last executing test programs: 2m23.414653812s ago: executing program 0 (id=750): unshare(0x24060400) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, 0x0, 0x0) 2m23.232014416s ago: executing program 0 (id=752): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="1807000000000d000000000000000000851000000200000026000000feffff859500007b0000000095"], &(0x7f0000000400)='GPL\x00', 0x2, 0x91, &(0x7f00000004c0)=""/145, 0x1e00, 0x0, '\x00', r1}, 0x94) 2m23.063400016s ago: executing program 0 (id=753): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x5, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xd}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7fffffff}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 2m22.69990479s ago: executing program 0 (id=757): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000f00)={'filter\x00', 0x7, 0x4, 0x410, 0x218, 0x110, 0x0, 0x328, 0x328, 0x110, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev, @rand_addr, @multicast2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x460) 2m22.425256883s ago: executing program 0 (id=762): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000040)=0x14, 0x4) sendmmsg$inet6(r0, &(0x7f0000005980)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x22}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000080)="ed", 0x1}], 0x1}}], 0x1, 0x200400c0) 2m21.93208731s ago: executing program 0 (id=769): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a3200000000080041007278650014003300626f6e643000000000ddffffffffffffb3047119fa611ee9dc958839f58d1269b9e924e3593149293974d6193fb7ebe12980fb985ca96c613dc21a83d2c9bc3b4041aca963efa0157488a2c74e38ff2c18ca992b1e3027ef9da7e784787cd23566352088"], 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x100) 2m6.679933039s ago: executing program 32 (id=769): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a3200000000080041007278650014003300626f6e643000000000ddffffffffffffb3047119fa611ee9dc958839f58d1269b9e924e3593149293974d6193fb7ebe12980fb985ca96c613dc21a83d2c9bc3b4041aca963efa0157488a2c74e38ff2c18ca992b1e3027ef9da7e784787cd23566352088"], 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x100) 2m4.636306694s ago: executing program 1 (id=813): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800190007000200060003c00200bc24eab556a705251e618294ff4051f60a84c9f4d4938037e786a6d00010000400000000000000c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004004) 2m4.360039681s ago: executing program 1 (id=816): rseq(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x562591dcef2c6738}, 0x20, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f00000001c0)={'HL\x00'}, &(0x7f0000000280)=0x1e) 2m4.157526116s ago: executing program 1 (id=819): r0 = io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000c000/0x1000)=nil, &(0x7f000001f000/0x1000)=nil, &(0x7f0000015000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000000c000/0x4000)=nil, &(0x7f000001d000/0x3000)=nil, &(0x7f0000012000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_FILES(r0, 0x20, &(0x7f0000000000)=[r0], 0x1) 2m3.923755051s ago: executing program 1 (id=822): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000140)) 2m3.66387943s ago: executing program 1 (id=825): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x120, 0x30, 0x300, 0x71bd22, 0x25dfdbff, {}, [{0x4}, {0x108, 0x1, [@m_csum={0x4c, 0x10, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x6, 0x4, 0x6}, 0x32}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ct={0xb8, 0x1b, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x5, 0x7}]}, {0x85, 0x6, "2d39d70427cc328cbba6607f758532f2d695953cf86e30292f8350c74d153a2b80773629fc5403e22a35359da12ec47f724ddc93ffe5b5cafb783e82dfd407e89982db51cdb85f560014ece27510591dce51606a6281dc245f888721fb47d7b0fc1dd9f72f5731344ee43a56efecf00ebc06913eda58848fac2697d09c43647d38"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x4000810}, 0x20040850) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 2m3.363828152s ago: executing program 1 (id=829): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x370, 0xffffffff, 0xb0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@socket3={{0x28, 'socket\x00', 0x2}}, @common=@unspec=@cluster={{0x30}, {0x4, 0x4, 0x183e, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x4ca, 0xb, [0x10, 0x2a, 0x36, 0xe, 0x7, 0xf, 0xb, 0x22, 0x39, 0x12, 0x17, 0x36, 0x6, 0xe, 0xa, 0x10], 0x0, 0xb, 0x681}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'wlan1\x00', 'pim6reg1\x00', {0xff}}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@set={{0x40}, {{0x2, [0x4, 0x4, 0x4, 0x1, 0x4, 0x7], 0x0, 0x2}}}, @common=@ttl={{0x28}, {0x0, 0x40}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) getsockopt$inet_tcp_buf(r0, 0x6, 0xb, 0x0, &(0x7f0000000400)) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m48.198337394s ago: executing program 33 (id=829): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x370, 0xffffffff, 0xb0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@socket3={{0x28, 'socket\x00', 0x2}}, @common=@unspec=@cluster={{0x30}, {0x4, 0x4, 0x183e, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x4ca, 0xb, [0x10, 0x2a, 0x36, 0xe, 0x7, 0xf, 0xb, 0x22, 0x39, 0x12, 0x17, 0x36, 0x6, 0xe, 0xa, 0x10], 0x0, 0xb, 0x681}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'wlan1\x00', 'pim6reg1\x00', {0xff}}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@set={{0x40}, {{0x2, [0x4, 0x4, 0x4, 0x1, 0x4, 0x7], 0x0, 0x2}}}, @common=@ttl={{0x28}, {0x0, 0x40}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) getsockopt$inet_tcp_buf(r0, 0x6, 0xb, 0x0, &(0x7f0000000400)) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 5.043997845s ago: executing program 6 (id=1334): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000001c0)=0x2001) r1 = fcntl$dupfd(r0, 0x0, r0) readv(r1, &(0x7f0000000840)=[{&(0x7f0000000200)=""/243, 0xf3}, {0x0}], 0x2) write$sndseq(r1, &(0x7f0000000180)=[{0xff, 0x0, 0x0, 0x0, @tick=0x8, {0x1}, {0x0, 0x4}, @ext={0x0, 0x0}}, {0x33, 0x0, 0xff, 0x3, @time={0xe, 0x5}, {0x0, 0x31}, {0x8, 0xfc}, @result={0x0, 0x4}}], 0x38) 4.725545131s ago: executing program 6 (id=1336): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x80015b12, 0x0) 4.61213437s ago: executing program 3 (id=1337): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f000023d000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x0, &(0x7f00000021c0)=[{0x4, 0xffffffff}], 0x1, 0x2bd}) 3.175737752s ago: executing program 3 (id=1345): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000001700)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x1, 0x0, 0x14, 0x1}, @ipv4=@generic={{0x6, 0x4, 0x2, 0x2, 0xfc0, 0x64, 0x0, 0x2b, 0x2f, 0x0, @private=0xa0100fe, @broadcast, {[@timestamp_prespec={0x44, 0x4, 0x51}]}}, "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"}}, 0xfce) 3.154931732s ago: executing program 4 (id=1347): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r0, 0x6, 0xd, &(0x7f0000000000), 0x4) getsockopt(r0, 0x6, 0x17, 0x0, 0x0) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x160) 3.099846034s ago: executing program 5 (id=1348): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0xc17a) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000003100)=""/4118, 0x1016}], 0x1) 2.945579745s ago: executing program 2 (id=1349): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="820000000000000099000040"]) 2.779260148s ago: executing program 4 (id=1350): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1e00000000000000f8ff070008"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r0, 0x0, &(0x7f00000000c0)=""/85}, 0x20) 2.72638001s ago: executing program 5 (id=1351): r0 = socket(0x10, 0x803, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r1, 0x40384708, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x2, "3eccd8000200000500"}) close_range(r0, 0xffffffffffffffff, 0x0) 2.724975513s ago: executing program 6 (id=1352): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="70000000ffffffffffffaaaaaaaaaabb88a82e008100180008004500002c00000000012f"], 0x46) 2.43341102s ago: executing program 5 (id=1353): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='huge=within_size']) chdir(&(0x7f0000000280)='./file0\x00') r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) 2.314591538s ago: executing program 4 (id=1354): sched_setscheduler(0x0, 0x1, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xaaa1}}, 0x14, &(0x7f0000000080)={0x0}, 0x7, 0x0, 0x0, 0x6004a014}, 0x600c010) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 2.283812629s ago: executing program 2 (id=1355): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x14}, @ipv4=@tcp={{0x6, 0x4, 0x0, 0x8, 0x2c, 0x68, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @remote, {[@end]}}, {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x1, 0x0, 0x6, 0x10, 0x1, 0x0, 0x8, {[@mss={0x2, 0x4, 0xb}]}}, {"ff09eb92334ce7bdbce1cc8ea7c31c4233f717f38859083e7244d871b6582e4b77453efb5c862f933cb39161906e8b6c78ab07fe1b3fe07565e76f3049a8f11350ffa159ce18eb0ce3712cc785657be76b1587f708924c9feb2e292ab97040cca863de23b3b516cc537105bb0404f84119e4260762c50671dc5aab1358ab653fbfb4bbcd3b4664ec16d8f9ec7829cd1af4a5450585bb1de8f968728adf5dec1de9e1e4a8ababf331c67b6c63551249f96344f4f4656e7cd6bf657857a8af5d2df76f377033b968501e40ed92b801d6efaaa61bdc158a6194b1fd1d6380bb7300a70b1d36c1a76ca97d8aec866053ca0d0d4830f966f48a3461bc25fba4dec31acaa7571527df4164e4f6a96c48ac714f8a8e0a4cd14617b52de88f0bee1cffccc96655f4fc658b5a0510e050f6f40aa3d28453590c3af7a4460719f9106f81797c856d60ec8528cc0c9487e69aa50cea9f374fa68593421c48bae1999c875cb205cc55f3c991416ff38e4f093a4c86ad36f19d1b3578242eedcfafd2c931fd2868dc24d9892f790ed560f40a848dd0670f0f611a61640053a2641ddc8ea149145bc5669b176bf12f40d9e0664760a3e476a93a362dd7dfcc3fd9f8be8ee2cd7a0a5fe189031bacbc1ed8e7c15a2bae104b7650c38ed42128a21ad834bac63ed73159e680f90d41475f28567eef33b4c21860ea1cd7a3f56ca286f87608ed49b72d36a1e6b04e4e0ba9ba7f76bece6426a6cad503c8ab33f28772edee91ab52fa29ff4da3893fa0629d1084b2a87f00a468feed92e5fe5aef33ae040aeb89098033fa81bec4535683391297f750f184f06ccb58dfa50ae2d6c159a0208481450bf38bca83f26c50fffe1449895cb8c990aa1cc0dd4cd2d0b4b3cc0006626898fdf274ecfaa1650c61e17f303f41559d75d470da40196aa5dff545903db275a12166b1692f334c70e4c5cf2ca2410989b429e3bc6e2e630adc5d6a039ad7872c4b4754cceeec43a3323d4594fcc28623e65f3067444e098c8817c9eb3f6dc06b6ec407438c09f2c137009c06505d88e0337c765f6c3b16f53bb0d1b235dbdc509ea3fd0996c8cad5bce70eea4d8852e7adfc222b06552d250e70211228251bfb5b95dd3b09bc30fc52337505a6f0689bfca144db622dead3525fbb73056d1b7fa7b08535af3952a8d77a1f34655eb69616c963f4e8b34e88b8405e0e3cd5130c4f98c4e180bfe76ec6cd6ac5e8ccf5d1cf99fdd79bca0a227ee78d2037a55c8593f7ff10bd42d82cd6c4931df7fa6c0c6a8246cef83599095269fb7841aec2cf1afb41d1c7c54136b2737d2c2ae2be604058b657eec27669b99fa669c92a9ebc8e817ed6860070d2fe6bad743ee65d35633de56f026710729102ed175e2ec0af8cc2840af173c71862e90bd370cd3d277a7d2622a5f00946649c1d7894f2a69c3cf8e21276d72c4536149038f9967ec0c748de34376da7971495e0cd783056cdf20cddab2e2201ea43e657e36c54d42c47d1e6a1c9dede599e6c0baac06c2e3fcc5687c5d4706f32337ab639633822dd98089ba20c532fbe4a5e72963d53a86ec34d6a4aa536015a3272c0d4cc0a3a3ab2196ec7a92bf2daf638ba5957941ff0facfe6a161da6a6cbf8e6b40c8b6a601ee91e592f6bb9dc85f84c99e088004ed3f650404934c8b1d436500f3c83333b33be5532076d1a718f80c139db1ac28c953cc23394a5a137567cde82fc681f32e66aa415c2358d02486cb6cb4d6a77e5b27d729e0116773725410332c58b4cc3683fc9dc5235b19a60ea8794986e56e5e8e2ce65655f261ee0c33c8c0b99e7b5bc61fb55040d9e109a3a1182a0f81c2ca081b14cc207b11dad4592add90ff543d2d237421f938af8a010cd197502dbf42f14f1572aabc9f16593a735c07484d61bc43b5f300eb66abe2052cec153f89c1819512316ad728eca65949bf1f903a556ae67871a0d35b0fcb5485e8fae70695cf90547784da27450d6c3e6049bf2f1b923fab49cf4caebccc7a0171aee4364db173c795cc486475427fb92efdbf161ab7a35aecb8e1d5435ea2733cc8dc3f824b00c6d3e05e406de563d1fc6aa77ef76351a3be04557d915df5ed1fd52207872666bbff9ffb84a6e91ae863af42b3e9dd6da62115ab71c6db508875db1a83e631c4cd658a6492cb1a8bd4a42b4546afb74484d519cb5b1a8db29d91ea575a09dc45f63b51b0ace075511556116db62507ed8b163430eea2dcc171890c51afe0ffb22d6595c15112730ce041648d543abf1871bb62b40303b277b2084eaee4895a9e552bcb2d319cbf733d2682940050095fc9499f116e3c828727c2f0755e2c624891a794a1bd9ff52237f13ccf144e67b5311e556333c5b11816fecd78fffb72190480b93e7fe13682b465aad1c2cf564c16d3e8fb07aed4b415f781a52dda6822ed0023b93c07b61e7740470216f29cb9c770ffd33837a6a0bc2990899778c74af304996ec13c1fc935b6d67b23f5190bf8b1bb3cc4e42bb2b9f1e3b330f24fe172396da0c8b52cdb4351a80fcebfcc85e54436327d8ad72d288551540f9a7bda7ecf2f2c41c3e775e26313de86c1b41ea1199321d533abe105ebfd90c9defd30ce9c7ea7a342b310eeca3dd88732dd9d7751c0ae685fbaed556727d2ece266a66ec7adc3a20f377b386ca7c909aba90fef9605ac37d43dd89e4da8455f086c1d2ce9c5b0eb4296ac64b7c244b28b4fd66a8be0442cbeacc7ba871efb11069d7c28dcdaf5798d0025741e461adabb3f270d056b1fe961e6626fc9a533924364687e80aa10e8ae081d743487bcfa97c0e1938dd47fc9075c3b0772284d98e683f0314c4a261845a3e50106e9c0a529b77293c251472a8eb6213ae49b0cc9d569e0a0c4fa1fb10663e4e0b6b0f9cee796aace2a1b42e42758a0180c2ee89119bf9359c6a277a062eda92a932ccf4b72ec1f998224acbe9eb8d594b8861b65ac276f1d401418c7be4d9344b52eb07aa74ba352e347f06e7e923b86cae5c0beb9f7aa0201b6537a82ea8f9281ac6e82a327ea7b879209dd30c1d40c22c402d3e6f09f4b4146b28cac26532eafbb5f6a67f6f734601ab352c804083570087124b23d7d3bff4d31569fcb8c091f157336d11e0e388a91ddf82b05b22dc3cc2ba4355a9453d9329cbca9d52489f15da5849ba32eb11d91184c6a352fe064aae6e85de05288282f911ebf2a932d43413c9bff9cb50f86af7eecca5eb9e3ce7fe9bc1743bcf24d01d02961116a87e4b55ddc1f217fb488c002cd85bb79db625bded4360983abf1e4574a9a46cfe05f0e45da2dd28703599adbae4703aad3ba1cc44813bcdf2432f0e5e9dd67ee8c6b34a9107fb81f21d87dd8fdf270068528685ea3c989beddc08410a59b5ad68d2fd9b37f8b3fddef393433de51b01314e3d6bb08fd7ea5b9abb4d4ccc5a5a43820004ac3870491b8df621be5388e2c3e2c40843d6798c493b308bef505d9f2d2734990a30150b4cefcaeb590118d21f331f201569c778cd5e54e34ec30a73d1fd48cd5d64d444a2a58856a71fa8173713136bdaef1b9cf1776cd7d5be3179ae7a2a95d7138334add686c5b50ca87e41b4c3f5343387cc491e97c280becefd3d72ae959a4fb3e51c15d6dea3210c480342c1748a040879f005f98a8b0d6a32fad631f557694179d117f71ae5fa6d54d4208aca72c5d1e03d34e80b221522c04b1bc7bc1ee008550a1757a1b74a0fea1d22778fd7e7a5f58e41cf72edf60d751bc35223646397457e8f9036838fd3b72e2bc176acc3e1e99a392b1d496cbfbdaa641b2212ef41c1728dd587272849b3a5cbe3b66f7eaf622d2cdf72ada32ccd3e16dddba2c890beaa8dba3773c88415fbcb733084a9bac52b6844f28377ba01fa3a09f74a57d87f31468ee2c64ae05b35fe3d660bcc6ed908b710a1216974db0232d90a124a4e8ee30322a20455feb4d0bef13ce0fafb56f492a99c3fb1c57900330bf75246147b44f23c77554119f1d96a4558d8fff90922af4f9299407344d7292d29ce3446e39bd9277e513e6068394584a08b356e6a0c641108f6e89390290844548a6c8122d8a83cc6c7d7f0c10d330a537d832bc779ea245a37c850b85858885541da0f914e1a41ec5b49ad9b3b41814f66c50bd1f49cd514d027ecd1bd2f002f1989fc621f23d6d5f1b9976ce95c305fa34ebd3404919c3414fd97227a590684ce5af0a18fb4fa6f41d4a3951fb49cc8184b547e9aa2ceb4912975ecf8e956bb29389789b8ceab72e7ae88fb402795ba7712323409fc83cbaf10a523dd4602d9ae7c158a56fee8df04ba4c48cdd63b1ce09bc697ca138f01f261f51bdc05480b7cf5f64836bf8e029d4883d4bc2f53115129cee1d9a9e57b4a5fb4ebef2237a2bdad349baeab05e6b24167ba67ea94f808d9d1386b08b0fd3c92a80ed253db5bb40e6a0c308339c615af56e554ed0d78881228da41706acd8596c52e33abc8a4a3317847dd50b8d77b341063fb29dd02594a540fa737a4dcf9c57ca8717d36e8a8a84eecf9ebb7bb0f4d8cb0f247f982e4fb7a29a7072f08eb1479e278b1084f4faba3c75b6c33438e24e7b454f1e8ee7c64507ef34f37e8655f49cf6871e8012bbf80d2fe2ad9424464d0a408ca50037f1b1221c2d3dbe4dfa75c236f6b59b8a9c8e3a4b1ef73bae3f8d44affc10c72485dee42b73671867221778a6f9ba1ddd5715a6115845af2da8687e0e75f35cca527cb21a07bb2018a574a7e1eb626ad6939990038588cabc63aaafada2c88336f2c764d52cf5c3740371c79ed30f4b7325768c43b9daab5532b4778bdc380bc56bf656eaeea1f7987db28672850e46fce9c9d7dcc7df7b01e9f98ae98890491949c3a9af72cf35227fe88e79d1853ab46903dffd8ceb6060b5a2da5ee061db21e07124b510af4be93a2eda5c9469c73ef661e52d1d3ddf6d0dbd58715730485d26b731da17fb67b1bdedd400cdd472ab88c059e99452b932202fa8500e9b14ec63791857fc33fb97a21469dc318e9799d6b8d3155a9b9ddae7704457f9fbafd0756fcf8464e2398a88b2b4ea3f655cacd390f6df7b195b35b25c6873f0c53ba2939efe513e448ec1c406380ca4e0a6ef53cb183f05bfe99b003429aa5a4709dbf9b6da2fcbc243bcc6b6e8840ed0636af84b6dd3c3b9e50f19c7fda40185dd542f8ff32e7ca9fad274847238e05cf0db24cf7ac1e2cecbcb20bbfe4868b6245899d8e6717a1f9321fd38b87c0c02bb24ed937e9460d03a5a38fa8e0d222105c8527d898f889bbe298b368fff9b951d1b0780352ce8ad10a5dea883292d6cf149618406fc33ca1539da60a1922ee27b7b74aa3507e6a5731bf2c42c879e9efa0750c8bacc63e2225589eab7bf237c259f715248b61278e4ef6f6d238d5bc9bde650795243874b294f228597cf687df0aa8ab1e58548991a1bd903f70408cd4c23f2db7f2ad3f9a0b12a4e52f09270d8f79aa0cde1ffd268d50fcf47c5b2a41898a076e8467cc40de311c26a1f5ff5d1a6693402f927077083490b65e594d5f4e848dc76e03adb210826926ef65e1f63346ad6a14b732cd7a23bf393e72b3c264258d7ea827d03e67140c89ceaaad28cb7f229db"}}}}, 0xfce) 2.040604364s ago: executing program 5 (id=1356): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000040)={r2, 0x7}, &(0x7f0000000080)=0x8) 2.039792301s ago: executing program 4 (id=1357): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x1ff, 0x1, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x40000073, 0x0, 0x3}]}) 1.968415175s ago: executing program 3 (id=1358): bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x20) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 1.840331786s ago: executing program 3 (id=1359): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000006180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fbdbdf251500000008000300", @ANYRES32=r3, @ANYBLOB="0c002b80050001"], 0x28}, 0x1, 0x0, 0x0, 0x400089c}, 0x4000080) 1.475949986s ago: executing program 4 (id=1360): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000d60000000900000005"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000001680), &(0x7f0000002300), 0x8001, r0}, 0x38) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={r0}, 0x4) 1.372418856s ago: executing program 2 (id=1361): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x2, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 1.270721366s ago: executing program 2 (id=1362): r0 = io_uring_setup(0xf08, &(0x7f0000000540)={0x0, 0x62d5, 0x38c1, 0x4, 0xa2}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f000000e000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000015000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000000c000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0xa3) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x1b) io_uring_register$IORING_REGISTER_FILES(r0, 0x20, &(0x7f0000000000)=[r0], 0x1) 999.217971ms ago: executing program 6 (id=1363): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x40891}, 0x24000000) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 982.709277ms ago: executing program 2 (id=1364): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={0xffffffffffffffff, 0x17, 0x2}) 981.642778ms ago: executing program 3 (id=1365): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="820000000000000099000040"]) 927.911122ms ago: executing program 5 (id=1366): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000140)='contention_end\x00', r0}, 0x18) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101201, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x4020aeb2, &(0x7f0000000080)={0x0, 0x0, @ioapic={0x100010000, 0x1, 0x0, 0x0, 0x0, [{0x6, 0x7, 0xa, '\x00', 0xab}, {0x2, 0x1, 0x2, '\x00', 0x5b}, {0x60, 0x4, 0x8, '\x00', 0x3}, {0x5, 0xe, 0x7, '\x00', 0xf1}, {0xc, 0xc, 0x9, '\x00', 0x43}, {0x4, 0x78, 0xc5, '\x00', 0x9}, {0x94, 0x5, 0x9, '\x00', 0xfe}, {0xf, 0x0, 0x6, '\x00', 0xfc}, {0x1, 0x4, 0x8, '\x00', 0x33}, {0x81, 0xf, 0x57, '\x00', 0x9}, {0x5, 0x4, 0x1, '\x00', 0x6}, {0x81, 0x6, 0x6, '\x00', 0x48}, {0x3, 0x1, 0x8, '\x00', 0xff}, {0x6, 0x3, 0x2, '\x00', 0x2}, {0x6, 0x5, 0x3, '\x00', 0x50}, {0xd, 0x2, 0xd}, {0x8, 0x81, 0x81, '\x00', 0xb}, {0x3, 0x89, 0x1, '\x00', 0xf}, {0x78, 0x7, 0x2, '\x00', 0x5}, {0x3, 0x7, 0xc1, '\x00', 0x7}, {0x5, 0x26, 0x5, '\x00', 0x9}, {0x7, 0x9, 0xe4, '\x00', 0x6}, {0xc1, 0xd, 0x81, '\x00', 0x10}, {0xfd, 0x3, 0x80, '\x00', 0x6}]}}) 433.659618ms ago: executing program 2 (id=1367): timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) 325.281728ms ago: executing program 6 (id=1368): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000000)) 317.900894ms ago: executing program 5 (id=1369): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x8029, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x28, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x0, 0x700}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c) 285.138344ms ago: executing program 4 (id=1370): r0 = socket$inet_smc(0x2b, 0x1, 0x0) sendmmsg$inet(r0, &(0x7f0000002640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x200400d3) close(0xffffffffffffffff) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x14, 0x601, 0x0, 0x0, {0x2b, 0xfa}}, 0x14}}, 0x0) 99.902129ms ago: executing program 3 (id=1371): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc}) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[], 0x6a) 0s ago: executing program 6 (id=1372): r0 = socket(0x10, 0x803, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r1, 0x40384708, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x2, "3eccd8000200000500"}) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): .738799][ T5834] bridge_slave_0: entered allmulticast mode [ 85.744455][ T5834] bridge_slave_0: entered promiscuous mode [ 85.858987][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.859545][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.859677][ T5834] bridge_slave_1: entered allmulticast mode [ 85.861204][ T5834] bridge_slave_1: entered promiscuous mode [ 86.105909][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.106071][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.106265][ T5838] bridge_slave_0: entered allmulticast mode [ 86.109111][ T5838] bridge_slave_0: entered promiscuous mode [ 86.112581][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 86.245660][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 86.255482][ T5837] Bluetooth: hci0: command tx timeout [ 86.271500][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.271595][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.271901][ T5838] bridge_slave_1: entered allmulticast mode [ 86.274569][ T5838] bridge_slave_1: entered promiscuous mode [ 86.301969][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.342840][ T5837] Bluetooth: hci1: command tx timeout [ 86.413345][ T5837] Bluetooth: hci2: command tx timeout [ 86.416971][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.573232][ T5850] Bluetooth: hci4: command tx timeout [ 86.573489][ T5837] Bluetooth: hci3: command tx timeout [ 86.786608][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.820879][ T990] cfg80211: failed to load regulatory.db [ 86.971389][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.987593][ T5834] team0: Port device team_slave_0 added [ 87.000900][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.001112][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.001465][ T5841] bridge_slave_0: entered allmulticast mode [ 87.012714][ T5841] bridge_slave_0: entered promiscuous mode [ 87.117045][ T5834] team0: Port device team_slave_1 added [ 87.131645][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.131722][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.131836][ T5841] bridge_slave_1: entered allmulticast mode [ 87.139773][ T5841] bridge_slave_1: entered promiscuous mode [ 87.735050][ T5838] team0: Port device team_slave_0 added [ 88.067689][ T5838] team0: Port device team_slave_1 added [ 88.068315][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.068444][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.068621][ T5845] bridge_slave_0: entered allmulticast mode [ 88.071302][ T5845] bridge_slave_0: entered promiscuous mode [ 88.077776][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.077792][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.077814][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.079856][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.080026][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.080206][ T5842] bridge_slave_0: entered allmulticast mode [ 88.082805][ T5842] bridge_slave_0: entered promiscuous mode [ 88.093656][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.177949][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.178082][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.178253][ T5845] bridge_slave_1: entered allmulticast mode [ 88.180913][ T5845] bridge_slave_1: entered promiscuous mode [ 88.184717][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.184730][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.184754][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.194134][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.194264][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.194466][ T5842] bridge_slave_1: entered allmulticast mode [ 88.197692][ T5842] bridge_slave_1: entered promiscuous mode [ 88.205873][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.333065][ T5837] Bluetooth: hci0: command tx timeout [ 88.413139][ T5837] Bluetooth: hci1: command tx timeout [ 88.493125][ T5837] Bluetooth: hci2: command tx timeout [ 88.528424][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.528439][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.528454][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.653182][ T5837] Bluetooth: hci3: command tx timeout [ 88.653198][ T5850] Bluetooth: hci4: command tx timeout [ 88.806146][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.806162][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.806185][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.815462][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.821142][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.835042][ T5841] team0: Port device team_slave_0 added [ 88.947807][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.951366][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.954747][ T5841] team0: Port device team_slave_1 added [ 89.259070][ T5834] hsr_slave_0: entered promiscuous mode [ 89.260082][ T5834] hsr_slave_1: entered promiscuous mode [ 89.549040][ T5845] team0: Port device team_slave_0 added [ 89.625823][ T5842] team0: Port device team_slave_0 added [ 89.626854][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.626867][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.626889][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.630684][ T5845] team0: Port device team_slave_1 added [ 89.649159][ T5838] hsr_slave_0: entered promiscuous mode [ 89.653912][ T5838] hsr_slave_1: entered promiscuous mode [ 89.662285][ T5838] debugfs: 'hsr0' already exists in 'hsr' [ 89.662404][ T5838] Cannot create hsr debugfs directory [ 89.667953][ T5842] team0: Port device team_slave_1 added [ 89.805619][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.805636][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.805659][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.413107][ T5850] Bluetooth: hci0: command tx timeout [ 90.477254][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.477265][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.477277][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.479654][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.479667][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.479685][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.493419][ T5850] Bluetooth: hci1: command tx timeout [ 90.564034][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.564048][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.564071][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.573163][ T5850] Bluetooth: hci2: command tx timeout [ 90.603845][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.603860][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.603883][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.733073][ T5850] Bluetooth: hci4: command tx timeout [ 90.743459][ T5850] Bluetooth: hci3: command tx timeout [ 90.919129][ T5841] hsr_slave_0: entered promiscuous mode [ 90.919924][ T5841] hsr_slave_1: entered promiscuous mode [ 90.920455][ T5841] debugfs: 'hsr0' already exists in 'hsr' [ 90.920477][ T5841] Cannot create hsr debugfs directory [ 91.486244][ T5845] hsr_slave_0: entered promiscuous mode [ 91.487037][ T5845] hsr_slave_1: entered promiscuous mode [ 91.487569][ T5845] debugfs: 'hsr0' already exists in 'hsr' [ 91.487585][ T5845] Cannot create hsr debugfs directory [ 91.493855][ T5842] hsr_slave_0: entered promiscuous mode [ 91.495139][ T5842] hsr_slave_1: entered promiscuous mode [ 91.495947][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 91.495969][ T5842] Cannot create hsr debugfs directory [ 92.493104][ T5850] Bluetooth: hci0: command tx timeout [ 92.573094][ T5850] Bluetooth: hci1: command tx timeout [ 92.629712][ T5834] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.654222][ T5850] Bluetooth: hci2: command tx timeout [ 92.709889][ T5834] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.751638][ T5834] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.811351][ T5834] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.819934][ T5850] Bluetooth: hci4: command tx timeout [ 92.819964][ T5850] Bluetooth: hci3: command tx timeout [ 92.932749][ T5841] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.986884][ T5841] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.028301][ T5841] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.079244][ T5841] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.212324][ T5838] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.263619][ T5838] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.309974][ T5838] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.352474][ T5838] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.494677][ T5845] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.535214][ T5845] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.574094][ T5845] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.631724][ T5845] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.771786][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.810014][ T5842] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 93.867750][ T5842] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 93.910303][ T5842] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.947180][ T5842] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.035372][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.092823][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.093512][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.131905][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.151457][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.151583][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.250210][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.271838][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.316805][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.316932][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.360966][ T3641] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.361095][ T3641] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.419427][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.458005][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.479505][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.480060][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.530790][ T1871] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.531032][ T1871] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.652131][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.706400][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.751301][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.751552][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.805126][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.805307][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.936255][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.990248][ T1105] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.990947][ T1105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.041747][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.041900][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.075859][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.368279][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.521058][ T5834] veth0_vlan: entered promiscuous mode [ 95.591469][ T5834] veth1_vlan: entered promiscuous mode [ 95.623728][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.792177][ T5841] veth0_vlan: entered promiscuous mode [ 95.842287][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.883480][ T5834] veth0_macvtap: entered promiscuous mode [ 95.889013][ T5841] veth1_vlan: entered promiscuous mode [ 95.921675][ T5834] veth1_macvtap: entered promiscuous mode [ 95.999958][ T5838] veth0_vlan: entered promiscuous mode [ 96.028473][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.066357][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.088522][ T5838] veth1_vlan: entered promiscuous mode [ 96.134497][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.169916][ T5841] veth0_macvtap: entered promiscuous mode [ 96.202092][ T1871] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.212423][ T1871] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.226593][ T5845] veth0_vlan: entered promiscuous mode [ 96.227086][ T1871] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.227912][ T5841] veth1_macvtap: entered promiscuous mode [ 96.249739][ T1871] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.427582][ T5845] veth1_vlan: entered promiscuous mode [ 96.506697][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.550572][ T5838] veth0_macvtap: entered promiscuous mode [ 96.562647][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.621798][ T5838] veth1_macvtap: entered promiscuous mode [ 96.640525][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.640550][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.669346][ T67] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.681127][ T67] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.705951][ T67] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.720642][ T67] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.822703][ T1129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.822722][ T1129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.858666][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.929988][ T5845] veth0_macvtap: entered promiscuous mode [ 96.964179][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.062282][ T5845] veth1_macvtap: entered promiscuous mode [ 97.088325][ T5842] veth0_vlan: entered promiscuous mode [ 97.089339][ T67] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.129625][ T67] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.204115][ T67] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.239236][ T67] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.274610][ T1129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.274629][ T1129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.346300][ T5842] veth1_vlan: entered promiscuous mode [ 98.196740][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.253177][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.253196][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.317413][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.425155][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.428116][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.428369][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.428404][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.563342][ T5843] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 98.641814][ T1185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.641834][ T1185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.730685][ T5842] veth0_macvtap: entered promiscuous mode [ 98.747791][ T5843] usb 1-1: Using ep0 maxpacket: 16 [ 98.770378][ T5843] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 98.770406][ T5843] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.770424][ T5843] usb 1-1: config 0 has no interface number 0 [ 98.801164][ T5843] usb 1-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 98.801193][ T5843] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.801211][ T5843] usb 1-1: Product: syz [ 98.801218][ T5843] usb 1-1: Manufacturer: syz [ 98.801225][ T5843] usb 1-1: SerialNumber: syz [ 98.842292][ T5843] usb 1-1: config 0 descriptor?? [ 98.881813][ T5843] uvcvideo 1-1:0.105: probe with driver uvcvideo failed with error -22 [ 98.916067][ T31] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 98.933634][ T5842] veth1_macvtap: entered promiscuous mode [ 98.957832][ T3641] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.957848][ T3641] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.094097][ T5873] usb 1-1: USB disconnect, device number 2 [ 99.111423][ T31] usb 3-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 99.111481][ T31] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 99.111506][ T31] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 99.111528][ T31] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 99.113599][ T31] usb 3-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 99.113651][ T31] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 99.113676][ T31] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 99.113696][ T31] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 99.116973][ T31] usb 3-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 99.117024][ T31] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 99.117047][ T31] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 99.117068][ T31] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 99.125646][ T31] usb 3-1: string descriptor 0 read error: -22 [ 99.125788][ T31] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 99.125817][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.183141][ T1185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.183160][ T1185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.210520][ T31] adutux 3-1:168.0: interrupt endpoints not found [ 99.308989][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.396043][ T5929] usb 3-1: USB disconnect, device number 2 [ 99.437249][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.438151][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.438167][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.501862][ T1185] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.537674][ T67] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.544927][ T67] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.546134][ T67] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.887260][ T5979] process 'syz.0.10' launched './file1' with NULL argv: empty string added [ 100.891842][ T5979] ======================================================= [ 100.891842][ T5979] WARNING: The mand mount option has been deprecated and [ 100.891842][ T5979] and is ignored by this kernel. Remove the mand [ 100.891842][ T5979] option from the mount to silence this warning. [ 100.891842][ T5979] ======================================================= [ 101.019530][ T5916] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 101.090705][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.090726][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.345162][ T5916] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 101.345192][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.345212][ T5916] usb 2-1: Product: syz [ 101.345225][ T5916] usb 2-1: Manufacturer: syz [ 101.345239][ T5916] usb 2-1: SerialNumber: syz [ 101.367922][ T5916] usb 2-1: config 0 descriptor?? [ 101.532958][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.533008][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.533066][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.533157][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.533230][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.533334][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.533410][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.533504][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.533591][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.533685][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 102.951136][ T5916] usb-storage 2-1:0.0: USB Mass Storage device detected [ 103.073978][ T1185] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.073998][ T1185] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.172813][ T5916] usb 2-1: USB disconnect, device number 2 [ 103.632822][ T6001] futex_wake_op: syz.3.20 tries to shift op by -1; fix this program [ 109.734795][ T6104] could not allocate digest TFM handle sha1-neon [ 110.394191][ T5873] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 110.696421][ T5873] usb 1-1: Using ep0 maxpacket: 8 [ 110.701627][ T5873] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.701653][ T5873] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 10 [ 110.701707][ T5873] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 110.710455][ T5873] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 110.710482][ T5873] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.710500][ T5873] usb 1-1: Product: syz [ 110.710513][ T5873] usb 1-1: Manufacturer: syz [ 110.710525][ T5873] usb 1-1: SerialNumber: syz [ 111.523175][ T5873] usb 1-1: config 0 descriptor?? [ 111.557432][ T5873] cdc_ncm 1-1:0.0: CDC Union missing and no IAD found [ 111.557675][ T5873] cdc_ncm 1-1:0.0: bind() failure [ 111.663048][ T990] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 111.789260][ T5873] usb 1-1: USB disconnect, device number 3 [ 111.817076][ T990] usb 5-1: config 8 has an invalid interface number: 177 but max is 0 [ 111.817115][ T990] usb 5-1: config 8 has no interface number 0 [ 111.817161][ T990] usb 5-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 111.817187][ T990] usb 5-1: config 8 interface 177 altsetting 9 endpoint 0x4 has invalid wMaxPacketSize 0 [ 111.817205][ T990] usb 5-1: config 8 interface 177 has no altsetting 0 [ 111.817236][ T990] usb 5-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 111.817257][ T990] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.892274][ T6142] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 112.705238][ T990] usb 5-1: string descriptor 0 read error: -71 [ 112.710507][ T990] ir_toy 5-1:8.177: required endpoints not found [ 112.833256][ T990] usb 5-1: USB disconnect, device number 2 [ 116.924466][ T6252] futex_wake_op: syz.4.129 tries to shift op by 32; fix this program [ 117.779850][ T6257] netlink: 'syz.0.128': attribute type 4 has an invalid length. [ 117.780044][ T6257] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.128'. [ 118.860681][ T37] audit: type=1326 audit(1755987830.369:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6271 comm="syz.3.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb731dcebe9 code=0x7ffc0000 [ 118.860733][ T37] audit: type=1326 audit(1755987830.369:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6271 comm="syz.3.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb731dcebe9 code=0x7ffc0000 [ 118.946216][ T37] audit: type=1326 audit(1755987830.439:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6271 comm="syz.3.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7fb731dcebe9 code=0x7ffc0000 [ 118.946264][ T37] audit: type=1326 audit(1755987830.439:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6271 comm="syz.3.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb731dcebe9 code=0x7ffc0000 [ 118.946301][ T37] audit: type=1326 audit(1755987830.439:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6271 comm="syz.3.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb731dcebe9 code=0x7ffc0000 [ 123.790171][ T6381] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 125.797409][ T6394] evm: overlay not supported [ 125.904071][ T6394] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 126.733490][ T6431] netlink: 8 bytes leftover after parsing attributes in process `syz.1.206'. [ 128.013769][ T6451] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 128.593096][ T3117] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 128.743024][ T3117] usb 2-1: Using ep0 maxpacket: 16 [ 128.745526][ T3117] usb 2-1: config 8 has an invalid interface number: 206 but max is 0 [ 128.745553][ T3117] usb 2-1: config 8 has no interface number 0 [ 128.745598][ T3117] usb 2-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 128.745623][ T3117] usb 2-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 33058, setting to 1024 [ 128.745651][ T3117] usb 2-1: config 8 interface 206 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 128.745676][ T3117] usb 2-1: config 8 interface 206 has no altsetting 0 [ 128.750287][ T3117] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 128.750315][ T3117] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.750333][ T3117] usb 2-1: Product: syz [ 128.750346][ T3117] usb 2-1: Manufacturer: syz [ 128.750359][ T3117] usb 2-1: SerialNumber: syz [ 129.101636][ T3117] garmin_gps 2-1:8.206: Garmin GPS usb/tty converter detected [ 129.225608][ T3117] usb 2-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 129.324107][ T3117] usb 2-1: USB disconnect, device number 3 [ 129.354584][ T3117] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 129.355568][ T3117] garmin_gps 2-1:8.206: device disconnected [ 130.015589][ T37] audit: type=1326 audit(1755987841.519:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6512 comm="syz.3.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb731dcebe9 code=0x7ffc0000 [ 130.015637][ T37] audit: type=1326 audit(1755987841.529:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6512 comm="syz.3.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb731dcebe9 code=0x7ffc0000 [ 130.039715][ T37] audit: type=1326 audit(1755987841.539:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6512 comm="syz.3.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=460 compat=0 ip=0x7fb731dcebe9 code=0x7ffc0000 [ 130.039768][ T37] audit: type=1326 audit(1755987841.539:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6512 comm="syz.3.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb731dcebe9 code=0x7ffc0000 [ 130.039805][ T37] audit: type=1326 audit(1755987841.539:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6512 comm="syz.3.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb731dcebe9 code=0x7ffc0000 [ 130.653113][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 130.809006][ T10] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 130.809035][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.837863][ T10] usb 2-1: config 0 descriptor?? [ 130.861802][ T10] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 131.277320][ T10] gspca_cpia1: usb_control_msg 03, error -71 [ 131.280388][ T10] gspca_cpia1: usb_control_msg 01, error -71 [ 131.280405][ T10] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 131.315782][ T10] usb 2-1: USB disconnect, device number 4 [ 134.047505][ T6598] syz.4.285 (6598): drop_caches: 2 [ 134.080993][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.081091][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.014550][ T37] audit: type=1326 audit(1755987846.499:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6620 comm="syz.2.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58d53aebe9 code=0x7ffc0000 [ 135.014585][ T37] audit: type=1326 audit(1755987846.519:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6620 comm="syz.2.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58d53aebe9 code=0x7ffc0000 [ 135.059446][ T37] audit: type=1326 audit(1755987846.569:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6620 comm="syz.2.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=315 compat=0 ip=0x7f58d53aebe9 code=0x7ffc0000 [ 135.059505][ T37] audit: type=1326 audit(1755987846.569:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6620 comm="syz.2.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58d53aebe9 code=0x7ffc0000 [ 135.059544][ T37] audit: type=1326 audit(1755987846.569:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6620 comm="syz.2.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58d53aebe9 code=0x7ffc0000 [ 135.529089][ T6636] comedi comedi0: mpc624: I/O port conflict (0xee,16) [ 137.319217][ T6694] trusted_key: encrypted_key: insufficient parameters specified [ 137.453263][ T990] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 137.603102][ T990] usb 4-1: Using ep0 maxpacket: 32 [ 137.603943][ T990] usb 4-1: too many configurations: 17, using maximum allowed: 8 [ 137.610204][ T990] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 137.610228][ T990] usb 4-1: config 0 has no interface number 0 [ 137.610274][ T990] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 137.610294][ T990] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 137.611716][ T990] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 137.611738][ T990] usb 4-1: config 0 has no interface number 0 [ 137.611784][ T990] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 137.611805][ T990] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 137.620826][ T990] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 137.620851][ T990] usb 4-1: config 0 has no interface number 0 [ 137.620897][ T990] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 137.620918][ T990] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 137.626401][ T990] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 137.626426][ T990] usb 4-1: config 0 has no interface number 0 [ 137.626473][ T990] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 137.626494][ T990] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 137.628981][ T990] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 137.629002][ T990] usb 4-1: config 0 has no interface number 0 [ 137.629049][ T990] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 137.629069][ T990] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 137.632404][ T990] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 137.632426][ T990] usb 4-1: config 0 has no interface number 0 [ 137.632470][ T990] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 137.632491][ T990] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 137.649315][ T990] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 137.649341][ T990] usb 4-1: config 0 has no interface number 0 [ 137.649388][ T990] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 137.649408][ T990] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 137.658654][ T990] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 137.658678][ T990] usb 4-1: config 0 has no interface number 0 [ 137.658726][ T990] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 137.658746][ T990] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 137.677347][ T990] usb 4-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 137.677375][ T990] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.677394][ T990] usb 4-1: Product: syz [ 137.677406][ T990] usb 4-1: Manufacturer: syz [ 137.677419][ T990] usb 4-1: SerialNumber: syz [ 137.714649][ T6704] netlink: 8 bytes leftover after parsing attributes in process `syz.1.335'. [ 137.755475][ T990] usb 4-1: config 