last executing test programs: 13.806753925s ago: executing program 2 (id=4855): socket$nl_generic(0x10, 0x3, 0x10) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r1 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$sysctl(r1, &(0x7f0000000300)='1\x00', 0xffffff4a) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000003080)=[{}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000010c0)=[{&(0x7f0000000140)="5832b113e20ef2a80611015dcbbee21557854650d326be5e8c0d83738ce384b49d9991faffff8e53f45df0cec25e27881102cf5c68593321686ac36cc5fcb40e1125043c5431b3a0238681ad4a26ca97480df472394905de8138", 0x5a}], 0x1) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x48009}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xe7, 0xc2, 0xf7, 0x8, 0x421, 0x335, 0x5f0e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x2, 0xff}}]}}]}}, 0x0) 13.80571108s ago: executing program 4 (id=4856): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0xfffd) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ec278ac0e901d7d12a1c4688b80e72824458c10770526462c19f2f4f15d40ed7f552fb65936b21d340fd96774fa221d5", @ANYRES16=r2, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32], 0x34}}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000500), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r5, &(0x7f0000000300)={&(0x7f00000000c0)={0x1d, r6}, 0x10, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="4533e5b208a3a3e1768107eecd235f2313cb276872a32bfcb03680a312846707d1b7690f63e0576c422a3bcd8855a8a9724cbfe326bf3bd4dc52e9a6c749ae267ec2977907313d30afa3a961c23ec1e5f9ccb233e2de31cda190b453"], 0x48}}, 0x4000000) r7 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) r9 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r9, &(0x7f0000000000)={0x1d, r8, 0x3, {0x0, 0x1}}, 0x18) bind$can_j1939(r7, &(0x7f0000000080)={0x1d, r8, 0x3}, 0x18) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r10, 0x0, 0x20000023896) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) msgget$private(0x0, 0x0) 13.537953697s ago: executing program 1 (id=4857): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, 0x0) shutdown(r1, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'geneve1\x00', 0x0}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00') read$FUSE(r3, &(0x7f0000001c00)={0x2020}, 0x2020) preadv(r3, &(0x7f0000000280), 0x0, 0x0, 0x0) read(r3, &(0x7f0000001b00)=""/194, 0xc2) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="0b050600f4ff020006004788aa96a13bb1000011000086", 0x17, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) r5 = syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r5, 0x40184810, &(0x7f0000000000)={0x3, 0xffffffff, 0x3, 0x0, 0x1000}) syz_io_uring_setup(0x5dd, &(0x7f0000000200), &(0x7f0000000280), 0x0) 11.350511866s ago: executing program 4 (id=4859): syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r0 = getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d00000067000000050000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002140)={&(0x7f0000000080)='thermal_temperature\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000fcffffff000000000000210085000000360000009500070000000000b83f3584230b8f5ec8921327291cf4880dd3a91af830f8a476ba1b51d4eb67103b000000000000000000000000000000640f9922d207e93470686f20ad"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x1800000000000060, 0x0, 0x0, 0x0, 0x0, 0x2300, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/wireless\x00') unshare(0x62040200) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) dup(r7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x200000000000027c, &(0x7f0000000000)=ANY=[@ANYBLOB="1800e2ffffff000000000000a9f795f381787068", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54a}, 0x90) ptrace(0x10, r4) ptrace$pokeuser(0x6, r4, 0x358, 0x0) 10.120000066s ago: executing program 0 (id=4863): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d640500000000006504040001000000"], 0x0}, 0x90) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x38, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9.617960654s ago: executing program 0 (id=4864): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000040)={r0}) 9.593134066s ago: executing program 0 (id=4865): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f00000000c0)='system.posix_acl_access\x00', 0x0, 0x24, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f00000001c0)={{@host}, @my=0x0, 0x0, 0x0, 0x2449, 0x0, 0x100000000008000, 0x0, 0xfffffffe}) r2 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0xfff) syz_emit_ethernet(0x5e, &(0x7f00000001c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x28, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x22, 0x2}, @exp_fastopen={0xfe, 0xf, 0xf989, "467cb10d460896a479c096"}]}}}}}}}}, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000040)={{@my=0x1}, @host, 0x0, 0x0, 0x7}) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r1, 0x7a4, &(0x7f0000000180)={{@my=0x1}, 0x5, 0x0, 0x9, 0x8}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x4) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 9.332381232s ago: executing program 4 (id=4866): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./file1\x00', 0x14) openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x202081, 0xf9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r3}, 0x10) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0xfffffc}, 0x10) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) 7.191084823s ago: executing program 4 (id=4869): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_0\x00'}) r1 = openat$dlm_plock(0xffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ppoll(&(0x7f0000000b80)=[{r1}], 0x1, &(0x7f0000000bc0), 0x0, 0x0) r2 = getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe55}, 0x80) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000440)={0x6, @local, 0x0, 0xfffffffc, 'lblc\x00'}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x8, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x14, r4, 0x6c04073ee59f7719, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') 6.988163199s ago: executing program 2 (id=4870): r0 = getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) capset(&(0x7f0000000080)={0x20071026}, 0x0) syz_open_procfs(0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0xffff0000, 0xb, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea4", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.931584053s ago: executing program 1 (id=4871): r0 = socket$netlink(0x10, 0x3, 0x0) getpeername(r0, &(0x7f0000001100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000001180)=0x80) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setitimer(0x0, 0x0, 0x0) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB="05"], 0x9) sendto$inet6(r2, &(0x7f0000000100)="ea", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x19, &(0x7f0000000340)={0x0, 0x5}, 0x8) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000380)) r3 = socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x5, &(0x7f0000000140)=[{0x849d, 0x5, 0x3, 0x7}, {0x1915, 0x20, 0x5, 0x9}, {0x4, 0x2, 0x9, 0x8298}, {0x7fff, 0x1, 0x6, 0x2}, {0x3, 0x5, 0xf9, 0xffff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{}, {0x7c}, {0x6}]}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0) write$binfmt_script(r1, &(0x7f00000004c0)={'#! ', './file0'}, 0x1f7000) 6.905734409s ago: executing program 0 (id=4873): socket$inet_mptcp(0x2, 0x1, 0x106) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x9, 0x4, 0x2}, 0x48) socket$inet6(0xa, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000ffff0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @val=@tcx}, 0x40) syz_emit_ethernet(0x5e, &(0x7f0000000340)={@local, @dev, @val={@val={0x8100}}, {@canfd={0xd, {{}, 0x0, 0x0, 0x0, 0x0, "ec7ab49f42266b558197758939c3a67064eb2413deb6d588b153902f5348321b2aa24fcea6549a091e651e6c1d3053eef4b8f189054244df8c1353433e834d4c"}}}}, 0x0) 6.532492427s ago: executing program 0 (id=4874): syz_usb_connect(0x0, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x5f, 0x2a, 0xb4, 0x20, 0xc72, 0xd, 0x279b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdb, 0xa2, 0x92}}]}}]}}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x13, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000002440)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x202000, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000023c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendto$inet6(r2, &(0x7f0000847fff)="03", 0xfffffffffffffd9f, 0x0, 0x0, 0x25) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) eventfd(0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) 5.432011987s ago: executing program 3 (id=4876): sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$inet_udp(0x2, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x6, @private2}, 0x1c) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) syz_open_dev$vim2m(0x0, 0x0, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r4 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90b, 0xf4c, '\x00', @p_u16=&(0x7f00000000c0)}}) prctl$PR_MCE_KILL(0x43, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000b705000000"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x90) 5.321972045s ago: executing program 4 (id=4877): openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040e07000220"], 0xa) 5.314044955s ago: executing program 1 (id=4878): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500800000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x3, 0x1004, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000e800000000000000000000001811", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000240)="03", 0x1, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000140)="670d04752946552db0a4aae96a99d78aef9444def36cd4f5cb65", 0x1a, 0xffffffffffffffff) openat$mixer(0xffffffffffffff9c, 0x0, 0xc0400, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) mlock2(&(0x7f0000765000/0x1000)=nil, 0x1002, 0x0) 4.270030723s ago: executing program 3 (id=4879): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@rand_addr=0x64010102, @in6=@mcast1, 0x0, 0x7, 0x4e21, 0x8, 0xa, 0x0, 0xa0, 0x1}, {0x40b, 0x4, 0x8, 0x0, 0x8, 0x1, 0x0, 0x5}, {0x0, 0x3cb, 0x7f}, 0x8, 0x6e6bbc, 0x0, 0x0, 0x3}, {{@in=@multicast2, 0x4d2, 0x33}, 0x4, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x1, 0x4, 0x2, 0x1000, 0x2}}, 0xe8) socket(0x2, 0x80805, 0x0) socket$inet(0x2, 0x80001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0xd, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000950000000000000018400000ffffffff000000000000000018100000", @ANYRES32, @ANYBLOB="00000000000000001850000000000000000000000000000018400000f8ffffff00000000000000009500000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x2, &(0x7f0000000940), 0x10}, 0x90) syz_open_dev$tty20(0xc, 0x4, 0x1) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x90) 3.623200045s ago: executing program 1 (id=4880): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0xa, 'c'}], 0x18, 0x500}}], 0x2, 0x0) 3.011370218s ago: executing program 4 (id=4881): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, 0x0) shutdown(r1, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'geneve1\x00', 0x0}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00') read$FUSE(r3, &(0x7f0000001c00)={0x2020}, 0x2020) preadv(r3, &(0x7f0000000280), 0x0, 0x0, 0x0) read(r3, &(0x7f0000001b00)=""/194, 0xc2) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="0b050600f4ff020006004788aa96a13bb1000011000086", 0x17, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) r5 = syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r5, 0x40184810, &(0x7f0000000000)={0x3, 0xffffffff, 0x3, 0x0, 0x1000}) syz_io_uring_setup(0x5dd, &(0x7f0000000200), &(0x7f0000000280), 0x0) 3.008551601s ago: executing program 2 (id=4882): r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x48, r0, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x48}}, 0x0) 2.920493558s ago: executing program 1 (id=4883): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180800000000000000000000000000008510000006000000180000", @ANYRES32, @ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x2, 0xe6, &(0x7f0000000080)=""/230, 0x0, 0x4e}, 0x90) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000000)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0xc0d0) sendmsg$NL80211_CMD_JOIN_IBSS(r6, 0x0, 0x0) r7 = dup(r4) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80e85411, &(0x7f00000022c0)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000240)="26670fae4d0065260f01cf363e0fc73f3edf94dcfbd9eb2e660fc7b59c6a0f20d86635080000000f22d80f38008100800fc7ad0900baf80c66b8fa59ef8366efbafc0cb8f3ffef", 0x47}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="c1"], 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000300)={{0x2, 0x4e24, @multicast2}, {0x1, @remote}, 0x6c80a8e6c1c98a42, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x29}}, 'veth1_vlan\x00'}) 2.895773235s ago: executing program 3 (id=4884): socket$inet_mptcp(0x2, 0x1, 0x106) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x9, 0x4, 0x2}, 0x48) socket$inet6(0xa, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000ffff0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @val=@tcx}, 0x40) syz_emit_ethernet(0x5e, &(0x7f0000000340)={@local, @dev, @val={@val={0x8100}}, {@canfd={0xd, {{}, 0x0, 0x0, 0x0, 0x0, "ec7ab49f42266b558197758939c3a67064eb2413deb6d588b153902f5348321b2aa24fcea6549a091e651e6c1d3053eef4b8f189054244df8c1353433e834d4c"}}}}, 0x0) 2.673093461s ago: executing program 3 (id=4885): r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000600)="580000001400192340835980040d8c560a067f9e45ff810500000000070058000b480400945f640094272d7061d328b92d000000000000", 0x37}], 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000"]) 2.614304435s ago: executing program 2 (id=4886): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000040)={r0}) 2.326432412s ago: executing program 2 (id=4887): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$sg(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffff2e, &(0x7f0000000200)=0xfffffffffffffff9) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sysinfo(&(0x7f0000000100)=""/79) socket$inet(0x2, 0x4, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r2 = dup(r1) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[], 0x6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r3, 0x6, 0x4, 0x0, &(0x7f0000002000)) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x20c303, 0x0) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x38, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@beacon, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x18}]]}, 0x38}, 0x1, 0x0, 0x0, 0xfe3685db0afff645}, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, 0x0, 0x0) r8 = socket(0x10, 0x3, 0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x64, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x4}, {0xffff, 0xffe0}, {0x7}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x3, 0x2}}}, @qdisc_kind_options=@q_mq={0x7}, @qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0xfffd}]}}, @TCA_RATE={0x6}]}, 0x64}}, 0x0) 1.409619174s ago: executing program 3 (id=4888): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, r1, 0x331, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) 1.308876683s ago: executing program 0 (id=4889): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d00000067000000050000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) pipe2$9p(0x0, 0x0) close_range(0xffffffffffffffff, r1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='batadv0\x00', 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r3 = socket$inet(0x2, 0x6, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, &(0x7f0000000040)=0x3, 0xffffffffffffffe9) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) recvmmsg(r3, &(0x7f00000054c0)=[{{&(0x7f0000000340)=@sco={0x1f, @none}, 0x80, &(0x7f0000000940)=[{&(0x7f00000004c0)=""/180, 0xb4}, {&(0x7f0000000580)=""/236, 0xec}, {&(0x7f0000000240)}, {&(0x7f0000000680)=""/77, 0x4d}, {&(0x7f0000000780)=""/168, 0xa8}, {&(0x7f00000002c0)=""/11, 0xb}, {&(0x7f0000000840)=""/223, 0xdf}], 0x7, &(0x7f00000009c0)=""/252, 0xfc}, 0x9}, {{&(0x7f0000000ac0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000440)}, 0x6}, {{&(0x7f0000000b40)=@rc, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000000700)=""/41, 0x29}, {&(0x7f0000000bc0)=""/140, 0x8c}, {&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000001c80)=""/30, 0x1e}, {&(0x7f0000001cc0)=""/13, 0xd}, {&(0x7f0000001d00)=""/218, 0xda}, {&(0x7f0000001e00)=""/65, 0x41}, {&(0x7f0000001e80)=""/121, 0x79}, {&(0x7f0000001f00)=""/185, 0xb9}], 0x9, &(0x7f0000002080)=""/82, 0x52}, 0xe}, {{0x0, 0x0, &(0x7f0000002180)=[{&(0x7f0000002100)=""/65, 0x41}], 0x1}, 0x8}, {{&(0x7f00000021c0)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002240)=""/90, 0x5a}, {&(0x7f00000022c0)=""/193, 0xc1}, {&(0x7f00000023c0)=""/192, 0xc0}, {&(0x7f0000002480)=""/66, 