last executing test programs: 9.396407951s ago: executing program 3 (id=3208): socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x739082, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x402c5839) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r2 = memfd_create(&(0x7f0000000ac0)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06\x01\x00\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\x17\x00\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) 8.076675389s ago: executing program 3 (id=3217): r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0x81b) read$char_usb(r0, 0x0, 0x4) 7.920611269s ago: executing program 3 (id=3218): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x4) 6.819768777s ago: executing program 2 (id=3225): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x4, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000400), &(0x7f00000004c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0xa0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x44, 0x10, 0x0, 0x41}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0xe, 0x2000000, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28) 6.672276313s ago: executing program 0 (id=3227): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0xc4, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x8, 0x11d, 0x0, 0x1, [{0x4, 0x0, 0x0, 0x0}]}, @NL80211_ATTR_TID_CONFIG={0x40, 0x11d, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xe169}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd2}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd9}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x3c, 0x11d, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xd0}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x3d, 0x8, 0x8d}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x24, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x0, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x97}]}, {0x4}]}]}, 0xc4}}, 0x4008010) 6.558041464s ago: executing program 2 (id=3228): socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x739082, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x402c5839) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r2 = memfd_create(&(0x7f0000000ac0)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06\x01\x00\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\x17\x00\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x45e}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r5, 0x2, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000080)="92", 0x1}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xff, 0x2, 0x4bfffffe}]}, 0x38}}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r6, 0x104, 0x5, &(0x7f0000000000)=0xfffffffd, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000280)}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0), 0x0, 0x11, 0x0, 0x0) r7 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r7, 0x3000) 5.184595009s ago: executing program 2 (id=3234): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 5.091014089s ago: executing program 2 (id=3235): syz_io_uring_setup(0x160c, &(0x7f00000002c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, &(0x7f0000000480)={0x3, 0x1, 0x1000, &(0x7f0000000ac0)=""/4096}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x8000f28, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e22, @broadcast}, 0x10) splice(r3, 0x0, r2, 0x0, 0x7f, 0xe) write(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) r5 = memfd_create(&(0x7f0000000540)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x100010, r6, 0xf5ff3000) r7 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f00001b8000/0x2000)=nil, &(0x7f000064f000/0x3000)=nil, 0x0, &(0x7f00000003c0)=[{0x7ff, 0x9, 0xfffffffffffffff9}, {0xffffffffffffdffb, 0x4, 0x2}, {0x5, 0x6, 0x5}], 0x3, 0x3, 0x0, 0x28, 0x0, 0x64}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000004c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000200)={r8}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000004000090000000000000000000300000008000200", @ANYRES32=r9], 0x1c}}, 0x40) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socket(0x1, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x840000000002, 0x3, 0xfa) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000001ac0)={0x0, 0xd90a, 0x100}, &(0x7f0000000340), &(0x7f0000000240)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 4.774088017s ago: executing program 0 (id=3236): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000300)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, 0x0}}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b000000", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x20000004}, 0x4) 4.372509384s ago: executing program 0 (id=3237): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], [0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x45c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x2, 0x80805, 0x0) sendmmsg(r2, &(0x7f0000000f40)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)="9c", 0x1}], 0x1}}], 0x1, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={0x0, 0x38}}, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000001440)={0xfffffffffffffd87, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "741cb976"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000001840)={0x24, 0x0, &(0x7f0000001740)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000540)={0x24, 0x0, &(0x7f00000006c0)={0x0, 0x3, 0xc, @string={0xc, 0x3, "00d2dadd15df2c06a29a"}}, 0x0, 0x0}, 0x0) 3.625216119s ago: executing program 4 (id=3239): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)="9e52cd9d7705e3fbf390f36459b28c9f6ac9", 0x12) syz_io_uring_setup(0x1f87, &(0x7f0000000000), 0x0, 0x0) r1 = dup(r0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(0xffffffffffffffff, r1, &(0x7f0000000080)=0x1000000001, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000033a80)=""/102386, 0xffffffa8}], 0x1, 0x800, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) socket$alg(0x26, 0x5, 0x0) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={0xffffffffffffffff, 0x18000000000002a0, 0x86, 0x0, &(0x7f00000014c0)="b9ff0300600d698cff9e34f008004de7f9916436000000294ec076c03d49d0ad63f28576e352befe03fe84a3b5755c01b8d5469451f5698f03f5d1fc3844b3f1d2fd4cd7d83f4ed898bfd9e6888303bd8c85a50f7b1284ea53bc3c48350e519cab0cf1b6f17f317de12baa385ddebeb90bb46df3f85f23f6479d4b778b5f4d50437aa5eef7b4", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x348, 0x148, 0x4c, 0x1a, 0x0, 0x73, 0x278, 0x258, 0x258, 0x278, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x148, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x6}}, @common=@unspec=@connlimit={{0x40}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a8) 2.596606246s ago: executing program 1 (id=3240): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024001d0042c411a0b598bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab98eb1d9cc98c2a4f837c", 0x4c}], 0x1}, 0x4004000) 2.542578708s ago: executing program 4 (id=3241): socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x739082, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x402c5839) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r2 = memfd_create(&(0x7f0000000ac0)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06\x01\x00\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\x17\x00\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000710000009500000000000000a240897e696c8c"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x22000) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r3, 0xc0bc5351, &(0x7f0000000440)={0x80, 0x2, 'client0\x00', 0x0, "b692ab05e9c1b30c", "c5e788a5513d59c44888be429de4bbb152bfd08a5222ae6540d0b49771b7eaff", 0xa9a, 0x95a}) 1.945483693s ago: executing program 0 (id=3244): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x45e}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r5, 0x2, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000080)="92", 0x1}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xff, 0x2, 0x4bfffffe}]}, 0x38}}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r6, 0x104, 0x5, &(0x7f0000000000)=0xfffffffd, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000280)}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0), 0x0, 0x11, 0x0, 0x0) r7 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r7, 0x3000) 1.396503464s ago: executing program 1 (id=3245): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) 1.39597875s ago: executing program 3 (id=3246): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 1.24234118s ago: executing program 3 (id=3247): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002ac0)=@delchain={0x78, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x30, 0x2, [@TCA_FLOWER_KEY_ARP_OP={0x5}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14}]}}]}, 0x78}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740), 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x1b0}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1.16698563s ago: executing program 3 (id=3248): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100ff030000000000030000850000007b00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x82) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) r5 = syz_usb_connect(0x0, 0x45, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001c2097088680030b28f40102030109023300010000000009040000000e0100000924060001a3e1f74c05240000000d240f01004000000200ffff"], 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000", @ANYRES32=r6, @ANYRES16=r5, @ANYRESOCT=0x0], 0x0, 0x6, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1d}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r8 = timerfd_create(0x0, 0x0) timerfd_settime(r8, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0xd54, 0x0, 0x8, 0x0, 0x0, 0x4, 0x0, 0x9, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) read(r8, &(0x7f0000000140)=""/42, 0x2a) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000140)={0x24, 0x0, &(0x7f0000000280)=ANY=[@ANYRES16=r1], 0x0, 0x0}, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000340), 0x0, 0x2, 0x0) io_submit(0x0, 0x0, 0x0) 1.115049685s ago: executing program 4 (id=3249): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000fc850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000702000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff6d6405000000000065040400010000000404000001000000b7050000400000006a0a80fe000000008500000053000000b7000000000000009500001000000000a80501363034fdb117168bd07ba00af739d1a1ee35fe163a255c33282044b32495ef8ab9adc67ccc945ff15d802f5132143c0a9fc7a84452569957c1002ed7d4d8e17f791f4798c8eb483e9973320d046c3126c6afcfd84de03352c69b3edff5be26765ba5f8f2879021c2ea53ea79acd7fb38dd1abb75aa393cea26d465637d11f79f361879473e7b7c4ae7dd5e4dee88518ddf12dddd4bfc6a4dd3b6beba51074229b0d4b504516c4c3e5d1aa044d8d00728141cd67bcd68f253288e655c6b34e02e90637ef2912ba7de26ff2357ef17f95a25780c3a0578442926ef4e912f01a201e694e3806e8c8fe8b69524cd19f7525d8d66bb766f7f3f918c86a70252236800001897133af94a5a4cfc794d8b9d7c33632152c58eaf302f0b2e0c252b00000000000000006f1bbefbe08de65e3762e194ba4cae8b13535d7d11ee917bca4885bbf597a14ab2458efce78510d86272d88e0c8088f404f011289ebc5623faa1182632161e073af1d69a2e36bed435000025ecd201d2ffb0a7fa4f5d11060cdcf071defd0a8be3b69ce3e4f361aca75827426dde87fdf4617222674280f55e98107450c19b9d86329bd5b4697336112b0b8754ce3574046bf6114d1a88597850b77378fa8edfff8faf8b8ec039bab385cac0535373bb8fab90539b1a65ddff841eb671f7faf37ebdfccea0c002ad2b42047c9ec43193ccf617dbf8a12b4a189edbf9fb7c42b1f435ccd4d96822e6b70100912c92e3943e9c4f45d8bcd528fa8a3ea847f10e9b2506f3bb506f1d7fbdf8010000000000a073d0de5538ab42e170b3baae34c35987b0dda497ac3f5e97e6e6aeea15c6d5ed24310100000003bb6030f84b63aaf8690db0221b1705c501f802ff59b4e683efa4b6e77e042072bd2ac37d413008ec9eb8166f6e28b49a77ed91befc65315878f88a8fb1dd679fb4c5557abae6849917dc51a89d47b728502f7e621cc0e3ba04000000c149ee6601728c750d304165d39fd4afe683b2467c60e5b8eae897c22da8650579475afd96187d881e93b42a5fdfd686d8900c44c67133dad58037fda65885a15a429edfe3027a5ebf95254744f10fd607bc3300b94932b8d9447c4df6e21ee0e54f8be072e0b083bbd86b19cb074577a25ff581d92af08a06f857311a2f14326b0b290205e91a682e00c8762cbc6b904c980eef6e6a1def886c95676dce6a8194479700a02b92bdc8d05eae1f24fdd7b80d1bb404c22f681594de2ebb9687219de8d73ac83823feb402a2415a9850d5f0183ec67be96dc0e4c2d7acf1dfe79d6771903b76e21190c22d641030e1ddacf006c3116e1803af20a5f2b5f7ba58aca5bcabbbab24414a3810788e5503e4be66d683daac5f0001000077339b4200000000108a3c87b19d5b9a00c75d84a92d6dcf00ba96edf35ede0e2b57c26e94801b498924166bde57d5f24258d9fd028096cc15a8b912b494d4bbe609031ea1ca65a548971d5d16296dd08e9efb3e1e7a27310d5d01f8a8a0f5212d7f628f554afea715ccbc66cbb1016490f5d579308cb3188cf2fcaf67e0c16443d526ba4b968f07ae362c2133c168313e84beb871203880dd453c45d0a137d7f5a8b039dbfa62fb2b4214f8e69f967bf1fbd89e"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0x1f0, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000702000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff6d6405000000000065040400010000000404000001000000b7050000400000006a0a80fe000000008500000053000000b7000000000000009500001000000000a80501363034fdb117168bd07ba00af739d1a1ee35fe163a255c33282044b32495ef8ab9adc67ccc945ff15d802f5132143c0a9fc7a84452569957c1002ed7d4d8e17f791f4798c8eb483e9973320d046c3126c6afcfd84de03352c69b3edff5be26765ba5f8f2879021c2ea53ea79acd7fb38dd1abb75aa393cea26d465637d11f79f361879473e7b7c4ae7dd5e4dee88518ddf12dddd4bfc6a4dd3b6beba51074229b0d4b504516c4c3e5d1aa044d8d00728141cd67bcd68f253288e655c6b34e02e90637ef2912ba7de26ff2357ef17f95a25780c3a0578442926ef4e912f01a201e694e3806e8c8fe8b69524cd19f7525d8d66bb766f7f3f918c86a70252236800001897133af94a5a4cfc794d8b9d7c33632152c58eaf302f0b2e0c252b00000000000000006f1bbefbe08de65e3762e194ba4cae8b13535d7d11ee917bca4885bbf597a14ab2458efce78510d86272d88e0c8088f404f011289ebc5623faa1182632161e073af1d69a2e36bed435000025ecd201d2ffb0a7fa4f5d11060cdcf071defd0a8be3b69ce3e4f361aca75827426dde87fdf4617222674280f55e98107450c19b9d86329bd5b4697336112b0b8754ce3574046bf6114d1a88597850b77378fa8edfff8faf8b8ec039bab385cac0535373bb8fab90539b1a65ddff841eb671f7faf37ebdfccea0c002ad2b42047c9ec43193ccf617dbf8a12b4a189edbf9fb7c42b1f435ccd4d96822e6b70100912c92e3943e9c4f45d8bcd528fa8a3ea847f10e9b2506f3bb506f1d7fbdf8010000000000a073d0de5538ab42e170b3baae34c35987b0dda497ac3f5e97e6e6aeea15c6d5ed24310100000003bb6030f84b63aaf8690db0221b1705c501f802ff59b4e683efa4b6e77e042072bd2ac37d413008ec9eb8166f6e28b49a77ed91befc65315878f88a8fb1dd679fb4c5557abae6849917dc51a89d47b728502f7e621cc0e3ba04000000c149ee6601728c750d304165d39fd4afe683b2467c60e5b8eae897c22da8650579475afd96187d881e93b42a5fdfd686d8900c44c67133dad58037fda65885a15a429edfe3027a5ebf95254744f10fd607bc3300b94932b8d9447c4df6e21ee0e54f8be072e0b083bbd86b19cb074577a25ff581d92af08a06f857311a2f14326b0b290205e91a682e00c8762cbc6b904c980eef6e6a1def886c95676dce6a8194479700a02b92bdc8d05eae1f24fdd7b80d1bb404c22f681594de2ebb9687219de8d73ac83823feb402a2415a9850d5f0183ec67be96dc0e4c2d7acf1dfe79d6771903b76e21190c22d641030e1ddacf006c3116e1803af20a5f2b5f7ba58aca5bcabbbab24414a3810788e5503e4be66d683daac5f0001000077339b4200000000108a3c87b19d5b9a00c75d84a92d6dcf00ba96edf35ede0e2b57c26e94801b498924166bde57d5f24258d9fd028096cc15a8b912b494d4bbe609031ea1ca65a548971d5d16296dd08e9efb3e1e7a27310d5d01f8a8a0f5212d7f628f554afea715ccbc66cbb1016490f5d579308cb3188cf2fcaf67e0c16443d526ba4b968f07ae362c2133c168313e84beb871203880dd453c45d0a137d7f5a8b039dbfa62fb2b4214f8e69f967bf1fbd89e"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_script(r4, &(0x7f00000000c0)={'#! ', './file1/file4', [], 0xa, "474a0c9cc012119f00000000815af28edc000000000002"}, 0x28) 967.532773ms ago: executing program 4 (id=3250): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000800000095000000000000009500a5050000000077d8f3b423cdac8d8000000000000020e16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f68a7d06d10bfe150a7487535f7866907dc6751dfb265a0e3ccae669e173a649c1cfd6587d452d46b7c57d77578f4c35235138d5521f9453559c3421eed73d5661cfeecf9c66c54c3b3ffe1b4ce25d7c983c044c03bf3ff03fe3e26e7a23129d6606fd28a7f9105f82317874b33d96b39fa4e045469989d552af6200000003a00000000000000abecc2f4a3799af2551ce935b0f327cb3f011a7d06602e2fd5234712596b696418f1623ed38ae89d24e14b40234756ddcebfba2f87925bfacba83109753f543ad027edd68149ee99eebc6f7d6dd4aed4afe1f44ccb19e810879b70a70900000000000000000000d7900a820b6327944e9a217b9800e02a92895614cd50cbf83a1ed25268816b004519c9c5cff097d8000000000009d27d753a30a147b24a48435bd8a568669596e9e08679b3ce48e90defb6670c3d6209000000c773713a66b223fa8b148871c8d31d24000025449f106b99893ed20fa7a050fbbef90327e827e513e9606800000000e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e69ee52b59d13182e1f24ed208ada12f7a1525320e71666f472a972d5eb1affb87ba55b2d72078e9f40b4ae7dc3b2aeb0d11cd22c35d32940f19dff00ffffffff080000ff003853e59de7621e348955735264f34b1046a1813668297a7edad187ef106ae7fcbb25090f17d0baadeb8ae190a1fb5a315f8347fb0379659500000000000000000000000000000000000000002fdf0193ec79c90ed210ebc2fbed6d4216770c1b0dec886b388d138c2b69c6aacb714e7264093061c660a5100b7cc165889eb94c8d7c77b6fa06f1a4f8e4a6b6cb37e319c5c22f276b03cae853f42b07ca0b03b1eb32a6b1a81cd511fd0b59d57a11c6a3ebf9731464ad21f07f618efc31023ac60007426162b57e803519954d7c956fda392fa84be38e937d36af1c35138e05a9e8d6dc0272de72c41500000000304402e22af23437126f330f8eb4075daaeae3134ece35cd86d95bd9836bd186c4b6565e967a4e3e86f299b7400994ba136b4eccf3b0f001a266c0d160b3ce1182001d64b52a5ce7f506295d59eea6903b84ffbabf5a5b91c1d6ecce8728a224aec66c610e3becd60a35e848c224f8251947eed20e2b612cb099bfe8924d33ba7f0691fed04a43e9c64b7a1e3165e86cdb9871c678a6bbb14821f441c6c14d1bd78d8ffdfea12c19ea04264335d60b6b7a7da6fb83f33101db32f6ab137d943dd3c1e8db9f3e1263573dc721ae82fe0bc63598751a5092c9f7dbfc39d564834e3703492c2a651643d8ce5c36d97a4812cf73fc8ea0d68d7489cfcb0176"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) 12.380881ms ago: executing program 1 (id=3251): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)="9e52cd9d7705e3fbf390f36459b28c9f6ac9", 0x12) syz_io_uring_setup(0x1f87, &(0x7f0000000000), 0x0, 0x0) r1 = dup(r0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(0xffffffffffffffff, r1, &(0x7f0000000080)=0x1000000001, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000033a80)=""/102386, 0xffffffa8}], 0x1, 0x800, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) socket$alg(0x26, 0x5, 0x0) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={0xffffffffffffffff, 0x18000000000002a0, 0x86, 0x0, &(0x7f00000014c0)="b9ff0300600d698cff9e34f008004de7f9916436000000294ec076c03d49d0ad63f28576e352befe03fe84a3b5755c01b8d5469451f5698f03f5d1fc3844b3f1d2fd4cd7d83f4ed898bfd9e6888303bd8c85a50f7b1284ea53bc3c48350e519cab0cf1b6f17f317de12baa385ddebeb90bb46df3f85f23f6479d4b778b5f4d50437aa5eef7b4", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x348, 0x148, 0x4c, 0x1a, 0x0, 0x73, 0x278, 0x258, 0x258, 0x278, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x148, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x6}}, @common=@unspec=@connlimit={{0x40}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a8) 11.921216ms ago: executing program 0 (id=3252): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 0s ago: executing program 4 (id=3253): socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x739082, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x402c5839) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r2 = memfd_create(&(0x7f0000000ac0)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06\x01\x00\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\x17\x00\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n 1 [ 916.143037][ T5224] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 916.151164][ T5224] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 916.158775][T10891] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 916.175925][ T5224] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 916.183425][ T5224] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 916.192010][ T5224] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 916.199097][T10891] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 916.207617][ T5224] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 916.274792][ T5224] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 916.287096][ T5224] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 916.303372][ T5224] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 916.362154][ T5238] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 916.373244][ T5238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 916.381505][ T5238] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 916.390098][ T5238] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 916.397890][ T5238] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 916.440878][ T5238] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 916.458923][ T2971] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 916.467133][T11042] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 916.480356][T11042] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 916.513657][T11042] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 916.537343][T11042] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 916.545581][T11042] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 916.562769][T11042] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 916.606065][ T5224] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 916.619589][ T5224] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 916.640812][T13740] ip6gretap0 speed is unknown, defaulting to 1000 [ 916.655987][ T5224] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 916.670936][ T5224] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 916.681629][ T5224] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 916.702710][ T5224] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 916.791711][ T2971] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 916.859670][T13745] ip6gretap0 speed is unknown, defaulting to 1000 [ 917.011402][ T2971] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.036701][T13741] ip6gretap0 speed is unknown, defaulting to 1000 [ 917.113440][ T2971] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.226777][T13747] ip6gretap0 speed is unknown, defaulting to 1000 [ 917.430411][T13740] chnl_net:caif_netlink_parms(): no params data found [ 917.458318][T13749] ip6gretap0 speed is unknown, defaulting to 1000 [ 917.549391][ T2971] bridge_slave_1: left allmulticast mode [ 917.562266][ T2971] bridge_slave_1: left promiscuous mode [ 917.568273][ T2971] bridge0: port 2(bridge_slave_1) entered disabled state [ 917.585595][ T2971] bridge_slave_0: left allmulticast mode [ 917.591258][ T2971] bridge_slave_0: left promiscuous mode [ 917.597268][ T2971] bridge0: port 1(bridge_slave_0) entered disabled state [ 917.646811][ T2971] bridge0: left allmulticast mode [ 917.651848][ T2971] bridge0: left promiscuous mode [ 918.040904][ T2971] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 918.052098][ T2971] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 918.064936][ T2971] bond0 (unregistering): Released all slaves [ 918.145667][T13745] chnl_net:caif_netlink_parms(): no params data found [ 918.252566][ T5224] Bluetooth: hci0: command tx timeout [ 918.318371][T13740] bridge0: port 1(bridge_slave_0) entered blocking state [ 918.325800][T13740] bridge0: port 1(bridge_slave_0) entered disabled state [ 918.333300][ T5224] Bluetooth: hci5: command tx timeout [ 918.339605][T13740] bridge_slave_0: entered allmulticast mode [ 918.347039][T13740] bridge_slave_0: entered promiscuous mode [ 918.358395][T13740] bridge0: port 2(bridge_slave_1) entered blocking state [ 918.365632][T13740] bridge0: port 2(bridge_slave_1) entered disabled state [ 918.373062][T13740] bridge_slave_1: entered allmulticast mode [ 918.380178][T13740] bridge_slave_1: entered promiscuous mode [ 918.391881][T13741] chnl_net:caif_netlink_parms(): no params data found [ 918.486768][T13740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 918.557370][T13740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 918.572968][ T5224] Bluetooth: hci1: command tx timeout [ 918.620606][T13745] bridge0: port 1(bridge_slave_0) entered blocking state [ 918.627980][T13745] bridge0: port 1(bridge_slave_0) entered disabled state [ 918.635477][T13745] bridge_slave_0: entered allmulticast mode [ 918.642147][T13745] bridge_slave_0: entered promiscuous mode [ 918.653174][ T5224] Bluetooth: hci2: command tx timeout [ 918.670429][T13740] team0: Port device team_slave_0 added [ 918.736007][T13741] bridge0: port 1(bridge_slave_0) entered blocking state [ 918.743506][ T5224] Bluetooth: hci3: command tx timeout [ 918.750243][T13741] bridge0: port 1(bridge_slave_0) entered disabled state [ 918.757653][T13741] bridge_slave_0: entered allmulticast mode [ 918.764913][T13741] bridge_slave_0: entered promiscuous mode [ 918.790831][T13745] bridge0: port 2(bridge_slave_1) entered blocking state [ 918.798676][T13745] bridge0: port 2(bridge_slave_1) entered disabled state [ 918.806305][T13745] bridge_slave_1: entered allmulticast mode [ 918.815816][T13745] bridge_slave_1: entered promiscuous mode [ 918.824912][T13740] team0: Port device team_slave_1 added [ 918.838054][T13741] bridge0: port 2(bridge_slave_1) entered blocking state [ 918.853080][T13741] bridge0: port 2(bridge_slave_1) entered disabled state [ 918.860273][T13741] bridge_slave_1: entered allmulticast mode [ 918.869417][T13741] bridge_slave_1: entered promiscuous mode [ 918.992235][T13745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 919.112072][ T2971] hsr_slave_0: left promiscuous mode [ 919.118704][ T2971] hsr_slave_1: left promiscuous mode [ 919.138749][ T2971] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 919.151583][ T2971] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 919.160200][ T2971] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 919.167852][ T2971] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 919.188372][ T2971] veth1_macvtap: left promiscuous mode [ 919.194068][ T2971] veth0_macvtap: left promiscuous mode [ 919.199606][ T2971] veth1_vlan: left promiscuous mode [ 919.205153][ T2971] veth0_vlan: left promiscuous mode [ 919.714575][ T2971] team0 (unregistering): Port device team_slave_1 removed [ 919.761524][ T2971] team0 (unregistering): Port device team_slave_0 removed [ 920.280926][T13741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 920.296383][T13745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 920.319500][T13740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 920.326891][T13740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 920.353255][ T5224] Bluetooth: hci0: command tx timeout [ 920.358711][T13740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 920.375977][T13747] chnl_net:caif_netlink_parms(): no params data found [ 920.389575][T13741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 920.412441][ T5224] Bluetooth: hci5: command tx timeout [ 920.464136][T13740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 920.471106][T13740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 920.500377][T13740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 920.547870][T13745] team0: Port device team_slave_0 added [ 920.565698][T13745] team0: Port device team_slave_1 added [ 920.608957][T13741] team0: Port device team_slave_0 added [ 920.619461][T13741] team0: Port device team_slave_1 added [ 920.626647][T13749] chnl_net:caif_netlink_parms(): no params data found [ 920.652580][ T5224] Bluetooth: hci1: command tx timeout [ 920.711723][T13745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 920.731134][T13745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 920.757984][ T5224] Bluetooth: hci2: command tx timeout [ 920.763592][T13745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 920.777035][T13745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 920.787919][T13745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 920.816598][ T5224] Bluetooth: hci3: command tx timeout [ 920.822039][T13745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 920.905567][T13740] hsr_slave_0: entered promiscuous mode [ 920.911853][T13740] hsr_slave_1: entered promiscuous mode [ 920.919073][T13740] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 920.926896][T13740] Cannot create hsr debugfs directory [ 920.947302][T13741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 920.954343][T13741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 920.980872][T13741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 921.009353][T13745] hsr_slave_0: entered promiscuous mode [ 921.016291][T13745] hsr_slave_1: entered promiscuous mode [ 921.023263][T13745] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 921.030822][T13745] Cannot create hsr debugfs directory [ 921.049554][T13741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 921.059180][T13741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 921.085343][T13741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 921.202155][T13747] bridge0: port 1(bridge_slave_0) entered blocking state [ 921.209594][T13747] bridge0: port 1(bridge_slave_0) entered disabled state [ 921.217324][T13747] bridge_slave_0: entered allmulticast mode [ 921.224690][T13747] bridge_slave_0: entered promiscuous mode [ 921.235235][T13747] bridge0: port 2(bridge_slave_1) entered blocking state [ 921.242569][T13747] bridge0: port 2(bridge_slave_1) entered disabled state [ 921.249695][T13747] bridge_slave_1: entered allmulticast mode [ 921.257052][T13747] bridge_slave_1: entered promiscuous mode [ 921.347596][T13747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 921.360123][T13747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 921.407593][T13749] bridge0: port 1(bridge_slave_0) entered blocking state [ 921.415247][T13749] bridge0: port 1(bridge_slave_0) entered disabled state [ 921.422732][T13749] bridge_slave_0: entered allmulticast mode [ 921.429418][T13749] bridge_slave_0: entered promiscuous mode [ 921.461333][T13741] hsr_slave_0: entered promiscuous mode [ 921.468315][T13741] hsr_slave_1: entered promiscuous mode [ 921.478092][T13741] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 921.485716][T13741] Cannot create hsr debugfs directory [ 921.516808][T13749] bridge0: port 2(bridge_slave_1) entered blocking state [ 921.528552][T13749] bridge0: port 2(bridge_slave_1) entered disabled state [ 921.537630][T13749] bridge_slave_1: entered allmulticast mode [ 921.548901][T13749] bridge_slave_1: entered promiscuous mode [ 921.629323][T13747] team0: Port device team_slave_0 added [ 921.639438][T13747] team0: Port device team_slave_1 added [ 921.685421][ T2971] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.718415][T13749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 921.746394][ T2971] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.794845][T13749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 921.844265][ T2971] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.859063][T13747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 921.866112][T13747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 921.894895][T13747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 921.944910][T13740] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.007918][ T2971] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.024036][T13747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 922.031326][T13747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 922.063128][T13747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 922.098135][T13749] team0: Port device team_slave_0 added [ 922.130321][T13740] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.160352][T13749] team0: Port device team_slave_1 added [ 922.230136][T13740] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.251860][T13747] hsr_slave_0: entered promiscuous mode [ 922.258164][T13747] hsr_slave_1: entered promiscuous mode [ 922.269779][T13747] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 922.277376][T13747] Cannot create hsr debugfs directory [ 922.327240][T13749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 922.334901][T13749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 922.361862][T13749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 922.375239][T13749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 922.382193][T13749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 922.408569][T13749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 922.419166][ T5224] Bluetooth: hci0: command tx timeout [ 922.442310][T13740] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.503929][ T5224] Bluetooth: hci5: command tx timeout [ 922.568958][T13749] hsr_slave_0: entered promiscuous mode [ 922.575885][T13749] hsr_slave_1: entered promiscuous mode [ 