last executing test programs: 3m10.669781007s ago: executing program 1 (id=837): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) write$binfmt_aout(r0, 0x0, 0xff2e) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000000)='.\x00', 0x400017e) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r5, 0x0, r7, 0x0, 0x88000cc, 0x0) write$eventfd(r6, &(0x7f0000000240), 0xffffff14) 3m8.706007545s ago: executing program 1 (id=839): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r0 = socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) sendmsg$key(r0, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0xf, 0x8, 0x0, 0x2, 0x0, 0x2, 0x25dfdbfe}, 0x10}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000280)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0xfe, @remote, @local, {[], {{0x600, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x46801}, 0x4000000) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0x40047438, 0x0) 3m6.023996062s ago: executing program 1 (id=844): prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r1 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r1, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f00000005c0)=[{0x10, 0x29, 0x37}], 0x10}}], 0x1, 0x4000000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000800)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @struct}}) writev(r2, &(0x7f0000000740)=[{&(0x7f0000000280)="581a", 0x2}], 0x1) readv(r2, &(0x7f0000000e40), 0x0) 3m3.720823877s ago: executing program 1 (id=847): epoll_create1(0x0) r0 = socket$unix(0x1, 0x1, 0x0) close(r0) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x420, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000019200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x10008095, 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) accept(r3, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, 0x0) 3m2.602974977s ago: executing program 4 (id=848): ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, &(0x7f0000000040)={0x0, 0x34343452, 0x640, 0x4b0, 0x3, @stepwise={{0x1ff, 0x6}, {0x3, 0x200}, {0x7ff, 0x9}}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYBLOB="0000000000faff000000f46611c135dac3b7dc6f3c88134e66c5fa523d473fabb14c4717cfcb0cbd00301b85301751358aa0c4f0dddda0ee9676627965d9fdaa3d5a0d17d2bff0c741ba8ee471a7a4f441835a89a852681ce68bbf6a54f86dd853ddce5754d5876a644fdb6b4b4427ffffffff8a551797f80177f1e544b5ac04f2c4b491abff8bcf8511a095894aa2cbe6dd66d661e295ffda45f555f6761386619171a14c1f8f298c16422374a49104b2d07ccd409eaea0bef67f8dcaef378ff58fca1d30de749d748f929454793157adb0", @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYRES16=r0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$loop(0x0, 0x1, 0x135e80) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000010c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0x200]}}) r4 = socket$alg(0x26, 0x5, 0x0) accept4(r4, 0x0, 0x0, 0x80000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) open(0x0, 0x4c27e, 0x2) 3m1.129104338s ago: executing program 1 (id=850): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r5, &(0x7f0000000100)={0x1d, r6}, 0x10) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f0000000400)=[{{0x2, 0x1}, {0x1, 0x0, 0x1}}, {{0x3, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x1}}], 0x10) 3m1.098719486s ago: executing program 4 (id=851): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r3, 0x0) creat(&(0x7f0000000380)='./bus\x00', 0xbc) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r5, @ANYRES64=r4], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r5, 0x0) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) io_setup(0x202, &(0x7f0000000480)) 3m0.869818403s ago: executing program 1 (id=852): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe(0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801}}, 0x20}}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) lseek(0xffffffffffffffff, 