.0: probe with driver asix failed with error -71 [ 941.177520][T29618] usb 3-1: USB disconnect, device number 54 [ 942.985997][T30581] usb 7-1: new full-speed USB device number 74 using dummy_hcd [ 943.029178][ T5940] kernel write not supported for file /input/mouse0 (pid: 5940 comm: kworker/0:5) [ 943.178726][T30581] usb 7-1: config 0 has an invalid interface number: 251 but max is 0 [ 943.191424][T30581] usb 7-1: config 0 has no interface number 0 [ 943.202174][T30581] usb 7-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 943.216389][T30581] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.224834][T30581] usb 7-1: Product: syz [ 943.229251][T30581] usb 7-1: Manufacturer: syz [ 943.232073][T29618] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 943.234576][T30581] usb 7-1: SerialNumber: syz [ 943.253498][T30581] usb 7-1: config 0 descriptor?? [ 943.404621][T29618] usb 3-1: Using ep0 maxpacket: 16 [ 943.427949][T29618] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 943.445599][T29618] usb 3-1: config 0 has no interface number 0 [ 943.451837][T29618] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 943.470679][T29618] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 943.482140][T29618] usb 3-1: config 0 interface 41 has no altsetting 0 [ 943.499256][T29618] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 943.509297][T29618] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.517506][T29618] usb 3-1: Product: syz [ 943.525525][T29618] usb 3-1: Manufacturer: syz [ 943.540145][T29618] usb 3-1: SerialNumber: syz [ 943.562617][T29618] usb 3-1: config 0 descriptor?? [ 943.572923][ T2801] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 943.581163][ T2801] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 943.915005][ T2801] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 943.944641][ T2801] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 944.414368][T29618] Error reading MAC address [ 944.425839][ T2801] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 944.443314][ T2801] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 944.686905][T29618] sr9700 3-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 944.736112][T29618] usb 3-1: USB disconnect, device number 55 [ 944.851513][T30581] asix 7-1:0.251 (unnamed net_device) (uninitialized): Invalid PHY address 0x39 [ 945.119775][ T5895] usb 7-1: USB disconnect, device number 74 [ 945.855666][ T2875] sctp: [Deprecated]: syz.6.12894 (pid 2875) Use of struct sctp_assoc_value in delayed_ack socket option. [ 945.855666][ T2875] Use struct sctp_sack_info instead [ 946.764822][ T2898] overlayfs: invalid origin (0000) [ 948.467129][ T2939] gretap0: entered promiscuous mode [ 948.746433][ T2945] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00aa with DS=0xee [ 948.776938][ T2946] input: syz0 as /devices/virtual/input/input69 [ 948.785189][ T2946] input: failed to attach handler leds to device input69, error: -6 [ 950.710644][ T30] audit: type=1800 audit(2000000154.808:3409): pid=3014 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.12943" name="nullb0" dev="devtmpfs" ino=3878 res=0 errno=0 [ 951.173218][ T5895] usb 7-1: new high-speed USB device number 75 using dummy_hcd [ 951.300917][ T5940] hid-generic 0000:0000:0000.0096: unknown main item tag 0x0 [ 951.316571][ T5940] hid-generic 0000:0000:0000.0096: hidraw0: HID v0.00 Device [syz1] on syz0 [ 951.378358][ T5895] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 951.391016][ T5895] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 951.408329][ T5895] usb 7-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 951.417467][ T5895] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 951.460077][ T5895] usb 7-1: config 0 descriptor?? [ 951.913195][ T5895] hid-led 0003:1D34:000A.0097: unknown main item tag 0x2 [ 952.125378][ T5895] hid-led 0003:1D34:000A.0097: probe with driver hid-led failed with error -71 [ 952.142913][ T5895] usb 7-1: USB disconnect, device number 75 [ 1064.985288][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1064.992335][ C0] rcu: 1-...!: (0 ticks this GP) idle=1c34/1/0x4000000000000000 