922.582166][T13749] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 922.590384][T13749] Cannot create hsr debugfs directory [ 922.671767][T13745] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.732482][ T5224] Bluetooth: hci1: command tx timeout [ 922.776356][T13745] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.822666][ T5224] Bluetooth: hci2: command tx timeout [ 922.834132][T13745] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.896281][T13745] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.903210][ T5224] Bluetooth: hci3: command tx timeout [ 922.981060][ T2971] bridge_slave_1: left allmulticast mode [ 922.986895][ T2971] bridge_slave_1: left promiscuous mode [ 922.992828][ T2971] bridge0: port 2(bridge_slave_1) entered disabled state [ 923.004344][ T2971] bridge_slave_0: left allmulticast mode [ 923.010001][ T2971] bridge_slave_0: left promiscuous mode [ 923.025544][ T2971] bridge0: port 1(bridge_slave_0) entered disabled state [ 923.036770][ T2971] bridge_slave_1: left allmulticast mode [ 923.043164][ T2971] bridge_slave_1: left promiscuous mode [ 923.048801][ T2971] bridge0: port 2(bridge_slave_1) entered disabled state [ 923.057791][ T2971] bridge_slave_0: left allmulticast mode [ 923.063928][ T2971] bridge_slave_0: left promiscuous mode [ 923.069639][ T2971] bridge0: port 1(bridge_slave_0) entered disabled state [ 923.079555][ T2971] veth0: left allmulticast mode [ 923.086245][ T2971] veth0: left promiscuous mode [ 923.091104][ T2971] bridge0: port 3(veth0) entered disabled state [ 923.102567][ T2971] bridge_slave_1: left allmulticast mode [ 923.108414][ T2971] bridge_slave_1: left promiscuous mode [ 923.114220][ T2971] bridge0: port 2(bridge_slave_1) entered disabled state [ 923.128594][ T2971] bridge_slave_0: left allmulticast mode [ 923.134441][ T2971] bridge_slave_0: left promiscuous mode [ 923.140174][ T2971] bridge0: port 1(bridge_slave_0) entered disabled state [ 923.297427][ T2971] bridge0: left allmulticast mode [ 923.302540][ T2971] bridge0: left promiscuous mode [ 923.312127][ T2971] bridge0: left allmulticast mode [ 923.319074][ T2971] bridge0: left promiscuous mode [ 924.229067][ T2971] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 924.240406][ T2971] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 924.265961][ T2971] bond0 (unregistering): Released all slaves [ 924.406729][ T2971] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 924.417802][ T2971] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 924.430827][ T2971] bond0 (unregistering): Released all slaves [ 924.502619][ T5224] Bluetooth: hci0: command tx timeout [ 924.570455][ T2971] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 924.581095][ T2971] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 924.582661][ T5224] Bluetooth: hci5: command tx timeout [ 924.597551][ T2971] bond0 (unregistering): Released all slaves [ 924.813184][ T5224] Bluetooth: hci1: command tx timeout [ 924.894744][ T5224] Bluetooth: hci2: command tx timeout [ 924.972918][ T5224] Bluetooth: hci3: command tx timeout [ 925.026461][T13740] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 925.055690][T13740] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 925.070516][T13740] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 925.085734][T13740] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 925.239238][T13740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 925.266664][T13740] 8021q: adding VLAN 0 to HW filter on device team0 [ 925.294367][ T2944] bridge0: port 1(bridge_slave_0) entered blocking state [ 925.301488][ T2944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 925.316569][ T2944] bridge0: port 2(bridge_slave_1) entered blocking state [ 925.323741][ T2944] bridge0: port 2(bridge_slave_1) entered forwarding state [ 925.488121][T13749] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 925.596202][T13749] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 925.624725][T13740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 925.701682][T13749] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 925.765124][T13740] veth0_vlan: entered promiscuous mode [ 925.858059][T13749] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 925.924859][T13740] veth1_vlan: entered promiscuous mode [ 926.016609][T13740] veth0_macvtap: entered promiscuous mode [ 926.038627][T13740] veth1_macvtap: entered promiscuous mode [ 926.098911][T13740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 926.122170][T13740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.132907][T13740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 926.143423][T13740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.153767][T13740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 926.164294][T13740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.174283][T13740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 926.185135][T13740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.197406][T13740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 926.208062][T13740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 926.232527][T13740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.252554][T13740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 926.266264][T13740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.276118][T13740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 926.286636][T13740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.296592][T13740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 926.307124][T13740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.318628][T13740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 926.340154][T13740] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.348977][T13740] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.358753][T13740] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.367942][T13740] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.383681][ T2971] hsr_slave_0: left promiscuous mode [ 926.389418][ T2971] hsr_slave_1: left promiscuous mode [ 926.395648][ T2971] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 926.403095][ T2971] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 926.410727][ T2971] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 926.419144][ T2971] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 926.429504][ T2971] hsr_slave_0: left promiscuous mode [ 926.440456][ T2971] hsr_slave_1: left promiscuous mode [ 926.446331][ T2971] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 926.453749][ T2971] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 926.461360][ T2971] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 926.468964][ T2971] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 926.481303][ T2971] hsr_slave_0: left promiscuous mode [ 926.487683][ T2971] hsr_slave_1: left promiscuous mode [ 926.495153][ T2971] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 926.502745][ T2971] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 926.510378][ T2971] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 926.518334][ T2971] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 926.566623][ T2971] veth1_macvtap: left promiscuous mode [ 926.572128][ T2971] veth0_macvtap: left promiscuous mode [ 926.578247][ T2971] veth1_vlan: left promiscuous mode [ 926.583778][ T2971] veth0_vlan: left promiscuous mode [ 926.590529][ T2971] veth1_macvtap: left promiscuous mode [ 926.596126][ T2971] veth0_macvtap: left promiscuous mode [ 926.601680][ T2971] veth1_vlan: left promiscuous mode [ 926.607519][ T2971] veth0_vlan: left promiscuous mode [ 926.614396][ T2971] veth1_macvtap: left promiscuous mode [ 926.619943][ T2971] veth0_macvtap: left promiscuous mode [ 926.625683][ T2971] veth1_vlan: left promiscuous mode [ 927.326455][ T2971] team0 (unregistering): Port device team_slave_1 removed [ 927.395402][ T2971] team0 (unregistering): Port device team_slave_0 removed [ 928.276215][ T2971] team0 (unregistering): Port device team_slave_1 removed [ 928.326756][ T2971] team0 (unregistering): Port device team_slave_0 removed [ 929.214589][ T2971] team0 (unregistering): Port device team_slave_1 removed [ 929.264529][ T2971] team0 (unregistering): Port device team_slave_0 removed [ 929.916670][T13745] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 929.941374][T13745] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 930.012408][T13745] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 930.050980][ T1114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 930.067466][T13745] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 930.067549][ T1114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 930.141051][T13741] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 930.191106][T13741] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 930.203180][T13741] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 930.212128][ T2944] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 930.232524][ T2944] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 930.276183][T13741] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 930.305387][T13747] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 930.329472][T13747] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 930.341186][T13747] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 930.372717][T13747] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 930.571826][T13749] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 930.599785][T13749] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 930.678835][T13749] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 930.729133][T13749] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 930.805273][T13787] bridge0: port 2(bridge_slave_1) entered disabled state [ 930.820114][T13787] bridge0: port 2(bridge_slave_1) entered blocking state [ 930.828254][T13787] bridge0: port 2(bridge_slave_1) entered forwarding state [ 930.976323][T13741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 931.193311][T13741] 8021q: adding VLAN 0 to HW filter on device team0 [ 931.218497][T13745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 931.316287][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 931.323592][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 931.360239][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 931.367491][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 931.388576][T13745] 8021q: adding VLAN 0 to HW filter on device team0 [ 931.437031][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 931.444140][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 931.500663][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 931.507847][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 931.583840][T13749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 931.605850][T13747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 931.695892][T13747] 8021q: adding VLAN 0 to HW filter on device team0 [ 931.751026][T13749] 8021q: adding VLAN 0 to HW filter on device team0 [ 931.775647][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.826661][ T1049] bridge0: port 1(bridge_slave_0) entered blocking state [ 931.833828][ T1049] bridge0: port 1(bridge_slave_0) entered forwarding state [ 931.850590][ T1049] bridge0: port 2(bridge_slave_1) entered blocking state [ 931.857765][ T1049] bridge0: port 2(bridge_slave_1) entered forwarding state [ 931.875185][ T1049] bridge0: port 1(bridge_slave_0) entered blocking state [ 931.882387][ T1049] bridge0: port 1(bridge_slave_0) entered forwarding state [ 931.925074][T13741] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 931.936861][T13741] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 931.967042][ T1049] bridge0: port 2(bridge_slave_1) entered blocking state [ 931.974657][ T1049] bridge0: port 2(bridge_slave_1) entered forwarding state [ 932.101797][T13749] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 932.278655][T13747] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 932.527465][T13741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 932.565127][T13745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 932.662112][T13741] veth0_vlan: entered promiscuous mode [ 932.738486][T11042] Bluetooth: hci3: command 0x0405 tx timeout [ 932.777891][T13741] veth1_vlan: entered promiscuous mode [ 932.834424][T13741] veth0_macvtap: entered promiscuous mode [ 932.869605][T13749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 933.016184][T13741] veth1_macvtap: entered promiscuous mode [ 933.509951][T13745] veth0_vlan: entered promiscuous mode [ 933.578773][T13741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 933.595682][T13741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 933.606089][T13741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 933.617441][T13741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 933.628596][T13741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 933.657217][T13741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 933.675270][T13741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 933.686181][T13741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 933.697301][T13741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 933.708568][T13741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 933.726776][T13745] veth1_vlan: entered promiscuous mode [ 933.736833][T13741] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 933.746569][T13741] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 933.756368][T13741] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 933.765120][T13741] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 933.781822][T13747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 933.832637][ T5222] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 933.858796][T13749] veth0_vlan: entered promiscuous mode [ 933.899683][T13749] veth1_vlan: entered promiscuous mode [ 933.957813][T13745] veth0_macvtap: entered promiscuous mode [ 933.977365][ T6955] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 934.001680][ T6955] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 934.006582][T13745] veth1_macvtap: entered promiscuous mode [ 934.046054][ T5222] usb 1-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 934.068151][ T6955] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 934.074521][T13749] veth0_macvtap: entered promiscuous mode [ 934.082932][ T6955] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 934.089715][ T5222] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.098879][T13749] veth1_macvtap: entered promiscuous mode [ 934.113085][ T5222] usb 1-1: Product: syz [ 934.117347][ T5222] usb 1-1: Manufacturer: syz [ 934.122039][ T5222] usb 1-1: SerialNumber: syz [ 934.122766][T13745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 934.147620][T13745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 934.148514][ T5222] usb 1-1: config 0 descriptor?? [ 934.157532][T13745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 934.157554][T13745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 934.157568][T13745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 934.157583][T13745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 934.159067][T13745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 934.227377][T13749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 934.237863][T13749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 934.262399][T13749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 934.282351][T13749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 934.292182][T13749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 934.313904][T13749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 934.352465][T13749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 934.382585][T13749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 934.386705][ T5222] cx82310_eth 1-1:0.0: probe with driver cx82310_eth failed with error -22 [ 934.402572][T13749] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 934.426894][T13745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 934.462671][T13745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 934.482379][T13745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 934.498044][T13745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 934.513129][T13745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 