last executing test programs: 54.980234423s ago: executing program 1 (id=763): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x4e21, 0x4, @mcast2}, {0xa, 0x4e22, 0x955, @empty, 0x9}, 0x0, {[0x9, 0xfffffffc, 0x38000000, 0xb, 0x6, 0x10, 0x7, 0x7]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x32}, 0x6}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x0, 0x0, 0xfffffffd, 0xffffffff]}}, 0x5c) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000240)=0x2, 0x4) 42.072844184s ago: executing program 1 (id=763): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x4e21, 0x4, @mcast2}, {0xa, 0x4e22, 0x955, @empty, 0x9}, 0x0, {[0x9, 0xfffffffc, 0x38000000, 0xb, 0x6, 0x10, 0x7, 0x7]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x32}, 0x6}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x0, 0x0, 0xfffffffd, 0xffffffff]}}, 0x5c) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000240)=0x2, 0x4) 29.860590068s ago: executing program 1 (id=763): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x4e21, 0x4, @mcast2}, {0xa, 0x4e22, 0x955, @empty, 0x9}, 0x0, {[0x9, 0xfffffffc, 0x38000000, 0xb, 0x6, 0x10, 0x7, 0x7]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x32}, 0x6}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x0, 0x0, 0xfffffffd, 0xffffffff]}}, 0x5c) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000240)=0x2, 0x4) 22.669235653s ago: executing program 0 (id=991): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f00000000c0)=""/43, 0x60) lseek(r0, 0x0, 0x0) 22.545501121s ago: executing program 0 (id=992): r0 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000000)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r1, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb02b, 0x0, 0x0, 0x403, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0xff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffa6c7, 0x0, 0x3, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x1, 0x0, 0x7, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) close_range(r0, 0xffffffffffffffff, 0x0) 22.364254432s ago: executing program 0 (id=993): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000001b40)=0x9) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r1) recvmmsg(r1, &(0x7f000000a400), 0x6fe, 0x10163, 0x0) 21.42562028s ago: executing program 0 (id=1001): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000400)='./file0/file0\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x3125899, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x202) 21.165491028s ago: executing program 0 (id=1003): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x20200) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r0 = syz_io_uring_setup(0xa0, &(0x7f0000000640)={0x0, 0x105cc6, 0x0, 0x0, 0x207}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000100)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 20.656321967s ago: executing program 0 (id=1008): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104000000000000000000000010", @ANYRES32=r3, @ANYBLOB="000000000000000008000300", @ANYRES32=r2], 0x28}, 0x1, 0x8}, 0x0) 20.287757495s ago: executing program 32 (id=1008): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104000000000000000000000010", @ANYRES32=r3, @ANYBLOB="000000000000000008000300", @ANYRES32=r2], 0x28}, 0x1, 0x8}, 0x0) 18.0488391s ago: executing program 1 (id=763): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x4e21, 0x4, @mcast2}, {0xa, 0x4e22, 0x955, @empty, 0x9}, 0x0, {[0x9, 0xfffffffc, 0x38000000, 0xb, 0x6, 0x10, 0x7, 0x7]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x32}, 0x6}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x0, 0x0, 0xfffffffd, 0xffffffff]}}, 0x5c) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000240)=0x2, 0x4) 11.687203536s ago: executing program 1 (id=763): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x4e21, 0x4, @mcast2}, {0xa, 0x4e22, 0x955, @empty, 0x9}, 0x0, {[0x9, 0xfffffffc, 0x38000000, 0xb, 0x6, 0x10, 0x7, 0x7]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x32}, 0x6}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x0, 0x0, 0xfffffffd, 0xffffffff]}}, 0x5c) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000240)=0x2, 0x4) 6.281905095s ago: executing program 4 (id=1059): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "2e2b5aa4"}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4={0x3, 0x0, 0x8}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c00)={0x84, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) 5.811053834s ago: executing program 2 (id=1061): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000004000000060000008000000042"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x18, 0x140e, 0x101, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000340), 0x619, r1}, 0x38) 5.521636574s ago: executing program 2 (id=1063): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000008a40)='|', 0x1}], 0x2}, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) recvmmsg(r1, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000640)=""/85, 0x55}, {0x0}], 0x2}, 0x4}], 0x100000, 0x10022, 0x0) 3.820071744s ago: executing program 2 (id=1069): r0 = socket(0x1e, 0x1, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x1, 0xbfdffffc}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r1, 0x47f6, 0x0, 0x5, 0x0, 0x0) shutdown(r0, 0x2) 3.660923801s ago: executing program 4 (id=1070): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000006d00000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 3.579098324s ago: executing program 2 (id=1071): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) close(r0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108) 3.412264896s ago: executing program 4 (id=1073): getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000000)={0x2, [0x5, 0x6]}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 3.308722672s ago: executing program 2 (id=1074): r0 = socket$inet(0x2, 0x2, 0x1) bind$inet(r0, &(0x7f00000004c0)={0x2, 0x6e24, @empty}, 0x10) r1 = socket$inet(0x2, 0x2, 0x1) bind$inet(r1, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r2 = socket(0x2, 0x2, 0x1) bind$unix(r2, &(0x7f0000000000)=@abs, 0x6e) 3.154695869s ago: executing program 4 (id=1075): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x2000002, 0x3a, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.105526257s ago: executing program 2 (id=1077): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x75, 0x1c, 0x1, 0x10, 0xfe6, 0x9800, 0xd19a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x2, 0x2, 0xb4, 0x8c, 0xbb, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f00000002c0)={0x0, 0x1, 0x6, "cc17fc47a9ae"}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 2.793729705s ago: executing program 4 (id=1080): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f00000ee000/0x2000)=nil, 0x2000, 0x8) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2800001, 0xc3072, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000380)=""/167, 0xa7) 2.337739755s ago: executing program 1 (id=763): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x4e21, 0x4, @mcast2}, {0xa, 0x4e22, 0x955, @empty, 0x9}, 0x0, {[0x9, 0xfffffffc, 0x38000000, 0xb, 0x6, 0x10, 0x7, 0x7]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x32}, 0x6}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x0, 0x0, 0xfffffffd, 0xffffffff]}}, 0x5c) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000240)=0x2, 0x4) 1.456398s ago: executing program 4 (id=1083): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{}, [@TCA_NETEM_LOSS={0x4, 0xd}]}}}]}, 0x50}}, 0x0) 1.100306903s ago: executing program 5 (id=1085): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x7ff, 0x43c, 0x0, 0x2, 0x7f, 0xfffffff8, 0x6, 0x2831, r2}, 0x20) 985.0888ms ago: executing program 5 (id=1087): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0xf, &(0x7f00000002c0), 0x161) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x814) setsockopt$sock_attach_bpf(r1, 0x1, 0x31, &(0x7f0000000640)=r0, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x31, &(0x7f0000000000), 0x4) 854.839055ms ago: executing program 5 (id=1088): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioprio_set$pid(0x2, 0x0, 0x0) r0 = syz_io_uring_setup(0x416f, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000001240)=0x0, &(0x7f0000001340)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x567, 0x0, 0x0, 0x0, 0x0) 766.513787ms ago: executing program 3 (id=1089): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f00001b4000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x38, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f0000000140)) 645.356735ms ago: executing program 5 (id=1090): setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x24}}}, 0x80, 0x0, 0x0, 0x542000, 0x90}, 0x9c) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty, 0x8}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x408, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x338, 0xffffffff, 0xffffffff, 0x338, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'dvmrp0\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x0, 0x30}, 0x0, 0x238, 0x268, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@rt={{0x138}, {0xf, [0xd, 0x4], 0x0, 0x4, 0x6, [@empty, @private0, @loopback, @ipv4={'\x00', '\xff\xff', @loopback}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, @mcast2, @empty, @dev={0xfe, 0x80, '\x00', 0x2d}, @mcast2, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @loopback, @loopback, @mcast2], 0xa}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x200}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x468) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x9584, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd8}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 406.358211ms ago: executing program 3 (id=1091): r0 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) 369.989837ms ago: executing program 5 (id=1092): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000380)={0x0, 0x4000, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100050005000700000000000800090000003f0014002000ff200100100000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) 316.360079ms ago: executing program 3 (id=1093): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x9, 0x6, 0x80000000, 0x7, 0x1, 0x20000000000000, 0x200000000000, 0x6, 0x7fffffff}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) 246.655567ms ago: executing program 5 (id=1094): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000080)={&(0x7f00000000c0)=[{0x94, 0x6a00, 0x2, &(0x7f0000000040)="86ab"}], 0x1}) 183.724757ms ago: executing program 3 (id=1095): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$unix(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/25, 0x19}], 0x1}, 0x40010062) 101.575856ms ago: executing program 3 (id=1096): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x200c0810}, 0x44004) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000040000000000a40000000160a01080000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="88010000170a0101"], 0x188}}, 0x0) 0s ago: executing program 3 (id=1097): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x400, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x20480d4) accept4$rose(r1, &(0x7f0000000140)=@full={0xb, @dev, @bcast, 0x0, [@null, @netrom, @default, @remote, @null, @null]}, 0x0, 0x800) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.176' (ED25519) to the list of known hosts. [ 84.383432][ T5805] cgroup: Unknown subsys name 'net' [ 84.501098][ T5805] cgroup: Unknown subsys name 'cpuset' [ 84.511110][ T5805] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.153143][ T5805] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.970058][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.971812][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.978079][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.993841][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.994036][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.001485][ T5830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.016809][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.018045][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 89.024125][ T5830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.039665][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.047558][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.055253][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 89.062691][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.071244][ T5830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.071932][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.088230][ T5136] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.095980][ T5136] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.099619][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.111263][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.111671][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.119501][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.127145][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.142784][ T5836] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.143758][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.151582][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.677964][ T5816] chnl_net:caif_netlink_parms(): no params data found [ 89.864246][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 90.024520][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.032553][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.040133][ T5816] bridge_slave_0: entered allmulticast mode [ 90.048728][ T5816] bridge_slave_0: entered promiscuous mode [ 90.061565][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.068860][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.076047][ T5816] bridge_slave_1: entered allmulticast mode [ 90.084252][ T5816] bridge_slave_1: entered promiscuous mode [ 90.107178][ T5817] chnl_net:caif_netlink_parms(): no params data found [ 90.180133][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 90.228536][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.235699][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.244760][ T5829] bridge_slave_0: entered allmulticast mode [ 90.252262][ T5829] bridge_slave_0: entered promiscuous mode [ 90.290368][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.300834][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.312548][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.320642][ T5829] bridge_slave_1: entered