0x42}, {&(0x7f0000002500)=""/8, 0x8}, {&(0x7f0000002540)=""/230, 0xe6}, {&(0x7f0000002640)=""/186, 0xba}], 0x7, &(0x7f0000002780)=""/214, 0xd6}, 0xec}, {{&(0x7f0000002880)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000002900)=""/236, 0xec}, {&(0x7f0000002a00)=""/193, 0xc1}, {&(0x7f0000002b00)=""/55, 0x37}, {&(0x7f0000002b40)=""/83, 0x53}, {&(0x7f0000002bc0)=""/134, 0x86}, {&(0x7f0000002c80)=""/4096, 0x1000}, {&(0x7f0000003c80)=""/32, 0x20}], 0x7, &(0x7f0000003d40)=""/185, 0xb9}, 0x340}, {{0x0, 0x0, &(0x7f0000004040)=[{&(0x7f0000005740)=""/217, 0xd9}, {&(0x7f0000003f00)=""/81, 0x51}, {&(0x7f0000003f80)=""/98, 0x62}], 0x3, &(0x7f0000004080)=""/60, 0x3c}, 0xf48}, {{&(0x7f00000040c0)=@isdn, 0x80, &(0x7f0000005200)=[{&(0x7f0000004140)=""/94, 0x5e}, {&(0x7f00000041c0)=""/58, 0x3a}, {&(0x7f0000004200)=""/4096, 0x1000}], 0x3, &(0x7f0000005240)=""/203, 0xcb}, 0x9}, {{0x0, 0x0, &(0x7f0000005340)}, 0x8}, {{&(0x7f0000005380)=@generic, 0x80, &(0x7f0000005440)=[{&(0x7f0000005400)=""/35, 0x23}], 0x1, &(0x7f0000005480)=""/52, 0x34}, 0xc4}], 0xa, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f00000000c0)=ANY=[], 0xc63b9e35) sched_setscheduler(0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e01000027f00000100000000010000007f000001"], 0x14) connect$unix(0xffffffffffffffff, 0x0, 0x0) 1.117850362s ago: executing program 3 (id=4890): gettid() r0 = getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000000400)=[{0x0}], 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000040)={0x5}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000200)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) socket$qrtr(0x2a, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r3 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r3, 0x80045530, &(0x7f0000001b40)=""/193) setsockopt$sock_int(r2, 0x1, 0x31, &(0x7f0000000200), 0x4) listen(0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee000000000000000002", 0x56}], 0x1) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_clone(0x100100, &(0x7f0000003100), 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 342.530265ms ago: executing program 2 (id=4891): socket$inet6(0xa, 0x3, 0x6) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x5451, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) semget$private(0x0, 0x3, 0x200) signalfd(0xffffffffffffffff, &(0x7f0000001200), 0x8) r0 = openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x5452, &(0x7f0000000cc0)={'bridge_slave_0\x00', {0x2, 0x0, @empty}}) dup2(0xffffffffffffffff, r0) memfd_create(&(0x7f00000000c0)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o8\xaaK\xa5\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G\xb8\xea\x93aG\xd4\xfd\x1eB\xdc`b\xce\xbbHe)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HOA\xc8mCR\xfc\xcb$u3\xec\xde%\xd0]\xd8\xebD\x82S\x17?\xd6As\xe3\xb1\x9aF\xe6\xba[\xc7%\x88 \xeeQR\x9f\x81\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11)\xfb\xe0\tm\x17\xd8\xda@4\xbdj*T\x1e^\xf7o\xee\xdf\r\xb8w\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!\x9c\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\x9d\xb8\x89>\xc9\xf2\x16\x13{\x1aRo:\x16\x00+$\xedX\xb7KVqU\x18\xe2k\xbd\x0eV\x16\x14g\x1b\xb0\xcf\x93', 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=4892): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0xfffd) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ec278ac0e901d7d12a1c4688b80e72824458c10770526462c19f2f4f15d40ed7f552fb65936b21d340fd96774fa221d5", @ANYRES16=r2, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32, @ANYBLOB="1800508014000400ec4b8736747e49e1d75d"], 0x34}}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000500), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r5, &(0x7f0000000300)={&(0x7f00000000c0)={0x1d, r6}, 0x10, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="4533e5b208a3a3e1768107eecd235f2313cb276872a32bfcb03680a312846707d1b7690f63e0576c422a3bcd8855a8a9724cbfe326bf3bd4dc52e9a6c749ae267ec2977907313d30afa3a961c23ec1e5f9ccb233e2de31cda190b453"], 0x48}}, 0x4000000) r7 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) r9 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r9, &(0x7f0000000000)={0x1d, r8, 0x3, {0x0, 0x1}}, 0x18) bind$can_j1939(r7, &(0x7f0000000080)={0x1d, r8, 0x3}, 0x18) close(r5) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r10, 0x0, 0x20000023896) gettid() rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) msgget$private(0x0, 0x0) kernel console output (not intermixed with test programs): b 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1055.628296][T17366] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1055.650686][ T5281] usb 3-1: config 0 descriptor?? [ 1055.676305][T17366] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1056.367720][T17563] xt_HMARK: proto mask must be zero with L3 mode [ 1056.378092][T17366] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1056.448039][T17366] 8021q: adding VLAN 0 to HW filter on device team0 [ 1056.539017][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 1056.546330][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1056.736242][ T6776] bridge0: port 2(bridge_slave_1) entered blocking state [ 1056.743578][ T6776] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1056.819297][T17322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1057.063237][ T5281] usb 3-1: string descriptor 0 read error: -71 [ 1057.093610][ T5281] usb 3-1: USB disconnect, device number 31 [ 1059.316954][T17322] veth0_vlan: entered promiscuous mode [ 1059.336330][T17366] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1059.369891][T17322] veth1_vlan: entered promiscuous mode [ 1059.580938][T17322] veth0_macvtap: entered promiscuous mode [ 1059.661474][T17366] veth0_vlan: entered promiscuous mode [ 1059.670253][T17322] veth1_macvtap: entered promiscuous mode [ 1059.705242][T17366] veth1_vlan: entered promiscuous mode [ 1059.824432][T17322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1059.862446][T17322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1059.885987][T17322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1059.914406][T17322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1059.945142][T17322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1059.985540][T17322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1060.044877][T17322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1060.179113][T17322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1060.218351][T17322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1060.269064][T17322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1060.306421][T17322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1060.320466][T17322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1060.351989][T17322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1060.389384][T17322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1060.485319][T17322] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.521679][T17322] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.551713][T17322] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.562150][T17322] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.663386][T17366] veth0_macvtap: entered promiscuous mode [ 1061.330542][ T5284] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1061.455506][T17366] veth1_macvtap: entered promiscuous mode [ 1061.575171][T17366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1061.596784][T17366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1061.612233][T17366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1061.622932][T17366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1061.635560][T17366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1061.650999][T17366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1061.664468][T17366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1061.675730][ T5284] usb 1-1: Using ep0 maxpacket: 32 [ 1061.685121][T17366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1061.702779][ T5284] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1061.715295][ T5284] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1061.736213][T17366] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1061.747378][ T5284] usb 1-1: Product: syz [ 1061.755229][ T5284] usb 1-1: Manufacturer: syz [ 1061.760610][ T5284] usb 1-1: SerialNumber: syz [ 1061.794440][T17366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1061.812749][ T5284] usb 1-1: config 0 descriptor?? [ 1061.836083][T17366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1061.846517][T17366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1061.869980][T17366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1061.882782][T17366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1061.904581][T17366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1061.921935][T17366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1061.938528][T17366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1061.996706][T17366] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1062.016352][T17366] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1062.033020][T17366] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1062.050540][T17366] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1062.075460][T17366] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1062.134412][T12218] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1062.360510][T12218] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1062.396895][T12218] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1062.430657][T12218] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1062.451871][T12218] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1062.531013][T12218] usb 2-1: config 0 descriptor?? [ 1062.551029][T12218] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1062.700912][ T5284] peak_usb 1-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 1062.728499][T17513] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1062.772356][ T5284] peak_usb 1-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 1062.780820][T17513] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1062.902685][ T5284] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -71 [ 1062.960190][T17513] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1062.980713][T17513] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1063.025159][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1063.061967][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1063.086465][T12480] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1063.106923][ T5284] usb 1-1: USB disconnect, device number 45 [ 1063.136673][T12480] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1064.743474][T17632] bridge0: entered allmulticast mode [ 1065.066968][T17632] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4113'. [ 1065.076441][T17632] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4113'. [ 1066.577897][T16348] usb 2-1: USB disconnect, device number 45 [ 1073.759677][T13315] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1074.631969][T13315] usb 1-1: Using ep0 maxpacket: 8 [ 1074.677945][T13315] usb 1-1: New USB device found, idVendor=0781, idProduct=0001, bcdDevice= 2.00 [ 1074.707538][T13315] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1074.731175][T13315] usb 1-1: Product: syz [ 1074.779734][T13315] usb 1-1: Manufacturer: syz [ 1074.792194][T13315] usb 1-1: SerialNumber: syz [ 1074.831205][T13315] usb 1-1: config 0 descriptor?? [ 1074.867464][T13315] usb-storage 1-1:0.0: USB Mass Storage device detected [ 1074.928160][T13315] usb-storage 1-1:0.0: Quirks match for vid 0781 pid 0001: 1 [ 1074.936645][T13315] usb-storage 1-1:0.0: This device (0781,0001,0200 S 06 P a4) has an unneeded SubClass entry in unusual_devs.h (kernel 6.11.0-rc6-syzkaller-00019-g67784a74e258) [ 1074.936645][T13315] Please send a copy of this message to and [ 1075.141999][ T5281] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1075.371972][ T5281] usb 3-1: Using ep0 maxpacket: 32 [ 1075.395308][ T5281] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1075.424161][ T5281] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1076.160817][ T5281] usb 3-1: Product: syz [ 1076.165620][ T5281] usb 3-1: Manufacturer: syz [ 1076.170257][ T5281] usb 3-1: SerialNumber: syz [ 1076.194889][ T5281] usb 3-1: config 0 descriptor?? [ 1076.368895][ T5283] usb 1-1: USB disconnect, device number 46 [ 1076.523999][T17691] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:0000:0000:0000 with DS=0xd [ 1076.691905][T16348] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1076.927305][T16348] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1076.955199][ T1853] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1076.957760][T16348] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1077.023028][T16348] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1077.051674][T16348] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1077.089628][T16348] usb 2-1: config 0 descriptor?? [ 1077.127271][ T5281] peak_usb 3-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 1077.139694][T16348] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1077.163680][ T5281] peak_usb 3-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 1077.164477][ T1853] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1077.203050][ T1853] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1077.254852][ T1853] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1077.263896][ T5281] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -71 [ 1077.282023][ T5281] usb 3-1: USB disconnect, device number 32 [ 1077.419926][ T1853] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1077.472260][ T1853] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1077.481508][ T1853] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1077.501955][ T1853] usb 4-1: Product: syz [ 1077.512043][ T1853] usb 4-1: Manufacturer: syz [ 1077.598767][ T1853] cdc_wdm 4-1:1.0: skipping garbage [ 1077.613116][ T1853] cdc_wdm 4-1:1.0: skipping garbage [ 1077.620893][ T1853] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1077.764016][T17702] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4133'. [ 1077.982729][T17705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4134'. [ 1078.069961][ T1853] usb 4-1: USB disconnect, device number 37 [ 1079.852738][ T1853] usb 2-1: USB disconnect, device number 46 [ 1081.694025][T17735] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:0000:0000:0000 with DS=0xd [ 1082.162074][T12218] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1082.404427][T12218] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1082.425872][T12218] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1082.492782][T12218] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1082.522559][T12218] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1082.554412][T12218] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1082.567648][T12218] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1082.575895][ T5284] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1082.587161][T12218] usb 1-1: Product: syz [ 1082.600732][T12218] usb 1-1: Manufacturer: syz [ 1082.618498][T12218] cdc_wdm 1-1:1.0: skipping garbage [ 1082.630285][T12218] cdc_wdm 1-1:1.0: skipping garbage [ 1082.639262][T12218] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1082.639548][T17746] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4146'. [ 1082.774841][ T5284] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1082.830558][ T5284] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1082.867701][ T5284] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1082.899525][ T5284] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1086.232186][ T5237] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 1088.195809][ T5237] Bluetooth: hci5: Injecting HCI hardware error event [ 1088.205595][T16567] Bluetooth: hci5: hardware error 0x00 [ 1088.218766][ T5284] usb 4-1: config 0 descriptor?? [ 1088.278173][ T5284] usb 4-1: can't set config #0, error -71 [ 1088.286100][ T5284] usb 4-1: USB disconnect, device number 38 [ 1088.438233][T16348] usb 1-1: USB disconnect, device number 47 [ 1088.851294][T17763] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4150'. [ 1090.467171][T16567] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1092.013192][T17791] netlink: 'syz.0.4160': attribute type 4 has an invalid length. [ 1092.099065][T17793] netlink: 'syz.0.4160': attribute type 4 has an invalid length. [ 1092.314231][T17788] netlink: 4068 bytes leftover after parsing attributes in process `syz.1.4159'. [ 1093.018470][ T5281] libceph: connect (1)[c::]:6789 error -101 [ 1093.024720][ T5281] libceph: mon0 (1)[c::]:6789 connect error [ 1093.292661][ T5281] libceph: connect (1)[c::]:6789 error -101 [ 1093.324463][ T5281] libceph: mon0 (1)[c::]:6789 connect error [ 1093.377208][T17805] ceph: No mds server is up or the cluster is