934.531921][T13745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 934.553925][T13745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 934.585227][T13749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 934.602387][T13749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 934.612232][T13749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 934.642664][T13749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 934.653781][T13749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 934.667978][T13749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 934.679810][T13749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 934.690641][T13749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 934.702281][T13749] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 934.713320][T13749] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.722037][T13749] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.731419][T13749] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.740864][T13749] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.755851][T13745] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.764908][T13745] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.777490][T13745] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.787835][T13745] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.789755][ T5222] cxacru 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 934.809278][ T5222] usb 1-1: USB disconnect, device number 54 [ 934.965327][ T1049] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 934.965989][T13747] veth0_vlan: entered promiscuous mode [ 934.980258][ T1049] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 935.014466][T13747] veth1_vlan: entered promiscuous mode [ 935.027849][ T2944] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 935.040918][ T2944] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 935.081649][ T1049] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 935.090153][ T1049] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 935.123592][ T1049] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 935.131429][ T1049] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 935.140945][T13747] veth0_macvtap: entered promiscuous mode [ 935.160851][T13747] veth1_macvtap: entered promiscuous mode [ 935.211714][T13747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 935.244669][T13747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 935.278943][T13747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 935.302440][T13747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 935.328374][T13747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 935.349162][T13747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 935.375776][T13747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 935.394116][T13747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 935.411801][T13747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 935.439947][T13747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 935.476085][T13747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 935.531797][T13747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 935.579323][T13747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 935.626568][T13747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 935.651490][T13747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 935.671324][T13747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 935.684364][T13747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 935.715347][T13747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 935.732756][T13747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 935.757144][T13747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 935.816432][T13747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 935.872199][T13747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 935.910365][T13747] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.933572][T13747] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.963904][T13747] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 936.009172][T13747] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 936.570648][ T1852] IPVS: starting estimator thread 0... [ 936.672916][T13851] IPVS: using max 18 ests per chain, 43200 per kthread [ 936.698146][ T2944] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 936.733876][ T2944] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 936.885599][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 936.912582][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 938.842731][ T5339] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 938.905277][ T29] audit: type=1326 audit(1725185047.681:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13901 comm="syz.1.2463" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f21f1b79eb9 code=0x0 [ 939.662527][ T5339] usb 4-1: Using ep0 maxpacket: 16 [ 939.669740][ T5339] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 939.721572][ T25] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 939.732955][ T5339] usb 4-1: New USB device found, idVendor=05ac, idProduct=0272, bcdDevice= 0.40 [ 939.742022][ T5339] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.751089][ T5339] usb 4-1: Product: syz [ 939.762650][ T5339] usb 4-1: Manufacturer: syz [ 939.767273][ T5339] usb 4-1: SerialNumber: syz [ 939.793948][ T5339] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input31 [ 939.902476][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 939.940670][ T25] usb 1-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 939.959686][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.981884][ T25] usb 1-1: Product: syz [ 939.995031][ T25] usb 1-1: Manufacturer: syz [ 940.009632][ T25] usb 1-1: SerialNumber: syz [ 940.023793][ T25] usb 1-1: config 0 descriptor?? [ 940.154721][ T5339] usb 4-1: USB disconnect, device number 51 [ 940.161246][ T4662] bcm5974 4-1:1.0: could not read from device [ 940.186965][ T4662] bcm5974 4-1:1.0: could not read from device [ 940.480240][T13933] bridge0: port 2(bridge_slave_1) entered disabled state [ 940.499190][T13933] bridge0: port 2(bridge_slave_1) entered blocking state [ 940.506483][T13933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 940.673417][ T25] rtl8150 1-1:0.0: eth1: rtl8150 is detected [ 941.298601][ T5274] usb 1-1: USB disconnect, device number 55 [ 943.439276][T13963] input: syz1 as /devices/virtual/input/input32 [ 944.703876][T13981] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 945.043096][T13987] bridge0: port 2(bridge_slave_1) entered disabled state [ 945.078012][T13987] bridge0: port 2(bridge_slave_1) entered blocking state [ 945.085161][T13987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 946.243383][T14020] random: crng reseeded on system resumption [ 946.523804][T14025] gfs2: path_lookup on c::: returned error -2 [ 948.480094][T14061] bridge0: port 2(bridge_slave_1) entered disabled state [ 948.494164][T14061] bridge0: port 2(bridge_slave_1) entered blocking state [ 948.501313][T14061] bridge0: port 2(bridge_slave_1) entered forwarding state [ 949.996940][T14082] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2531'. [ 950.328887][ T25] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 950.575041][ T25] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 950.605891][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 950.638871][ T25] usb 5-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 950.666085][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 950.691849][ T25] usb 5-1: Product: syz [ 950.702450][ T25] usb 5-1: Manufacturer: syz [ 950.711683][ T25] usb 5-1: SerialNumber: syz [ 950.730760][ T25] usb 5-1: config 0 descriptor?? [ 950.750325][ T25] ims_pcu 5-1:0.0: Missing CDC union descriptor [ 950.770832][T14095] random: crng reseeded on system resumption [ 950.778999][ T25] ims_pcu 5-1:0.0: probe with driver ims_pcu failed with error -22 [ 950.962717][ T25] usb 5-1: USB disconnect, device number 54 [ 951.199424][T14101] netlink: 512 bytes leftover after parsing attributes in process `syz.0.2537'. [ 952.542172][T14095] binder: BINDER_SET_CONTEXT_MGR already set [ 952.570774][T14095] binder: 14093:14095 ioctl 4018620d 20000040 returned -16 [ 952.585475][T14095] binder: 14093:14095 ioctl c0306201 200002c0 returned -14 [ 952.826882][T14118] bridge0: port 2(bridge_slave_1) entered disabled state [ 952.857091][T14118] bridge0: port 2(bridge_slave_1) entered blocking state [ 952.861239][T14126] xt_l2tp: missing protocol rule (udp|l2tpip) [ 952.864319][T14118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 953.349541][ T5224] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 953.356173][ T5224] Bluetooth: Wrong link type (-22) [ 953.361945][ T5224] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 953.368563][ T5224] Bluetooth: Wrong link type (-22) [ 953.638450][T14133] fuse: Bad value for 'fd' [ 954.745629][ T5339] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 954.954183][ T5339] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 955.034773][ T5339] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 955.069952][ T5339] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 955.091502][ T5339] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 955.118741][ T5339] usb 1-1: config 0 descriptor?? [ 955.183657][T14163] xt_l2tp: missing protocol rule (udp|l2tpip) [ 955.766952][T14167] fuse: Bad value for 'fd' [ 956.155414][T14172] random: crng reseeded on system resumption [ 956.332840][ T5372] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 956.389921][ T5339] uclogic 0003:256C:006D.0017: v1 frame probing failed: -71 [ 956.434216][ T5339] uclogic 0003:256C:006D.0017: failed probing parameters: -71 [ 956.474110][ T5339] uclogic 0003:256C:006D.0017: probe with driver uclogic failed with error -71 [ 956.509630][ T5339] usb 1-1: USB disconnect, device number 56 [ 956.515776][ T5372] usb 4-1: device descriptor read/64, error -71 [ 956.804679][ T5372] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 956.982430][ T5372] usb 4-1: device descriptor read/64, error -71 [ 957.004302][T14178] input: syz1 as /devices/virtual/input/input36 [ 957.080960][T14172] binder: 14168:14172 ioctl c0306201 200002c0 returned -14 [ 957.112878][ T5372] usb usb4-port1: attempt power cycle [ 957.317991][T14183] bridge0: port 2(bridge_slave_1) entered disabled state [ 957.334252][T14183] bridge0: port 2(bridge_slave_1) entered blocking state [ 957.341411][T14183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 957.532575][ T5372] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 957.583886][ T5372] usb 4-1: device descriptor read/8, error -71 [ 957.658370][T14192] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 957.873127][ T5372] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 957.934181][ T5372] usb 4-1: device descriptor read/8, error -71 [ 958.067775][ T5372] usb usb4-port1: unable to enumerate USB device [ 958.257655][T14202] xt_l2tp: missing protocol rule (udp|l2tpip) [ 959.002620][ T5274] usb 3-1: new full-speed USB device number 60 using dummy_hcd [ 959.225497][ T5274] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 959.251622][ T5274] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 959.285272][ T5274] usb 3-1: config 0 descriptor?? [ 959.305782][ T5274] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 960.431321][ T29] audit: type=1326 audit(1725185069.201:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14224 comm="syz.0.2584" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9f34179eb9 code=0x0 [ 960.664048][ T5274] gp8psk: usb out operation failed. [ 960.669787][ T5274] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 960.682120][T14233] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 960.696457][ T5274] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 960.726227][T14233] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 960.744015][ T5274] usb 3-1: USB disconnect, device number 60 [ 961.422664][ T5274] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 961.622597][ T5274] usb 4-1: device descriptor read/64, error -71 [ 961.892992][ T5372] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 961.912434][ T5274] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 962.072660][ T5274] usb 4-1: device descriptor read/64, error -71 [ 962.074439][ T5372] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 962.090079][ T5372] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 962.100052][ T5372] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 962.109310][ T5372] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 962.118994][ T5372] usb 3-1: config 0 descriptor?? [ 962.192709][ T5274] usb usb4-port1: attempt power cycle [ 962.438911][ T29] audit: type=1326 audit(1725185071.211:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14268 comm="syz.0.2600" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9f34179eb9 code=0x0 [ 962.490563][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:2. Sending cookies. [ 962.602454][ T5274] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 962.693435][ T5274] usb 4-1: device descriptor read/8, error -71 [ 962.992502][ T5274] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 963.053462][ T5274] usb 4-1: device descriptor read/8, error -71 [ 963.182653][ T5274] usb usb4-port1: unable to enumerate USB device [ 963.360342][ T5372] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0018/input/input37 [ 963.481176][ T5372] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0018/input/input38 [ 963.524903][ T5372] uclogic 0003:256C:006D.0018: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.2-1/input0 [ 963.649831][ T5372] usb 3-1: USB disconnect, device number 61 [ 964.404495][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 964.667389][ T29] audit: type=1326 audit(1725185073.441:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14310 comm="syz.4.2617" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3196379eb9 code=0x0 [ 965.023349][T14320] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 965.032846][T14320] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 965.056499][T14320] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 965.078249][T14320] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 965.096307][T14320] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 965.137691][T14320] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 965.158395][T14320] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 965.173949][T14320] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 965.189239][T14320] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 965.212799][ T5274] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 965.239624][T14320] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 965.249790][T14320] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 965.274018][T14320] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 965.312860][T14325] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 965.390928][T14325] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 965.404522][ T5274] usb 2-1: device descriptor read/64, error -71 [ 965.717128][ T5274] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 965.883632][ T5274] usb 2-1: device descriptor read/64, error -71 [ 966.028415][ T5274] usb usb2-port1: attempt power cycle [ 966.086798][T14343] fuse: Unknown parameter '0x0000000000000003' [ 966.101205][T14343] netlink: 'syz.4.2631': attribute type 1 has an invalid length. [ 966.198028][T14346] bond1: entered allmulticast mode [ 966.208945][T14346] 8021q: adding VLAN 0 to HW filter on device bond1 [ 966.472607][ T5274] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 966.506432][ T5274] usb 2-1: device descriptor read/8, error -71 [ 966.782605][ T5274] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 966.850227][ T5274] usb 2-1: device descriptor read/8, error -71 [ 967.065434][ T5224] Bluetooth: hci5: command 0x0c1a tx timeout [ 967.133265][ T5224] Bluetooth: hci1: command 0x0c1a tx timeout [ 967.169930][ T5274] usb usb2-port1: unable to enumerate USB device [ 967.223121][ T5224] Bluetooth: hci2: command 0x0c1a tx timeout [ 967.303539][ T5224] Bluetooth: hci3: command 0x0405 tx timeout [ 967.710991][T14377] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 967.723154][T14377] syz.0.2645(14377): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 