allmulticast mode [ 90.330189][ T5829] bridge_slave_1: entered promiscuous mode [ 90.354674][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.433818][ T5816] team0: Port device team_slave_0 added [ 90.465481][ T5815] chnl_net:caif_netlink_parms(): no params data found [ 90.479354][ T5816] team0: Port device team_slave_1 added [ 90.511344][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.598148][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.622938][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.630694][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.638019][ T5817] bridge_slave_0: entered allmulticast mode [ 90.645295][ T5817] bridge_slave_0: entered promiscuous mode [ 90.653661][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.663350][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.689863][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.741225][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.748628][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.755834][ T5817] bridge_slave_1: entered allmulticast mode [ 90.765118][ T5817] bridge_slave_1: entered promiscuous mode [ 90.772739][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.781957][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.807986][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.871521][ T5829] team0: Port device team_slave_0 added [ 90.887296][ T5829] team0: Port device team_slave_1 added [ 90.925447][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.934831][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.944958][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.952377][ T5821] bridge_slave_0: entered allmulticast mode [ 90.960727][ T5821] bridge_slave_0: entered promiscuous mode [ 90.969294][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.976654][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.983813][ T5821] bridge_slave_1: entered allmulticast mode [ 90.991828][ T5821] bridge_slave_1: entered promiscuous mode [ 91.034449][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.111551][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.119477][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.145584][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.157269][ T5826] Bluetooth: hci0: command tx timeout [ 91.157372][ T5836] Bluetooth: hci1: command tx timeout [ 91.165401][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.175408][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.201599][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.227083][ T5836] Bluetooth: hci2: command tx timeout [ 91.227099][ T5826] Bluetooth: hci3: command tx timeout [ 91.227319][ T5826] Bluetooth: hci4: command tx timeout [ 91.239165][ T5817] team0: Port device team_slave_0 added [ 91.253594][ T5817] team0: Port device team_slave_1 added [ 91.262358][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.275453][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.330575][ T5816] hsr_slave_0: entered promiscuous mode [ 91.338739][ T5816] hsr_slave_1: entered promiscuous mode [ 91.388214][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.395423][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.403728][ T5815] bridge_slave_0: entered allmulticast mode [ 91.411442][ T5815] bridge_slave_0: entered promiscuous mode [ 91.421858][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.429430][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.436996][ T5815] bridge_slave_1: entered allmulticast mode [ 91.444290][ T5815] bridge_slave_1: entered promiscuous mode [ 91.467509][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.474496][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.500883][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.553847][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.564436][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.591667][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.605777][ T5821] team0: Port device team_slave_0 added [ 91.653217][ T5829] hsr_slave_0: entered promiscuous mode [ 91.660007][ T5829] hsr_slave_1: entered promiscuous mode [ 91.666475][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.674259][ T5829] Cannot create hsr debugfs directory [ 91.682582][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.701546][ T5821] team0: Port device team_slave_1 added [ 91.734184][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.786856][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.793847][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.820344][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.873945][ T43] cfg80211: failed to load regulatory.db [ 91.899615][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.909216][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.936253][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.980186][ T5815] team0: Port device team_slave_0 added [ 91.989305][ T5815] team0: Port device team_slave_1 added [ 92.004308][ T5817] hsr_slave_0: entered promiscuous mode [ 92.011337][ T5817] hsr_slave_1: entered promiscuous mode [ 92.017897][ T5817] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.025472][ T5817] Cannot create hsr debugfs directory [ 92.191924][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.199117][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.225529][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.238536][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.245592][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.275479][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.297550][ T5821] hsr_slave_0: entered promiscuous mode [ 92.303950][ T5821] hsr_slave_1: entered promiscuous mode [ 92.310573][ T5821] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.318213][ T5821] Cannot create hsr debugfs directory [ 92.464149][ T5815] hsr_slave_0: entered promiscuous mode [ 92.471182][ T5815] hsr_slave_1: entered promiscuous mode [ 92.477626][ T5815] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.485271][ T5815] Cannot create hsr debugfs directory [ 92.805968][ T5816] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.835862][ T5816] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.864585][ T5816] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.897584][ T5816] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.945953][ T5817] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.960751][ T5817] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.985718][ T5817] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.012075][ T5817] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.071595][ T5829] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.101091][ T5829] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.131593][ T5829] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.150882][ T5829] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.226782][ T5823] Bluetooth: hci0: command tx timeout [ 93.236691][ T5826] Bluetooth: hci1: command tx timeout [ 93.250554][ T5821] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 93.263766][ T5821] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 93.276039][ T5821] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.306477][ T5823] Bluetooth: hci4: command tx timeout [ 93.311935][ T5823] Bluetooth: hci3: command tx timeout [ 93.319350][ T5826] Bluetooth: hci2: command tx timeout [ 93.345118][ T5821] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 93.384139][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.424035][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.466102][ T5816] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.493735][ T5815] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.504176][ T5815] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.531901][ T5815] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.548171][ T3474] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.555397][ T3474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.574768][ T5817] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.584291][ T5815] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.605625][ T3474] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.612850][ T3474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.633540][ T3474] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.640755][ T3474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.675076][ T3474] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.682289][ T3474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.788366][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.853618][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.914928][ T3500] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.922433][ T3500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.994009][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.001225][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.051625][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.130560][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.154500][ T5829] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 94.172488][ T5829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.194315][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.217918][ T3500] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.225121][ T3500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.271814][ T3500] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.279073][ T3500] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.358474][ T5815] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.395452][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.423736][ T3500] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.430956][ T3500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.489572][ T2901] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.497044][ T2901] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.591681][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.790015][ T5816] veth0_vlan: entered promiscuous mode [ 94.800827][ T5817] veth0_vlan: entered promiscuous mode [ 94.870832][ T5816] veth1_vlan: entered promiscuous mode [ 94.883938][ T5817] veth1_vlan: entered promiscuous mode [ 94.905739][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.940943][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.048442][ T5816] veth0_macvtap: entered promiscuous mode [ 95.085778][ T5817] veth0_macvtap: entered promiscuous mode [ 95.100882][ T5816] veth1_macvtap: entered promiscuous mode [ 95.130414][ T5817] veth1_macvtap: entered promiscuous mode [ 95.191529][ T5829] veth0_vlan: entered promiscuous mode [ 95.223834][ T5829] veth1_vlan: entered promiscuous mode [ 95.241095][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.275890][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.295271][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.308079][ T5826] Bluetooth: hci1: command tx timeout [ 95.311434][ T5823] Bluetooth: hci0: command tx timeout [ 95.334373][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.351110][ T5816] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.360307][ T5816] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.370704][ T5816] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.379793][ T5816] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.387197][ T5823] Bluetooth: hci4: command tx timeout [ 95.393940][ T5836] Bluetooth: hci3: command tx timeout [ 95.399838][ T5826] Bluetooth: hci2: command tx timeout [ 95.412782][ T5817] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.421616][ T5817] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.430893][ T5817] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.440463][ T5817] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.461889][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.554253][ T5829] veth0_macvtap: entered promiscuous mode [ 95.623830][ T5829] veth1_macvtap: entered promiscuous mode [ 95.664615][ T5815] veth0_vlan: entered promiscuous mode [ 95.729626][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.735123][ T5815] veth1_vlan: entered promiscuous mode [ 95.744108][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.788996][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.802848][ T5821] veth0_vlan: entered promiscuous mode [ 95.832299][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.844542][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.860295][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.882274][ T5829] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.891584][ T5829] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.902122][ T5829] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.912029][ T5829] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.937792][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.948513][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.964484][ T5821] veth1_vlan: entered promiscuous mode [ 95.999102][ T3500] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.007885][ T5815] veth0_macvtap: entered promiscuous mode [ 96.030216][ T3500] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.062314][ T5815] veth1_macvtap: entered promiscuous mode [ 96.083358][ T5817] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 96.165870][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.210951][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.226088][ T5821] veth0_macvtap: entered promiscuous mode [ 96.250841][ T5815] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.279093][ T5815] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.308464][ T5815] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.317628][ T5815] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.333154][ T3474] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.339290][ T5821] veth1_macvtap: entered promiscuous mode [ 96.373698][ T3474] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.509327][ T3474] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.513380][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.538809][ T3474] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.663511][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.695171][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.701089][ T5821] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.714394][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.728819][ T5821] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.748824][ T5821] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.773450][ T5821] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.897987][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.922727][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.005925][ T5921] overlay: filesystem on ./bus not supported as upperdir [ 97.008308][ T5919] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 97.056029][ T3500] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.083849][ T3500] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.318315][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.342303][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.387343][ T5823] Bluetooth: hci1: command tx timeout [ 97.396728][ T5823] Bluetooth: hci0: command tx timeout [ 97.468146][ T5826] Bluetooth: hci2: command tx timeout [ 97.473615][ T5826] Bluetooth: hci3: command tx timeout [ 97.479306][ T5823] Bluetooth: hci4: command tx timeout [ 97.639856][ T5935] process 'syz.3.13' launched './file0' with NULL argv: empty string added [ 97.858117][ T5940] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 97.886670][ T5874] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 97.935695][ T5942] netlink: 36 bytes leftover after parsing attributes in process `syz.3.16'. [ 98.078083][ T5874] usb 1-1: Using ep0 maxpacket: 8 [ 98.123099][ T5874] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 98.167511][ T5874] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.193799][ T5874] usb 1-1: Product: syz [ 98.212306][ T5874] usb 1-1: Manufacturer: syz [ 98.241866][ T5874] usb 1-1: SerialNumber: syz [ 98.285423][ T5874] usb 1-1: config 0 descriptor?? [ 98.324687][ T5874] gspca_main: se401-2.14.0 probing 047d:5003 [ 98.926747][ T43] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 98.990727][ T5874] input: se401 as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5 [ 99.059760][ T5877] IPVS: starting estimator thread 0... [ 99.086864][ T5960] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 99.144718][ T43] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 99.174368][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.176623][ T5963] IPVS: using max 27 ests per chain, 64800 per kthread [ 99.201178][ T43] usb 2-1: config 0 descriptor?? [ 99.223779][ T5877] usb 1-1: USB disconnect, device number 2 [ 99.270910][ T43] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 99.445937][ T43] gp8psk: usb in 128 operation failed. [ 99.460411][ T43] gp8psk: usb in 137 operation failed. [ 99.492733][ T43] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 99.520357][ T43] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 99.544273][ T43] usb 2-1: media controller created [ 99.650458][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 99.727347][ T43] gp8psk_fe: Frontend attached [ 99.736620][ T43] usb 2-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 99.751379][ T43] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 99.871881][ T43] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 99.892036][ T43] gp8psk: found Genpix USB device pID = 203 (hex) [ 100.140571][ T5877] usb 2-1: USB disconnect, device number 2 [ 100.236451][ T43] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 100.408291][ T5988] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 100.418103][ T5877] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 100.443446][ T43] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 100.460314][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.501059][ T43] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 100.542305][ T43] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 100.562100][ T43] usb 1-1: Manufacturer: syz [ 100.580053][ T43] usb 1-1: config 0 descriptor?? [ 100.639976][ T5993] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 100.694870][ T5995] loop6: detected capacity change from 0 to 524287999 [ 100.758901][ T43] rc_core: IR keymap rc-hauppauge not found [ 100.775979][ T43] Registered IR keymap rc-empty [ 100.810452][ T43] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 100.856605][ T43] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input6 [ 100.960072][ C1] igorplugusb 1-1:0.0: Error: urb status = -32 [ 101.988973][ T6016] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.156980][ T6016] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.669545][ T30] audit: type=1326 audit(1748335890.480:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6021 comm="syz.4.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa56a12ab39 code=0x7ffc0000 [ 102.696155][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 102.790754][ T30] audit: type=1326 audit(1748335890.480:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6021 comm="syz.4.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56a18e969 code=0x7ffc0000 [ 102.843518][ T30] audit: type=1326 audit(1748335890.480:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6021 comm="syz.4.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56a18e969 code=0x7ffc0000 [ 102.944836][ T30] audit: type=1326 audit(1748335890.480:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6021 comm="syz.4.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa56a12ab39 code=0x7ffc0000 [ 102.984725][ T6028] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 103.051676][ T30] audit: type=1326 audit(1748335890.480:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6021 comm="syz.4.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa56a12ab39 code=0x7ffc0000 [ 103.056287][ T24] usb 1-1: USB disconnect, device number 3 [ 103.176904][ T30] audit: type=1326 audit(1748335890.480:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6021 comm="syz.4.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56a18e969 code=0x7ffc0000 [ 103.253647][ T30] audit: type=1326 audit(1748335890.480:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6021 comm="syz.4.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56a18e969 code=0x7ffc0000 [ 103.329043][ T30] audit: type=1326 audit(1748335890.480:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6021 comm="syz.4.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56a18e969 code=0x7ffc0000 [ 103.387271][ T6037] syzkaller1: entered promiscuous mode [ 103.392887][ T6037] syzkaller1: entered allmulticast mode [ 103.441680][ T30] audit: type=1326 audit(1748335890.490:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6021 comm="syz.4.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa56a12ab39 code=0x7ffc0000 [ 103.483883][ T30] audit: type=1326 audit(1748335890.490:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6021 comm="syz.4.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7fa56a18e969 code=0x7ffc0000 [ 103.536660][ T24] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 103.646623][ T6043] capability: warning: `syz.1.61' uses deprecated v2 capabilities in a way that may be insecure [ 103.718491][ T24] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 103.743642][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.771520][ T24] usb 1-1: config 0 descriptor?? [ 103.807537][ T24] cp210x 1-1:0.0: cp210x converter detected [ 103.967943][ T6051] block nbd1: shutting down sockets [ 104.202345][ T24] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 104.316287][ T5874] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 104.326806][ T43] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 104.445555][ T24] usb 1-1: cp210x converter now attached to ttyUSB0 [ 104.500352][ T5874] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.509019][ T43] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.514421][ T6067] netlink: 16 bytes leftover after parsing attributes in process `syz.1.71'. [ 104.526246][ T43] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 104.554490][ T5874] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 104.577612][ T5874] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 104.581643][ T43] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 104.600749][ T5874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 104.623296][ T5874] usb 3-1: SerialNumber: syz [ 104.633681][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.652078][ T43] usb 5-1: Product: syz [ 104.660020][ T24] usb 1-1: USB disconnect, device number 4 [ 104.695948][ T43] usb 5-1: Manufacturer: syz [ 104.704987][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 104.722899][ T43] usb 5-1: SerialNumber: syz [ 104.742200][ T24] cp210x 1-1:0.0: device disconnected [ 104.947232][ T43] usb 5-1: 0:2 : does not exist [ 104.970052][ T6074] netlink: 16 bytes leftover after parsing attributes in process `syz.3.74'. [ 104.975286][ T43] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 105.056053][ T5874] usb 3-1: 0:2 : does not exist [ 105.061514][ T43] usb 5-1: USB disconnect, device number 2 [ 105.115350][ T5874] usb 3-1: USB disconnect, device number 2 [ 105.287376][ T5835] udevd[5835]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 105.380503][ T5835] udevd[5835]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 105.539456][ T6082] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 106.282272][ T5874] IPVS: starting estimator thread 0... [ 106.285068][ T6113] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 106.386367][ T6119] IPVS: using max 27 ests per chain, 64800 per kthread [ 107.360750][ T6139] Driver unsupported XDP return value 0 on prog (id 9) dev N/A, expect packet loss! [ 108.049315][ T6162] overlayfs: upper fs does not support tmpfile. [ 108.274883][ T6168] binder: 6167:6168 ioctl c0306201 200000000540 returned -22 [ 108.616507][ T5874] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 108.807354][ T5874] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 108.843265][ T5874] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 108.859332][ T5874] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.875760][ T5874] usb 5-1: Product: syz [ 108.880469][ T5874] usb 5-1: Manufacturer: syz [ 108.885135][ T5874] usb 5-1: SerialNumber: syz [ 108.900200][ T5874] usb 5-1: config 0 descriptor?? [ 109.106427][ T43] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 109.174473][ T24] usb 5-1: USB disconnect, device number 3 [ 109.289746][ T43] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 109.302496][ T43] usb 2-1: config 0 has no interface number 0 [ 109.323278][ T43] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 109.339022][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.348582][ T43] usb 2-1: Product: syz [ 109.352865][ T43] usb 2-1: Manufacturer: syz [ 109.364699][ T43] usb 2-1: SerialNumber: syz [ 109.382830][ T43] usb 2-1: config 0 descriptor?? [ 109.615982][ T43] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 109.686915][ T43] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 109.732184][ T43] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 109.795810][ T43] usb 2-1: media controller created [ 109.907865][ T6200] netlink: 16 bytes leftover after parsing attributes in process `syz.0.128'. [ 109.950629][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 110.101425][ T43] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 110.239182][ T6214] netlink: 4 bytes leftover after parsing attributes in process `syz.4.135'. [ 110.272421][ T6212] input: syz0 as /devices/virtual/input/input7 [ 110.311563][ T43] usb 2-1: USB disconnect, device number 3 [ 110.615061][ T6224] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 111.019210][ T6236] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 111.407846][ T6249] syzkaller1: entered promiscuous mode [ 111.414637][ T6249] syzkaller1: entered allmulticast mode [ 111.850928][ T30] kauditd_printk_skb: 91 callbacks suppressed [ 111.850952][ T30] audit: type=1326 audit(1748335899.670:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6260 comm="syz.0.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f007cd8e969 code=0x7fc00000 [ 112.057979][ T43] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 112.257342][ T43] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 112.286849][ T43] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 112.300600][ T43] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 112.322291][ T43] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 112.347395][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.355485][ T43] usb 5-1: Product: syz [ 112.366453][ T43] usb 5-1: Manufacturer: syz [ 112.371092][ T43] usb 5-1: SerialNumber: syz [ 112.529984][ T30] audit: type=1326 audit(1748335900.330:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6260 comm="syz.0.