softirq=161556/161556 fqs=0 [ 1065.004905][ C0] rcu: (detected by 0, t=10506 jiffies, g=161353, q=257 ncpus=2) [ 1065.012776][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1065.012828][ C1] NMI backtrace for cpu 1 [ 1065.012866][ C1] CPU: 1 UID: 0 PID: 3068 Comm: syz.2.12969 Not tainted 6.16.0-rc2-syzkaller-00047-g52da431bf03b #0 PREEMPT(full) [ 1065.012891][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1065.012907][ C1] RIP: 0010:kasan_check_range+0xa5/0x2c0 [ 1065.012943][ C1] Code: 34 19 4d 89 f4 4d 29 dc 49 83 fc 10 7f 29 4d 85 e4 0f 84 41 01 00 00 4c 89 cb 48 f7 d3 4c 01 fb 41 80 3b 00 0f 85 de 01 00 00 <49> ff c3 48 ff c3 75 ee e9 21 01 00 00 44 89 dd 83 e5 07 0f 84 b5 [ 1065.012961][ C1] RSP: 0018:ffffc90000a08b70 EFLAGS: 00000046 [ 1065.012980][ C1] RAX: 0000000000000001 RBX: ffffffffffffffff RCX: ffffffff819ed95d [ 1065.012994][ C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffffff99d17f20 [ 1065.013007][ C1] RBP: ffffc90000a08c78 R08: ffffffff99d17f23 R09: 1ffffffff33a2fe4 [ 1065.013023][ C1] R10: dffffc0000000000 R11: fffffbfff33a2fe4 R12: 0000000000000001 [ 1065.013036][ C1] R13: ffff88805f06d5e8 R14: fffffbfff33a2fe5 R15: 1ffffffff33a2fe4 [ 1065.013051][ C1] FS: 0000000000000000(0000) GS:ffff888125d85000(0000) knlGS:0000000000000000 [ 1065.013066][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1065.013079][ C1] CR2: 00007f6119f32f98 CR3: 000000000df38000 CR4: 00000000003526f0 [ 1065.013096][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1065.013107][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1065.013119][ C1] Call Trace: [ 1065.013137][ C1] [ 1065.013153][ C1] do_raw_spin_unlock+0x4d/0x240 [ 1065.013180][ C1] _raw_spin_unlock_irqrestore+0x78/0x110 [ 1065.013210][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1065.013236][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1065.013260][ C1] debug_object_activate+0x2e2/0x420 [ 1065.013289][ C1] enqueue_hrtimer+0x30/0x3a0 [ 1065.013321][ C1] __hrtimer_run_queues+0x656/0xc60 [ 1065.013361][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1065.013392][ C1] ? read_tsc+0x9/0x20 [ 1065.013420][ C1] hrtimer_interrupt+0x45b/0xaa0 [ 1065.013463][ C1] __sysvec_apic_timer_interrupt+0x10b/0x410 [ 1065.013495][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1065.013522][ C1] [ 1065.013529][ C1] [ 1065.013537][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1065.013559][ C1] RIP: 0010:lock_is_held_type+0x137/0x190 [ 1065.013586][ C1] Code: 01 75 44 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 75 4c 41 f7 c4 00 02 00 00 74 01 fb 65 48 8b 05 89 73 3a 07 <48> 3b 44 24 08 75 43 89 d8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f [ 1065.013603][ C1] RSP: 0018:ffffc900047272d0 EFLAGS: 00000206 [ 1065.013619][ C1] RAX: fafe2bb1bb0f2700 RBX: 0000000000000001 RCX: fafe2bb1bb0f2700 [ 1065.013633][ C1] RDX: 0000000000000000 RSI: ffffffff8db5a486 RDI: ffffffff8be1b800 [ 1065.013648][ C1] RBP: 00000000ffffffff R08: 0000000000000000 R09: ffffffff822cc8f7 [ 1065.013661][ C1] R10: dffffc0000000000 R11: fffff940002e65a9 R12: 0000000000000246 [ 1065.013675][ C1] R13: ffff888030045a00 R14: ffffffff8e13eda0 R15: 0000000000000001 [ 1065.013693][ C1] ? page_table_check_clear+0x187/0x700 [ 1065.013729][ C1] page_ext_lookup+0xe7/0x180 [ 1065.013752][ C1] ? page_table_check_clear+0x187/0x700 [ 1065.013776][ C1] page_table_check_clear+0x278/0x700 [ 1065.013801][ C1] ? vm_normal_page+0xb7/0x230 [ 1065.013831][ C1] unmap_page_range+0x3249/0x41c0 [ 1065.013890][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 1065.013924][ C1] ? unmap_vmas+0x144/0x580 [ 1065.013954][ C1] unmap_vmas+0x399/0x580 [ 1065.013987][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 1065.014030][ C1] exit_mmap+0x248/0xb50 [ 1065.014054][ C1] ? uprobe_clear_state+0x20f/0x290 [ 1065.014081][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 1065.014102][ C1] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1065.014140][ C1] ? __pfx_exit_aio+0x10/0x10 [ 1065.014169][ C1] ? uprobe_clear_state+0x274/0x290 [ 1065.014191][ C1] ? mm_update_next_owner+0xa7/0x870 [ 1065.014216][ C1] __mmput+0x118/0x420 [ 1065.014246][ C1] exit_mm+0x1da/0x2c0 [ 1065.014267][ C1] ? __pfx_exit_mm+0x10/0x10 [ 1065.014289][ C1] ? rcu_is_watching+0x15/0xb0 [ 1065.014319][ C1] do_exit+0x640/0x22e0 [ 1065.014344][ C1] ? do_raw_spin_lock+0x121/0x290 [ 1065.014366][ C1] ? __pfx_do_exit+0x10/0x10 [ 1065.014402][ C1] do_group_exit+0x21c/0x2d0 [ 1065.014423][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1065.014451][ C1] get_signal+0x125e/0x1310 [ 1065.014490][ C1] arch_do_signal_or_restart+0x9a/0x750 [ 1065.014519][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1065.014552][ C1] ? exit_to_user_mode_loop+0x40/0x110 [ 1065.014580][ C1] exit_to_user_mode_loop+0x75/0x110 [ 1065.014605][ C1] do_syscall_64+0x2bd/0x3b0 [ 1065.014636][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1065.014662][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1065.014681][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1065.014704][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1065.014722][ C1] RIP: 0033:0x7f611918e929 [ 1065.014739][ C1] Code: Unable to access opcode bytes at 0x7f611918e8ff. [ 1065.014749][ C1] RSP: 002b:00007f6119f330e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1065.014768][ C1] RAX: fffffffffffffe00 RBX: 00007f61193b5fa8 RCX: 00007f611918e929 [ 1065.014782][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f61193b5fa8 [ 1065.014795][ C1] RBP: 00007f61193b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1065.014807][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f61193b5fac [ 1065.014820][ C1] R13: 0000000000000000 R14: 00007fff0affa0b0 R15: 00007fff0affa198 [ 1065.014843][ C1] [ 1065.015816][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10505 jiffies! g161353 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 1065.573106][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=69309 [ 1065.581231][ C0] rcu: rcu_preempt kthread starved for 10506 jiffies! g161353 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 1065.592751][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1065.602765][ C0] rcu: RCU grace-period kthread stack dump: [ 1065.608780][ C0] task:rcu_preempt state:I stack:26888 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 1065.620939][ C0] Call Trace: [ 1065.624269][ C0] [ 1065.627252][ C0] __schedule+0x16a2/0x4cb0 [ 1065.631858][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 1065.637113][ C0] ? schedule+0x165/0x360 [ 1065.641485][ C0] ? __lock_acquire+0xab9/0xd20 [ 1065.646727][ C0] ? __pfx___schedule+0x10/0x10 [ 1065.651817][ C0] ? schedule+0x91/0x360 [ 1065.656110][ C0] schedule+0x165/0x360 [ 1065.660316][ C0] schedule_timeout+0x12b/0x270 [ 1065.665209][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1065.670628][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1065.675968][ C0] ? prepare_to_swait_event+0x341/0x380 [ 1065.681604][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 1065.686512][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 1065.691500][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1065.697150][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1065.702957][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1065.708607][ C0] ? finish_swait+0xcd/0x1f0 [ 1065.713399][ C0] rcu_gp_kthread+0x99/0x390 [ 1065.718787][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1065.724360][ C0] ? __kthread_parkme+0x7b/0x200 [ 1065.729627][ C0] ? __kthread_parkme+0x1a1/0x200 [ 1065.735026][ C0] kthread+0x70e/0x8a0 [ 1065.739282][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1065.744570][ C0] ? __pfx_kthread+0x10/0x10 [ 1065.749293][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1065.754573][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1065.759843][ C0] ? __pfx_kthread+0x10/0x10 [ 1065.764481][ C0] ret_from_fork+0x3f9/0x770 [ 1065.769308][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1065.774474][ C0] ? __switch_to_asm+0x39/0x70 [ 1065.779362][ C0] ? __switch_to_asm+0x33/0x70 [ 1065.784151][ C0] ? __pfx_kthread+0x10/0x10 [ 1065.788777][ C0] ret_from_fork_asm+0x1a/0x30 [ 1065.793592][ C0]