968.043549][ T8] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 968.224450][T14404] bridge0: port 2(bridge_slave_1) entered disabled state [ 968.243177][T14404] bridge0: port 2(bridge_slave_1) entered blocking state [ 968.250295][T14404] bridge0: port 2(bridge_slave_1) entered forwarding state [ 968.271038][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 968.304639][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 968.349882][ T8] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 968.377769][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 968.433780][ T8] usb 5-1: config 0 descriptor?? [ 968.654289][T14413] xt_l2tp: missing protocol rule (udp|l2tpip) [ 969.143329][T11042] Bluetooth: hci5: command 0x0c1a tx timeout [ 969.391600][T11042] Bluetooth: hci1: command 0x0c1a tx timeout [ 969.397964][ T5238] Bluetooth: hci2: command 0x0c1a tx timeout [ 969.404372][T11042] Bluetooth: hci3: command 0x0405 tx timeout [ 969.976953][T14390] input: syz1 as /devices/virtual/input/input39 [ 970.165107][ T8] uclogic 0003:256C:006D.0019: v1 frame probing failed: -71 [ 970.259155][ T8] uclogic 0003:256C:006D.0019: failed probing parameters: -71 [ 970.268850][ T8] uclogic 0003:256C:006D.0019: probe with driver uclogic failed with error -71 [ 970.791756][ T8] usb 5-1: USB disconnect, device number 55 [ 971.332561][T10716] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 971.452506][T10891] Bluetooth: hci3: command 0x0405 tx timeout [ 971.452623][ T5224] Bluetooth: hci2: command 0x0c1a tx timeout [ 971.458671][T10891] Bluetooth: hci1: command 0x0c1a tx timeout [ 971.464689][T11042] Bluetooth: hci5: command 0x0c1a tx timeout [ 971.542601][T10716] usb 2-1: Using ep0 maxpacket: 8 [ 971.562063][T10716] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 971.593551][T10716] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 971.616395][T10716] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 971.631505][T10716] usb 2-1: Product: syz [ 971.638832][T10716] usb 2-1: Manufacturer: syz [ 971.649675][T10716] usb 2-1: SerialNumber: syz [ 971.784017][ T8] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 971.822663][ T5273] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 971.901733][T10716] usb 2-1: Handspring Visor / Palm OS: No valid connect info available [ 971.924942][T10716] usb 2-1: Handspring Visor / Palm OS: port 2, is for unknown use [ 971.937784][T10716] usb 2-1: Handspring Visor / Palm OS: port 11, is for unknown use [ 971.947928][T10716] usb 2-1: Handspring Visor / Palm OS: Number of ports: 2 [ 972.002435][ T5273] usb 3-1: device descriptor read/64, error -71 [ 972.014152][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 972.045749][ T8] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 972.103414][ T8] usb 5-1: New USB device found, idVendor=05ac, idProduct=0272, bcdDevice= 0.40 [ 972.112601][T10716] usb 2-1: palm_os_3_probe - error -71 getting bytes available request [ 972.125333][T10716] visor 2-1:1.0: Handspring Visor / Palm OS converter detected [ 972.135371][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.154282][ T8] usb 5-1: Product: syz [ 972.166686][T10716] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 972.175867][ T8] usb 5-1: Manufacturer: syz [ 972.195845][ T8] usb 5-1: SerialNumber: syz [ 972.204459][T10716] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 972.229767][ T8] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input40 [ 972.244977][T10716] usb 2-1: USB disconnect, device number 66 [ 972.267562][T10716] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 972.301941][T10716] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 972.313364][T10716] visor 2-1:1.0: device disconnected [ 972.325504][ T5273] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 972.429385][ T4662] bcm5974 5-1:1.0: could not read from device [ 972.443191][ T4662] bcm5974 5-1:1.0: could not read from device [ 972.455937][ T8] usb 5-1: USB disconnect, device number 56 [ 972.461304][ T4662] bcm5974 5-1:1.0: could not read from device [ 972.492481][ T5273] usb 3-1: device descriptor read/64, error -71 [ 972.621410][ T5273] usb usb3-port1: attempt power cycle [ 973.119408][ T5273] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 973.177948][T14446] xt_l2tp: missing protocol rule (udp|l2tpip) [ 973.276061][ T5273] usb 3-1: device descriptor read/8, error -71 [ 973.624516][ T5273] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 973.628078][ T5224] Bluetooth: hci3: command 0x0405 tx timeout [ 973.775436][ T5273] usb 3-1: device descriptor read/8, error -71 [ 973.917350][ T5273] usb usb3-port1: unable to enumerate USB device [ 974.414740][ T29] audit: type=1326 audit(1725185083.191:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14453 comm="syz.3.2674" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa087d79eb9 code=0x0 [ 974.783035][T14460] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 974.801458][T14460] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 974.818612][T14460] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 974.830885][T14460] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 974.952938][T14463] bridge0: port 2(bridge_slave_1) entered disabled state [ 974.985589][T14463] bridge0: port 2(bridge_slave_1) entered blocking state [ 974.993010][T14463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 975.920140][T14477] misc userio: No port type given on /dev/userio [ 976.187801][T14483] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 976.203972][T14483] overlayfs: missing 'lowerdir' [ 976.376880][T14489] loop7: detected capacity change from 0 to 16384 [ 976.423827][T14489] loop7: detected capacity change from 16384 to 16383 [ 976.552426][ T8] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 976.723099][T14495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2689'. [ 976.732655][ T8] usb 4-1: device descriptor read/64, error -71 [ 976.812433][ T5224] Bluetooth: hci1: command 0x0c1a tx timeout [ 976.812564][T11042] Bluetooth: hci5: command 0x0c1a tx timeout [ 976.893063][ T5224] Bluetooth: hci3: command 0x0405 tx timeout [ 976.893095][T11042] Bluetooth: hci2: command 0x0c1a tx timeout [ 977.012464][ T8] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 977.032678][T10716] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 977.141139][ T29] audit: type=1326 audit(1725185085.911:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14504 comm="syz.4.2693" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3196379eb9 code=0x0 [ 977.176428][ T8] usb 4-1: device descriptor read/64, error -71 [ 977.246180][T10716] usb 3-1: Using ep0 maxpacket: 32 [ 977.331831][ T8] usb usb4-port1: attempt power cycle [ 977.362990][T10716] usb 3-1: config 32 has too many interfaces: 160, using maximum allowed: 32 [ 977.399202][T10716] usb 3-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 977.576204][T10716] usb 3-1: config 32 has 0 interfaces, different from the descriptor's value: 160 [ 977.710500][T10716] usb 3-1: New USB device found, idVendor=1bc7, idProduct=1041, bcdDevice=54.7c [ 977.792429][T10716] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 977.811536][T10716] usb 3-1: Product: syz [ 977.820918][T10716] usb 3-1: Manufacturer: syz [ 977.839440][T10716] usb 3-1: SerialNumber: syz [ 977.852752][ T8] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 977.908605][ T8] usb 4-1: device descriptor read/8, error -71 [ 977.983703][T14517] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 978.032200][T14517] overlayfs: missing 'lowerdir' [ 978.041233][ T29] audit: type=1326 audit(1725185086.811:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14520 comm="syz.4.2699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3196379eb9 code=0x7ffc0000 [ 978.080811][ T29] audit: type=1326 audit(1725185086.811:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14520 comm="syz.4.2699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3196379eb9 code=0x7ffc0000 [ 978.107364][ T29] audit: type=1326 audit(1725185086.841:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14520 comm="syz.4.2699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3196379eb9 code=0x7ffc0000 [ 978.135747][T10716] usb 3-1: USB disconnect, device number 66 [ 978.141902][ T29] audit: type=1326 audit(1725185086.841:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14520 comm="syz.4.2699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3196379eb9 code=0x7ffc0000 [ 978.174332][ T29] audit: type=1326 audit(1725185086.841:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14520 comm="syz.4.2699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3196379eb9 code=0x7ffc0000 [ 978.199428][ T29] audit: type=1326 audit(1725185086.851:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14520 comm="syz.4.2699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3196379eb9 code=0x7ffc0000 [ 978.232457][ T8] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 978.243802][ T29] audit: type=1326 audit(1725185086.851:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14520 comm="syz.4.2699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3196379eb9 code=0x7ffc0000 [ 978.293437][ T8] usb 4-1: device descriptor read/8, error -71 [ 978.315667][ T29] audit: type=1326 audit(1725185086.851:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14520 comm="syz.4.2699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3196379eb9 code=0x7ffc0000 [ 978.423653][ T8] usb usb4-port1: unable to enumerate USB device [ 978.512906][ T5274] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 978.744263][ T5274] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 978.757696][ T5274] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 978.767478][ T5274] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 978.776819][ T5274] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 978.788220][ T5274] usb 2-1: config 0 descriptor?? [ 980.668699][T14573] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 980.680708][T14573] overlayfs: missing 'lowerdir' [ 980.726671][T14525] input: syz1 as /devices/virtual/input/input41 [ 980.911029][ T5274] uclogic 0003:256C:006D.001A: v1 frame probing failed: -71 [ 980.931992][ T5274] uclogic 0003:256C:006D.001A: failed probing parameters: -71 [ 980.948954][ T5274] uclogic 0003:256C:006D.001A: probe with driver uclogic failed with error -71 [ 980.979151][ T5274] usb 2-1: USB disconnect, device number 67 [ 981.020604][T14581] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2727'. [ 981.276427][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 981.276455][ T29] audit: type=1326 audit(1725185090.051:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14585 comm="syz.0.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f34179eb9 code=0x7ffc0000 [ 981.309781][ T29] audit: type=1326 audit(1725185090.051:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14585 comm="syz.0.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f34179eb9 code=0x7ffc0000 [ 981.332343][ T29] audit: type=1326 audit(1725185090.081:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14585 comm="syz.0.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7f9f34179eb9 code=0x7ffc0000 [ 981.925722][ T29] audit: type=1326 audit(1725185090.081:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14585 comm="syz.0.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f34179eb9 code=0x7ffc0000 [ 981.965232][ T29] audit: type=1326 audit(1725185090.081:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14585 comm="syz.0.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f34179eb9 code=0x7ffc0000 [ 982.872367][ T29] audit: type=1326 audit(1725185091.641:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14609 comm="syz.1.2735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21f1b79eb9 code=0x7ffc0000 [ 982.935061][ T29] audit: type=1326 audit(1725185091.641:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14609 comm="syz.1.2735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21f1b79eb9 code=0x7ffc0000 [ 982.963692][T14614] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2737'. [ 983.013428][ T29] audit: type=1326 audit(1725185091.671:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14609 comm="syz.1.2735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f21f1b79eb9 code=0x7ffc0000 [ 983.082368][ T29] audit: type=1326 audit(1725185091.671:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14609 comm="syz.1.2735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21f1b79eb9 code=0x7ffc0000 [ 983.120988][ T29] audit: type=1326 audit(1725185091.671:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14609 comm="syz.1.2735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f21f1b79eb9 code=0x7ffc0000 [ 983.269719][T14629] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2742'. [ 983.543656][T14638] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 983.968792][T14577] syz.4.2725: vmalloc error: size 2101248, failed to allocated page array size 4104, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 983.996723][T14577] CPU: 1 UID: 0 PID: 14577 Comm: syz.4.2725 Not tainted 6.11.0-rc5-syzkaller-00310-ge8784b0aef62 #0 [ 984.007525][T14577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 984.017597][T14577] Call Trace: [ 984.020890][T14577] [ 984.023832][T14577] dump_stack_lvl+0x241/0x360 [ 984.028538][T14577] ? __pfx_dump_stack_lvl+0x10/0x10 [ 984.033755][T14577] ? __pfx__printk+0x10/0x10 [ 984.038344][T14577] ? __rcu_read_unlock+0xa1/0x110 [ 984.043369][T14577] warn_alloc+0x278/0x410 [ 984.047705][T14577] ? __pfx_warn_alloc+0x10/0x10 [ 984.052577][T14577] ? hash_netiface_create+0x356/0x1040 [ 984.058054][T14577] ? __get_vm_area_node+0x23d/0x270 [ 984.063250][T14577] __vmalloc_node_range_noprof+0x6a2/0x1400 [ 984.069165][T14577] ? __kmalloc_cache_node_noprof+0x1d3/0x300 [ 984.075156][T14577] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 984.081469][T14577] ? hash_netiface_create+0x356/0x1040 [ 984.086923][T14577] ? __get_vm_area_node+0x23d/0x270 [ 984.092114][T14577] __vmalloc_node_range_noprof+0x5bc/0x1400 [ 984.097995][T14577] ? hash_netiface_create+0x356/0x1040 [ 984.103483][T14577] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 984.109809][T14577] ? rcu_is_watching+0x15/0xb0 [ 984.114564][T14577] ? trace_kmalloc+0x1f/0xd0 [ 984.119142][T14577] ? __kmalloc_node_noprof+0x247/0x440 [ 984.124587][T14577] ? __kvmalloc_node_noprof+0x72/0x190 [ 984.130034][T14577] __kvmalloc_node_noprof+0x142/0x190 [ 984.135405][T14577] ? hash_netiface_create+0x356/0x1040 [ 984.140884][T14577] hash_netiface_create+0x356/0x1040 [ 984.146168][T14577] ? __pfx_hash_netiface_create+0x10/0x10 [ 984.151877][T14577] ip_set_create+0xa5c/0x1900 [ 984.156541][T14577] ? ip_set_create+0x45e/0x1900 [ 984.161378][T14577] ? trace_raw_output_contention_end+0xca/0xd0 [ 984.167521][T14577] ? __pfx_ip_set_create+0x10/0x10 [ 984.172614][T14577] ? trace_contention_end+0x3c/0x120 [ 984.177901][T14577] ? nfnetlink_rcv_msg+0x225/0x1180 [ 984.183093][T14577] nfnetlink_rcv_msg+0xbec/0x1180 [ 984.188118][T14577] ? kernel_text_address+0xa7/0xe0 [ 984.193215][T14577] ? nfnetlink_rcv_msg+0x225/0x1180 [ 984.198414][T14577] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 984.203876][T14577] ? netlink_deliver_tap+0x19d/0x1b0 [ 984.209147][T14577] ? netlink_unicast+0x7c4/0x990 [ 984.214080][T14577] ? netlink_sendmsg+0x8e4/0xcb0 [ 984.219005][T14577] ? __sock_sendmsg+0x221/0x270 [ 984.223840][T14577] ? ____sys_sendmsg+0x525/0x7d0 [ 984.228765][T14577] ? __sys_sendmsg+0x2b0/0x3a0 [ 984.233516][T14577] ? do_syscall_64+0xf3/0x230 [ 984.238190][T14577] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 984.244278][T14577] netlink_rcv_skb+0x1e3/0x430 [ 984.249032][T14577] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 984.254484][T14577] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 984.259771][T14577] ? safesetid_security_capable+0xb2/0x1d0 [ 984.265565][T14577] ? bpf_lsm_capable+0x9/0x10 [ 984.270230][T14577] ? security_capable+0x90/0xb0 [ 984.275074][T14577] nfnetlink_rcv+0x297/0x2ad0 [ 984.279742][T14577] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 984.285455][T14577] ? __dev_queue_xmit+0x2da/0x3e90 [ 984.290559][T14577] ? __dev_queue_xmit+0x1763/0x3e90 [ 984.295745][T14577] ? kasan_save_track+0x51/0x80 [ 984.300585][T14577] ? do_syscall_64+0xf3/0x230 [ 984.305274][T14577] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 984.310373][T14577] ? __dev_queue_xmit+0x2da/0x3e90 [ 984.315475][T14577] ? __pfx___dev_queue_xmit+0x10/0x10 [ 984.320868][T14577] ? ref_tracker_free+0x643/0x7e0 [ 984.325880][T14577] ? __asan_memcpy+0x40/0x70 [ 984.330454][T14577] ? __pfx_ref_tracker_free+0x10/0x10 [ 984.335822][T14577] ? netlink_deliver_tap+0x2e/0x1b0 [ 984.341007][T14577] ? skb_clone+0x240/0x390 [ 984.345414][T14577] ? __pfx_lock_release+0x10/0x10 [ 984.350440][T14577] ? __netlink_deliver_tap+0x77e/0x7c0 [ 984.355915][T14577] ? netlink_deliver_tap+0x2e/0x1b0 [ 984.361118][T14577] netlink_unicast+0x7f6/0x990 [ 984.365892][T14577] ? __pfx_netlink_unicast+0x10/0x10 [ 984.371181][T14577] ? __virt_addr_valid+0x183/0x530 [ 984.376280][T14577] ? __check_object_size+0x49c/0x900 [ 984.381549][T14577] ? bpf_lsm_netlink_send+0x9/0x10 [ 984.386648][T14577] netlink_sendmsg+0x8e4/0xcb0 [ 984.391408][T14577] ? __pfx_netlink_sendmsg+0x10/0x10 [ 984.396680][T14577] ? __import_iovec+0x536/0x820 [ 984.401528][T14577] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 984.406800][T14577] ? security_socket_sendmsg+0x87/0xb0 [ 984.412250][T14577] ? __pfx_netlink_sendmsg+0x10/0x10 [ 984.417524][T14577] __sock_sendmsg+0x221/0x270 [ 984.422199][T14577] ____sys_sendmsg+0x525/0x7d0 [ 984.426995][T14577] ? __pfx_____sys_sendmsg+0x10/0x10 [ 984.432326][T14577] __sys_sendmsg+0x2b0/0x3a0 [ 984.436918][T14577] ? __pfx___sys_sendmsg+0x10/0x10 [ 984.442036][T14577] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 984.448354][T14577] ? do_syscall_64+0x100/0x230 [ 984.453107][T14577] ? do_syscall_64+0xb6/0x230 [ 984.457767][T14577] do_syscall_64+0xf3/0x230 [ 984.462250][T14577] ? clear_bhb_loop+0x35/0x90 [ 984.466911][T14577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 984.472786][T14577] RIP: 0033:0x7f3196379eb9 [ 984.477182][T14577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 984.496769][T14577] RSP: 002b:00007f31970dc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 984.505167][T14577] RAX: ffffffffffffffda RBX: 00007f3196515f80 RCX: 00007f3196379eb9 [ 984.513125][T14577] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 984.521095][T14577] RBP: 00007f31963e793e R08: 0000000000000000 R09: 0000000000000000 [ 984.529069][T14577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 984.537030][T14577] R13: 0000000000000000 R14: 00007f3196515f80 R15: 00007ffe8a12dbf8 [ 984.545014][T14577] [ 984.564946][T14577] Mem-Info: [ 984.568070][T14577] active_anon:265 inactive_anon:2969 isolated_anon:0 [ 984.568070][T14577] active_file:23127 inactive_file:35706 isolated_file:0 [ 984.568070][T14577] unevictable:768 dirty:70 writeback:0 [ 984.568070][T14577] slab_reclaimable:9658 slab_unreclaimable:103682 [ 984.568070][T14577] mapped:22934 shmem:1278 pagetables:733 [ 984.568070][T14577] sec_pagetables:0 bounce:0 [ 984.568070][T14577] kernel_misc_reclaimable:0 [ 984.568070][T14577] free:1296670 free_pcp:6493 free_cma:0 [ 984.617111][T14577] Node 0 active_anon:1060kB inactive_anon:11876kB active_file:92428kB inactive_file:142824kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:91736kB dirty:280kB writeback:0kB shmem:3576kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10032kB pagetables:2932kB sec_pagetables:0kB all_unreclaimable? no [ 984.638184][T14661] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2755'. [ 984.652523][T14577] Node 1 active_anon:0kB inactive_anon:0kB active_file:80kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 984.724787][T14577] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 984.756772][T14577] lowmem_reserve[]: 0 2469 2470 0 0 [ 984.763253][T14577] Node 0 DMA32 free:1245516kB boost:0kB min:34244kB low:42804kB high:51364kB reserved_highatomic:0KB active_anon:1056kB inactive_anon:11684kB active_file:91440kB inactive_file:142760kB unevictable:1536kB writepending:356kB present:3129332kB managed:2557028kB mlocked:0kB bounce:0kB free_pcp:5364kB local_pcp:4280kB free_cma:0kB [ 984.801279][T14577] lowmem_reserve[]: 0 0 1 0 0 [ 984.806234][T14577] Node 0 Normal free:12kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:4kB inactive_anon:44kB active_file:988kB inactive_file:64kB unevictable:0kB writepending:0kB present:1048576kB managed:1128kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 984.907049][T14577] lowmem_reserve[]: 0 0 0 0 0 [ 984.908693][T14577] Node 1 Normal free:3926316kB boost:0kB min:55644kB low:69552kB high:83460kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:80kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:21168kB local_pcp:15464kB free_cma:0kB [ 984.908757][T14577] lowmem_reserve[]: 0 0 0 0 0 [ 984.908803][T14577] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 984.908950][T14577] Node 0 DMA32: 362*4kB (ME) 1425*8kB (UME) 1144*16kB (UME) 907*32kB (UME) 544*64kB (UME) 146*128kB (UME) 60*256kB (UME) 37*512kB (UME) 18*1024kB (UME) 7*2048kB (ME) 260*4096kB (M) = 1245712kB [ 984.909157][T14577] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 984.909305][T14577] Node 1 Normal: 3*4kB (UM) 2*8kB (UM) 3*16kB (UM) 3*32kB (UM) 2*64kB (M) 2*128kB (UM) 1*256kB (U) 3*512kB (UM) 4*1024kB (UM) 2*2048kB (U) 956*4096kB (M) = 3926316kB [ 984.909529][T14577] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 984.909548][T14577] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 984.909570][T14577] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 984.909588][T14577] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 984.909605][T14577] 60112 total pagecache pages [ 984.909615][T14577] 1 pages in swap cache [ 984.909624][T14577] Free swap = 124408kB [ 984.909637][T14577] Total swap = 124996kB [ 984.909647][T14577] 2097051 pages RAM [ 984.909656][T14577] 0 pages HighMem/MovableOnly [ 984.909665][T14577] 426392 pages reserved [ 984.909674][T14577] 0 pages cma reserved [ 985.595829][T14677] syz.3.2760[14677] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 985.595972][T14677] syz.3.2760[14677] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 987.582561][ T8] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 987.878436][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 987.914061][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 987.961396][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 988.004590][ T8] usb 3-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 988.040954][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 988.096160][ T8] usb 3-1: config 0 descriptor?? [ 988.381610][ T8] usbhid 3-1:0.0: can't add hid device: -71 [ 988.393507][ T8] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 988.415997][ T8] usb 3-1: USB disconnect, device number 67 [ 989.114594][T14710] xt_l2tp: missing protocol rule (udp|l2tpip) [ 989.123631][ T5273] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 989.413206][ T5273] usb 1-1: Using ep0 maxpacket: 16 [ 989.842793][ T5273] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 989.854796][ T5273] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 989.866518][ T5273] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 989.882460][ T5273] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 989.903203][ T5273] usb 1-1: config 0 descriptor?? [ 989.916656][T14707] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 990.798112][ T5224] Bluetooth: hci5: command 0x0c1a tx timeout [ 991.377875][T14733] tipc: Started in network mode [ 991.383804][T14733] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 991.395797][T14733] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 991.406647][T14733] tipc: Enabled bearer , priority 10 [ 992.411731][ T5273] usbhid 1-1:0.0: can't add hid device: -71 [ 992.427615][ T5273] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 992.457413][ T5273] usb 1-1: USB disconnect, device number 57 [ 992.522708][ T25] tipc: Node number set to 1 [ 992.906391][T10716] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 993.233219][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.352845][ T25] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 993.522602][ T25] usb 2-1: device descriptor read/64, error -71 [ 993.674531][T10716] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 993.688657][T10716] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 993.699519][T10716] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 993.709314][T10716] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 993.723262][T10716] usb 4-1: config 0 descriptor?? [ 993.802489][ T25] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 993.820008][T14763] ip6gretap0 speed is unknown, defaulting to 1000 [ 993.982561][ T25] usb 2-1: device descriptor read/64, error -71 [ 994.112987][ T25] usb usb2-port1: attempt power cycle [ 994.544587][ T25] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 994.613253][ T25] usb 2-1: device descriptor read/8, error -71 [ 994.902783][ T25] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 994.943083][ T25] usb 2-1: device descriptor read/8, error -71 [ 994.950690][T14747] input: syz1 as /devices/virtual/input/input43 [ 994.979920][T10716] uclogic 0003:256C:006D.001B: v1 frame probing failed: -71 [ 995.010974][T10716] uclogic 0003:256C:006D.001B: failed probing parameters: -71 [ 995.022660][T10716] uclogic 0003:256C:006D.001B: probe with driver uclogic failed with error -71 [ 995.035453][T10716] usb 4-1: USB disconnect, device number 64 [ 995.082640][ T25] usb usb2-port1: unable to enumerate USB device [ 995.978377][T14803] netlink: 'syz.3.2806': attribute type 27 has an invalid length. [ 997.232449][ T5372] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 997.572472][ T5372] usb 3-1: device descriptor read/64, error -71 [ 997.854580][ T5372] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 998.032479][ T5372] usb 3-1: device descriptor read/64, error -71 [ 998.153662][ T5372] usb usb3-port1: attempt power cycle [ 998.596239][ T5372] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 998.653969][ T5372] usb 3-1: device descriptor read/8, error -71 [ 998.922426][ T5372] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 998.954605][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 998.954623][ T29] audit: type=1326 audit(1725185107.731:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14873 comm="syz.4.2835" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3196379eb9 code=0x0 [ 998.981648][ C0] vkms_vblank_simulate: vblank timer overrun [ 998.986253][ T5372] usb 3-1: device descriptor read/8, error -71 [ 999.123556][ T5372] usb usb3-port1: unable to enumerate USB device [ 1000.515688][T14886] fuse: Bad value for 'fd' [ 1000.942695][T14893] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1000.951441][T14893] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1000.992751][T14893] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1001.012656][T14893] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1001.044731][T14893] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1001.084635][T14893] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1003.052820][ T5224] Bluetooth: hci5: command 0x0c1a tx timeout [ 1003.059008][ T5238] Bluetooth: hci1: command 0x0c1a tx timeout [ 1003.065164][T11042] Bluetooth: hci2: command 0x0c1a tx timeout [ 1003.142381][ T5224] Bluetooth: hci3: command 0x0405 tx timeout [ 1005.132598][ T5224] Bluetooth: hci5: command 0x0c1a tx timeout [ 1005.138647][T11042] Bluetooth: hci2: command 0x0c1a tx timeout [ 1005.397089][T14947] netlink: 'syz.4.2863': attribute type 10 has an invalid length. [ 1005.411906][T14949] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.2862'. [ 1005.415631][T14947] syz_tun: entered promiscuous mode [ 1005.474842][T14947] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1005.923338][T14967] delete_channel: no stack [ 1005.932680][ T1852] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1005.976148][T14966] delete_channel: no stack [ 1006.132460][ T1852] usb 2-1: Using ep0 maxpacket: 8 [ 1006.159292][ T1852] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1006.177866][ T1852] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1006.192969][T14977] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.2876'. [ 1006.202540][ T1852] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1006.230019][ T1852] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1006.266040][ T1852] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1006.291058][ T1852] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1006.413883][T10716] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1006.581610][ T1852] usb 2-1: GET_CAPABILITIES returned 0 [ 1006.616640][ T1852] usbtmc 2-1:16.0: can't read capabilities [ 1006.662559][T10716] usb 3-1: Using ep0 maxpacket: 32 [ 1006.695862][T10716] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 1006.727174][T10716] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1006.766842][T10716] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1006.784452][T10716] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1006.798593][T10716] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1006.838578][T10716] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1006.838939][ T1852] usb 2-1: USB disconnect, device number 72 [ 1006.852771][T10716] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1006.890320][T10716] usb 3-1: Product: syz [ 1006.908232][T10716] usb 3-1: Manufacturer: syz [ 1007.042456][T10716] usb 3-1: SerialNumber: syz [ 1007.068669][T10716] usb 3-1: config 0 descriptor?? [ 1007.810406][T10716] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1007.832140][T10716] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1007.918776][T10716] usb 3-1: USB disconnect, device number 72 [ 1007.965505][T10716] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 1008.249829][T15010] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.2888'. [ 1008.691589][T15015] Bluetooth: MGMT ver 1.23 [ 1009.745296][ T5273] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1009.802802][T15044] random: crng reseeded on system resumption [ 1009.956708][ T5273] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1009.987821][ T5273] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1010.012402][ T5273] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1010.032350][ T5273] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1010.077328][ T5273] usb 2-1: config 0 descriptor?? [ 1010.493598][T15044] binder: 15039:15044 ioctl c0306201 200002c0 returned -14 [ 1010.742577][ T1852] usb 3-1: new full-speed USB device number 73 using dummy_hcd [ 1010.951106][ T1852] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 1010.974196][ T1852] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1010.996998][ T1852] usb 3-1: config 0 descriptor?? [ 1011.012798][ T1852] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1011.331585][T15029] input: syz1 as /devices/virtual/input/input44 [ 1011.370309][ T5273] uclogic 0003:256C:006D.001C: v1 frame probing failed: -71 [ 1011.385667][ T5273] uclogic 0003:256C:006D.001C: failed probing parameters: -71 [ 1011.404035][ T5273] uclogic 0003:256C:006D.001C: probe with driver uclogic failed with error -71 [ 1011.466611][ T5273] usb 2-1: USB disconnect, device number 73 [ 1011.965060][ T1852] gp8psk: usb in 128 operation failed. [ 1011.989210][ T1852] gp8psk: usb in 137 operation failed. [ 1012.002971][ T1852] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1012.071125][ T1852] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1012.095739][ T1852] usb 3-1: USB disconnect, device number 73 [ 1014.123195][T15083] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2917'. [ 1014.137435][T15080] vlan2: entered allmulticast mode [ 1014.234931][T15086] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2920'. [ 1014.841292][T15116] input: syz0 as /devices/virtual/input/input46 [ 1015.682443][ T25] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1015.874487][ T25] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1015.889996][ T25] usb 5-1: New USB device found, idVendor=12ba, idProduct=0100, bcdDevice= 0.00 [ 1015.892697][T15163] bridge0: port 2(bridge_slave_1) entered disabled state [ 1015.899452][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1015.949478][T15163] bridge0: port 2(bridge_slave_1) entered blocking state [ 1015.949980][ T25] usb 5-1: config 0 descriptor?? [ 