last executing test programs: 1m10.239589635s ago: executing program 4 (id=8078): syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) r0 = syz_io_uring_setup(0x452a, 0x0, &(0x7f0000000000), &(0x7f0000000300)) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002085000000700000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000047000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='signal_generate\x00'}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r2}, 0x10) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) io_setup(0x20, &(0x7f0000001140)) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180), 0x4000000000000181) socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x6a040000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 34.544593542s ago: executing program 2 (id=8122): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0}, 0x90) socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) iopl(0x3) socket$inet6(0xa, 0x80002, 0x0) pselect6(0x40, &(0x7f0000000000)={0xfc}, 0x0, 0x0, 0x0, 0x0) 34.371878865s ago: executing program 2 (id=8123): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000040)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) syz_clone3(&(0x7f0000000340)={0x2000, &(0x7f0000000100), 0x0, &(0x7f0000000180), {0x3}, &(0x7f00000001c0)=""/74, 0x4a, &(0x7f00000002c0)=""/120, &(0x7f0000000240)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x8, {r0}}, 0x58) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000019300)=@getlink={0x144, 0x12, 0x600, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x8, 0x50045}, [@IFLA_BROADCAST={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}, @IFLA_IFNAME={0x14, 0x3, 'ip6gretap0\x00'}, @IFLA_BROADCAST={0xa}, @IFLA_IFNAME={0x14, 0x3, 'hsr0\x00'}, @IFLA_PHYS_PORT_ID={0x22, 0x22, "a4b3904730650fc29e539beeab877ccfc72d2e3681d5737a45467b53efa5"}, @IFLA_AF_SPEC={0xc0, 0x1a, 0x0, 0x1, [@AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x8, 0x3, 0x0, 0x0, 0x7}, {0x8, 0x9, 0x0, 0x0, 0xfffffff8}, {0x8, 0x12, 0x0, 0x0, 0x81}, {0x8, 0x14, 0x0, 0x0, 0x4}, {0x8, 0x2, 0x0, 0x0, 0x7ff}]}}, @AF_MPLS={0x4}, @AF_INET6={0x14, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x8}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x6}]}, @AF_INET6={0x74, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFLA_INET6_TOKEN={0x14, 0x7, @remote}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x8}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x50}, @IFLA_INET6_TOKEN={0x14, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}}, @IFLA_INET6_TOKEN={0x14, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x9}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x8}]}]}]}, 0x144}}, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x10012, r0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x10012, r3, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000004c0)) close(0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000300)=""/102400, 0x19000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r5 = add_key(0x0, &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0x1, 0xfffffffffffffffe) r6 = socket$inet6(0xa, 0x6, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000100)={0x0, 0x79, "ec1424476ddccf68648c544844811f69a2d00e38f8b647b180159a721e8f03ce897526dd18586538d60d206f704d014bf50e6bca5cce55ceb4a7831bd3b0ec70fb696b0ecbedd98b517235cb95982eb4914c01c8231b44ae650b6a6137fc4ef094dfa538b509f988070c2e4ffadaefa9b4ab6a372864aa61f0"}, &(0x7f0000000000)=0x81) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000080)={r7, 0x3}, 0x0) keyctl$set_timeout(0xf, r5, 0x0) r8 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setstatus(r8, 0x4, 0x6000) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x6, 0x0, 0x0, r8, 0x0}]) 34.224171628s ago: executing program 2 (id=8124): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ttyprintk(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/address_bits', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) dup(r0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet(0x2, 0x1, 0x0) socket$inet(0x2, 0x1, 0x0) syz_usb_connect(0x0, 0x5d, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="93630100200501001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x4c}}, 0x0) 33.360372956s ago: executing program 2 (id=8125): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x6, &(0x7f0000000400)=[{0x0, 0x3, 0x7, 0x7613}, {0x6, 0x2, 0x10, 0x2b52}, {0xe, 0x8, 0x5, 0x3ff}, {0x825b, 0x81, 0x2, 0x634}, {0xc0e, 0x3f, 0x55, 0x1f}, {0x7fff, 0x0, 0x7, 0x2}]}) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89001) fchdir(r0) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x1, &(0x7f0000000440)) prlimit64(0x0, 0xe, &(0x7f0000000140), 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000240)=0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0xfffffffb, 0x2, 0x10000, 0xf6}) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x7, &(0x7f0000000000)={0x0, 0x0, 0xd4a4}) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x0, @private1}, 0x1c) r3 = socket$qrtr(0x2a, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800010001"], 0x28}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000002030102000000000000000000000010080001000100000016c798a7a8be429f266aaa9fc26d5d401e00572f6bbf0e38b11b74fb052adbead0994c7e8c6a24cc5be3479fc2117ee54cc3b0a38ad3b7f90b31dfae64b66dd684f56214dcdc8185e581b1c33f5ad671e8ac18454066395c8eec06f484df86911de70a9410dc9f2a63839212062db703bd9a386bb2ca210a712924631d3923da233f43ce65cff9022548853c33ff260bfd4ca4580f8a1c80d4548497e4b492b934d2052345915c29838b78932aa8abe8c36f053711e5dc0b6a0812"], 0x1c}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000380)=@assoc_value, &(0x7f00000003c0)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000140)={'virt_wifi0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'virt_wifi0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x5, &(0x7f0000000080)=[{0x44, 0x9, 0x0, 0xffffff7f}, {0xc, 0x9}, {0x0, 0x0, 0x9}, {0x20, 0x0, 0xf2}, {0x6}]}) syz_open_dev$vcsn(&(0x7f0000000000), 0x1ff, 0x800002) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10065, 0x0) close_range(r4, 0xffffffffffffffff, 0x2) 32.267617725s ago: executing program 2 (id=8126): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002240)=@delchain={0x24c, 0x65, 0x0, 0x0, 0x0, {}, [@filter_kind_options=@f_u32={{0x8}, {0x54, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'veth0_to_team\x00'}, @TCA_U32_INDEV={0x14, 0x8, 'veth0\x00'}, @TCA_U32_HASH={0x8}, @TCA_U32_CLASSID={0x8}, @TCA_U32_MARK={0x10}, @TCA_U32_FLAGS={0x8}]}}, @TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @filter_kind_options=@f_route={{0xa}, {0x1b0, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_ACT={0x1a4, 0x6, [@m_connmark={0x104, 0x0, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}]}, {0x2c, 0x6, "91a991d04aa8cb411880b88050856c4a5b99aafe5cf70a535f4e162db7c30535ebf5e9ab54237bf6"}, {0xc}, {0xc}}}, @m_vlan={0x9c, 0x0, 0x0, 0x0, {{0x9}, {0x70, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PARMS={0x1c}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}, @TCA_VLAN_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x24c}}, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)={0x9c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x74, 0x51, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "5b004329e3edc6c0bd8929a73e"}, @NL80211_KEY_CIPHER={0x8}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_SEQ={0x9, 0x4, "e5754637b1"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_IDX={0x5}]}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x9c}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 31.821761205s ago: executing program 2 (id=8127): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_buf(r2, 0x29, 0xcb, 0x0, 0x4b) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r1, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000ffff0007020000f8ffffffb703000008000000b704000000000000850000000100001095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='tlb_flush\x00', r5}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) r7 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') r8 = socket$inet(0x2, 0x3, 0x2) sched_rr_get_interval(0x0, &(0x7f00000000c0)) setsockopt$inet_mreqsrc(r8, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) preadv(r7, &(0x7f0000000440)=[{&(0x7f0000000600)=""/4096, 0x1000}], 0x1, 0x8, 0x0) 8.935657995s ago: executing program 4 (id=8094): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f00000013c0), 0x2, 0x0) r1 = syz_io_uring_setup(0x0, &(0x7f0000000480)={0x0, 0x0, 0x20}, &(0x7f0000000100), &(0x7f0000000080)) io_uring_enter(r1, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) listxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) r3 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r3, 0xc0104320, &(0x7f0000001040)={0xa, &(0x7f0000000040)}) 8.692195004s ago: executing program 3 (id=8162): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000003680)=ANY=[@ANYBLOB], 0x0) 8.648848217s ago: executing program 3 (id=8163): r0 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x38, r2, 0x101, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x63d}]}]}]}, 0x38}}, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300), 0xc, &(0x7f0000000540)={&(0x7f0000000340)={0x16c, r2, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xb}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x101}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xee}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x81}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xd5ef}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8000}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x40}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0x46, 0x407006}, 0x104) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='htcp\x00', 0x5) clock_gettime(0x0, &(0x7f0000000200)) 8.464074026s ago: executing program 4 (id=8164): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r3, @ANYBLOB="00000016010000001800120008000100736974000c00020008", @ANYRES32], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, r4}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x7}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @dev}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8}]}}}]}, 0x48}}, 0x0) 8.36218868s ago: executing program 3 (id=8165): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="e6", 0x1}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000", @ANYRES32=0x0], 0x24}}, 0x0) sendmsg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000340)="d0", 0x1}], 0x1}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000001c80)=""/102387, 0x18ff3}], 0x1, 0x7, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder0\x00', 0x800, 0x0) ioctl$HIDIOCGRDESC(r3, 0x90044802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x2081, 0x191) open_by_handle_at(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='K\x00\x00\x00r'], 0x10000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00'}, 0x10) syz_usb_connect(0x2, 0x10b, &(0x7f0000001c00)=ANY=[@ANYBLOB="12010000df21f5083c41d18193fb010203010902f900010000000009040000042088f4000905000240000000000905831008003f06000725010002e58909050a104000000000b700ea6b2651e69a0f528840bec2959d"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x401, 0x20000) 7.067671816s ago: executing program 1 (id=8171): syz_open_dev$evdev(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x2, 0x1}, 0x20) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040801}, 0xb2ceec15cb82da6e) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) bind$inet6(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000100)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x4, 0x0, {"00000000000000000000000000000001"}, 0xfffffffffffffffc, 0x0, 0x2000000}}}, 0x90) syz_open_dev$usbfs(&(0x7f0000000200), 0x77, 0x0) r3 = openat(0xffffffffffffffff, 0x0, 0x20000, 0x5) openat$cgroup_ro(r3, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r4, 0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc000ff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r5, 0xc0182101, &(0x7f00000000c0)={r6}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000480)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000080)={r7, 0x3, r5, 0x5}) geteuid() 6.129266562s ago: executing program 0 (id=8174): r0 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x38, r2, 0x101, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x63d}]}]}]}, 0x38}}, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300), 0xc, &(0x7f0000000540)={&(0x7f0000000340)={0x16c, r2, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xb}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x101}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xee}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x81}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xd5ef}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8000}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x40}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0x46, 0x407006}, 0x104) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='htcp\x00', 0x5) clock_gettime(0x0, &(0x7f0000000200)) 6.116564442s ago: executing program 1 (id=8175): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) syz_clone3(&(0x7f0000000340)={0x2000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x3}, &(0x7f00000001c0)=""/74, 0x4a, &(0x7f00000002c0)=""/120, &(0x7f0000000240)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x8, {r0}}, 0x58) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000019300)=@getlink={0x144, 0x12, 0x600, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x8, 0x50045}, [@IFLA_BROADCAST={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}, @IFLA_IFNAME={0x14, 0x3, 'ip6gretap0\x00'}, @IFLA_BROADCAST={0xa}, @IFLA_IFNAME={0x14, 0x3, 'hsr0\x00'}, @IFLA_PHYS_PORT_ID={0x22, 0x22, "a4b3904730650fc29e539beeab877ccfc72d2e3681d5737a45467b53efa5"}, @IFLA_AF_SPEC={0xc0, 0x1a, 0x0, 0x1, [@AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x8, 0x3, 0x0, 0x0, 0x7}, {0x8, 0x9, 0x0, 0x0, 0xfffffff8}, {0x8, 0x12, 0x0, 0x0, 0x81}, {0x8, 0x14, 0x0, 0x0, 0x4}, {0x8, 0x2, 0x0, 0x0, 0x7ff}]}}, @AF_MPLS={0x4}, @AF_INET6={0x14, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x8}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x6}]}, @AF_INET6={0x74, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFLA_INET6_TOKEN={0x14, 0x7, @remote}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x8}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x50}, @IFLA_INET6_TOKEN={0x14, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}}, @IFLA_INET6_TOKEN={0x14, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x9}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x8}]}]}]}, 0x144}}, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x10012, r0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x10012, r3, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000004c0)) close(0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000300)=""/102400, 0x19000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r5 = add_key(0x0, &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0x1, 0xfffffffffffffffe) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x3}, 0x0) keyctl$set_timeout(0xf, r5, 0x0) r6 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setstatus(r6, 0x4, 0x6000) 5.889526529s ago: executing program 0 (id=8176): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x26}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000300004802c"], 0x84}}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4ffe6, 0x0) 5.888688933s ago: executing program 1 (id=8177): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) syz_io_uring_setup(0x6865, &(0x7f00000000c0), 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x2, 0x0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) socket$inet6(0xa, 0x80002, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x80002, 0x0) socket$tipc(0x1e, 0x2, 0x0) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05", @ANYRES16=r0, @ANYRES8, @ANYRES16=r1, @ANYRES16=r2], 0x0) 5.709937452s ago: executing program 3 (id=8178): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000240)="f20ea8accdb7d9e23df4", 0xa, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, 0x0, 0x0, 0x0) 5.655326567s ago: executing program 3 (id=8179): bpf$PROG_LOAD(0x5, 0x0, 0xf) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000002c0)={'syzkaller0\x00', @random="371633aaf7ef"}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'}) 4.322538102s ago: executing program 1 (id=8180): socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f0000000080)) socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) socket(0x10, 0x3, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x50, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5}, {0x5, 0x3, 0x80}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x50}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000005200004100"/20], 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x7a, &(0x7f0000000140)={@broadcast, @random="17043a73dbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@private=0xa010102, 0x10000}, {@private}, {@local}, {@remote}, {@private}, {@remote}]}]}}}}}}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000440)={@local, @local, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@timestamp_addr={0x44, 0x1c, 0xa, 0x1, 0x0, [{}, {@dev}, {@dev}]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xf, 0xc2, 0x0, 0x0, 0x0, {[@sack={0x5, 0x12, [0x6, 0x5, 0x3, 0x7]}, @sack={0x5, 0x12, [0x6, 0xbba1, 0x4, 0x5]}, @mss={0x2, 0x4, 0x80}]}}}}}}}, 0x0) 4.201666248s ago: executing program 1 (id=8181): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f00000027c0)=';', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000000140)='W', 0x1}], 0x1}}], 0x2, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000500)='htcp\x00', 0x5) shutdown(r0, 0x2) 4.135895187s ago: executing program 1 (id=8182): syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x244, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x20}}, [{{0x9, 0x5, 0x2, 0x3, 0x0, 0x0, 0x8}}]}}}]}}]}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000300)="b9c0a9531cdcdb1cf680d847c23fedc0bb70515206ed7301fc60f128744ec0ed33c89b77490daa64e7efaaec3ac556da1dfcb60cd94ad46fccf2820bf25012dc63f3dc79b75c699b9339db28852fe25e61e29f01b09bb22ec173ac5b97c2193659f103db6e54397eacbb563a360c407c41f9090ce51839691e904aee9656a2e8f9ac702082e334be253d7e26f588e6c7fe653385169d7be56d9b7d223c44523d8f5fecbbb9cab77942b6acb1a241a41c7685f8677b8a0265a6dd313d2408", &(0x7f00000004c0)=""/253}, 0x20) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_msfilter(r3, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB='7'], 0x1) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000080)={0x0, @local, @local}, &(0x7f0000000040)=0xc) r5 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={@remote, 0x0, r4}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000200), 0x8) listen(r6, 0x0) setsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x7, &(0x7f00000006c0), 0x4) ioctl$SNDCTL_TMR_STOP(r2, 0x5403) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) shutdown(r7, 