0 descriptor?? [ 137.768450][ T990] etas_es58x 4-1:0.2: Starting syz syz (Serial Number syz) [ 138.150038][ T990] etas_es58x 4-1:0.2: could not parse product info: '424242424242' [ 138.379635][ T990] usb 4-1: USB disconnect, device number 2 [ 138.390900][ T990] etas_es58x 4-1:0.2: Disconnecting syz syz [ 140.749742][ T6807] block nbd0: Attempted send on invalid socket [ 140.749829][ T6807] I/O error, dev nbd0, sector 128 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 140.749914][ T6807] gfs2: error -5 reading superblock [ 141.553545][ T6833] netlink: 348 bytes leftover after parsing attributes in process `syz.4.391'. [ 141.553599][ T6833] netlink: 16 bytes leftover after parsing attributes in process `syz.4.391'. [ 141.833093][ T6843] kAFS: unable to lookup cell '(/c¾ûL' [ 142.330954][ T6865] netlink: 8 bytes leftover after parsing attributes in process `syz.3.404'. [ 142.904214][ T6884] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 143.075064][ T6893] capability: warning: `syz.1.414' uses deprecated v2 capabilities in a way that may be insecure [ 143.541921][ T6909] netlink: 'syz.3.422': attribute type 16 has an invalid length. [ 143.541943][ T6909] netlink: 'syz.3.422': attribute type 17 has an invalid length. [ 143.541956][ T6909] netlink: 'syz.3.422': attribute type 27 has an invalid length. [ 145.187792][ T6964] veth3: entered promiscuous mode [ 145.982667][ T6995] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 146.422697][ T7007] netlink: 8 bytes leftover after parsing attributes in process `syz.3.470'. [ 146.722306][ C1] vkms_vblank_simulate: vblank timer overrun [ 147.538479][ T7015] netlink: 16 bytes leftover after parsing attributes in process `syz.4.471'. [ 148.633902][ C1] vkms_vblank_simulate: vblank timer overrun [ 148.670841][ T7028] netlink: 'syz.4.475': attribute type 10 has an invalid length. [ 148.670863][ T7028] netlink: 40 bytes leftover after parsing attributes in process `syz.4.475'. [ 149.026574][ C1] vkms_vblank_simulate: vblank timer overrun [ 149.202939][ T7041] vxfs: WRONG superblock magic 00000000 at 1 [ 149.209843][ T7041] vxfs: WRONG superblock magic 00000000 at 8 [ 149.209888][ T7041] vxfs: can't find superblock. [ 149.299163][ C1] vkms_vblank_simulate: vblank timer overrun [ 149.442430][ C1] vkms_vblank_simulate: vblank timer overrun [ 149.512941][ T7028] team0: Port device geneve0 added [ 149.514519][ T7043] netlink: 8 bytes leftover after parsing attributes in process `syz.3.479'. [ 149.580892][ T990] libceph: connect (1)[c::]:6789 error -101 [ 149.590767][ T990] libceph: mon0 (1)[c::]:6789 connect error [ 149.665139][ T7043] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 149.741678][ T7049] netlink: 24 bytes leftover after parsing attributes in process `syz.0.483'. [ 149.741778][ T7049] netlink: 24 bytes leftover after parsing attributes in process `syz.0.483'. [ 149.741801][ T7049] netlink: 32 bytes leftover after parsing attributes in process `syz.0.483'. [ 149.750637][ T3117] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 149.845543][ T990] libceph: connect (1)[c::]:6789 error -101 [ 149.845751][ T990] libceph: mon0 (1)[c::]:6789 connect error [ 149.913704][ T3117] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 149.913727][ T3117] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 149.913745][ T3117] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 149.922786][ T3117] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 149.922852][ T3117] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.923083][ T3117] usb 2-1: Product: syz [ 149.923098][ T3117] usb 2-1: Manufacturer: syz [ 149.923111][ T3117] usb 2-1: SerialNumber: syz [ 150.353415][ T990] libceph: connect (1)[c::]:6789 error -101 [ 150.353622][ T990] libceph: mon0 (1)[c::]:6789 connect error [ 150.748186][ T7080] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.498'. [ 151.409943][ T7039] ceph: No mds server is up or the cluster is laggy [ 151.487160][ T5837] Bluetooth: hci4: link tx timeout [ 151.489285][ T5837] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 151.776552][ C1] vkms_vblank_simulate: vblank timer overrun [ 151.824190][ T3117] usb 2-1: USB disconnect, device number 5 [ 152.133608][ C1] vkms_vblank_simulate: vblank timer overrun [ 152.154713][ C1] vkms_vblank_simulate: vblank timer overrun [ 152.184983][ T7081] netlink: 'syz.2.493': attribute type 1 has an invalid length. [ 152.185110][ T7081] netlink: 224 bytes leftover after parsing attributes in process `syz.2.493'. [ 152.858374][ T7106] openvswitch: netlink: Message has 20 unknown bytes. [ 152.858411][ T7106] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 153.425904][ T7125] netlink: 'syz.3.515': attribute type 4 has an invalid length. [ 153.533058][ T5837] Bluetooth: hci4: command 0x0406 tx timeout [ 157.864563][ T7152] genirq: Flags mismatch irq 1. 00202000 (dt2814) vs. 00202080 (i8042) [ 158.551675][ T7174] tipc: Started in network mode [ 158.551704][ T7174] tipc: Node identity fa169b3d4f15, cluster identity 4711 [ 158.552490][ T7174] tipc: Enabled bearer , priority 0 [ 158.558767][ T7171] syzkaller0: entered promiscuous mode [ 158.558793][ T7171] syzkaller0: entered allmulticast mode [ 158.721866][ T7171] netlink: 'syz.4.536': attribute type 1 has an invalid length. [ 158.721887][ T7171] netlink: 224 bytes leftover after parsing attributes in process `syz.4.536'. [ 159.005430][ T7168] tipc: Resetting bearer [ 159.202627][ T7168] tipc: Disabling bearer [ 159.376413][ T7188] warning: `syz.3.542' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 160.126523][ T7222] netlink: 129704 bytes leftover after parsing attributes in process `syz.0.559'. [ 161.395964][ T7238] netlink: 4452 bytes leftover after parsing attributes in process `syz.0.566'. [ 161.704688][ T7251] netlink: 16 bytes leftover after parsing attributes in process `syz.4.572'. [ 161.829918][ T7254] random: crng reseeded on system resumption [ 163.787965][ T990] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 163.814033][ T7300] capability: warning: `syz.3.595' uses 32-bit capabilities (legacy support in use) [ 163.872100][ T7302] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 163.934775][ T990] usb 5-1: Using ep0 maxpacket: 8 [ 163.937244][ T990] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.940371][ T990] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 163.940398][ T990] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.940417][ T990] usb 5-1: Product: syz [ 163.940431][ T990] usb 5-1: Manufacturer: syz [ 163.940445][ T990] usb 5-1: SerialNumber: syz [ 163.988212][ T990] usb 5-1: bad CDC descriptors [ 164.191296][ T6041] usb 5-1: USB disconnect, device number 3 [ 165.583887][ T7363] netlink: 260 bytes leftover after parsing attributes in process `syz.2.622'. [ 165.809339][ T7372] netlink: 24 bytes leftover after parsing attributes in process `syz.4.628'. [ 166.368963][ T7386] pimreg: entered allmulticast mode [ 167.591319][ T7433] netlink: 60 bytes leftover after parsing attributes in process `syz.1.652'. [ 167.592396][ T7433] netlink: 60 bytes leftover after parsing attributes in process `syz.1.652'. [ 167.924746][ T7447] netlink: 60 bytes leftover after parsing attributes in process `syz.1.656'. [ 167.925232][ T7442] netlink: 60 bytes leftover after parsing attributes in process `syz.1.656'. [ 168.437253][ T7463] netlink: 272 bytes leftover after parsing attributes in process `syz.1.664'. [ 168.863108][ T6063] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 168.993219][ T37] audit: type=1400 audit(1755987880.499:17): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=7479 comm="syz.1.672" src=1 dest=20000 netif=wpan0 [ 168.996742][ T5850] Bluetooth: hci4: unexpected event for opcode 0x1002 [ 169.018335][ T6063] usb 3-1: Using ep0 maxpacket: 16 [ 169.024126][ T6063] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 169.024150][ T6063] usb 3-1: config 0 has no interface number 0 [ 169.024196][ T6063] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 169.024220][ T6063] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 169.033404][ T6063] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 169.033431][ T6063] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 169.033449][ T6063] usb 3-1: Product: syz [ 169.033462][ T6063] usb 3-1: SerialNumber: syz [ 169.312588][ C1] vkms_vblank_simulate: vblank timer overrun [ 169.324946][ T6063] usb 3-1: config 0 descriptor?? [ 169.347806][ T6063] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 169.352562][ T6063] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input5 [ 169.405330][ C1] vkms_vblank_simulate: vblank timer overrun [ 169.531245][ C1] vkms_vblank_simulate: vblank timer overrun [ 169.560843][ C1] vkms_vblank_simulate: vblank timer overrun [ 169.661586][ C1] vkms_vblank_simulate: vblank timer overrun [ 169.929952][ C1] vkms_vblank_simulate: vblank timer overrun [ 170.379204][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 170.384088][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 170.384723][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 170.384954][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 170.385224][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 170.385456][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 170.385698][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 170.385931][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 170.386174][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 170.386412][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 170.464417][ T5916] usb 3-1: USB disconnect, device number 3 [ 170.464437][ C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 170.589640][ T5916] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 170.858671][ T7484] mmap: syz.4.674 (7484) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 171.746330][ C1] vkms_vblank_simulate: vblank timer overrun [ 171.964031][ C1] vkms_vblank_simulate: vblank timer overrun [ 172.176365][ C1] vkms_vblank_simulate: vblank timer overrun [ 172.593483][ T5850] Bluetooth: hci0: unexpected event 0x01 length: 4 > 1 [ 173.208112][ T5850] Bluetooth: hci4: unexpected event for opcode 0x1002 [ 173.566442][ C1] vkms_vblank_simulate: vblank timer overrun [ 173.802334][ C1] vkms_vblank_simulate: vblank timer overrun [ 173.860002][ C1] vkms_vblank_simulate: vblank timer overrun [ 174.175757][ C1] vkms_vblank_simulate: vblank timer overrun [ 174.703093][ T5923] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 174.818672][ T7574] syz.2.712 uses obsolete (PF_INET,SOCK_PACKET) [ 174.860242][ T5923] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 174.860269][ T5923] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 174.860287][ T5923] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 174.860335][ T5923] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 174.860359][ T5923] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 174.867058][ T5923] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 174.867085][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 174.867103][ T5923] usb 4-1: Product: syz [ 174.867117][ T5923] usb 4-1: Manufacturer: syz [ 174.911837][ T5923] cdc_wdm 4-1:1.0: skipping garbage [ 174.911856][ T5923] cdc_wdm 4-1:1.0: skipping garbage [ 174.945908][ T7580] tmpfs: Unsupported parameter 'huge' [ 174.969429][ T5923] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 174.969463][ T5923] cdc_wdm 4-1:1.0: Unknown control protocol [ 175.151010][ T6612] usb 4-1: USB disconnect, device number 3 [ 175.779588][ C1] vkms_vblank_simulate: vblank timer overrun [ 175.908652][ C1] vkms_vblank_simulate: vblank timer overrun [ 176.214145][ C1] vkms_vblank_simulate: vblank timer overrun [ 177.409642][ T37] audit: type=1400 audit(1755987888.919:18): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=7628 comm="syz.3.736" saddr=0.0.0.224 src=20000 daddr=224.0.0.1 dest=20000 netif=wpan0 [ 177.801872][ T6612] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 177.801911][ T6612] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 177.801936][ T6612] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 177.801962][ T6612] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 177.801985][ T6612] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 177.802010][ T6612] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 177.802033][ T6612] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 177.802058][ T6612] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 177.802082][ T6612] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 177.802107][ T6612] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 177.906507][ T6612] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 178.057887][ T7644] netlink: 28 bytes leftover after parsing attributes in process `syz.2.743'. [ 178.249604][ T7652] use of bytesused == 0 is deprecated and will be removed in the future, [ 178.249619][ T7652] use the actual size instead. [ 178.309433][ T7643] fido_id[7643]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 178.545791][ T7658] dummy0: entered promiscuous mode [ 178.581755][ T7658] dummy0: left promiscuous mode [ 179.948502][ T5850] Bluetooth: hci4: unexpected event for opcode 0x1002 [ 179.953072][ T990] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 180.105464][ T990] usb 3-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 180.105497][ T990] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 180.105523][ T990] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 180.105565][ T990] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 180.105587][ T990] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.167485][ T7696] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 180.427296][ C1] vkms_vblank_simulate: vblank timer overrun [ 180.558882][ C1] vkms_vblank_simulate: vblank timer overrun [ 180.905900][ C1] vkms_vblank_simulate: vblank timer overrun [ 181.340843][ T7717] netlink: 16 bytes leftover after parsing attributes in process `syz.1.773'. [ 181.565235][ T7726] netlink: 8 bytes leftover after parsing attributes in process `syz.3.777'. [ 181.633521][ T990] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 181.711478][ T990] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input6 [ 181.796014][ T5873] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 181.927425][ T7730] syz_tun: entered allmulticast mode [ 182.649439][ T7723] syz_tun: left allmulticast mode [ 182.913325][ T5873] usb 2-1: Using ep0 maxpacket: 16 [ 183.015039][ T5873] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 183.016205][ T5873] usb 2-1: config 0 has no interface number 0 [ 183.019040][ T5873] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 183.019416][ T5873] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 49152, setting to 1024 [ 184.452556][ T5873] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 184.452702][ T5873] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 184.452722][ T5873] usb 2-1: Product: syz [ 184.452736][ T5873] usb 2-1: SerialNumber: syz [ 193.723191][ T37] audit: type=1326 audit(1755987905.229:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7739 comm="syz.2.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58d53aebe9 code=0x7ffc0000 [ 193.723241][ T37] audit: type=1326 audit(1755987905.239:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7739 comm="syz.2.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58d53aebe9 code=0x7ffc0000 [ 193.729945][ T37] audit: type=1326 audit(1755987905.239:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7739 comm="syz.2.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f58d53aebe9 code=0x7ffc0000 [ 193.758424][ T37] audit: type=1326 audit(1755987905.239:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7739 comm="syz.2.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58d53aebe9 code=0x7ffc0000 [ 193.769928][ T37] audit: type=1326 audit(1755987905.279:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7739 comm="syz.2.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58d53aebe9 code=0x7ffc0000 [ 193.787820][ T37] audit: type=1326 audit(1755987905.299:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7739 comm="syz.2.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f58d53aebe9 code=0x7ffc0000 [ 193.844954][ T37] audit: type=1326 audit(1755987905.349:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7739 comm="syz.2.