last executing test programs: 2m24.265605251s ago: executing program 4 (id=1480): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) (async) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "901c551265406c7f306003d816e8bd000000001800", [0x8, 0x3]}}) (async) ioctl$BLKRRPART(r0, 0x125f, 0x0) 1m55.901296281s ago: executing program 4 (id=1480): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) (async) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "901c551265406c7f306003d816e8bd000000001800", [0x8, 0x3]}}) (async) ioctl$BLKRRPART(r0, 0x125f, 0x0) 1m29.24099702s ago: executing program 4 (id=1480): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) (async) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "901c551265406c7f306003d816e8bd000000001800", [0x8, 0x3]}}) (async) ioctl$BLKRRPART(r0, 0x125f, 0x0) 1m1.343185985s ago: executing program 4 (id=1480): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) (async) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "901c551265406c7f306003d816e8bd000000001800", [0x8, 0x3]}}) (async) ioctl$BLKRRPART(r0, 0x125f, 0x0) 46.433061337s ago: executing program 4 (id=1480): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) (async) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "901c551265406c7f306003d816e8bd000000001800", [0x8, 0x3]}}) (async) ioctl$BLKRRPART(r0, 0x125f, 0x0) 19.838997764s ago: executing program 4 (id=1480): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) (async) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "901c551265406c7f306003d816e8bd000000001800", [0x8, 0x3]}}) (async) ioctl$BLKRRPART(r0, 0x125f, 0x0) 10.971291048s ago: executing program 3 (id=2186): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback={0x41020000}}, 0x1c) 10.054787756s ago: executing program 2 (id=2193): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x640, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3) sched_getscheduler(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x53cb1000) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) syz_emit_ethernet(0x52, &(0x7f0000001180)={@local, @remote, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "f7d8ff", 0x18, 0x3c, 0x0, @rand_addr=' \x01\x00', @mcast2, {[@dstopts={0x6c}], {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x0, 0x1}}}}}}}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000180001000000000000000000020000000000000700000000060015000400000014001680060008"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) r6 = socket(0x28, 0x1, 0x0) connect$bt_sco(r6, &(0x7f0000000340), 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) r7 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r7, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) 10.00841725s ago: executing program 3 (id=2195): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0xb, 0x6, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)={0x2c, 0x2d, 0x1, 0xfffffffc, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0xb, 0x125, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x133}]}]}, 0x2c}], 0x1, 0x0, 0x0, 0x4}, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000003c0), 0x20, &(0x7f0000000600)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}, {@max_read={'max_read', 0x3d, 0x2}}], [{@euid_gt}, {@smackfsfloor={'smackfsfloor', 0x3d, '/+'}}, {@flag='mand'}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@dont_hash}]}}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x44, r1, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x8}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x8000}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0xff}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x2}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x9}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0xff}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0xc004) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d000900ea11c21d0005000000", 0x29}], 0x1) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) r5 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r5, 0x84, 0x9, &(0x7f0000000000), 0x98) r6 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r6, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818) ioprio_set$pid(0x2, 0x0, 0x0) syz_usbip_server_init(0x1) r7 = socket$nl_rdma(0x10, 0x3, 0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001a000100000000000000006f2d0826e934fef400000000001400050000000000000000000000000000000001"], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0xc4}, 0x20008040) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002feb720991104908c0f01020301090224000200000000090400070059c124000904000001ff053400090506000040"], 0x0) r9 = socket(0x2, 0x80805, 0xffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r10 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r9, 0x84, 0x7a, &(0x7f0000000080)={r11, 0x4, "179da51e"}, &(0x7f00000000c0)=0xc) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000240)=@assoc_value={r11, 0x9}, 0x8) 8.04278337s ago: executing program 2 (id=2197): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblcr\x00'}, 0x2c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], 0x0, 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0cc5605, &(0x7f0000000680)={0x2, @win={{0x9, 0xc, 0x8, 0x8}, 0x8, 0x0, 0x0, 0x9, &(0x7f0000000780)="7c3db5b614f551010688956184f9a4681f27eaafa9b323316972c712ecc898a0adee2cf5cd1faafb1bae4b8f8eaa26a896c410bf6d572cf357ddf4b9f05aec5de92c2dcfcbfe3eddc40b0d495a56d8c0342910db18be55e897fc416978238af0101868eafea5029d2597d3ca9984b6bb2b1e150c8723b1ae43a420df1cf03770f02625a974423a3142fd9b903082920cb4e66ba5c0ae5416aa898ad3fbbaefaec7d450754fc1dc20f3149b3970a3d26e93b60b8ef96f820e9feb659febd10943b9a152ce177be19cfdac4d", 0x5}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f0000002540)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) r7 = open(&(0x7f0000000000)='./bus\x00', 0x145542, 0x0) fgetxattr(r7, &(0x7f0000000040)=@known='security.selinux\x00', 0x0, 0x0) r8 = shmat(r6, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r6, &(0x7f0000ff9000/0x1000)=nil, 0x5000) shmdt(r8) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000480)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0xfa, "729bee", "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"}}, 0x110) sendmmsg(0xffffffffffffffff, &(0x7f0000002340), 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00'}, 0x2c) write(r0, 0x0, 0x0) 7.116788489s ago: executing program 0 (id=2198): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x8902, r4, {0xffff, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 7.034677394s ago: executing program 1 (id=2199): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000002c0)=0x200000000) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x40, 0x24, 0xf0b, 0x3, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x8000, 0x7b67da7bc4244323, 0x1}}}}]}, 0x40}}, 0x0) 6.814081544s ago: executing program 1 (id=2200): syz_open_dev$vim2m(&(0x7f0000000000), 0x4000000000403, 0x2) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7fff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000280)={0x0, 0x1, 0x6, 0x0, 0x480, 0x2080, 0x7}) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmsg$GTP_CMD_ECHOREQ(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20000840}, 0x24008004) recvmmsg(r3, &(0x7f00000050c0), 0x0, 0x2, 0x0) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r5 = openat$smackfs_ptrace(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$smackfs_ptrace(r5, &(0x7f0000000100), 0x14) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r7, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) unshare(0x24020400) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r8, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) setsockopt$inet_tcp_int(r6, 0x6, 0x6, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000500)={{{@in=@multicast2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@dev}}, 0x0) keyctl$chown(0x4, r4, r9, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000003d0007010000000000000000047c0000080008800c00018006000610800a00000c00028006001700800a0000853229"], 0x30}}, 0xc000) 6.714744778s ago: executing program 0 (id=2201): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b02d25a80648c2594f90524fc60100c060003000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8f"], 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r1, @ANYRES32, @ANYRESDEC=r0, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="ffffffff17d693c4032dd2685991dcbb209a9c67a1776d593c51949f57df4a7594359977ea0cc3e090e215a8c5e7d03c659bd6c15e3af93916f0f4e017611758f7256bfbc1c0d1ca654a87fbb3d2bc0e164aaa207be2c65eec6b6607829fc0bf87d296"], 0x48) syz_usb_connect(0x6, 0xa6a, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000336852d204c052b000201010203010902580a04040920fe090461060372b508810a24010180990201020724060000adca05240008000d240f01ffffffff09004cf70909050f02400007fb01612e225b9d51d6d1b0e65bd135a430349e39deb80c211dfa0349b22d365bbf03464d7107da11a6053ec64933cb8dc20825e9b8e4337cfe53b1c70478a84d87e76b5b9b0e8ff78493542e15d56d0a54fe5f7978c0a7ca28f5c3a17a8595ee92c3ea0725010207060009050813200004000307250184cd4f160725018305050009050d024000200ea0072501030602003036f7381eb42c0ca091dd67316fb61e71b4c235c415f04849831238e52884777d357585aa1fdb770d4a981c652b444e090496000696b7ec0709050c0000020201cc2c23209376b2d8816d357341308e172c2ccfd7af0ca497347469e137447e25c258ac34d0ec4ac870cdd9024e0905800000020508030725010300800009050f024000000500090507000004400a080905011000020504830725018208030009050200100002018107250101490800072501028406000904a9020c8bca85040a24010100f90201020924030400010603f105240501800c240703030001cdde0789290d24060304030300020b6e00090924060501010300520a2408020a020d3f36430624060000f205240008000d240f010800000001000020020724140300050007240a062f0406042402011524124000a317a88b045e4f01a607c0ffcb7e392a0905080c1000000b5f07250101040200620d46158c44664576df41d7fd2097f92c931d8d97b32c70f72d4702fcdccb6bc79a88acc22b51a6eafe28efdf8f4e809f7c2cd90de23190d5303ad13130998e54e18e67cdc5366214c5a1543e4916d491ddd34a5280eda2717743996a8d194698ad09050100200000ff020725010100000009050208400010040609050a0c00040905030725018200010009050e0000020787010725018103060009050e1000040709030725010103010009050903cf0307810609050200000207000b2422b2af9709effbd70c4f233135d4e91971a77b393f5e7bc4fefff268a08bc3051bd4ae5731a512d9a9175acb2cc3369b758872287d24184bbb500ca9f8620b2f4f05b7ce71f2c45eea2ca59b5217bc823e5532b57d80636a180840940912f70ae3fb765e9e257d00fd7ef3c7be0703608320da6eaa45be296e0709050b08080004058d0905070c20000908ae09050f1008000d05049c0e9c6cc931202bb73fb11317d762789c237735b9ac8e67e52a1a6cc8d48fb7820950d756098a5eb46cd12460d18354ecbc5de8cd15c45caa4439202223b50e081e3b995e4aecb083f7e65117468a1520caf423f726e047f7a2e2e458de0d333a272150b61eae69f84ca32beeb1ebd4e409d216d7405981ba21680b61ddd9d6e2b812ddf16449d29a37862f527e429c976c6feb43c1b4ac40fbef54090501040002800390090464020f4ca5bf030724060000c1fb05240002000d240f01010000800500ffff0905241505000624060001b805240006000d240f01e706000003000b000806241a0400040424020007240a008d92fb05240103041024070505000700000106000300010005240102040724140002b10009050710ff031006030725018177080009051810ff030807010725018101030007250182a90e00090500010004000b04ab0b2a6452d6305798192b5a4c688ac9d629cbaeffa09310a9499a2c05c2e2b819356d644d95f72454ee39593eef7a3d53eeec05674ea2275b9d5837973090f0b02e862ee387716815cd5a294e6df7244160eca756c8ca459e41e50a634bb648c606a3a38f444db5da1175b8ddb5fcfec2f06d9a8acbf38cb6b250dbe3a11bcdfa96890445db279f34b04dccacd03f9853c17f6b7a0b93a71bca4fd669f897bc2a5ba8ad13dc54e6f72e760725018009ff03090508080800930504072501800508009211681b9d7646073887cbbfaf77a58b788a638133e745607c78db0504ef7d57accd6248a35320f362d7d45c89ef2b253d225f8e9398ef96f1cf97ca0beed54d5defed6bcbb776c65343f437fb2edb35676638f4d878a301268f811cf6da491b0ffad576bffe359ed397ccb4aaa58fb9a78ca06e66a269dfbb3242471f50dc0bd4152874fe379e485b2ca20fd0d8e4c1a5fe69070ff27830a6efb5dd89f759e5be6e09050d01080040060409050000000204ba03090502102802030f36620c123ef2169f31d8ec5694139e9a8181b9abfced61cf7ed929b7e397a6ec496dd497139fa1ce7405c6d8e60b1f45d9a4a83d0ac118edb7ac9042af0d5536517b3d3c852cc10ed1040b20d9455d9ecc42a53c95935dc3de26932d0c98bed00e04d309050300ff03080a04c1036f95360c56445a763d83a5682a106037df650b10253c6d2fd654af3db0ebaf1fd3dbcbb7f5dea81adb2da9a95c012dc2f035ccab68efd29312c0526f96678db93a9e1933f2cf10f19786ff8883b532afe0b283412a6a4570f30856f7a23044c1ecb4eb27f903d31912114960daa1a479f9e40c5427a26bd555833c74ce7a27856535132631b1edd34ccc564f2bdf0a2f80836a717d99dcdb88eefc3ae43fad880eabbf82c490757bb1b1c930f17d48b9598df8902b9c11f17f45b8e7cbcd9e4b0ecbc25d2742ab5af8350f599773ede2f54160fa14124adec361530c3b83b10cb86f1af1b85365506845b75d46c21935161eebaed3e04c8c123611dad6143d47ffae2d448d4c36ed77660905070108008e8c09ae017e909a2bdf482f99fa769adb5c65107b73027962bb4f5199cf0159eef63ec7e439f8a67978b929a4e88d6aa9dd27e9d88552d58ef339cadede2cb703730748996282d663e743e649133f02aa6ce36dfe50165060c54c8bb603af2b8e576b2ebcbc20847427e0bff2c11c38aa8fdbc7edb08032c47fae66930eb2b63a48494bfa6bfac2b501ddd3ba036b05078720ad0c9dff7d6639982e0d01cd64a0661bdd2c6f7e1408a255ea4d0fd4413109050b0020000e05010905010408000e07090725010308100009050c0108003d107f09050d002000ff09103d06a839490cae135cb501101069c0f72cd945f0a1c95e80267b1f5343200df8dc136fd2739f7ad4f92138e0c39dde334b1c650d7df611785a2f298b8361203bf135b4c0b47337e18ad21808b1793cd46434815f19cd933fb2ae1da65d7e81d81c610e6ccedad1f054abf4b010541024945009343249970cbc8ea9adf1c07b1bac1e49bc8f624e9a4a4b50ecb817b20cc16b2681f12a920c446d712175598bfac195bf1b2564bd54d0b333cdc13f522f8618f0aaee3e31cf43a47373ac9192d13140e22cdff7c4b674ef2d3963dc70f5ab504cdb858685e943bff86ee1202bf8b93d21dc6fcf5fe280c05cbc3a3d5fa75352145a1a247b700c42fd2b2ef30fbb0bc7ef836a1ed424691423d829038973250f48c6a8464a90bf9d470bb517f9bd99c72280fbfc3c1d7ca1bd09050e0100020d08038604c4639fc538f500d4c5d2fdb1fc45f4742136063dce8e760a56deb04658cbc7a17a81910b399df7ef1c0b17c6267124c4379d4e9f94dc3cb64af13de255444d57be5dc6ef0166287d5b362cbaaf16557390c66bc3900ff067b5513c08c980db8b405636a4b80b48d72c1da2b1bb7291e0b4026994dcdfa4b4aa1056e54d4f97315704c04b07250100040200"], &(0x7f0000000d80)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x201, 0x4, 0x5, 0xad, 0xf7, 0x7}, 0x1b, &(0x7f0000000f00)=ANY=[], 0x4, [{0xce, &(0x7f0000001000)=ANY=[]}, {0x1e, &(0x7f0000000d40)=ANY=[@ANYBLOB="1e0312f50a000000000000001154b408752482cee60d0b03030002000000435832a32397a02a58260ddd74be325bafba3abe49e075cb9ac7d76ab2bd929d"]}, {0x4, &(0x7f0000000240)=@lang_id={0xee, 0x3, 0x43f}}, {0x9, &(0x7f0000000e40)=@string={0x9, 0x3, "3944df7b7b9fcd"}}]}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, r2, 0x4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000079104c000000000005000000000000009500000000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r3, 0x117, 0x5, 0x0, 0xc1) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\\\x00\x00 \x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0xff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, 0x0) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockname(r7, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r6, 0x5386, &(0x7f00000001c0)) io_setup(0x3ff, &(0x7f0000000500)) close_range(r8, r7, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) 6.294821712s ago: executing program 2 (id=2202): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000480)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1ae96d0103010000", 0x8) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x3, "e699ddb6"}]}}, 0x0}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000040)=ANY=[], 0xffc9) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x121844, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r3, 0x3b87, &(0x7f00000003c0)={0x18, 0x0, 0x1, 0x0, 0x0, 0xd5}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB="000000f9ffffffffffffff0000000000000000001b59a69ffb202fbdf4b4d68d93e436c3ddd951e63c220068468d0768a832fe9b23df07f9040d3a18f6c60f41f0e60c66304459000d7f2150193f5b3fbd3dfd38b79d1395032f9d567b7a1fc746a6994dfc6fee2dd51db8f5dbd2860c49e54c28c4b1bd7e389426fc366ccecf05f1c47368b79a9526ce6c83fa", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r4, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000600)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r5}, &(0x7f0000000100)=0x18, &(0x7f0000000140)}, 0x20) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_CREATE_PIT2(r8, 0x4040ae77, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, 0x0, 0x48) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r9) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r10) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 5.957800329s ago: executing program 3 (id=2203): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000040)={0x0}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000a010000"]) 5.538884383s ago: executing program 1 (id=2204): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r0, &(0x7f0000009200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18, 0x80}}], 0x1, 0xfe00) 5.430130627s ago: executing program 3 (id=2205): syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000680)={0x2, @win={{0x9, 0xc, 0x8, 0x8}, 0x8, 0x0, &(0x7f00000002c0)={{0xb, 0x9, 0x9, 0x3}, &(0x7f0000000240)={{0x0, 0x2, 0x0, 0xc}}}, 0x9, &(0x7f0000000780)="7c3db5b614f551010688956184f9a4681f27eaafa9b323316972c712ecc898a0adee2cf5cd1faafb1bae4b8f8eaa26a896c410bf6d572cf357ddf4b9f05aec5de92c2dcfcbfe3eddc40b0d495a56d8c0342910db18be55e897fc416978238af0101868eafea5029d2597d3ca9984b6bb2b1e150c8723b1ae43a420df1cf03770f02625a974423a3142fd9b903082920cb4e66ba5c0ae5416aa898ad3fbbaefaec7d450754fc1dc20f3149b3970a3d26e93b60b8ef96f820e9feb659febd10943b9a152ce177be19cfdac4d", 0x5}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f0000002540)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r5 = shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x145542, 0x0) fgetxattr(r6, &(0x7f0000000040)=@known='security.selinux\x00', 0x0, 0x0) r7 = shmat(r5, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmdt(r7) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000480)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0xfa, "729bee", "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"}}, 0x110) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00'}, 0x2c) 5.317226795s ago: executing program 1 (id=2206): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x7, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x7, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000300)=[{0x0}, {&(0x7f00000005c0)=""/228, 