1015.956735][T15163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1016.007171][ T25] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1016.136419][T15173] random: crng reseeded on system resumption [ 1016.282423][T15175] binder: 15168:15175 ioctl c0306201 200002c0 returned -14 [ 1016.594580][T15180] ip6gretap0 speed is unknown, defaulting to 1000 [ 1017.853568][T11042] Bluetooth: hci3: command 0x0405 tx timeout [ 1019.671312][ T1852] usb 5-1: USB disconnect, device number 57 [ 1019.993200][T15253] netlink: 'syz.1.2981': attribute type 12 has an invalid length. [ 1020.222669][T15266] netlink: 'syz.4.2985': attribute type 12 has an invalid length. [ 1020.928268][T15274] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2987'. [ 1020.942583][T15275] random: crng reseeded on system resumption [ 1021.189209][T15283] fuse: Bad value for 'fd' [ 1021.235313][T15284] fuse: Bad value for 'fd' [ 1021.584335][T15278] binder: 15271:15278 ioctl c0306201 200002c0 returned -14 [ 1022.462189][T15300] bridge0: port 2(bridge_slave_1) entered disabled state [ 1022.495739][T15300] bridge0: port 2(bridge_slave_1) entered blocking state [ 1022.502911][T15300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1025.626069][ T1852] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1026.179118][ T1852] usb 4-1: no configurations [ 1026.188987][ T1852] usb 4-1: can't read configurations, error -22 [ 1026.299370][ T29] audit: type=1800 audit(1725185135.071:263): pid=15354 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.3013" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1026.534456][ T1852] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1026.662430][T10716] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1027.273877][T15360] sit0: entered allmulticast mode [ 1027.397218][ T1852] usb 4-1: no configurations [ 1027.424019][ T1852] usb 4-1: can't read configurations, error -22 [ 1027.462712][ T1852] usb usb4-port1: attempt power cycle [ 1027.522822][T10716] usb 2-1: Using ep0 maxpacket: 32 [ 1027.527102][T15365] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1027.541013][T10716] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice=55.01 [ 1027.559670][T10716] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1027.570306][T10716] usb 2-1: Product: syz [ 1027.581044][T10716] usb 2-1: Manufacturer: syz [ 1027.585800][T10716] usb 2-1: SerialNumber: syz [ 1027.592973][T10716] usb 2-1: config 0 descriptor?? [ 1027.882524][ T1852] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1027.934722][ T1852] usb 4-1: no configurations [ 1027.939345][ T1852] usb 4-1: can't read configurations, error -22 [ 1028.070833][T10716] cxacru 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1028.092522][ T1852] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1028.097769][T10716] usb 2-1: USB disconnect, device number 74 [ 1028.143606][ T1852] usb 4-1: device descriptor read/8, error -71 [ 1028.364010][ T1852] usb usb4-port1: unable to enumerate USB device [ 1028.400121][T15381] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1029.169725][T15382] hugetlbfs: Bad value 'A' for mount option 'nr_inodes' [ 1029.169725][T15382] [ 1029.209588][T15382] netlink: 792 bytes leftover after parsing attributes in process `syz.3.3021'. [ 1030.358162][T15402] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1030.735380][T15416] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1031.822784][ T8] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1031.937802][T15433] can0: slcan on pts0. [ 1032.034423][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 1032.052957][T15434] can0 (unregistered): slcan off pts0. [ 1032.064415][ T8] usb 4-1: too many configurations: 226, using maximum allowed: 8 [ 1032.084990][ T8] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1032.102495][ T8] usb 4-1: can't read configurations, error -61 [ 1032.282553][ T8] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1032.292125][T15444] can0: slcan on pts0. [ 1032.385247][T15444] can0 (unregistered): slcan off pts0. [ 1032.502653][T15449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1032.512526][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 1032.532575][ T8] usb 4-1: too many configurations: 226, using maximum allowed: 8 [ 1032.560421][ T8] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1032.563646][T15456] overlayfs: failed to resolve './file0': -2 [ 1032.575451][ T8] usb 4-1: can't read configurations, error -61 [ 1032.590311][ T8] usb usb4-port1: attempt power cycle [ 1033.012597][ T8] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1033.053155][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 1033.059208][ T8] usb 4-1: too many configurations: 226, using maximum allowed: 8 [ 1033.069948][ T8] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1033.077717][ T8] usb 4-1: can't read configurations, error -61 [ 1033.085009][ T29] audit: type=1326 audit(1725185141.861:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15442 comm="syz.1.3042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21f1b79eb9 code=0x7fc00000 [ 1033.140345][ T29] audit: type=1326 audit(1725185141.861:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15442 comm="syz.1.3042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f21f1b79eb9 code=0x7fc00000 [ 1033.199375][ T29] audit: type=1326 audit(1725185141.861:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15442 comm="syz.1.3042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21f1b79eb9 code=0x7fc00000 [ 1033.222084][ T29] audit: type=1326 audit(1725185141.861:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15442 comm="syz.1.3042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21f1b79eb9 code=0x7fc00000 [ 1033.248987][ T29] audit: type=1326 audit(1725185141.861:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15442 comm="syz.1.3042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21f1b79eb9 code=0x7fc00000 [ 1033.280636][ T29] audit: type=1326 audit(1725185141.861:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15442 comm="syz.1.3042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21f1b79eb9 code=0x7fc00000 [ 1033.305963][ T29] audit: type=1326 audit(1725185141.861:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15442 comm="syz.1.3042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21f1b79eb9 code=0x7fc00000 [ 1033.337920][ T29] audit: type=1326 audit(1725185141.861:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15442 comm="syz.1.3042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21f1b79eb9 code=0x7fc00000 [ 1033.406221][ T29] audit: type=1326 audit(1725185141.861:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15442 comm="syz.1.3042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21f1b79eb9 code=0x7fc00000 [ 1033.448254][ T29] audit: type=1326 audit(1725185141.861:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15442 comm="syz.1.3042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21f1b79eb9 code=0x7fc00000 [ 1033.470211][T10716] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1033.570613][T15480] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3055'. [ 1033.709296][T10716] usb 5-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1033.722048][T10716] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1033.738969][T10716] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1033.859442][T10716] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1033.892684][T10716] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.916900][T15472] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1033.966477][T15485] overlayfs: failed to resolve './file0': -2 [ 1034.280460][T15491] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.3058'. [ 1034.359938][T15481] vivid-000: ================= START STATUS ================= [ 1034.408381][T15481] vivid-000: Radio HW Seek Mode: Bounded [ 1034.422543][T15481] vivid-000: Radio Programmable HW Seek: false [ 1034.429954][T15481] vivid-000: RDS Rx I/O Mode: Block I/O [ 1034.473210][T15481] vivid-000: Generate RBDS Instead of RDS: false [ 1034.479855][T15481] vivid-000: RDS Reception: true [ 1034.486094][T15481] vivid-000: RDS Program Type: 0 inactive [ 1034.492106][T15481] vivid-000: RDS PS Name: inactive [ 1034.509977][T15481] vivid-000: RDS Radio Text: inactive [ 1034.552576][T15481] vivid-000: RDS Traffic Announcement: false inactive [ 1034.564358][T15481] vivid-000: RDS Traffic Program: false inactive [ 1034.564664][T15481] vivid-000: RDS Music: false inactive [ 1034.564822][T15481] vivid-000: ================== END STATUS ================== [ 1035.022474][ T1852] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1035.206646][ T1852] usb 1-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 1035.206668][ T1852] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1035.206680][ T1852] usb 1-1: Product: syz [ 1035.206690][ T1852] usb 1-1: Manufacturer: syz [ 1035.206698][ T1852] usb 1-1: SerialNumber: syz [ 1035.208203][ T1852] usb 1-1: config 0 descriptor?? [ 1035.443160][ T1852] cx82310_eth 1-1:0.0: probe with driver cx82310_eth failed with error -22 [ 1035.728129][T15504] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1035.853173][ T1852] cxacru 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1035.893030][T10716] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 1035.905673][T10716] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input49 [ 1035.916536][T15509] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 1035.926065][T15509] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1035.945701][ T25] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1036.097823][T15512] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3065'. [ 1036.138052][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1036.150758][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1036.162065][ T25] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1036.164506][T10716] usb 1-1: USB disconnect, device number 58 [ 1036.171772][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1036.209922][ T25] usb 4-1: config 0 descriptor?? [ 1037.024839][T15520] overlayfs: failed to resolve './file0': -2 [ 1037.124212][T15521] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.3069'. [ 1037.234150][ T25] uclogic 0003:256C:006D.001D: interface is invalid, ignoring [ 1037.327955][T15530] netlink: 792 bytes leftover after parsing attributes in process `syz.2.3070'. [ 1037.608502][ T1852] usb 4-1: USB disconnect, device number 73 [ 1038.776840][T10716] usb 5-1: USB disconnect, device number 58 [ 1038.782809][ C0] aiptek 5-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1038.894615][T15538] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1038.977726][T15543] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3077'. [ 1039.120043][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 1039.120061][ T29] audit: type=1326 audit(1725185147.891:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15544 comm="syz.4.3079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3196379eb9 code=0x7ffc0000 [ 1039.207958][ T29] audit: type=1326 audit(1725185147.891:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15544 comm="syz.4.3079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7f3196379eb9 code=0x7ffc0000 [ 1039.208469][T15553] netlink: 1624 bytes leftover after parsing attributes in process `syz.4.3083'. [ 1039.272723][ T29] audit: type=1326 audit(1725185147.901:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15544 comm="syz.4.3079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3196379eb9 code=0x7ffc0000 [ 1039.403157][T15559] syz.4.3086[15559] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1039.403297][T15559] syz.4.3086[15559] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1039.981229][ T5222] hid-generic 0005:0004:0004.001E: unknown main item tag 0x5 [ 1040.033815][ T5222] hid-generic 0005:0004:0004.001E: unknown main item tag 0x3 [ 1040.050599][ T5222] hid-generic 0005:0004:0004.001E: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz0 [ 1040.392794][T15598] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1040.883253][T15616] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1042.743253][T15650] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1044.019554][T15676] netlink: 'syz.3.3133': attribute type 4 has an invalid length. [ 1044.091413][T15676] netlink: 'syz.3.3133': attribute type 4 has an invalid length. [ 1044.988852][ T29] audit: type=1326 audit(1725185153.761:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15709 comm="syz.4.3147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3196379eb9 code=0x7ffc0000 [ 1045.022708][T15710] syz.4.3147[15710] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1045.022850][T15710] syz.4.3147[15710] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1045.062236][ T29] audit: type=1326 audit(1725185153.791:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15709 comm="syz.4.3147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3196379eb9 code=0x7ffc0000 [ 1045.180713][ T29] audit: type=1326 audit(1725185153.791:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15709 comm="syz.4.3147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3196379eb9 code=0x7ffc0000 [ 1045.245114][ T29] audit: type=1326 audit(1725185153.831:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15709 comm="syz.4.3147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3196379eb9 code=0x7ffc0000 [ 1045.294596][ T29] audit: type=1326 audit(1725185153.831:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15709 comm="syz.4.3147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3196379eb9 code=0x7ffc0000 [ 1045.326786][T15725] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_macvtap, syncid = 0, id = 0 [ 1045.332071][T15723] IPVS: stopping backup sync thread 15725 ... [ 1045.347669][ T29] audit: type=1326 audit(1725185153.841:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15709 comm="syz.4.3147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3196379eb9 code=0x7ffc0000 [ 1045.402988][ T29] audit: type=1326 audit(1725185153.901:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15709 comm="syz.4.3147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3196379eb9 code=0x7ffc0000 [ 1045.453033][ T29] audit: type=1326 audit(1725185153.901:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15709 comm="syz.4.3147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3196379eb9 code=0x7ffc0000 [ 1045.487576][ T29] audit: type=1326 audit(1725185153.931:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15709 comm="syz.4.3147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f3196379eb9 code=0x7ffc0000 [ 1045.555481][ T29] audit: type=1326 audit(1725185153.931:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15709 comm="syz.4.3147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3196379eb9 code=0x7ffc0000 [ 1046.072457][ T25] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1046.129421][T15745] netlink: 108044 bytes leftover after parsing attributes in process `syz.3.3161'. [ 1046.146451][T15745] openvswitch: netlink: Message has 5 unknown bytes. [ 1046.274634][ T25] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1046.284722][ T25] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1046.345862][ T25] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1046.357630][ T25] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1046.383838][ T25] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1046.414742][ T25] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1046.456762][ T25] usb 2-1: Product: syz [ 1046.467789][ T25] usb 2-1: Manufacturer: syz [ 1046.480067][ T25] cdc_wdm 2-1:1.0: skipping garbage [ 1046.492694][ T25] cdc_wdm 2-1:1.0: skipping garbage [ 1046.500512][ T25] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1046.506714][ T25] cdc_wdm 2-1:1.0: Unknown control protocol [ 1046.978015][ T25] usb 2-1: USB disconnect, device number 75 [ 1047.068190][T15769] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3170'. [ 1047.103277][T15769] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3170'. [ 1047.493109][T10716] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1047.517819][T15790] IPVS: sync thread started: state = MASTER, mcast_ifn = team_slave_1, syncid = 0, id = 0 [ 