laggy [ 1094.802046][ T5284] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1094.864358][ T5283] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1095.042034][ T5284] usb 5-1: Using ep0 maxpacket: 32 [ 1095.066756][ T5284] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1095.076165][ T5284] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.111075][ T5284] usb 5-1: Product: syz [ 1095.131242][ T5284] usb 5-1: Manufacturer: syz [ 1095.151673][ T5284] usb 5-1: SerialNumber: syz [ 1095.193650][ T5284] usb 5-1: config 0 descriptor?? [ 1095.274426][ T5283] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1095.304593][ T5283] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1095.361865][ T5283] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1095.387420][ T5283] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1095.418889][ T5283] usb 2-1: config 0 descriptor?? [ 1095.692809][ T5283] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1096.677698][T17845] bridge0: entered allmulticast mode [ 1096.753047][T17845] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4171'. [ 1096.762103][T17845] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4171'. [ 1097.510471][ T29] audit: type=1326 audit(1725341185.651:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17847 comm="syz.0.4173" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3293b79eb9 code=0x0 [ 1098.679054][T16567] Bluetooth: hci2: command 0x0406 tx timeout [ 1098.688642][ T5284] peak_usb 5-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 1098.706804][ T5284] peak_usb 5-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 1098.745273][ T5281] usb 2-1: USB disconnect, device number 47 [ 1098.977635][ T5284] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -71 [ 1099.052728][ T5284] usb 5-1: USB disconnect, device number 31 [ 1099.281939][T16348] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1100.201957][T16348] usb 1-1: Using ep0 maxpacket: 32 [ 1100.230490][T16348] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1100.381898][T16348] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1100.389946][T16348] usb 1-1: Product: syz [ 1100.416256][T16348] usb 1-1: Manufacturer: syz [ 1100.426629][T16348] usb 1-1: SerialNumber: syz [ 1100.503221][T16348] usb 1-1: config 0 descriptor?? [ 1101.709236][T17887] netlink: 4068 bytes leftover after parsing attributes in process `syz.1.4183'. [ 1102.311351][T16348] peak_usb 1-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 1102.420000][ T29] audit: type=1326 audit(1725341190.561:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17895 comm="syz.3.4187" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f14d9f79eb9 code=0x0 [ 1102.475581][T16348] peak_usb 1-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 1102.612565][T13315] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1102.631900][T16348] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -71 [ 1103.097404][T16348] usb 1-1: USB disconnect, device number 48 [ 1103.500999][T13315] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1103.600628][T17902] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:0000:0000:0000 with DS=0xd [ 1103.651309][T13315] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1103.719315][T13315] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1103.739541][T13315] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1103.788006][T13315] usb 3-1: config 0 descriptor?? [ 1103.819044][T13315] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1104.212766][T12218] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1105.382133][T12218] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1105.406310][T12218] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1105.418007][T12218] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1105.427760][T12218] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1105.452150][T12218] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1105.481186][T12218] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1105.511935][T12218] usb 5-1: Product: syz [ 1105.519874][T12218] usb 5-1: Manufacturer: syz [ 1105.530535][T12218] usb 5-1: can't set config #1, error -71 [ 1105.537906][T13315] usb 3-1: USB disconnect, device number 33 [ 1105.545806][T12218] usb 5-1: USB disconnect, device number 32 [ 1106.123184][T17937] overlayfs: missing 'lowerdir' [ 1106.331638][T17942] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4194'. [ 1106.349044][T17942] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4194'. [ 1106.589915][T17935] netlink: 4068 bytes leftover after parsing attributes in process `syz.0.4198'. [ 1106.881919][T12218] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1107.512200][T12218] usb 5-1: Using ep0 maxpacket: 32 [ 1107.531985][T12218] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1107.571887][T12218] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1107.579930][T12218] usb 5-1: Product: syz [ 1107.591000][T12218] usb 5-1: Manufacturer: syz [ 1107.595720][T12218] usb 5-1: SerialNumber: syz [ 1107.669419][T12218] usb 5-1: config 0 descriptor?? [ 1108.443441][T13315] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1108.991963][ T1853] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1109.000504][T13315] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1109.020433][T12218] peak_usb 5-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 1109.030303][T12218] peak_usb 5-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 1109.046288][T13315] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1109.105143][T13315] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1109.124074][T12218] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -71 [ 1109.155466][T12218] usb 5-1: USB disconnect, device number 33 [ 1109.157596][T13315] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1109.203118][T13315] usb 2-1: config 0 descriptor?? [ 1109.211243][ T1853] usb 3-1: Using ep0 maxpacket: 32 [ 1109.258122][ T1853] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1109.268029][ T1853] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1109.269645][T13315] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1109.294180][ T1853] usb 3-1: Product: syz [ 1109.298383][ T1853] usb 3-1: Manufacturer: syz [ 1109.339757][ T1853] usb 3-1: SerialNumber: syz [ 1109.371401][ T1853] usb 3-1: config 0 descriptor?? [ 1110.398841][T17993] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4211'. [ 1110.616933][ T1853] peak_usb 3-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 1110.626743][ T1853] peak_usb 3-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 1110.733208][ T1853] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -71 [ 1110.759788][ T1853] usb 3-1: USB disconnect, device number 34 [ 1111.088818][T17998] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4214'. [ 1112.642964][ T1853] usb 2-1: USB disconnect, device number 48 [ 1115.799327][ T29] audit: type=1326 audit(1725341203.831:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18026 comm="syz.4.4223" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc7e3179eb9 code=0x0 [ 1119.703697][ T29] audit: type=1326 audit(1725341207.841:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18063 comm="syz.3.4234" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f14d9f79eb9 code=0x0 [ 1127.640888][T18097] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4240'. [ 1128.399008][ T5284] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1129.779516][ T29] audit: type=1326 audit(1725341217.761:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18109 comm="syz.1.4245" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9e92b79eb9 code=0x0 [ 1130.617636][T18116] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:0000:0000:0000 with DS=0xd [ 1131.202346][ T25] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1131.500915][ T5284] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1131.513484][ T5284] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1131.545130][ T25] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1131.562165][ T5284] usb 1-1: can't read configurations, error -71 [ 1131.571107][ T25] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1131.594251][ T25] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1131.782679][ T25] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1131.812508][ T25] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1131.830506][ T25] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1131.858567][ T25] usb 2-1: Product: syz [ 1131.877611][ T25] usb 2-1: Manufacturer: syz [ 1131.915848][ T25] cdc_wdm 2-1:1.0: skipping garbage [ 1131.928357][ T25] cdc_wdm 2-1:1.0: skipping garbage [ 1131.943718][ T25] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1132.584122][ T1853] usb 2-1: USB disconnect, device number 49 [ 1134.278180][T18144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4254'. [ 1134.287492][T18144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4254'. [ 1134.484418][ T9] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1134.692874][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 1134.711812][ T9] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1134.767239][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1134.780445][ T9] usb 4-1: Product: syz [ 1134.792259][ T9] usb 4-1: Manufacturer: syz [ 1134.822795][ T9] usb 4-1: SerialNumber: syz [ 1134.864721][ T9] usb 4-1: config 0 descriptor?? [ 1136.345326][ T9] peak_usb 4-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 1136.372493][ T9] peak_usb 4-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 1136.484443][ T9] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -71 [ 1136.534884][ T9] usb 4-1: USB disconnect, device number 39 [ 1136.851998][ T25] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1137.089648][ T25] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1137.118932][ T25] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1137.174598][ T25] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1137.232642][ T25] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1137.429049][ T25] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1138.226915][ T25] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1138.322985][ T25] usb 3-1: Product: syz [ 1138.327213][ T25] usb 3-1: Manufacturer: syz [ 1138.356892][ T25] cdc_wdm 3-1:1.0: skipping garbage [ 1138.381027][ T25] cdc_wdm 3-1:1.0: skipping garbage [ 1138.403706][ T25] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1138.660497][ T938] usb 3-1: USB disconnect, device number 35 [ 1140.326770][T18196] netlink: 'syz.0.4267': attribute type 4 has an invalid length. [ 1140.791466][T18201] netlink: 'syz.0.4267': attribute type 4 has an invalid length. [ 1142.472025][T16348] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1142.737034][T16348] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1142.803765][T16348] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1142.863514][T16348] usb 2-1: config 0 descriptor?? [ 1143.612501][T13315] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1143.987363][T13315] usb 3-1: Using ep0 maxpacket: 32 [ 1144.003820][T18239] bridge0: entered allmulticast mode [ 1144.111040][T18239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4278'. [ 1144.120465][T18239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4278'. [ 1144.353642][T13315] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1144.362866][T13315] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1144.376561][T13315] usb 3-1: Product: syz [ 1144.383734][T16348] pegasus 2-1:0.0: probe with driver pegasus failed with error -121 [ 1144.394544][T13315] usb 3-1: Manufacturer: syz [ 1144.408214][T13315] usb 3-1: SerialNumber: syz [ 1144.420246][T13315] usb 3-1: config 0 descriptor?? [ 1145.000596][T18241] netlink: 4068 bytes leftover after parsing attributes in process `syz.0.4279'. [ 1145.234211][T13315] peak_usb 3-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 1145.243276][T13315] peak_usb 3-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 1145.353902][T13315] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -71 [ 1145.653360][T13315] usb 3-1: USB disconnect, device number 36 [ 1146.232986][ T938] usb 2-1: USB disconnect, device number 50 [ 1147.764769][T18267] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4284'. [ 1148.540691][T18285] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4289'. [ 1149.486962][ T5237] Bluetooth: hci1: command 0x0406 tx timeout [ 1156.725124][T13315] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1157.583749][T18335] netlink: 'syz.4.4300': attribute type 4 has an invalid length. [ 1157.726053][T13315] usb 3-1: device not accepting address 37, error -71 [ 1157.786214][T18343] netlink: 'syz.4.4300': attribute type 4 has an invalid length. [ 1158.804585][T13315] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1158.871880][ T5312] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1159.190932][ T5312] usb 2-1: Using ep0 maxpacket: 8 [ 1159.211923][T13315] usb 3-1: Using ep0 maxpacket: 32 [ 1159.234706][T13315] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1159.234805][ T5312] usb 2-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 1159.260365][T13315] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1159.269215][ T5312] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1159.293924][T13315] usb 3-1: Product: syz [ 1159.303842][T13315] usb 3-1: Manufacturer: syz [ 1159.309852][ T5312] usb 2-1: config 0 descriptor?? [ 1159.316165][T13315] usb 3-1: SerialNumber: syz [ 1159.336063][T13315] usb 3-1: config 0 descriptor?? [ 1159.345317][ T5312] usb 2-1: bad CDC descriptors [ 1159.361475][ T5312] cdc_acm 2-1:0.0: Zero length descriptor references [ 1159.370311][ T5312] cdc_acm 2-1:0.0: probe with driver cdc_acm failed with error -22 [ 1159.976564][ T25] usb 2-1: USB disconnect, device number 51 [ 1161.998143][T13315] peak_usb 3-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 1162.007641][T13315] peak_usb 3-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 1162.132672][T13315] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -71 [ 1162.156043][T13315] usb 3-1: USB disconnect, device number 38 [ 1162.215584][T18378] netlink: 'syz.4.4311': attribute type 4 has an invalid length. [ 1162.675815][ T5312] libceph: connect (1)[c::]:6789 error -101 [ 1162.684595][ T5312] libceph: mon0 (1)[c::]:6789 connect error [ 1163.086237][T18385] ceph: No mds server is up or the cluster is laggy [ 1163.394905][ T5312] libceph: connect (1)[c::]:6789 error -101 [ 1163.401099][ T5312] libceph: mon0 (1)[c::]:6789 connect error [ 1163.574546][T18390] netlink: 'syz.4.4311': attribute type 4 has an invalid length. [ 1164.466264][T18397] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1173.212091][T18437] program syz.2.4327 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1173.781275][T18440] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1177.282285][T18461] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4333'. [ 1183.024087][T18476] netlink: 'syz.3.4339': attribute type 4 has an invalid length. [ 1183.042527][ T5312] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1183.192988][ T5237] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1183.203157][ T5237] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1183.211312][ T5237] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1183.220777][ T5237] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1183.250435][ T5237] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1183.258383][ T5237] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1183.259847][ T5312] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1183.316161][ T5312] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1183.371440][T18478] netlink: 'syz.3.4339': attribute type 4 has an invalid length. [ 1183.381089][ T5312] usb 3-1: config 0 descriptor?? [ 1183.727381][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1185.762275][ T5237] Bluetooth: hci0: command tx timeout [ 1186.296083][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1187.066727][ T5312] pegasus 3-1:0.0: can't reset MAC [ 1187.397725][ T5312] pegasus 3-1:0.0: probe with driver pegasus failed with error -5 [ 1188.166546][ T5237] Bluetooth: hci0: command tx timeout [ 1189.067115][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1189.074233][ T5312] usb 3-1: USB disconnect, device number 39 [ 1190.114402][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1190.203652][ T5237] Bluetooth: hci0: command tx timeout [ 1190.214294][T18481] chnl_net:caif_netlink_parms(): no params data found [ 1190.954433][T18514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4349'. [ 1190.963932][T18514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4349'. [ 1191.080030][T18527] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4353'. [ 1191.539292][T18481] bridge0: port 