0xe4}], 0x2, 0xfffffffc, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket(0x10, 0x803, 0x0) (async) socket(0x10, 0x803, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1600000000000000040000000500000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000080d22a50fc2b4bca5dff53098e76ba825af4628441297f498c5116c8b3a9fae869e289dc7650180c61d1db852d6bae28c3a36cba3e6f6acb28dba5eb5cc28aba9f76905f8df40a56c33d6b24b5658f27c04829ffb0f5989bae2af81035bb8bfc78b86974aa026aa63dea1b04"], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1600000000000000040000000500000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000080d22a50fc2b4bca5dff53098e76ba825af4628441297f498c5116c8b3a9fae869e289dc7650180c61d1db852d6bae28c3a36cba3e6f6acb28dba5eb5cc28aba9f76905f8df40a56c33d6b24b5658f27c04829ffb0f5989bae2af81035bb8bfc78b86974aa026aa63dea1b04"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, @void, @value}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r7}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r7}, 0x18) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x3}) (async) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x3}) r9 = syz_io_uring_setup(0x41ee, &(0x7f0000000280), &(0x7f0000c57000), 0x0) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa08, &(0x7f0000000380)={{&(0x7f00007db000/0x2000)=nil, 0x2000}}) close_range(r6, r9, 0x0) 3.738781974s ago: executing program 1 (id=2207): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000000040)) syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) 3.659751568s ago: executing program 2 (id=2208): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r1, 0x2000000) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x4c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}]}]}, 0x4c}, 0x1, 0xf0}, 0x0) 3.611284346s ago: executing program 3 (id=2209): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'team_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000041000001c00128009000100766c616e000003000c000280060001000400000008000500", @ANYRES32=r1, @ANYBLOB="08000400000d"], 0x4c}}, 0x0) 2.566681238s ago: executing program 3 (id=2210): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040)}, 0x38) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x50, 0x0, 0x6}, {0x20, 0x0, 0x0, 0x8000}, {0x6}]}, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x2c, 0x3d, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x05G'}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x2c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\\\x00\x00 \x00'}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYRES32], 0x0) (async) r3 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYRES32], 0x0) syz_usb_control_io(r3, 0x0, 0x0) 2.566147719s ago: executing program 0 (id=2211): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) write$UHID_CREATE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x300}}], 0x400000000000172, 0x4000000) 2.514526052s ago: executing program 2 (id=2212): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblcr\x00'}, 0x2c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], 0x0, 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0cc5605, &(0x7f0000000680)={0x2, @win={{0x9, 0xc, 0x8, 0x8}, 0x8, 0x0, 0x0, 0x9, &(0x7f0000000780)="7c3db5b614f551010688956184f9a4681f27eaafa9b323316972c712ecc898a0adee2cf5cd1faafb1bae4b8f8eaa26a896c410bf6d572cf357ddf4b9f05aec5de92c2dcfcbfe3eddc40b0d495a56d8c0342910db18be55e897fc416978238af0101868eafea5029d2597d3ca9984b6bb2b1e150c8723b1ae43a420df1cf03770f02625a974423a3142fd9b903082920cb4e66ba5c0ae5416aa898ad3fbbaefaec7d450754fc1dc20f3149b3970a3d26e93b60b8ef96f820e9feb659febd10943b9a152ce177be19cfdac4d", 0x5}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f0000002540)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) r7 = open(&(0x7f0000000000)='./bus\x00', 0x145542, 0x0) fgetxattr(r7, &(0x7f0000000040)=@known='security.selinux\x00', 0x0, 0x0) r8 = shmat(r6, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r6, &(0x7f0000ff9000/0x1000)=nil, 0x5000) shmdt(r8) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000480)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0xfa, "729bee", "129b1a32465f5daf7b77a1e055dd0d7bc184a65733a730d7c4655959b63929d0e95401d7c475bca09a6917672d5e9d4373615569f16fd5b58156836ea3acb5fda7aa0c4e9d4b2aa08fcd8f16e20fa7f58fb9a73c136591545474559bbbd979d8764e33c36a155a8494838195f2f45570d32211aed355c87b8e084928aabd4b47599431a58a68f88c2bdb8cbce8f875ad2edf3309d3d37c5bab659b044b2ff54e7d12412e6769b5589a38652cf6ffcdc81b91f6147c6839490607b7f02a385b3ca5ff8321725537af28056182589d7a27e0b172c2169beaa8e678e8e8310c3c350b3ee448e3dab69e6ac964d65a2ce5dcad096933ffac61ffff4e1a8bdf55962a"}}, 0x110) sendmmsg(0xffffffffffffffff, &(0x7f0000002340), 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00'}, 0x2c) write(r0, 0x0, 0x0) 2.346024571s ago: executing program 1 (id=2213): gettid() syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xd3, 0xaf, 0x1, 0x20, 0x17cc, 0x1010, 0x4072, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3d, 0x9, 0xb}}]}}]}}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000}) ioctl$sock_bt_hci(r1, 0x400448cc, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'virt_wifi0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'virt_wifi0\x00'}) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0xffffffffffffffff}, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000004000)={0xf, {"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", 0xfffffffffffffe59}}, 0xfa) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setrlimit(0xf, &(0x7f0000000040)={0x5, 0x7}) timer_create(0x3, 0x0, &(0x7f0000000200)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x19) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) timer_settime(r4, 0x0, &(0x7f0000000280)={{}, {0x0, 0x989680}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r8 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r8, 0x29, 0x24, &(0x7f0000000000)=0x400, 0x4) write$tun(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0000110000000000000060ec970000302c00fe8000000000000000000000000000aaff0200000000000000000000000000013a000000000000008902907800000000fc0000"], 0xfdef) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x20004000) 1.004734939s ago: executing program 0 (id=2214): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = open(&(0x7f0000000240)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000000)=""/190, 0xbe) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x3f0, 0x0, 0x25, 0x148, 0x158, 0x60, 0x358, 0x2a8, 0x2a8, 0x158, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x110, 0x158, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x5e, 0x0, 0x9, 0x0, 0x2, 0xffffffff, 0x7, 0x18}}}, @common=@unspec=@ipvs={{0x48}, {@ipv4=@broadcast, [0x0, 0xffffff00, 0x0, 0xff], 0x4e21, 0x3c, 0x5, 0x4e21, 0x8, 0x8}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x1a0, 0x200, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3, 0x2, 0x4, 'syz0\x00', 0x4}}, @common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x0, 0x80000, 0x8000}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x450) 1.004262062s ago: executing program 2 (id=2215): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x103400, 0x0) (async) r1 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000001680)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c0000000800090581030002000000090401b169020d00010904010102020d0000090582020002000000090503368b"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000001580)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) fstat(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xee00, r5) setuid(r5) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x38, 0x0, 0x0) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x400000000000077, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 894.463653ms ago: executing program 0 (id=2216): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) getrlimit(0x8, &(0x7f00000002c0)) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='veno\x00', 0x5) sendmmsg$inet(r0, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000180)="ae1d4b178f10911a2dab191193b809cf9294262aa07902937575ee00b79dde347c0e6b2970ac6c8aa4d76a09fbd96643ee0877b3d0badfdcef5d45ff3c02cbf632464c24039086f74548ccae132a1bafbfef8cc1860c4aad820da4977e44f7b489cfccac766c51391bfcdb9f5510c7770582516cb7d41772001624e5905bba54f08547a4485b5a2a98b5f5c690d0a825161e3d7e4b39365b43b2701c68b167bbdce33c013a9b89c9a7b823ec5ecd432f12dc063ddaa7431a3385e29d0c7ac17389308b450e", 0xc5}], 0x1}}], 0x1, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) creat(&(0x7f0000000140)='./file0\x00', 0x330e470bd789f8d8) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) 0s ago: executing program 0 (id=2217): getpid() sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) sendto$inet6(r1, &(0x7f0000003380)="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", 0xfb5, 0x22000040, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000bc0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000c00)=0x3b) kernel console output (not intermixed with test programs): 570.983317][T11932] __x64_sys_utimensat+0x11d/0x250 [ 570.988445][T11932] ? __pfx___x64_sys_utimensat+0x10/0x10 [ 570.994096][T11932] ? do_syscall_64+0x100/0x230 [ 570.998881][T11932] ? do_syscall_64+0xb6/0x230 [ 571.003581][T11932] do_syscall_64+0xf3/0x230 [ 571.008105][T11932] ? clear_bhb_loop+0x35/0x90 [ 571.012792][T11932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.018702][T11932] RIP: 0033:0x7ff7cb785d29 [ 571.023130][T11932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 571.042847][T11932] RSP: 002b:00007ff7cc60b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000118 [ 571.051289][T11932] RAX: ffffffffffffffda RBX: 00007ff7cb975fa0 RCX: 00007ff7cb785d29 [ 571.059288][T11932] RDX: 0000000020000180 RSI: 0000000000000000 RDI: 0000000000000003 [ 571.067278][T11932] RBP: 00007ff7cc60b090 R08: 0000000000000000 R09: 0000000000000000 [ 571.075266][T11932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 571.083253][T11932] R13: 0000000000000000 R14: 00007ff7cb975fa0 R15: 00007ffc38341238 [ 571.091258][T11932] [ 571.322448][T11938] netlink: 'syz.1.1640': attribute type 1 has an invalid length. [ 571.350129][T11938] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1640'. [ 571.531678][T11729] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 571.593403][T11729] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 571.604921][T11729] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 571.777254][T11729] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 572.028474][T11729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 572.796108][T11729] 8021q: adding VLAN 0 to HW filter on device team0 [ 572.817190][ T3411] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.824363][ T3411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 572.843757][ T3411] bridge0: port 2(bridge_slave_1) entered blocking state [ 572.850941][ T3411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 572.898944][T11729] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 572.909550][T11729] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 574.141642][T11973] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 574.660999][ T5908] vhci_hcd: vhci_device speed not set [ 574.769022][T11980] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 576.222087][T11729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 576.783972][T12011] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1657'. [ 577.569257][ T9] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 577.612974][T11729] veth0_vlan: entered promiscuous mode [ 577.626884][T11729] veth1_vlan: entered promiscuous mode [ 577.651861][T11729] veth0_macvtap: entered promiscuous mode [ 577.661446][T11729] veth1_macvtap: entered promiscuous mode [ 578.697831][T11729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 578.845318][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 578.866935][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 578.886254][T11729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.898269][T11729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 578.977448][T11729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 578.999511][T11729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.028975][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 579.042042][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 579.051182][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.068199][ T9] usb 1-1: config 0 descriptor?? [ 579.084217][T11998] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 579.191240][T11729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 579.203901][T11729] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.247474][T11729] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.277866][T11729] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.288072][T11729] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.428331][T12034] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 579.453333][T12034] netlink: 'syz.2.1663': attribute type 9 has an invalid length. [ 579.461602][T12034] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1663'. [ 580.035468][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 580.043989][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 580.077918][ T9] plantronics 0003:047F:FFFF.0010: unknown main item tag 0xd [ 580.111709][ T9] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving [ 580.131187][ T9] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 580.172813][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 580.202348][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 581.306214][T12045] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 581.338137][T12045] netlink: 'syz.3.1667': attribute type 1 has an invalid length. [ 581.352829][T12045] netlink: 'syz.3.1667': attribute type 2 has an invalid length. [ 581.408635][ T9] usb 1-1: USB disconnect, device number 31 [ 582.699576][T12061] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 583.604700][T12074] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1672'. [ 584.048491][T12079] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1675'. [ 584.161972][T12074] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 584.169107][T12074] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 584.176448][T12074] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 584.309914][ T8866] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 585.116371][ T8866] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 585.128202][ T8866] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 585.139582][ T8866] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 585.151418][ T8866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.170276][ T9] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 585.193259][T12069] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 585.311608][ T8866] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 585.632248][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 585.657373][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 585.669851][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 585.679968][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 585.693593][ T9] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 585.703445][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.729659][ T9] usb 3-1: config 0 descriptor?? [ 585.835949][ T5908] usb 2-1: USB disconnect, device number 29 [ 585.988857][ T6744] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.161394][ T6744] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.190370][T12097] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1680'. [ 586.200345][ T9] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0011/input/input46 [ 586.261094][ T5825] Bluetooth: hci4: command 0x0405 tx timeout [ 586.267391][ T5825] Bluetooth: hci3: command 0x0406 tx timeout [ 586.279812][ T5831] Bluetooth: hci1: command 0x0406 tx timeout [ 586.302357][ T9] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0011/input/input47 [ 586.368336][ T9] kye 0003:0458:5011.0011: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.2-1/input0 [ 586.378817][T12086] autofs4:pid:12086:validate_dev_ioctl: invalid path supplied for cmd(0xc0189372) [ 586.419053][ T6744] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.070379][ T5825] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 587.091311][ T5825] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 587.133880][ T5825] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 587.178057][ T5825] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 587.205272][ T5825] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 587.214033][ T6744] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.230045][ T5825] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 587.365937][T12110] lo speed is unknown, defaulting to 1000 [ 587.521761][ T9] usb 3-1: reset high-speed USB device number 35 using dummy_hcd [ 588.790230][ T5908] usb 3-1: USB disconnect, device number 35 [ 588.932866][T12110] lo speed is unknown, defaulting to 1000 [ 588.979214][T12131] netlink: 'syz.0.1689': attribute type 10 has an invalid length. [ 589.112619][T12131] team0: Port device netdevsim0 added [ 589.131659][ T6744] bridge_slave_1: left allmulticast mode [ 589.137365][ T6744] bridge_slave_1: left promiscuous mode [ 589.172228][ T6744] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.207148][ T6744] bridge_slave_0: left allmulticast mode [ 589.219965][ T6744] bridge_slave_0: left promiscuous mode [ 589.232529][ T6744] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.300105][ T5821] Bluetooth: hci2: command tx timeout [ 589.724695][ T9] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 590.010169][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 590.096009][ T9] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=96.8c [ 590.107028][ T9] usb 2-1: New USB device strings: Mfr=57, Product=113, SerialNumber=81 [ 590.147993][ T9] usb 2-1: Product: syz [ 590.152986][ T9] usb 2-1: Manufacturer: syz [ 590.160208][ T9] usb 2-1: SerialNumber: syz [ 590.186621][ T9] usb 2-1: config 0 descriptor?? [ 591.364205][ T9] gspca_main: se401-2.14.0 probing 047d:5003 [ 591.390109][ T5821] Bluetooth: hci2: command tx timeout [ 592.890993][ T9] gspca_se401: read req failed req 0x06 error -19 [ 592.904299][ T9] usb 2-1: USB disconnect, device number 30 [ 592.940585][ T6744] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 592.977047][ T6744] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 592.998093][ T6744] bond0 (unregistering): Released all slaves [ 593.170047][T12153] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1693'. [ 593.789953][ T5821] Bluetooth: hci2: command tx timeout [ 595.909532][ T5821] Bluetooth: hci2: command tx timeout [ 596.383201][ T29] audit: type=1326 audit(1736410626.614:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12223 comm="syz.3.1713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7c7585d29 code=0x7ffc0000 [ 596.536847][ T29] audit: type=1326 audit(1736410626.614:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12223 comm="syz.3.1713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7c7585d29 code=0x7ffc0000 [ 596.561440][ T29] audit: type=1326 audit(1736410626.614:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12223 comm="syz.3.1713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb7c7585d29 code=0x7ffc0000 [ 596.634321][ T29] audit: type=1326 audit(1736410626.614:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12223 comm="syz.3.1713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7c7585d29 code=0x7ffc0000 [ 596.730298][ T29] audit: type=1326 audit(1736410626.614:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12223 comm="syz.3.1713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7c7585d29 code=0x7ffc0000 [ 596.940015][T12229] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1714'. [ 597.027856][ T29] audit: type=1326 audit(1736410626.654:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12223 comm="syz.3.1713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fb7c7585d29 code=0x7ffc0000 [ 597.096026][T12234] Invalid option length (0) for dns_resolver key [ 597.116729][ T29] audit: type=1326 audit(1736410626.654:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12223 comm="syz.3.1713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7c7585d29 code=0x7ffc0000 [ 597.138782][ T29] audit: type=1326 audit(1736410626.654:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12223 comm="syz.3.1713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7c7585d29 code=0x7ffc0000 [ 597.209345][ T29] audit: type=1326 audit(1736410626.654:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12223 comm="syz.3.1713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fb7c7585d29 code=0x7ffc0000 [ 597.410202][ T29] audit: type=1326 audit(1736410626.654:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12223 comm="syz.3.1713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7c7585d29 code=0x7ffc0000 [ 598.058842][T12243] netlink: 1200 bytes leftover after parsing attributes in process `syz.3.1716'. [ 598.589338][T12110] chnl_net:caif_netlink_parms(): no params data found [ 598.742102][T12248] set match dimension is over the limit! [ 599.851963][ C0] vcan0 (unregistered): j1939_tp_rxtimer: 0xffff888024aebc00: rx timeout, send abort [ 600.361599][ C0] vcan0 (unregistered): j1939_tp_rxtimer: 0xffff888024aebc00: abort rx timeout. Force session deactivation [ 600.453654][T12258] misc userio: The device must be registered before sending interrupts [ 600.548887][ T6744] hsr_slave_0: left promiscuous mode [ 600.565013][ T6744] hsr_slave_1: left promiscuous mode [ 600.573657][ T6744] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 600.587565][ T6744] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 600.599360][ T6744] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 600.616179][ T6744] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 600.646247][ T6744] veth1_macvtap: left promiscuous mode [ 600.652089][ T6744] veth0_macvtap: left promiscuous mode [ 600.657783][ T6744] veth1_vlan: left promiscuous mode [ 600.663535][ T6744] veth0_vlan: left promiscuous mode [ 600.740515][ T5871] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 600.895197][ T5871] usb 2-1: Using ep0 maxpacket: 16 [ 600.901525][ T5871] usb 2-1: no configurations [ 600.906398][ T5871] usb 2-1: can't read configurations, error -22 [ 601.039853][ T5871] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 601.220010][ T5871] usb 2-1: Using ep0 maxpacket: 16 [ 601.229427][ T5871] usb 2-1: no configurations [ 601.239902][ T5871] usb 2-1: can't read configurations, error -22 [ 601.255342][ T5871] usb usb2-port1: attempt power cycle [ 601.292833][ T6744] team0 (unregistering): Port device team_slave_1 removed [ 601.354327][ T6744] team0 (unregistering): Port device team_slave_0 removed [ 601.599965][ T5871] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 601.631405][ T5871] usb 2-1: Using ep0 maxpacket: 16 [ 601.648286][ T5871] usb 2-1: no configurations [ 601.653858][ T5871] usb 2-1: can't read configurations, error -22 [ 601.796997][ T5871] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 601.845376][ T5871] usb 2-1: Using ep0 maxpacket: 16 [ 601.859569][ T5871] usb 2-1: no configurations [ 601.864682][ T5871] usb 2-1: can't read configurations, error -22 [ 601.880932][ T5871] usb usb2-port1: unable to enumerate USB device [ 601.926799][T12110] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.934262][T12110] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.941653][T12110] bridge_slave_0: entered allmulticast mode [ 601.948816][T12110] bridge_slave_0: entered promiscuous mode [ 601.959145][T12110] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.969172][T12110] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.976673][T12110] bridge_slave_1: entered allmulticast mode [ 601.984260][T12110] bridge_slave_1: entered promiscuous mode [ 602.007189][T12274] bridge2: entered promiscuous mode [ 602.012723][T12274] bridge2: entered allmulticast mode [ 602.019256][T12274] team0: Port device bridge2 added [ 602.090671][T12110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 602.163054][T12110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 602.325469][T12286] netlink: 'syz.3.1727': attribute type 1 has an invalid length. [ 602.757350][T12110] team0: Port device team_slave_0 added [ 602.883546][T12110] team0: Port device team_slave_1 added [ 602.946808][T12290] netlink: 'syz.2.1726': attribute type 2 has an invalid length. [ 603.020436][T12110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 603.055843][T12110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 603.092403][T12110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 603.282901][T12110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 603.430319][T12110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 603.538206][T12110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 603.763863][T12299] binder: 12298:12299 ioctl c0306201 20000480 returned -14 [ 603.843456][T12110] hsr_slave_0: entered promiscuous mode [ 603.857909][T12110] hsr_slave_1: entered promiscuous mode [ 603.883943][T12299] pimreg3: entered allmulticast mode [ 603.955267][T12298] pimreg3: left allmulticast mode [ 604.698711][ T8868] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 604.773994][T12315] macsec0: entered allmulticast mode [ 605.043726][ T8868] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 605.053192][ T8868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.069419][ T8868] usb 1-1: config 0 descriptor?? [ 605.127505][T12315] bridge2: entered promiscuous mode [ 605.132955][T12315] bridge2: entered allmulticast mode [ 605.145370][ T8868] cp210x 1-1:0.0: cp210x converter detected [ 605.158976][T12315] team0: Port device bridge2 added [ 605.183511][T12323] netlink: 'syz.2.1739': attribute type 1 has an invalid length. [ 605.191953][T12323] netlink: 'syz.2.1739': attribute type 1 has an invalid length. [ 605.210521][T12323] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1739'. [ 605.270102][ T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 605.368785][T12302] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1733'. [ 605.439097][ T9] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 605.473094][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.492548][ T9] usb 4-1: config 0 descriptor?? [ 605.518566][ T9] cp210x 4-1:0.0: cp210x converter detected [ 605.790304][ T8868] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 605.940603][ T9] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 605.957582][ T8868] usb 1-1: cp210x converter now attached to ttyUSB0 [ 605.972965][ T9] usb 4-1: cp210x converter now attached to ttyUSB1 [ 606.003392][T12110] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 606.039068][T12110] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 606.068862][T12110] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 606.101626][T12110] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 606.174009][ T5871] usb 4-1: USB disconnect, device number 19 [ 606.193508][T12302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 606.195928][ T5871] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 606.263788][T12110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 606.273556][T12302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 606.294990][ T5871] cp210x 4-1:0.0: device disconnected [ 606.324050][T12110] 8021q: adding VLAN 0 to HW filter on device team0 [ 606.350778][ T73] bridge0: port 1(bridge_slave_0) entered blocking state [ 606.357968][ T73] bridge0: port 1(bridge_slave_0) entered forwarding state [ 606.365837][ T8868] usb 1-1: USB disconnect, device number 32 [ 606.418566][ T8868] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 606.630131][ T8868] cp210x 1-1:0.0: device disconnected [ 606.634556][ T73] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.643203][ T73] bridge0: port 2(bridge_slave_1) entered forwarding state [ 607.544364][ T5821] Bluetooth: hci2: command tx timeout [ 608.200475][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 608.200493][ T29] audit: type=1326 audit(1736410638.434:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12347 comm="syz.2.1746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e56f85d29 code=0x7ffc0000 [ 608.298455][ T29] audit: type=1326 audit(1736410638.434:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12347 comm="syz.2.1746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e56f85d29 code=0x7ffc0000 [ 608.369753][ T29] audit: type=1326 audit(1736410638.454:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12347 comm="syz.2.1746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=139 compat=0 ip=0x7f2e56f85d29 code=0x7ffc0000 [ 608.397813][ T29] audit: type=1326 audit(1736410638.464:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12347 comm="syz.2.1746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e56f85d29 code=0x7ffc0000 [ 608.466999][T12110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 608.548879][ T29] audit: type=1326 audit(1736410638.464:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12347 comm="syz.2.1746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e56f85d29 code=0x7ffc0000 [ 608.622342][ T29] audit: type=1326 audit(1736410638.464:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12347 comm="syz.2.1746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2e56f85d29 code=0x7ffc0000 [ 608.890170][ T29] audit: type=1326 audit(1736410638.534:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12347 comm="syz.2.1746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e56f85d29 code=0x7ffc0000 [ 608.992475][ T29] audit: type=1326 audit(1736410638.534:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12347 comm="syz.2.1746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e56f85d29 code=0x7ffc0000 [ 609.151920][ T29] audit: type=1326 audit(1736410638.564:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12347 comm="syz.2.1746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7f2e56f85d29 code=0x7ffc0000 [ 609.283746][ T29] audit: type=1326 audit(1736410638.564:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12347 comm="syz.2.1746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e56f85d29 code=0x7ffc0000 [ 609.525720][T12110] veth0_vlan: entered promiscuous mode [ 609.563251][T12110] veth1_vlan: entered promiscuous mode [ 609.621689][T12110] veth0_macvtap: entered promiscuous mode [ 609.758314][T12110] veth1_macvtap: entered promiscuous mode [ 609.807447][T12110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 609.890494][T12110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.989455][T12110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 610.205880][ T8866] usb 4-1: new low-speed USB device number 20 using dummy_hcd [ 610.336418][T12110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 610.372037][T12110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.441212][T12110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 610.500223][ T8866] usb 4-1: Invalid ep0 maxpacket: 32 [ 610.549943][T12110] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.618370][T12110] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.629883][ T8866] usb 4-1: new low-speed USB device number 21 using dummy_hcd [ 610.644228][T12110] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.663377][T12110] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.812710][ T8866] usb 4-1: Invalid ep0 maxpacket: 32 [ 610.828780][ T8866] usb usb4-port1: attempt power cycle [ 610.999362][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 611.014588][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 611.085505][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 611.093807][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 611.381599][ T8866] usb 4-1: new low-speed USB device number 22 using dummy_hcd [ 611.450653][ T8866] usb 4-1: Invalid ep0 maxpacket: 32 [ 612.374435][ T1131] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.494150][ T8866] usb 4-1: new low-speed USB device number 23 using dummy_hcd [ 612.520588][ T8866] usb 4-1: Invalid ep0 maxpacket: 32 [ 612.527276][ T8866] usb usb4-port1: unable to enumerate USB device [ 612.551076][ T1131] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.230838][ T5825] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 613.470621][ T5825] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 613.484585][ T5825] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 613.499509][ T5825] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 613.510248][ T5825] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 613.519006][ T5825] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 615.196317][ T1131] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.294368][T12422] lo speed is unknown, defaulting to 1000 [ 615.512713][ T1131] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.700380][ T5821] Bluetooth: hci2: command tx timeout [ 615.867724][T12422] lo speed is unknown, defaulting to 1000 [ 616.312802][T12471] Bluetooth: hci5: Frame reassembly failed (-84) [ 616.498053][ T73] Bluetooth: hci5: Frame reassembly failed (-84) [ 616.845954][T12422] chnl_net:caif_netlink_parms(): no params data found [ 617.083015][ T1131] bridge_slave_1: left allmulticast mode [ 617.094023][ T1131] bridge_slave_1: left promiscuous mode [ 617.107836][ T1131] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.235384][ T1131] bridge_slave_0: left allmulticast mode [ 617.254159][ T1131] bridge_slave_0: left promiscuous mode [ 617.272934][ T1131] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.280750][T12401] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 617.451323][T12401] usb 4-1: config 0 has an invalid interface number: 65 but max is 0 [ 617.516799][T12401] usb 4-1: config 0 has no interface number 0 [ 617.756228][T12401] usb 4-1: New USB device found, idVendor=06cd, idProduct=0119, bcdDevice=de.0f [ 617.790553][ T5825] Bluetooth: hci2: command tx timeout [ 618.094042][T12401] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.117645][T12401] usb 4-1: config 0 descriptor?? [ 618.125071][T12401] keyspan 4-1:0.65: Keyspan 1 port adapter converter detected [ 618.133473][T12401] keyspan 4-1:0.65: found no endpoint descriptor for endpoint 87 [ 618.143063][T12401] keyspan 4-1:0.65: found no endpoint descriptor for endpoint 7 [ 618.152302][T12401] keyspan 4-1:0.65: found no endpoint descriptor for endpoint 81 [ 618.163333][T12401] keyspan 4-1:0.65: found no endpoint descriptor for endpoint 1 [ 618.171498][T12401] keyspan 4-1:0.65: found no endpoint descriptor for endpoint 2 [ 618.179218][T12401] keyspan 4-1:0.65: found no endpoint descriptor for endpoint 85 [ 618.188223][T12401] keyspan 4-1:0.65: found no endpoint descriptor for endpoint 5 [ 618.227239][T12401] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 618.395661][T12401] usb 4-1: USB disconnect, device number 24 [ 618.423158][ T5825] Bluetooth: hci5: command 0x1003 tx timeout [ 618.439247][ T5821] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 618.510840][T12401] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 618.664713][T12401] keyspan 4-1:0.65: device disconnected [ 618.673678][T12499] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1786'. [ 619.864085][ T5821] Bluetooth: hci2: command tx timeout [ 620.867300][T12524] netlink: 'syz.2.1794': attribute type 16 has an invalid length. [ 620.878304][T12523] netlink: 'syz.2.1794': attribute type 16 has an invalid length. [ 620.912181][T12524] netlink: 'syz.2.1794': attribute type 3 has an invalid length. [ 620.944580][T12523] netlink: 'syz.2.1794': attribute type 3 has an invalid length. [ 620.956646][T12524] netlink: 64066 bytes leftover after parsing attributes in process `syz.2.1794'. [ 620.997827][T12523] netlink: 64066 bytes leftover after parsing attributes in process `syz.2.1794'. [ 621.016985][ T1131] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 621.028765][ T1131] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 621.071082][ T1131] bond0 (unregistering): Released all slaves [ 621.193313][T12422] bridge0: port 1(bridge_slave_0) entered blocking state [ 621.200560][T12422] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.208513][T12422] bridge_slave_0: entered allmulticast mode [ 621.228407][T12422] bridge_slave_0: entered promiscuous mode [ 621.236828][T12422] bridge0: port 2(bridge_slave_1) entered blocking state [ 621.244531][T12422] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.252000][T12422] bridge_slave_1: entered allmulticast mode [ 621.259133][T12422] bridge_slave_1: entered promiscuous mode [ 621.317102][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 621.317119][ T29] audit: type=1326 audit(1736410651.544:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12535 comm="syz.1.