0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r7, 0x84, 0xe, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @remote}}, [0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xf07, 0x0, 0xffffffffffff7fff]}, &(0x7f0000000040)=0x100) accept4$vsock_stream(r1, &(0x7f0000000280)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x48}}, 0x0) 2.462023313s ago: executing program 4 (id=8183): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f00000013c0), 0x2, 0x0) r1 = syz_io_uring_setup(0x0, &(0x7f0000000480)={0x0, 0x0, 0x20}, &(0x7f0000000100), &(0x7f0000000080)) io_uring_enter(r1, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) r3 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r3, 0xc0104320, &(0x7f0000001040)={0xa, &(0x7f0000000040)}) 2.284076613s ago: executing program 0 (id=8184): syz_open_dev$evdev(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x2, 0x1}, 0x20) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040801}, 0xb2ceec15cb82da6e) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) bind$inet6(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000100)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x4, 0x0, {"00000000000000000000000000000001"}, 0xfffffffffffffffc, 0x0, 0x2000000}}}, 0x90) syz_open_dev$usbfs(&(0x7f0000000200), 0x77, 0x0) r3 = openat(0xffffffffffffffff, 0x0, 0x20000, 0x5) openat$cgroup_ro(r3, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r4, 0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc000ff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r5, 0xc0182101, &(0x7f00000000c0)={r6}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000480)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000080)={r7, 0x3, r5, 0x5}) geteuid() 2.155619264s ago: executing program 3 (id=8185): write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYRES32], 0x234) r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xf1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000a40), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000002c0)='\x00', 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000a40), &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000a80)='X', 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000000)={r1, r0, r2}, &(0x7f0000000480)=""/257, 0x152, &(0x7f0000000200)={&(0x7f0000000740)={'rmd160\x00'}}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000200), 0x208e24b) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100800001) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r6, 0x84, 0x1, &(0x7f00000011c0)=""/4067, &(0x7f0000001180)=0xfe3) syz_emit_vhci(0x0, 0x7) r7 = syz_open_dev$cec(&(0x7f0000000680), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r7, 0xc05c6104, &(0x7f0000000500)={"a0453822", 0x0, 0x6, 0x2, 0x0, 0x0, "3377f877c734c4f928875ab8db00", "000100", "0200", "be4d22a4", ["c38600008000080000e6fc00", "51f3541a910080ffffcb3a10", "2ce50f8a285d9500c522afe1"]}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=ANY=[@ANYBLOB="14e74c34e636c39bbe5bef93000006000000040000ae5600"], 0x14}}, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_vhci(0x0, 0x3d) setsockopt$inet6_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000300)='vegas\x00', 0x6) connect$inet6(r9, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r9, &(0x7f0000000200), 0xfffffd9d) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB], 0x17) syz_emit_vhci(&(0x7f0000000780)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x91}, "18d0673f8b265702f0654f83f117c6ce4558bddc2125dd4d18ec34cd4ab050131ea3032c7f889320c0496d342fc9e3445b3073a5450767e286c2051db98067f3b6e283ad43290d901b89294daf597db210dd66f9597aec3638affa49c1ebecb5022a6df2a6fc1d9dc8f33708becdc5758591c37e24bbb96ed3a8fda836070f0f1bee93ca86d821ff95321155f7d4e6cc93"}, 0x95) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) inotify_init() 1.288258032s ago: executing program 0 (id=8186): r0 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x38, r2, 0x101, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x63d}]}]}]}, 0x38}}, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300), 0xc, &(0x7f0000000540)={&(0x7f0000000340)={0x16c, r2, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xb}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x101}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xee}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x81}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xd5ef}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8000}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x40}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0x46, 0x407006}, 0x104) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='htcp\x00', 0x5) clock_gettime(0x0, &(0x7f0000000200)) 1.128550165s ago: executing program 4 (id=8187): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x1}, 0x48) close(r0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000711225000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90) 881.941281ms ago: executing program 4 (id=8188): r0 = socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mkdir(0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r4}, 0x10) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) bind$alg(r0, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) 832.74078ms ago: executing program 0 (id=8189): socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f0000000080)) socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) socket(0x10, 0x3, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x50, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5}, {0x5, 0x3, 0x80}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x50}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000005200004100"/20], 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x1c}, 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) syz_emit_ethernet(0x7a, &(0x7f0000000140)={@broadcast, @random="17043a73dbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@private=0xa010102, 0x10000}, {@private}, {@local}, {@remote}, {@private}, {@remote}]}]}}}}}}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000440)={@local, @local, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@timestamp_addr={0x44, 0x1c, 0xa, 0x1, 0x0, [{}, {@dev}, {@dev}]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xf, 0xc2, 0x0, 0x0, 0x0, {[@sack={0x5, 0x12, [0x6, 0x5, 0x3, 0x7]}, @sack={0x5, 0x12, [0x6, 0xbba1, 0x4, 0x5]}, @mss={0x2, 0x4, 0x80}]}}}}}}}, 0x0) 0s ago: executing program 0 (id=8190): syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) clock_gettime(0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b30, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d56", 0x14) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x13) openat$userio(0xffffffffffffff9c, 0x0, 0x8002, 0x0) mknod(&(0x7f0000000540)='./file1\x00', 0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="04230d9238243b3c29c280c90007dd5a48b96d5917e86843d77025061b91001e"], 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, 0x0, 0x0) syz_emit_vhci(0x0, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x26, &(0x7f0000000100)={@remote, @dev, @empty}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r3, 0x8983, &(0x7f0000000540)) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="04040a00000000000054679202ce9eaa48b326b038d97544c8b681bad547412afab3663029531077c8c4fa2f7501610d4eae6214096ae92430cd63486f07b04d9c519ab15a6e842e1352398f95ff35f5115a2c6c50f63336179b5e6b1f774a63506e8cb76bba42c6bee078240ec871a2bcf7dd5691833ac53a02f3614eae3afb9549df1b77ce0baebc9f6306644f6f08bbd3ca3229d272acd3483bf3ae4228f7a2b839594856918b10ca47ad4dc249d99c244aba277d101b5ac305"], 0xd) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8}}}, 0x14) kernel console output (not intermixed with test programs): ][T28766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1975.602058][T28766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1975.624744][T28766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1975.644417][T28766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1975.683162][T28766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1975.711474][T28766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1975.729958][T28766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1975.749745][T28766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1975.768591][T28766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1975.780726][T28766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1975.791896][T28766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1975.804764][T28766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1975.817410][T28766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1975.832626][T28766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1975.856780][T28766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1975.870235][T28766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1975.891139][T28766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1975.901881][T28766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1975.912496][T28766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1975.924200][T28766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1975.935568][T28766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1975.946768][T28766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1975.956762][T28766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1975.968308][T28766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1975.978964][T11987] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 1975.991310][ T1259] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.001441][T28766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1976.012538][T28766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1976.024671][T28766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1976.024829][ T5268] gspca_sonixj: reg_w1 err -71 [ 1976.035396][T28766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1976.040282][T28766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1976.051218][T28766] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1976.073901][T28766] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1976.086478][T28766] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1976.098097][T28766] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1976.153816][ T5268] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 1976.183535][ T5268] usb 3-1: USB disconnect, device number 120 [ 1976.216105][T11987] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1976.241506][T11987] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1976.263355][T11987] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1976.287809][T11987] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1976.302407][ T6869] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1976.308909][T11987] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1976.320718][ T6869] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1976.341097][T28964] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1976.378674][ T6869] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1976.394681][ T6869] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1976.793750][ T29] audit: type=1326 audit(1722484695.241:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28984 comm="syz.0.7565" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd6823773b9 code=0x0 [ 1977.753848][T11987] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 1977.801478][T11987] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input113 [ 1978.243674][T29015] xt_l2tp: v2 doesn't support IP mode [ 1978.252024][ T29] audit: type=1326 audit(1722484696.691:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29001 comm="syz.2.7569" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff7765773b9 code=0x0 [ 1978.917469][ T2637] usb 2-1: USB disconnect, device number 105 [ 1978.917615][ C0] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1978.943743][T11987] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1979.152755][T11987] usb 4-1: Using ep0 maxpacket: 16 [ 1979.183254][T11987] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1979.215019][T11987] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1979.313336][T11987] usb 4-1: config 0 descriptor?? [ 1979.345995][T11987] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1979.845645][ T29] audit: type=1326 audit(1722484698.291:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29038 comm="syz.0.7580" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd6823773b9 code=0x0 [ 1980.351665][T11987] gspca_sonixj: reg_w1 err -71 [ 1980.382635][T11987] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 1980.419640][T11987] usb 4-1: USB disconnect, device number 119 [ 1980.905976][T29066] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7590'. [ 1981.032439][ T2637] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1981.249602][ T2637] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1981.271836][ T2637] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1981.381400][ T2637] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1981.409779][ T2637] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1981.421607][ T2637] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1981.447540][T29060] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1981.516936][T29077] Cannot find add_set index 0 as target [ 1981.868297][T29086] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7597'. [ 1982.069136][T29091] netlink: 'syz.1.7599': attribute type 1 has an invalid length. [ 1982.084394][T29091] netlink: 15382 bytes leftover after parsing attributes in process `syz.1.7599'. [ 1982.170988][T29091] netlink: 'syz.1.7599': attribute type 1 has an invalid length. [ 1982.199306][ T29] audit: type=1326 audit(1722484700.631:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29092 comm="syz.3.7600" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8f57f773b9 code=0x0 [ 1982.242350][T29091] netlink: 15382 bytes leftover after parsing attributes in process `syz.1.7599'. [ 1982.770172][ T29] audit: type=1326 audit(1722484701.211:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29098 comm="syz.4.7601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9681773b9 code=0x7ffc0000 [ 1982.818195][ T29] audit: type=1326 audit(1722484701.211:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29098 comm="syz.4.7601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9681773b9 code=0x7ffc0000 [ 1982.853682][ T2637] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 1982.871666][ T29] audit: type=1326 audit(1722484701.241:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29098 comm="syz.4.7601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb9681773b9 code=0x7ffc0000 [ 1982.907982][ T2637] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input114 [ 1982.941195][ T29] audit: type=1326 audit(1722484701.241:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29098 comm="syz.4.7601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9681773b9 code=0x7ffc0000 [ 1983.009251][ T29] audit: type=1326 audit(1722484701.241:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29098 comm="syz.4.7601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9681773b9 code=0x7ffc0000 [ 1983.082799][ T29] audit: type=1326 audit(1722484701.251:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29098 comm="syz.4.7601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb9681773b9 code=0x7ffc0000 [ 1983.156682][ T29] audit: type=1326 audit(1722484701.251:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29098 comm="syz.4.7601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9681773b9 code=0x7ffc0000 [ 1983.199201][ T29] audit: type=1326 audit(1722484701.251:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29098 comm="syz.4.7601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9681773b9 code=0x7ffc0000 [ 1983.234360][ T29] audit: type=1326 audit(1722484701.261:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29098 comm="syz.4.7601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fb9681773b9 code=0x7ffc0000 [ 1983.452492][T11987] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 1983.668352][T11987] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1983.689978][T11987] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1983.702201][T11987] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1983.721875][T11987] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1983.731886][T11987] usb 4-1: SerialNumber: syz [ 1983.922514][ T9] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 1983.973247][ C1] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1983.973255][ T8679] usb 1-1: USB disconnect, device number 11 [ 1983.990273][T11987] usb 4-1: 0:2 : does not exist [ 1984.006813][T11987] usb 4-1: unit 5: unexpected type 0x03 [ 1984.022323][T11987] usb 4-1: unit 4 not found! [ 1984.081682][T11987] usb 4-1: USB disconnect, device number 120 [ 1984.142399][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 1984.151646][ T9] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1984.183955][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1984.199069][ T9] usb 5-1: config 0 descriptor?? [ 1984.210670][ T9] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1985.225044][ T9] gspca_sonixj: reg_w1 err -71 [ 1985.262474][ T9] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 1985.292329][T11987] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 1985.310351][ T9] usb 5-1: USB disconnect, device number 123 [ 1985.519464][T11987] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 1985.532638][T11987] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1985.569344][T11987] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1985.585450][T11987] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1985.600822][T11987] usb 4-1: Manufacturer: syz [ 1985.626881][T11987] usb 4-1: config 0 descriptor?? [ 1985.712497][ T8679] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1985.732904][T11987] rc_core: IR keymap rc-hauppauge not found [ 1985.742414][T11987] Registered IR keymap rc-empty [ 1985.748212][T11987] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1985.760187][T11987] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input115 [ 1985.862358][ T9] usb 4-1: USB disconnect, device number 121 [ 1985.909509][ T8679] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1985.921616][ T8679] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1985.940800][ T8679] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1985.963086][ T8679] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1985.981626][ T8679] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1986.030739][T29155] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1986.095866][T29163] xt_l2tp: v2 doesn't support IP mode [ 1987.473179][ T8679] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 1987.519605][ T8679] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input116 [ 1988.244498][ T2637] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 1988.504242][ T2637] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 1988.533147][ T2637] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1988.541952][ T8679] usb 1-1: USB disconnect, device number 12 [ 1988.542925][ C0] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1988.558996][ T2637] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1988.585810][ T2637] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1988.602809][ T2637] usb 5-1: Manufacturer: syz [ 1988.613634][ T2637] usb 5-1: config 0 descriptor?? [ 1988.742363][ T2637] rc_core: IR keymap rc-hauppauge not found [ 1988.748410][ T2637] Registered IR keymap rc-empty [ 1988.761846][ T2637] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1988.795947][ T2637] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input117 [ 1988.832676][ T2637] usb 5-1: USB disconnect, device number 124 [ 1988.862366][T13520] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 1989.054550][T13520] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1989.083834][T13520] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1989.131308][T13520] usb 3-1: config 0 descriptor?? [ 1989.143812][T29226] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7645'. [ 1989.166447][T13520] cp210x 3-1:0.0: cp210x converter detected [ 1989.377498][T13520] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 1989.390523][T13520] cp210x 3-1:0.0: querying part number failed [ 1989.400366][T13520] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1989.792399][T13520] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 1989.934268][T29248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1989.955485][T29248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1989.988517][T13520] usb 5-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1990.029662][T13520] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1990.052914][T13520] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1990.130440][T13520] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1990.153836][T13520] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1990.178105][T29236] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1990.197839][T29245] xt_l2tp: v2 doesn't support IP mode [ 1990.214871][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 1990.214890][ T29] audit: type=1326 audit(1722484708.661:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29244 comm="syz.0.7653" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd6823773b9 code=0x0 [ 1991.073485][T29262] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7657'. [ 1991.523415][T20782] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 1991.584294][ T9] usb 3-1: USB disconnect, device number 121 [ 1991.599580][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1991.614274][ T9] cp210x 3-1:0.0: device disconnected [ 1991.665685][T13520] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 1991.683513][T13520] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input118 [ 1991.714556][T20782] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 1991.724124][T20782] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1991.736647][T20782] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1991.749854][T20782] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1991.758342][T20782] usb 4-1: Manufacturer: syz [ 1991.766502][T20782] usb 4-1: config 0 descriptor?? [ 1991.782630][ T2637] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1991.942639][T20782] rc_core: IR keymap rc-hauppauge not found [ 1991.959776][T20782] Registered IR keymap rc-empty [ 1991.969264][T20782] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1991.982362][ T2637] usb 1-1: Using ep0 maxpacket: 32 [ 1991.999032][T20782] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input119 [ 1992.024134][ T2637] usb 1-1: config 0 has no interfaces? [ 1992.037001][T20782] usb 4-1: USB disconnect, device number 122 [ 1992.046542][ T2637] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1992.063226][ T2637] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1992.071970][ T2637] usb 1-1: Product: syz [ 1992.102097][ T2637] usb 1-1: Manufacturer: syz [ 1992.108152][ T2637] usb 1-1: SerialNumber: syz [ 1992.119807][ T2637] usb 1-1: config 0 descriptor?? [ 1992.350613][T29280] vlan3: entered promiscuous mode [ 1992.372475][T29280] team0: Device vlan3 is already an upper device of the team interface [ 1992.448126][ T2637] usb 1-1: USB disconnect, device number 13 [ 1992.553857][T29296] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7669'. [ 1992.718386][ T2637] usb 5-1: USB disconnect, device number 125 [ 1992.724421][ C1] aiptek 5-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1992.817967][T29306] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7672'. [ 1993.236741][T29327] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7682'. [ 1993.522415][ T9] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 1993.612564][T20782] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 1993.725937][ T9] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 1993.735459][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1993.749027][ T9] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1993.768438][ T9] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1993.782652][ T9] usb 4-1: Manufacturer: syz [ 1993.793814][ T9] usb 4-1: config 0 descriptor?? [ 1993.806935][T20782] usb 3-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1993.842732][T29340] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7688'. [ 1993.862112][T20782] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1993.877215][T20782] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1993.892829][T20782] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1993.896523][ T9] rc_core: IR keymap rc-hauppauge not found [ 1993.902037][T20782] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1993.920312][ T9] Registered IR keymap rc-empty [ 1993.922590][T29331] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1993.935195][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1993.981931][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input120 [ 1994.037670][ T9] usb 4-1: USB disconnect, device number 123 [ 1994.270806][T29355] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7694'. [ 1994.716459][T29370] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7700'. [ 1995.352903][T20782] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 1995.369934][T20782] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input121 [ 1995.653709][T29388] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7707'. [ 1996.062616][ T9] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 1996.286244][ T9] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 1996.315634][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1996.341870][ T9] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1996.368690][ T9] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1996.399827][ T9] usb 4-1: Manufacturer: syz [ 1996.411964][ T9] usb 4-1: config 0 descriptor?? [ 1996.464064][T29415] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7718'. [ 1996.634196][ T9] rc_core: IR keymap rc-hauppauge not found [ 1996.648233][ T9] Registered IR keymap rc-empty [ 1996.661626][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1996.677475][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input122 [ 1996.713006][ T9] usb 4-1: USB disconnect, device number 124 [ 1996.986592][ T9] usb 3-1: USB disconnect, device number 122 [ 1996.986727][ C1] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1997.562605][ T5270] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1997.762925][ T5270] usb 1-1: Using ep0 maxpacket: 32 [ 1997.774261][ T5270] usb 1-1: config 0 has no interfaces? [ 1997.791297][ T5270] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1997.813082][ T5270] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1997.821117][ T5270] usb 1-1: Product: syz [ 1997.838272][ T5270] usb 1-1: Manufacturer: syz [ 1997.847867][ T5270] usb 1-1: SerialNumber: syz [ 1997.861993][ T5270] usb 1-1: config 0 descriptor?? [ 1997.923094][T11987] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 1998.108818][T29434] vlan3: entered promiscuous mode [ 1998.119730][T29434] team0: Device vlan3 is already an upper device of the team interface [ 1998.124406][T11987] usb 5-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1998.140198][T11987] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1998.152175][T11987] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1998.167362][T11987] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1998.178957][T11987] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1998.229542][ T2637] usb 1-1: USB disconnect, device number 14 [ 1998.239119][T29453] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1998.522381][T24749] Bluetooth: hci4: command 0x0406 tx timeout [ 1998.720344][T29465] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7736'. [ 1998.953510][ T8679] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1999.165407][ T8679] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 1999.182381][ T8679] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1999.197239][T29481] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7741'. [ 1999.231421][ T8679] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1999.257980][ T8679] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1999.282483][ T8679] usb 3-1: Manufacturer: syz [ 1999.303361][ T8679] usb 3-1: config 0 descriptor?? [ 1999.452516][ T8679] rc_core: IR keymap rc-hauppauge not found [ 1999.861500][T11987] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 1999.869269][ T8679] Registered IR keymap rc-empty [ 1999.906356][T11987] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input123 [ 1999.918110][ T8679] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1999.948014][ T8679] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input124 [ 2000.008036][ T8679] usb 3-1: USB disconnect, device number 123 [ 2001.361544][ C0] aiptek 5-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 2001.388151][T11987] usb 5-1: USB disconnect, device number 126 [ 2002.022733][T11987] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 2002.267944][T11987] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 2002.309665][T11987] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2002.347733][T11987] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2002.360805][T11987] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2002.371773][T11987] usb 1-1: Manufacturer: syz [ 2002.426027][T11987] usb 1-1: config 0 descriptor?? [ 2002.612449][T11987] rc_core: IR keymap rc-hauppauge not found [ 2002.634262][T11987] Registered IR keymap rc-empty [ 2002.649384][T11987] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 2002.680713][T11987] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input125 [ 2002.707223][T11987] usb 1-1: USB disconnect, device number 15 [ 2003.582715][ T2637] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 2003.682676][ T5270] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 2003.797093][ T2637] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2003.852605][ T2637] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2003.864851][ T2637] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2003.879692][ T2637] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 2003.889319][ T2637] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2003.901347][ T5270] usb 4-1: Using ep0 maxpacket: 32 [ 2003.913069][ T5270] usb 4-1: config 0 has no interfaces? [ 2003.927782][T29547] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2003.940048][ T5270] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 2003.954542][ T5270] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2003.966185][ T5270] usb 4-1: Product: syz [ 2003.971689][ T5270] usb 4-1: Manufacturer: syz [ 2003.978480][ T5270] usb 4-1: SerialNumber: syz [ 2003.995323][ T5270] usb 4-1: config 0 descriptor?? [ 2004.242074][T29549] vlan2: entered promiscuous mode [ 2004.258106][T29549] team0: Device vlan2 is already an upper device of the team interface [ 2004.424159][T20782] usb 4-1: USB disconnect, device number 125 [ 2005.333256][ T2637] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 2005.380092][ T2637] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input126 [ 2005.594484][T20782] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 2005.784956][T20782] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 2005.807800][T20782] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2005.841504][T20782] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2005.858089][T20782] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2005.882172][T20782] usb 5-1: Manufacturer: syz [ 2005.908084][T20782] usb 5-1: config 0 descriptor?? [ 2006.035347][T20782] rc_core: IR keymap rc-hauppauge not found [ 2006.061338][T20782] Registered IR keymap rc-empty [ 2006.082992][T20782] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 2006.116233][T20782] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input127 [ 2006.216765][T20782] usb 5-1: USB disconnect, device number 127 [ 2007.120985][ T8679] usb 1-1: USB disconnect, device number 16 [ 2007.121015][ C1] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 2008.370092][T29636] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7796'. [ 2008.536997][T13520] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 2008.745179][T13520] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 2008.774095][T20782] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 2008.790282][T13520] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2008.821687][T13520] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2008.861524][T13520] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2008.874125][T13520] usb 1-1: Manufacturer: syz [ 2008.881450][T13520] usb 1-1: config 0 descriptor?? [ 2008.974082][T20782] usb 5-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2009.072412][T13520] rc_core: IR keymap rc-hauppauge not found [ 2009.079837][T13520] Registered IR keymap rc-empty [ 2009.086222][T20782] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2009.098803][T13520] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 2009.113298][T20782] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2009.126588][T13520] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input128 [ 2009.138359][T20782] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 2009.159704][T13520] usb 1-1: USB disconnect, device number 17 [ 2009.168808][T20782] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2009.226423][T29638] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 2010.825095][ C1] eth0: bad gso: type: 1, size: 1408 [ 2011.042975][T20782] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 2011.064197][T20782] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input129 [ 2011.154900][T29669] vlan2: entered promiscuous mode [ 2011.169469][T29669] syz_tun: entered promiscuous mode [ 2011.179461][T29669] vlan2: entered allmulticast mode [ 2011.214342][T29669] syz_tun: entered allmulticast mode [ 2013.688024][T11987] usb 5-1: USB disconnect, device number 2 [ 2013.688070][ C1] aiptek 5-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 2014.634827][T29723] vlan2: entered promiscuous mode [ 2014.643554][T29723] syz_tun: entered promiscuous mode [ 2014.689294][T29723] vlan2: entered allmulticast mode [ 2014.748490][T29723] syz_tun: entered allmulticast mode [ 2015.512595][T13520] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 2016.155993][T13520] usb 3-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2016.182354][T13520] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2016.222420][T13520] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2016.272613][T13520] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 2016.298724][T13520] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2016.325615][T29732] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2016.481382][ T29] audit: type=1326 audit(1722484734.921:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29744 comm="syz.0.7832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6823773b9 code=0x7fc00000 [ 2016.538679][ T29] audit: type=1326 audit(1722484734.921:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29744 comm="syz.0.7832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fd6823773b9 code=0x7fc00000 [ 2016.920675][T29766] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7841'. [ 2017.145793][ T29] audit: type=1326 audit(1722484735.591:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29744 comm="syz.0.7832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6823773b9 code=0x7fc00000 [ 2017.230390][ T29] audit: type=1326 audit(1722484735.591:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29744 comm="syz.0.7832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7fd6823773b9 code=0x7fc00000 [ 2017.285781][ T29] audit: type=1326 audit(1722484735.621:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29769 comm="syz.4.7843" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb9681773b9 code=0x0 [ 2017.775205][T13520] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 2017.819545][T13520] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input130 [ 2018.267820][T29788] netlink: 3068 bytes leftover after parsing attributes in process `syz.4.7849'. [ 2018.290424][T29788] netlink: 'syz.4.7849': attribute type 1 has an invalid length. [ 2018.324682][T29788] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.7849'. [ 2018.776983][T29800] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7853'. [ 2018.924959][ T29] audit: type=1326 audit(1722484737.361:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29796 comm="syz.4.7853" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb9681773b9 code=0x0 [ 2019.339185][T29814] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7858'. [ 2019.377179][ T2637] usb 3-1: USB disconnect, device number 124 [ 2019.377211][ C1] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 2020.031002][T29832] vlan2: entered promiscuous mode [ 2020.038792][T29832] syz_tun: entered promiscuous mode [ 2020.058277][T29832] vlan2: entered allmulticast mode [ 2020.067037][T29832] syz_tun: entered allmulticast mode [ 2020.293551][ T29] audit: type=1326 audit(1722484738.731:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29833 comm="syz.3.7866" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8f57f773b9 code=0x0 [ 2020.461830][T29846] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7871'. [ 2022.632367][T13520] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 2022.865847][T13520] usb 2-1: Using ep0 maxpacket: 32 [ 2022.891251][T13520] usb 2-1: config 0 has no interfaces? [ 2022.911635][T13520] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 2022.932040][T13520] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2022.954989][T13520] usb 2-1: Product: syz [ 2022.962347][T13520] usb 2-1: Manufacturer: syz [ 2022.966981][T13520] usb 2-1: SerialNumber: syz [ 2022.998464][T13520] usb 2-1: config 0 descriptor?? [ 2023.262843][T29880] vlan3: entered promiscuous mode [ 2023.288653][T29880] team0: Device vlan3 is already an upper device of the team interface [ 2023.403006][T11987] usb 2-1: USB disconnect, device number 106 [ 2023.742394][T13520] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 2023.975882][T13520] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 2024.005935][T13520] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2024.017981][T13520] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2024.032514][T13520] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2024.041238][T13520] usb 3-1: Manufacturer: syz [ 2024.048426][T29916] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7896'. [ 2024.058679][T13520] usb 3-1: config 0 descriptor?? [ 2024.176782][T13520] rc_core: IR keymap rc-hauppauge not found [ 2024.192441][T13520] Registered IR keymap rc-empty [ 2024.204019][T13520] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 2024.233932][T13520] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input131 [ 2024.295908][T13520] usb 3-1: USB disconnect, device number 125 [ 2025.045849][T13520] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 2025.248992][T13520] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 2025.268012][T13520] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2025.347236][T29943] Cannot find add_set index 0 as target [ 2025.557230][T13520] usb 4-1: Product: syz [ 2025.565869][T13520] usb 4-1: Manufacturer: syz [ 2025.575862][T13520] usb 4-1: SerialNumber: syz [ 2025.584903][T13520] usb 4-1: config 0 descriptor?? [ 2025.811852][ T8679] usb 4-1: USB disconnect, device number 126 [ 2025.889665][T29954] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7909'. [ 2025.969246][T29955] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7908'. [ 2026.053174][ T29] audit: type=1326 audit(1722484744.501:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29951 comm="syz.1.7908" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f092fd773b9 code=0x0 [ 2026.579941][T29969] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7915'. [ 2026.722650][T13520] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 2026.964938][T13520] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 2026.994855][T13520] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2027.072089][T13520] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2027.094841][T13520] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2027.116672][T13520] usb 4-1: Manufacturer: syz [ 2027.124146][T13520] usb 4-1: config 0 descriptor?? [ 2027.282428][T13520] rc_core: IR keymap rc-hauppauge not found [ 2027.298892][T13520] Registered IR keymap rc-empty [ 2027.310810][T13520] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 2027.356812][T13520] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input132 [ 2027.416315][T13520] usb 4-1: USB disconnect, device number 127 [ 2027.964596][T30000] Cannot find add_set index 0 as target [ 2028.621248][T30015] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7928'. [ 2028.743812][ T29] audit: type=1326 audit(1722484747.191:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30009 comm="syz.1.7928" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f092fd773b9 code=0x0 [ 2028.842567][T30019] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7931'. [ 2029.644616][ T8679] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 2029.857725][ T8679] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2029.909445][ T8679] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 10 [ 2029.946176][ T8679] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 200, setting to 8 [ 2029.993923][ T8679] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2030.040592][ T8679] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 2030.070525][ T8679] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2030.099464][ T8679] usb 5-1: config 0 descriptor?? [ 2030.122778][T30035] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2030.376023][T30060] Cannot find add_set index 0 as target [ 2030.412177][ T8679] usb 5-1: USB disconnect, device number 3 [ 2031.349038][T30071] netlink: 88 bytes leftover after parsing attributes in process `syz.2.7946'. [ 2031.589437][T24749] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2031.612056][T24749] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2031.632375][T24749] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2031.655523][T24749] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2031.671933][T24749] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2031.682798][T24749] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2031.735632][T30080] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7949'. [ 2032.970560][T30104] Cannot find add_set index 0 as target [ 2033.151995][T30076] chnl_net:caif_netlink_parms(): no params data found [ 2033.541049][T30115] netlink: 88 bytes leftover after parsing attributes in process `syz.3.7957'. [ 2033.685520][T30076] bridge0: port 1(bridge_slave_0) entered blocking state [ 2033.702408][T30076] bridge0: port 1(bridge_slave_0) entered disabled state [ 2033.709732][T30076] bridge_slave_0: entered allmulticast mode [ 2033.722418][T23377] Bluetooth: hci0: command tx timeout [ 2033.744280][T30076] bridge_slave_0: entered promiscuous mode [ 2033.807019][T30076] bridge0: port 2(bridge_slave_1) entered blocking state [ 2033.841318][T30076] bridge0: port 2(bridge_slave_1) entered disabled state [ 2033.867990][T30076] bridge_slave_1: entered allmulticast mode [ 2033.904178][T30076] bridge_slave_1: entered promiscuous mode [ 2034.047951][T30131] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7961'. [ 2034.067019][T30076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2034.099118][T30076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2034.317125][T30076] team0: Port device team_slave_0 added [ 2034.366169][T30076] team0: Port device team_slave_1 added [ 2034.464936][T30076] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2034.472146][T30076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2034.503782][T30076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2034.529066][T30076] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2034.549671][T30076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2034.584729][T30076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2034.761657][T30076] hsr_slave_0: entered promiscuous mode [ 2034.777094][T30076] hsr_slave_1: entered promiscuous mode [ 2035.410560][T30076] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2035.563649][T30150] syzkaller1: entered promiscuous mode [ 2035.587472][T30150] syzkaller1: entered allmulticast mode [ 2035.652102][T30076] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2035.802508][T23377] Bluetooth: hci0: command tx timeout [ 2035.812703][ T2637] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 2035.829824][T30076] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2036.014314][ T2637] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2036.042774][ T2637] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2036.087763][ T2637] usb 2-1: config 0 descriptor?? [ 2036.114672][ T2637] cp210x 2-1:0.0: cp210x converter detected [ 2036.175488][T30076] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2036.356141][ T2637] usb 2-1: cp210x converter now attached to ttyUSB0 [ 2036.542821][T23377] Bluetooth: hci7: link tx timeout [ 2036.548847][T23377] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 2036.748338][T30076] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2036.831204][T30171] Cannot find add_set index 0 as target [ 2036.885268][T30173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2037.092721][T30173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2037.131300][T30076] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2037.228031][T30076] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2037.300848][T30076] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2037.407027][ T1259] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.882505][T24749] Bluetooth: hci0: command tx timeout [ 2037.927231][T30076] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2038.075717][T30076] 8021q: adding VLAN 0 to HW filter on device team0 [ 2038.149544][ T5270] bridge0: port 1(bridge_slave_0) entered blocking state [ 2038.156779][ T5270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2038.255603][ T5270] bridge0: port 2(bridge_slave_1) entered blocking state [ 2038.262868][ T5270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2038.279117][T30177] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7973'. [ 2038.546627][T11987] usb 2-1: USB disconnect, device number 107 [ 2038.557932][T11987] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2038.603129][T24749] Bluetooth: hci7: command 0x0406 tx timeout [ 2038.625277][T11987] cp210x 2-1:0.0: device disconnected [ 2039.009135][T30076] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2039.417293][T30076] veth0_vlan: entered promiscuous mode [ 2039.435096][T30076] veth1_vlan: entered promiscuous mode [ 2039.487360][T23377] Bluetooth: hci3: command 0x0406 tx timeout [ 2039.554290][T30076] veth0_macvtap: entered promiscuous mode [ 2039.641382][T30076] veth1_macvtap: entered promiscuous mode [ 2039.712635][T30076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2039.738665][T30076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2039.761220][T30076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2039.783269][T30076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2039.800506][T30076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2039.824601][T30076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2039.843604][T30076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2039.863032][T30076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2039.890554][T30076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2039.901895][T30076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2039.912338][T30076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2039.924515][T30076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2039.935580][T30076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2039.967974][T30076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2039.981188][ T5215] Bluetooth: hci0: command tx timeout [ 2039.991548][T30076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2040.003283][T30076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2040.016358][T30076] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2040.028967][T30076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2040.041461][T30076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2040.051758][T30076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2040.071363][T30076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2040.087840][T30076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2040.100124][T30076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2040.111131][T30076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2040.153184][T30076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2040.197030][T30076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2040.262346][T30076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2040.432586][T30076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2040.960265][T30076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2041.130884][T30076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2041.240776][T30076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2041.278472][T30076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2041.312259][T30076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2041.397534][T30076] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2041.488016][T30076] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2041.542551][T30076] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2041.551299][T30076] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2041.582533][T30076] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2041.873135][ T2496] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2041.882029][ T2496] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2041.952374][T11987] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 2041.962353][T15065] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2042.002270][T15065] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2042.164691][T11987] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2042.189909][T11987] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2042.227119][T11987] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2042.246837][T11987] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2042.272587][T28970] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 2042.281451][T11987] usb 2-1: SerialNumber: syz [ 2042.480114][T28970] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2042.510612][T28970] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2042.521866][T11987] usb 2-1: 0:2 : does not exist [ 2042.550091][T11987] usb 2-1: unit 255 not found! [ 2042.563295][T28970] usb 4-1: config 0 descriptor?? [ 2042.577276][T28970] cp210x 4-1:0.0: cp210x converter detected [ 2042.625871][T11987] usb 2-1: USB disconnect, device number 108 [ 2043.008540][T30218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2043.067113][T30218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2043.380519][T28970] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 2043.432077][T28970] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 2043.479856][T28970] usb 4-1: cp210x converter now attached to ttyUSB0 [ 2043.520542][T28970] usb 4-1: USB disconnect, device number 2 [ 2043.552966][T28970] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2043.574607][T28970] cp210x 4-1:0.0: device disconnected [ 2043.617165][T23377] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 2043.629296][T23377] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 2043.641069][T23377] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 2043.652074][T23377] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 2043.663641][T23377] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 2043.671065][T23377] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 2045.047010][T30236] chnl_net:caif_netlink_parms(): no params data found [ 2045.785416][T23377] Bluetooth: hci8: command tx timeout [ 2046.589163][T30236] bridge0: port 1(bridge_slave_0) entered blocking state [ 2046.616907][T30236] bridge0: port 1(bridge_slave_0) entered disabled state [ 2046.648476][T30236] bridge_slave_0: entered allmulticast mode [ 2046.674138][T30236] bridge_slave_0: entered promiscuous mode [ 2046.769458][T30236] bridge0: port 2(bridge_slave_1) entered blocking state [ 2046.795720][T30236] bridge0: port 2(bridge_slave_1) entered disabled state [ 2046.827640][T30236] bridge_slave_1: entered allmulticast mode [ 2046.846574][T30236] bridge_slave_1: entered promiscuous mode [ 2047.224515][T30299] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 2047.314630][T30236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2047.341952][T30236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2047.630532][T30236] team0: Port device team_slave_0 added [ 2047.729135][T30236] team0: Port device team_slave_1 added [ 2047.802907][T23377] Bluetooth: hci8: command tx timeout [ 2048.175359][T30236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2048.212281][T30236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2048.343734][T30236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2048.375239][T30236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2048.384544][T30236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2048.412058][T30236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2049.624142][T30236] hsr_slave_0: entered promiscuous mode [ 2049.773259][T30236] hsr_slave_1: entered promiscuous mode [ 2049.873269][T30236] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2049.881764][T30236] Cannot create hsr debugfs directory [ 2049.887633][T23377] Bluetooth: hci8: command tx timeout [ 2051.128500][T30236] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2051.213688][ T29] audit: type=1326 audit(1722484769.647:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30338 comm="syz.0.8027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27c79773b9 code=0x7fc00000 [ 2051.284261][ T29] audit: type=1326 audit(1722484769.687:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30338 comm="syz.0.8027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f27c79773b9 code=0x7fc00000 [ 2051.592991][ T29] audit: type=1326 audit(1722484770.037:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30338 comm="syz.0.8027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27c79773b9 code=0x7fc00000 [ 2051.601657][T30236] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2051.932586][ T9839] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 2051.972851][T23377] Bluetooth: hci8: command tx timeout [ 2052.097603][T30236] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2052.134160][ T9839] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2052.144478][ T9839] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2052.183582][ T9839] usb 5-1: config 0 descriptor?? [ 2052.194555][ T9839] cp210x 5-1:0.0: cp210x converter detected [ 2052.391095][T30236] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2052.610083][T30350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2052.641713][T30350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2053.024492][ T9839] cp210x 5-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 2053.062933][ T9839] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 2053.083313][T30236] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2053.100824][ T9839] usb 5-1: cp210x converter now attached to ttyUSB0 [ 2053.138484][ T9839] usb 5-1: USB disconnect, device number 4 [ 2053.217321][T30236] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2053.826146][T30236] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2053.973226][ T9839] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2053.981690][ T9839] cp210x 5-1:0.0: device disconnected [ 2054.042549][T30236] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2054.508364][T30370] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 2054.692024][T30236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2054.833657][T30236] 8021q: adding VLAN 0 to HW filter on device team0 [ 2054.891195][ T5268] bridge0: port 1(bridge_slave_0) entered blocking state [ 2054.898425][ T5268] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2054.995414][T20782] bridge0: port 2(bridge_slave_1) entered blocking state [ 2055.002662][T20782] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2055.690506][ T5215] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 2055.704536][ T5215] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 2055.717645][ T5215] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 2055.726746][ T5215] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 2055.737769][ T5215] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 2055.752785][ T5215] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 2056.020686][T30236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2056.230707][T30236] veth0_vlan: entered promiscuous mode [ 2056.279485][T30236] veth1_vlan: entered promiscuous mode [ 2056.475795][T30236] veth0_macvtap: entered promiscuous mode [ 2056.526348][T30236] veth1_macvtap: entered promiscuous mode [ 2056.652084][T30236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2056.692533][T30236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2056.722582][T20782] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 2056.730254][T30236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2056.762505][T30236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2056.797203][T30236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2056.828049][T30236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2056.862337][T30236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2056.862366][T30236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2056.862383][T30236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2056.862398][T30236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2056.862443][T30236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2056.862458][T30236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2056.862475][T30236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2056.862489][T30236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2056.862515][T30236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2056.862537][T30236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2056.862562][T30236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2056.862580][T30236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2056.864497][T30236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2056.940589][T30236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2056.940615][T30236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2056.940628][T30236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2056.940642][T30236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2056.940654][T30236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2056.940668][T30236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2056.940680][T30236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2056.940695][T30236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2056.940707][T30236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2056.940720][T30236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2056.940733][T30236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2056.940747][T30236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2056.940760][T30236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2056.940773][T30236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2056.940786][T30236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2056.940800][T30236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2056.940813][T30236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2056.940826][T30236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2056.948894][T30236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2056.956930][T20782] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2056.956963][T20782] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2056.975606][T20782] usb 5-1: config 0 descriptor?? [ 2056.979853][T20782] cp210x 5-1:0.0: cp210x converter detected [ 2057.007726][T30236] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2057.007766][T30236] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2057.007815][T30236] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2057.007842][T30236] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2057.386018][T20782] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 2057.414090][T20782] usb 5-1: cp210x converter now attached to ttyUSB0 [ 2057.446968][T30384] chnl_net:caif_netlink_parms(): no params data found [ 2057.598039][ T9839] usb 5-1: USB disconnect, device number 5 [ 2057.934502][T23377] Bluetooth: hci9: command tx timeout [ 2058.071898][ T9839] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2058.162869][ T9839] cp210x 5-1:0.0: device disconnected [ 2058.235831][ T1110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2058.252384][ T1110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2058.344703][T30384] bridge0: port 1(bridge_slave_0) entered blocking state [ 2058.351980][T30384] bridge0: port 1(bridge_slave_0) entered disabled state [ 2058.377541][T30384] bridge_slave_0: entered allmulticast mode [ 2058.407565][T30384] bridge_slave_0: entered promiscuous mode [ 2058.526262][T30384] bridge0: port 2(bridge_slave_1) entered blocking state [ 2058.554153][T30384] bridge0: port 2(bridge_slave_1) entered disabled state [ 2058.587615][T30384] bridge_slave_1: entered allmulticast mode [ 2058.605531][T30412] netlink: 'syz.4.8047': attribute type 2 has an invalid length. [ 2058.632429][T30384] bridge_slave_1: entered promiscuous mode [ 2058.643033][T30412] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.8047'. [ 2058.950526][T30384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2059.014407][T30384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2059.066508][T15071] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2059.086888][T15071] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2059.603590][T30384] team0: Port device team_slave_0 added [ 2059.634222][T30384] team0: Port device team_slave_1 added [ 2059.794153][T30384] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2059.801148][T30384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2059.902351][T30384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2059.947043][T30384] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2059.963230][T23377] Bluetooth: hci9: command tx timeout [ 2059.973017][T30384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2060.050617][T30384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2060.075366][T27131] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 2060.257588][T30384] hsr_slave_0: entered promiscuous mode [ 2060.307878][T27131] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2060.333413][T30384] hsr_slave_1: entered promiscuous mode [ 2060.340569][T30446] netlink: 'syz.3.8058': attribute type 2 has an invalid length. [ 2060.359841][T27131] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2060.390172][T30446] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.8058'. [ 2060.390240][T30384] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2060.416653][T27131] usb 3-1: config 0 descriptor?? [ 2060.442287][T30384] Cannot create hsr debugfs directory [ 2060.482810][T27131] cp210x 3-1:0.0: cp210x converter detected [ 2060.932727][T27131] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 2060.995435][T27131] usb 3-1: cp210x converter now attached to ttyUSB0 [ 2061.191596][T27131] usb 3-1: USB disconnect, device number 126 [ 2061.219722][T27131] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2061.274649][T27131] cp210x 3-1:0.0: device disconnected [ 2061.391705][T30384] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2061.647816][T30468] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 2062.042828][T23377] Bluetooth: hci9: command tx timeout [ 2062.073221][T30384] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2062.590798][T30384] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2062.915702][T30384] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2063.823613][T27131] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 2064.125231][T23377] Bluetooth: hci9: command tx timeout [ 2064.702579][T27131] usb 5-1: Using ep0 maxpacket: 32 [ 2064.709413][T27131] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 2064.722324][T27131] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 2064.730966][T27131] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 2064.781061][T27131] usb 5-1: config 1 has no interface number 0 [ 2064.803125][T27131] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2064.852269][T27131] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 2064.912427][T27131] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 2064.957807][T27131] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2065.033522][T27131] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 2065.210338][T20871] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2067.952818][T11987] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 2068.732543][T11987] usb 3-1: Using ep0 maxpacket: 32 [ 2068.879253][T11987] usb 3-1: device descriptor read/all, error -71 [ 2069.096027][T20871] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2069.253271][ T5215] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2069.283265][ T5215] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2069.304435][ T5215] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2069.343059][ T5215] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2069.372670][ T5215] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2069.381117][ T5215] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2069.595534][T20871] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2069.896493][T20871] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2070.053214][T27131] snd_usb_pod 5-1:1.1: set_interface failed [ 2070.064297][T27131] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 2070.092415][T30384] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2070.123124][T27131] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -110 [ 2070.160476][T30384] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2070.265210][T30384] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2070.323364][T30384] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2070.917719][T20871] bridge_slave_1: left allmulticast mode [ 2070.985378][T20871] bridge_slave_1: left promiscuous mode [ 2071.010661][T20871] bridge0: port 2(bridge_slave_1) entered disabled state [ 2071.119755][T20871] bridge_slave_0: left allmulticast mode [ 2071.152335][T20871] bridge_slave_0: left promiscuous mode [ 2071.182019][T20871] bridge0: port 1(bridge_slave_0) entered disabled state [ 2071.483708][ T5215] Bluetooth: hci0: command tx timeout [ 2072.406220][T30538] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8090'. [ 2072.593547][ T29] audit: type=1326 audit(1722484791.047:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30536 comm="syz.3.8090" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8f57f773b9 code=0x0 [ 2072.819531][T20871] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2072.850470][T20871] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2072.870698][T20871] bond0 (unregistering): Released all slaves [ 2073.541888][T30549] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 2073.562363][ T5215] Bluetooth: hci0: command tx timeout [ 2073.639106][T30550] netlink: 'syz.2.8093': attribute type 4 has an invalid length. [ 2073.647683][T30550] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.8093'. [ 2075.385569][T23377] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2075.399404][T23377] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2075.411331][T23377] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2075.421592][T23377] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2075.431625][T23377] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 2075.439435][T23377] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2075.655818][T23377] Bluetooth: hci0: command tx timeout [ 2075.702403][T11987] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 2075.970660][T30384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2075.994750][T11987] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2076.061081][T11987] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2076.087767][T11987] usb 3-1: config 0 descriptor?? [ 2076.104714][T11987] cp210x 3-1:0.0: cp210x converter detected [ 2076.139162][T20871] hsr_slave_0: left promiscuous mode [ 2076.155192][T20871] hsr_slave_1: left promiscuous mode [ 2076.298665][T20871] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2076.325180][T20871] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2076.383512][T20871] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2076.391135][T20871] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2076.473269][T20871] veth1_macvtap: left promiscuous mode [ 2076.484438][T20871] veth0_macvtap: left promiscuous mode [ 2076.495834][T20871] veth1_vlan: left promiscuous mode [ 2076.506855][T20871] veth0_vlan: left promiscuous mode [ 2076.529754][T11987] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 2076.533173][T30567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2076.575461][T30567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2076.624616][T11987] usb 3-1: cp210x converter now attached to ttyUSB0 [ 2076.848166][ T9] usb 3-1: USB disconnect, device number 3 [ 2076.879498][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2076.917249][ T9] cp210x 3-1:0.0: device disconnected [ 2077.562704][T23377] Bluetooth: hci6: command tx timeout [ 2077.773676][T23377] Bluetooth: hci0: command tx timeout [ 2077.946052][T30574] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2077.957166][T30574] cramfs: wrong magic [ 2079.095277][ T2637] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 2079.265187][T20871] team0 (unregistering): Port device team_slave_1 removed [ 2079.299587][ T2637] usb 3-1: Using ep0 maxpacket: 32 [ 2079.314083][ T2637] usb 3-1: config 0 has no interfaces? [ 2079.344132][ T2637] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 2079.372528][ T2637] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2079.380831][ T2637] usb 3-1: Product: syz [ 2079.402889][ T2637] usb 3-1: Manufacturer: syz [ 2079.408805][ T2637] usb 3-1: SerialNumber: syz [ 2079.424102][ T2637] usb 3-1: config 0 descriptor?? [ 2079.520719][T20871] team0 (unregistering): Port device team_slave_0 removed [ 2079.652010][ T5215] Bluetooth: hci6: command tx timeout [ 2080.452400][T30580] Bluetooth: hci5: command 0x0406 tx timeout [ 2080.841678][T30517] chnl_net:caif_netlink_parms(): no params data found [ 2080.914135][T30508] syz_tun: left allmulticast mode [ 2080.939308][T30508] syz_tun: left promiscuous mode [ 2081.097469][T30576] vlan2: entered promiscuous mode [ 2081.112611][T30576] team0: Device vlan2 is already an upper device of the team interface [ 2081.184118][T11987] usb 5-1: USB disconnect, device number 6 [ 2081.214750][T30111] syz_tun: left allmulticast mode [ 2081.230882][T30111] syz_tun: left promiscuous mode [ 2081.258412][T15137] usb 3-1: USB disconnect, device number 4 [ 2081.396857][T30384] 8021q: adding VLAN 0 to HW filter on device team0 [ 2081.472550][ T5268] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 2081.508574][ T5270] bridge0: port 1(bridge_slave_0) entered blocking state [ 2081.515768][ T5270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2081.662612][ T5268] usb 4-1: Using ep0 maxpacket: 32 [ 2081.685937][ T5268] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 2081.694699][ T5268] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 2081.703457][ T5268] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 2081.712540][ T5268] usb 4-1: config 1 has no interface number 0 [ 2081.718718][ T5268] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2081.730523][T23377] Bluetooth: hci6: command tx timeout [ 2081.744866][ T5268] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 2081.763799][ T5268] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 2081.773441][ T5268] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2081.797519][ T5268] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 2082.015053][T30517] bridge0: port 1(bridge_slave_0) entered blocking state [ 2082.036626][T30517] bridge0: port 1(bridge_slave_0) entered disabled state [ 2082.096938][T30590] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 2082.531308][T30517] bridge_slave_0: entered allmulticast mode [ 2082.556246][T30517] bridge_slave_0: entered promiscuous mode [ 2082.584943][ T2637] bridge0: port 2(bridge_slave_1) entered blocking state [ 2082.593226][ T2637] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2082.781268][T30517] bridge0: port 2(bridge_slave_1) entered blocking state [ 2082.822455][T30517] bridge0: port 2(bridge_slave_1) entered disabled state [ 2082.840253][T30517] bridge_slave_1: entered allmulticast mode [ 2083.802767][T23377] Bluetooth: hci6: command tx timeout [ 2084.062700][T30517] bridge_slave_1: entered promiscuous mode [ 2085.926421][ T5268] snd_usb_pod 4-1:1.1: set_interface failed [ 2086.123252][ T5268] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 2086.155285][ T5268] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 2086.472281][ T5268] usb 4-1: USB disconnect, device number 3 [ 2086.814570][T30517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2087.103101][T30517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2087.289749][T30517] team0: Port device team_slave_0 added [ 2087.334119][T30517] team0: Port device team_slave_1 added [ 2087.489458][T30252] syz_tun: left allmulticast mode [ 2087.499317][T30252] syz_tun: left promiscuous mode [ 2087.677964][T20871] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2087.733027][T30561] chnl_net:caif_netlink_parms(): no params data found [ 2087.942896][T20871] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2087.959439][T30517] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2087.967792][T30517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2087.998121][T30517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2088.015404][T30517] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2088.023630][T30517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2088.050206][T30517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2088.374545][T20871] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2088.548429][T20871] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2088.597066][T30517] hsr_slave_0: entered promiscuous mode [ 2088.634318][T30517] hsr_slave_1: entered promiscuous mode [ 2088.653364][T30561] bridge0: port 1(bridge_slave_0) entered blocking state [ 2088.670271][T30561] bridge0: port 1(bridge_slave_0) entered disabled state [ 2088.679973][T30561] bridge_slave_0: entered allmulticast mode [ 2088.696829][T30561] bridge_slave_0: entered promiscuous mode [ 2088.706836][T30561] bridge0: port 2(bridge_slave_1) entered blocking state [ 2088.720703][T30561] bridge0: port 2(bridge_slave_1) entered disabled state [ 2088.735180][T30561] bridge_slave_1: entered allmulticast mode [ 2088.753329][T30561] bridge_slave_1: entered promiscuous mode [ 2088.824547][T30384] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2088.936694][T30561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2088.969585][T30617] netlink: 80 bytes leftover after parsing attributes in process `syz.2.8109'. [ 2088.994606][T30561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2090.174128][T20871] bridge_slave_1: left allmulticast mode [ 2090.179913][T20871] bridge_slave_1: left promiscuous mode [ 2090.195719][T20871] bridge0: port 2(bridge_slave_1) entered disabled state [ 2090.224685][T20871] bridge_slave_0: left allmulticast mode [ 2090.242430][T20871] bridge_slave_0: left promiscuous mode [ 