0x9, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000015c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x48}}, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0xa4000960) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)=0xffff0018) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r3, 0x4b46, &(0x7f00000000c0)) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0xffe, 0x0, 0x0) 3m0.789768351s ago: executing program 4 (id=853): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0xb, 0x84) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x6]}}, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4) 3m0.402091912s ago: executing program 4 (id=854): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x28100, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCGIFHWADDR(r1, 0x8927, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r5, 0x0, 0x18, &(0x7f0000000000)=0x4, 0x4) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(&(0x7f0000000180)=@nullb, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='btrfs\x00', 0x0, &(0x7f00000001c0)='discard') 2m57.611804101s ago: executing program 4 (id=856): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x1) creat(&(0x7f0000000300)='./bus\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x0, 0x0) symlinkat(&(0x7f0000000380)='./file8/file0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00') unlink(&(0x7f00000000c0)='./file6\x00') 2m54.661065661s ago: executing program 4 (id=863): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80642, 0x185) pwrite64(r0, 0x0, 0x0, 0x83) connect$unix(r0, &(0x7f0000000440)=@file={0x1, './file0\x00'}, 0x6e) r1 = socket$kcm(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000657000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) inotify_init() splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x88000cc, 0x0) sendmsg$inet(r1, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0xe23, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)='_', 0x1}], 0x1}, 0x44864) setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, &(0x7f0000000300), 0x4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @remote}}) ioctl$sock_inet_SIOCSIFADDR(r5, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @broadcast}}) 2m42.846540788s ago: executing program 32 (id=852): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe(0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801}}, 0x20}}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) lseek(0xffffffffffffffff, 0x9, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000015c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x48}}, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0xa4000960) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)=0xffff0018) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r3, 0x4b46, &(0x7f00000000c0)) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0xffe, 0x0, 0x0) 2m38.100363507s ago: executing program 33 (id=863): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80642, 0x185) pwrite64(r0, 0x0, 0x0, 0x83) connect$unix(r0, &(0x7f0000000440)=@file={0x1, './file0\x00'}, 0x6e) r1 = socket$kcm(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000657000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) inotify_init() splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x88000cc, 0x0) sendmsg$inet(r1, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0xe23, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)='_', 0x1}], 0x1}, 0x44864) setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, &(0x7f0000000300), 0x4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @remote}}) ioctl$sock_inet_SIOCSIFADDR(r5, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @broadcast}}) 7.505860545s ago: executing program 3 (id=1825): getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000540), &(0x7f0000000040)=0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xfffffdff}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000005c00)=ANY=[], 0x3cb0}}, 0x40010) 7.233167235s ago: executing program 3 (id=1827): bpf$PROG_LOAD(0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x4, 0x0, &(0x7f0000000140)=0xffffffffffffff17) 