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febaa585d29 code=0x7ffc0000 [ 621.345369][ T29] audit: type=1326 audit(1736410651.574:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12535 comm="syz.1.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7febaa585d29 code=0x7ffc0000 [ 622.300060][ T29] audit: type=1326 audit(1736410651.574:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12535 comm="syz.1.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febaa585d29 code=0x7ffc0000 [ 622.324245][ T29] audit: type=1326 audit(1736410651.574:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12535 comm="syz.1.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febaa585d29 code=0x7ffc0000 [ 622.346104][ T29] audit: type=1326 audit(1736410651.574:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12535 comm="syz.1.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7febaa585d29 code=0x7ffc0000 [ 622.367650][ C0] vkms_vblank_simulate: vblank timer overrun [ 622.374016][ T29] audit: type=1326 audit(1736410651.574:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12535 comm="syz.1.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febaa585d29 code=0x7ffc0000 [ 622.397459][ T29] audit: type=1326 audit(1736410651.574:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12535 comm="syz.1.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7febaa585d29 code=0x7ffc0000 [ 622.406507][T12543] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20001 [ 622.419817][ T29] audit: type=1326 audit(1736410651.574:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12535 comm="syz.1.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febaa585d29 code=0x7ffc0000 [ 622.447866][ C0] vkms_vblank_simulate: vblank timer overrun [ 622.454499][ T29] audit: type=1326 audit(1736410651.574:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12535 comm="syz.1.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7febaa585d29 code=0x7ffc0000 [ 622.476504][ T29] audit: type=1326 audit(1736410651.574:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12535 comm="syz.1.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febaa585d29 code=0x7ffc0000 [ 622.498102][ C0] vkms_vblank_simulate: vblank timer overrun [ 622.504803][ T5821] Bluetooth: hci2: command tx timeout [ 622.507536][T12422] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 623.538477][T12422] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 624.254580][T12553] bond2 (unregistering): Released all slaves [ 624.587151][ T5825] Bluetooth: hci2: command tx timeout [ 624.653388][T12422] team0: Port device team_slave_0 added [ 624.687810][T12422] team0: Port device team_slave_1 added [ 625.716653][T12422] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 625.734902][T12422] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 626.679721][T12422] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 627.310487][T12422] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 627.317509][T12422] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 627.362155][T12422] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 627.536439][T12422] hsr_slave_0: entered promiscuous mode [ 627.566219][T12422] hsr_slave_1: entered promiscuous mode [ 627.608124][T12422] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 627.642525][T12422] Cannot create hsr debugfs directory [ 629.021161][ T1131] hsr_slave_0: left promiscuous mode [ 629.052122][ T1131] hsr_slave_1: left promiscuous mode [ 629.086670][ T1131] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 629.101535][ T1131] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 629.112666][ T1131] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 629.269159][ T1131] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 630.631313][ T1131] veth1_macvtap: left promiscuous mode [ 630.636886][ T1131] veth0_macvtap: left promiscuous mode [ 630.642639][ T1131] veth1_vlan: left promiscuous mode [ 630.647969][ T1131] veth0_vlan: left promiscuous mode [ 631.410131][T12625] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1821'. [ 631.620707][T12631] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1825'. [ 632.307820][ T1131] team0 (unregistering): Port device team_slave_1 removed [ 632.368362][ T1131] team0 (unregistering): Port device team_slave_0 removed [ 633.227118][T12626] netlink: 'syz.3.1825': attribute type 21 has an invalid length. [ 633.235451][T12626] netlink: 'syz.3.1825': attribute type 1 has an invalid length. [ 633.560292][T12641] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1827'. [ 633.870378][T12401] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 633.889304][T12649] netlink: 'syz.0.1830': attribute type 1 has an invalid length. [ 633.946813][T12649] 8021q: adding VLAN 0 to HW filter on device bond2 [ 633.965794][T12651] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1830'. [ 634.016520][T12422] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 634.032064][T12401] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 634.044262][T12422] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 634.049897][T12401] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.066055][T12401] usb 2-1: config 0 descriptor?? [ 634.083379][T12401] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 634.124622][T12422] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 634.152532][T12422] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 634.545032][T12422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 634.564486][T12422] 8021q: adding VLAN 0 to HW filter on device team0 [ 635.017256][ T1131] bridge0: port 1(bridge_slave_0) entered blocking state [ 635.024440][ T1131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 635.033583][ T1131] bridge0: port 2(bridge_slave_1) entered blocking state [ 635.040718][ T1131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 635.238055][T12422] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 635.260038][T12422] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 635.590098][ T9] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 635.642253][T12422] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 635.914368][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 635.927354][ T9] usb 3-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=62.70 [ 635.939007][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.948452][ T9] usb 3-1: Product: syz [ 635.958212][ T9] usb 3-1: Manufacturer: syz [ 635.979998][ T9] usb 3-1: SerialNumber: syz [ 636.438608][ T9] usb 3-1: config 0 descriptor?? [ 637.153005][ T8866] usb 3-1: USB disconnect, device number 36 [ 637.281574][T12422] veth0_vlan: entered promiscuous mode [ 637.301628][T12422] veth1_vlan: entered promiscuous mode [ 637.338906][T12422] veth0_macvtap: entered promiscuous mode [ 637.368608][T12422] veth1_macvtap: entered promiscuous mode [ 637.429290][T12422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 637.453366][T12422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.481534][T12401] usb 2-1: USB disconnect, device number 35 [ 637.570906][T12422] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 637.615928][T12422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 637.650006][T12422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.681175][T12422] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 637.735866][T12422] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.773192][T12422] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.807782][T12422] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.840053][T12422] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.027896][ T3411] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 638.043773][ T3411] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 638.096835][ T3411] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 638.105064][ T3411] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 638.291197][T12701] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1841'. [ 639.360935][T12710] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1845'. [ 639.399764][T12710] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1845'. [ 639.444701][T12713] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1845'. [ 639.460386][T12713] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1845'. [ 639.617891][T12722] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1846'. [ 640.694388][ T73] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.012328][ T73] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.109211][ T73] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.212025][ T73] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.402955][T12734] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 641.423670][ T73] bridge_slave_1: left allmulticast mode [ 641.465317][ T73] bridge_slave_1: left promiscuous mode [ 641.480343][T12738] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 641.481184][ T73] bridge0: port 2(bridge_slave_1) entered disabled state [ 641.571985][T12741] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 641.656952][ T73] bridge_slave_0: left allmulticast mode [ 641.666795][ T73] bridge_slave_0: left promiscuous mode [ 641.690076][ T73] bridge0: port 1(bridge_slave_0) entered disabled state [ 641.732747][ T5821] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 641.745849][ T5821] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 641.757969][ T5821] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 641.780829][ T5821] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 641.801226][ T5821] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 641.808904][ T5821] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 642.059894][ T5908] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 642.129014][T12751] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1852'. [ 642.308943][ T5908] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 642.324519][ T5908] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 642.424687][ T5908] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 642.518356][ T5908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 642.624254][ T5908] usb 3-1: SerialNumber: syz [ 642.659782][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 643.699875][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 644.054839][ T5825] Bluetooth: hci2: command tx timeout [ 644.470715][ T5908] usb 3-1: 0:2 : does not exist [ 644.475665][ T5908] usb 3-1: unit 5 not found! [ 644.525746][ T5908] usb 3-1: USB disconnect, device number 37 [ 644.737689][ T73] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 644.760196][ T46] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 644.778999][ T73] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 644.789067][T12730] udevd[12730]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 644.821350][ T73] bond0 (unregistering): Released all slaves [ 644.885211][T12743] lo speed is unknown, defaulting to 1000 [ 644.921699][ T46] usb 4-1: Using ep0 maxpacket: 32 [ 644.964579][ T46] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 645.038482][ T46] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 645.048522][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.057430][ T46] usb 4-1: Product: syz [ 645.063935][ T46] usb 4-1: Manufacturer: syz [ 645.068562][ T46] usb 4-1: SerialNumber: syz [ 645.075881][ T46] usb 4-1: config 0 descriptor?? [ 645.111413][ T46] usb 4-1: bad CDC descriptors [ 645.116664][ T46] usb 4-1: unsupported MDLM descriptors [ 645.307369][T12743] lo speed is unknown, defaulting to 1000 [ 645.330354][ T46] usb 4-1: USB disconnect, device number 25 [ 645.687580][ T73] hsr_slave_0: left promiscuous mode [ 645.694750][ T73] hsr_slave_1: left promiscuous mode [ 645.740093][ T73] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 645.747609][ T73] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 645.759105][ T73] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 645.766665][ T73] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 645.858897][ T73] veth1_macvtap: left promiscuous mode [ 645.864994][ T73] veth0_macvtap: left promiscuous mode [ 645.874742][T12795] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1862'. [ 645.891387][ T73] veth1_vlan: left promiscuous mode [ 645.896829][ T73] veth0_vlan: left promiscuous mode [ 646.090190][T12401] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 646.100360][ T5825] Bluetooth: hci2: command tx timeout [ 646.264398][T12401] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 646.277471][T12401] usb 2-1: New USB device found, idVendor=28de, idProduct=1205, bcdDevice= 0.00 [ 646.583747][T12401] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.697353][T12401] usb 2-1: config 0 descriptor?? [ 647.130848][T12401] hid-steam 0003:28DE:1205.0012: hidraw0: USB HID v0.00 Device [HID 28de:1205] on usb-dummy_hcd.1-1/input0 [ 647.331816][T12794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 647.355792][T12794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 648.180703][ T5825] Bluetooth: hci2: command tx timeout [ 649.077989][T12812] block nbd3: shutting down sockets [ 649.085184][ T73] team0 (unregistering): Port device team_slave_1 removed [ 649.110783][T12813] Falling back ldisc for ptm0. [ 649.223044][ T73] team0 (unregistering): Port device team_slave_0 removed [ 649.423042][T12826] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1873'. [ 649.423697][ T1131] Bluetooth: Error in BCSP hdr checksum [ 649.671236][ T12] Bluetooth: Error in BCSP hdr checksum [ 649.890154][T12796] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1865'. [ 649.930546][ T54] Bluetooth: Error in BCSP hdr checksum [ 649.994597][ T5908] usb 2-1: USB disconnect, device number 36 [ 650.016907][T12743] chnl_net:caif_netlink_parms(): no params data found [ 650.081290][T12830] netlink: 'syz.2.1876': attribute type 1 has an invalid length. [ 650.138663][T12830] 8021q: adding VLAN 0 to HW filter on device bond2 [ 650.260579][ T5821] Bluetooth: hci2: command tx timeout [ 651.145008][T12743] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.152265][T12743] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.159486][T12743] bridge_slave_0: entered allmulticast mode [ 651.166429][T12743] bridge_slave_0: entered promiscuous mode [ 651.174728][T12852] tipc: Enabling of bearer rejected, already enabled [ 651.185819][T12743] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.194264][T12743] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.219998][ T5825] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 651.430958][T12743] bridge_slave_1: entered allmulticast mode [ 651.456768][T12743] bridge_slave_1: entered promiscuous mode [ 651.889328][T12743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 651.938777][T12743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 652.100403][T12743] team0: Port device team_slave_0 added [ 652.485953][T12743] team0: Port device team_slave_1 added [ 653.054261][T12743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 653.094639][T12743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 653.224554][T12743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 653.344514][T12743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 653.383949][T12743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 653.562041][T12743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 653.887057][T12743] hsr_slave_0: entered promiscuous mode [ 653.981060][T12885] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1886'. [ 653.993630][T12743] hsr_slave_1: entered promiscuous mode [ 654.594526][T12895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1889'. [ 655.552937][T12903] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1894'. [ 656.508106][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 656.508119][ T29] audit: type=1326 audit(1736410686.734:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12901 comm="syz.1.1894" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7febaa585d29 code=0x0 [ 657.392914][T12914] lo speed is unknown, defaulting to 1000 [ 657.772250][T12935] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1900'. [ 657.954714][T12743] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 658.029271][T12743] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 658.054151][T12743] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 658.327704][T12743] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 658.446736][T12914] lo speed is unknown, defaulting to 1000 [ 658.999502][T12743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 659.137790][T12743] 8021q: adding VLAN 0 to HW filter on device team0 [ 659.170793][ T6744] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.179637][ T6744] bridge0: port 1(bridge_slave_0) entered forwarding state [ 659.244512][ T6744] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.251723][ T6744] bridge0: port 2(bridge_slave_1) entered forwarding state [ 659.767379][T12743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 660.200163][ T46] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 660.422745][ T46] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 660.432474][ T46] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 660.495405][ T46] usb 3-1: config 0 has no interface number 0 [ 660.527194][ T46] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 660.594043][ T46] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 660.662570][ T46] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 660.700029][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.738733][ T46] usb 3-1: Product: syz [ 660.749831][ T46] usb 3-1: Manufacturer: syz [ 660.769735][ T46] usb 3-1: SerialNumber: syz [ 660.855345][T12743] veth0_vlan: entered promiscuous mode [ 660.862665][ T46] usb 3-1: config 0 descriptor?? [ 660.878338][T12743] veth1_vlan: entered promiscuous mode [ 661.076468][T12963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 661.100939][T12743] veth0_macvtap: entered promiscuous mode [ 661.119633][T12743] veth1_macvtap: entered promiscuous mode [ 661.166763][T12743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 661.232283][T12743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.264806][T12743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 