2090.262880][T20871] bridge0: port 1(bridge_slave_0) entered disabled state [ 2090.288775][T20871] bridge_slave_1: left allmulticast mode [ 2090.302301][T20871] bridge_slave_1: left promiscuous mode [ 2090.308086][T20871] bridge0: port 2(bridge_slave_1) entered disabled state [ 2090.327425][T20871] bridge_slave_0: left allmulticast mode [ 2090.341358][T20871] bridge_slave_0: left promiscuous mode [ 2090.356937][T20871] bridge0: port 1(bridge_slave_0) entered disabled state [ 2090.369235][T20871] bridge_slave_0: left allmulticast mode [ 2090.375279][T20871] bridge_slave_0: left promiscuous mode [ 2090.381030][T20871] bridge0: port 1(bridge_slave_0) entered disabled state [ 2090.396471][T20871] veth1_to_bond: left allmulticast mode [ 2090.402067][T20871] veth1_to_bond: left promiscuous mode [ 2090.410486][T20871] bridge1: port 2(veth1_to_bond) entered disabled state [ 2090.425190][T20871] bridge_slave_1: left allmulticast mode [ 2090.430874][T20871] bridge_slave_1: left promiscuous mode [ 2090.438476][T20871] bridge1: port 1(bridge_slave_1) entered disabled state [ 2090.466228][T20871] bridge_slave_1: left allmulticast mode [ 2090.472011][T20871] bridge_slave_1: left promiscuous mode [ 2090.492088][T20871] bridge0: port 2(bridge_slave_1) entered disabled state [ 2090.514109][T20871] bridge_slave_0: left allmulticast mode [ 2090.519804][T20871] bridge_slave_0: left promiscuous mode [ 2090.534696][T20871] bridge0: port 1(bridge_slave_0) entered disabled state [ 2097.078765][T20871] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2097.104713][T20871] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2097.120844][T20871] bond0 (unregistering): Released all slaves [ 2097.328857][T20871] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2097.340442][T20871] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2097.359275][T20871] bond0 (unregistering): Released all slaves [ 2097.540490][T20871] bond0 (unregistering): left allmulticast mode [ 2097.547010][T20871] bond_slave_0: left allmulticast mode [ 2097.552986][T20871] bond_slave_1: left allmulticast mode [ 2097.558567][T20871] bond0 (unregistering): left promiscuous mode [ 2097.565013][T20871] bond_slave_0: left promiscuous mode [ 2097.570617][T20871] bond_slave_1: left promiscuous mode [ 2097.600205][T20871] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2097.613221][T20871] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2097.629217][T20871] bond0 (unregistering): Released all slaves [ 2097.836978][T20871] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2097.849114][T20871] bond0 (unregistering): Released all slaves [ 2097.958585][T30561] team0: Port device team_slave_0 added [ 2098.020955][T30561] team0: Port device team_slave_1 added [ 2098.846561][T20871] tipc: Left network mode [ 2098.858148][ T1259] ieee802154 phy0 wpan0: encryption failed: -22 [ 2099.147672][T30561] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2099.171276][T30561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2099.246588][T30561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2099.279568][T30561] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2099.291858][T30561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2099.340520][T30561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2099.426594][T30384] veth0_vlan: entered promiscuous mode [ 2099.523929][T27131] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 2099.653649][T30561] hsr_slave_0: entered promiscuous mode [ 2099.660617][T30561] hsr_slave_1: entered promiscuous mode [ 2099.667622][T30561] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2099.679441][T30561] Cannot create hsr debugfs directory [ 2099.717293][T27131] usb 4-1: Using ep0 maxpacket: 16 [ 2099.724698][T27131] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2099.749592][T30665] vlan2: entered promiscuous mode [ 2099.755148][T27131] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 2099.762503][T30665] team0: Device vlan2 is already an upper device of the team interface [ 2099.764455][T27131] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2099.790790][T27131] usb 4-1: config 0 descriptor?? [ 2099.801843][T27131] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input133 [ 2099.916240][T30384] veth1_vlan: entered promiscuous mode [ 2100.139665][T30384] veth0_macvtap: entered promiscuous mode [ 2100.389135][T30384] veth1_macvtap: entered promiscuous mode [ 2100.511589][T30517] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2100.631990][T30673] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8125'. [ 2100.665641][T30517] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2100.767205][T30517] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2100.783717][T30384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2100.804957][ T29] audit: type=1326 audit(1722484819.247:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30671 comm="syz.2.8125" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7febb87773b9 code=0x0 [ 2100.822343][T30384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2100.836370][T30384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2100.847830][T30384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2100.861582][T30384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2100.876776][T30384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2100.890887][T30384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2100.915668][T30384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2100.935179][T30384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2100.962752][T30384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2100.976478][T30384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2100.988403][T30384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2101.032399][T30384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2101.044775][T30384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2101.061004][T30384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2101.073523][T30384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2101.086481][T30384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2101.097800][T30384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2101.119322][T30384] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2101.210615][T30517] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2101.423216][T20871] mac80211_hwsim hwsim106 wlan0 (unregistering): left allmulticast mode [ 2101.559732][T30384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2101.585492][T30384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2101.596949][T30384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2101.607815][T30384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2101.622570][T30384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2101.640518][T30384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2101.650877][T30384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2101.665085][T30384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2101.684970][T30384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2101.698033][T30384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2101.708513][T30384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2101.721475][T30384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2101.731845][T30384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2101.743027][T30384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2101.753521][T30384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2101.767062][T30384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2101.778328][T30384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2101.790420][T30384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2101.811477][T30384] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2101.891490][T30384] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2101.933675][T30384] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2101.944323][T30384] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2101.953721][T30384] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2102.715779][T15065] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2102.753495][T15065] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2102.843357][T30517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2102.957701][T30517] 8021q: adding VLAN 0 to HW filter on device team0 [ 2103.034949][T30561] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2103.089640][T30561] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2103.152099][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 2103.159416][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2103.206814][T30512] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2103.242535][T30512] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2103.245289][T30561] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2103.316849][T30561] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2103.385357][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 2103.392599][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2103.507970][T20871] hsr_slave_0: left promiscuous mode [ 2103.518111][T20871] hsr_slave_1: left promiscuous mode [ 2103.535080][T20871] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2103.564646][T20871] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2103.603168][T20871] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2103.610659][T20871] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2103.659891][T20871] hsr_slave_0: left promiscuous mode [ 2103.685641][T20871] hsr_slave_1: left promiscuous mode [ 2103.723225][T20871] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2103.736560][T20871] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2103.773714][T20871] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2103.792078][T20871] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2103.884890][T20871] hsr_slave_0: left promiscuous mode [ 2103.892714][T20871] hsr_slave_1: left promiscuous mode [ 2103.901905][T20871] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2103.911678][T20871] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2103.940798][T20871] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2103.982625][T20871] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2104.040231][T20871] hsr_slave_0: left promiscuous mode [ 2104.053012][T20871] hsr_slave_1: left promiscuous mode [ 2104.159882][T20871] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2104.236294][T20871] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2104.318035][T20871] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2104.391384][T20871] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2104.904803][T20871] veth1_macvtap: left promiscuous mode [ 2104.934544][T20871] Â: left promiscuous mode [ 2104.939188][T20871] veth1_vlan: left promiscuous mode [ 2104.962630][T20871] veth0_vlan: left promiscuous mode [ 2104.997892][T20871] veth1_macvtap: left promiscuous mode [ 2105.012663][T20871] veth0_macvtap: left promiscuous mode [ 2105.022781][T20871] veth1_vlan: left promiscuous mode [ 2105.028141][T20871] veth0_vlan: left promiscuous mode [ 2105.076393][T20871] veth0_macvtap: left promiscuous mode [ 2105.082120][T20871] veth1_vlan: left promiscuous mode [ 2105.142500][T20871] veth1_macvtap: left promiscuous mode [ 2105.148098][T20871] Â: left promiscuous mode [ 2105.162984][T20871] veth1_vlan: left promiscuous mode [ 2105.172496][T20871] veth0_vlan: left promiscuous mode [ 2105.485243][T30666] bcm5974 4-1:0.0: could not read from device [ 2105.522290][ T8679] usb 4-1: USB disconnect, device number 4 [ 2105.823193][ T5270] usb 2-1: new full-speed USB device number 109 using dummy_hcd [ 2105.983292][T30710] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8133'. [ 2106.024250][ T5270] usb 2-1: config 0 has an invalid descriptor of length 179, skipping remainder of the config [ 2106.050343][ T5270] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2106.077291][ T5270] usb 2-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 2106.103454][ T5270] usb 2-1: New USB device found, idVendor=413c, idProduct=81d1, bcdDevice=fb.93 [ 2106.113457][T20871] infiniband syz2: set down [ 2106.132334][ T5270] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2106.142138][ T5270] usb 2-1: Product: syz [ 2106.148143][ T5270] usb 2-1: Manufacturer: syz [ 2106.162874][ T5270] usb 2-1: SerialNumber: syz [ 2106.181492][ T5270] usb 2-1: config 0 descriptor?? [ 2106.185643][ T29] audit: type=1326 audit(1722484824.627:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30708 comm="syz.3.8133" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8f57f773b9 code=0x0 [ 2106.931636][ T940] usb 2-1: USB disconnect, device number 109 [ 2107.038840][T20871] team0 (unregistering): Port device team_slave_1 removed [ 2107.128784][T20871] team0 (unregistering): Port device team_slave_0 removed [ 2108.498935][T20871] team0 (unregistering): Port device team_slave_1 removed [ 2108.561960][T20871] team0 (unregistering): Port device team_slave_0 removed [ 2110.232880][T20871] team0 (unregistering): Port device team_slave_1 removed [ 2110.300897][T20871] team0 (unregistering): Port device team_slave_0 removed [ 2111.684328][T20871] team0 (unregistering): Port device team_slave_1 removed [ 2111.694592][ T6872] smc: removing ib device syz2 [ 2111.756321][T20871] team0 (unregistering): Port device team_slave_0 removed [ 2112.658401][T30517] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2113.075118][T30580] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2113.120371][T30561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2113.568153][T30580] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2113.661979][T30580] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2113.679204][T30580] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2113.692974][T30580] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2113.709788][T30580] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2113.910240][T30561] 8021q: adding VLAN 0 to HW filter on device team0 [ 2113.973905][T27131] bridge0: port 1(bridge_slave_0) entered blocking state [ 2113.983123][T27131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2114.110182][T27131] bridge0: port 2(bridge_slave_1) entered blocking state [ 2114.117457][T27131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2114.873009][T27131] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 2114.986809][T30517] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2115.106648][T27131] usb 2-1: Using ep0 maxpacket: 16 [ 2115.140495][T27131] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2115.230850][T27131] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 2115.251278][T27131] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2115.292365][ T2637] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 2115.301286][T27131] usb 2-1: config 0 descriptor?? [ 2115.345194][T27131] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input134 [ 2115.590428][ T2637] usb 4-1: config 0 has an invalid descriptor of length 231, skipping remainder of the config [ 2115.631897][ T2637] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2115.658380][T30517] veth0_vlan: entered promiscuous mode [ 2115.678128][ T2637] usb 4-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 2115.764919][ T2637] usb 4-1: New USB device found, idVendor=413c, idProduct=81d1, bcdDevice=fb.93 [ 2115.783184][ T2637] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2115.786891][T30517] veth1_vlan: entered promiscuous mode [ 2115.799022][ T2637] usb 4-1: Product: syz [ 2115.817067][ T2637] usb 4-1: Manufacturer: syz [ 2115.878523][ T2637] usb 4-1: SerialNumber: syz [ 2115.911626][ T2637] usb 4-1: config 0 descriptor?? [ 2115.933718][T30561] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2115.973222][T23377] Bluetooth: hci3: command tx timeout [ 2116.001033][T30724] chnl_net:caif_netlink_parms(): no params data found [ 2116.447200][T30517] veth0_macvtap: entered promiscuous mode [ 2116.694852][ T9] usb 4-1: USB disconnect, device number 5 [ 2117.006323][T30517] veth1_macvtap: entered promiscuous mode [ 2117.029924][T30724] bridge0: port 1(bridge_slave_0) entered blocking state [ 2117.052384][T30724] bridge0: port 1(bridge_slave_0) entered disabled state [ 2117.075978][T30724] bridge_slave_0: entered allmulticast mode [ 2117.112530][T30724] bridge_slave_0: entered promiscuous mode [ 2117.151633][T30724] bridge0: port 2(bridge_slave_1) entered blocking state [ 2117.185844][T30724] bridge0: port 2(bridge_slave_1) entered disabled state [ 2117.209831][T30724] bridge_slave_1: entered allmulticast mode [ 2117.232446][T30724] bridge_slave_1: entered promiscuous mode [ 2117.381137][T30724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2117.455596][T30724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2117.479645][T30517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2117.512865][T30517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2117.532788][T30517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2117.563510][T30517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2117.590579][T30517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2117.610613][T30517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2117.621752][T30517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2117.642394][T30517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2117.662335][T30517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2117.686277][T30517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2117.709030][T30517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2117.729358][T30517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2117.741777][T30517] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2117.895140][T30724] team0: Port device team_slave_0 added [ 2117.929638][T30724] team0: Port device team_slave_1 added [ 2117.944090][T30517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2117.962927][T30517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2117.984406][T30517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2118.001093][T30517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2118.012346][T30517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2118.023371][T30517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2118.033556][T30517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2118.048687][T30517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2118.053857][T23377] Bluetooth: hci3: command tx timeout [ 2118.062163][T30517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2118.078860][T30517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2118.089010][T30517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2118.100273][T30517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2118.142004][T30517] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2118.163990][T30517] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2118.184718][T30517] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2118.195058][T30517] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2118.222381][T30517] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2118.388145][T30561] veth0_vlan: entered promiscuous mode [ 2118.422178][T30724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2118.429824][T30724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2118.456756][T30724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2118.486951][T30724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2118.509630][T30724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2118.558384][T30724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2118.663674][T30724] hsr_slave_0: entered promiscuous mode [ 2118.685204][T30724] hsr_slave_1: entered promiscuous mode [ 2118.691796][T30724] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2118.715054][T30724] Cannot create hsr debugfs directory [ 2118.783661][T30561] veth1_vlan: entered promiscuous mode [ 2118.968057][T20871] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2119.057456][ T1110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2119.093469][ T1110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2119.151714][T20871] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2119.179793][T30561] veth0_macvtap: entered promiscuous mode [ 2119.451582][T20871] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2119.481957][T30561] veth1_macvtap: entered promiscuous mode [ 2119.956164][T20871] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2120.134033][T23377] Bluetooth: hci3: command tx timeout [ 2120.240992][T11715] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2120.264007][T30561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2120.279296][T11715] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2120.301221][T30561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2120.321967][T30561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2120.333675][T30561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2120.362853][T30561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2120.373491][T30561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2120.383384][T30561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2120.393963][T30561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2120.403887][T30561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2120.414447][T30561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2120.424373][T30561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2120.434973][T30561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2120.446692][T30561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2120.463739][T30561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2120.476014][T30561] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2120.507044][T30561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2120.520163][T30561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2120.536552][T30561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2120.557846][T30561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2120.572140][T30561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2120.586046][T30561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2120.596282][T30561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2120.608274][T30561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2120.620528][T30561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2120.632319][T30561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2120.642485][T30561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2120.654374][T30561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2120.676356][ T29] audit: type=1326 audit(1722484839.117:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30786 comm="syz.3.8147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f57f773b9 code=0x7fc00000 [ 2120.700831][T30561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2120.712030][ T29] audit: type=1326 audit(1722484839.137:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30786 comm="syz.3.8147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f8f57f773b9 code=0x7fc00000 [ 2120.736018][T30561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2120.754418][T30561] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2120.824015][T30561] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2120.836500][T30561] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2120.850610][T30561] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2120.860323][T30561] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2120.962834][T20871] bridge_slave_1: left allmulticast mode [ 2120.976175][T20871] bridge_slave_1: left promiscuous mode [ 2120.983710][T20871] bridge0: port 2(bridge_slave_1) entered disabled state [ 2121.010198][T20871] bridge_slave_0: left allmulticast mode [ 2121.016998][T20871] bridge_slave_0: left promiscuous mode [ 2121.028667][T20871] bridge0: port 1(bridge_slave_0) entered disabled state [ 2121.078310][T20871] bridge_slave_1: left allmulticast mode [ 2121.085030][T30756] bcm5974 2-1:0.0: could not read from device [ 2121.087768][T20871] bridge_slave_1: left promiscuous mode [ 2121.120818][T20871] bridge0: port 2(bridge_slave_1) entered disabled state [ 2121.147755][ T5268] usb 2-1: USB disconnect, device number 110 [ 2121.163564][T20871] bridge_slave_0: left allmulticast mode [ 2121.169217][T20871] bridge_slave_0: left promiscuous mode [ 2121.207305][T20871] bridge0: port 1(bridge_slave_0) entered disabled state [ 2121.229333][ T29] audit: type=1326 audit(1722484839.677:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30786 comm="syz.3.8147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f57f773b9 code=0x7fc00000 [ 2121.292450][ T29] audit: type=1326 audit(1722484839.677:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30786 comm="syz.3.8147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f57f773b9 code=0x7fc00000 [ 2121.494343][T30800] binder: 30796:30800 ioctl c0306201 0 returned -14 [ 2121.792676][ T5268] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 2122.009640][ T5268] usb 4-1: config 0 has an invalid descriptor of length 219, skipping remainder of the config [ 2122.020377][ T5268] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2122.031663][ T5268] usb 4-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 2122.049157][ T5268] usb 4-1: New USB device found, idVendor=413c, idProduct=81d1, bcdDevice=fb.93 [ 2122.058477][ T5268] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2122.067278][ T5268] usb 4-1: Product: syz [ 2122.071807][ T5268] usb 4-1: Manufacturer: syz [ 2122.076500][ T5268] usb 4-1: SerialNumber: syz [ 2122.084284][ T5268] usb 4-1: config 0 descriptor?? [ 2122.222453][T23377] Bluetooth: hci3: command tx timeout [ 2122.302734][T20871] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2122.314906][T20871] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2122.326358][T20871] bond0 (unregistering): Released all slaves [ 2122.536972][T20871] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2122.548750][T20871] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2122.559689][T20871] bond0 (unregistering): Released all slaves [ 2122.649150][T30799] netlink: 'syz.1.8151': attribute type 1 has an invalid length. [ 2122.662075][T30799] netlink: 'syz.1.8151': attribute type 4 has an invalid length. [ 2122.674998][T30799] netlink: 15334 bytes leftover after parsing attributes in process `syz.1.8151'. [ 2123.190494][T30813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8155'. [ 2123.865960][ T9] usb 4-1: USB disconnect, device number 6 [ 2124.197473][ T1119] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2124.205808][ T940] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 2124.238693][ T1119] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2124.361285][ T29] audit: type=1326 audit(1722484842.807:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30822 comm="syz.3.8158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f57f773b9 code=0x7fc00000 [ 2124.425826][ T940] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2124.457921][ T940] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2124.468523][ T29] audit: type=1326 audit(1722484842.807:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30822 comm="syz.3.8158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f8f57f773b9 code=0x7fc00000 [ 2124.476579][ T940] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2124.521209][ T940] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2124.534162][ T940] usb 2-1: SerialNumber: syz [ 2124.627754][T30724] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2124.641372][ T1119] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2124.641883][T30832] netlink: 'syz.0.8161': attribute type 1 has an invalid length. [ 2124.659332][ T1119] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2124.690927][T30832] netlink: 'syz.0.8161': attribute type 4 has an invalid length. [ 2124.705331][T30832] netlink: 15334 bytes leftover after parsing attributes in process `syz.0.8161'. [ 2124.715163][T30724] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2124.752779][T30724] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2124.781766][T20871] hsr_slave_0: left promiscuous mode [ 2124.797511][T20871] hsr_slave_1: left promiscuous mode [ 2124.818172][T20871] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2124.830040][ T940] usb 2-1: 0:2 : does not exist [ 2124.832344][T20871] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2124.841675][ T940] usb 2-1: unit 255 not found! [ 2124.877038][ T29] audit: type=1326 audit(1722484843.327:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30822 comm="syz.3.8158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f57f773b9 code=0x7fc00000 [ 2124.904974][T20871] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2124.916480][T20871] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2124.938233][T20871] hsr_slave_0: left promiscuous mode [ 2124.947404][T20871] hsr_slave_1: left promiscuous mode [ 2124.975296][T20871] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2124.983364][T20871] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2124.996981][T20871] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2125.015406][T20871] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2125.015966][ T940] usb 2-1: USB disconnect, device number 111 [ 2125.183011][T20871] veth1_macvtap: left promiscuous mode [ 2125.196795][T20871] veth0_macvtap: left promiscuous mode [ 2125.206137][T20871] veth1_vlan: left promiscuous mode [ 2125.211578][T20871] veth0_vlan: left promiscuous mode [ 2125.223712][T20871] veth1_macvtap: left promiscuous mode [ 2125.242539][T20871] veth0_macvtap: left promiscuous mode [ 2125.258872][T20871] veth0_vlan: left promiscuous mode [ 2125.741618][T30854] binder: 30849:30854 ioctl c0306201 0 returned -14 [ 2126.842485][ T5270] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 2126.988854][ T29] audit: type=1326 audit(1722484845.427:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30863 comm="syz.1.8171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63f79773b9 code=0x7fc00000 [ 2127.058574][ T29] audit: type=1326 audit(1722484845.427:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30863 comm="syz.1.8171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f63f79773b9 code=0x7fc00000 [ 2127.107080][ T5270] usb 4-1: config 0 has an invalid descriptor of length 193, skipping remainder of the config [ 2127.118124][ T5270] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2127.135915][ T5270] usb 4-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 2127.162184][ T5270] usb 4-1: New USB device found, idVendor=413c, idProduct=81d1, bcdDevice=fb.93 [ 2127.177142][ T5270] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2127.191570][ T5270] usb 4-1: Product: syz [ 2127.197672][ T5270] usb 4-1: Manufacturer: syz [ 2127.208819][ T5270] usb 4-1: SerialNumber: syz [ 2127.221458][ T5270] usb 4-1: config 0 descriptor?? [ 2127.576645][ T29] audit: type=1326 audit(1722484846.007:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30863 comm="syz.1.8171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63f79773b9 code=0x7fc00000 [ 2128.006068][ T9] usb 4-1: USB disconnect, device number 7 [ 2128.243499][T20871] team0 (unregistering): Port device team_slave_1 removed [ 2128.294701][ T5270] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 2128.350223][T20871] team0 (unregistering): Port device team_slave_0 removed [ 2128.519882][ T5270] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2128.549439][ T5270] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2128.574458][ T5270] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2128.592381][ T5270] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2128.600860][ T5270] usb 2-1: SerialNumber: syz [ 2128.865577][ T5270] usb 2-1: 0:2 : does not exist [ 2128.881033][ T5270] usb 2-1: unit 255 not found! [ 2128.909115][ T5270] usb 2-1: USB disconnect, device number 112 [ 2129.306773][T20871] pim6reg (unregistering): left allmulticast mode [ 2129.926619][ T940] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 2130.047440][T20871] team0 (unregistering): Port device team_slave_1 removed [ 2130.122554][ T940] usb 2-1: Using ep0 maxpacket: 16 [ 2130.123142][T20871] team0 (unregistering): Port device team_slave_0 removed [ 2130.137155][ T940] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2130.159053][ T940] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 2130.168877][ T940] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2130.183657][ T940] usb 2-1: config 0 descriptor?? [ 2130.198144][ T940] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input135 [ 2131.157367][T30724] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2131.183220][T30845] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8164'. [ 2131.223679][T30882] netlink: 'syz.0.8176': attribute type 1 has an invalid length. [ 2131.231545][T30882] netlink: 'syz.0.8176': attribute type 4 has an invalid length. [ 2131.256310][T30882] netlink: 15334 bytes leftover after parsing attributes in process `syz.0.8176'. [ 2131.304636][T30894] syzkaller0: entered allmulticast mode [ 2131.890093][ T29] audit: type=1326 audit(1722484850.337:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30915 comm="syz.0.8184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d61773b9 code=0x7fc00000 [ 2131.975163][ T29] audit: type=1326 audit(1722484850.347:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30915 comm="syz.0.8184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fa0d61773b9 code=0x7fc00000 [ 2132.034200][T30724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2132.255346][T30724] 8021q: adding VLAN 0 to HW filter on device team0 [ 2132.402549][ T29] audit: type=1326 audit(1722484850.847:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30915 comm="syz.0.8184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d61773b9 code=0x7fc00000 [ 2132.495440][T27131] bridge0: port 1(bridge_slave_0) entered blocking state [ 2132.503123][T27131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2132.583541][T27131] bridge0: port 2(bridge_slave_1) entered blocking state [ 2132.590931][T27131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2132.791483][T30724] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2133.824815][T30724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2133.907436][T23377] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:200' [ 2133.918237][T23377] CPU: 0 UID: 0 PID: 23377 Comm: kworker/u9:0 Not tainted 6.11.0-rc1-syzkaller-00062-ge4fc196f5ba3 #0 [ 2133.930876][T23377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 2133.940963][T23377] Workqueue: hci0 hci_rx_work [ 2133.945680][T23377] Call Trace: [ 2133.948983][T23377] [ 2133.951940][T23377] dump_stack_lvl+0x241/0x360 [ 2133.956654][T23377] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2133.962414][T23377] ? __pfx__printk+0x10/0x10 [ 2133.967227][T23377] ? sysfs_create_dir_ns+0x28a/0x3a0 [ 2133.973856][T23377] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 2133.979645][T23377] sysfs_create_dir_ns+0x2ce/0x3a0 [ 2133.985013][T23377] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 2133.990700][T23377] kobject_add_internal+0x435/0x8d0 [ 2133.995940][T23377] kobject_add+0x152/0x220 [ 2134.000390][T23377] ? do_raw_spin_unlock+0x13c/0x8b0 [ 2134.005619][T23377] ? device_add+0x3e7/0xbf0 [ 2134.010148][T23377] ? __pfx_kobject_add+0x10/0x10 [ 2134.015114][T23377] ? _raw_spin_unlock+0x28/0x50 [ 2134.019982][T23377] ? get_device_parent+0x165/0x410 [ 2134.025104][T23377] device_add+0x4e5/0xbf0 [ 2134.029455][T23377] hci_conn_add_sysfs+0xe8/0x200 [ 2134.034410][T23377] hci_sync_conn_complete_evt+0x789/0xaa0 [ 2134.040140][T23377] hci_event_packet+0xac2/0x1540 [ 2134.045102][T23377] ? __pfx_hci_sync_conn_complete_evt+0x10/0x10 [ 2134.051417][T23377] ? __pfx_hci_event_packet+0x10/0x10 [ 2134.056839][T23377] ? do_raw_spin_unlock+0x13c/0x8b0 [ 2134.062313][T23377] ? hci_send_to_monitor+0xd8/0x7f0 [ 2134.068446][T23377] ? kcov_remote_start+0x9e/0x7e0 [ 2134.073771][T23377] hci_rx_work+0x3e8/0xca0 [ 2134.078258][T23377] ? process_scheduled_works+0x945/0x1830 [ 2134.084109][T23377] process_scheduled_works+0xa2c/0x1830 [ 2134.089898][T23377] ? __pfx_process_scheduled_works+0x10/0x10 [ 2134.095926][T23377] ? assign_work+0x364/0x3d0 [ 2134.100535][T23377] worker_thread+0x86d/0xd40 [ 2134.105153][T23377] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 2134.111161][T23377] ? __kthread_parkme+0x169/0x1d0 [ 2134.116214][T23377] ? __pfx_worker_thread+0x10/0x10 [ 2134.121359][T23377] kthread+0x2f0/0x390 [ 2134.125457][T23377] ? __pfx_worker_thread+0x10/0x10 [ 2134.130598][T23377] ? __pfx_kthread+0x10/0x10 [ 2134.135202][T23377] ret_from_fork+0x4b/0x80 [ 2134.139618][T23377] ? __pfx_kthread+0x10/0x10 [ 2134.144251][T23377] ret_from_fork_asm+0x1a/0x30 [ 2134.149050][T23377] [ 2134.157531][T23377] kobject: kobject_add_internal failed for hci0:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 2134.173897][T23377] Bluetooth: hci0: failed to register connection device [ 2134.183243][T23377] BUG: sleeping function called from invalid context at net/core/sock.c:3545 [ 2134.193231][T23377] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 23377, name: kworker/u9:0 [ 2134.202675][T23377] preempt_count: 1, expected: 0 [ 2134.207523][T23377] RCU nest depth: 0, expected: 0 [ 2134.212564][T23377] 6 locks held by kworker/u9:0/23377: [ 2134.217937][T23377] #0: ffff88807f744148 ((wq_completion)hci0#2){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 2134.229015][T23377] #1: ffffc90003f17d00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 2134.241145][T23377] #2: ffff888047a50078 (&hdev->lock){+.+.}-{3:3}, at: hci_sync_conn_complete_evt+0xb1/0xaa0 [ 2134.251430][T23377] #3: ffffffff8fbd91a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_sync_conn_complete_evt+0x532/0xaa0 [ 2134.262420][T23377] #4: ffff888022ae1020 (&conn->lock#2){+.+.