1047.717800][T15794] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1047.732735][T10716] usb 5-1: Using ep0 maxpacket: 16 [ 1047.812301][T10716] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1047.832949][T10716] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1047.843236][T10716] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1047.992067][T10716] usb 5-1: config 0 descriptor?? [ 1048.213958][T10716] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1048.543347][T15801] bridge0: port 2(bridge_slave_1) entered disabled state [ 1048.562559][T15801] bridge0: port 2(bridge_slave_1) entered blocking state [ 1048.569778][T15801] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1048.786909][T15812] xt_connbytes: Forcing CT accounting to be enabled [ 1049.187297][T15822] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3191'. [ 1049.547565][T15828] random: crng reseeded on system resumption [ 1049.942217][T15828] binder: 15827:15828 ioctl c0306201 200002c0 returned -14 [ 1050.089591][T15835] ip6gretap0 speed is unknown, defaulting to 1000 [ 1050.259952][T10716] usb 5-1: USB disconnect, device number 59 [ 1052.063907][T15880] binder: BINDER_SET_CONTEXT_MGR already set [ 1052.082108][T15880] binder: 15879:15880 ioctl 4018620d 200002c0 returned -16 [ 1052.303518][T15888] xt_hashlimit: size too large, truncated to 1048576 [ 1052.352635][ T25] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1053.274579][ T25] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1053.292325][ T25] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1053.322344][ T25] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1053.331352][ T25] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1053.362340][ T25] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1053.396277][ T25] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1053.413246][ T25] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1053.427667][ T25] usb 2-1: Product: syz [ 1053.432390][ T25] usb 2-1: Manufacturer: syz [ 1053.463471][ T25] cdc_wdm 2-1:1.0: skipping garbage [ 1053.468713][ T25] cdc_wdm 2-1:1.0: skipping garbage [ 1053.498617][ T25] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1053.504788][ T25] cdc_wdm 2-1:1.0: Unknown control protocol [ 1053.544390][T15907] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3227'. [ 1053.674143][ T8] usb 2-1: USB disconnect, device number 76 [ 1053.992487][T10716] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1054.160119][T15922] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2248643489 (17989147912 ns) > initial count (11631199424 ns). Using initial count to start timer. [ 1054.205482][T10716] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1054.222182][T10716] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1054.245374][T10716] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1054.255117][T10716] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1054.268224][T10716] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1054.277727][T10716] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1054.306068][T10716] usb 1-1: Product: syz [ 1054.312002][T10716] usb 1-1: Manufacturer: syz [ 1054.324185][T10716] cdc_wdm 1-1:1.0: skipping garbage [ 1054.329406][T10716] cdc_wdm 1-1:1.0: skipping garbage [ 1054.337105][T10716] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1054.345324][T10716] cdc_wdm 1-1:1.0: Unknown control protocol [ 1054.362385][ T5273] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1054.426355][T15926] futex_wake_op: syz.4.3233 tries to shift op by 144; fix this program [ 1054.584906][ T5273] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1054.613863][ T5273] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1054.633305][ T5273] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1054.662212][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.663122][ T5273] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1054.742321][ T5273] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1054.779912][ T5222] usb 1-1: USB disconnect, device number 59 [ 1054.784515][ T5273] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1054.814590][ T5273] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1054.835139][ T5273] usb 2-1: Product: syz [ 1054.839339][ T5273] usb 2-1: Manufacturer: syz [ 1054.855626][ T5273] cdc_wdm 2-1:1.0: skipping garbage [ 1054.860854][ T5273] cdc_wdm 2-1:1.0: skipping garbage [ 1054.886804][ T5273] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1054.904370][ T5273] cdc_wdm 2-1:1.0: Unknown control protocol [ 1055.683676][T15941] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.3236'. [ 1056.092675][ T5222] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1056.275214][ T5222] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1056.286356][ T5222] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1056.306603][ T5222] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1056.322334][ T5222] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1056.353302][ T5222] usb 1-1: config 0 descriptor?? [ 1056.400314][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 1056.400330][ T29] audit: type=1326 audit(1725185165.171:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15931 comm="syz.2.3235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57d6f79eb9 code=0x7fc00000 [ 1056.797206][ T8] usb 2-1: USB disconnect, device number 77 [ 1057.595397][ T5222] uclogic 0003:256C:006D.001F: failed retrieving string descriptor #200: -71 [ 1057.606093][ T5222] uclogic 0003:256C:006D.001F: failed retrieving pen parameters: -71 [ 1057.614541][ T5222] uclogic 0003:256C:006D.001F: failed probing pen v2 parameters: -71 [ 1057.622886][ T5222] uclogic 0003:256C:006D.001F: failed probing parameters: -71 [ 1057.631367][ T5222] uclogic 0003:256C:006D.001F: probe with driver uclogic failed with error -71 [ 1057.643552][ T5222] usb 1-1: USB disconnect, device number 60 [ 1057.893354][T15957] netlink: 'syz.1.3240': attribute type 29 has an invalid length. [ 1057.901411][T15957] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3240'. [ 1058.142565][ T5273] usb 3-1: new full-speed USB device number 74 using dummy_hcd [ 1058.344847][ T5273] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1058.358112][ T5273] usb 3-1: can't read configurations, error -61 [ 1058.556263][ T5273] usb 3-1: new full-speed USB device number 75 using dummy_hcd [ 1058.766176][ T5273] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1058.782786][ T5273] usb 3-1: can't read configurations, error -61 [ 1058.798234][ T5273] usb usb3-port1: attempt power cycle [ 1058.815573][T15970] pim6reg1: entered promiscuous mode [ 1058.820868][T15970] pim6reg1: entered allmulticast mode [ 1059.212451][ T5273] usb 3-1: new full-speed USB device number 76 using dummy_hcd [ 1059.251517][ T5273] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1059.263448][ T5273] usb 3-1: can't read configurations, error -61 [ 1059.422556][ T5273] usb 3-1: new full-speed USB device number 77 using dummy_hcd [ 1059.784193][ T5222] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1060.025065][ T5273] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1060.042311][ T5273] usb 3-1: can't read configurations, error -61 [ 1060.062558][ T5273] usb usb3-port1: unable to enumerate USB device [ 1060.154054][ T5222] usb 4-1: Using ep0 maxpacket: 8 [ 1060.161644][ T5222] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1060.175283][ T5222] usb 4-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=f4.28 [ 1060.184439][ T5222] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1060.192549][ T5222] usb 4-1: Product: syz [ 1060.196729][ T5222] usb 4-1: Manufacturer: syz [ 1060.201342][ T5222] usb 4-1: SerialNumber: syz [ 1060.217340][ T5222] usb 4-1: config 0 descriptor?? [ 1060.362949][T15986] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3252'. [ 1165.502245][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1165.509236][ C0] rcu: 1-...!: (0 ticks this GP) idle=15b4/1/0x4000000000000000 softirq=60562/60562 fqs=0 [ 1165.520960][ C0] rcu: (detected by 0, t=10505 jiffies, g=84777, q=129 ncpus=2) [ 1165.528689][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1165.533915][ C1] NMI backtrace for cpu 1 [ 1165.533930][ C1] CPU: 1 UID: 0 PID: 15974 Comm: syz.3.3248 Not tainted 6.11.0-rc5-syzkaller-00310-ge8784b0aef62 #0 [ 1165.533950][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1165.533960][ C1] RIP: 0010:do_raw_spin_lock+0x122/0x370 [ 1165.533985][ C1] Code: 24 30 4c 8d 74 24 60 48 89 5c 24 18 8b 03 65 8b 0d ff a5 92 7e 39 c8 0f 84 21 01 00 00 4d 89 f5 49 c1 ed 03 41 0f b6 44 15 00 <84> c0 48 89 d3 0f 85 a2 01 00 00 c7 44 24 60 00 00 00 00 4c 89 e7 [ 1165.534000][ C1] RSP: 0018:ffffc90000a18ba0 EFLAGS: 00000802 [ 1165.534015][ C1] RAX: 0000000000000004 RBX: ffff8880273f72f0 RCX: 0000000000000001 [ 1165.534026][ C1] RDX: dffffc0000000000 RSI: 1ffff9200014317c RDI: ffff8880273f72e8 [ 1165.534039][ C1] RBP: ffffc90000a18c80 R08: ffffffff93fa6a17 R09: 1ffffffff27f4d42 [ 1165.534052][ C1] R10: dffffc0000000000 R11: fffffbfff27f4d43 R12: ffff8880273f72e8 [ 1165.534064][ C1] R13: 1ffff92000143180 R14: ffffc90000a18c00 R15: 1ffff11004e7ee5e [ 1165.534077][ C1] FS: 00007fa088bfb6c0(0000) GS:ffff8880b8900000(0000) knlGS:0000000000000000 [ 1165.534092][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1165.534103][ C1] CR2: 0000000000000000 CR3: 0000000066e4e000 CR4: 00000000003506f0 [ 1165.534116][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1165.534126][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1165.534136][ C1] Call Trace: [ 1165.534145][ C1] [ 1165.534153][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 1165.534178][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1165.534202][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1165.534221][ C1] ? nmi_handle+0x2a/0x5a0 [ 1165.534244][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1165.534264][ C1] ? nmi_handle+0x14f/0x5a0 [ 1165.534284][ C1] ? nmi_handle+0x2a/0x5a0 [ 1165.534300][ C1] ? do_raw_spin_lock+0x122/0x370 [ 1165.534318][ C1] ? default_do_nmi+0x63/0x160 [ 1165.534339][ C1] ? exc_nmi+0x123/0x1f0 [ 1165.534359][ C1] ? end_repeat_nmi+0xf/0x53 [ 1165.534385][ C1] ? do_raw_spin_lock+0x122/0x370 [ 1165.534404][ C1] ? do_raw_spin_lock+0x122/0x370 [ 1165.534424][ C1] ? do_raw_spin_lock+0x122/0x370 [ 1165.534442][ C1] [ 1165.534448][ C1] [ 1165.534455][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1165.534482][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1165.534503][ C1] ? __pfx_advance_sched+0x10/0x10 [ 1165.534522][ C1] ? __pfx_advance_sched+0x10/0x10 [ 1165.534540][ C1] advance_sched+0xab/0xca0 [ 1165.534560][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1165.534583][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1165.534611][ C1] ? __pfx_advance_sched+0x10/0x10 [ 1165.534629][ C1] __hrtimer_run_queues+0x59b/0xd50 [ 1165.534647][ C1] ? ktime_get_update_offsets_now+0x3c/0x250 [ 1165.534678][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1165.534696][ C1] ? ktime_get_update_offsets_now+0x22d/0x250 [ 1165.534721][ C1] hrtimer_interrupt+0x396/0x990 [ 1165.534752][ C1] __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 1165.534778][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1165.534802][ C1] [ 1165.534808][ C1] [ 1165.534814][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1165.534834][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xd8/0x140 [ 1165.534863][ C1] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 8e 98 3c f6 f6 44 24 21 02 75 52 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 b3 ea a7 f5 65 8b 05 14 c1 48 74 85 c0 74 43 48 c7 04 24 0e 36 [ 1165.534876][ C1] RSP: 0018:ffffc9000c13fa20 EFLAGS: 00000206 [ 1165.534890][ C1] RAX: 35966d6b2c16ac00 RBX: 1ffff92001827f48 RCX: ffffffff9a0fd903 [ 1165.534902][ C1] RDX: dffffc0000000000 RSI: ffffffff8bead560 RDI: 0000000000000001 [ 1165.534914][ C1] RBP: ffffc9000c13fab0 R08: ffffffff8ff7426f R09: 1ffffffff1fee84d [ 1165.534926][ C1] R10: dffffc0000000000 R11: fffffbfff1fee84e R12: dffffc0000000000 [ 1165.534938][ C1] R13: 1ffff92001827f44 R14: ffffc9000c13fa40 R15: 0000000000000246 [ 1165.534961][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1165.534984][ C1] ? __asan_memcpy+0x40/0x70 [ 1165.535001][ C1] ? timekeeping_update+0x3e5/0x450 [ 1165.535021][ C1] ? do_adjtimex+0x515/0xab0 [ 1165.535041][ C1] timekeeping_inject_offset+0x4de/0x580 [ 1165.535061][ C1] ? do_adjtimex+0x515/0xab0 [ 1165.535084][ C1] ? __pfx_timekeeping_inject_offset+0x10/0x10 [ 1165.535105][ C1] ? __pfx_add_device_randomness+0x10/0x10 [ 1165.535131][ C1] ? security_capable+0x90/0xb0 [ 1165.535157][ C1] do_adjtimex+0x515/0xab0 [ 1165.535181][ C1] ? __pfx_do_adjtimex+0x10/0x10 [ 1165.535202][ C1] ? __pfx___might_resched+0x10/0x10 [ 1165.535223][ C1] ? __might_fault+0xaa/0x120 [ 1165.535242][ C1] ? __pfx_lock_release+0x10/0x10 [ 1165.535268][ C1] ? __might_fault+0xc6/0x120 [ 1165.535289][ C1] __x64_sys_clock_adjtime+0x1e1/0x290 [ 1165.535312][ C1] ? __pfx___x64_sys_clock_adjtime+0x10/0x10 [ 1165.535347][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1165.535369][ C1] ? do_syscall_64+0x100/0x230 [ 1165.535388][ C1] ? do_syscall_64+0xb6/0x230 [ 1165.535407][ C1] do_syscall_64+0xf3/0x230 [ 1165.535423][ C1] ? clear_bhb_loop+0x35/0x90 [ 1165.535444][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1165.535463][ C1] RIP: 0033:0x7fa087d79eb9 [ 1165.535479][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1165.535492][ C1] RSP: 002b:00007fa088bfb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000131 [ 1165.535508][ C1] RAX: ffffffffffffffda RBX: 00007fa087f15f80 RCX: 00007fa087d79eb9 [ 1165.535520][ C1] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000000 [ 1165.535530][ C1] RBP: 00007fa087de793e R08: 0000000000000000 R09: 0000000000000000 [ 1165.535540][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1165.535550][ C1] R13: 0000000000000000 R14: 00007fa087f15f80 R15: 00007ffebb452c78 [ 1165.535570][ C1] [ 1165.535903][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10504 jiffies! g84777 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 1166.123999][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=90275 [ 1166.131891][ C0] rcu: rcu_preempt kthread starved for 10505 jiffies! g84777 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 1166.143261][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1166.153226][ C0] rcu: RCU grace-period kthread stack dump: [ 1166.159108][ C0] task:rcu_preempt state:I stack:24912 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 1166.169278][ C0] Call Trace: [ 1166.172558][ C0] [ 1166.175500][ C0] __schedule+0x17ae/0x4a10 [ 1166.180044][ C0] ? __pfx___schedule+0x10/0x10 [ 1166.184907][ C0] ? __pfx_lock_release+0x10/0x10 [ 1166.189938][ C0] ? __asan_memset+0x23/0x50 [ 1166.194538][ C0] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 1166.200352][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1166.206710][ C0] ? schedule+0x90/0x320 [ 1166.210965][ C0] schedule+0x14b/0x320 [ 1166.215136][ C0] schedule_timeout+0x1be/0x310 [ 1166.219998][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1166.225379][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1166.230686][ C0] ? prepare_to_swait_event+0x32e/0x350 [ 1166.236255][ C0] rcu_gp_fqs_loop+0x2df/0x1330 [ 1166.241116][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 1166.246321][ C0] ? rcu_gp_init+0x1256/0x1630 [ 1166.251099][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 1166.256049][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1166.261340][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1166.267249][ C0] ? finish_swait+0xd4/0x1e0 [ 1166.271854][ C0] rcu_gp_kthread+0xa7/0x3b0 [ 1166.276455][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1166.281659][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1166.287567][ C0] ? __kthread_parkme+0x169/0x1d0 [ 1166.292605][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1166.297809][ C0] kthread+0x2f0/0x390 [ 1166.301893][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1166.307096][ C0] ? __pfx_kthread+0x10/0x10 [ 1166.311701][ C0] ret_from_fork+0x4b/0x80 [ 1166.316128][ C0] ? __pfx_kthread+0x10/0x10 [ 1166.320732][ C0] ret_from_fork_asm+0x1a/0x30 [ 1166.325520][ C0] [ 1166.349295][ T1269] ieee802154 phy1 wpan1: encryption failed: -22