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58d53aebe9 code=0x7ffc0000 [ 193.866570][ T5873] usb 2-1: config 0 descriptor?? [ 193.869884][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 193.875207][ T5873] usb 2-1: can't set config #0, error -32 [ 193.944250][ T6063] hid_parser_main: 73 callbacks suppressed [ 193.944271][ T6063] hid-generic 0000:0004:0034.0002: unknown main item tag 0x0 [ 193.946103][ T6063] hid-generic 0000:0004:0034.0002: unknown main item tag 0x0 [ 193.946133][ T6063] hid-generic 0000:0004:0034.0002: unknown main item tag 0x0 [ 194.275187][ T5873] usb 2-1: USB disconnect, device number 6 [ 194.356497][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.356907][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.487933][ T6063] hid-generic 0000:0004:0034.0002: hidraw0: HID v0.0e Device [syz0] on syz1 [ 194.676472][ T7749] netlink: 148 bytes leftover after parsing attributes in process `syz.3.784'. [ 194.676532][ T7749] netlink: 40 bytes leftover after parsing attributes in process `syz.3.784'. [ 194.802731][ T7745] fido_id[7745]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 194.921290][ T990] usb 3-1: USB disconnect, device number 4 [ 194.921390][ C1] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 195.110764][ T7754] erofs: Unknown parameter 'acl r8 ' [ 195.354998][ T7759] IPv6: Can't replace route, no match found [ 195.966714][ T7705] infiniband syz2: set active [ 196.010361][ T7705] infiniband syz2: added bond0 [ 196.029449][ T7705] syz2: rxe_create_cq: returned err = -12 [ 196.029633][ T7705] infiniband syz2: Couldn't create ib_mad CQ [ 196.029826][ T7705] infiniband syz2: Couldn't open port 1 [ 196.112728][ T7779] C: renamed from team_slave_0 (while UP) [ 196.207229][ T7779] netlink: 'syz.4.798': attribute type 4 has an invalid length. [ 196.207251][ T7779] netlink: 116 bytes leftover after parsing attributes in process `syz.4.798'. [ 196.208075][ T7779] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 196.358096][ T7705] RDS/IB: syz2: added [ 196.360669][ T7705] smc: adding ib device syz2 with port count 1 [ 196.360894][ T7705] smc: ib device syz2 port 1 has pnetid [ 196.530823][ T5837] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 196.542267][ T5837] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 196.556712][ T5837] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 196.562329][ T5837] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 196.583097][ T5837] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 197.327759][ T7816] netlink: 'syz.1.813': attribute type 25 has an invalid length. [ 197.327778][ T7816] netlink: 'syz.1.813': attribute type 3 has an invalid length. [ 197.860362][ T5850] Bluetooth: hci4: unexpected event for opcode 0x2062 [ 198.055110][ T7839] binder: 7838:7839 ioctl c00c620f 200000000140 returned -22 [ 198.652986][ T5850] Bluetooth: hci5: command tx timeout [ 198.773723][ T7854] Invalid logical block size (16384) [ 199.767756][ T7868] program syz.4.835 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 200.050984][ T7872] netlink: 'syz.3.836': attribute type 6 has an invalid length. [ 200.069104][ T7876] netlink: 'syz.3.836': attribute type 6 has an invalid length. [ 200.093998][ T7876] Zero length message leads to an empty skb [ 200.178506][ T7871] could not allocate digest TFM handle sha384-generic [ 200.323092][ T5916] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 200.474265][ T5916] usb 5-1: Using ep0 maxpacket: 8 [ 200.476572][ T5916] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 200.476627][ T5916] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 200.476654][ T5916] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 200.476679][ T5916] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 200.476704][ T5916] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 200.478021][ T5916] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 200.478073][ T5916] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 200.478099][ T5916] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 200.478123][ T5916] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 200.478148][ T5916] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 200.479441][ T5916] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 200.479494][ T5916] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 200.479520][ T5916] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 200.479543][ T5916] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 200.479566][ T5916] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 200.666226][ T5916] usb 5-1: string descriptor 0 read error: -22 [ 200.666368][ T5916] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 200.666387][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.733068][ T5850] Bluetooth: hci5: command tx timeout [ 200.913568][ T5916] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 200.915256][ T7887] netlink: 'syz.3.842': attribute type 1 has an invalid length. [ 201.071480][ T5916] usb 5-1: USB disconnect, device number 4 [ 201.427145][ T37] audit: type=1326 audit(1755987912.939:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7897 comm="syz.2.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58d53aebe9 code=0x7ffc0000 [ 201.458085][ T37] audit: type=1326 audit(1755987912.959:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7897 comm="syz.2.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f58d53aebe9 code=0x7ffc0000 [ 201.458138][ T37] audit: type=1326 audit(1755987912.959:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7897 comm="syz.2.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58d53aebe9 code=0x7ffc0000 [ 201.458178][ T37] audit: type=1326 audit(1755987912.959:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7897 comm="syz.2.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58d53aebe9 code=0x7ffc0000 [ 201.458217][ T37] audit: type=1326 audit(1755987912.959:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7897 comm="syz.2.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f58d53aebe9 code=0x7ffc0000 [ 201.458259][ T37] audit: type=1326 audit(1755987912.959:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7897 comm="syz.2.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58d53aebe9 code=0x7ffc0000 [ 201.458297][ T37] audit: type=1326 audit(1755987912.959:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7897 comm="syz.2.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f58d53a5ba7 code=0x7ffc0000 [ 201.458336][ T37] audit: type=1326 audit(1755987912.959:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7897 comm="syz.2.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f58d534ade9 code=0x7ffc0000 [ 201.458374][ T37] audit: type=1326 audit(1755987912.959:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7897 comm="syz.2.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f58d53a5ba7 code=0x7ffc0000 [ 201.458412][ T37] audit: type=1326 audit(1755987912.959:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7897 comm="syz.2.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f58d534ade9 code=0x7ffc0000 [ 201.935875][ T5850] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 201.935975][ T5850] Bluetooth: hci4: Injecting HCI hardware error event [ 201.937778][ T5837] Bluetooth: hci4: hardware error 0x00 [ 202.318571][ T7792] chnl_net:caif_netlink_parms(): no params data found [ 202.813043][ T5850] Bluetooth: hci5: command tx timeout [ 202.832979][ T5873] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 202.999304][ T5873] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 202.999333][ T5873] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 202.999356][ T5873] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 203.041246][ T5873] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 203.041278][ T5873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 203.041298][ T5873] usb 4-1: Product: syz [ 203.041312][ T5873] usb 4-1: Manufacturer: syz [ 203.041326][ T5873] usb 4-1: SerialNumber: syz [ 203.537497][ T5873] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 203.707652][ T7792] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.707892][ T7792] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.708095][ T7792] bridge_slave_0: entered allmulticast mode [ 203.747767][ T7792] bridge_slave_0: entered promiscuous mode [ 203.760752][ T7792] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.760917][ T7792] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.761104][ T7792] bridge_slave_1: entered allmulticast mode [ 203.806919][ T990] usb 4-1: USB disconnect, device number 4 [ 203.807068][ T7792] bridge_slave_1: entered promiscuous mode [ 203.859182][ T990] usblp0: removed [ 204.254024][ T5837] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 204.261906][ T7792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.636996][ T7792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.893087][ T7942] Bluetooth: hci5: command tx timeout [ 205.533182][ T990] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 205.646309][ T7792] team0: Port device team_slave_0 added [ 205.650816][ T7792] team0: Port device team_slave_1 added [ 205.723289][ T990] usb 4-1: Using ep0 maxpacket: 8 [ 205.732341][ T990] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 205.732371][ T990] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 205.732394][ T990] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 205.732414][ T990] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 205.732448][ T990] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 205.732466][ T990] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.149162][ T990] usb 4-1: GET_CAPABILITIES returned 0 [ 206.149211][ T990] usbtmc 4-1:16.0: can't read capabilities [ 206.373840][ T990] usb 4-1: USB disconnect, device number 5 [ 206.577069][ T7792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.577085][ T7792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.577109][ T7792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.582006][ T7792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.582019][ T7792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.582036][ T7792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.659734][ T7942] Bluetooth: hci0: command 0x0406 tx timeout [ 206.659770][ T7942] Bluetooth: hci1: command 0x0406 tx timeout [ 206.659791][ T7942] Bluetooth: hci2: command 0x0406 tx timeout [ 206.660079][ T7942] Bluetooth: hci3: command 0x0406 tx timeout [ 207.286457][ T7792] hsr_slave_0: entered promiscuous mode [ 207.300540][ T7792] hsr_slave_1: entered promiscuous mode [ 207.303028][ T7792] debugfs: 'hsr0' already exists in 'hsr' [ 207.303052][ T7792] Cannot create hsr debugfs directory [ 208.398328][ T990] hid-generic 0000:0004:0034.0003: unknown main item tag 0x0 [ 208.398433][ T990] hid-generic 0000:0004:0034.0003: unknown main item tag 0x0 [ 208.398669][ T990] hid-generic 0000:0004:0034.0003: unknown main item tag 0x0 [ 209.060514][ T990] hid-generic 0000:0004:0034.0003: hidraw0: HID v0.0e Device [syz0] on syz1 [ 209.587678][ T7989] fido_id[7989]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 209.931968][ T7993] netlink: 136 bytes leftover after parsing attributes in process `syz.4.886'. [ 209.931990][ T7993] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 209.968261][ T7997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.888'. [ 210.952994][ T990] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 211.015885][ T5873] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 211.103076][ T990] usb 3-1: Using ep0 maxpacket: 8 [ 211.107474][ T990] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 211.107500][ T990] usb 3-1: config 0 has no interface number 0 [ 211.107546][ T990] usb 3-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 211.107568][ T990] usb 3-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 211.107590][ T990] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 211.107613][ T990] usb 3-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 211.111427][ T990] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 211.111453][ T990] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.111472][ T990] usb 3-1: Product: syz [ 211.111486][ T990] usb 3-1: Manufacturer: syz [ 211.111499][ T990] usb 3-1: SerialNumber: syz [ 211.163035][ T5873] usb 4-1: Using ep0 maxpacket: 8 [ 211.232630][ T5873] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 211.232665][ T5873] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 211.232689][ T5873] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 211.232711][ T5873] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 211.232753][ T5873] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 211.232775][ T5873] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.284298][ T990] usb 3-1: config 0 descriptor?? [ 211.368509][ T7792] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 211.592640][ T5873] usb 4-1: GET_CAPABILITIES returned 0 [ 211.592687][ T5873] usbtmc 4-1:16.0: can't read capabilities [ 211.635586][ T990] iowarrior 3-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 211.657403][ T7792] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 211.822290][ T5916] usb 3-1: USB disconnect, device number 5 [ 211.826455][ T8013] iowarrior 3-1:0.186: Error -19 while submitting URB [ 211.834073][ T990] usb 4-1: USB disconnect, device number 6 [ 212.030348][ T7792] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 212.108461][ T7792] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 212.408745][ T8029] hfsplus: unable to find HFS+ superblock [ 212.795468][ T7595] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.201212][ T7595] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.052359][ T7595] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.967122][ T7595] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.087841][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 215.092729][ T8097] netlink: 16 bytes leftover after parsing attributes in process `syz.4.922'. [ 215.092751][ T8097] netlink: 52 bytes leftover after parsing attributes in process `syz.4.922'. [ 215.097205][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 215.099909][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 215.116261][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 215.125759][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 215.565748][ T8097] netlink: 16 bytes leftover after parsing attributes in process `syz.4.922'. [ 216.130483][ T8118] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 216.165263][ T8118] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.168579][ T8118] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.475877][ T7792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.494127][ T7595] bridge_slave_1: left allmulticast mode [ 216.494527][ T7595] bridge_slave_1: left promiscuous mode [ 216.496828][ T7595] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.786484][ T7595] bridge_slave_0: left allmulticast mode [ 216.786516][ T7595] bridge_slave_0: left promiscuous mode [ 216.786840][ T7595] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.212988][ T59] Bluetooth: hci0: command tx timeout [ 218.183069][ T10] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 218.346108][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 218.346864][ T10] usb 3-1: not running at top speed; connect to a high speed hub [ 218.348701][ T10] usb 3-1: config 5 has an invalid interface number: 246 but max is 0 [ 218.348725][ T10] usb 3-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 218.348744][ T10] usb 3-1: config 5 has no interface number 0 [ 218.348796][ T10] usb 3-1: config 5 interface 246 altsetting 4 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 218.348822][ T10] usb 3-1: config 5 interface 246 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 218.348847][ T10] usb 3-1: config 5 interface 246 has no altsetting 0 [ 218.424263][ T10] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 218.424292][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.424311][ T10] usb 3-1: Product: syz [ 218.424325][ T10] usb 3-1: Manufacturer: syz [ 218.424337][ T10] usb 3-1: SerialNumber: syz [ 218.580841][ T8161] netlink: 4 bytes leftover after parsing attributes in process `syz.3.939'. [ 218.825642][ T10] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 218.856103][ T1129] usb 3-1: Failed to submit usb control message: -71 [ 218.856139][ T1129] usb 3-1: unable to send the bmi data to the device: -71 [ 218.856156][ T1129] usb 3-1: unable to get target info from device [ 218.856181][ T1129] usb 3-1: could not get target info (-71) [ 218.859504][ T1129] usb 3-1: could not probe fw (-71) [ 218.903031][ T10] usb 3-1: USB disconnect, device number 6 [ 219.089349][ T8172] netlink: 176 bytes leftover after parsing attributes in process `syz.4.941'. [ 219.293144][ T59] Bluetooth: hci0: command tx timeout [ 220.229468][ T1129] smc: removing ib device syz2 [ 220.259800][ T7595] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.334043][ T7595] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 220.359126][ T7595] bond0 (unregistering): Released all slaves [ 220.873229][ T3117] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 220.996569][ T8192] netlink: 'syz.4.950': attribute type 10 has an invalid length. [ 221.022820][ T7792] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.023053][ T3117] usb 3-1: Using ep0 maxpacket: 8 [ 221.025472][ T3117] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 221.025515][ T3117] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 221.025536][ T3117] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.081725][ T8192] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.117108][ T8192] bond0: (slave team0): Enslaving as an active interface with an up link [ 221.162048][ T3117] usb 3-1: config 0 descriptor?? [ 