661.320222][T12963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 661.349578][T12743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 661.509819][T12743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.521542][T12743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 661.533937][T12971] lo: entered promiscuous mode [ 661.538846][T12971] tunl0: entered promiscuous mode [ 661.639976][T12971] gre0: entered promiscuous mode [ 661.645091][T12971] gretap0: entered promiscuous mode [ 661.670072][T12971] erspan0: entered promiscuous mode [ 661.680312][T12971] ip_vti0: entered promiscuous mode [ 661.709924][T12971] ip6_vti0: entered promiscuous mode [ 661.715513][T12971] sit0: entered promiscuous mode [ 661.750670][T12971] ip6tnl0: entered promiscuous mode [ 661.766416][T12971] ip6gre0: entered promiscuous mode [ 661.782740][T12971] syz_tun: entered promiscuous mode [ 661.803083][T12971] ip6gretap0: entered promiscuous mode [ 661.854768][T12971] bridge0: entered promiscuous mode [ 661.887899][T12971] bond0: entered promiscuous mode [ 661.900594][T12971] bond_slave_0: entered promiscuous mode [ 662.000532][T12971] bond_slave_1: entered promiscuous mode [ 662.006449][T12971] team0: entered promiscuous mode [ 662.011652][T12971] team_slave_0: entered promiscuous mode [ 662.027684][T12971] team_slave_1: entered promiscuous mode [ 662.033671][T12971] geneve0: entered promiscuous mode [ 662.050260][T12971] dummy0: entered promiscuous mode [ 662.060028][T12971] nlmon0: entered promiscuous mode [ 662.066797][T12971] caif0: entered promiscuous mode [ 662.360002][T12971] batadv0: entered promiscuous mode [ 662.380394][T12971] vxcan0: entered promiscuous mode [ 662.395002][T12971] vxcan1: entered promiscuous mode [ 662.442191][T12971] veth0: entered promiscuous mode [ 662.499283][T12971] veth1: entered promiscuous mode [ 662.639938][T12971] wg0: entered promiscuous mode [ 662.645061][T12971] wg1: entered promiscuous mode [ 662.677311][T12971] wg2: entered promiscuous mode [ 662.689341][T12971] veth0_to_bridge: entered promiscuous mode [ 662.696064][T12971] bridge_slave_0: left allmulticast mode [ 662.702788][T12971] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.712655][T12971] veth1_to_bridge: entered promiscuous mode [ 662.718928][T12971] bridge_slave_1: left allmulticast mode [ 662.725353][T12971] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.736588][T12971] veth0_to_bond: entered promiscuous mode [ 662.746815][T12971] bond0: (slave bond_slave_0): Releasing backup interface [ 662.763664][T12971] veth1_to_bond: entered promiscuous mode [ 662.791175][T12971] bond0: (slave bond_slave_1): Releasing backup interface [ 662.817315][T12971] veth0_to_team: entered promiscuous mode [ 662.826659][T12971] team0: Port device team_slave_0 removed [ 662.838202][T12971] veth1_to_team: entered promiscuous mode [ 662.866793][T12971] team0: Port device team_slave_1 removed [ 662.879266][T12971] veth0_to_batadv: entered promiscuous mode [ 662.889929][T12401] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 662.937528][T12971] batadv_slave_0: entered promiscuous mode [ 662.959950][T12971] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 662.972259][T12971] veth1_to_batadv: entered promiscuous mode [ 662.978492][T12971] batadv_slave_1: entered promiscuous mode [ 662.984816][T12971] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 662.993919][T12971] xfrm0: entered promiscuous mode [ 662.999197][T12971] veth0_to_hsr: entered promiscuous mode [ 663.005793][T12971] veth1_to_hsr: entered promiscuous mode [ 663.014959][T12971] hsr0: entered promiscuous mode [ 663.022597][T12971] veth1_virt_wifi: entered promiscuous mode [ 663.030599][T12971] veth0_virt_wifi: entered promiscuous mode [ 663.040511][T12971] vlan0: entered promiscuous mode [ 663.047336][T12971] vlan1: entered promiscuous mode [ 663.058747][T12971] macvlan0: entered promiscuous mode [ 663.075637][T12986] binder: 12980:12986 ioctl 4b71 0 returned -22 [ 663.099487][T12971] macvlan1: left allmulticast mode [ 663.133928][T12971] bridge0: port 3(macvlan1) entered disabled state [ 663.315242][T12971] ipvlan0: entered promiscuous mode [ 663.378460][T12971] ipvlan1: entered promiscuous mode [ 663.467787][T12971] macvtap0: entered promiscuous mode [ 663.534539][T12971] macsec0: entered promiscuous mode [ 663.619865][T12971] macsec0: left allmulticast mode [ 663.630148][T12401] usb 2-1: Using ep0 maxpacket: 8 [ 663.641294][T12401] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 663.657295][T12971] team0: Port device geneve0 removed [ 663.678342][T12971] geneve1: entered promiscuous mode [ 663.684519][T12401] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.719966][T12971] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 663.727746][T12971] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 663.736115][T12401] usb 2-1: config 0 descriptor?? [ 663.739866][T12971] netdevsim netdevsim2 netdevsim2: entered promiscuous mode [ 663.758334][T12971] netdevsim netdevsim2 netdevsim3: entered promiscuous mode [ 663.766735][T12971] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 663.776142][T12971] erspan1: entered promiscuous mode [ 663.807470][T12971] bridge1: left allmulticast mode [ 663.885215][T12971] team0: Port device bridge1 removed [ 664.006380][T12401] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 664.051297][T12401] asix 2-1:0.0: probe with driver asix failed with error -32 [ 664.092693][T12971] bond1: entered promiscuous mode [ 664.152824][T12971] bridge2: left allmulticast mode [ 664.391997][T12971] team0: Port device bridge2 removed [ 664.420842][ T8866] usb 2-1: USB disconnect, device number 37 [ 664.432403][T12971] bond2: entered promiscuous mode [ 664.452152][T12743] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.466416][T12743] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.505534][T12743] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.522974][T12401] usb 3-1: USB disconnect, device number 38 [ 664.539754][T12743] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.565190][T12983] lo speed is unknown, defaulting to 1000 [ 664.626730][T13003] netlink: 1268 bytes leftover after parsing attributes in process `syz.1.1914'. [ 664.638474][T13003] openvswitch: netlink: Flow key attribute not present in set flow. [ 664.692960][T13003] xfrm0: left allmulticast mode [ 664.699174][T13003] macsec0: left allmulticast mode [ 664.760635][T13003] hsr1: left allmulticast mode [ 664.783241][T13003] syz_tun: left allmulticast mode [ 664.788333][T13003] batadv_slave_0: left allmulticast mode [ 664.856871][T13003] bridge2: left promiscuous mode [ 664.873476][T13003] bridge2: left allmulticast mode [ 664.936782][T12983] lo speed is unknown, defaulting to 1000 [ 664.952773][T12991] netlink: 'syz.0.1910': attribute type 1 has an invalid length. [ 665.139640][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 665.148010][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 665.198578][T13024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1917'. [ 665.226809][ T1131] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 665.236668][ T1131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 665.663995][T13029] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 666.023910][T13037] tipc: Enabled bearer , priority 10 [ 666.031680][T13030] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 666.184364][T13041] macsec0: entered allmulticast mode [ 666.243861][T13041] bridge3: entered promiscuous mode [ 666.249129][T13041] bridge3: entered allmulticast mode [ 666.275669][T13041] team0: Port device bridge3 added [ 666.555056][ T6744] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.656851][ T6744] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.737527][ T6744] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.842867][ T6744] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.007160][ T6744] bridge_slave_1: left allmulticast mode [ 667.013308][ T6744] bridge_slave_1: left promiscuous mode [ 667.021468][ T6744] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.060527][ T6744] bridge_slave_0: left allmulticast mode [ 667.075896][ T6744] bridge_slave_0: left promiscuous mode [ 667.092038][ T6744] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.392091][T13056] syz.1.1926 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 667.741724][T13056] ptrace attach of "./syz-executor exec"[5833] was attempted by " \x0c ¢ã­!OÇRù\x1b#\x09‡÷Ð8çÿÆåS›2K\x07‹›8K\x09à‡Æç›3M•›rš$\x0d[gó˜~óRÀÿèÑxpŒR<’\x1b\x1b]P\x0d0\x09\x096Í;x\x0dªaØè\x09êˆ/X·\x07\x22r'·ºgàç†i¦õ¨tæ*œÍÀÓ\x0cŸ1Œ\x0d¡™;Ñ`â3ßJbœo0àeÍ[‘Í\x0aá“—75³m[\x1bcÝ 0]?Fc^°ձݩŽ-t›ç½ñû;#ÜÛPu©ª¡´iÃ\x09 3Xu'\x1b(c)Ñi“Bˆýxš£}n˜²$ýD¶[13OüUÌ‚Í:Ã.Í°Œío´Ý\x0d‹8óÍD˜¾è IA½±ö·cƒp\x5cUC*ŸÚšìT¡#n€ö¨«­êvbIkÝ»B¾kû/•é\x0aVÇ\x1b1‡bõè’BÊkü‚~}¯$QŽd[¸\x0cav ¾pÞ˜ìv©ä\x0d­GóoÙ÷ÐÔ*K_…ÌÜñoôb•Ø úq–9áõœÞ&Ƶ×K\x07Š^Ã4å®\x09Œéîpwªš†~ˆ3Iué÷4ƒ¶È/¦xÊÿÙùÛ*xiØXde&ø‰¯C¦`€W\x22†R$IßFlc+5p$?˜œÎ8ôeäa\x0c !ÖS¥R ‚·¥ Žùñºéy\x09PpAØ`B\x0cVd²y!±MÁÛˆ’ý2Э{É\x0d¨l(Ù º°_`ΠÚw¨ € ¾£|àÐÔª /’(8«J [ 667.954866][ T5825] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 668.075232][T13065] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 668.084922][ T5825] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 668.114769][ T5825] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 668.134078][ T5825] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 668.149858][ T5825] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 668.157277][ T5825] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 668.340561][T13069] ebt_limit: overflow, try lower: 0/0 [ 668.365747][T13070] ebt_limit: overflow, try lower: 0/0 [ 668.413072][ T6744] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 668.425660][ T6744] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 668.436522][ T6744] bond0 (unregistering): Released all slaves [ 668.684733][T13076] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1932'. [ 669.009943][ T8866] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 669.204734][ T29] audit: type=1326 audit(1736410699.434:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13079 comm="syz.1.1934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febaa585d29 code=0x7ffc0000 [ 669.226569][ T29] audit: type=1326 audit(1736410699.434:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13079 comm="syz.1.1934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febaa585d29 code=0x7ffc0000 [ 669.270962][T13084] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1934'. [ 669.350419][T13060] lo speed is unknown, defaulting to 1000 [ 669.709323][ T29] audit: type=1326 audit(1736410699.514:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13079 comm="syz.1.1934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7febaa585d29 code=0x7ffc0000 [ 670.100163][ T29] audit: type=1326 audit(1736410699.514:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13079 comm="syz.1.1934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febaa585d29 code=0x7ffc0000 [ 670.194726][ T29] audit: type=1326 audit(1736410699.514:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13079 comm="syz.1.1934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febaa585d29 code=0x7ffc0000 [ 670.381331][T13060] lo speed is unknown, defaulting to 1000 [ 670.401991][ T5825] Bluetooth: hci2: command tx timeout [ 670.430682][ T8866] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 670.477677][ T8866] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 670.513190][ T8866] usb 4-1: New USB device found, idVendor=056a, idProduct=0065, bcdDevice= 0.00 [ 670.539751][ T8866] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.578135][ T8866] usb 4-1: config 0 descriptor?? [ 670.657603][T13098] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1939'. [ 671.310311][T13072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 671.322955][T13072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 671.486125][T13107] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1943'. [ 671.516902][T13107] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1943'. [ 671.556699][T13110] netlink: 1264 bytes leftover after parsing attributes in process `syz.3.1931'. [ 672.383126][ T46] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 672.496945][ T5825] Bluetooth: hci2: command tx timeout [ 672.784513][T13107] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 672.838953][T13107] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 672.933263][ T8866] wacom 0003:056A:0065.0013: unknown main item tag 0x0 [ 672.940330][ T8866] wacom 0003:056A:0065.0013: unknown main item tag 0x0 [ 672.947511][ T8866] wacom 0003:056A:0065.0013: unknown main item tag 0x0 [ 672.955276][ T8866] wacom 0003:056A:0065.0013: Unknown device_type for 'HID 056a:0065'. Assuming pen. [ 673.009782][ T46] usb 2-1: Using ep0 maxpacket: 32 [ 673.017550][ T46] usb 2-1: config 126 has no interfaces? [ 673.023979][ T8866] wacom 0003:056A:0065.0013: hidraw0: USB HID v0.00 Device [HID 056a:0065] on usb-dummy_hcd.3-1/input0 [ 673.037299][ T8866] input: Wacom Bamboo Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0065.0013/input/input54 [ 673.109071][T13119] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 673.121155][T13119] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1944'. [ 673.130183][T13119] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1944'. [ 673.169988][ T46] usb 2-1: New USB device found, idVendor=2c7c, idProduct=0314, bcdDevice=15.91 [ 673.191484][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.209872][ T46] usb 2-1: Product: syz [ 673.215027][ T46] usb 2-1: Manufacturer: syz [ 673.225502][ T6744] hsr_slave_0: left promiscuous mode [ 673.234555][ T46] usb 2-1: SerialNumber: syz [ 673.249553][ T6744] hsr_slave_1: left promiscuous mode [ 673.328296][ T6744] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 673.347952][ T6744] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 673.374399][ T6744] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 673.393331][ T6744] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 673.529398][ T6744] veth1_macvtap: left promiscuous mode [ 673.535707][ T6744] veth0_macvtap: left promiscuous mode [ 673.549900][ T6744] veth1_vlan: left promiscuous mode [ 673.560939][ T6744] veth0_vlan: left promiscuous mode [ 673.732914][ T8866] usb 4-1: USB disconnect, device number 26 [ 674.008862][ T46] usb 2-1: USB disconnect, device number 38 [ 674.141930][T13129] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1945'. [ 674.662134][ T5825] Bluetooth: hci2: command tx timeout [ 676.779839][ T5825] Bluetooth: hci2: command tx timeout [ 677.619876][ T6744] team0 (unregistering): Port device team_slave_1 removed [ 677.703324][ T6744] team0 (unregistering): Port device team_slave_0 removed [ 677.861211][T13159] IPVS: set_ctl: invalid protocol: 244 172.30.0.3:20000 [ 678.292403][T13060] chnl_net:caif_netlink_parms(): no params data found [ 678.304636][T13142] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1949'. [ 678.330654][T13154] tap0: tun_chr_ioctl cmd 35108 [ 678.381425][T13158] lo speed is unknown, defaulting to 1000 [ 678.711190][T13060] bridge0: port 1(bridge_slave_0) entered blocking state [ 678.773595][T13060] bridge0: port 1(bridge_slave_0) entered disabled state [ 678.788106][T13060] bridge_slave_0: entered allmulticast mode [ 678.843641][T13060] bridge_slave_0: entered promiscuous mode [ 679.084286][T13060] bridge0: port 2(bridge_slave_1) entered blocking state [ 679.240955][T13060] bridge0: port 2(bridge_slave_1) entered disabled state [ 679.317700][T13060] bridge_slave_1: entered allmulticast mode [ 679.420750][T13060] bridge_slave_1: entered promiscuous mode [ 679.457904][T13158] lo speed is unknown, defaulting to 1000 [ 679.512225][T13060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 679.560374][T13060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 679.803931][T13060] team0: Port device team_slave_0 added [ 679.813408][T13185] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1958'. [ 679.828641][T13060] team0: Port device team_slave_1 added [ 679.862069][T13060] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 679.869138][T13060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 679.930262][T13060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 679.970165][T13060] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 679.986829][T13060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 680.077935][T13060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 680.099449][T13190] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1962'. [ 680.261734][T13060] hsr_slave_0: entered promiscuous mode [ 680.276818][T13060] hsr_slave_1: entered promiscuous mode [ 681.351177][ T5825] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 681.569832][ T46] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 681.596412][T13216] vlan3: entered promiscuous mode [ 681.606134][T13216] bridge0: port 3(vlan3) entered blocking state [ 681.687623][T13216] bridge0: port 3(vlan3) entered disabled state [ 681.720362][ T46] usb 4-1: Using ep0 maxpacket: 16 [ 681.733982][ T46] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 681.864858][ T46] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 681.902799][T13216] vlan3: entered allmulticast mode [ 682.104190][ T46] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 682.286098][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.294843][ T46] usb 4-1: Product: syz [ 682.299045][ T46] usb 4-1: Manufacturer: syz [ 682.305050][ T46] usb 4-1: SerialNumber: syz [ 682.645064][ T46] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 683.019011][ T46] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 683.057465][ T46] usb 4-1: USB disconnect, device number 27 [ 683.337678][T13240] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1975'. [ 683.361794][T13060] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 683.404476][T13060] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 683.485860][T13060] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 684.310273][T13245] netlink: 'syz.2.1977': attribute type 10 has an invalid length. [ 684.357081][T13060] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 684.622615][T13125] udevd[13125]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 684.918618][T13252] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 684.986992][T13060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 685.023178][T13060] 