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f007cd8e969 code=0x7fc00000 [ 112.551338][ C0] vkms_vblank_simulate: vblank timer overrun [ 112.627599][ T43] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 112.804822][ T5874] usb 5-1: USB disconnect, device number 4 [ 112.861498][ T5874] usblp0: removed [ 113.246244][ T43] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 113.416243][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 113.430108][ T43] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 113.450001][ T43] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 113.468429][ T43] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 113.486272][ T43] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 113.507320][ T43] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 113.539345][ T43] usb 1-1: config 0 has no interface number 0 [ 113.556220][ T43] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 113.574886][ T43] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 113.585205][ T43] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 113.595420][ T43] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 113.620456][ T43] usb 1-1: config 0 interface 125 has no altsetting 0 [ 113.636252][ T43] usb 1-1: config 0 interface 125 has no altsetting 2 [ 113.650645][ T43] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 113.661872][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.674785][ T43] usb 1-1: Product: syz [ 113.682662][ T43] usb 1-1: Manufacturer: syz [ 113.689947][ T43] usb 1-1: SerialNumber: syz [ 113.696320][ T5898] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 113.726059][ T43] usb 1-1: config 0 descriptor?? [ 113.749701][ T43] usb 1-1: selecting invalid altsetting 2 [ 113.858453][ T5898] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.883271][ T5898] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 113.892870][ T5898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.907911][ T5898] usb 5-1: Product: syz [ 113.912207][ T5898] usb 5-1: Manufacturer: syz [ 113.920554][ T5898] usb 5-1: SerialNumber: syz [ 114.823530][ T5910] usb 1-1: USB disconnect, device number 5 [ 114.979290][ T5898] cdc_ncm 5-1:1.0: bind() failure [ 115.000338][ T5898] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 115.011150][ T5898] cdc_ncm 5-1:1.1: bind() failure [ 115.021226][ T5898] usb 5-1: USB disconnect, device number 5 [ 115.505711][ T6358] netlink: 28 bytes leftover after parsing attributes in process `syz.3.198'. [ 116.130846][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 116.318270][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 116.356003][ T10] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 116.377503][ T10] usb 4-1: config 0 has no interface number 0 [ 116.393750][ T10] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 116.426758][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.463189][ T10] usb 4-1: Product: syz [ 116.476643][ T10] usb 4-1: Manufacturer: syz [ 116.487230][ T10] usb 4-1: SerialNumber: syz [ 116.517224][ T10] usb 4-1: config 0 descriptor?? [ 116.530737][ T10] smsc95xx v2.0.0 [ 117.110469][ T6408] netlink: 6 bytes leftover after parsing attributes in process `syz.0.221'. [ 117.370264][ T10] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 117.576365][ T5898] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 117.591857][ T10] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 117.621856][ T10] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 117.645847][ T10] usb 4-1: USB disconnect, device number 2 [ 117.736254][ T5898] usb 1-1: Using ep0 maxpacket: 16 [ 117.743983][ T5898] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.777676][ T5898] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.790836][ T5898] usb 1-1: config 0 interface 0 has no altsetting 0 [ 117.812200][ T5898] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 117.835326][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.868737][ T5898] usb 1-1: config 0 descriptor?? [ 117.876209][ T30] audit: type=1326 audit(1748335905.690:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6417 comm="syz.4.227" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa56a18e969 code=0x0 [ 117.939327][ T6421] syz.4.227: attempt to access beyond end of device [ 117.939327][ T6421] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 118.315884][ T5898] hid (null): unknown global tag 0xd [ 118.353055][ T5898] hid (null): global environment stack underflow [ 118.369993][ T5898] hid (null): unknown global tag 0xd [ 118.386735][ T6431] netlink: 'syz.3.232': attribute type 3 has an invalid length. [ 118.390391][ T5898] hid (null): invalid report_size 20669 [ 118.411423][ T6431] netlink: 64 bytes leftover after parsing attributes in process `syz.3.232'. [ 118.513602][ T5877] usb 1-1: USB disconnect, device number 6 [ 118.666370][ T10] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 118.731012][ T6439] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 118.830538][ T10] usb 2-1: config 7 has an invalid interface number: 101 but max is 0 [ 118.839094][ T10] usb 2-1: config 7 has no interface number 0 [ 118.852731][ T10] usb 2-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 118.866224][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.880071][ T10] usb 2-1: Product: syz [ 118.884723][ T10] usb 2-1: Manufacturer: syz [ 118.890949][ T10] usb 2-1: SerialNumber: syz [ 119.432030][ T6459] trusted_key: syz.0.245 sent an empty control message without MSG_MORE. [ 119.708880][ T10] as10x_usb: device has been detected [ 119.715197][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 119.789528][ T10] usb 2-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 119.840603][ T10] as10x_usb: error during firmware upload part1 [ 119.848135][ T10] Registered device Elgato EyeTV DTT Deluxe [ 119.940046][ T5910] usb 2-1: USB disconnect, device number 4 [ 119.996904][ T5910] Unregistered device Elgato EyeTV DTT Deluxe [ 119.999020][ T5910] as10x_usb: device has been disconnected [ 121.514211][ T6514] nullb0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 p12 [ 121.538350][ T6514] nullb0: p1 start 1714368869 is beyond EOD, truncated [ 121.576437][ T6514] nullb0: p2 start 1840217545 is beyond EOD, truncated [ 121.607952][ T6514] nullb0: p3 start 2781609279 is beyond EOD, truncated [ 121.635701][ T6514] nullb0: p4 start 2763479866 is beyond EOD, truncated [ 121.650143][ T6514] nullb0: p5 size 1576935424 extends beyond EOD, truncated [ 121.707429][ T6514] nullb0: p6 start 4255409061 is beyond EOD, truncated [ 121.740088][ T6514] nullb0: p7 start 1354594978 is beyond EOD, truncated [ 121.771163][ T6514] nullb0: p8 start 2203294751 is beyond EOD, truncated [ 121.807293][ T6514] nullb0: p9 size 3667873493 extends beyond EOD, truncated [ 121.843873][ T6514] nullb0: p10 start 2534445966 is beyond EOD, truncated [ 121.856276][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 121.865041][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 121.876746][ T6514] nullb0: p11 start 1318227915 is beyond EOD, truncated [ 121.912532][ T6514] nullb0: p12 size 3013114410 extends beyond EOD, truncated [ 121.956751][ T6530] input: syz0 as /devices/virtual/input/input10 [ 121.964451][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 122.730800][ T6550] tun0: tun_chr_ioctl cmd 1074025675 [ 122.751376][ T6550] tun0: persist enabled [ 122.766501][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 122.791852][ T6550] tun0: tun_chr_ioctl cmd 1074025675 [ 122.831677][ T6550] tun0: persist disabled [ 123.169491][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 123.216685][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 123.796589][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 123.816657][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 124.168196][ T6587] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 124.280540][ T6588] vxcan3: entered allmulticast mode [ 124.831555][ T5898] kernel write not supported for file /sequencer2 (pid: 5898 comm: kworker/1:4) [ 124.970544][ T6607] netlink: 4 bytes leftover after parsing attributes in process `syz.3.308'. [ 125.092090][ T6611] capability: warning: `syz.3.310' uses 32-bit capabilities (legacy support in use) [ 125.921034][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 126.116258][ T5898] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 126.343919][ T5898] usb 2-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 126.375174][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.404363][ T5898] usb 2-1: Product: syz [ 126.414482][ T5898] usb 2-1: Manufacturer: syz [ 126.451328][ T5898] usb 2-1: SerialNumber: syz [ 126.494823][ T5898] usb 2-1: config 0 descriptor?? [ 127.593639][ T5898] usb 2-1: f81604_read: reg: 100f failed: -EPROTO [ 127.683733][ T5898] usb 2-1: f81604_read: reg: 200f failed: -EPROTO [ 127.714185][ T5898] usb 2-1: USB disconnect, device number 5 [ 127.742753][ T5898] usb 2-1: f81604_read: reg: 100f failed: -ENODEV [ 127.810889][ T5482] usb 2-1: f81604_read: reg: 200f failed: -ENODEV [ 127.839786][ T5898] usb 2-1: f81604_read: reg: 200f failed: -ENODEV [ 128.723405][ T6694] Bluetooth: MGMT ver 1.23 [ 128.983564][ T6675] syz.4.332 (6675): drop_caches: 2 [ 129.167863][ T6704] input: syz1 as /devices/virtual/input/input11 [ 129.658690][ T6721] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 130.172099][ T6738] ======================================================= [ 130.172099][ T6738] WARNING: The mand mount option has been deprecated and [ 130.172099][ T6738] and is ignored by this kernel. Remove the mand [ 130.172099][ T6738] option from the mount to silence this warning. [ 130.172099][ T6738] ======================================================= [ 130.206996][ C0] vkms_vblank_simulate: vblank timer overrun [ 130.361421][ T6743] Context (ID=0x0) not attached to queue pair (handle=0x0:0x9) [ 131.005040][ T6757] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 131.044084][ T6759] batadv_slave_0: entered promiscuous mode [ 131.074577][ T6758] batadv_slave_0: left promiscuous mode [ 131.690775][ T6773] netlink: 32 bytes leftover after parsing attributes in process `syz.4.376'. [ 131.714283][ T6773] netlink: 'syz.4.376': attribute type 32 has an invalid length. [ 131.751596][ T6773] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 131.985786][ T6779] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 132.240418][ T6789] loop8: detected capacity change from 0 to 8 [ 132.263293][ T6789] Dev loop8: unable to read RDB block 8 [ 132.269697][ T6789] loop8: unable to read partition table [ 132.281882][ T6789] loop8: partition table beyond EOD, truncated [ 132.296935][ T6789] loop_reread_partitions: partition scan of loop8 (þ被xü^>à– ) failed (rc=-5) [ 132.503143][ T30] audit: type=1326 audit(1748335920.320:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6794 comm="syz.1.386" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f67ce18e969 code=0x0 [ 132.837163][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.843896][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.136456][ T5898] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 134.307744][ T6841] netlink: 11 bytes leftover after parsing attributes in process `syz.4.407'. [ 134.317018][ T5898] usb 2-1: Using ep0 maxpacket: 16 [ 134.326768][ T6841] Zero length message leads to an empty skb [ 134.333771][ T5898] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 134.367560][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.408260][ T5898] usb 2-1: config 0 descriptor?? [ 134.429535][ T5898] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 134.660953][ T6849] binder: 6848:6849 ioctl c0306201 200000000540 returned -14 [ 134.825639][ T6851] netlink: 136 bytes leftover after parsing attributes in process `syz.2.411'. [ 134.848625][ T6851] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 135.429543][ T6863] netlink: 16 bytes leftover after parsing attributes in process `syz.2.417'. [ 135.487565][ T5898] gspca_sonixj: reg_w1 err -71 [ 135.506411][ T5898] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 135.575131][ T5898] usb 2-1: USB disconnect, device number 6 [ 138.701056][ T30] audit: type=1326 audit(1748335926.520:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6960 comm="syz.0.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f007cd8e969 code=0x7ffc0000 [ 138.722499][ C0] vkms_vblank_simulate: vblank timer overrun [ 138.739527][ T30] audit: type=1326 audit(1748335926.520:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6960 comm="syz.0.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f007cd8e969 code=0x7ffc0000 [ 138.772111][ T30] audit: type=1326 audit(1748335926.520:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6960 comm="syz.0.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f007cd8e969 code=0x7ffc0000 [ 138.822683][ T30] audit: type=1326 audit(1748335926.520:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6960 comm="syz.0.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f007cd8e969 code=0x7ffc0000 [ 138.857581][ T30] audit: type=1326 audit(1748335926.520:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6960 comm="syz.0.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f007cd8e969 code=0x7ffc0000 [ 138.944689][ T30] audit: type=1326 audit(1748335926.520:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6960 comm="syz.0.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7f007cd8e969 code=0x7ffc0000 [ 138.963796][ T6971] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 138.979217][ T30] audit: type=1326 audit(1748335926.530:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6960 comm="syz.0.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f007cd8e969 code=0x7ffc0000 [ 139.205868][ T6976] netlink: 20 bytes leftover after parsing attributes in process `syz.1.467'. [ 139.910929][ T7011] overlayfs: invalid origin (0000) [ 139.959563][ T7013] netlink: 28 bytes leftover after parsing attributes in process `syz.3.483'. [ 139.988563][ T7013] netlink: 'syz.3.483': attribute type 7 has an invalid length. [ 140.008779][ T7013] netlink: 'syz.3.483': attribute type 8 has an invalid length. [ 140.027566][ T7013] netlink: 4 bytes leftover after parsing attributes in process `syz.3.483'. [ 140.126088][ T7013] gretap0: entered promiscuous mode [ 140.171093][ T7013] batadv_slave_1: entered promiscuous mode [ 140.575289][ T7037] netlink: 4 bytes leftover after parsing attributes in process `syz.3.494'. [ 140.772024][ T7047] netlink: 24 bytes leftover after parsing attributes in process `syz.3.498'. [ 140.846917][ T7047] netlink: 24 bytes leftover after parsing attributes in process `syz.3.498'. [ 141.091991][ T7056] netlink: 20 bytes leftover after parsing attributes in process `syz.3.503'. [ 141.156649][ T7063] warning: `syz.4.504' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 141.363176][ T7074] netlink: 36 bytes leftover after parsing attributes in process `syz.2.510'. [ 141.391086][ T7074] bridge0: port 3(vlan2) entered blocking state [ 141.398741][ T7074] bridge0: port 3(vlan2) entered disabled state [ 141.405489][ T7074] vlan2: entered allmulticast mode [ 141.411903][ T7074] dummy0: entered allmulticast mode [ 141.423843][ T7074] vlan2: entered promiscuous mode [ 141.430915][ T7074] dummy0: entered promiscuous mode [ 142.283768][ T7095] input: syz1 as /devices/virtual/input/input12 [ 142.296409][ T7096] netlink: 'syz.3.519': attribute type 10 has an invalid length. [ 142.304182][ T7096] netlink: 55 bytes leftover after parsing attributes in process `syz.3.519'. [ 142.789810][ T30] audit: type=1326 audit(1748335930.610:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7109 comm="syz.3.525" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f606e18e969 code=0x0 [ 142.824056][ T7112] openvswitch: netlink: IPv4 tun info is not correct [ 142.881961][ T30] audit: type=1326 audit(1748335930.610:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7109 comm="syz.3.525" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f606e18e969 code=0x0 [ 143.131192][ T7118] netlink: 'syz.1.529': attribute type 4 has an invalid length. [ 143.169347][ T7118] netlink: 32 bytes leftover after parsing attributes in process `syz.1.529'. [ 143.440589][ C1] sd 0:0:1:0: [sda] tag#7129 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 143.451195][ C1] sd 0:0:1:0: [sda] tag#7129 CDB: Write(6) 0a 00 4e 23 00 00 00 00 00 00 00 00 [ 145.481416][ T2901] Bluetooth: hci5: Frame reassembly failed (-84) [ 145.537489][ T7169] Bluetooth: hci5: Frame reassembly failed (-84) [ 146.097643][ T7180] program syz.2.556 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 146.940168][ T7213] netlink: 16 bytes leftover after parsing attributes in process `syz.4.570'. [ 146.972053][ T7213] netlink: 16 bytes leftover after parsing attributes in process `syz.4.570'. [ 147.115140][ T7221] netlink: 32 bytes leftover after parsing attributes in process `syz.2.574'. [ 147.129942][ T977] IPVS: starting estimator thread 0... [ 147.236255][ T7225] IPVS: using max 33 ests per chain, 79200 per kthread [ 147.540571][ T7244] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 147.566950][ T5826] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 147.573367][ T5823] Bluetooth: hci5: command 0x1003 tx timeout [ 147.804968][ T7248] netlink: 'syz.4.585': attribute type 29 has an invalid length. [ 147.835509][ T7248] netlink: 'syz.4.585': attribute type 29 has an invalid length. [ 147.852211][ T7248] netlink: 500 bytes leftover after parsing attributes in process `syz.4.585'. [ 147.884157][ T7248] unsupported nla_type 58 [ 149.484618][ T7307] use of bytesused == 0 is deprecated and will be removed in the future, [ 149.522143][ T7307] use the actual size instead. [ 150.174930][ T7327] lo: entered promiscuous mode [ 150.180149][ T7328] lo: entered allmulticast mode [ 150.186229][ T7326] lo: left allmulticast mode [ 150.196308][ T7326] lo: left promiscuous mode [ 150.626304][ T43] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 150.805156][ T43] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 150.821064][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 150.832705][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 150.852140][ T43] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 150.865747][ T43] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 150.885167][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.913043][ T43] usb 5-1: config 0 descriptor?? [ 151.354446][ T43] plantronics 0003:047F:FFFF.0002: ignoring exceeding usage max [ 151.406030][ T43] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 151.459230][ T43] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 151.476635][ T24] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 151.589507][ T7370] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 151.647712][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 151.667911][ T24] usb 2-1: config 0 has an invalid interface number: 29 but max is 0 [ 151.693776][ T24] usb 2-1: config 0 has no interface number 0 [ 151.709439][ T24] usb 2-1: New USB device found, idVendor=050d, idProduct=2102, bcdDevice=70.d0 [ 151.729359][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.758151][ T24] usb 2-1: Product: syz [ 151.762387][ T24] usb 2-1: Manufacturer: syz [ 151.787518][ T24] usb 2-1: SerialNumber: syz [ 151.822244][ T24] usb 2-1: config 0 descriptor?? [ 152.057917][ T43] usb 2-1: USB disconnect, device number 7 [ 152.382476][ T7396] loop6: detected capacity change from 0 to 63 [ 152.409200][ T7396] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 152.441386][ T7396] Buffer I/O error on dev loop6, logical block 1, lost async page write [ 152.461049][ T7396] Buffer I/O error on dev loop6, logical block 2, lost async page write [ 152.488169][ T7396] Buffer I/O error on dev loop6, logical block 3, lost async page write [ 152.512410][ T7396] Buffer I/O error on dev loop6, logical block 4, lost async page write [ 152.513185][ T7397] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 152.534151][ T7396] Buffer I/O error on dev loop6, logical block 5, lost async page write [ 152.555264][ T7396] Buffer I/O error on dev loop6, logical block 6, lost async page write [ 152.889112][ T5898] kernel write not supported for file /347/loginuid (pid: 5898 comm: kworker/1:4) [ 153.065250][ T7417] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 153.184738][ T7417] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 153.371771][ T24] usb 5-1: USB disconnect, device number 6 [ 153.580562][ T7437] input: syz0 as /devices/virtual/input/input13 [ 153.898157][ T7445] netlink: 64 bytes leftover after parsing attributes in process `syz.2.668'. [ 154.731569][ T7499] netlink: 548 bytes leftover after parsing attributes in process `syz.1.676'. [ 155.151063][ T7512] Bluetooth: hci0: invalid length 0, exp 2 for type 29 [ 155.276292][ T24] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 155.456589][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 155.480649][ T24] usb 4-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 155.503144][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.525486][ T24] usb 4-1: Product: syz [ 155.535466][ T24] usb 4-1: Manufacturer: syz [ 155.557859][ T24] usb 4-1: SerialNumber: syz [ 155.606656][ T24] usb 4-1: config 0 descriptor?? [ 155.644327][ T24] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 155.824390][ T30] audit: type=1326 audit(1748335943.640:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7532 comm="syz.1.689" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f67ce18e969 code=0x0 [ 156.802278][ T7549] netlink: 'syz.1.695': attribute type 29 has an invalid length. [ 156.814739][ T7549] netlink: 'syz.1.695': attribute type 29 has an invalid length. [ 156.825739][ T7549] netlink: 500 bytes leftover after parsing attributes in process `syz.1.695'. [ 156.922759][ T24] gspca_sonixj: reg_w1 err -71 [ 156.936446][ T24] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 156.954711][ T24] usb 4-1: USB disconnect, device number 3 [ 157.015201][ T7553] input: syz1 as /devices/virtual/input/input14 [ 157.478177][ T7567] overlay: filesystem on ./bus not supported [ 157.906299][ T24] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 158.073448][ T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 158.102460][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 158.123439][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 158.143983][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 158.170192][ T24] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 158.189169][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.217362][ T24] usb 4-1: config 0 descriptor?? [ 158.686047][ T24] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 158.714887][ T24] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 158.736385][ T24] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 158.743847][ T24] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 158.784207][ T24] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 158.797181][ T24] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 158.832889][ T24] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 159.019705][ T5877] usb 4-1: USB disconnect, device number 4 [ 159.065402][ T7607] fido_id[7607]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 159.136434][ T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 159.224301][ T7615] netlink: 'syz.2.714': attribute type 1 has an invalid length. [ 159.326593][ T10] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 159.361158][ T10] usb 5-1: config 0 has no interface number 0 [ 159.369643][ T10] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.385468][ T10] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.386355][ T43] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 159.395444][ T5836] Bluetooth: hci0: command 0x0c1a tx timeout [ 159.411788][ T10] usb 5-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 159.433318][ T10] usb 5-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 159.443954][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.446169][ T43] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 159.462507][ T10] usb 5-1: config 0 descriptor?? [ 160.092697][ T10] input: HID 28bd:0042 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0042.0004/input/input15 [ 160.263374][ T10] input: HID 28bd:0042 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0042.0004/input/input16 [ 160.350729][ T10] uclogic 0003:28BD:0042.0004: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.4-1/input1 [ 160.408642][ T10] usb 5-1: USB disconnect, device number 7 [ 160.598710][ T7644] fido_id[7644]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 160.887746][ T7654] Bluetooth: hci0: invalid length 0, exp 2 for type 23 [ 161.415646][ T7679] netlink: 56 bytes leftover after parsing attributes in process `syz.0.731'. [ 161.634325][ T43] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 161.636808][ T5836] Bluetooth: hci1: command 0x0c1a tx timeout [ 161.669792][ T43] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 162.727936][ T5150] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 162.888788][ T5150] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 163.020659][ T5150] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.047245][ T5150] usb 4-1: config 0 descriptor?? [ 163.101439][ T7733] Bluetooth: hci0: invalid length 0, exp 2 for type 3 [ 163.786189][ T43] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 163.786288][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout [ 163.793593][ T43] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 164.280120][ T5150] usb 4-1: Cannot set autoneg [ 164.288427][ T5150] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 164.307245][ T5150] usb 4-1: USB disconnect, device number 5 [ 165.866338][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout [ 165.873287][ T43] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 165.881066][ T43] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 166.323775][ T5150] libceph: connect (1)[c::]:6789 error -101 [ 166.359358][ T5150] libceph: mon0 (1)[c::]:6789 connect error [ 166.557514][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.617498][ T5150] libceph: connect (1)[c::]:6789 error -101 [ 166.633812][ T5150] libceph: mon0 (1)[c::]:6789 connect error [ 166.744769][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.885328][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.009414][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.091585][ T7781] ceph: No mds server is up or the cluster is laggy [ 167.176632][ T5150] libceph: connect (1)[c::]:6789 error -101 [ 167.182764][ T5150] libceph: mon0 (1)[c::]:6789 connect error [ 167.388334][ T13] bridge_slave_1: left allmulticast mode [ 167.394255][ T13] bridge_slave_1: left promiscuous mode [ 167.437480][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.493826][ T13] bridge_slave_0: left allmulticast mode [ 167.516241][ T13] bridge_slave_0: left promiscuous mode [ 167.529952][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.548978][ T7812] netlink: 'syz.3.773': attribute type 4 has an invalid length. [ 167.591743][ T5826] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 167.606338][ T5826] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 167.613546][ T7815] netlink: 'syz.3.773': attribute type 4 has an invalid length. [ 167.626556][ T5826] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 167.656854][ T5826] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 167.667603][ T5826] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 167.694846][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 167.706249][ T5836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 167.716380][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 167.747729][ T5836] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 167.766665][ T5836] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 168.424752][ T5910] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 168.463815][ T5910] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 168.854707][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 168.885535][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 168.907058][ T13] bond0 (unregistering): Released all slaves [ 169.514388][ T13] hsr_slave_0: left promiscuous mode [ 169.546801][ T13] hsr_slave_1: left promiscuous mode [ 169.576876][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.584389][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.765306][ T13] veth1_macvtap: left promiscuous mode [ 169.785974][ T13] veth0_macvtap: left promiscuous mode [ 169.797665][ T13] veth1_vlan: left promiscuous mode [ 169.803231][ T13] veth0_vlan: left promiscuous mode [ 169.866443][ T5836] Bluetooth: hci4: command tx timeout [ 170.895589][ T13] team0 (unregistering): Port device team_slave_1 removed [ 170.958126][ T13] team0 (unregistering): Port device team_slave_0 removed [ 171.946199][ T5836] Bluetooth: hci4: command tx timeout [ 172.153799][ T7813] chnl_net:caif_netlink_parms(): no params data found [ 172.226438][ T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 172.396462][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 172.409230][ T13] IPVS: stop unused estimator thread 0... [ 172.448855][ T10] usb 1-1: config index 0 descriptor too short (expected 17170, got 18) [ 172.476263][ T10] usb 1-1: config 0 has too many interfaces: 63, using maximum allowed: 32 [ 172.526434][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 63 [ 172.581087][ T10] usb 1-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=8d.90 [ 172.626198][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.634255][ T10] usb 1-1: Product: syz [ 172.699733][ T10] usb 1-1: Manufacturer: syz [ 172.704417][ T10] usb 1-1: SerialNumber: syz [ 172.720008][ T7813] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.739315][ T7813] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.752657][ T10] usb 1-1: config 0 descriptor?? [ 172.769809][ T7813] bridge_slave_0: entered allmulticast mode [ 172.783434][ T10] ums-freecom 1-1:0.0: USB Mass Storage device detected [ 172.792947][ T7813] bridge_slave_0: entered promiscuous mode [ 172.828943][ T7813] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.854288][ T7813] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.883242][ T7813] bridge_slave_1: entered allmulticast mode [ 172.938302][ T7813] bridge_slave_1: entered promiscuous mode [ 173.015068][ T7938] xt_hashlimit: size too large, truncated to 1048576 [ 173.309462][ T7813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.357512][ T7975] input: syz0 as /devices/virtual/input/input17 [ 173.369241][ T7813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.636081][ T5910] usb 1-1: USB disconnect, device number 7 [ 173.834783][ T7813] team0: Port device team_slave_0 added [ 173.869074][ T7813] team0: Port device team_slave_1 added [ 174.026216][ T5836] Bluetooth: hci4: command tx timeout [ 174.056899][ T7813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.063869][ T7813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.128372][ T7813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.159822][ T7813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.178006][ T7813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.205141][ T7813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.256460][ T7990] netlink: 'syz.3.822': attribute type 3 has an invalid length. [ 174.305726][ T7990] netlink: 'syz.3.822': attribute type 1 has an invalid length. [ 174.316277][ T7990] netlink: 191172 bytes leftover after parsing attributes in process `syz.3.822'. [ 174.482733][ T7813] hsr_slave_0: entered promiscuous mode [ 174.503597][ T7813] hsr_slave_1: entered promiscuous mode [ 174.521277][ T7813] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 174.536025][ T7813] Cannot create hsr debugfs directory [ 175.296605][ T10] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 175.378860][ T7813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.434265][ T7813] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.468301][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 175.495906][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 175.512227][ T3500] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.519434][ T3500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.519917][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 175.542870][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.553999][ T10] usb 4-1: Product: syz [ 175.564950][ T10] usb 4-1: Manufacturer: syz [ 175.588627][ T10] usb 4-1: SerialNumber: syz [ 175.590361][ T7484] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.600506][ T7484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.692954][ T8037] netlink: 'syz.4.837': attribute type 10 has an invalid length. [ 175.746519][ T8037] syz_tun: entered promiscuous mode [ 175.761125][ T8040] netlink: 4 bytes leftover after parsing attributes in process `syz.4.837'. [ 175.825058][ T8037] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 175.857172][ T10] usb 4-1: 0:2 : does not exist [ 175.868921][ T10] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 175.913067][ T7813] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 175.949050][ T10] usb 4-1: USB disconnect, device number 6 [ 176.074794][ T5827] udevd[5827]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 176.106627][ T5836] Bluetooth: hci4: command tx timeout [ 176.532250][ T7813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.749502][ T7813] veth0_vlan: entered promiscuous mode [ 177.856511][ T7813] veth1_vlan: entered promiscuous mode [ 178.012209][ T7813] veth0_macvtap: entered promiscuous mode [ 178.067380][ T7813] veth1_macvtap: entered promiscuous mode [ 178.121630][ T7813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.165137][ T7813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.294672][ T8116] netlink: 12 bytes leftover after parsing attributes in process `syz.3.859'. [ 178.391656][ T8116] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.401226][ T8116] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.410063][ T8116] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.418870][ T8116] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.438353][ T8116] vxlan0: entered promiscuous mode [ 178.550433][ T7478] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.573445][ T7478] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.576196][ T43] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 178.651818][ T7478] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.673956][ T7478] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.766201][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 178.826751][ T43] usb 1-1: too many configurations: 123, using maximum allowed: 8 [ 178.867245][ T43] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 178.884010][ T43] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 178.905943][ T43] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 178.947869][ T43] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 178.967567][ T43] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.021457][ T43] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.061814][ T43] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.087264][ T43] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.129755][ T43] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 179.161250][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 179.192095][ T43] usb 1-1: SerialNumber: syz [ 179.212943][ T43] usb 1-1: config 0 descriptor?? [ 179.276444][ T43] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input18 [ 179.397211][ T13] bridge_slave_1: left allmulticast mode [ 179.402924][ T13] bridge_slave_1: left promiscuous mode [ 179.439635][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.482022][ T13] bridge_slave_0: left allmulticast mode [ 179.501352][ T5172] bcm5974 1-1:0.0: could not read from device [ 179.514355][ T13] bridge_slave_0: left promiscuous mode [ 179.536435][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.550979][ T5172] bcm5974 1-1:0.0: could not read from device [ 179.569792][ T43] usb 1-1: USB disconnect, device number 8 [ 180.605592][ T8167] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 180.773179][ T5826] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 180.782687][ T5826] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 180.790898][ T5826] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 180.813600][ T5826] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 180.826882][ T5826] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 180.951873][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.993901][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 181.008746][ T13] bond0 (unregistering): Released all slaves [ 182.168627][ T13] hsr_slave_0: left promiscuous mode [ 182.206388][ T13] hsr_slave_1: left promiscuous mode [ 182.212664][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.259911][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.321793][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.351418][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.510654][ T13] veth1_macvtap: left promiscuous mode [ 182.545104][ T13] veth0_macvtap: left promiscuous mode [ 182.569107][ T13] veth1_vlan: left promiscuous mode [ 182.610040][ T13] veth0_vlan: left promiscuous mode [ 182.761930][ T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 182.906707][ T5836] Bluetooth: hci4: command tx timeout [ 182.936749][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 182.945367][ T10] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 183.005997][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.123092][ T10] pvrusb2: Hardware description: Terratec Grabster AV400 [ 183.153598][ T10] pvrusb2: ********** [ 183.164848][ T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 183.189740][ T10] pvrusb2: Important functionality might not be entirely working. [ 183.217272][ T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 183.257361][ T10] pvrusb2: ********** [ 183.283580][ T2341] pvrusb2: Invalid write control endpoint [ 183.520965][ T2341] pvrusb2: Invalid write control endpoint [ 183.553454][ T2341] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 183.586435][ T2341] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 183.611812][ T2341] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 183.645882][ T2341] pvrusb2: Device being rendered inoperable [ 183.663379][ T8207] pvrusb2: Attempted to execute control transfer when device not ok [ 183.677523][ T2341] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 183.690126][ T977] usb 4-1: USB disconnect, device number 7 [ 183.717427][ T2341] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 183.735101][ T2341] pvrusb2: Attached sub-driver cx25840 [ 183.759680][ T2341] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 183.797785][ T2341] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 184.491579][ T13] team0 (unregistering): Port device team_slave_1 removed [ 184.664415][ T13] team0 (unregistering): Port device team_slave_0 removed [ 184.854592][ T8242] netlink: 4 bytes leftover after parsing attributes in process `syz.4.897'. [ 184.996150][ T5836] Bluetooth: hci4: command tx timeout [ 185.295215][ T8246] input: syz0 as /devices/virtual/input/input19 [ 185.732357][ T8242] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.853189][ T8242] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.966278][ T5150] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 186.136637][ T5150] usb 4-1: config 0 has no interfaces? [ 186.142394][ T5150] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 186.206539][ T5150] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.225599][ T8170] chnl_net:caif_netlink_parms(): no params data found [ 186.266977][ T5150] usb 4-1: config 0 descriptor?? [ 186.507020][ T5150] usb 4-1: USB disconnect, device number 8 [ 186.584011][ T8170] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.591426][ T8170] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.606709][ T8170] bridge_slave_0: entered allmulticast mode [ 186.616030][ T8170] bridge_slave_0: entered promiscuous mode [ 186.649517][ T8170] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.678540][ T8170] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.685839][ T8170] bridge_slave_1: entered allmulticast mode [ 186.724207][ T8170] bridge_slave_1: entered promiscuous mode [ 186.874577][ T8170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.893339][ T8170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.002593][ T8170] team0: Port device team_slave_0 added [ 187.030954][ T8170] team0: Port device team_slave_1 added [ 187.066651][ T5836] Bluetooth: hci4: command tx timeout [ 187.217361][ T8278] netlink: 4 bytes leftover after parsing attributes in process `syz.4.908'. [ 187.305975][ T8170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.328434][ T8170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.364917][ T8170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.410059][ T8170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.418468][ T8170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.475151][ T8170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.672389][ T8170] hsr_slave_0: entered promiscuous mode [ 187.689854][ T8170] hsr_slave_1: entered promiscuous mode [ 187.700812][ T8170] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 187.725013][ T8170] Cannot create hsr debugfs directory [ 187.775390][ T8302] kvm: Disabled LAPIC found during irq injection [ 188.425894][ T8321] mmap: syz.4.920 (8321) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 188.462706][ T8170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.531177][ T8170] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.565482][ T3500] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.572778][ T3500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.597902][ T5909] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 188.652878][ T7488] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.660251][ T7488] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.782945][ T5909] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 188.816305][ T5909] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 188.855879][ T5909] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.906436][ T5909] usb 1-1: config 0 descriptor?? [ 188.913631][ T8317] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 189.147711][ T5836] Bluetooth: hci4: command tx timeout [ 189.384015][ T5909] elan 0003:04F3:0755.0006: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 189.502737][ T8170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.593130][ T5909] usb 1-1: USB disconnect, device number 9 [ 190.175842][ T8170] veth0_vlan: entered promiscuous mode [ 190.244010][ T8170] veth1_vlan: entered promiscuous mode [ 190.362699][ T8170] veth0_macvtap: entered promiscuous mode [ 190.392248][ T8170] veth1_macvtap: entered promiscuous mode [ 190.468171][ T8170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.503776][ T8170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.780104][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.807701][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.893863][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.918536][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.584445][ T7486] bridge_slave_1: left allmulticast mode [ 191.600536][ T7486] bridge_slave_1: left promiscuous mode [ 191.612351][ T7486] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.667558][ T7486] bridge_slave_0: left allmulticast mode [ 191.690429][ T7486] bridge_slave_0: left promiscuous mode [ 191.701543][ T7486] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.901685][ T5826] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 192.914621][ T5826] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 192.923379][ T5826] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 192.944654][ T5826] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 192.954794][ T5826] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 192.990970][ T7486] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.014376][ T7486] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.027055][ T7486] bond0 (unregistering): Released all slaves [ 193.249195][ T8440] netlink: 4 bytes leftover after parsing attributes in process `syz.2.957'. [ 193.272074][ T8440] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 193.284808][ T8440] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 194.040961][ T7486] hsr_slave_0: left promiscuous mode [ 194.079915][ T7486] hsr_slave_1: left promiscuous mode [ 194.087210][ T7486] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.105575][ T7486] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.125729][ T7486] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.137380][ T7486] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.203040][ T7486] veth1_macvtap: left promiscuous mode [ 194.216285][ T7486] veth0_macvtap: left promiscuous mode [ 194.236438][ T7486] veth1_vlan: left promiscuous mode [ 194.241840][ T7486] veth0_vlan: left promiscuous mode [ 194.271943][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.896374][ T5874] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 195.079902][ T5826] Bluetooth: hci4: command tx timeout [ 195.095616][ T5874] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 195.111942][ T5874] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 195.175227][ T5874] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 195.219832][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.254497][ T8480] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 195.281523][ T5874] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 195.403292][ T5827] udevd[5827]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: Read-only file system [ 195.590957][ T5909] usb 5-1: USB disconnect, device number 8 [ 195.868792][ T7486] team0 (unregistering): Port device team_slave_1 removed [ 195.954344][ T7486] team0 (unregistering): Port device team_slave_0 removed [ 197.146541][ T5826] Bluetooth: hci4: command tx timeout [ 197.486990][ T8433] chnl_net:caif_netlink_parms(): no params data found [ 197.866404][ T5909] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 197.889676][ T8433] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.901808][ T8433] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.926820][ T8433] bridge_slave_0: entered allmulticast mode [ 197.942923][ T8433] bridge_slave_0: entered promiscuous mode [ 197.952206][ T8433] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.960403][ T8433] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.968520][ T8433] bridge_slave_1: entered allmulticast mode [ 197.976701][ T8433] bridge_slave_1: entered promiscuous mode [ 198.050232][ T5909] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 198.072594][ T5909] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 198.100713][ T5909] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 198.110478][ T5909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 198.118997][ T5909] usb 5-1: SerialNumber: syz [ 198.142654][ T8433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.173205][ T8433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.273612][ T8433] team0: Port device team_slave_0 added [ 198.292097][ T8433] team0: Port device team_slave_1 added [ 198.354751][ T5909] usb 5-1: 0:2 : does not exist [ 198.373046][ T8433] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.408384][ T5909] usb 5-1: USB disconnect, device number 9 [ 198.409455][ T8433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.476771][ T8433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.499566][ T8433] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.510639][ T8541] overlayfs: failed to verify upper root origin [ 198.511954][ T8433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.548295][ T5827] udevd[5827]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 198.570770][ T8433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.695952][ T8433] hsr_slave_0: entered promiscuous mode [ 198.714852][ T8433] hsr_slave_1: entered promiscuous mode [ 198.730317][ T8433] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 198.756241][ T8433] Cannot create hsr debugfs directory [ 199.226481][ T5826] Bluetooth: hci4: command tx timeout [ 199.245212][ T8433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.315861][ T8433] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.359594][ T7486] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.366885][ T7486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.395260][ T7486] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.402506][ T7486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.929793][ T8433] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.659197][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.716039][ T8433] veth0_vlan: entered promiscuous mode [ 200.743731][ T8433] veth1_vlan: entered promiscuous mode [ 200.843977][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.001411][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.059585][ T8433] veth0_macvtap: entered promiscuous mode [ 201.118655][ T8433] veth1_macvtap: entered promiscuous mode [ 201.273051][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.306966][ T5826] Bluetooth: hci4: command tx timeout [ 201.389412][ T8433] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.422211][ T8433] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.849735][ T13] bridge_slave_1: left allmulticast mode [ 201.855443][ T13] bridge_slave_1: left promiscuous mode [ 201.878939][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.901075][ T13] bridge_slave_0: left allmulticast mode [ 201.910320][ T13] bridge_slave_0: left promiscuous mode [ 201.911213][ T5874] kernel write not supported for file bpf-prog (pid: 5874 comm: kworker/0:3) [ 201.917862][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.951868][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 201.962603][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 201.974516][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 201.984193][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 201.995554][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 202.750911][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 202.762029][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 202.772622][ T13] bond0 (unregistering): Released all slaves [ 202.804255][ T7488] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.828019][ T7488] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.923601][ T3500] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.932275][ T3500] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.304122][ T13] hsr_slave_0: left promiscuous mode [ 203.314431][ T13] hsr_slave_1: left promiscuous mode [ 203.325986][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.335565][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.350248][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.361940][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.413338][ T13] veth1_macvtap: left promiscuous mode [ 203.420317][ T13] veth0_macvtap: left promiscuous mode [ 203.430791][ T13] veth1_vlan: left promiscuous mode [ 203.436522][ T13] veth0_vlan: left promiscuous mode [ 204.027945][ T5826] Bluetooth: hci0: command tx timeout [ 204.041466][ T13] team0 (unregistering): Port device team_slave_1 removed [ 204.146576][ T13] team0 (unregistering): Port device team_slave_0 removed [ 204.334665][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 204.350334][ T5836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 204.365348][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 204.389295][ T5836] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 204.401540][ T5836] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 204.797991][ T8619] chnl_net:caif_netlink_parms(): no params data found [ 204.942021][ T8619] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.949704][ T8619] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.957475][ T8619] bridge_slave_0: entered allmulticast mode [ 204.965440][ T8619] bridge_slave_0: entered promiscuous mode [ 204.981480][ T8619] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.991413][ T8619] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.998858][ T8619] bridge_slave_1: entered allmulticast mode [ 205.006991][ T8619] bridge_slave_1: entered promiscuous mode [ 205.065318][ T8619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.084760][ T8619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.139848][ T8619] team0: Port device team_slave_0 added [ 205.193638][ T8619] team0: Port device team_slave_1 added [ 205.276802][ T8619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.283789][ T8619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.311008][ T8619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.327530][ T8619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.334518][ T8619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.360601][ T8619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.377114][ T8653] chnl_net:caif_netlink_parms(): no params data found [ 205.404906][ T13] bridge_slave_1: left allmulticast mode [ 205.410785][ T13] bridge_slave_1: left promiscuous mode [ 205.416738][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.425823][ T13] bridge_slave_0: left allmulticast mode [ 205.434447][ T13] bridge_slave_0: left promiscuous mode [ 205.440670][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.744188][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 205.755679][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 205.765801][ T13] bond0 (unregistering): Released all slaves [ 205.881924][ T8619] hsr_slave_0: entered promiscuous mode [ 205.889131][ T8619] hsr_slave_1: entered promiscuous mode [ 205.895324][ T8619] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 205.903312][ T8619] Cannot create hsr debugfs directory [ 205.984373][ T8653] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.991911][ T8653] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.999533][ T8653] bridge_slave_0: entered allmulticast mode [ 206.007103][ T8653] bridge_slave_0: entered promiscuous mode [ 206.050694][ T8653] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.058377][ T8653] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.065554][ T8653] bridge_slave_1: entered allmulticast mode [ 206.073185][ T8653] bridge_slave_1: entered promiscuous mode [ 206.107120][ T5826] Bluetooth: hci0: command tx timeout [ 206.174359][ T8653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.188732][ T8653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.214731][ T13] hsr_slave_0: left promiscuous mode [ 206.221180][ T13] hsr_slave_1: left promiscuous mode [ 206.227657][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.235070][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.242988][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.252310][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.278072][ T13] veth1_macvtap: left promiscuous mode [ 206.283610][ T13] veth0_macvtap: left promiscuous mode [ 206.289499][ T13] veth1_vlan: left promiscuous mode [ 206.294821][ T13] veth0_vlan: left promiscuous mode [ 206.517925][ T5826] Bluetooth: hci4: command tx timeout [ 206.718040][ T13] team0 (unregistering): Port device team_slave_1 removed [ 206.763888][ T13] team0 (unregistering): Port device team_slave_0 removed [ 207.185097][ T8653] team0: Port device team_slave_0 added [ 207.203436][ T8653] team0: Port device team_slave_1 added [ 207.272588][ T8653] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.279707][ T8653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.322694][ T8653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.345904][ T8653] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.353020][ T8653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.379635][ T8653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.471406][ T8653] hsr_slave_0: entered promiscuous mode [ 207.478322][ T8653] hsr_slave_1: entered promiscuous mode [ 207.485078][ T8653] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 207.494035][ T8653] Cannot create hsr debugfs directory [ 207.713439][ T8619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.752836][ T8619] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.772262][ T7488] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.779489][ T7488] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.801061][ T7488] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.808214][ T7488] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.834520][ T8653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.877536][ T8653] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.906628][ T7488] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.913839][ T7488] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.945009][ T7488] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.952220][ T7488] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.181718][ T8619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.188744][ T5826] Bluetooth: hci0: command tx timeout [ 208.282638][ T8653] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.578703][ T8619] veth0_vlan: entered promiscuous mode [ 208.588922][ T5826] Bluetooth: hci4: command tx timeout [ 208.612593][ T8619] veth1_vlan: entered promiscuous mode [ 208.663354][ T8653] veth0_vlan: entered promiscuous mode [ 208.689362][ T8619] veth0_macvtap: entered promiscuous mode [ 208.700988][ T8619] veth1_macvtap: entered promiscuous mode [ 208.710243][ T8653] veth1_vlan: entered promiscuous mode [ 208.734104][ T8619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.756725][ T8619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.802733][ T8653] veth0_macvtap: entered promiscuous mode [ 208.827320][ T8653] veth1_macvtap: entered promiscuous mode [ 208.871519][ T8653] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.899245][ T8653] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.925713][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.948561][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.980982][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.990073][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.069451][ T7488] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.080128][ T7488] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.141724][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.154412][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.227100][ T8687] netlink: 'syz.2.1042': attribute type 10 has an invalid length. [ 209.252352][ T8687] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.260697][ T8687] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.282739][ T8687] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.290613][ T8687] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.299418][ T8687] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.299581][ T8687] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.301245][ T8694] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1009'. [ 209.335621][ T8687] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 209.636197][ T30] audit: type=1800 audit(1748335997.430:117): pid=8699 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.1034" name="file1" dev="tmpfs" ino=1266 res=0 errno=0 [ 210.006737][ T13] bridge_slave_1: left allmulticast mode [ 210.012513][ T13] bridge_slave_1: left promiscuous mode [ 210.031196][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.072480][ T13] bridge_slave_0: left allmulticast mode [ 210.085736][ T13] bridge_slave_0: left promiscuous mode [ 210.106028][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.307612][ T5826] Bluetooth: hci0: command tx timeout [ 211.342471][ T30] audit: type=1326 