7.113300366s ago: executing program 3 (id=1829): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x22048854, &(0x7f0000000200)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0xd000, 0x11, 0x0, 0x27) syz_emit_ethernet(0x42, &(0x7f0000000500)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @broadcast, @void, {@mpls_mc={0x8848, {[], @ipv4=@tipc={{0x5, 0x4, 0x1, 0x3, 0x34, 0x66, 0x0, 0x0, 0x6, 0x0, @multicast2, @local}, @payload_direct={{{{0x20, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x2, 0x80, 0x0, 0x3, 0x2, 0x3, 0x3, 0x7f, 0x8, 0x4, 0x4e23, 0x4e22}, 0x0, 0x1}}}}}}}}, 0x0) 6.929010762s ago: executing program 3 (id=1832): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r1, 0x0, 0x5}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 6.775024177s ago: executing program 3 (id=1835): r0 = socket$netlink(0x10, 0x3, 0x4) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x183a00) close_range(r0, 0xffffffffffffffff, 0x0) 2.339718277s ago: executing program 0 (id=1879): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x104) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x64) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0xc0049364, &(0x7f00000000c0)) 2.204343955s ago: executing program 0 (id=1881): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)={0x28, r0, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x8001}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4044010}, 0x40000) 2.195625609s ago: executing program 2 (id=1882): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x24}, 0x1, 0x0, 0x0, 0x20008001}, 0x10) 2.068317049s ago: executing program 2 (id=1884): mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000001100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001c0000000000000000000000070000004404730001000000e736f53aa500a029b4fff380b1208d2517faab10d57912ea57285a512c15273dd90873706db2ce3f1fd2709c8fca22cf77f29736f1e80045368c6d61cfefe19acae96300000000000000022fa79f00000000d114c4e16cb59c3b813222b23474ebab0566f62853"], 0x40}, 0x0) read$char_usb(r1, &(0x7f0000000080)=""/139, 0xfdef) 1.875656176s ago: executing program 0 (id=1885): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r1, 0x2, 0x40000009, r2, 0x0) 1.629040962s ago: executing program 2 (id=1889): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="0213f803030000002cbd7000fddbdf250100", @ANYRES64=r0], 0x18}}, 0x2080) 1.628792435s ago: executing program 0 (id=1890): unshare(0x2040400) ftruncate(0xffffffffffffffff, 0xc17a) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x38) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0xfffffffe, 0x2ffffffff}, 0xc) 1.493808832s ago: executing program 0 (id=1893): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20040895}, 0x4004440) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140bb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_POLICY={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23, 0x6, @loopback, 0x57}, 0x1c) 1.471993501s ago: executing program 2 (id=1894): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001200)={0x4c, r1, 0x5, 0xffffffff, 0x25dbdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x30, 0x2d, 0x0, 0x1, [{0x4}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0x4}]}]}, 0x4c}}, 0x24042084) 1.110674211s ago: executing program 3 (id=1901): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) r1 = syz_io_uring_setup(0xa0, &(0x7f00000002c0)={0x0, 0x305cc6, 0x100, 0x0, 0x20a}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x12}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1.095477352s ago: executing program 2 (id=1903): r0 = socket$inet(0xa, 0x801, 0x84) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000100000,user_id=', @ANYRESDEC=r0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) 1.082938988s ago: executing program 6 (id=1904): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) 957.01342ms ago: executing program 6 (id=1905): r0 = socket$inet(0x2, 0x1, 0x100) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='macvlan0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) 