8021q: adding VLAN 0 to HW filter on device team0 [ 685.074655][T13060] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 685.085167][T13060] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 685.101957][ T6744] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.109090][ T6744] bridge0: port 1(bridge_slave_0) entered forwarding state [ 685.118266][ T6744] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.125460][ T6744] bridge0: port 2(bridge_slave_1) entered forwarding state [ 687.268880][T13060] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 689.030955][T13298] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1989'. [ 689.103628][T13060] veth0_vlan: entered promiscuous mode [ 689.127763][T13060] veth1_vlan: entered promiscuous mode [ 689.162879][T13060] veth0_macvtap: entered promiscuous mode [ 689.181847][T13060] veth1_macvtap: entered promiscuous mode [ 689.204765][T13060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 689.215347][T13060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.226489][T13060] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 689.239050][T13060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 689.249958][T13060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.261339][T13060] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 689.281420][T13060] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.290219][T13060] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.298963][T13060] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.307782][T13060] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.388137][T13309] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1993'. [ 689.504500][ T6744] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 689.535181][ T6744] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 689.560395][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 689.812837][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 690.854292][T13346] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 690.950656][T13343] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2006'. [ 694.456096][T13379] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2017'. [ 694.581118][ T3455] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.037394][ T3455] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.145545][ T3455] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.231014][ T3455] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.411807][ T3455] bridge_slave_1: left allmulticast mode [ 695.417510][ T3455] bridge_slave_1: left promiscuous mode [ 695.448497][ T3455] bridge0: port 2(bridge_slave_1) entered disabled state [ 695.515749][ T3455] bridge_slave_0: left allmulticast mode [ 695.526315][T13400] fuse: Bad value for 'group_id' [ 695.534421][ T3455] bridge_slave_0: left promiscuous mode [ 695.550683][ T3455] bridge0: port 1(bridge_slave_0) entered disabled state [ 695.562932][T13400] fuse: Bad value for 'group_id' [ 695.626068][T13406] fuse: Bad value for 'user_id' [ 695.645055][T13411] trusted_key: encrypted_key: keyword '€ew' not recognized [ 695.666588][T13406] fuse: Bad value for 'user_id' [ 695.690580][ T5908] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 695.871438][ T5908] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 695.888823][ T5908] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 695.913765][ T5908] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 695.927399][ T5908] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 695.944867][ T5908] usb 1-1: SerialNumber: syz [ 696.034617][T13414] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 696.046893][T13414] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 696.060295][T13414] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 696.068543][T13414] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 696.090320][T13414] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 696.098044][T13414] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 696.176496][ T5908] usb 1-1: 0:2 : does not exist [ 696.375234][T13403] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2020'. [ 696.389564][ T3455] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 696.404264][ T3455] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 696.414748][ T3455] bond0 (unregistering): Released all slaves [ 696.459646][T13412] lo speed is unknown, defaulting to 1000 [ 696.642952][T13412] lo speed is unknown, defaulting to 1000 [ 697.144080][ T3455] hsr_slave_0: left promiscuous mode [ 697.694960][T13421] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2026'. [ 697.739853][ T5825] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 697.746681][T13414] Bluetooth: hci2: command 0x1003 tx timeout [ 697.753624][ T5831] Bluetooth: hci4: command 0x0405 tx timeout [ 698.133884][ T3455] hsr_slave_1: left promiscuous mode [ 698.173923][ T3455] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 698.187254][ T5825] Bluetooth: hci5: command tx timeout [ 698.201522][ T3455] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 698.214868][ T3455] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 698.223535][ T3455] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 698.493682][T13401] slcan: can't register candev [ 698.967467][ T3455] veth1_macvtap: left promiscuous mode [ 698.980355][ T3455] veth0_macvtap: left promiscuous mode [ 698.986214][ T3455] veth1_vlan: left promiscuous mode [ 698.992531][ T3455] veth0_vlan: left promiscuous mode [ 699.301918][ T46] usb 1-1: USB disconnect, device number 33 [ 699.968230][T13444] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2030'. [ 700.302524][ T5825] Bluetooth: hci5: command tx timeout [ 701.187404][T13462] 9pnet_fd: Insufficient options for proto=fd [ 701.367599][ T3455] team0 (unregistering): Port device team_slave_1 removed [ 701.445328][ T3455] team0 (unregistering): Port device team_slave_0 removed [ 702.304189][T13412] chnl_net:caif_netlink_parms(): no params data found [ 702.341636][ T5825] Bluetooth: hci5: command tx timeout [ 702.408249][T13479] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2041'. [ 702.465636][T13412] bridge0: port 1(bridge_slave_0) entered blocking state [ 702.484784][T13412] bridge0: port 1(bridge_slave_0) entered disabled state [ 702.504039][T13412] bridge_slave_0: entered allmulticast mode [ 702.511333][T13412] bridge_slave_0: entered promiscuous mode [ 702.520044][ T8865] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 702.527242][T13412] bridge0: port 2(bridge_slave_1) entered blocking state [ 702.573342][T13412] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.581768][T13412] bridge_slave_1: entered allmulticast mode [ 702.588946][T13412] bridge_slave_1: entered promiscuous mode [ 702.591214][ T29] audit: type=1326 audit(1736410732.814:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13486 comm="syz.3.2042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7c7585d29 code=0x7ffc0000 [ 702.618304][ T29] audit: type=1326 audit(1736410732.814:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13486 comm="syz.3.2042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7c7585d29 code=0x7ffc0000 [ 702.639994][ C1] vkms_vblank_simulate: vblank timer overrun [ 702.649164][ T29] audit: type=1326 audit(1736410732.844:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13486 comm="syz.3.2042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb7c7585d29 code=0x7ffc0000 [ 702.689852][ T8865] usb 3-1: Using ep0 maxpacket: 8 [ 702.696514][ T8865] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 702.696986][ T29] audit: type=1326 audit(1736410732.844:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13486 comm="syz.3.2042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7c7585d29 code=0x7ffc0000 [ 702.705457][ T8865] usb 3-1: config 179 has no interface number 0 [ 702.726457][ C1] vkms_vblank_simulate: vblank timer overrun [ 702.729458][T13412] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 702.733524][ T46] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 702.740142][ T29] audit: type=1326 audit(1736410732.844:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13486 comm="syz.3.2042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7c7585d29 code=0x7ffc0000 [ 702.774346][ T8865] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 702.777558][ T29] audit: type=1326 audit(1736410732.874:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13486 comm="syz.3.2042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fb7c7585d29 code=0x7ffc0000 [ 702.805978][ T8865] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 702.810606][ T29] audit: type=1326 audit(1736410732.874:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13486 comm="syz.3.2042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7c7585d29 code=0x7ffc0000 [ 702.839774][ T8865] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 702.843738][ T29] audit: type=1326 audit(1736410732.874:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13486 comm="syz.3.2042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7c7585d29 code=0x7ffc0000 [ 702.878142][ T29] audit: type=1326 audit(1736410732.874:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13486 comm="syz.3.2042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fb7c7585d29 code=0x7ffc0000 [ 702.889734][ T8865] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 702.899975][ T29] audit: type=1326 audit(1736410732.874:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13486 comm="syz.3.2042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7c7585d29 code=0x7ffc0000 [ 702.901912][T13412] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 702.946487][ T46] usb 1-1: Using ep0 maxpacket: 16 [ 702.972698][ T46] usb 1-1: New USB device found, idVendor=050d, idProduct=0122, bcdDevice= d.b3 [ 702.983074][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.993199][ T8865] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 703.017200][ T46] usb 1-1: Product: syz [ 703.022386][ T46] usb 1-1: Manufacturer: syz [ 703.027050][ T46] usb 1-1: SerialNumber: syz [ 703.039850][ T8865] usb 3-1: config 179 interface 65 has no altsetting 0 [ 703.058026][ T46] usb 1-1: config 0 descriptor?? [ 703.063339][ T8865] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 703.089749][ T8865] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.144475][ T8865] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input59 [ 703.192344][T13412] team0: Port device team_slave_0 added [ 703.206291][T13412] team0: Port device team_slave_1 added [ 703.290736][T13479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 703.300265][T13479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 703.860095][T13479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 703.868764][T13479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 704.008844][ T5908] usb 3-1: USB disconnect, device number 39 [ 704.008937][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 704.023712][ T5908] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 704.053771][ T46] pegasus 1-1:0.0: probe with driver pegasus failed with error -71 [ 704.067793][ T46] usb 1-1: USB disconnect, device number 34 [ 704.083998][T13412] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 704.115617][T13412] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 704.141714][ C1] vkms_vblank_simulate: vblank timer overrun [ 704.156444][T13412] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 704.178566][T13412] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 704.186881][T13412] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 704.212827][ C1] vkms_vblank_simulate: vblank timer overrun [ 704.222506][T13412] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 704.282686][T13412] hsr_slave_0: entered promiscuous mode [ 704.297160][T13412] hsr_slave_1: entered promiscuous mode [ 704.339413][T13498] kvm: kvm [13497]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x650000009d [ 704.357743][T13498] kvm: kvm [13497]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0x6c0c0000cd [ 704.378374][T13498] kvm: kvm [13497]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x186) = 0x14e0000007b [ 704.399265][T13498] kvm: kvm [13497]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0x14f00000049 [ 704.420343][ T5825] Bluetooth: hci5: command tx timeout [ 704.433922][T13504] 9pnet_fd: Insufficient options for proto=fd [ 704.797870][T13511] IPv6: sit1: Disabled Multicast RS [ 704.906890][T13508] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2048'. [ 705.725791][T13412] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 705.738906][T13412] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 705.754241][T13412] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 705.775464][T13412] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 705.932919][T13412] 8021q: adding VLAN 0 to HW filter on device bond0 [ 705.980119][T13412] 8021q: adding VLAN 0 to HW filter on device team0 [ 705.993013][ T3455] bridge0: port 1(bridge_slave_0) entered blocking state [ 706.000157][ T3455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 706.022593][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 706.029771][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 706.319322][T13412] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 706.680946][T13551] 9pnet_fd: Insufficient options for proto=fd [ 706.718649][ T8866] libceph: connect (1)[c::]:6789 error -101 [ 706.742475][ T8866] libceph: mon0 (1)[c::]:6789 connect error [ 706.793873][T13412] veth0_vlan: entered promiscuous mode [ 706.814305][T13561] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 706.827244][T13412] veth1_vlan: entered promiscuous mode [ 706.961978][T13412] veth0_macvtap: entered promiscuous mode [ 706.972754][T13412] veth1_macvtap: entered promiscuous mode [ 706.988322][T13412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 707.011764][T13412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 707.028417][T13412] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 707.053828][T13412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 707.055052][ T8865] libceph: connect (1)[c::]:6789 error -101 [ 707.070733][ T8865] libceph: mon0 (1)[c::]:6789 connect error [ 707.082817][T13412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 707.094789][T13412] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 707.109054][T13412] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.118977][T13412] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.128306][T13412] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.137136][T13412] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.160190][ T5908] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 707.277857][ T3455] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 707.304289][ T3455] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 707.311932][ T5908] usb 4-1: Using ep0 maxpacket: 32 [ 707.319564][ T5908] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 707.343892][ T5908] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 707.356092][ T5908] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 707.372605][ T6744] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 707.382850][ T5908] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 707.395670][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.404989][ T6744] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 707.422222][ T5908] usb 4-1: config 0 descriptor?? [ 707.453917][T13548] ceph: No mds server is up or the cluster is laggy [ 707.691233][T13566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 707.720029][T13566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 707.967985][ T5908] hid (null): report_id 0 is invalid [ 707.981280][ T5908] hid (null): unknown global tag 0xd [ 707.986682][ T5908] hid (null): unknown global tag 0xd [ 708.061618][ T5908] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0014/input/input60 [ 708.146006][ T5908] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0014/input/input61 [ 708.187322][ T5908] kye 0003:0458:5011.0014: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.3-1/input0 [ 708.212400][ T5908] usb 4-1: USB disconnect, device number 28 [ 708.436288][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 708.436305][ T29] audit: type=1326 audit(1736410738.664:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13584 comm="syz.0.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7cb785d29 code=0x7ffc0000 [ 708.491719][ T29] audit: type=1326 audit(1736410738.664:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13584 comm="syz.0.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7cb785d29 code=0x7ffc0000 [ 708.532064][ T29] audit: type=1326 audit(1736410738.694:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13584 comm="syz.0.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff7cb785d29 code=0x7ffc0000 [ 708.607262][ T29] audit: type=1326 audit(1736410738.694:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13584 comm="syz.0.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7cb785d29 code=0x7ffc0000 [ 708.674260][ T29] audit: type=1326 audit(1736410738.694:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13584 comm="syz.0.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7ff7cb785d29 code=0x7ffc0000 [ 708.717301][ T29] audit: type=1326 audit(1736410738.694:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13584 comm="syz.0.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7cb785d29 code=0x7ffc0000 [ 708.760695][ T29] audit: type=1326 audit(1736410738.694:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13584 comm="syz.0.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7ff7cb785d29 code=0x7ffc0000 [ 708.795062][ T29] audit: type=1326 audit(1736410738.694:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13584 comm="syz.0.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7cb785d29 code=0x7ffc0000 [ 708.923069][ T29] audit: type=1326 audit(1736410738.694:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13584 comm="syz.0.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7ff7cb785d29 code=0x7ffc0000 [ 708.995260][ T29] audit: type=1326 audit(1736410738.694:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13584 comm="syz.0.