audit(1748335999.160:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8717 comm="syz.4.1041" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa56a18e969 code=0x0 [ 211.816741][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 211.906607][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 211.961207][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 211.972502][ T5836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 211.990482][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 211.999401][ T13] bond0 (unregistering): Released all slaves [ 212.008179][ T5836] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 212.025867][ T5836] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 212.944871][ T13] hsr_slave_0: left promiscuous mode [ 212.965507][ T13] hsr_slave_1: left promiscuous mode [ 212.972536][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.980100][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.990167][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.997773][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.031748][ T13] veth1_macvtap: left promiscuous mode [ 213.046331][ T13] veth0_macvtap: left promiscuous mode [ 213.052086][ T13] veth1_vlan: left promiscuous mode [ 213.067605][ T13] veth0_vlan: left promiscuous mode [ 214.032398][ T13] team0 (unregistering): Port device team_slave_1 removed [ 214.081734][ T13] team0 (unregistering): Port device team_slave_0 removed [ 214.121591][ T5836] Bluetooth: hci4: command tx timeout [ 215.184343][ T8720] chnl_net:caif_netlink_parms(): no params data found [ 215.316186][ T5909] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 215.510560][ T5909] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 215.533398][ T5909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 215.578274][ T5909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 215.604747][ T8720] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.619323][ T5909] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 215.632891][ T8720] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.646672][ T8720] bridge_slave_0: entered allmulticast mode [ 215.652804][ T5909] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 215.668775][ T8720] bridge_slave_0: entered promiscuous mode [ 215.676643][ T5909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.691924][ T8720] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.704727][ T5909] usb 5-1: config 0 descriptor?? [ 215.723583][ T8720] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.733048][ T8720] bridge_slave_1: entered allmulticast mode [ 215.760032][ T8720] bridge_slave_1: entered promiscuous mode [ 215.895637][ T8720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.923428][ T8720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.055623][ T8720] team0: Port device team_slave_0 added [ 216.077633][ T8720] team0: Port device team_slave_1 added [ 216.163912][ T5909] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 216.186665][ T5836] Bluetooth: hci4: command tx timeout [ 216.197294][ T5909] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 216.238640][ T8720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.256015][ T8720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.298942][ T8788] netlink: 'syz.3.1066': attribute type 1 has an invalid length. [ 216.310439][ T8788] netlink: 'syz.3.1066': attribute type 10 has an invalid length. [ 216.319704][ T8788] netlink: 236 bytes leftover after parsing attributes in process `syz.3.1066'. [ 216.333763][ T8720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.365853][ T8720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.404910][ T8720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.472074][ T8720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.502797][ T8790] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 216.717739][ T10] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 216.761330][ T8720] hsr_slave_0: entered promiscuous mode [ 216.777589][ T8720] hsr_slave_1: entered promiscuous mode [ 216.794157][ T8720] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 216.816235][ T8720] Cannot create hsr debugfs directory [ 216.898511][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.923115][ T10] usb 6-1: config 0 has no interfaces? [ 216.939175][ T10] usb 6-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 216.958864][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.976392][ T5910] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 217.001157][ T10] usb 6-1: config 0 descriptor?? [ 217.050994][ T10] usb 5-1: USB disconnect, device number 10 [ 217.146525][ T5910] usb 4-1: Using ep0 maxpacket: 8 [ 217.162310][ T5910] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 217.176238][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.185297][ T5910] usb 4-1: Product: syz [ 217.196559][ T5910] usb 4-1: Manufacturer: syz [ 217.201210][ T5910] usb 4-1: SerialNumber: syz [ 217.223993][ T5877] usb 6-1: USB disconnect, device number 2 [ 217.227423][ T5910] usb 4-1: config 0 descriptor?? [ 217.248922][ T8720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.268488][ T5910] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 217.291627][ T8720] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.312855][ T7486] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.320107][ T7486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.341733][ T7480] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.349026][ T7480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.879657][ T8720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.944705][ T8809] Bluetooth: MGMT ver 1.23 [ 217.959673][ T8809] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 218.266369][ T5836] Bluetooth: hci4: command tx timeout [ 218.560046][ T8720] veth0_vlan: entered promiscuous mode [ 218.574554][ T8720] veth1_vlan: entered promiscuous mode [ 218.612064][ T8720] veth0_macvtap: entered promiscuous mode [ 218.624759][ T8720] veth1_macvtap: entered promiscuous mode [ 218.644273][ T8720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.660682][ T8720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.744984][ T7488] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.762348][ T7488] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.791047][ T7478] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.799322][ T7478] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.942171][ T7478] bridge_slave_1: left allmulticast mode [ 218.951941][ T7478] bridge_slave_1: left promiscuous mode [ 218.961562][ T7478] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.978101][ T7478] bridge_slave_0: left allmulticast mode [ 218.984006][ T7478] bridge_slave_0: left promiscuous mode [ 218.994767][ T7478] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.453862][ T7478] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 219.465359][ T7478] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 219.475617][ T7478] bond0 (unregistering): Released all slaves [ 219.692807][ T7478] hsr_slave_0: left promiscuous mode [ 219.700272][ T7478] hsr_slave_1: left promiscuous mode [ 219.706802][ T7478] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.714293][ T7478] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.723894][ T7478] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.731522][ T7478] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.761750][ T7478] veth1_macvtap: left promiscuous mode [ 219.764115][ T977] usb 4-1: USB disconnect, device number 9 [ 219.767561][ T7478] veth0_macvtap: left promiscuous mode [ 219.779527][ T7478] veth1_vlan: left promiscuous mode [ 219.784894][ T7478] veth0_vlan: left promiscuous mode [ 220.436943][ T5826] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 220.450090][ T5826] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 220.477319][ T5826] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 220.485504][ T5826] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 220.493294][ T5826] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 221.155145][ T7478] team0 (unregistering): Port device team_slave_1 removed [ 221.215149][ T8870] netlink: 372 bytes leftover after parsing attributes in process `syz.3.1096'. [ 221.228429][ T7478] team0 (unregistering): Port device team_slave_0 removed [ 221.316420][ T977] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 221.321962][ T8872] ================================================================== [ 221.332144][ T8872] BUG: KASAN: use-after-free in __crypto_shash_import+0x26a/0x2a0 [ 221.340020][ T8872] Write of size 1 at addr ffff88815bef8b47 by task syz.3.1097/8872 [ 221.347947][ T8872] [ 221.350329][ T8872] CPU: 1 UID: 0 PID: 8872 Comm: syz.3.1097 Not tainted 6.15.0-syzkaller-01972-g914873bc7df9 #0 PREEMPT(full) [ 221.350355][ T8872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 221.350372][ T8872] Call Trace: [ 221.350380][ T8872] [ 221.350393][ T8872] dump_stack_lvl+0x189/0x250 [ 221.350424][ T8872] ? __virt_addr_valid+0x1c8/0x5c0 [ 221.350452][ T8872] ? rcu_is_watching+0x15/0xb0 [ 221.350475][ T8872] ? __kasan_check_byte+0x12/0x40 [ 221.350502][ T8872] ? __pfx_dump_stack_lvl+0x10/0x10 [ 221.350527][ T8872] ? rcu_is_watching+0x15/0xb0 [ 221.350550][ T8872] ? lock_release+0x4b/0x3e0 [ 221.350572][ T8872] ? __virt_addr_valid+0x1c8/0x5c0 [ 221.350599][ T8872] ? __virt_addr_valid+0x4a5/0x5c0 [ 221.350627][ T8872] print_report+0xd2/0x2b0 [ 221.350649][ T8872] ? __crypto_shash_import+0x26a/0x2a0 [ 221.350678][ T8872] kasan_report+0x118/0x150 [ 221.350703][ T8872] ? __local_bh_enable_ip+0x12d/0x1c0 [ 221.350728][ T8872] ? __crypto_shash_import+0x26a/0x2a0 [ 221.350764][ T8872] __crypto_shash_import+0x26a/0x2a0 [ 221.350810][ T8872] crypto_shash_import+0x84/0x230 [ 221.350840][ T8872] hash_accept+0x1fb/0x280 [ 221.350871][ T8872] do_accept+0x48c/0x680 [ 221.350912][ T8872] ? __pfx_do_accept+0x10/0x10 [ 221.350944][ T8872] __sys_accept4+0x11c/0x1c0 [ 221.350966][ T8872] ? __pfx___sys_accept4+0x10/0x10 [ 221.350993][ T8872] __x64_sys_accept4+0x9a/0xb0 [ 221.351014][ T8872] do_syscall_64+0xf6/0x220 [ 221.351038][ T8872] ? clear_bhb_loop+0x60/0xb0 [ 221.351060][ T8872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.351079][ T8872] RIP: 0033:0x7f606e18e969 [ 221.351102][ T8872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.351119][ T8872] RSP: 002b:00007f606efa4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 221.351141][ T8872] RAX: ffffffffffffffda RBX: 00007f606e3b5fa0 RCX: 00007f606e18e969 [ 221.351155][ T8872] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 221.351168][ T8872] RBP: 00007f606e210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 221.351180][ T8872] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000000 [ 221.351192][ T8872] R13: 0000000000000000 R14: 00007f606e3b5fa0 R15: 00007ffe86db9018 [ 221.351216][ T8872] [ 221.351223][ T8872] [ 221.579475][ T8872] The buggy address belongs to the physical page: [ 221.585935][ T8872] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x15bef8 [ 221.594805][ T8872] flags: 0x57ff00000000000(node=1|zone=2|lastcpupid=0x7ff) [ 221.602033][ T8872] raw: 057ff00000000000 ffffea00056fbe08 ffffea00056fbe08 0000000000000000 [ 221.610618][ T8872] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 221.619201][ T8872] page dumped because: kasan: bad access detected [ 221.625646][ T8872] page_owner info is not present (never set?) [ 221.631741][ T8872] [ 221.634076][ T8872] Memory state around the buggy address: [ 221.639720][ T8872] ffff88815bef8a00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 221.647806][ T8872] ffff88815bef8a80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 221.655879][ T8872] >ffff88815bef8b00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 221.663954][ T8872] ^ [ 221.670116][ T8872] ffff88815bef8b80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 221.678188][ T8872] ffff88815bef8c00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 221.686252][ T8872] ================================================================== [ 221.714357][ T8872] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 221.721628][ T8872] CPU: 0 UID: 0 PID: 8872 Comm: syz.3.1097 Not tainted 6.15.0-syzkaller-01972-g914873bc7df9 #0 PREEMPT(full) [ 221.733379][ T8872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 221.743455][ T8872] Call Trace: [ 221.746743][ T8872] [ 221.749679][ T8872] dump_stack_lvl+0x99/0x250 [ 221.754288][ T8872] ? __asan_memcpy+0x40/0x70 [ 221.758886][ T8872] ? __pfx_dump_stack_lvl+0x10/0x10 [ 221.764094][ T8872] ? __pfx__printk+0x10/0x10 [ 221.768701][ T8872] panic+0x2db/0x790 [ 221.772634][ T8872] ? __pfx_panic+0x10/0x10 [ 221.777062][ T8872] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 221.782955][ T8872] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 221.789288][ T8872] ? print_memory_metadata+0x314/0x400 [ 221.794764][ T8872] ? __crypto_shash_import+0x26a/0x2a0 [ 221.800246][ T8872] check_panic_on_warn+0x89/0xb0 [ 221.805191][ T8872] ? __crypto_shash_import+0x26a/0x2a0 [ 221.810668][ T8872] end_report+0x78/0x160 [ 221.814919][ T8872] kasan_report+0x129/0x150 [ 221.819433][ T8872] ? __local_bh_enable_ip+0x12d/0x1c0 [ 221.824821][ T8872] ? __crypto_shash_import+0x26a/0x2a0 [ 221.830313][ T8872] __crypto_shash_import+0x26a/0x2a0 [ 221.835619][ T8872] crypto_shash_import+0x84/0x230 [ 221.840673][ T8872] hash_accept+0x1fb/0x280 [ 221.845101][ T8872] do_accept+0x48c/0x680 [ 221.849349][ T8872] ? __pfx_do_accept+0x10/0x10 [ 221.854301][ T8872] __sys_accept4+0x11c/0x1c0 [ 221.858899][ T8872] ? __pfx___sys_accept4+0x10/0x10 [ 221.864022][ T8872] __x64_sys_accept4+0x9a/0xb0 [ 221.868821][ T8872] do_syscall_64+0xf6/0x220 [ 221.873351][ T8872] ? clear_bhb_loop+0x60/0xb0 [ 221.878036][ T8872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.883958][ T8872] RIP: 0033:0x7f606e18e969 [ 221.888398][ T8872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.908027][ T8872] RSP: 002b:00007f606efa4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 221.916459][ T8872] RAX: ffffffffffffffda RBX: 00007f606e3b5fa0 RCX: 00007f606e18e969 [ 221.924529][ T8872] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 221.932515][ T8872] RBP: 00007f606e210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 221.940553][ T8872] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000000 [ 221.948545][ T8872] R13: 0000000000000000 R14: 00007f606e3b5fa0 R15: 00007ffe86db9018 [ 221.956538][ T8872] [ 221.959824][ T8872] Kernel Offset: disabled [ 221.964160][ T8872] Rebooting in 86400 seconds..