}-{2:2}, at: sco_connect_cfm+0x28a/0xb40 [ 2134.272048][T23377] #5: ffff888069562258 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}, at: sco_connect_cfm+0x461/0xb40 [ 2134.286025][T23377] Preemption disabled at: [ 2134.286036][T23377] [<0000000000000000>] 0x0 [ 2134.295707][T23377] CPU: 0 UID: 0 PID: 23377 Comm: kworker/u9:0 Not tainted 6.11.0-rc1-syzkaller-00062-ge4fc196f5ba3 #0 [ 2134.306664][T23377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 2134.316741][T23377] Workqueue: hci0 hci_rx_work [ 2134.321421][T23377] Call Trace: [ 2134.324705][T23377] [ 2134.327647][T23377] dump_stack_lvl+0x241/0x360 [ 2134.332340][T23377] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2134.337557][T23377] ? __pfx__printk+0x10/0x10 [ 2134.342166][T23377] __might_resched+0x5d4/0x780 [ 2134.346953][T23377] ? __pfx_lock_acquire+0x10/0x10 [ 2134.352001][T23377] ? __pfx___might_resched+0x10/0x10 [ 2134.357281][T23377] ? __pfx_lock_release+0x10/0x10 [ 2134.362327][T23377] ? do_raw_spin_lock+0x14f/0x370 [ 2134.367464][T23377] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2134.372894][T23377] lock_sock_nested+0x5d/0x100 [ 2134.377676][T23377] sco_connect_cfm+0x461/0xb40 [ 2134.382459][T23377] ? __pfx_sco_connect_cfm+0x10/0x10 [ 2134.387842][T23377] ? hci_conn_add_sysfs+0x122/0x200 [ 2134.393060][T23377] ? __pfx_sco_connect_cfm+0x10/0x10 [ 2134.398364][T23377] hci_sync_conn_complete_evt+0x5ab/0xaa0 [ 2134.404203][T23377] hci_event_packet+0xac2/0x1540 [ 2134.409156][T23377] ? __pfx_hci_sync_conn_complete_evt+0x10/0x10 [ 2134.415855][T23377] ? __pfx_hci_event_packet+0x10/0x10 [ 2134.421237][T23377] ? do_raw_spin_unlock+0x13c/0x8b0 [ 2134.426454][T23377] ? hci_send_to_monitor+0xd8/0x7f0 [ 2134.431675][T23377] ? kcov_remote_start+0x9e/0x7e0 [ 2134.436713][T23377] hci_rx_work+0x3e8/0xca0 [ 2134.441143][T23377] ? process_scheduled_works+0x945/0x1830 [ 2134.446868][T23377] process_scheduled_works+0xa2c/0x1830 [ 2134.452498][T23377] ? __pfx_process_scheduled_works+0x10/0x10 [ 2134.458521][T23377] ? assign_work+0x364/0x3d0 [ 2134.463119][T23377] worker_thread+0x86d/0xd40 [ 2134.467755][T23377] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 2134.476376][T23377] ? __kthread_parkme+0x169/0x1d0 [ 2134.481447][T23377] ? __pfx_worker_thread+0x10/0x10 [ 2134.486572][T23377] kthread+0x2f0/0x390 [ 2134.490664][T23377] ? __pfx_worker_thread+0x10/0x10 [ 2134.495800][T23377] ? __pfx_kthread+0x10/0x10 [ 2134.500397][T23377] ret_from_fork+0x4b/0x80 [ 2134.504846][T23377] ? __pfx_kthread+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2134.509440][T23377] ret_from_fork_asm+0x1a/0x30 [ 2134.514247][T23377] [ 2135.468651][ T6869] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2135.908186][T30907] bcm5974 2-1:0.0: could not read from device [ 2135.936097][ T6869] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2136.225233][ T6869] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2136.401149][ T6869] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2136.564157][T30907] [ 2136.566511][T30907] ====================================================== [ 2136.573522][T30907] WARNING: possible circular locking dependency detected [ 2136.580801][T30907] 6.11.0-rc1-syzkaller-00062-ge4fc196f5ba3 #0 Tainted: G W [ 2136.589372][T30907] ------------------------------------------------------ [ 2136.596385][T30907] syz.1.8182/30907 is trying to acquire lock: [ 2136.602449][T30907] ffff88802df76258 (sk_lock-AF_BLUETOOTH){+.+.}-{0:0}, at: bt_accept_dequeue+0xfa/0x560 [ 2136.612224][T30907] [ 2136.612224][T30907] but task is already holding lock: [ 2136.619601][T30907] ffff888069562258 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}, at: sco_sock_release+0x5a/0x320 [ 2136.630302][T30907] [ 2136.630302][T30907] which lock already depends on the new lock. [ 2136.630302][T30907] [ 2136.640716][T30907] [ 2136.640716][T30907] the existing dependency chain (in reverse order) is: [ 2136.649827][T30907] [ 2136.649827][T30907] -> #2 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}: [ 2136.659801][T30907] lock_acquire+0x1ed/0x550 [ 2136.664854][T30907] lock_sock_nested+0x48/0x100 [ 2136.670224][T30907] sco_connect_cfm+0x461/0xb40 [ 2136.676133][T30907] hci_sync_conn_complete_evt+0x5ab/0xaa0 [ 2136.682624][T30907] hci_event_packet+0xac2/0x1540 [ 2136.688104][T30907] hci_rx_work+0x3e8/0xca0 [ 2136.693034][T30907] process_scheduled_works+0xa2c/0x1830 [ 2136.699100][T30907] worker_thread+0x86d/0xd40 [ 2136.704202][T30907] kthread+0x2f0/0x390 [ 2136.708780][T30907] ret_from_fork+0x4b/0x80 [ 2136.713712][T30907] ret_from_fork_asm+0x1a/0x30 [ 2136.718988][T30907] [ 2136.718988][T30907] -> #1 (&conn->lock#2){+.+.}-{2:2}: [ 2136.726457][T30907] lock_acquire+0x1ed/0x550 [ 2136.731488][T30907] _raw_spin_lock+0x2e/0x40 [ 2136.736516][T30907] sco_chan_del+0x64/0x1e0 [ 2136.741460][T30907] sco_conn_del+0x19b/0x310 [ 2136.746480][T30907] hci_conn_hash_flush+0xff/0x240 [ 2136.752053][T30907] hci_dev_close_sync+0x9ef/0x11a0 [ 2136.758757][T30907] hci_unregister_dev+0x20b/0x510 [ 2136.766312][T30907] vhci_release+0x83/0xd0 [ 2136.771175][T30907] __fput+0x24a/0x8a0 [ 2136.775695][T30907] task_work_run+0x24f/0x310 [ 2136.780794][T30907] do_exit+0xa2f/0x27f0 [ 2136.785456][T30907] do_group_exit+0x207/0x2c0 [ 2136.790553][T30907] get_signal+0x1695/0x1730 [ 2136.795565][T30907] arch_do_signal_or_restart+0x96/0x860 [ 2136.801623][T30907] irqentry_exit_to_user_mode+0x79/0x280 [ 2136.807771][T30907] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2136.814271][T30907] [ 2136.814271][T30907] -> #0 (sk_lock-AF_BLUETOOTH){+.+.}-{0:0}: [ 2136.822341][T30907] validate_chain+0x18e0/0x5900 [ 2136.827702][T30907] __lock_acquire+0x137a/0x2040 [ 2136.833062][T30907] lock_acquire+0x1ed/0x550 [ 2136.838077][T30907] lock_sock_nested+0x48/0x100 [ 2136.843367][T30907] bt_accept_dequeue+0xfa/0x560 [ 2136.848736][T30907] __sco_sock_close+0xd6/0x570 [ 2136.854106][T30907] sco_sock_release+0xb3/0x320 [ 2136.859760][T30907] sock_close+0xbc/0x240 [ 2136.864615][T30907] __fput+0x24a/0x8a0 [ 2136.869966][T30907] task_work_run+0x24f/0x310 [ 2136.875694][T30907] do_exit+0xa2f/0x27f0 [ 2136.880375][T30907] do_group_exit+0x207/0x2c0 [ 2136.885475][T30907] get_signal+0x1695/0x1730 [ 2136.890487][T30907] arch_do_signal_or_restart+0x96/0x860 [ 2136.896548][T30907] syscall_exit_to_user_mode+0xc9/0x370 [ 2136.902604][T30907] do_syscall_64+0x100/0x230 [ 2136.907702][T30907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2136.914105][T30907] [ 2136.914105][T30907] other info that might help us debug this: [ 2136.914105][T30907] [ 2136.924319][T30907] Chain exists of: [ 2136.924319][T30907] sk_lock-AF_BLUETOOTH --> &conn->lock#2 --> sk_lock-AF_BLUETOOTH-BTPROTO_SCO [ 2136.924319][T30907] [ 2136.939173][T30907] Possible unsafe locking scenario: [ 2136.939173][T30907] [ 2136.946696][T30907] CPU0 CPU1 [ 2136.952049][T30907] ---- ---- [ 2136.957402][T30907] lock(sk_lock-AF_BLUETOOTH-BTPROTO_SCO); [ 2136.963681][T30907] lock(&conn->lock#2); [ 2136.970548][T30907] lock(sk_lock-AF_BLUETOOTH-BTPROTO_SCO); [ 2136.979945][T30907] lock(sk_lock-AF_BLUETOOTH); [ 2136.984797][T30907] [ 2136.984797][T30907] *** DEADLOCK *** [ 2136.984797][T30907] [ 2136.992927][T30907] 2 locks held by syz.1.8182/30907: [ 2136.998108][T30907] #0: ffff888056985c08 (&sb->s_type->i_mutex_key#9){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 2137.008202][T30907] #1: ffff888069562258 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}, at: sco_sock_release+0x5a/0x320 [ 2137.019334][T30907] [ 2137.019334][T30907] stack backtrace: [ 2137.025297][T30907] CPU: 0 UID: 0 PID: 30907 Comm: syz.1.8182 Tainted: G W 6.11.0-rc1-syzkaller-00062-ge4fc196f5ba3 #0 [ 2137.037612][T30907] Tainted: [W]=WARN [ 2137.041398][T30907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 2137.051442][T30907] Call Trace: [ 2137.054716][T30907] [ 2137.057638][T30907] dump_stack_lvl+0x241/0x360 [ 2137.062429][T30907] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2137.067926][T30907] ? print_circular_bug+0x130/0x1a0 [ 2137.073741][T30907] check_noncircular+0x36a/0x4a0 [ 2137.078682][T30907] ? __pfx_validate_chain+0x10/0x10 [ 2137.084277][T30907] ? __pfx_check_noncircular+0x10/0x10 [ 2137.089759][T30907] ? lockdep_lock+0x123/0x2b0 [ 2137.094632][T30907] ? validate_chain+0x11e/0x5900 [ 2137.099579][T30907] ? __lock_acquire+0x137a/0x2040 [ 2137.104620][T30907] ? _find_first_zero_bit+0xd3/0x100 [ 2137.109905][T30907] validate_chain+0x18e0/0x5900 [ 2137.114756][T30907] ? __pfx_validate_chain+0x10/0x10 [ 2137.119952][T30907] ? __pfx_validate_chain+0x10/0x10 [ 2137.125141][T30907] ? __pfx_validate_chain+0x10/0x10 [ 2137.130325][T30907] ? __pfx_validate_chain+0x10/0x10 [ 2137.135512][T30907] ? mark_lock+0x9a/0x350 [ 2137.139836][T30907] ? __pfx_validate_chain+0x10/0x10 [ 2137.145022][T30907] ? __lock_acquire+0x137a/0x2040 [ 2137.150220][T30907] ? look_up_lock_class+0x77/0x160 [ 2137.155326][T30907] ? register_lock_class+0x102/0x980 [ 2137.160607][T30907] ? mark_lock+0x9a/0x350 [ 2137.165016][T30907] ? __pfx_register_lock_class+0x10/0x10 [ 2137.170736][T30907] __lock_acquire+0x137a/0x2040 [ 2137.175590][T30907] lock_acquire+0x1ed/0x550 [ 2137.180088][T30907] ? bt_accept_dequeue+0xfa/0x560 [ 2137.185125][T30907] ? __pfx_lock_acquire+0x10/0x10 [ 2137.190142][T30907] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2137.196116][T30907] ? sco_sock_release+0x5a/0x320 [ 2137.201049][T30907] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2137.207370][T30907] lock_sock_nested+0x48/0x100 [ 2137.212137][T30907] ? bt_accept_dequeue+0xfa/0x560 [ 2137.217242][T30907] bt_accept_dequeue+0xfa/0x560 [ 2137.222086][T30907] __sco_sock_close+0xd6/0x570 [ 2137.226848][T30907] sco_sock_release+0xb3/0x320 [ 2137.231605][T30907] sock_close+0xbc/0x240 [ 2137.235836][T30907] ? __pfx_sock_close+0x10/0x10 [ 2137.240675][T30907] __fput+0x24a/0x8a0 [ 2137.244656][T30907] task_work_run+0x24f/0x310 [ 2137.249239][T30907] ? __pfx_task_work_run+0x10/0x10 [ 2137.254358][T30907] ? do_exit+0xa2a/0x27f0 [ 2137.259063][T30907] ? kmem_cache_free+0x145/0x350 [ 2137.266156][T30907] do_exit+0xa2f/0x27f0 [ 2137.270318][T30907] ? __pfx_do_exit+0x10/0x10 [ 2137.274910][T30907] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2137.280350][T30907] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2137.286537][T30907] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2137.292902][T30907] ? _raw_spin_lock_irq+0xdf/0x120 [ 2137.298010][T30907] do_group_exit+0x207/0x2c0 [ 2137.302608][T30907] ? _raw_spin_unlock_irq+0x23/0x50 [ 2137.307795][T30907] ? lockdep_hardirqs_on+0x99/0x150 [ 2137.313005][T30907] get_signal+0x1695/0x1730 [ 2137.317517][T30907] ? kasan_quarantine_put+0xdc/0x230 [ 2137.322898][T30907] ? __pfx_get_signal+0x10/0x10 [ 2137.327740][T30907] ? do_sys_openat2+0x17a/0x1d0 [ 2137.332588][T30907] arch_do_signal_or_restart+0x96/0x860 [ 2137.338131][T30907] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 2137.344275][T30907] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2137.350267][T30907] ? syscall_exit_to_user_mode+0xa3/0x370 [ 2137.355982][T30907] syscall_exit_to_user_mode+0xc9/0x370 [ 2137.362250][T30907] do_syscall_64+0x100/0x230 [ 2137.367135][T30907] ? clear_bhb_loop+0x35/0x90 [ 2137.371816][T30907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2137.377723][T30907] RIP: 0033:0x7f63f79773b9 [ 2137.382135][T30907] Code: Unable to access opcode bytes at 0x7f63f797738f. [ 2137.389138][T30907] RSP: 002b:00007f63f875a048 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2137.397543][T30907] RAX: 000000000000000a RBX: 00007f63f7b06058 RCX: 00007f63f79773b9 [ 2137.405505][T30907] RDX: 0000000000000000 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 2137.413464][T30907] RBP: 00007f63f79e48e6 R08: 0000000000000000 R09: 0000000000000000 [ 2137.421438][T30907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2137.429414][T30907] R13: 000000000000006e R14: 00007f63f7b06058 R15: 00007fff0f3f75b8 [ 2137.437387][T30907] [ 2137.451544][ T6869] bridge_slave_1: left allmulticast mode [ 2137.468243][ T6869] bridge_slave_1: left promiscuous mode [ 2137.474313][ T6869] bridge0: port 2(bridge_slave_1) entered disabled state [ 2137.474447][ T9] usb 2-1: USB disconnect, device number 113 [ 2137.489459][ T6869] bridge_slave_0: left allmulticast mode [ 2137.495338][ T6869] bridge_slave_0: left promiscuous mode [ 2137.501150][ T6869] bridge0: port 1(bridge_slave_0) entered disabled state [ 2137.650750][ T6869] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2137.664964][ T6869] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2137.676032][ T6869] bond0 (unregistering): Released all slaves [ 2137.919718][ T6869] hsr_slave_0: left promiscuous mode [ 2137.925679][ T6869] hsr_slave_1: left promiscuous mode [ 2137.931500][ T6869] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2137.939102][ T6869] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2137.946812][ T6869] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2137.954466][ T6869] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2137.965141][ T6869] veth1_macvtap: left promiscuous mode [ 2137.971545][ T6869] veth0_macvtap: left promiscuous mode [ 2137.977373][ T6869] veth1_vlan: left promiscuous mode [ 2137.983563][ T6869] veth0_vlan: left promiscuous mode [ 2138.187250][ T6869] team0 (unregistering): Port device team_slave_1 removed [ 2138.199404][ T6869] team0 (unregistering): Port device team_slave_0 removed [ 2138.774008][ T6869] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2138.836783][ T6869] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2138.877737][ T6869] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2138.917911][ T6869] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2138.984498][ T6869] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2139.047313][ T6869] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2139.088224][ T6869] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2139.128303][ T6869] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2139.214954][ T6869] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2139.256869][ T6869] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2139.297745][ T6869] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2139.367346][ T6869] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2139.440584][ T6869] bridge_slave_1: left allmulticast mode [ 2139.446292][ T6869] bridge_slave_1: left promiscuous mode [ 2139.451941][ T6869] bridge0: port 2(bridge_slave_1) entered disabled state [ 2139.460229][ T6869] bridge_slave_0: left allmulticast mode [ 2139.466071][ T6869] bridge_slave_0: left promiscuous mode [ 2139.472050][ T6869] bridge0: port 1(bridge_slave_0) entered disabled state [ 2139.483808][ T6869] bridge_slave_1: left allmulticast mode [ 2139.489451][ T6869] bridge_slave_1: left promiscuous mode [ 2139.495200][ T6869] bridge0: port 2(bridge_slave_1) entered disabled state [ 2139.505507][ T6869] bridge_slave_0: left allmulticast mode [ 2139.511142][ T6869] bridge_slave_0: left promiscuous mode [ 2139.517324][ T6869] bridge0: port 1(bridge_slave_0) entered disabled state [ 2139.526063][ T6869] bridge_slave_1: left allmulticast mode [ 2139.531690][ T6869] bridge_slave_1: left promiscuous mode [ 2139.537541][ T6869] bridge0: port 2(bridge_slave_1) entered disabled state [ 2139.545719][ T6869] bridge_slave_0: left allmulticast mode [ 2139.551351][ T6869] bridge_slave_0: left promiscuous mode [ 2139.558055][ T6869] bridge0: port 1(bridge_slave_0) entered disabled state [ 2139.569787][ T6869] bridge_slave_1: left allmulticast mode [ 2139.576238][ T6869] bridge_slave_1: left promiscuous mode [ 2139.581896][ T6869] bridge0: port 2(bridge_slave_1) entered disabled state [ 2139.590374][ T6869] bridge_slave_0: left allmulticast mode [ 2139.596190][ T6869] bridge_slave_0: left promiscuous mode [ 2139.601828][ T6869] bridge0: port 1(bridge_slave_0) entered disabled state [ 2140.049230][ T6869] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2140.061182][ T6869] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2140.072101][ T6869] bond0 (unregistering): Released all slaves [ 2140.088206][ T6869] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2140.101059][ T6869] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2140.111197][ T6869] bond0 (unregistering): Released all slaves [ 2140.126063][ T6869] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2140.137035][ T6869] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2140.148617][ T6869] bond0 (unregistering): Released all slaves [ 2140.161316][ T6869] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2140.172654][ T6869] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2140.182616][ T6869] bond0 (unregistering): Released all slaves [ 2140.631240][ T6869] hsr_slave_0: left promiscuous mode [ 2140.637262][ T6869] hsr_slave_1: left promiscuous mode [ 2140.644331][ T6869] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2140.652314][ T6869] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2140.666296][ T6869] hsr_slave_0: left promiscuous mode [ 2140.673445][ T6869] hsr_slave_1: left promiscuous mode [ 2140.679439][ T6869] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2140.687173][ T6869] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2140.694930][ T6869] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2140.702439][ T6869] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2140.712053][ T6869] hsr_slave_0: left promiscuous mode [ 2140.718448][ T6869] hsr_slave_1: left promiscuous mode [ 2140.724336][ T6869] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2140.732573][ T6869] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2140.740181][ T6869] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2140.747835][ T6869] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2140.760800][ T6869] hsr_slave_0: left promiscuous mode [ 2140.768034][ T6869] hsr_slave_1: left promiscuous mode [ 2140.774077][ T6869] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2140.781494][ T6869] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2140.789138][ T6869] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2140.797015][ T6869] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2140.808356][ T6869] veth1_macvtap: left promiscuous mode [ 2140.813925][ T6869] veth0_macvtap: left promiscuous mode [ 2140.819457][ T6869] veth1_vlan: left promiscuous mode [ 2140.824770][ T6869] veth0_vlan: left promiscuous mode [ 2140.830679][ T6869] veth1_macvtap: left promiscuous mode [ 2140.836710][ T6869] veth0_macvtap: left promiscuous mode [ 2140.842710][ T6869] veth1_vlan: left promiscuous mode [ 2140.847958][ T6869] veth0_vlan: left promiscuous mode [ 2140.854235][ T6869] veth1_macvtap: left promiscuous mode [ 2140.859960][ T6869] veth0_macvtap: left promiscuous mode [ 2140.865839][ T6869] veth1_vlan: left promiscuous mode [ 2140.871695][ T6869] veth0_vlan: left promiscuous mode [ 2141.185332][ T6869] team0 (unregistering): Port device team_slave_1 removed [ 2141.221746][ T6869] team0 (unregistering): Port device team_slave_0 removed [ 2141.416348][ T6869] team0 (unregistering): Port device team_slave_1 removed [ 2141.437550][ T6869] team0 (unregistering): Port device team_slave_0 removed [ 2141.661492][ T6869] team0 (unregistering): Port device team_slave_1 removed [ 2141.691227][ T6869] team0 (unregistering): Port device team_slave_0 removed [ 2141.938697][ T6869] team0 (unregistering): Port device team_slave_1 removed [ 2141.977965][ T6869] team0 (unregistering): Port device team_slave_0 removed