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7cb785d29 code=0x7ffc0000 [ 709.408269][T13594] netlink: 11 bytes leftover after parsing attributes in process `syz.2.2071'. [ 709.530907][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.461953][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.639942][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.926139][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.997314][T13414] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 713.016871][T13414] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 713.030220][T13414] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 713.040556][T13414] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 713.048170][T13414] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 713.064086][T13414] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 713.095127][T13627] lo speed is unknown, defaulting to 1000 [ 713.131438][ T11] bridge_slave_1: left allmulticast mode [ 713.137205][ T11] bridge_slave_1: left promiscuous mode [ 713.143943][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.895961][ T11] bridge_slave_0: left allmulticast mode [ 713.901713][ T11] bridge_slave_0: left promiscuous mode [ 713.907484][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.961564][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 713.961584][ T29] audit: type=1326 audit(1736410744.184:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13643 comm="syz.3.2085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7c7585d29 code=0x7ffc0000 [ 714.020022][ T29] audit: type=1326 audit(1736410744.184:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13643 comm="syz.3.2085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7c7585d29 code=0x7ffc0000 [ 714.119921][ T29] audit: type=1326 audit(1736410744.184:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13643 comm="syz.3.2085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb7c7585d29 code=0x7ffc0000 [ 714.178561][ T29] audit: type=1326 audit(1736410744.184:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13643 comm="syz.3.2085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7c7585d29 code=0x7ffc0000 [ 714.201066][ T29] audit: type=1326 audit(1736410744.184:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13643 comm="syz.3.2085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7c7585d29 code=0x7ffc0000 [ 714.222623][ C1] vkms_vblank_simulate: vblank timer overrun [ 714.265981][ T29] audit: type=1326 audit(1736410744.184:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13643 comm="syz.3.2085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fb7c7585d29 code=0x7ffc0000 [ 714.295941][ T29] audit: type=1326 audit(1736410744.184:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13643 comm="syz.3.2085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7c7585d29 code=0x7ffc0000 [ 714.370517][ T29] audit: type=1326 audit(1736410744.184:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13643 comm="syz.3.2085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7c7585d29 code=0x7ffc0000 [ 714.392109][ C1] vkms_vblank_simulate: vblank timer overrun [ 714.447399][ T29] audit: type=1326 audit(1736410744.184:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13643 comm="syz.3.2085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fb7c7585d29 code=0x7ffc0000 [ 714.486356][ T29] audit: type=1326 audit(1736410744.184:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13643 comm="syz.3.2085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7c7585d29 code=0x7ffc0000 [ 714.507930][ C1] vkms_vblank_simulate: vblank timer overrun [ 714.607728][T13655] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2086'. [ 715.007193][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 715.018739][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 715.035951][ T11] bond0 (unregistering): Released all slaves [ 715.058531][T13627] lo speed is unknown, defaulting to 1000 [ 715.127036][T13661] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2089'. [ 715.299996][T13414] Bluetooth: hci2: command tx timeout [ 717.647806][T13414] Bluetooth: hci2: command tx timeout [ 717.690637][ T11] hsr_slave_0: left promiscuous mode [ 717.706282][ T11] hsr_slave_1: left promiscuous mode [ 717.712464][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 717.760023][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 717.800489][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 717.808001][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 717.859076][ T11] veth1_macvtap: left promiscuous mode [ 717.865258][ T11] veth0_macvtap: left promiscuous mode [ 717.871008][ T11] veth1_vlan: left promiscuous mode [ 717.876381][ T11] veth0_vlan: left promiscuous mode [ 720.029820][T13414] Bluetooth: hci2: command tx timeout [ 720.175066][ T8866] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 720.197782][T13704] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2102'. [ 720.231770][ T11] team0 (unregistering): Port device team_slave_1 removed [ 720.351365][ T11] team0 (unregistering): Port device team_slave_0 removed [ 720.391917][ T8866] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 720.429823][ T8866] usb 1-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 720.454122][ T8866] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.491203][ T8866] usb 1-1: config 0 descriptor?? [ 720.731245][ T8867] usb 1-1: USB disconnect, device number 35 [ 720.817911][ T8866] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 721.006675][ T8866] usb 2-1: Using ep0 maxpacket: 8 [ 721.022168][ T8866] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 721.035784][ T8866] usb 2-1: config 179 has no interface number 0 [ 721.044529][ T8866] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 721.056699][ T8866] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 721.100071][ T8866] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 186, changing to 11 [ 721.124579][ T8866] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 42700, setting to 1024 [ 721.136582][ T8866] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 721.150093][ T8866] usb 2-1: config 179 interface 65 has no altsetting 0 [ 721.157114][ T8866] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 721.166707][ T8866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.178038][T13706] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 721.200029][ T8866] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input62 [ 721.267988][ T5180] input input62: unable to receive magic message: -110 [ 721.288604][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -1 [ 721.333927][ T5180] input input62: unable to receive magic message: -32 [ 721.409274][ T5180] input input62: unable to receive magic message: -32 [ 721.429209][ T5908] usb 2-1: USB disconnect, device number 39 [ 721.429209][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 721.429346][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 721.451996][ T5908] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 721.591290][T13627] chnl_net:caif_netlink_parms(): no params data found [ 722.006993][T13627] bridge0: port 1(bridge_slave_0) entered blocking state [ 722.020225][T13627] bridge0: port 1(bridge_slave_0) entered disabled state [ 722.100663][T13414] Bluetooth: hci2: command tx timeout [ 722.281765][T13627] bridge_slave_0: entered allmulticast mode [ 722.347370][T13627] bridge_slave_0: entered promiscuous mode [ 722.401163][T13627] bridge0: port 2(bridge_slave_1) entered blocking state [ 722.408316][T13627] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.428959][T13627] bridge_slave_1: entered allmulticast mode [ 722.447491][T13627] bridge_slave_1: entered promiscuous mode [ 722.479131][T13719] tipc: Enabling of bearer rejected, already enabled [ 722.658640][T13723] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2106'. [ 722.667936][T13723] openvswitch: netlink: Unexpected mask (mask=8000040, allowed=10048) [ 723.415953][T13627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 723.559406][T13627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 723.590326][T13732] x_tables: eb_tables: quota.0 match: invalid size 24 (kernel) != (user) 0 [ 723.685015][T13627] team0: Port device team_slave_0 added [ 723.704150][T13627] team0: Port device team_slave_1 added [ 723.845477][T13627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 723.868409][T13627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 723.925344][T13627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 723.955640][T13627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 724.059748][T13627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 724.190693][T13627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 724.334283][T13627] hsr_slave_0: entered promiscuous mode [ 724.450404][T13627] hsr_slave_1: entered promiscuous mode [ 725.138175][T13763] batman_adv: batadv0: Adding interface: dummy0 [ 725.583278][T13763] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 725.800693][T13763] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 726.206823][T13780] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 726.565136][T13784] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 727.838186][T13627] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 728.299055][T13796] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2131'. [ 728.400007][T13627] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 728.423946][T13627] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 729.170442][T13627] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 729.337075][T13811] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2132'. [ 729.552209][T13627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 729.568380][T13627] 8021q: adding VLAN 0 to HW filter on device team0 [ 729.579099][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 729.586310][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 729.876631][T13627] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 729.887119][T13627] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 729.988638][ T1131] bridge0: port 2(bridge_slave_1) entered blocking state [ 729.995823][ T1131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 730.790142][T13825] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2137'. [ 730.953933][T13627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 731.079823][ T8867] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 731.240057][ T8867] usb 1-1: Using ep0 maxpacket: 32 [ 731.256164][ T8867] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 731.310275][ T8867] usb 1-1: config 0 has no interface number 0 [ 731.322660][T13846] netlink: 'syz.1.2143': attribute type 11 has an invalid length. [ 731.336879][ T8867] usb 1-1: config 0 interface 12 altsetting 2 endpoint 0x2 has invalid maxpacket 59136, setting to 1024 [ 731.355750][ T8867] usb 1-1: config 0 interface 12 altsetting 2 bulk endpoint 0x2 has invalid maxpacket 1024 [ 731.368254][ T8867] usb 1-1: config 0 interface 12 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 731.379299][ T8867] usb 1-1: config 0 interface 12 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 731.392591][ T8867] usb 1-1: config 0 interface 12 has no altsetting 0 [ 731.408024][ T8867] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 731.417894][ T8867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.456809][ T8867] usb 1-1: Product: syz [ 731.469432][ T8867] usb 1-1: Manufacturer: syz [ 731.485415][ T8867] usb 1-1: SerialNumber: syz [ 731.500454][T13627] veth0_vlan: entered promiscuous mode [ 731.507300][ T8867] usb 1-1: config 0 descriptor?? [ 731.518173][T13627] veth1_vlan: entered promiscuous mode [ 731.518400][T13825] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 731.542996][ T8867] f81534 1-1:0.12: unsupported endpoint max packet size [ 731.561481][T13627] veth0_macvtap: entered promiscuous mode [ 731.573402][T13627] veth1_macvtap: entered promiscuous mode [ 731.590934][T13627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 731.601553][T13627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 731.613388][T13627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 731.625177][T13627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 731.635848][T13627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 731.648382][T13627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 731.666908][T13627] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.676043][T13627] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.689110][T13627] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.698461][T13627] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.801937][T13409] usb 1-1: USB disconnect, device number 36 [ 733.460120][T13414] Bluetooth: hci1: command 0x0406 tx timeout [ 733.460205][T13846] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 734.294644][T13846] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 734.301109][T13846] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 734.316361][T13846] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 734.322768][T13846] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 734.332987][T13846] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 734.409978][ T3455] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 734.442585][ T3455] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 734.526319][ T6435] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 734.544751][ T6435] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 734.706975][T13875] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 734.748594][T13876] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 734.759005][ T8867] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 735.607711][ T5825] Bluetooth: hci3: command 0x0406 tx timeout [ 735.615382][ T8867] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 735.712843][ T8867] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 735.722776][ T8867] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 735.735734][ T8867] usb 1-1: New USB device found, idVendor=046d, idProduct=005c, bcdDevice= 0.00 [ 735.745007][ T8867] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.755423][ T8867] usb 1-1: config 0 descriptor?? [ 735.761403][ T8867] usb 1-1: can't set config #0, error -71 [ 735.768901][ T8867] usb 1-1: USB disconnect, device number 37 [ 736.353551][ T5825] Bluetooth: hci4: command 0x0405 tx timeout [ 736.754239][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.884985][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.982462][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.066490][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.190492][ T11] bridge_slave_1: left allmulticast mode [ 737.197471][ T11] bridge_slave_1: left promiscuous mode [ 737.203415][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 737.213745][ T11] bridge_slave_0: left allmulticast mode [ 737.219428][ T11] bridge_slave_0: left promiscuous mode [ 737.226331][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 737.649291][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 737.663596][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 737.674487][ T11] bond0 (unregistering): Released all slaves [ 738.249788][T13918] overlayfs: failed to resolve './file0/file0': -2 [ 738.359042][ T9] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 738.500007][ T9] usb 2-1: device descriptor read/64, error -71 [ 738.579442][T13414] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 738.597844][T13414] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 738.900436][T13414] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 738.908474][T13414] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 738.916206][T13414] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 738.925466][T13414] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 738.960434][ T11] hsr_slave_0: left promiscuous mode [ 739.160869][ T11] hsr_slave_1: left promiscuous mode [ 739.201112][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 739.208621][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 739.494391][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 739.502901][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 739.663159][ T11] veth1_macvtap: left promiscuous mode [ 739.685070][ T11] veth0_macvtap: left promiscuous mode [ 739.692915][ T11] veth1_vlan: left promiscuous mode [ 739.698273][ T11] veth0_vlan: left promiscuous mode [ 739.859843][ T8865] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 739.980154][ T9] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 740.030418][ T8865] usb 1-1: Using ep0 maxpacket: 32 [ 740.045909][ T8865] usb 1-1: config 1 interface 0 altsetting 156 endpoint 0x81 has an invalid bInterval 57, changing to 9 [ 740.089768][ T8865] usb 1-1: config 1 interface 0 altsetting 156 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 740.108142][ T8865] usb 1-1: config 1 interface 0 has no altsetting 0 [ 740.120452][ T8865] usb 1-1: New USB device found, idVendor=04b3, idProduct=3103, bcdDevice= 0.40 [ 740.129842][ T8865] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.133982][ T9] usb 2-1: device descriptor read/64, error -71 [ 740.138278][ T8865] usb 1-1: Product: syz [ 740.152900][ T8865] usb 1-1: Manufacturer: ÑŒ [ 740.157500][ T8865] usb 1-1: SerialNumber: syz [ 740.397240][ T9] usb usb2-port1: attempt power cycle [ 740.653442][T13937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 740.700369][T13937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 740.806740][ T8865] usbhid 1-1:1.0: can't add hid device: -71 [ 740.816739][ T8865] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 740.819886][ T9] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 740.888190][ T9] usb 2-1: device descriptor read/8, error -71 [ 741.000492][ T8865] usb 1-1: USB disconnect, device number 38 [ 741.150064][ T9] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 741.222005][T13414] Bluetooth: hci2: command tx timeout [ 741.380280][ T9] usb 2-1: device not accepting address 43, error -71 [ 741.394768][ T9] usb usb2-port1: unable to enumerate USB device [ 741.725824][ T11] team0 (unregistering): Port device team_slave_1 removed [ 741.789888][ T9] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 742.064709][ T11] team0 (unregistering): Port device team_slave_0 removed [ 742.138664][ T9] usb 2-1: config 0 has an invalid interface number: 65 but max is 0 [ 742.160311][ T9] usb 2-1: config 0 has no interface number 0 [ 742.166510][ T9] usb 2-1: New USB