1(bridge_slave_0) entered blocking state [ 1191.687279][T18481] bridge0: port 1(bridge_slave_0) entered disabled state [ 1191.698890][T18481] bridge_slave_0: entered allmulticast mode [ 1191.707179][T18481] bridge_slave_0: entered promiscuous mode [ 1191.744806][T18481] bridge0: port 2(bridge_slave_1) entered blocking state [ 1191.786276][T18481] bridge0: port 2(bridge_slave_1) entered disabled state [ 1191.807636][T18481] bridge_slave_1: entered allmulticast mode [ 1191.846773][T18481] bridge_slave_1: entered promiscuous mode [ 1192.099032][T18481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1192.362218][ T5237] Bluetooth: hci0: command tx timeout [ 1193.438308][T18481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1193.513840][ T35] bridge_slave_1: left allmulticast mode [ 1193.534903][ T35] bridge_slave_1: left promiscuous mode [ 1193.549106][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 1193.594656][ T35] bridge_slave_0: left allmulticast mode [ 1193.612019][ T35] bridge_slave_0: left promiscuous mode [ 1193.617868][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 1195.667602][T18561] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4363'. [ 1195.698968][T18561] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4363'. [ 1195.948332][ T35] bridge0 (unregistering): left allmulticast mode [ 1196.837875][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1196.860880][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1196.887817][ T35] bond0 (unregistering): Released all slaves [ 1198.060588][T18481] team0: Port device team_slave_0 added [ 1198.376083][T18481] team0: Port device team_slave_1 added [ 1207.188782][T18608] program syz.0.4376 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1207.529691][ T5312] IPVS: starting estimator thread 0... [ 1207.544427][ T35] hsr_slave_0: left promiscuous mode [ 1207.736516][T18613] IPVS: using max 19 ests per chain, 45600 per kthread [ 1207.784599][ T5237] Bluetooth: hci1: unexpected event for opcode 0x2002 [ 1207.796092][ T35] hsr_slave_1: left promiscuous mode [ 1208.532346][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1208.560307][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1208.613198][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1208.620747][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1208.740712][ T35] veth1_macvtap: left promiscuous mode [ 1208.751239][ T35] veth0_macvtap: left promiscuous mode [ 1208.771497][ T35] veth1_vlan: left promiscuous mode [ 1208.777111][ T35] veth0_vlan: left promiscuous mode [ 1209.482039][ T5284] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1210.100902][ T5284] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1210.109789][ T5284] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1210.119904][ T5284] usb 3-1: can't read configurations, error -71 [ 1210.146379][ T35] team0 (unregistering): Port device team_slave_1 removed [ 1210.207010][ T35] team0 (unregistering): Port device team_slave_0 removed [ 1210.891182][T18481] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1210.898353][T18481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1210.927535][T18481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1211.122842][T18481] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1211.152980][T18481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1211.182490][T18481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1211.793522][ T5237] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1211.802786][ T5237] Bluetooth: hci1: Injecting HCI hardware error event [ 1211.825001][ T5237] Bluetooth: hci1: hardware error 0x00 [ 1213.942786][T18481] hsr_slave_0: entered promiscuous mode [ 1213.966943][T18481] hsr_slave_1: entered promiscuous mode [ 1213.998239][T18481] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1214.022180][T18481] Cannot create hsr debugfs directory [ 1214.032327][ T5237] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1214.889165][T18655] netlink: 'syz.2.4387': attribute type 4 has an invalid length. [ 1215.484790][T18659] netlink: 'syz.2.4387': attribute type 4 has an invalid length. [ 1216.419372][T18673] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4393'. [ 1216.429431][T18673] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4393'. [ 1218.874327][ T5284] IPVS: starting estimator thread 0... [ 1218.994427][T18695] IPVS: using max 22 ests per chain, 52800 per kthread [ 1219.099821][T18481] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1219.160549][T18481] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1219.183068][T18481] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1219.199784][T18481] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1219.828066][T18702] bridge0: entered allmulticast mode [ 1220.029378][T18699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4400'. [ 1220.038383][T18699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4400'. [ 1221.256697][T18709] xt_HMARK: proto mask must be zero with L3 mode [ 1221.280197][T18481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1221.505096][T18481] 8021q: adding VLAN 0 to HW filter on device team0 [ 1225.165411][ T2584] bridge0: port 1(bridge_slave_0) entered blocking state [ 1225.172667][ T2584] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1225.197039][ T2584] bridge0: port 2(bridge_slave_1) entered blocking state [ 1225.204312][ T2584] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1227.207411][T18640] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1227.220244][T18640] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1227.234840][T18640] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1227.246975][T18640] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1227.257303][T18640] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1227.264939][T18640] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1227.489941][T17512] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1227.640931][T17512] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1227.687212][T18481] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1227.772434][T17512] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1227.891418][T17512] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1228.439888][T18481] veth0_vlan: entered promiscuous mode [ 1228.543898][T17512] bridge_slave_1: left allmulticast mode [ 1228.550638][T17512] bridge_slave_1: left promiscuous mode [ 1228.562161][T17512] bridge0: port 2(bridge_slave_1) entered disabled state [ 1228.573157][T17512] bridge_slave_0: left allmulticast mode [ 1228.581201][T17512] bridge_slave_0: left promiscuous mode [ 1228.598707][T17512] bridge0: port 1(bridge_slave_0) entered disabled state [ 1229.318446][ T5237] Bluetooth: hci3: command tx timeout [ 1231.119465][T17512] bridge0 (unregistering): left allmulticast mode [ 1231.494784][ T5237] Bluetooth: hci3: command tx timeout [ 1231.736745][T18767] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4415'. [ 1231.746197][T18767] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4415'. [ 1231.801351][T18766] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4414'. [ 1231.820612][T18766] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4414'. [ 1231.862014][T17512] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1231.885624][T17512] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1231.936605][T17512] bond0 (unregistering): Released all slaves [ 1231.962515][T18735] chnl_net:caif_netlink_parms(): no params data found [ 1232.001439][T18764] bridge0: left allmulticast mode [ 1232.057667][T18481] veth1_vlan: entered promiscuous mode [ 1233.683257][ T5237] Bluetooth: hci3: command tx timeout [ 1233.853105][T18735] bridge0: port 1(bridge_slave_0) entered blocking state [ 1233.866211][T18735] bridge0: port 1(bridge_slave_0) entered disabled state [ 1233.873866][T18735] bridge_slave_0: entered allmulticast mode [ 1233.887583][T18735] bridge_slave_0: entered promiscuous mode [ 1233.899405][T18735] bridge0: port 2(bridge_slave_1) entered blocking state [ 1233.909442][T18735] bridge0: port 2(bridge_slave_1) entered disabled state [ 1233.919069][T18735] bridge_slave_1: entered allmulticast mode [ 1233.942272][T18735] bridge_slave_1: entered promiscuous mode [ 1233.992886][T18784] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4419'. [ 1234.515342][T17512] hsr_slave_0: left promiscuous mode [ 1234.534404][T17512] hsr_slave_1: left promiscuous mode [ 1234.540510][T17512] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1234.558256][T17512] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1234.580114][T17512] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1234.593027][T17512] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1234.620082][T17512] veth1_macvtap: left promiscuous mode [ 1234.626113][T17512] veth0_macvtap: left promiscuous mode [ 1234.660194][T17512] veth1_vlan: left promiscuous mode [ 1234.672128][T17512] veth0_vlan: left promiscuous mode [ 1234.803610][T16348] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1235.124384][T16348] usb 4-1: Using ep0 maxpacket: 8 [ 1235.173181][T16348] usb 4-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 1235.285105][T16348] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1235.431506][T16348] usb 4-1: config 0 descriptor?? [ 1235.452970][T16348] usb 4-1: bad CDC descriptors [ 1235.458424][T16348] cdc_acm 4-1:0.0: Zero length descriptor references [ 1235.482030][T16348] cdc_acm 4-1:0.0: probe with driver cdc_acm failed with error -22 [ 1235.693201][T18798] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4422'. [ 1235.725855][T18798] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4422'. [ 1235.735068][ T5237] Bluetooth: hci3: command tx timeout [ 1236.401169][T17512] team0 (unregistering): Port device team_slave_1 removed [ 1236.498962][T17512] team0 (unregistering): Port device team_slave_0 removed [ 1237.320985][T18481] veth0_macvtap: entered promiscuous mode [ 1237.432767][T18735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1237.486137][T18735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1237.579490][T16348] usb 4-1: USB disconnect, device number 40 [ 1237.849554][T18735] team0: Port device team_slave_0 added [ 1237.921329][T18735] team0: Port device team_slave_1 added [ 1238.248670][T18735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1238.258302][T18735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1238.286490][T18735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1238.412786][T18735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1238.444396][T18735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1238.515495][T18735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1238.798972][T18640] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1238.811457][T18640] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1238.823149][T18640] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1238.832143][T18640] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1238.839841][T18640] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1238.847265][T18640] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1239.065710][T18735] hsr_slave_0: entered promiscuous mode [ 1239.139190][T18735] hsr_slave_1: entered promiscuous mode [ 1239.235394][ T29] audit: type=1400 audit(1725341327.381:769): avc: denied { getopt } for pid=18819 comm="syz.3.4430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1241.432471][T18640] Bluetooth: hci0: command tx timeout [ 1242.032240][T18842] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4433'. [ 1242.321296][T18843] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4434'. [ 1243.411220][T17512] bridge_slave_1: left allmulticast mode [ 1243.417417][T17512] bridge_slave_1: left promiscuous mode [ 1243.424236][T17512] bridge0: port 2(bridge_slave_1) entered disabled state [ 1243.441452][T17512] bridge_slave_0: left allmulticast mode [ 1243.451718][T17512] bridge_slave_0: left promiscuous mode [ 1243.458943][T17512] bridge0: port 1(bridge_slave_0) entered disabled state [ 1243.482111][T18640] Bluetooth: hci0: command tx timeout [ 1244.839333][T17512] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1244.861561][T17512] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1244.880337][T17512] bond0 (unregistering): Released all slaves [ 1245.148484][T18815] chnl_net:caif_netlink_parms(): no params data found [ 1245.322513][T17512] hsr_slave_0: left promiscuous mode [ 1245.352834][T17512] hsr_slave_1: left promiscuous mode [ 1245.362494][T17512] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1245.381518][T17512] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1245.438917][T17512] veth0_macvtap: left promiscuous mode [ 1245.444944][T17512] veth1_vlan: left promiscuous mode [ 1245.462238][T17512] veth0_vlan: left promiscuous mode [ 1245.552494][T18640] Bluetooth: hci0: command tx timeout [ 1245.971484][ T5284] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1246.162216][ T5284] usb 5-1: Using ep0 maxpacket: 8 [ 1246.179736][ T5284] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1246.243194][ T5284] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1246.285633][ T5284] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1246.345302][ T5284] usb 5-1: Product: syz [ 1246.349531][ T5284] usb 5-1: Manufacturer: syz [ 1246.381996][ T5284] usb 5-1: SerialNumber: syz [ 1246.413764][ T5284] usb 5-1: config 0 descriptor?? [ 1246.451258][ T5284] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1247.001375][T17512] team0 (unregistering): Port device team_slave_1 removed [ 1247.107820][T17512] team0 (unregistering): Port device team_slave_0 removed [ 1247.592410][ T5284] gspca_zc3xx: reg_w_i err -110 [ 1247.638496][T18640] Bluetooth: hci0: command tx timeout [ 1247.960161][T18873] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4443'. [ 1248.184925][T18735] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1248.716677][ T5284] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1248.734563][ T5284] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 1248.737280][T18735] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1248.777908][ T5284] usb 5-1: USB disconnect, device number 34 [ 1248.785878][T18735] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1248.822196][T18815] bridge0: port 1(bridge_slave_0) entered blocking state [ 1248.857034][T18815] bridge0: port 1(bridge_slave_0) entered disabled state [ 1248.879638][T18815] bridge_slave_0: entered allmulticast mode [ 1248.891750][T18815] bridge_slave_0: entered promiscuous mode [ 1248.907708][T18735] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1248.938401][T18815] bridge0: port 2(bridge_slave_1) entered blocking state [ 1248.948847][T18815] bridge0: port 2(bridge_slave_1) entered disabled state [ 1248.959685][T18815] bridge_slave_1: entered allmulticast mode [ 1248.970107][T18815] bridge_slave_1: entered promiscuous mode [ 1249.168130][T18815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1249.233706][T18815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1249.474028][T18815] team0: Port device team_slave_0 added [ 1249.539685][T18815] team0: Port device team_slave_1 added [ 1249.794628][T18815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1249.825980][T18815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1249.934975][T18815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1249.962489][T18815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1249.972348][T18815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1250.046277][T18815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1250.214186][T18908] netlink: 'syz.2.4452': attribute type 4 has an invalid length. [ 1250.428995][T18909] netlink: 'syz.2.4452': attribute type 4 has an invalid length. [ 1251.328015][T18815] hsr_slave_0: entered promiscuous mode [ 1251.383924][T18815] hsr_slave_1: entered promiscuous mode [ 1251.396129][T18815] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1251.403983][T18815] Cannot create hsr debugfs directory [ 1251.460182][T18735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1251.604113][ T5284] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1252.622542][ T5284] usb 5-1: Using ep0 maxpacket: 8 [ 1252.629460][ T5284] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1252.641146][ T5284] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1252.664112][ T5284] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1252.674534][ T5284] usb 5-1: Product: syz [ 1252.679919][ T5284] usb 5-1: Manufacturer: syz [ 1252.687745][ T5284] usb 5-1: SerialNumber: syz [ 1252.700298][ T5284] usb 5-1: config 0 descriptor?? [ 1252.710399][ T5284] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1252.752172][ T1853] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1252.829994][T18735] 8021q: adding VLAN 0 to HW filter on device team0 [ 1253.051960][ T1853] usb 4-1: Using ep0 maxpacket: 8 [ 1253.065578][ T1853] usb 4-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 1253.082066][ T1853] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1253.091698][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 1253.098929][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1253.203901][ T1853] usb 4-1: config 0 descriptor?? [ 1253.531830][ C1] hrtimer: interrupt took 53670 ns [ 1253.762550][ T1853] usb 4-1: bad CDC descriptors [ 1253.768964][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 1253.776290][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1253.791540][ T1853] cdc_acm 4-1:0.0: Zero length descriptor references [ 1253.810354][ T1853] cdc_acm 4-1:0.0: probe with driver cdc_acm failed with error -22 [ 1254.292149][ T5284] gspca_zc3xx: reg_w_i err -110 [ 1254.819604][T18815] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1254.861139][T18815] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1254.896451][T18735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1254.909592][T18815] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1254.917899][ T5284] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1254.935591][ T5284] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 1254.948492][T18815] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1254.961257][ T5284] usb 5-1: USB disconnect, device number 35 [ 1256.125443][ T5284] usb 4-1: USB disconnect, device number 41 [ 1256.158543][T18735] veth0_vlan: entered promiscuous mode [ 1256.271096][T18735] veth1_vlan: entered promiscuous mode [ 1258.200941][T18735] veth0_macvtap: entered promiscuous mode [ 1258.766323][T18735] veth1_macvtap: entered promiscuous mode [ 1258.922603][T18815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1258.976393][T18735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1259.006390][T18735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1259.035840][T18735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1259.063869][T18735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1259.081902][T18735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1259.140628][T18735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1259.160157][T18735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1259.271230][T18735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1259.298638][T18735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1259.309374][T18735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1259.335661][T18735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1259.348924][T18735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1259.360304][T18735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1259.379348][T18735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1259.393893][T18972] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1259.421575][T18815] 8021q: adding VLAN 0 to HW filter on device team0 [ 1259.441681][T18735] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1259.480899][T18735] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1259.510180][T18735] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1259.539593][T18735] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1259.622361][T18972] usb 5-1: Using ep0 maxpacket: 8 [ 1259.644154][ T6780] bridge0: port 1(bridge_slave_0) entered blocking state [ 1259.651425][ T6780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1259.681467][T18972] usb 5-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 1259.721184][T18972] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1259.765469][T18972] usb 5-1: config 0 descriptor?? [ 1259.796268][ T6780] bridge0: port 2(bridge_slave_1) entered blocking state [ 1259.803556][ T6780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1259.821109][T18972] usb 5-1: bad CDC descriptors [ 1259.842742][T18972] cdc_acm 5-1:0.0: Zero length descriptor references [ 1259.862513][T18972] cdc_acm 5-1:0.0: probe with driver cdc_acm failed with error -22 [ 1260.217023][T17512] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1260.279400][T17512] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1260.426769][T12480] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1260.521970][ T9] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1260.530567][T12480] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1262.780910][ T5312] usb 5-1: USB disconnect, device number 36 [ 1262.839214][T18815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1264.059435][ T5312] IPVS: starting estimator thread 0... [ 1264.262842][T19022] IPVS: using max 19 ests per chain, 45600 per kthread [ 1264.265128][T18815] veth0_vlan: entered promiscuous mode [ 1264.387572][T18815] veth1_vlan: entered promiscuous mode [ 1264.429128][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1264.823646][ T9] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1264.941370][ T9] usb 3-1: can't read configurations, error -71 [ 1265.084301][T18815] veth0_macvtap: entered promiscuous mode [ 1265.142777][T18815] veth1_macvtap: entered promiscuous mode [ 1265.243335][T18815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1265.266858][T18815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1265.292209][T18815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1265.312700][T18815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1265.406610][T18815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1265.504957][T18815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1265.540764][T18815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1265.564508][T18815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1265.599615][T18815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1265.617000][T18815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1265.630095][T18815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1266.491984][T18815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1266.571973][T18815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1266.602271][T18815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1266.639219][T18815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1266.714802][T18815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1266.752844][T18815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1266.809437][T18815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1267.000751][T18815] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1267.734264][T18815] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1267.773997][T18815] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1267.809404][T18815] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1269.864183][ T6780] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1269.897203][ T6780] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1270.019934][ T6772] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1270.065875][ T6772] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1271.644350][ T29] audit: type=1326 audit(1725341359.491:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19073 comm="syz.0.4490" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f522c379eb9 code=0x0 [ 1272.861600][T19091] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4491'. [ 1278.651490][ T1853] IPVS: starting estimator thread 0... [ 1278.772100][T19142] IPVS: using max 31 ests per chain, 74400 per kthread [ 1278.780103][ T5237] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1278.814493][ T5237] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1278.823493][ T5237] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1278.835782][ T5237] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1278.848475][ T5237] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1278.860408][ T5237] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1280.316556][ T6772] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1280.520841][T19143] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4504'. [ 1280.721646][T19155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4508'. [ 1280.730630][T19155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4508'. [ 1280.907014][ T6772] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1280.924429][ T5237] Bluetooth: hci2: command tx timeout [ 1281.155425][ T6772] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1281.269595][ T6772] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1281.385127][T19178] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4512'. [ 1282.911601][ T6772] bridge_slave_1: left allmulticast mode [ 1282.922152][ T6772] bridge_slave_1: left promiscuous mode [ 1282.942373][ T6772] bridge0: port 2(bridge_slave_1) entered disabled state [ 1282.994097][ T6772] bridge_slave_0: left allmulticast mode [ 1282.999750][ T6772] bridge_slave_0: left promiscuous mode [ 1283.005408][ T5237] Bluetooth: hci2: command tx timeout [ 1283.194865][T19196] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1283.207135][ T6772] bridge0: port 1(bridge_slave_0) entered disabled state [ 1284.378529][T19207] kvm: kvm [19203]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x800 [ 1284.438881][T19207] kvm: kvm [19203]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x800 [ 1284.854208][ T6772] bridge0 (unregistering): left allmulticast mode [ 1284.943726][T19213] program syz.4.4520 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1285.072467][ T5237] Bluetooth: hci2: command tx timeout [ 1286.372433][ T6772] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1286.404870][ T6772] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1286.450027][ T6772] bond0 (unregistering): Released all slaves [ 1286.483223][T19144] chnl_net:caif_netlink_parms(): no params data found [ 1287.161964][ T5237] Bluetooth: hci2: command tx timeout [ 1290.821568][ T29] audit: type=1326 audit(1725341378.961:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19229 comm="syz.1.4523" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb0b3779eb9 code=0x0 [ 1291.496183][T19144] bridge0: port 1(bridge_slave_0) entered blocking state [ 1291.527403][T19144] bridge0: port 1(bridge_slave_0) entered disabled state [ 1291.548681][T19144] bridge_slave_0: entered allmulticast mode [ 1291.575643][T19144] bridge_slave_0: entered promiscuous mode [ 1291.606193][T19248] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4528'. [ 1291.819112][ T6772] hsr_slave_0: left promiscuous mode [ 1291.916141][ T6772] hsr_slave_1: left promiscuous mode [ 1291.931911][ T1853] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1291.940292][ T6772] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1291.971340][ T6772] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1292.005393][ T6772] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1292.039463][ T6772] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1292.151113][ T6772] veth1_macvtap: left promiscuous mode [ 1292.171455][ T1853] usb 1-1: Using ep0 maxpacket: 8 [ 1292.187331][ T1853] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1292.199512][ T6772] veth0_macvtap: left promiscuous mode [ 1292.205572][ T1853] usb 1-1: config 0 has no interfaces? [ 1292.211601][ T6772] veth1_vlan: left promiscuous mode [ 1292.233472][ T1853] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 0.40 [ 1292.246335][ T6772] veth0_vlan: left promiscuous mode [ 1292.261003][ T1853] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1292.274600][ T1853] usb 1-1: SerialNumber: syz [ 1292.297272][ T1853] usb 1-1: config 0 descriptor?? [ 1292.592925][T16348] usb 1-1: USB disconnect, device number 51 [ 1293.167786][ T6772] team0 (unregistering): Port device team_slave_1 removed [ 1293.263760][ T6772] team0 (unregistering): Port device team_slave_0 removed [ 1294.977301][T19144] bridge0: port 2(bridge_slave_1) entered blocking state [ 1294.984604][T19144] bridge0: port 2(bridge_slave_1) entered disabled state [ 1294.993724][T19144] bridge_slave_1: entered allmulticast mode [ 1295.001014][T19144] bridge_slave_1: entered promiscuous mode [ 1295.178907][T19144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1295.318444][T19144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1295.615504][T19144] team0: Port device team_slave_0 added [ 1295.656148][T19281] netlink: 'syz.0.4535': attribute type 4 has an invalid length. [ 1295.851678][T19283] netlink: 'syz.0.4535': attribute type 4 has an invalid length. [ 1295.891641][T19144] team0: Port device team_slave_1 added [ 1296.131367][ T6772] IPVS: stop unused estimator thread 0... [ 1296.233322][T19144] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1296.281583][T19144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1296.332558][T19144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1296.376602][T19144] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1296.415247][T19144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1296.564889][T19144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1297.198552][T19144] hsr_slave_0: entered promiscuous mode [ 1297.265115][T19144] hsr_slave_1: entered promiscuous mode [ 1297.321068][T19144] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1297.529611][T19144] Cannot create hsr debugfs directory [ 1298.427192][T19319] netlink: 'syz.0.4546': attribute type 4 has an invalid length. [ 1298.612914][T19320] netlink: 'syz.0.4546': attribute type 4 has an invalid length. [ 1302.062237][T19144] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1302.159170][T19144] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1302.262558][T19144] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1302.308634][T19144] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1302.419139][T19341] netlink: 'syz.0.4553': attribute type 4 has an invalid length. [ 1302.654139][T19341] netlink: 'syz.0.4553': attribute type 4 has an invalid length. [ 1302.789872][T19144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1302.906635][T19144] 8021q: adding VLAN 0 to HW filter on device team0 [ 1302.958903][ T2584] bridge0: port 1(bridge_slave_0) entered blocking state [ 1302.966153][ T2584] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1302.990637][T19354] netlink: 'syz.3.4557': attribute type 4 has an invalid length. [ 1303.068631][T19355] netlink: 'syz.3.4557': attribute type 4 has an invalid length. [ 1303.163666][ T2584] bridge0: port 2(bridge_slave_1) entered blocking state [ 1303.170783][ T2584] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1303.202614][T16348] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1303.357268][T19144] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1303.875572][T19144] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1304.000712][T19144] veth0_vlan: entered promiscuous mode [ 1304.064002][T19144] veth1_vlan: entered promiscuous mode [ 1304.241553][T19144] veth0_macvtap: entered promiscuous mode [ 1304.266136][T19144] veth1_macvtap: entered promiscuous mode [ 1304.437058][T19144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1304.463167][T19144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1304.492088][T19144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1304.519309][T19144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1304.556451][T19144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1304.585333][T19144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1304.615541][T19144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1304.675162][T19144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1304.704521][T19368] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1304.716281][T19144] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1304.748556][T19144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1304.775542][T16348] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1304.793874][T16348] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1304.795759][T19144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1304.831227][T19144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1304.844650][T19144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1304.852034][T16348] usb 2-1: can't read configurations, error -71 [ 1304.854767][T19144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1304.871493][T19144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1304.881643][T19144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1304.901899][T19144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1304.925230][T19144] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1304.978902][T19144] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1305.006162][T19144] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1305.015152][T19144] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1305.027042][T19144] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1305.039557][T19372] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4562'. [ 1305.292903][ T2575] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1305.306664][ T2575] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1305.371471][ T6765] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1305.392178][ T6765] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1309.084291][T19402] netlink: 'syz.1.4566': attribute type 4 has an invalid length. [ 1309.099870][T19394] netlink: 'syz.1.4566': attribute type 4 has an invalid length. [ 1309.221392][ T5284] IPVS: starting estimator thread 0... [ 1309.361945][T19405] IPVS: using max 17 ests per chain, 40800 per kthread [ 1312.991949][ T5284] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1314.085271][ T5284] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1314.122047][ T5284] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1314.564696][ T5284] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1314.575308][ T5284] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1314.675429][ T5284] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1314.751592][ T5284] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1314.765401][ T5284] usb 1-1: Product: syz [ 1314.769852][ T5284] usb 1-1: Manufacturer: syz [ 1314.837003][ T5284] usb 1-1: can't set config #1, error -71 [ 1314.878288][ T5284] usb 1-1: USB disconnect, device number 52 [ 1315.867004][T18372] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1316.016430][T19468] netlink: 'syz.0.4583': attribute type 4 has an invalid length. [ 1316.105893][T19471] netlink: 'syz.0.4583': attribute type 4 has an invalid length. [ 1316.152041][T18372] usb 5-1: Using ep0 maxpacket: 8 [ 1316.185878][T18372] usb 5-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 1316.284117][T18372] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1316.320746][T18372] usb 5-1: config 0 descriptor?? [ 1316.340887][T18372] usb 5-1: bad CDC descriptors [ 1316.358373][T18372] cdc_acm 5-1:0.0: Zero length descriptor references [ 1316.410120][T18372] cdc_acm 5-1:0.0: probe with driver cdc_acm failed with error -22 [ 1316.847733][T19478] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4588'. [ 1317.099193][T19479] bridge0: entered allmulticast mode [ 1317.270170][T19479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4589'. [ 1317.290112][T19479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4589'. [ 1318.555325][T16348] usb 5-1: USB disconnect, device number 37 [ 1320.051121][ T5312] IPVS: starting estimator thread 0... [ 1320.162047][T19511] IPVS: using max 16 ests per chain, 38400 per kthread [ 1326.545118][ T29] audit: type=1326 audit(1725341414.511:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19523 comm="syz.4.4598" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc7e3179eb9 code=0x0 [ 1328.521971][ T5285] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1328.772913][ T5285] usb 3-1: Using ep0 maxpacket: 8 [ 1328.805182][T18640] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1328.819321][T18640] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1328.831250][T18640] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1328.843391][T18640] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1328.851737][ T5285] usb 3-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 1328.863397][T18640] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1328.882189][ T5285] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1328.890305][T18640] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1328.929738][ T5285] usb 3-1: config 0 descriptor?? [ 1328.949308][ T5285] usb 3-1: bad CDC descriptors [ 1328.954691][ T5285] cdc_acm 3-1:0.0: Zero length descriptor references [ 1328.962002][ T5285] cdc_acm 3-1:0.0: probe with driver cdc_acm failed with error -22 [ 1330.365702][T19558] bridge0: entered allmulticast mode [ 1330.538325][ T2584] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1330.650445][T19558] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4608'. [ 1330.661364][T19558] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4608'. [ 1330.771682][T19548] chnl_net:caif_netlink_parms(): no params data found [ 1331.002155][T18640] Bluetooth: hci4: command tx timeout [ 1331.004296][ T2584] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1331.338931][ T2584] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1331.517616][T18372] usb 3-1: USB disconnect, device number 44 [ 1331.598190][ T2584] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1331.706635][T19548] bridge0: port 1(bridge_slave_0) entered blocking state [ 1332.559353][T19548] bridge0: port 1(bridge_slave_0) entered disabled state [ 1332.612521][T19548] bridge_slave_0: entered allmulticast mode [ 1332.630558][T19548] bridge_slave_0: entered promiscuous mode [ 1332.656559][T19548] bridge0: port 2(bridge_slave_1) entered blocking state [ 1332.846020][T19548] bridge0: port 2(bridge_slave_1) entered disabled state [ 1333.073406][T18640] Bluetooth: hci4: command tx timeout [ 1333.723627][T19548] bridge_slave_1: entered allmulticast mode [ 1333.731499][T19548] bridge_slave_1: entered promiscuous mode [ 1333.903897][T19548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1334.936113][T19548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1336.298605][T18640] Bluetooth: hci4: command tx timeout [ 1336.673025][T19548] team0: Port device team_slave_0 added [ 1336.694417][T19548] team0: Port device team_slave_1 added [ 1336.798451][ T2584] bridge_slave_1: left allmulticast mode [ 1336.830596][ T2584] bridge_slave_1: left promiscuous mode [ 1336.862165][ T2584] bridge0: port 2(bridge_slave_1) entered disabled state [ 1336.876150][ T2584] bridge_slave_0: left allmulticast mode [ 1336.908914][ T2584] bridge_slave_0: left promiscuous mode [ 1336.916174][ T2584] bridge0: port 1(bridge_slave_0) entered disabled state [ 1338.142943][T18972] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1338.376843][T18640] Bluetooth: hci4: command tx timeout [ 1338.561954][T18972] usb 3-1: Using ep0 maxpacket: 8 [ 1338.802196][T18972] usb 3-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 1338.811331][T18972] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1338.893873][T18972] usb 3-1: config 0 descriptor?? [ 1338.908986][T18972] usb 3-1: bad CDC descriptors [ 1338.925344][T18972] cdc_acm 3-1:0.0: Zero length descriptor references [ 1338.960922][T18972] cdc_acm 3-1:0.0: probe with driver cdc_acm failed with error -22 [ 1340.675832][ T2584] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1340.705222][ T2584] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1340.721072][ T2584] bond0 (unregistering): Released all slaves [ 1340.767919][T19548] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1340.787428][T19548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1340.825387][T19548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1340.941665][T19548] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1341.030691][ T5285] usb 3-1: USB disconnect, device number 45 [ 1341.057189][T19548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1341.100652][T19548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1341.318496][T19548] hsr_slave_0: entered promiscuous mode [ 1341.338667][T19548] hsr_slave_1: entered promiscuous mode [ 1341.346181][T19548] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1341.355557][T19548] Cannot create hsr debugfs directory [ 1341.494509][T18972] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1341.635334][ T2584] hsr_slave_0: left promiscuous mode [ 1341.641971][ T2584] hsr_slave_1: left promiscuous mode [ 1341.653678][ T2584] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1341.663255][ T2584] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1341.673381][ T2584] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1341.680977][ T2584] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1341.702098][T18972] usb 5-1: Using ep0 maxpacket: 32 [ 1341.737915][T18972] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1341.749540][T18972] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1341.752782][ T2584] veth1_macvtap: left promiscuous mode [ 1341.760071][T18972] usb 5-1: Product: syz [ 1341.767307][T18972] usb 5-1: Manufacturer: syz [ 1341.768193][ T2584] veth0_macvtap: left promiscuous mode [ 1341.780342][T18972] usb 5-1: SerialNumber: syz [ 1341.786554][ T5281] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1341.788272][ T2584] veth1_vlan: left promiscuous mode [ 1341.800217][T18972] usb 5-1: config 0 descriptor?? [ 1341.806294][ T2584] veth0_vlan: left promiscuous mode [ 1342.064915][ T5281] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1342.101261][ T5281] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1342.128708][ T5281] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1342.185897][ T5281] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1342.226737][ T5281] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1342.239125][ T5281] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1342.249982][ T5281] usb 3-1: Product: syz [ 1342.260983][ T5281] usb 3-1: Manufacturer: syz [ 1342.276385][ T5281] cdc_wdm 3-1:1.0: skipping garbage [ 1342.281717][ T5281] cdc_wdm 3-1:1.0: skipping garbage [ 1342.295313][ T5281] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1342.619014][ T1853] usb 3-1: USB disconnect, device number 46 [ 1343.943297][ T2584] team0 (unregistering): Port device team_slave_1 removed [ 1345.172446][ T2584] team0 (unregistering): Port device team_slave_0 removed [ 1347.134699][T19680] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1348.192162][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1350.123993][T18972] peak_usb 5-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 1350.139523][T18972] peak_usb 5-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 1350.359426][ T5237] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1350.380136][ T5237] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1350.389918][ T5237] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1350.406001][ T5237] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1350.524728][ T5237] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1350.526962][T18972] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -71 [ 1350.540171][ T5237] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1350.699415][T18972] usb 5-1: USB disconnect, device number 38 [ 1351.057964][T19711] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4649'. [ 1352.119993][T19709] netlink: 'syz.2.4648': attribute type 4 has an invalid length. [ 1352.605338][ T5237] Bluetooth: hci1: command tx timeout [ 1353.428714][T19713] netlink: 'syz.2.4648': attribute type 4 has an invalid length. [ 1353.577141][ T2584] IPVS: stop unused estimator thread 0... [ 1353.694821][T19727] netlink: 'syz.4.4652': attribute type 4 has an invalid length. [ 1353.928261][T19731] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1354.039393][T17512] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1354.081016][T19727] netlink: 'syz.4.4652': attribute type 4 has an invalid length. [ 1354.116180][ T5237] Bluetooth: hci3: command 0x0406 tx timeout [ 1354.205635][T17512] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1354.254205][T19703] chnl_net:caif_netlink_parms(): no params data found [ 1354.443222][T17512] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1354.587034][T17512] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1354.671917][T18640] Bluetooth: hci1: command tx timeout [ 1355.165289][T19703] bridge0: port 1(bridge_slave_0) entered blocking state [ 1355.182395][T19703] bridge0: port 1(bridge_slave_0) entered disabled state [ 1355.203915][T19703] bridge_slave_0: entered allmulticast mode [ 1355.226093][T19703] bridge_slave_0: entered promiscuous mode [ 1355.238766][T19548] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1355.253729][T19548] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1355.328657][T19703] bridge0: port 2(bridge_slave_1) entered blocking state [ 1355.349224][T19703] bridge0: port 2(bridge_slave_1) entered disabled state [ 1355.376139][T19703] bridge_slave_1: entered allmulticast mode [ 1355.423719][T19703] bridge_slave_1: entered promiscuous mode [ 1355.543941][T19548] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1355.677833][T19703] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1355.689181][T19548] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1355.727765][T17512] bridge_slave_1: left allmulticast mode [ 1355.734405][T17512] bridge_slave_1: left promiscuous mode [ 1355.752902][T17512] bridge0: port 2(bridge_slave_1) entered disabled state [ 1355.793583][T17512] bridge_slave_0: left allmulticast mode [ 1355.806112][T17512] bridge_slave_0: left promiscuous mode [ 1355.812612][T17512] bridge0: port 1(bridge_slave_0) entered disabled state [ 1356.759033][T18640] Bluetooth: hci1: command tx timeout [ 1357.000366][T17512] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1357.021498][T17512] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1357.070347][T17512] bond0 (unregistering): Released all slaves [ 1357.103961][T19703] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1357.409913][T19703] team0: Port device team_slave_0 added [ 1357.718188][T19777] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1358.231478][ T29] audit: type=1326 audit(1725341446.371:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19772 comm="syz.4.4663" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc7e3179eb9 code=0x0 [ 1358.241093][T19703] team0: Port device team_slave_1 added [ 1358.623715][T19703] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1358.636857][T19703] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1358.667754][T19703] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1358.831902][T18640] Bluetooth: hci1: command tx timeout [ 1358.859846][T19703] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1358.895595][T19703] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1359.098377][T19703] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1359.176710][T19790] program syz.0.4665 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1359.529232][T17512] hsr_slave_0: left promiscuous mode [ 1359.741938][T17512] hsr_slave_1: left promiscuous mode [ 1359.769906][T17512] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1359.790998][T17512] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1359.819897][T17512] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1359.837823][T17512] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1360.035505][T17512] veth1_macvtap: left promiscuous mode [ 1360.044493][T17512] veth0_macvtap: left promiscuous mode [ 1360.057269][T17512] veth1_vlan: left promiscuous mode [ 1360.906234][T17512] veth0_vlan: left promiscuous mode [ 1362.296294][T17512] team0 (unregistering): Port device team_slave_1 removed [ 1362.410993][T17512] team0 (unregistering): Port device team_slave_0 removed [ 1362.821253][ T29] audit: type=1326 audit(1725341450.961:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19813 comm="syz.0.4673" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f522c379eb9 code=0x0 [ 1364.281105][T19703] hsr_slave_0: entered promiscuous mode [ 1364.311417][T19703] hsr_slave_1: entered promiscuous mode [ 1364.339981][T19821] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1364.358718][T19703] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1364.373568][T19703] Cannot create hsr debugfs directory [ 1365.048503][T17512] IPVS: stop unused estimator thread 0... [ 1365.906979][T19548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1366.095126][T19548] 8021q: adding VLAN 0 to HW filter on device team0 [ 1366.149786][T12480] bridge0: port 1(bridge_slave_0) entered blocking state [ 1366.157037][T12480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1366.209486][T12480] bridge0: port 2(bridge_slave_1) entered blocking state [ 1366.216777][T12480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1366.652662][T13315] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1366.901960][T13315] usb 3-1: Using ep0 maxpacket: 8 [ 1366.957333][T13315] usb 3-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 1366.994393][T13315] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1367.039757][T13315] usb 3-1: config 0 descriptor?? [ 1367.080349][T13315] usb 3-1: bad CDC descriptors [ 1367.109964][T13315] cdc_acm 3-1:0.0: Zero length descriptor references [ 1367.149772][T13315] cdc_acm 3-1:0.0: probe with driver cdc_acm failed with error -22 [ 1367.183000][T19548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1367.220156][T19703] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1367.258950][T19703] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1367.335600][T19703] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1367.360316][T19703] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1367.544850][T19548] veth0_vlan: entered promiscuous mode [ 1367.585158][T19852] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4682'. [ 1367.712699][T19548] veth1_vlan: entered promiscuous mode [ 1367.837229][T19548] veth0_macvtap: entered promiscuous mode [ 1367.866510][T19548] veth1_macvtap: entered promiscuous mode [ 1367.987710][T19548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1367.998842][T19548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1368.009500][T19548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1368.025043][T19548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1368.036465][T19548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1368.048729][T19548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1368.087975][T19548] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1368.106255][T19703] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1368.153921][T19548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1368.202572][T19548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1368.232418][T19548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1368.255799][T19548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1368.267094][T19548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1368.295936][T19548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1368.341609][T19548] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1368.389306][T19548] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1368.420146][T19548] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1368.451184][T19548] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1368.475908][T19548] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1368.578814][T19703] 8021q: adding VLAN 0 to HW filter on device team0 [ 1368.625219][T17512] bridge0: port 1(bridge_slave_0) entered blocking state [ 1368.632489][T17512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1368.696427][T17513] bridge0: port 2(bridge_slave_1) entered blocking state [ 1368.703611][T17513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1369.021602][T12480] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1369.222073][T12480] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1369.279994][ T1853] usb 3-1: USB disconnect, device number 47 [ 1371.131447][T19868] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1371.223210][T17512] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1371.231084][T17512] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1372.662651][T19703] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1373.606143][T19703] veth0_vlan: entered promiscuous mode [ 1373.798209][T19703] veth1_vlan: entered promiscuous mode [ 1373.880319][T19703] veth0_macvtap: entered promiscuous mode [ 1373.940135][T19895] netlink: 'syz.2.4692': attribute type 4 has an invalid length. [ 1374.040202][T19703] veth1_macvtap: entered promiscuous mode [ 1374.065394][T19899] netlink: 'syz.2.4692': attribute type 4 has an invalid length. [ 1374.156668][T19703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1374.181846][T19703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1374.196671][T19703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1374.209811][T19703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1374.221392][T19703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1374.235309][T19703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1374.256591][T19703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1374.268186][T19703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1374.284635][T19703] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1374.300373][T19703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1374.310918][T19703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1374.323788][T19703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1374.334534][T19703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1374.346659][T19703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1374.376182][T19703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1374.397782][T19703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1374.436791][T19703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1374.507996][T19703] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1374.810396][T19703] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1374.845167][T19703] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1374.868103][T19703] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1374.878758][T19703] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1375.156769][T17512] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1375.217475][T17512] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1375.392520][T17513] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1375.424217][ T5284] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1375.441931][T17513] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1375.647645][ T5284] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1375.692184][ T5284] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1375.735716][ T5284] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1375.762407][ T5284] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1375.791427][ T5284] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1375.825749][ T5284] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1375.855618][ T5284] usb 3-1: Product: syz [ 1375.859801][ T5284] usb 3-1: Manufacturer: syz [ 1375.919378][ T5284] cdc_wdm 3-1:1.0: skipping garbage [ 1375.947000][ T5284] cdc_wdm 3-1:1.0: skipping garbage [ 1375.987262][ T5284] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1378.073773][ T1853] usb 3-1: USB disconnect, device number 48 [ 1378.950057][T18372] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1379.224291][T18372] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1379.396260][T18372] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1379.408847][T18372] usb 5-1: can't read configurations, error -71 [ 1384.667130][T19987] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1385.060749][T19976] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4713'. [ 1385.093975][T19976] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4713'. [ 1385.146295][ T25] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1385.395877][ T25] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1385.406595][ T25] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1385.435234][ T25] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1385.475440][ T25] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1385.507347][ T25] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1385.541889][ T25] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1385.550394][ T25] usb 4-1: Product: syz [ 1385.577648][ T25] usb 4-1: Manufacturer: syz [ 1385.626851][ T25] cdc_wdm 4-1:1.0: skipping garbage [ 1385.648912][ T25] cdc_wdm 4-1:1.0: skipping garbage [ 1385.667957][ T25] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1386.200965][ T25] usb 4-1: USB disconnect, device number 42 [ 1387.714543][ T29] audit: type=1326 audit(1725341475.831:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20005 comm="syz.1.4722" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f53ad579eb9 code=0x0 [ 1388.892015][T16348] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1389.002952][ T9] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1389.592412][T16348] usb 5-1: Using ep0 maxpacket: 8 [ 1389.631682][T16348] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1389.646199][T16348] usb 5-1: config 0 has no interfaces? [ 1389.674524][T16348] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 0.40 [ 1389.707439][T16348] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1389.721763][T16348] usb 5-1: SerialNumber: syz [ 1389.757287][T16348] usb 5-1: config 0 descriptor?? [ 1390.635538][ T1853] usb 5-1: USB disconnect, device number 41 [ 1391.094055][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1391.124880][ T9] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1391.139532][ T9] usb 2-1: can't read configurations, error -71 [ 1405.236925][T18640] Bluetooth: hci2: command 0x0406 tx timeout [ 1405.507179][T18640] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1406.253132][T18640] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1406.268389][T18640] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1406.277839][T18640] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1406.290436][T18640] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1406.304917][T18640] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1406.542526][ T6765] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1406.776306][ T6765] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1407.725278][ T6765] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1408.130149][T20114] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4753'. [ 1408.141941][T20114] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4753'. [ 1408.350637][ T6765] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1408.432187][ T5237] Bluetooth: hci0: command tx timeout [ 1409.054313][ T6765] bridge_slave_1: left allmulticast mode [ 1409.072279][ T6765] bridge_slave_1: left promiscuous mode [ 1409.117865][ T6765] bridge0: port 2(bridge_slave_1) entered disabled state [ 1409.158125][ T6765] bridge_slave_0: left allmulticast mode [ 1409.207737][ T6765] bridge_slave_0: left promiscuous mode [ 1409.230141][ T6765] bridge0: port 1(bridge_slave_0) entered disabled state [ 1412.539348][ T5237] Bluetooth: hci0: command tx timeout [ 1413.606146][ T1853] IPVS: starting estimator thread 0... [ 1413.721994][T20141] IPVS: using max 21 ests per chain, 50400 per kthread [ 1414.672017][ T5237] Bluetooth: hci0: command tx timeout [ 1415.291360][ T6765] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1415.831973][ T6765] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1415.869922][ T6765] bond0 (unregistering): Released all slaves [ 1415.911598][T20092] chnl_net:caif_netlink_parms(): no params data found [ 1416.761936][ T5237] Bluetooth: hci0: command tx timeout [ 1417.064652][T20160] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4764'. [ 1417.074445][T20160] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4764'. [ 1417.545270][ T6765] hsr_slave_0: left promiscuous mode [ 1417.562260][ T6765] hsr_slave_1: left promiscuous mode [ 1417.600041][ T6765] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1417.616022][ T6765] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1417.630855][ T6765] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1417.649650][ T6765] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1417.775976][ T6765] veth1_macvtap: left promiscuous mode [ 1417.806246][ T6765] veth0_macvtap: left promiscuous mode [ 1417.839063][ T6765] veth1_vlan: left promiscuous mode [ 1417.883872][ T6765] veth0_vlan: left promiscuous mode [ 1421.152188][ T25] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1421.341948][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 1421.350396][ T25] usb 4-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 1421.380984][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1421.450814][ T25] usb 4-1: config 0 descriptor?? [ 1421.487651][ T25] usb 4-1: bad CDC descriptors [ 1421.498212][ T25] cdc_acm 4-1:0.0: Zero length descriptor references [ 1421.546243][ T25] cdc_acm 4-1:0.0: probe with driver cdc_acm failed with error -22 [ 1422.449059][ T6765] team0 (unregistering): Port device team_slave_1 removed [ 1422.568268][ T6765] team0 (unregistering): Port device team_slave_0 removed [ 1422.599760][T20222] netlink: 4068 bytes leftover after parsing attributes in process `syz.2.4777'. [ 1423.444722][T20206] netlink: 'syz.4.4773': attribute type 4 has an invalid length. [ 1423.471699][T20210] netlink: 'syz.4.4773': attribute type 4 has an invalid length. [ 1423.541060][T20092] bridge0: port 1(bridge_slave_0) entered blocking state [ 1423.572191][T20092] bridge0: port 1(bridge_slave_0) entered disabled state [ 1423.610728][T20092] bridge_slave_0: entered allmulticast mode [ 1423.625112][T20092] bridge_slave_0: entered promiscuous mode [ 1423.684212][T20092] bridge0: port 2(bridge_slave_1) entered blocking state [ 1423.691415][T20092] bridge0: port 2(bridge_slave_1) entered disabled state [ 1423.718345][ T25] usb 4-1: USB disconnect, device number 43 [ 1423.752131][T20092] bridge_slave_1: entered allmulticast mode [ 1423.760029][T20092] bridge_slave_1: entered promiscuous mode [ 1424.735511][T20092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1424.789207][T20092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1425.439333][T20092] team0: Port device team_slave_0 added [ 1425.510462][T20092] team0: Port device team_slave_1 added [ 1425.710156][T20092] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1425.747553][T20092] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1425.786512][T20092] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1425.865500][T20092] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1425.905743][T20092] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1426.113554][T20092] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1426.648941][T20092] hsr_slave_0: entered promiscuous mode [ 1426.726476][T20092] hsr_slave_1: entered promiscuous mode [ 1426.747624][T20092] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1426.784376][T20263] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4786'. [ 1426.793300][T20092] Cannot create hsr debugfs directory [ 1426.800465][T20263] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4786'. [ 1426.815098][T20266] netlink: 'syz.2.4788': attribute type 4 has an invalid length. [ 1427.382012][T20266] netlink: 'syz.2.4788': attribute type 4 has an invalid length. [ 1427.656496][T20282] program syz.4.4791 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1435.759642][T20092] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1435.785463][T20092] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1435.874130][T20092] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1435.949363][T20092] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1436.358260][T20092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1436.446585][T20092] 8021q: adding VLAN 0 to HW filter on device team0 [ 1436.470970][T17512] bridge0: port 1(bridge_slave_0) entered blocking state [ 1436.478121][T17512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1436.589446][ T6780] bridge0: port 2(bridge_slave_1) entered blocking state [ 1436.596722][ T6780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1436.690332][T20328] netlink: 'syz.3.4803': attribute type 4 has an invalid length. [ 1436.761510][T20331] netlink: 'syz.3.4803': attribute type 4 has an invalid length. [ 1437.507648][T20343] netlink: 'syz.4.4805': attribute type 4 has an invalid length. [ 1437.652491][T20345] netlink: 'syz.4.4805': attribute type 4 has an invalid length. [ 1438.189728][T20092] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1438.442094][T20092] veth0_vlan: entered promiscuous mode [ 1439.440136][T20092] veth1_vlan: entered promiscuous mode [ 1439.525720][T20092] veth0_macvtap: entered promiscuous mode [ 1439.564213][T20092] veth1_macvtap: entered promiscuous mode [ 1439.593485][T20092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1439.615283][T20092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1439.668703][T20092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1439.721322][T20092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1439.731658][T20092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1439.751966][T20092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1439.763839][T20092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1439.783376][T20092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1439.796906][T20092] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1439.860244][T20092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1439.891808][T20092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1439.902309][T20092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1439.922004][T20092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1439.959688][T20092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1439.971976][T16348] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1439.972140][T20092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1440.029496][T20092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1440.053077][T20092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1440.065647][T20092] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1440.076408][T20372] netlink: 'syz.2.4811': attribute type 4 has an invalid length. [ 1440.131011][T20092] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1440.161908][T20092] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1440.187756][T20092] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1440.203872][T16348] usb 1-1: Using ep0 maxpacket: 8 [ 1440.212202][T20092] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1440.230003][T16348] usb 1-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 