221.162968][ T6063] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 221.314007][ T6063] usb 4-1: Using ep0 maxpacket: 8 [ 221.316558][ T6063] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 221.316587][ T6063] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 221.316609][ T6063] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 221.316630][ T6063] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 221.316670][ T6063] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 221.316690][ T6063] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.373055][ T5837] Bluetooth: hci0: command tx timeout [ 221.463631][ T1105] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.464465][ T1105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.502108][ T3117] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 221.609521][ T6063] usb 4-1: GET_CAPABILITIES returned 0 [ 221.609569][ T6063] usbtmc 4-1:16.0: can't read capabilities [ 221.690583][ T5916] usb 3-1: USB disconnect, device number 7 [ 221.698792][ T1105] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.698920][ T1105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.815677][ T8190] iowarrior 3-1:0.0: Error -19 while submitting URB [ 221.824901][ T6063] usb 4-1: USB disconnect, device number 7 [ 222.087135][ T8205] netlink: 'syz.4.954': attribute type 4 has an invalid length. [ 222.833607][ T6063] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 222.995364][ T6063] usb 4-1: Using ep0 maxpacket: 8 [ 223.001993][ T6063] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 223.002059][ T6063] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 223.002086][ T6063] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 223.002108][ T6063] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 223.002131][ T6063] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 223.002154][ T6063] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 223.002194][ T6063] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 223.002216][ T6063] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.229321][ T8226] could not allocate digest TFM handle crc32c-generic [ 223.238140][ T8223] netlink: 1010 bytes leftover after parsing attributes in process `syz.4.960'. [ 223.238188][ T8223] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 223.452995][ T5837] Bluetooth: hci0: command tx timeout [ 223.529393][ T6063] usb 4-1: GET_CAPABILITIES returned 0 [ 223.529439][ T6063] usbtmc 4-1:16.0: can't read capabilities [ 223.759373][ C1] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 223.767776][ T8217] usbtmc 4-1:16.0: Unable to send data, error -71 [ 223.864290][ T6063] usb 4-1: USB disconnect, device number 8 [ 223.870169][ T8094] chnl_net:caif_netlink_parms(): no params data found [ 224.466120][ T37] kauditd_printk_skb: 4 callbacks suppressed [ 224.466136][ T37] audit: type=1326 audit(1755987935.979:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8247 comm="syz.2.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58d53aebe9 code=0x7ffc0000 [ 224.470675][ T37] audit: type=1326 audit(1755987935.979:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8247 comm="syz.2.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58d53aebe9 code=0x7ffc0000 [ 224.470946][ T37] audit: type=1326 audit(1755987935.979:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8247 comm="syz.2.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58d53aebe9 code=0x7ffc0000 [ 224.555990][ T37] audit: type=1326 audit(1755987935.979:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8247 comm="syz.2.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58d53aebe9 code=0x7ffc0000 [ 224.556046][ T37] audit: type=1326 audit(1755987936.069:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8247 comm="syz.2.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7f58d53aebe9 code=0x7ffc0000 [ 224.556084][ T37] audit: type=1326 audit(1755987936.069:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8247 comm="syz.2.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58d53aebe9 code=0x7ffc0000 [ 224.556123][ T37] audit: type=1326 audit(1755987936.069:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8247 comm="syz.2.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58d53aebe9 code=0x7ffc0000 [ 224.558850][ T37] audit: type=1326 audit(1755987936.069:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8247 comm="syz.2.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=445 compat=0 ip=0x7f58d53aebe9 code=0x7ffc0000 [ 224.559496][ T37] audit: type=1326 audit(1755987936.069:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8247 comm="syz.2.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58d53aebe9 code=0x7ffc0000 [ 224.559539][ T37] audit: type=1326 audit(1755987936.069:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8247 comm="syz.2.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58d53aebe9 code=0x7ffc0000 [ 226.543302][ T8094] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.543453][ T8094] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.543657][ T8094] bridge_slave_0: entered allmulticast mode [ 226.645840][ T8094] bridge_slave_0: entered promiscuous mode [ 226.675500][ T8094] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.675709][ T8094] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.702338][ T8094] bridge_slave_1: entered allmulticast mode [ 226.728213][ T8292] netlink: 27 bytes leftover after parsing attributes in process `syz.3.981'. [ 226.756139][ T8094] bridge_slave_1: entered promiscuous mode [ 227.589548][ T8094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.605631][ T8304] netlink: 8 bytes leftover after parsing attributes in process `syz.2.987'. [ 227.675948][ T8094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.403618][ T8094] team0: Port device team_slave_0 added [ 228.406513][ T8308] mkiss: ax0: crc mode is auto. [ 228.638310][ T7792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.640866][ T8094] team0: Port device team_slave_1 added [ 229.793312][ C1] vkms_vblank_simulate: vblank timer overrun [ 230.087977][ C1] vkms_vblank_simulate: vblank timer overrun [ 230.533176][ C1] vkms_vblank_simulate: vblank timer overrun [ 230.613165][ C1] vkms_vblank_simulate: vblank timer overrun [ 230.655328][ T8094] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.655344][ T8094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.655368][ T8094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.740266][ T8094] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.740281][ T8094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.740305][ T8094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.323023][ T990] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 231.483100][ T990] usb 4-1: Using ep0 maxpacket: 32 [ 231.485638][ T990] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 231.485663][ T990] usb 4-1: config 0 has no interface number 0 [ 231.489638][ T990] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 231.489665][ T990] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.489684][ T990] usb 4-1: Product: syz [ 231.489697][ T990] usb 4-1: Manufacturer: syz [ 231.489711][ T990] usb 4-1: SerialNumber: syz [ 231.548984][ T990] usb 4-1: config 0 descriptor?? [ 231.566109][ T990] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 231.793580][ T990] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 231.823828][ T990] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 231.925105][ T8094] hsr_slave_0: entered promiscuous mode [ 231.926508][ T8094] hsr_slave_1: entered promiscuous mode [ 231.927388][ T8094] debugfs: 'hsr0' already exists in 'hsr' [ 231.927415][ T8094] Cannot create hsr debugfs directory [ 232.170485][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 232.171386][ T9] usb 4-1: USB disconnect, device number 9 [ 232.193684][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 232.240722][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 232.241771][ T9] quatech2 4-1:0.51: device disconnected [ 232.557995][ T5837] Bluetooth: hci3: unexpected event for opcode 0x1002 [ 232.956149][ C1] vkms_vblank_simulate: vblank timer overrun [ 233.137204][ C1] vkms_vblank_simulate: vblank timer overrun [ 233.526624][ C1] vkms_vblank_simulate: vblank timer overrun [ 233.994426][ T7595] hsr_slave_0: left promiscuous mode [ 234.043302][ T7595] hsr_slave_1: left promiscuous mode [ 234.044433][ T7595] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.044516][ T7595] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.101883][ T7595] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.101914][ T7595] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.322044][ T7595] veth1_macvtap: left promiscuous mode [ 234.322314][ T7595] veth0_macvtap: left promiscuous mode [ 234.327671][ T7595] veth1_vlan: left promiscuous mode [ 234.347126][ T7595] veth0_vlan: left promiscuous mode [ 237.637363][ T7595] team0 (unregistering): Port device team_slave_1 removed [ 237.867551][ T7595] team0 (unregistering): Port device team_slave_0 removed [ 240.289495][ T5837] Bluetooth: hci2: unexpected event for opcode 0x1002 [ 240.447323][ C1] vkms_vblank_simulate: vblank timer overrun [ 240.678692][ C1] vkms_vblank_simulate: vblank timer overrun [ 241.264969][ C1] vkms_vblank_simulate: vblank timer overrun [ 241.823007][ T8419] tipc: Enabled bearer , priority 10 [ 242.071794][ T7792] veth0_vlan: entered promiscuous mode [ 242.188504][ T7792] veth1_vlan: entered promiscuous mode [ 242.487897][ T7792] veth0_macvtap: entered promiscuous mode [ 242.511131][ T7792] veth1_macvtap: entered promiscuous mode [ 242.629877][ T5837] Bluetooth: hci2: unexpected event for opcode 0x1002 [ 242.924546][ T990] tipc: Node number set to 3036912445 [ 243.001815][ C1] vkms_vblank_simulate: vblank timer overrun [ 243.075589][ C1] vkms_vblank_simulate: vblank timer overrun [ 243.191889][ C1] vkms_vblank_simulate: vblank timer overrun [ 243.287776][ C1] vkms_vblank_simulate: vblank timer overrun [ 243.580038][ C1] vkms_vblank_simulate: vblank timer overrun [ 244.123409][ T8094] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 244.194561][ C1] vkms_vblank_simulate: vblank timer overrun [ 244.354673][ T8453] netlink: 'syz.2.1032': attribute type 4 has an invalid length. [ 244.354737][ T8453] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.1032'. [ 244.357611][ C1] vkms_vblank_simulate: vblank timer overrun [ 245.561637][ C1] vkms_vblank_simulate: vblank timer overrun [ 245.575644][ T8094] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 245.685611][ C1] vkms_vblank_simulate: vblank timer overrun [ 245.747374][ T7792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.760773][ T8094] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 245.853091][ T8094] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 246.374870][ T8469] syz.4.1037 (8469) used greatest stack depth: 18584 bytes left [ 246.420023][ T7792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.443962][ T5909] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 246.613294][ T5909] usb 3-1: Using ep0 maxpacket: 32 [ 246.620384][ T5909] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 246.620410][ T5909] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 246.620429][ T5909] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 246.620449][ T5909] usb 3-1: config 1 has no interface number 0 [ 246.620511][ T5909] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 246.620537][ T5909] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 246.620576][ T5909] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 246.620598][ T5909] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.677705][ T5909] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 246.847591][ T7595] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.946963][ T5909] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 247.103608][ T7594] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.112291][ T5909] usb 3-1: USB disconnect, device number 8 [ 247.138965][ T7594] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.146045][ T5909] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 247.156740][ T7594] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.335486][ T8490] IPVS: Scheduler module ip_vs_ not found [ 247.508421][ C1] vkms_vblank_simulate: vblank timer overrun [ 247.665987][ T8499] netlink: 'syz.4.1044': attribute type 4 has an invalid length. [ 247.666054][ T8499] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.1044'. [ 248.571450][ T7595] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.572857][ C1] vkms_vblank_simulate: vblank timer overrun [ 248.614747][ T7594] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.739149][ C1] vkms_vblank_simulate: vblank timer overrun [ 248.910548][ T8507] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 249.130402][ T7595] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.624619][ T7595] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.009304][ T8520] syzkaller1: entered promiscuous mode [ 250.009331][ T8520] syzkaller1: entered allmulticast mode [ 250.488473][ C1] vkms_vblank_simulate: vblank timer overrun [ 250.651966][ T8534] netlink: 'syz.3.1055': attribute type 4 has an invalid length. [ 250.652038][ T8534] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.1055'. [ 250.686711][ C1] vkms_vblank_simulate: vblank timer overrun [ 250.803279][ C1] vkms_vblank_simulate: vblank timer overrun [ 251.661305][ C1] vkms_vblank_simulate: vblank timer overrun [ 251.790788][ C1] vkms_vblank_simulate: vblank timer overrun [ 251.803054][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.803073][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.832559][ C1] vkms_vblank_simulate: vblank timer overrun [ 252.463562][ T7594] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.463581][ T7594] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.703956][ T7595] bridge_slave_1: left allmulticast mode [ 252.703990][ T7595] bridge_slave_1: left promiscuous mode [ 252.704263][ T7595] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.786338][ T5837] Bluetooth: hci2: unexpected event for opcode 0x1002 [ 253.078726][ T7595] bridge_slave_0: left allmulticast mode [ 253.078758][ T7595] bridge_slave_0: left promiscuous mode [ 253.081268][ T7595] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.251347][ C1] vkms_vblank_simulate: vblank timer overrun [ 253.347593][ C1] vkms_vblank_simulate: vblank timer overrun [ 253.710974][ C1] vkms_vblank_simulate: vblank timer overrun [ 254.005451][ C1] vkms_vblank_simulate: vblank timer overrun [ 255.785861][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.785972][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.497709][ T59] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 256.522370][ T59] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 256.530425][ T59] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 256.537724][ T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 256.553295][ T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 256.553969][ T7595] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 256.666267][ T7595] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 256.708605][ T7595] bond0 (unregistering): Released all slaves [ 257.014306][ T8597] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1068'. [ 257.882044][ T8094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.652973][ T5837] Bluetooth: hci1: command tx timeout [ 258.693869][ T8632] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 259.432981][ T7595] hsr_slave_0: left promiscuous mode [ 259.493106][ T7595] hsr_slave_1: left promiscuous mode [ 259.493987][ T7595] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.494014][ T7595] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.584784][ T7595] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.584814][ T7595] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.801593][ T7595] veth1_macvtap: left promiscuous mode [ 259.801663][ T7595] veth0_macvtap: left promiscuous mode [ 259.801821][ T7595] veth1_vlan: left promiscuous mode [ 259.810902][ T7595] veth0_vlan: left promiscuous mode [ 260.743321][ T5837] Bluetooth: hci1: command tx timeout [ 262.279628][ T7595] team0 (unregistering): Port device team_slave_1 removed [ 262.534687][ T7595] team0 (unregistering): Port device team_slave_0 removed [ 262.823129][ T5837] Bluetooth: hci1: command tx timeout [ 264.898046][ T5837] Bluetooth: hci1: command tx timeout [ 264.905841][ T8094] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.100445][ T7594] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.100680][ T7594] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.181859][ T7594] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.183235][ T7594] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.058166][ T8587] chnl_net:caif_netlink_parms(): no params data found [ 266.137556][ T8693] Bluetooth: MGMT ver 1.23 [ 266.137963][ T8693] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 266.924652][ T5837] Bluetooth: hci3: unexpected event for opcode 0x1002 [ 267.306758][ T8587] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.306908][ T8587] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.307248][ T8587] bridge_slave_0: entered allmulticast mode [ 267.346523][ T8587] bridge_slave_0: entered promiscuous mode [ 267.361253][ T8587] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.362260][ T8587] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.362489][ T8587] bridge_slave_1: entered allmulticast mode [ 267.394186][ T8587] bridge_slave_1: entered promiscuous mode [ 267.702007][ T8587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.752314][ T8587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.484670][ T8587] team0: Port device team_slave_0 added [ 268.747682][ T7594] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.816763][ T8587] team0: Port device team_slave_1 added [ 269.038745][ T8094] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.209807][ T5909] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 269.262950][ T5909] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 269.376305][ T6041] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 269.553489][ T6041] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 64 [ 269.553524][ T6041] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 269.553567][ T6041] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 269.553589][ T6041] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.630908][ T7594] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.724089][ T8587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 269.724104][ T8587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.724127][ T8587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.731331][ T8587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.731346][ T8587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.731369][ T8587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.795533][ T6041] usb 3-1: GET_CAPABILITIES returned 0 [ 269.795579][ T6041] usbtmc 3-1:16.0: can't read capabilities [ 270.044237][ T6041] usb 3-1: USB disconnect, device number 9 [ 270.479530][ T7594] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.924397][ T7594] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.024228][ T8587] hsr_slave_0: entered promiscuous mode [ 271.025686][ T8587] hsr_slave_1: entered promiscuous mode [ 272.258934][ T8820] Illegal XDP return value 4294967274 on prog (id 143) dev N/A, expect packet loss! [ 272.580403][ T8825] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1143'. [ 272.813388][ T5909] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 272.882719][ T8094] veth0_vlan: entered promiscuous mode [ 272.980566][ T5909] usb 4-1: unable to get BOS descriptor or descriptor too short [ 272.981404][ T5909] usb 4-1: not running at top speed; connect to a high speed hub [ 272.985601][ T5909] usb 4-1: config 187 interface 0 altsetting 8 endpoint 0x6 has an invalid bInterval 0, changing to 10 [ 272.985629][ T5909] usb 4-1: config 187 interface 0 altsetting 8 endpoint 0x6 has invalid maxpacket 576, setting to 64 [ 272.985656][ T5909] usb 4-1: config 187 interface 0 altsetting 8 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 272.985680][ T5909] usb 4-1: config 187 interface 0 has no altsetting 0 [ 273.054283][ T5909] usb 4-1: New USB device found, idVendor=0582, idProduct=0012, bcdDevice=e2.be [ 273.054312][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.054332][ T5909] usb 4-1: Product: syz [ 273.054345][ T5909] usb 4-1: Manufacturer: syz [ 273.054359][ T5909] usb 4-1: SerialNumber: syz [ 273.071920][ T8826] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 273.072540][ T8826] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 273.194580][ T7594] bridge_slave_1: left allmulticast mode [ 273.194666][ T7594] bridge_slave_1: left promiscuous mode [ 273.198376][ T7594] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.282126][ T7594] bridge_slave_0: left allmulticast mode [ 273.282227][ T7594] bridge_slave_0: left promiscuous mode [ 273.284706][ T7594] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.392654][ T5909] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 273.623411][ T5909] usb 4-1: USB disconnect, device number 10 [ 273.939112][ T8841] udevd[8841]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:187.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 274.738503][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 274.779469][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 274.780878][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 274.786827][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 274.787777][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 275.403060][ T3117] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 275.573194][ T3117] usb 4-1: Using ep0 maxpacket: 8 [ 275.583396][ T3117] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 275.583455][ T3117] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 275.583476][ T3117] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 275.583498][ T3117] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 275.583519][ T3117] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 275.583556][ T3117] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 275.583577][ T3117] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.889478][ T3117] usb 4-1: usb_control_msg returned -32 [ 275.889525][ T3117] usbtmc 4-1:16.0: can't read capabilities [ 276.193946][ T7594] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 276.254762][ T7594] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 276.300441][ T7594] bond0 (unregistering): Released all slaves [ 276.450523][ T6612] usb 4-1: USB disconnect, device number 11 [ 276.983127][ T5837] Bluetooth: hci5: command tx timeout [ 277.046426][ T8874] input: syz0 as /devices/virtual/input/input7 [ 277.390216][ T8881] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1164'. [ 277.783566][ T8881] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1164'. [ 277.963766][ T6612] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 278.125561][ T6612] usb 4-1: config 0 has no interfaces? [ 278.125597][ T6612] usb 4-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 278.125619][ T6612] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.130102][ T6612] usb 4-1: config 0 descriptor?? [ 278.169708][ T8897] netlink: 348 bytes leftover after parsing attributes in process `syz.2.1169'. [ 278.347481][ T8883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.348196][ T8883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.353755][ T6612] usb 4-1: USB disconnect, device number 12 [ 278.767113][ T7594] hsr_slave_0: left promiscuous mode [ 278.803195][ T7594] hsr_slave_1: left promiscuous mode [ 278.805726][ T7594] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.805753][ T7594] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.832987][ T6612] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 278.876628][ T7594] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.876669][ T7594] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.983900][ T6612] usb 4-1: Using ep0 maxpacket: 8 [ 278.988136][ T7594] veth1_macvtap: left promiscuous mode [ 278.988253][ T7594] veth0_macvtap: left promiscuous mode [ 278.991708][ T7594] veth1_vlan: left promiscuous mode [ 278.992201][ T7594] veth0_vlan: left promiscuous mode [ 278.992400][ T6612] usb 4-1: config index 0 descriptor too short (expected 72, got 36) [ 278.992460][ T6612] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 279.043858][ T6612] usb 4-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice= 1.08 [ 279.043886][ T6612] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.043905][ T6612] usb 4-1: Product: syz [ 279.043919][ T6612] usb 4-1: Manufacturer: syz [ 279.043932][ T6612] usb 4-1: SerialNumber: syz [ 279.053042][ T5837] Bluetooth: hci5: command tx timeout [ 279.827357][ T8905] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 281.133015][ T5837] Bluetooth: hci5: command tx timeout [ 281.544716][ T7594] team0 (unregistering): Port device team_slave_1 removed [ 281.764927][ T7594] team0 (unregistering): Port device team_slave_0 removed [ 283.213044][ T5837] Bluetooth: hci5: command tx timeout [ 284.464453][ T8912] syzkaller1: entered promiscuous mode [ 284.464496][ T8912] syzkaller1: entered allmulticast mode [ 284.976016][ T6612] usb 4-1: USB disconnect, device number 13 [ 285.220647][ T8920] syzkaller1: entered promiscuous mode [ 285.220676][ T8920] syzkaller1: entered allmulticast mode [ 286.324856][ T8949] input: syz1 as /devices/virtual/input/input8 [ 286.700844][ T8587] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 286.776089][ T8587] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 287.036303][ T8587] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 287.220846][ T8587] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 287.813048][ T6041] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 287.963808][ T6041] usb 3-1: Using ep0 maxpacket: 8 [ 287.969914][ T6041] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 287.969940][ T6041] usb 3-1: config 0 has no interface number 0 [ 287.969988][ T6041] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 287.970008][ T6041] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 287.970032][ T6041] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 287.970057][ T6041] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 287.970106][ T6041] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 287.970129][ T6041] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.060093][ T6041] usb 3-1: config 0 descriptor?? [ 288.083312][ T6041] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 288.292617][ T8856] chnl_net:caif_netlink_parms(): no params data found [ 288.518307][ T5909] usb 3-1: USB disconnect, device number 10 [ 288.518584][ C0] ldusb 3-1:0.55: usb_submit_urb failed (-19) [ 288.555877][ T5909] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 288.987986][ T9003] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 289.199498][ T9005] loop8: detected capacity change from 0 to 8 [ 289.310340][ T9005] Dev loop8: unable to read RDB block 8 [ 289.310396][ T9005] loop8: unable to read partition table [ 289.310635][ T9005] loop8: partition table beyond EOD, truncated [ 289.310689][ T9005] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 290.383055][ T6041] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 290.547374][ T6041] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 290.547406][ T6041] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 290.547447][ T6041] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 290.547470][ T6041] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.650464][ T8856] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.650822][ T8856] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.651053][ T8856] bridge_slave_0: entered allmulticast mode [ 290.663812][ T8856] bridge_slave_0: entered promiscuous mode [ 290.689833][ T8856] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.691211][ T8856] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.691436][ T8856] bridge_slave_1: entered allmulticast mode [ 290.708679][ T8856] bridge_slave_1: entered promiscuous mode [ 290.816718][ T6041] usb 4-1: usb_control_msg returned -32 [ 290.816766][ T6041] usbtmc 4-1:16.0: can't read capabilities [ 291.232269][ T8856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.354173][ T8856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.404531][ T10] usb 4-1: USB disconnect, device number 14 [ 291.869803][ T8856] team0: Port device team_slave_0 added [ 291.893908][ T8856] team0: Port device team_slave_1 added [ 292.226427][ T7594] bridge_slave_1: left allmulticast mode [ 292.226459][ T7594] bridge_slave_1: left promiscuous mode [ 292.228775][ T7594] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.253203][ T5909] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 292.321753][ T7594] bridge_slave_0: left allmulticast mode [ 292.321785][ T7594] bridge_slave_0: left promiscuous mode [ 292.322045][ T7594] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.415532][ T5909] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 292.415566][ T5909] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 292.415604][ T5909] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 292.415626][ T5909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.470049][ T9053] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 292.504952][ T5909] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 292.758191][ T5909] usb 4-1: USB disconnect, device number 15 [ 294.228178][ T6041] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 294.383045][ T6041] usb 3-1: Using ep0 maxpacket: 8 [ 294.385650][ T6041] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 294.385681][ T6041] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 294.385705][ T6041] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 294.385728][ T6041] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 294.385768][ T6041] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 294.385789][ T6041] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.692735][ T6041] usb 3-1: GET_CAPABILITIES returned 0 [ 294.692763][ T6041] usbtmc 3-1:16.0: can't read capabilities [ 294.876589][ T7594] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 294.905254][ T10] usb 3-1: USB disconnect, device number 11 [ 294.954134][ T7594] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 295.002216][ T7594] bond0 (unregistering): Released all slaves [ 295.044138][ T8856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 295.044149][ T8856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.044170][ T8856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 295.192062][ T8856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 295.192077][ T8856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.192101][ T8856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 295.720275][ T7594] hsr_slave_0: left promiscuous mode [ 295.753165][ T7594] hsr_slave_1: left promiscuous mode [ 295.761370][ T7594] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 295.803829][ T7594] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 295.960902][ T7594] veth0_vlan: left promiscuous mode [ 298.438769][ T7594] team0 (unregistering): Port device team_slave_1 removed [ 298.660932][ T7594] team0 (unregistering): Port device team_slave_0 removed [ 301.811411][ T8856] hsr_slave_0: entered promiscuous mode [ 301.822053][ T8856] hsr_slave_1: entered promiscuous mode [ 301.829606][ T8856] debugfs: 'hsr0' already exists in 'hsr' [ 301.829650][ T8856] Cannot create hsr debugfs directory [ 302.300417][ T8587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.683046][ C1] vkms_vblank_simulate: vblank timer overrun [ 303.406857][ T9174] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1252'. [ 303.645037][ T8587] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.874203][ T1129] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.874381][ T1129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.947702][ T9182] sctp: [Deprecated]: syz.4.1255 (pid 9182) Use of int in max_burst socket option deprecated. [ 303.947702][ T9182] Use struct sctp_assoc_value instead [ 304.033208][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.033341][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.858112][ T9203] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 305.983019][ T8856] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 306.043102][ T8856] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 306.104846][ T8856] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 306.156449][ T8587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.166386][ T8856] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 306.780628][ T8856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.894731][ T8856] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.913042][ T7594] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.913279][ T7594] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.967233][ T7084] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.967373][ T7084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.303093][ T59] Bluetooth: hci0: command 0x1003 tx timeout [ 307.303388][ T5837] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 307.385225][ T8587] veth0_vlan: entered promiscuous mode [ 307.502354][ T8587] veth1_vlan: entered promiscuous mode [ 307.826859][ T8587] veth0_macvtap: entered promiscuous mode [ 307.839821][ T8587] veth1_macvtap: entered promiscuous mode [ 307.989809][ T8587] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 308.034572][ T9263] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1274'. [ 308.076657][ T8587] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 308.194082][ T7084] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.198631][ T8856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 308.242233][ T7084] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.274069][ T7084] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.288530][ T7594] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.596168][ T5916] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 308.743815][ T5916] usb 4-1: Using ep0 maxpacket: 8 [ 308.773309][ T5916] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 308.773369][ T5916] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 308.773393][ T5916] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 308.773418][ T5916] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 308.773440][ T5916] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 308.773482][ T5916] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 308.773504][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.040532][ T5916] usb 4-1: usb_control_msg returned -32 [ 309.040699][ T5916] usbtmc 4-1:16.0: can't read capabilities [ 309.125349][ T7084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.125369][ T7084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.143694][ T9274] syzkaller1: entered promiscuous mode [ 309.143722][ T9274] syzkaller1: entered allmulticast mode [ 309.393707][ T9291] usbtmc 4-1:16.0: stb usb_control_msg returned -32 [ 309.400627][ T6063] usb 4-1: USB disconnect, device number 16 [ 309.550780][ T7084] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.550799][ T7084] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.790371][ T8856] veth0_vlan: entered promiscuous mode [ 309.884533][ T5916] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 309.889337][ T8856] veth1_vlan: entered promiscuous mode [ 309.966369][ T9301] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1284'. [ 310.043461][ T5916] usb 3-1: Using ep0 maxpacket: 8 [ 310.046031][ T5916] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 310.046089][ T5916] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 310.046112][ T5916] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 310.046135][ T5916] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 310.046158][ T5916] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 310.046200][ T5916] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 310.046222][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.230197][ T8856] veth0_macvtap: entered promiscuous mode [ 310.293324][ T5916] usb 3-1: usb_control_msg returned -32 [ 310.293371][ T5916] usbtmc 3-1:16.0: can't read capabilities [ 310.455073][ T6063] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 310.561409][ T8856] veth1_macvtap: entered promiscuous mode [ 310.612329][ T6063] usb 6-1: config index 0 descriptor too short (expected 69, got 36) [ 310.612357][ T6063] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 310.615456][ T6063] usb 6-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89 [ 310.615484][ T6063] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.615503][ T6063] usb 6-1: Product: syz [ 310.615516][ T6063] usb 6-1: Manufacturer: syz [ 310.615529][ T6063] usb 6-1: SerialNumber: syz [ 310.668487][ T9315] usbtmc 3-1:16.0: INITIATE_CLEAR returned 0 [ 310.672672][ T6063] usb 6-1: config 0 descriptor?? [ 310.711473][ T6063] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 310.875054][ T5916] usb 3-1: USB disconnect, device number 12 [ 311.099155][ T8856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 311.186405][ T8856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 311.321146][ T4045] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.321714][ T4045] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.375901][ T4045] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.408348][ T4045] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.532646][ T6063] input: gspca_pac7302 as /devices/platform/dummy_hcd.5/usb6/6-1/input/input9 [ 311.743511][ T6063] usb 6-1: USB disconnect, device number 2 [ 312.318472][ C1] vkms_vblank_simulate: vblank timer overrun [ 313.017706][ C1] vkms_vblank_simulate: vblank timer overrun [ 313.206240][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.206260][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.554160][ T9] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 313.624536][ T1185] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.624557][ T1185] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.730250][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 313.770928][ T9] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 313.770956][ T9] usb 4-1: config 0 has no interface number 0 [ 313.771010][ T9] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 313.771037][ T9] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 313.771061][ T9] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 313.771086][ T9] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 313.771128][ T9] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 313.771150][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.800884][ T9] usb 4-1: config 0 descriptor?? [ 313.857779][ T9] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 314.076750][ T6063] usb 4-1: USB disconnect, device number 17 [ 314.076807][ C0] ldusb 4-1:0.55: usb_submit_urb failed (-19) [ 314.112072][ T6063] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 315.444786][ C1] vkms_vblank_simulate: vblank timer overrun [ 315.704249][ T9398] syz.6.1317 (9398) used greatest stack depth: 18128 bytes left [ 315.776687][ T5837] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 316.310659][ C1] vkms_vblank_simulate: vblank timer overrun [ 316.645318][ T9428] IPVS: Scheduler module ip_vs_sip not found [ 316.965556][ T9445] syzkaller1: entered promiscuous mode [ 316.965584][ T9445] syzkaller1: entered allmulticast mode [ 317.225890][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.225965][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.653178][ T5916] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 317.809668][ T5916] usb 7-1: Using ep0 maxpacket: 8 [ 317.812043][ T5916] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 317.812123][ T5916] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 317.812145][ T5916] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 317.812167][ T5916] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 317.812189][ T5916] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 317.812229][ T5916] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 317.812249][ T5916] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.078652][ T5916] usb 7-1: usb_control_msg returned -32 [ 318.078702][ T5916] usbtmc 7-1:16.0: can't read capabilities [ 318.462378][ T9484] usbtmc 7-1:16.0: stb usb_control_msg returned -32 [ 318.467235][ T6041] usb 7-1: USB disconnect, device number 2 [ 318.773184][ T9492] netlink: 'syz.2.1346': attribute type 1 has an invalid length. [ 318.920818][ T9494] syzkaller1: entered promiscuous mode [ 318.920850][ T9494] syzkaller1: entered allmulticast mode [ 319.591533][ T9519] tmpfs: Unsupported parameter 'huge' [ 319.815613][ T9525] syzkaller1: entered promiscuous mode [ 319.815643][ T9525] syzkaller1: entered allmulticast mode [ 320.673358][ T9537] netlink: 'syz.3.1359': attribute type 1 has an invalid length. [ 321.776377][ T9576] [ 321.776389][ T9576] ====================================================== [ 321.776398][ T9576] WARNING: possible circular locking dependency detected [ 321.776415][ T9576] syzkaller #0 Not tainted [ 321.776425][ T9576] ------------------------------------------------------ [ 321.776433][ T9576] syz.4.1370/9576 is trying to acquire lock: [ 321.776443][ T9576] ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 321.776504][ T9576] [ 321.776504][ T9576] but task is already holding lock: [ 321.776510][ T9576] ffffffff8efa6548 (smc_v4_hashinfo.lock){++.+}-{3:3}, at: smc_diag_dump_proto+0x174/0x1fb0 [ 321.776554][ T9576] [ 321.776554][ T9576] which lock already depends on the new lock. [ 321.776554][ T9576] [ 321.776562][ T9576] [ 321.776562][ T9576] the existing dependency chain (in reverse order) is: [ 321.776569][ T9576] [ 321.776569][ T9576] -> #1 (smc_v4_hashinfo.lock){++.+}-{3:3}: [ 321.776595][ T9576] lock_acquire+0x120/0x360 [ 321.776619][ T9576] rt_write_lock+0x6a/0x110 [ 321.776637][ T9576] smc_hash_sk+0x8f/0x2a0 [ 321.776654][ T9576] smc_sk_init+0x5a1/0x7f0 [ 321.776671][ T9576] __smc_create+0x10d/0x280 [ 321.776693][ T9576] __sock_create+0x4b3/0x9f0 [ 321.776710][ T9576] __sys_socket+0xd7/0x1b0 [ 321.776727][ T9576] __x64_sys_socket+0x7a/0x90 [ 321.776746][ T9576] do_syscall_64+0xfa/0x3b0 [ 321.776768][ T9576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.776785][ T9576] [ 321.776785][ T9576] -> #0 ((softirq_ctrl.lock)){+.+.}-{3:3}: [ 321.776810][ T9576] validate_chain+0xb9b/0x2140 [ 321.776835][ T9576] __lock_acquire+0xab9/0xd20 [ 321.776854][ T9576] reacquire_held_locks+0x127/0x1d0 [ 321.776878][ T9576] lock_release+0x1b4/0x3e0 [ 321.776898][ T9576] __local_bh_enable_ip+0x10c/0x270 [ 321.776919][ T9576] sock_i_ino+0xa9/0xc0 [ 321.776941][ T9576] smc_diag_dump_proto+0xa4c/0x1fb0 [ 321.776959][ T9576] smc_diag_dump+0x27/0xa0 [ 321.776982][ T9576] netlink_dump+0x6e4/0xe90 [ 321.777000][ T9576] __netlink_dump_start+0x5cb/0x7e0 [ 321.777019][ T9576] smc_diag_handler_dump+0x178/0x210 [ 321.777039][ T9576] sock_diag_rcv_msg+0x4c9/0x600 [ 321.777056][ T9576] netlink_rcv_skb+0x205/0x470 [ 321.777072][ T9576] netlink_unicast+0x843/0xa10 [ 321.777089][ T9576] netlink_sendmsg+0x805/0xb30 [ 321.777109][ T9576] __sock_sendmsg+0x219/0x270 [ 321.777125][ T9576] ____sys_sendmsg+0x508/0x820 [ 321.777148][ T9576] ___sys_sendmsg+0x21f/0x2a0 [ 321.777171][ T9576] __x64_sys_sendmsg+0x1a1/0x260 [ 321.777194][ T9576] do_syscall_64+0xfa/0x3b0 [ 321.777215][ T9576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.777233][ T9576] [ 321.777233][ T9576] other info that might help us debug this: [ 321.777233][ T9576] [ 321.777239][ T9576] Possible unsafe locking scenario: [ 321.777239][ T9576] [ 321.777245][ T9576] CPU0 CPU1 [ 321.777251][ T9576] ---- ---- [ 321.777257][ T9576] rlock(smc_v4_hashinfo.lock); [ 321.777271][ T9576] lock((softirq_ctrl.lock)); [ 321.777286][ T9576] lock(smc_v4_hashinfo.lock); [ 321.777300][ T9576] lock((softirq_ctrl.lock)); [ 321.777313][ T9576] [ 321.777313][ T9576] *** DEADLOCK *** [ 321.777313][ T9576] [ 321.777319][ T9576] 3 locks held by syz.4.1370/9576: [ 321.777330][ T9576] #0: ffff888032dac908 (nlk_cb_mutex-SOCK_DIAG){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 321.777376][ T9576] #1: ffffffff8efa6548 (smc_v4_hashinfo.lock){++.+}-{3:3}, at: smc_diag_dump_proto+0x174/0x1fb0 [ 321.777422][ T9576] #2: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: rt_read_lock+0x1f8/0x360 [ 321.777468][ T9576] [ 321.777468][ T9576] stack backtrace: [ 321.777496][ T9576] CPU: 0 UID: 0 PID: 9576 Comm: syz.4.1370 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 321.777520][ T9576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 321.777539][ T9576] Call Trace: [ 321.777547][ T9576] [ 321.777555][ T9576] dump_stack_lvl+0x189/0x250 [ 321.777586][ T9576] ? __pfx_dump_stack_lvl+0x10/0x10 [ 321.777611][ T9576] ? __pfx__printk+0x10/0x10 [ 321.777632][ T9576] ? print_lock_name+0xde/0x100 [ 321.777652][ T9576] print_circular_bug+0x2ee/0x310 [ 321.777672][ T9576] check_noncircular+0x134/0x160 [ 321.777702][ T9576] validate_chain+0xb9b/0x2140 [ 321.777729][ T9576] ? validate_chain+0x897/0x2140 [ 321.777763][ T9576] __lock_acquire+0xab9/0xd20 [ 321.777790][ T9576] reacquire_held_locks+0x127/0x1d0 [ 321.777816][ T9576] ? __local_bh_disable_ip+0x264/0x400 [ 321.777841][ T9576] lock_release+0x1b4/0x3e0 [ 321.777864][ T9576] ? __local_bh_enable_ip+0x100/0x270 [ 321.777888][ T9576] __local_bh_enable_ip+0x10c/0x270 [ 321.777909][ T9576] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 321.777936][ T9576] ? rt_read_unlock+0x65/0xa0 [ 321.777955][ T9576] ? sock_i_ino+0x24/0xc0 [ 321.777987][ T9576] sock_i_ino+0xa9/0xc0 [ 321.778014][ T9576] smc_diag_dump_proto+0xa4c/0x1fb0 [ 321.778047][ T9576] ? __pfx_smc_diag_dump_proto+0x10/0x10 [ 321.778070][ T9576] ? __lruvec_stat_mod_folio+0x79/0x2f0 [ 321.778102][ T9576] ? __lruvec_stat_mod_folio+0x79/0x2f0 [ 321.778132][ T9576] ? __phys_addr+0xd3/0x180 [ 321.778157][ T9576] ? __kasan_kmalloc_large+0x85/0xa0 [ 321.778181][ T9576] ? rcu_is_watching+0x15/0xb0 [ 321.778208][ T9576] ? rcu_is_watching+0x15/0xb0 [ 321.778234][ T9576] ? trace_kmalloc+0x1f/0xd0 [ 321.778256][ T9576] ? __kmalloc_node_track_caller_noprof+0x213/0x450 [ 321.778285][ T9576] ? __build_skb_around+0x257/0x3e0 [ 321.778311][ T9576] smc_diag_dump+0x27/0xa0 [ 321.778332][ T9576] netlink_dump+0x6e4/0xe90 [ 321.778357][ T9576] ? __pfx_netlink_dump+0x10/0x10 [ 321.778376][ T9576] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 321.778400][ T9576] ? lockdep_hardirqs_on+0x9c/0x150 [ 321.778435][ T9576] __netlink_dump_start+0x5cb/0x7e0 [ 321.778459][ T9576] smc_diag_handler_dump+0x178/0x210 [ 321.778483][ T9576] ? __pfx_smc_diag_handler_dump+0x10/0x10 [ 321.778504][ T9576] ? __pfx_smc_diag_dump+0x10/0x10 [ 321.778526][ T9576] ? sock_diag_lock_handler+0x19/0x290 [ 321.778546][ T9576] ? sock_diag_lock_handler+0x19/0x290 [ 321.778569][ T9576] sock_diag_rcv_msg+0x4c9/0x600 [ 321.778592][ T9576] netlink_rcv_skb+0x205/0x470 [ 321.778614][ T9576] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 321.778636][ T9576] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 321.778662][ T9576] ? netlink_deliver_tap+0x2e/0x1b0 [ 321.778687][ T9576] netlink_unicast+0x843/0xa10 [ 321.778710][ T9576] ? __pfx_netlink_unicast+0x10/0x10 [ 321.778729][ T9576] ? netlink_sendmsg+0x642/0xb30 [ 321.778750][ T9576] ? skb_put+0x11b/0x210 [ 321.778774][ T9576] netlink_sendmsg+0x805/0xb30 [ 321.778800][ T9576] ? __pfx_netlink_sendmsg+0x10/0x10 [ 321.778826][ T9576] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 321.778845][ T9576] ? __pfx_netlink_sendmsg+0x10/0x10 [ 321.778867][ T9576] __sock_sendmsg+0x219/0x270 [ 321.778888][ T9576] ____sys_sendmsg+0x508/0x820 [ 321.778915][ T9576] ? __pfx_____sys_sendmsg+0x10/0x10 [ 321.778944][ T9576] ? import_iovec+0x74/0xa0 [ 321.778965][ T9576] ___sys_sendmsg+0x21f/0x2a0 [ 321.778999][ T9576] ? __pfx____sys_sendmsg+0x10/0x10 [ 321.779039][ T9576] ? __fget_files+0x2a/0x420 [ 321.779065][ T9576] ? __fget_files+0x3a6/0x420 [ 321.779095][ T9576] __x64_sys_sendmsg+0x1a1/0x260 [ 321.779122][ T9576] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 321.779154][ T9576] ? rcu_is_watching+0x15/0xb0 [ 321.779183][ T9576] ? do_syscall_64+0xbe/0x3b0 [ 321.779208][ T9576] do_syscall_64+0xfa/0x3b0 [ 321.779231][ T9576] ? lockdep_hardirqs_on+0x9c/0x150 [ 321.779254][ T9576] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.779273][ T9576] ? clear_bhb_loop+0x60/0xb0 [ 321.779293][ T9576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.779311][ T9576] RIP: 0033:0x7f3e47d5ebe9 [ 321.779335][ T9576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 321.779352][ T9576] RSP: 002b:00007f3e45fbe038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 321.779373][ T9576] RAX: ffffffffffffffda RBX: 00007f3e47f85fa0 RCX: 00007f3e47d5ebe9 [ 321.779388][ T9576] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 321.779401][ T9576] RBP: 00007f3e47de1e19 R08: 0000000000000000 R09: 0000000000000000 [ 321.779414][ T9576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 321.779426][ T9576] R13: 00007f3e47f86038 R14: 00007f3e47f85fa0 R15: 00007ffd21d27f88 [ 321.779448][ T9576] [ 324.664721][ T7084] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.884000][ T7084] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.148364][ T7084] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.384689][ T7084] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.617193][ T7084] bridge_slave_1: left allmulticast mode [ 325.617217][ T7084] bridge_slave_1: left promiscuous mode [ 325.617369][ T7084] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.707797][ T7084] bridge_slave_0: left allmulticast mode [ 325.707822][ T7084] bridge_slave_0: left promiscuous mode [ 325.707980][ T7084] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.565338][ T7084] team0: Port device geneve0 removed [ 327.243331][ T7084] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 327.303438][ T7084] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 327.364969][ T7084] bond0 (unregistering): (slave team0): Releasing backup interface [ 327.386350][ T7084] bond0 (unregistering): Released all slaves [ 328.963266][ T7084] tipc: Disabling bearer [ 328.963436][ T7084] tipc: Left network mode [ 329.862985][ T7084] hsr_slave_0: left promiscuous mode [ 329.913828][ T7084] hsr_slave_1: left promiscuous mode [ 329.914443][ T7084] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 329.914463][ T7084] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 329.937281][ T7084] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 329.937304][ T7084] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 330.003414][ T7084] veth1_macvtap: left promiscuous mode [ 330.003479][ T7084] veth0_macvtap: left promiscuous mode [ 330.003610][ T7084] veth1_vlan: left promiscuous mode [ 330.003680][ T7084] veth0_vlan: left promiscuous mode [ 331.573304][ T7084] team0 (unregistering): Port device team_slave_1 removed [ 331.753438][ T7084] team0 (unregistering): Port device C removed