device found, idVendor=06cd, idProduct=0119, bcdDevice=de.0f [ 742.176025][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.189388][ T9] usb 2-1: config 0 descriptor?? [ 742.198242][ T9] keyspan 2-1:0.65: Keyspan 1 port adapter converter detected [ 742.206269][ T9] keyspan 2-1:0.65: found no endpoint descriptor for endpoint 87 [ 742.214470][ T9] keyspan 2-1:0.65: found no endpoint descriptor for endpoint 7 [ 742.223722][ T9] keyspan 2-1:0.65: found no endpoint descriptor for endpoint 81 [ 742.231920][ T9] keyspan 2-1:0.65: found no endpoint descriptor for endpoint 1 [ 742.246896][ T9] keyspan 2-1:0.65: found no endpoint descriptor for endpoint 2 [ 742.256509][ T9] keyspan 2-1:0.65: found no endpoint descriptor for endpoint 85 [ 742.264391][ T9] keyspan 2-1:0.65: found no endpoint descriptor for endpoint 5 [ 742.276524][ T9] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 742.412180][ T9] usb 2-1: USB disconnect, device number 44 [ 742.437976][ T9] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 742.456393][ T9] keyspan 2-1:0.65: device disconnected [ 742.810529][T13921] lo speed is unknown, defaulting to 1000 [ 743.162007][T13921] lo speed is unknown, defaulting to 1000 [ 743.301435][T13414] Bluetooth: hci2: command tx timeout [ 743.325229][T13992] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2181'. [ 744.831787][T13921] chnl_net:caif_netlink_parms(): no params data found [ 744.945701][T14013] netlink: 'syz.1.2188': attribute type 10 has an invalid length. [ 745.383138][T13414] Bluetooth: hci2: command tx timeout [ 745.649292][T13921] bridge0: port 1(bridge_slave_0) entered blocking state [ 745.683018][T13921] bridge0: port 1(bridge_slave_0) entered disabled state [ 745.710175][T13921] bridge_slave_0: entered allmulticast mode [ 745.727501][T13921] bridge_slave_0: entered promiscuous mode [ 745.749229][T13921] bridge0: port 2(bridge_slave_1) entered blocking state [ 746.042700][T13921] bridge0: port 2(bridge_slave_1) entered disabled state [ 746.252549][T13921] bridge_slave_1: entered allmulticast mode [ 746.310895][T13921] bridge_slave_1: entered promiscuous mode [ 747.277015][T14036] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2195'. [ 747.338604][T14033] netlink: 'syz.3.2195': attribute type 9 has an invalid length. [ 747.549949][T14033] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 747.556520][T14033] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 747.564147][T13414] Bluetooth: hci2: command tx timeout [ 747.564329][T14033] vhci_hcd vhci_hcd.0: Device attached [ 748.310114][T13921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 748.514087][T13921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 748.602063][T13921] team0: Port device team_slave_0 added [ 748.613477][T13921] team0: Port device team_slave_1 added [ 748.666877][T13921] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 748.679919][T13921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 748.738617][T13921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 748.769898][ T9] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 748.799480][T13921] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 748.818586][T13921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 748.822971][ T8865] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 748.869881][T13921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 749.000947][ T8865] usb 4-1: Using ep0 maxpacket: 32 [ 749.015197][ T8865] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 749.032827][ T8865] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 16384, setting to 64 [ 749.404569][ T8865] usb 4-1: config 0 interface 0 has no altsetting 1 [ 749.528426][T14061] openvswitch: netlink: Key type 4102 is out of range max 32 [ 749.558056][T14044] vhci_hcd: connection reset by peer [ 749.580163][ T8865] usb 4-1: string descriptor 0 read error: -71 [ 749.587030][ T8865] usb 4-1: New USB device found, idVendor=1199, idProduct=9004, bcdDevice= f.8c [ 749.596396][ T8865] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.618732][ T8865] usb 4-1: config 0 descriptor?? [ 749.630345][ T8865] usb 4-1: can't set config #0, error -71 [ 749.656713][ T8865] usb 4-1: USB disconnect, device number 29 [ 749.728803][T13387] udevd[13387]: setting owner of /dev/bus/usb/004/029 to uid=0, gid=0 failed: No such file or directory [ 749.731216][T14063] netlink: 'syz.0.2201': attribute type 6 has an invalid length. [ 749.759133][ T12] vhci_hcd: stop threads [ 749.762232][T14063] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2201'. [ 749.769783][ T12] vhci_hcd: release socket [ 749.852214][ T12] vhci_hcd: disconnect device [ 749.955656][T13921] hsr_slave_0: entered promiscuous mode [ 750.004580][T13921] hsr_slave_1: entered promiscuous mode [ 753.169531][T14093] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 753.246624][T14094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 753.297030][T14094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 754.069879][ T9] vhci_hcd: vhci_device speed not set [ 754.731864][T13409] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 754.768951][T13921] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 754.778754][T13921] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 754.807291][T13921] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 754.821896][T13921] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 754.890025][ T8865] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 755.334950][T12401] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 755.370139][T13409] usb 2-1: Using ep0 maxpacket: 32 [ 755.384122][T13409] usb 2-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice=40.72 [ 755.395234][T13409] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.404441][T13409] usb 2-1: Product: syz [ 755.408202][T13921] 8021q: adding VLAN 0 to HW filter on device bond0 [ 755.423245][T13409] usb 2-1: Manufacturer: syz [ 755.429556][T13409] usb 2-1: SerialNumber: syz [ 755.432525][T13921] 8021q: adding VLAN 0 to HW filter on device team0 [ 755.442706][T13409] usb 2-1: config 0 descriptor?? [ 755.458557][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 755.465809][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 755.486328][ T73] bridge0: port 2(bridge_slave_1) entered blocking state [ 755.493537][ T73] bridge0: port 2(bridge_slave_1) entered forwarding state [ 755.507311][ T8865] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 755.512883][T12401] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 755.516488][ T8865] usb 4-1: config 0 has no interface number 0 [ 755.532368][T12401] usb 3-1: config 1 has no interface number 0 [ 755.532817][ T8865] usb 4-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 755.541098][T12401] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 755.583500][T12401] usb 3-1: too many endpoints for config 1 interface 1 altsetting 177: 105, using maximum allowed: 30 [ 755.588323][ T8865] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 755.597586][T12401] usb 3-1: config 1 interface 1 altsetting 177 has 0 endpoint descriptors, different from the interface descriptor's value: 105 [ 755.631062][ T8865] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 755.644224][ T8865] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 755.654280][ T8865] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 755.697447][ T8865] usb 4-1: Product: syz [ 755.697474][ T8865] usb 4-1: SerialNumber: syz [ 755.715353][ T8865] usb 4-1: config 0 descriptor?? [ 755.716208][T14093] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 755.718660][ T8865] cm109 4-1:0.8: invalid payload size 64, expected 4 [ 755.722129][ T8865] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input64 [ 755.727683][ T8865] ------------[ cut here ]------------ [ 755.738783][T12401] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 139 [ 755.740544][ T8865] URB ffff8881417ee900 submitted while active [ 755.748866][T12401] usb 3-1: config 1 interface 1 has no altsetting 2 [ 755.767877][ T8865] WARNING: CPU: 1 PID: 8865 at drivers/usb/core/urb.c:379 usb_submit_urb+0x1039/0x1930 [ 755.803468][ T8865] Modules linked in: [ 755.807400][ T8865] CPU: 1 UID: 0 PID: 8865 Comm: kworker/1:10 Not tainted 6.13.0-rc6-syzkaller-00046-g0b7958fa05d5 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 755.818430][ T8865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 755.828634][ T8865] Workqueue: usb_hub_wq hub_event [ 755.833778][ T8865] RIP: 0010:usb_submit_urb+0x1039/0x1930 [ 755.842196][ T8865] Code: 00 eb 66 e8 29 b9 65 fa e9 79 f0 ff ff e8 1f b9 65 fa c6 05 6f df c8 08 01 90 48 c7 c7 60 c4 ae 8c 4c 89 ee e8 48 5c 26 fa 90 <0f> 0b 90 90 e9 40 f0 ff ff e8 f9 b8 65 fa eb 12 e8 f2 b8 65 fa 41 [ 755.842226][ T8865] RSP: 0018:ffffc9000bf16b58 EFLAGS: 00010246 [ 755.842253][ T8865] RAX: ec3f97eb21cf9a00 RBX: 0000000000000cc0 RCX: 0000000000100000 [ 755.842271][ T8865] RDX: ffffc9001a97c000 RSI: 00000000000fffff RDI: 0000000000100000 [ 755.842288][ T8865] RBP: ffff8881417ee908 R08: ffffffff816019a2 R09: 1ffffffff284e34b [ 755.842307][ T8865] R10: dffffc0000000000 R11: fffffbfff284e34c R12: 1ffff1100bc1110a [ 755.842326][ T8865] R13: ffff8881417ee900 R14: dffffc0000000000 R15: ffff88805e088850 [ 755.842344][ T8865] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 755.842365][ T8865] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 755.842382][ T8865] CR2: 000000110c29eb0a CR3: 0000000032c36000 CR4: 00000000003526f0 [ 755.842404][ T8865] DR0: 0000000000000003 DR1: 0000000000000004 DR2: 0000000100000000 [ 755.842421][ T8865] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 755.842437][ T8865] Call Trace: [ 755.842448][ T8865] [ 755.842460][ T8865] ? __warn+0x165/0x4d0 [ 755.842489][ T8865] ? usb_submit_urb+0x1039/0x1930 [ 755.842535][ T8865] ? report_bug+0x2b3/0x500 [ 755.842562][ T8865] ? usb_submit_urb+0x1039/0x1930 [ 755.842599][ T8865] ? handle_bug+0x60/0x90 [ 755.842621][ T8865] ? exc_invalid_op+0x1a/0x50 [ 755.842643][ T8865] ? asm_exc_invalid_op+0x1a/0x20 [ 755.842681][ T8865] ? __warn_printk+0x292/0x360 [ 755.842715][ T8865] ? usb_submit_urb+0x1039/0x1930 [ 755.842747][ T8865] ? usb_submit_urb+0x1038/0x1930 [ 755.842781][ T8865] ? __pm_runtime_resume+0x12d/0x180 [ 755.842822][ T8865] cm109_input_open+0x1f9/0x480 [ 755.842859][ T8865] input_open_device+0x1d2/0x340 [ 755.842894][ T8865] kbd_connect+0xe9/0x130 [ 755.842921][ T8865] input_register_device+0xd3b/0x1110 [ 755.842960][ T8865] cm109_usb_probe+0x10cd/0x1600 [ 755.843015][ T8865] usb_probe_interface+0x641/0xbb0 [ 755.843057][ T8865] ? __pfx_usb_probe_interface+0x10/0x10 [ 755.843083][ T8865] really_probe+0x2b8/0xad0 [ 755.843120][ T8865] __driver_probe_device+0x1a2/0x390 [ 755.843151][ T8865] driver_probe_device+0x50/0x430 [ 755.843181][ T8865] __device_attach_driver+0x2d6/0x530 [ 755.843211][ T8865] bus_for_each_drv+0x24e/0x2e0 [ 755.843243][ T8865] ? __pfx___device_attach_driver+0x10/0x10 [ 755.843269][ T8865] ? __pfx_bus_for_each_drv+0x10/0x10 [ 755.843312][ T8865] __device_attach+0x333/0x520 [ 755.843336][ T8865] ? __pfx_lock_release+0x10/0x10 [ 755.843366][ T8865] ? __pfx___device_attach+0x10/0x10 [ 755.843390][ T8865] ? do_raw_spin_unlock+0x13c/0x8b0 [ 755.843431][ T8865] bus_probe_device+0x189/0x260 [ 755.843464][ T8865] device_add+0x856/0xbf0 [ 755.843493][ T8865] usb_set_configuration+0x1976/0x1fb0 [ 755.843554][ T8865] usb_generic_driver_probe+0x88/0x140 [ 755.843582][ T8865] usb_probe_device+0x1b8/0x380 [ 755.843611][ T8865] ? __pfx_usb_probe_device+0x10/0x10 [ 755.843636][ T8865] really_probe+0x2b8/0xad0 [ 755.843677][ T8865] __driver_probe_device+0x1a2/0x390 [ 755.843707][ T8865] driver_probe_device+0x50/0x430 [ 755.843737][ T8865] __device_attach_driver+0x2d6/0x530 [ 755.843767][ T8865] bus_for_each_drv+0x24e/0x2e0 [ 755.843796][ T8865] ? __pfx___device_attach_driver+0x10/0x10 [ 755.843822][ T8865] ? __pfx_bus_for_each_drv+0x10/0x10 [ 755.843865][ T8865] __device_attach+0x333/0x520 [ 755.843898][ T8865] ? __pfx___device_attach+0x10/0x10 [ 755.843936][ T8865] bus_probe_device+0x189/0x260 [ 755.843970][ T8865] device_add+0x856/0xbf0 [ 755.844001][ T8865] usb_new_device+0x104a/0x19a0 [ 755.844048][ T8865] ? __pfx_usb_new_device+0x10/0x10 [ 755.844084][ T8865] ? _raw_spin_unlock_irq+0x23/0x50 [ 755.844111][ T8865] ? lockdep_hardirqs_on+0x99/0x150 [ 755.844143][ T8865] hub_event+0x2d6d/0x5150 [ 755.844230][ T8865] ? __pfx_hub_event+0x10/0x10 [ 755.844259][ T8865] ? __pfx_lock_acquire+0x10/0x10 [ 755.844281][ T8865] ? preempt_schedule+0xe1/0xf0 [ 755.844309][ T8865] ? __schedule+0x4881/0x4be0 [ 755.844347][ T8865] ? preempt_schedule_thunk+0x1a/0x30 [ 755.844378][ T8865] ? process_scheduled_works+0x976/0x1840 [ 755.844410][ T8865] process_scheduled_works+0xa66/0x1840 [ 755.844472][ T8865] ? __pfx_process_scheduled_works+0x10/0x10 [ 755.844796][ T8865] ? assign_work+0x364/0x3d0 [ 755.844847][ T8865] worker_thread+0x870/0xd30 [ 755.844962][ T8865] ? __kthread_parkme+0x169/0x1d0 [ 755.845005][ T8865] ? __pfx_worker_thread+0x10/0x10 [ 755.845030][ T8865] kthread+0x2f0/0x390 [ 755.845056][ T8865] ? __pfx_worker_thread+0x10/0x10 [ 755.845084][ T8865] ? __pfx_kthread+0x10/0x10 [ 755.845111][ T8865] ret_from_fork+0x4b/0x80 [ 755.845133][ T8865] ? __pfx_kthread+0x10/0x10 [ 755.845159][ T8865] ret_from_fork_asm+0x1a/0x30 [ 755.845210][ T8865] [ 755.845233][ T8865] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 755.845249][ T8865] CPU: 1 UID: 0 PID: 8865 Comm: kworker/1:10 Not tainted 6.13.0-rc6-syzkaller-00046-g0b7958fa05d5 #0 [ 755.845274][ T8865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 755.845288][ T8865] Workqueue: usb_hub_wq hub_event [ 755.845314][ T8865] Call Trace: [ 755.845322][ T8865] [ 755.845332][ T8865] dump_stack_lvl+0x241/0x360 [ 755.845361][ T8865] ? __pfx_dump_stack_lvl+0x10/0x10 [ 755.845388][ T8865] ? __pfx__printk+0x10/0x10 [ 755.845421][ T8865] ? vscnprintf+0x5d/0x90 [ 755.845447][ T8865] panic+0x349/0x880 [ 755.845473][ T8865] ? __warn+0x174/0x4d0 [ 755.845498][ T8865] ? __pfx_panic+0x10/0x10 [ 755.845530][ T8865] ? ret_from_fork_asm+0x1a/0x30 [ 755.845564][ T8865] __warn+0x344/0x4d0 [ 755.845585][ T8865] ? usb_submit_urb+0x1039/0x1930 [ 755.845617][ T8865] report_bug+0x2b3/0x500 [ 755.845642][ T8865] ? usb_submit_urb+0x1039/0x1930 [ 755.845675][ T8865] handle_bug+0x60/0x90 [ 755.845695][ T8865] exc_invalid_op+0x1a/0x50 [ 755.845716][ T8865] asm_exc_invalid_op+0x1a/0x20 [ 755.845743][ T8865] RIP: 0010:usb_submit_urb+0x1039/0x1930 [ 755.845777][ T8865] Code: 00 eb 66 e8 29 b9 65 fa e9 79 f0 ff ff e8 1f b9 65 fa c6 05 6f df c8 08 01 90 48 c7 c7 60 c4 ae 8c 4c 89 ee e8 48 5c 26 fa 90 <0f> 0b 90 90 e9 40 f0 ff ff e8 f9 b8 65 fa eb 12 e8 f2 b8 65 fa 41 [ 755.845796][ T8865] RSP: 0018:ffffc9000bf16b58 EFLAGS: 00010246 [ 755.845820][ T8865] RAX: ec3f97eb21cf9a00 RBX: 0000000000000cc0 RCX: 0000000000100000 [ 755.845836][ T8865] RDX: ffffc9001a97c000 RSI: 00000000000fffff RDI: 0000000000100000 [ 755.845851][ T8865] RBP: ffff8881417ee908 R08: ffffffff816019a2 R09: 1ffffffff284e34b [ 755.845868][ T8865] R10: dffffc0000000000 R11: fffffbfff284e34c R12: 1ffff1100bc1110a [ 755.845884][ T8865] R13: ffff8881417ee900 R14: dffffc0000000000 R15: ffff88805e088850 [ 755.845910][ T8865] ? __warn_printk+0x292/0x360 [ 755.845944][ T8865] ? usb_submit_urb+0x1038/0x1930 [ 755.845974][ T8865] ? __pm_runtime_resume+0x12d/0x180 [ 755.846012][ T8865] cm109_input_open+0x1f9/0x480 [ 755.846048][ T8865] input_open_device+0x1d2/0x340 [ 755.846078][ T8865] kbd_connect+0xe9/0x130 [ 755.846102][ T8865] input_register_device+0xd3b/0x1110 [ 755.846138][ T8865] cm109_usb_probe+0x10cd/0x1600 [ 755.846194][ T8865] usb_probe_interface+0x641/0xbb0 [ 755.846233][ T8865] ? __pfx_usb_probe_interface+0x10/0x10 [ 755.846256][ T8865] really_probe+0x2b8/0xad0 [ 755.846290][ T8865] __driver_probe_device+0x1a2/0x390 [ 755.846319][ T8865] driver_probe_device+0x50/0x430 [ 755.846347][ T8865] __device_attach_driver+0x2d6/0x530 [ 755.846376][ T8865] bus_for_each_drv+0x24e/0x2e0 [ 755.846404][ T8865] ? __pfx___device_attach_driver+0x10/0x10 [ 755.846430][ T8865] ? __pfx_bus_for_each_drv+0x10/0x10 [ 755.846471][ T8865] __device_attach+0x333/0x520 [ 755.846493][ T8865] ? __pfx_lock_release+0x10/0x10 [ 755.846521][ T8865] ? __pfx___device_attach+0x10/0x10 [ 755.846545][ T8865] ? do_raw_spin_unlock+0x13c/0x8b0 [ 755.846584][ T8865] bus_probe_device+0x189/0x260 [ 755.846615][ T8865] device_add+0x856/0xbf0 [ 755.846645][ T8865] usb_set_configuration+0x1976/0x1fb0 [ 755.846699][ T8865] usb_generic_driver_probe+0x88/0x140 [ 755.846724][ T8865] usb_probe_device+0x1b8/0x380 [ 755.846752][ T8865] ? __pfx_usb_probe_device+0x10/0x10 [ 755.846782][ T8865] really_probe+0x2b8/0xad0 [ 755.846817][ T8865] __driver_probe_device+0x1a2/0x390 [ 755.846847][ T8865] driver_probe_device+0x50/0x430 [ 755.846874][ T8865] __device_attach_driver+0x2d6/0x530 [ 755.846902][ T8865] bus_for_each_drv+0x24e/0x2e0 [ 755.846930][ T8865] ? __pfx___device_attach_driver+0x10/0x10 [ 755.846955][ T8865] ? __pfx_bus_for_each_drv+0x10/0x10 [ 755.846995][ T8865] __device_attach+0x333/0x520 [ 755.847025][ T8865] ? __pfx___device_attach+0x10/0x10 [ 755.847060][ T8865] bus_probe_device+0x189/0x260 [ 755.847092][ T8865] device_add+0x856/0xbf0 [ 755.847121][ T8865] usb_new_device+0x104a/0x19a0 [ 755.847163][ T8865] ? __pfx_usb_new_device+0x10/0x10 [ 755.847198][ T8865] ? _raw_spin_unlock_irq+0x23/0x50 [ 755.847224][ T8865] ? lockdep_hardirqs_on+0x99/0x150 [ 755.847254][ T8865] hub_event+0x2d6d/0x5150 [ 755.847338][ T8865] ? __pfx_hub_event+0x10/0x10 [ 755.847367][ T8865] ? __pfx_lock_acquire+0x10/0x10 [ 755.847388][ T8865] ? preempt_schedule+0xe1/0xf0 [ 755.847413][ T8865] ? __schedule+0x4881/0x4be0 [ 755.847449][ T8865] ? preempt_schedule_thunk+0x1a/0x30 [ 755.847477][ T8865] ? process_scheduled_works+0x976/0x1840 [ 755.847507][ T8865] process_scheduled_works+0xa66/0x1840 [ 755.847572][ T8865] ? __pfx_process_scheduled_works+0x10/0x10 [ 755.847613][ T8865] ? assign_work+0x364/0x3d0 [ 755.847650][ T8865] worker_thread+0x870/0xd30 [ 755.847689][ T8865] ? __kthread_parkme+0x169/0x1d0 [ 755.847715][ T8865] ? __pfx_worker_thread+0x10/0x10 [ 755.847735][ T8865] kthread+0x2f0/0x390 [ 755.847758][ T8865] ? __pfx_worker_thread+0x10/0x10 [ 755.847784][ T8865] ? __pfx_kthread+0x10/0x10 [ 755.847809][ T8865] ret_from_fork+0x4b/0x80 [ 755.847827][ T8865] ? __pfx_kthread+0x10/0x10 [ 755.847850][ T8865] ret_from_fork_asm+0x1a/0x30 [ 755.847895][ T8865] [ 755.848142][ T8865] Kernel Offset: disabled