1440.264086][T16348] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1440.281555][T16348] usb 1-1: config 0 descriptor?? [ 1440.301240][T16348] usb 1-1: bad CDC descriptors [ 1440.309676][T20372] netlink: 'syz.2.4811': attribute type 4 has an invalid length. [ 1440.323051][T16348] cdc_acm 1-1:0.0: Zero length descriptor references [ 1440.341931][T16348] cdc_acm 1-1:0.0: probe with driver cdc_acm failed with error -22 [ 1445.732197][T13315] usb 1-1: USB disconnect, device number 53 [ 1445.910344][T20384] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4814'. [ 1446.243653][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1446.412782][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1446.469656][T12480] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1446.500630][T12480] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1447.632797][ T5284] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1447.712032][ T1853] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1447.867925][ T5284] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1447.899053][ T5284] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1447.932014][ T1853] usb 1-1: Using ep0 maxpacket: 8 [ 1447.963747][ T5284] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1447.963922][ T1853] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1447.989668][ T5284] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1448.096169][ T5284] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1448.112788][ T1853] usb 1-1: config 0 has no interfaces? [ 1448.118492][ T5284] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1448.161703][ T1853] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 0.40 [ 1448.203279][ T1853] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1448.212572][ T5284] usb 2-1: config 0 descriptor?? [ 1448.221181][ T1853] usb 1-1: SerialNumber: syz [ 1448.302406][ T1853] usb 1-1: config 0 descriptor?? [ 1448.692634][ T5284] plantronics 0003:047F:FFFF.0015: ignoring exceeding usage max [ 1448.736744][ T5284] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 1448.809562][ T5284] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 1448.871723][ T5284] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 1448.879425][ T5284] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 1448.912776][ T5283] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1448.953369][ T5284] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 1448.962076][ T5284] plantronics 0003:047F:FFFF.0015: No inputs registered, leaving [ 1449.028957][ T5284] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1449.142269][ T5283] usb 3-1: Using ep0 maxpacket: 32 [ 1449.176063][ T5283] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1449.208398][ T5283] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1449.227914][T18372] usb 1-1: USB disconnect, device number 54 [ 1449.237804][ T5283] usb 3-1: Product: syz [ 1449.253004][ T5283] usb 3-1: Manufacturer: syz [ 1449.268096][ T5283] usb 3-1: SerialNumber: syz [ 1449.287288][ T5283] usb 3-1: config 0 descriptor?? [ 1450.064271][ T5283] peak_usb 3-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 1450.078760][ T5283] peak_usb 3-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 1450.152639][ T5283] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -71 [ 1450.186736][ T5283] usb 3-1: USB disconnect, device number 49 [ 1450.482113][ T1853] usb 2-1: reset high-speed USB device number 56 using dummy_hcd [ 1451.371604][T18640] Bluetooth: hci4: command 0x0406 tx timeout [ 1452.120564][T20443] netlink: 'syz.2.4828': attribute type 4 has an invalid length. [ 1452.244731][T20446] netlink: 'syz.2.4828': attribute type 4 has an invalid length. [ 1452.634917][T18972] usb 2-1: USB disconnect, device number 56 [ 1454.284101][T20466] program syz.0.4832 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1456.642119][T13315] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1456.884703][T13315] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1456.923648][T13315] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1456.948555][T13315] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1456.978157][T13315] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1457.057381][T13315] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1457.144106][T13315] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1457.195912][T13315] usb 3-1: config 0 descriptor?? [ 1458.286102][T13315] plantronics 0003:047F:FFFF.0016: ignoring exceeding usage max [ 1458.340408][T13315] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 1458.348682][T13315] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 1458.358424][T13315] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 1458.369006][T13315] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 1458.400318][T13315] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 1458.538371][T13315] plantronics 0003:047F:FFFF.0016: No inputs registered, leaving [ 1459.051687][T13315] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1459.131697][T20511] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4844'. [ 1459.140641][T20511] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4844'. [ 1459.926621][T16348] usb 3-1: USB disconnect, device number 50 [ 1463.891348][T20554] netlink: 'syz.0.4854': attribute type 4 has an invalid length. [ 1463.955752][T20554] netlink: 'syz.0.4854': attribute type 4 has an invalid length. [ 1464.202464][ T1853] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1464.311906][T16348] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1464.446386][ T1853] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1464.477707][ T1853] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1464.530310][ T1853] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1464.531902][T16348] usb 3-1: Using ep0 maxpacket: 8 [ 1464.561437][ T1853] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1464.596205][ T938] kworker/0:2 (938) used greatest stack depth: 20816 bytes left [ 1464.618812][ T1853] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1464.637632][ T1853] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1464.659430][ T1853] usb 2-1: config 0 descriptor?? [ 1464.662316][T16348] usb 3-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 1464.755028][T16348] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1464.793483][T16348] usb 3-1: config 0 descriptor?? [ 1464.821116][T16348] usb 3-1: bad CDC descriptors [ 1464.853516][T16348] cdc_acm 3-1:0.0: Zero length descriptor references [ 1464.876402][T16348] cdc_acm 3-1:0.0: probe with driver cdc_acm failed with error -22 [ 1465.101143][ T1853] plantronics 0003:047F:FFFF.0017: ignoring exceeding usage max [ 1465.122334][ T1853] plantronics 0003:047F:FFFF.0017: No inputs registered, leaving [ 1465.152338][ T1853] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1465.231662][ T5237] Bluetooth: hci4: unexpected event for opcode 0x2002 [ 1468.399862][T18372] usb 3-1: USB disconnect, device number 51 [ 1468.428882][T18972] usb 2-1: USB disconnect, device number 57 [ 1469.322304][ T5237] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1469.333066][ T5237] Bluetooth: hci4: Injecting HCI hardware error event [ 1469.345159][ T5237] Bluetooth: hci4: hardware error 0x00 [ 1469.677012][ T29] audit: type=1326 audit(1725341557.821:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20609 comm="syz.1.4871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa11d79eb9 code=0x7ffc0000 [ 1469.765921][ T29] audit: type=1326 audit(1725341557.851:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20609 comm="syz.1.4871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ffa11d79eb9 code=0x7ffc0000 [ 1469.864305][ T29] audit: type=1400 audit(1725341557.851:778): avc: denied { map } for pid=20609 comm="syz.1.4871" path="socket:[78191]" dev="sockfs" ino=78191 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1469.919075][ T29] audit: type=1326 audit(1725341557.851:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20609 comm="syz.1.4871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa11d79eb9 code=0x7ffc0000 [ 1469.969649][ T29] audit: type=1326 audit(1725341557.851:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20609 comm="syz.1.4871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa11d79eb9 code=0x7ffc0000 [ 1469.991908][T18372] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1470.053765][ T29] audit: type=1326 audit(1725341557.871:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20609 comm="syz.1.4871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ffa11d79eb9 code=0x7ffc0000 [ 1470.139115][ T29] audit: type=1326 audit(1725341557.871:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20609 comm="syz.1.4871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa11d79eb9 code=0x7ffc0000 [ 1470.221868][T18372] usb 1-1: Using ep0 maxpacket: 32 [ 1470.401687][T18372] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1470.480630][T18372] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1470.577253][T18372] usb 1-1: Product: syz [ 1470.626879][T18372] usb 1-1: Manufacturer: syz [ 1470.653068][ T29] audit: type=1326 audit(1725341557.871:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20609 comm="syz.1.4871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa11d79eb9 code=0x7ffc0000 [ 1470.738330][T18372] usb 1-1: SerialNumber: syz [ 1470.839166][T18372] usb 1-1: config 0 descriptor?? [ 1470.886616][ T29] audit: type=1326 audit(1725341557.881:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20609 comm="syz.1.4871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffa11d79eb9 code=0x7ffc0000 [ 1470.923335][ T29] audit: type=1326 audit(1725341557.891:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20609 comm="syz.1.4871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa11d79eb9 code=0x7ffc0000 [ 1471.792023][ T5237] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1472.588648][T18372] peak_usb 1-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 1472.624142][T18372] peak_usb 1-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 1472.766380][T18372] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -71 [ 1472.871611][T18372] usb 1-1: USB disconnect, device number 55 [ 1472.952393][ T5283] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1473.409956][T20657] program syz.3.4885 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1474.255154][ T5283] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1474.325988][ T5283] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1474.365357][ T5283] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1474.402009][ T5283] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1474.458912][ T5283] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1474.486258][T20670] netlink: 'syz.0.4889': attribute type 4 has an invalid length. [ 1474.553672][ T5283] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1474.572745][ T5283] usb 5-1: config 0 descriptor?? [ 1474.663946][T20675] netlink: 'syz.0.4889': attribute type 4 has an invalid length. [ 1475.008981][ T5283] plantronics 0003:047F:FFFF.0018: ignoring exceeding usage max [ 1475.058312][ T5283] plantronics 0003:047F:FFFF.0018: No inputs registered, leaving [ 1475.122847][ T5283] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1478.351997][ C1] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN PTI [ 1478.364626][ C1] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 1478.373065][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.11.0-rc6-syzkaller-00019-g67784a74e258 #0 [ 1478.383430][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1478.393502][ C1] RIP: 0010:llc_conn_state_process+0xa14/0x14c0 [ 1478.399768][ C1] Code: 8b 98 a0 01 00 00 e8 8b 7a 7e f8 45 84 e4 0f 84 85 08 00 00 e8 9d 78 7e f8 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e a3 09 00 00 48 8b 44 24 08 c7 [ 1478.419392][ C1] RSP: 0018:ffffc90000a18bd0 EFLAGS: 00010246 [ 1478.425463][ C1] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff890d47a5 [ 1478.433432][ C1] RDX: 0000000000000000 RSI: ffffffff890d47b3 RDI: 0000000000000001 [ 1478.441485][ C1] RBP: ffff88801dea43c0 R08: 0000000000000001 R09: 0000000000000000 [ 1478.449453][ C1] R10: 0000000000000002 R11: 0000000000000000 R12: 0000000000000002 [ 1478.457423][ C1] R13: ffffffff8c7e0b30 R14: ffff88807b90f000 R15: ffffffff8c7e0ae0 [ 1478.465396][ C1] FS: 0000000000000000(0000) GS:ffff8880b8900000(0000) knlGS:0000000000000000 [ 1478.474332][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1478.480915][ C1] CR2: 00007fa3512e18bc CR3: 000000005fbb0000 CR4: 00000000003506f0 [ 1478.488888][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1478.496854][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1478.504821][ C1] Call Trace: [ 1478.508093][ C1] [ 1478.510935][ C1] ? show_regs+0x8c/0xa0 [ 1478.515209][ C1] ? die_addr+0x4f/0xd0 [ 1478.519375][ C1] ? exc_general_protection+0x155/0x230 [ 1478.524926][ C1] ? asm_exc_general_protection+0x26/0x30 [ 1478.530652][ C1] ? llc_conn_state_process+0x9f5/0x14c0 [ 1478.536295][ C1] ? llc_conn_state_process+0xa03/0x14c0 [ 1478.541932][ C1] ? llc_conn_state_process+0xa14/0x14c0 [ 1478.547572][ C1] llc_conn_tmr_common_cb+0x452/0x8e0 [ 1478.552960][ C1] call_timer_fn+0x1a0/0x610 [ 1478.557559][ C1] ? __pfx_llc_conn_ack_tmr_cb+0x10/0x10 [ 1478.563196][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1478.568338][ C1] ? __pfx_lock_release+0x10/0x10 [ 1478.573374][ C1] ? __pfx_llc_conn_ack_tmr_cb+0x10/0x10 [ 1478.579015][ C1] ? __pfx_llc_conn_ack_tmr_cb+0x10/0x10 [ 1478.584651][ C1] __run_timers+0x74b/0xaf0 [ 1478.589256][ C1] ? __pfx___run_timers+0x10/0x10 [ 1478.594290][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1478.599334][ C1] run_timer_base+0x111/0x190 [ 1478.604022][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 1478.609234][ C1] run_timer_softirq+0x1a/0x40 [ 1478.614013][ C1] handle_softirqs+0x216/0x8f0 [ 1478.618782][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1478.624084][ C1] irq_exit_rcu+0xbb/0x120 [ 1478.628513][ C1] sysvec_apic_timer_interrupt+0x95/0xb0 [ 1478.634182][ C1] [ 1478.637111][ C1] [ 1478.640037][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1478.646032][ C1] RIP: 0010:acpi_safe_halt+0x1a/0x20 [ 1478.651341][ C1] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 65 48 8b 05 c8 e1 ec 74 48 8b 00 a8 08 75 0c 66 90 0f 00 2d 58 6a a5 00 fb f4 c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1478.670959][ C1] RSP: 0018:ffffc900001a7d58 EFLAGS: 00000246 [ 1478.677028][ C1] RAX: 0000000000004000 RBX: 0000000000000001 RCX: ffffffff8b16dc59 [ 1478.685083][ C1] RDX: 0000000000000001 RSI: ffff8880216bb000 RDI: ffff8880216bb064 [ 1478.693051][ C1] RBP: ffff8880216bb064 R08: 0000000000000001 R09: ffffed1017126fd9 [ 1478.701016][ C1] R10: ffff8880b8937ecb R11: 0000000000000000 R12: ffff888021b59000 [ 1478.708984][ C1] R13: ffffffff8e961d80 R14: 0000000000000001 R15: 0000000000000000 [ 1478.716962][ C1] ? ct_kernel_exit+0x139/0x190 [ 1478.721839][ C1] acpi_idle_enter+0xc5/0x160 [ 1478.726529][ C1] cpuidle_enter_state+0x85/0x500 [ 1478.731568][ C1] ? __pfx_tsc_verify_tsc_adjust+0x10/0x10 [ 1478.737394][ C1] cpuidle_enter+0x4e/0xa0 [ 1478.741816][ C1] do_idle+0x313/0x3f0 [ 1478.745894][ C1] ? __pfx_do_idle+0x10/0x10 [ 1478.750492][ C1] ? do_idle+0x6/0x3f0 [ 1478.754576][ C1] cpu_startup_entry+0x4f/0x60 [ 1478.759354][ C1] start_secondary+0x220/0x2b0 [ 1478.764138][ C1] ? __pfx_start_secondary+0x10/0x10 [ 1478.769434][ C1] common_startup_64+0x13e/0x148 [ 1478.774385][ C1] [ 1478.777394][ C1] Modules linked in: [ 1478.781394][ C1] ---[ end trace 0000000000000000 ]--- [ 1478.786923][ C1] RIP: 0010:llc_conn_state_process+0xa14/0x14c0 [ 1478.793223][ C1] Code: 8b 98 a0 01 00 00 e8 8b 7a 7e f8 45 84 e4 0f 84 85 08 00 00 e8 9d 78 7e f8 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e a3 09 00 00 48 8b 44 24 08 c7 [ 1478.812882][ C1] RSP: 0018:ffffc90000a18bd0 EFLAGS: 00010246 [ 1478.818985][ C1] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff890d47a5 [ 1478.826996][ C1] RDX: 0000000000000000 RSI: ffffffff890d47b3 RDI: 0000000000000001 [ 1478.835054][ C1] RBP: ffff88801dea43c0 R08: 0000000000000001 R09: 0000000000000000 [ 1478.843068][ C1] R10: 0000000000000002 R11: 0000000000000000 R12: 0000000000000002 [ 1478.851062][ C1] R13: ffffffff8c7e0b30 R14: ffff88807b90f000 R15: ffffffff8c7e0ae0 [ 1478.859081][ C1] FS: 0000000000000000(0000) GS:ffff8880b8900000(0000) knlGS:0000000000000000 [ 1478.868057][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1478.874772][ C1] CR2: 00007fa3512e18bc CR3: 000000005fbb0000 CR4: 00000000003506f0 [ 1478.882780][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1478.890774][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1478.898793][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 1478.906233][ C1] Kernel Offset: disabled [ 1478.910546][ C1] Rebooting in 86400 seconds..