674.715944ms ago: executing program 5 (id=1906): symlinkat(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(authenc(rmd160-generic,cbc-camellia-aesni-avx2),sha1-avx)\x00'}, 0x58) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e00000001300"], 0xe0}}, 0x0) 663.216851ms ago: executing program 2 (id=1907): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000680)={0x40, 0x18, 0x4, "63e4d077"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000300)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="202604"], 0x0, 0x0, 0x0, 0x0}) 658.850328ms ago: executing program 6 (id=1908): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000033c0)=@base={0x9, 0x4, 0xfff, 0x5}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) 545.13274ms ago: executing program 5 (id=1909): pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={[0x3ff]}, 0x8}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="12000000050000000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r2, &(0x7f00000003c0), 0x0}, 0x20) 441.246077ms ago: executing program 0 (id=1910): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f0000000900"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f00000000c0)={0x3, 0x2, 0x3, 0x5, 0x9, 0x7}) 435.323733ms ago: executing program 5 (id=1911): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x3ff, @any, 0x7, 0x1}, 0xe) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 363.255145ms ago: executing program 6 (id=1912): sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x24, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x7}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008004}, 0x4040000) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\b\x00'/17]) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r0, 0x1, 0x2, 0x0, 0x48) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000005c0)=0x98) 217.980521ms ago: executing program 5 (id=1913): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0xfffd, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 156.501091ms ago: executing program 5 (id=1914): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x24, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x7}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)=r0}, 0x20) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000280)="016cf5ec7a72d949e1b418ebba81a1c1416175ef7e79f6118ac312c25e805fd64da2d79fc813e26330103c7f76679613f15558a965b4daa85657eccd23f635b8165ac7ff125accd1875a40cbd95c98fe7297f3eee1f3b3c2a7a4f0305e45e3a689fc32b6486e9817ecd778e5b45788c7ba6f62cc53eb17db3e9db7d85f23b4edd0c182", 0x83}], 0x1) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r2, &(0x7f0000000300), 0x0}, 0x20) 155.768157ms ago: executing program 6 (id=1915): r0 = gettid() timer_create(0x7, &(0x7f0000000780)={0x0, 0x3f, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigaction(0x3f, &(0x7f0000000940)={0x0, 0x40000001, 0x0, {[0x40]}}, 0x0, 0x8, &(0x7f0000000a80)) 218.523µs ago: executing program 5 (id=1916): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f0000006400)="7f73a2cec5d0db4d420442fce4e4191e2ed112a607e662fc1eeef7926d41c5a0f91c64de08fcd231ba34fb2b58307d834cc83ce0f3908b5333fec9af958c900344d938cfa948f432dd5acb1a7a73bdba45cd411b82f7fed6fa3bf23c9abdc4f263fdf3fd68dcbd973b4dc2aef81c7296d7d08e562f89231f57d43e4d7458c8f389810e60c1c20bddfefcf1739824ad409148f4647b52cc98987f7c31bd6f7f44e39ac5f97f75f06dccd331d2828625fbfd3a65fd0d32871b92c0a6aa8895d3b467921c933eeb93cdbd7387abe27c4427d4ab77bbf9558a9a085a74170e875d83f8c5017d46901eb519854e8aaeaf94e6e050fec7c1afd81e26da117484dfb042805ed1ad3fc67a28636f5a35ad72f6106a5c3cbdd25048567ef13b229024142ebeb7a8bf518f017fd49dc31d8652ab7036107f8d5216a142e58f8ed850ba177786e911fa4f9ff952f8ddb66af705c7b97ed4b385d9ea3c0fecfdd5dcf168832726ced26b51f7a5911a35106aaee0e8662497f6c5dce5543690ea32505e79f13bace0f89ad9e8c551578eedc78028c414145dc3be2184e2055c037cc2ae07842a78910815c69d010bfbb850ec8f1a5da8b48ed2f75838dfe8657e5b1b59c561cd5d219a481802939c7abfb216e01173985e3436b7135d2377ba714281dcb3f82c064957e621464e5de29e8248d2400668e5775d8a75d23d7e3fd9fdce31aef258be698b121ac4ff319c6e4f872c4cf1b5f3cbbfb2ebabe113ccffe028d829922ea909a5522e5b632e3b99fb47ba9d0f8e15ca401e3ac671e80dcb56214330e7ffb3a415d6a0b84c56b056a6f2a4ffbb77130a5867b12e061a2539aaf67360af472c21a27855b5387e132ef9bac10b86b1f93974da52b3f4c48011c77eab7481e1838975fec2ae160f6b8c168b80dcfd3e03e8c1ec2a643cf850203e8254112c08ed4c2c6d0715b6bf5f281df7356cc2c9f8baac8b0dc574fc46eef5eaa9530dc0a6a88b3ad315d01a36282c5338cc5c399deb78cad23b22eb71b80d266fa904fc1a6d94f77a1e3a2173abe5dba58af48a75fbadd339eddfe7dc5ecf3fb85284e903ab70dc00663f0a5270ab805556aaf09223679845a1e091f24318d71dff015847107ffd9d7f789e8753abc2a51d5067da21c49fa8b8f66c89afb009cf17200753164786af597b8b6d5b5505d1d716c74fb26cd78679d77330c2cb2bd154423bd6e5b8972e2c576a89806e57686a7019a369de75c99e0bb6704f508adfd5394568a2f8c56a5333c861432e4ed056e5b8f20217c81563f0fb9efa6467459753832814e3118c24b634d6068b35871bcaaadda1d206584324a2bd35050f5fb993e898ca25fe82b3578e325658a4cb91ba32589c6d6720284c610569788acd2907091a968651b3978d797a5e808d4f33be1859de2bb57b5d249725f06d94e32ab46d1b7d1174703bf8dba02d4a5f5a16fb3878d6a2c915df4ea588ad8b0545b62308112d6c7f9bd93e5a51a45af9e990985f8d7dc8925ac1f63210cad488769d4957b03108e5e6f716d80a0bf88349d680067fb0a0bc59edd8ba646a2a86b4c32fd531dbc4879c86ab74e17f49f877c30a36279698a3420f3f236a69a84781fb981a2248bc0dd12dcc464f6b970b27ee634f0fa8c1338bdc3b4193b865727eb856995c08d9b88161b9a15245ec0967000f678e807c953f933edc6e80fcfe963663f7cc801927bc91c238d0b6f0c61ae66a8d210ca577b17677d79ffad404194d733dbcce9b2f163637b7ed1cf4f967ca680bf1db83b1b6f090dd99b8e0d49e7b3cac65864c32cb321d84bf43e7a300a6f4ac27c8091e39e4383fc99617f4b367d7a2e0041176dee5fa85ceb501c3d2a2efc1f489f83fbbbdc4af125fcac9a2ed8db3cc227543b195e36adef6a67a126a28be525e0441d3c5def236da4bb1d5cec084b1f08da02299f72b2a10ea7fdd5eb3c2f999740a287c179db7fa5766f8781b5147a6933623bbaec777152c4e65d262733ce7e864c5c79a56f60075662248f6b765562f718d0767a89de9bd3649957fa54bc9df603158d4ea631d71be5ea93ce64d4718abc196fdc85dddd8656806500660aaf5e3c5c74732872141cf9c542bd32f1ad210cae53fd91bce48a55afe056540d396b0930632d6b252833a91bb4d9020d5ed10d66d2467e324ee68f06926194d378da476f0d4dbb9c452475d938e8c774cc68bd291726a95223ae3866d9a2f3e4e6c319e2b4700ef4640ceedd9ab0a587bdaabd649363f0d93ec1afd6106e791f8d8f1a0d52c085a4c8a89a5c6d8443c63d3757dcca07e1f813aa6c7d007385b54b9a280713e80d8b61630360166c5ef66190fe367d7694112f340f790d8a9cf0f39eef719edbe914c9da3ecae2913a544cdce5bdb9fa462ef83bf3da34e76670612885e66c1cb13c76f72fa796ab1810f507be6dccdb66aad16e88168e0637ce5ea5bbb01ba6731052459600121734f1db7c610920e979e1f2c69be00a33a7cf14e5dec0626d3928040c75db097626e198c17114da8841c9e5cea3ba122dc119d6a2da3144993e7e023849f5360f299675f49353828a592aa8b6c2ec821b0991dc478024a6811656a265431f9aa56feda7e8267d6e3351ce340a79856e59de5db2c919c6726cff7ee678b95390d6c6ddd2ba323be59eb4c42f08a2f9973ff0c45820d59b50b6a153775ed0e9e73e73c6ccb98887bf70d35d97ae8d226c35b4fe8a5d4cda816eac80cdb962e8444a5cb4452ea83da83ccb437c7b00e146d7b71aa86a0933aced67fada0588dfd280066f5a735215691ecdcfd474dd0ae3c644af51a79f8fe7a84b0c2130e619dba270a101b0d1669c9317d5e548a2cc3755d5a37817d8eaae8059713854fb1b5b70991ac62db6453afc3bc4fb78a5cdd56e22b4d7abd70e6370ba28d5cba9478886f232a482cc4a1dda770c0458c8bef5ac19d8f4a24117d6ab0c7d37928c05a9b51cb6b2d8f5e422383dfae0f8152365fea2a948a12899aac9587a01ed162e6e70572d3eb02fec0cf0af4e65757f4bb535aa4fb82a193f79913b09e8a4d1ebe26eb4bd3d1549ecb20a08c501bfb5aa8ceb236a99d6ac3cf7be65475a867c27d301bd62a947c1d03e7247db527d9f7356bd59ea335f3c0afe3de183fc16c77e658aade451f036c34b9ee58ba53672994358355209728a760d76aa2f22d7d4e37732cca6404fde0d067bc97a4020a9f3946893743fe132704285a7e1b01403955d61aa22805dd592e4f4af41bd3c3f3ff2b1f0fa434c141261fc28b2bc1b104c78ed7f27cc9609a3d9ca2b8b976dd2374db05550e85032d7e080fac951aa68eac62a9de55565ab6201508cff33c38286494184219c919958415b50420756d32ea98cd04b6ac9c5f311fc933e48a597285c2f8a3dc008f174854b6ea186af6aa55aeecc10345b7d9bb9d2bbd3c0bb8153f6fbf080f4cd49e07dd850ab3a44cf505fecc8cb52b0540a60598ca941d40bda71b16f703bb30e344d3de13e540bc1205a1d9b3c94658b2199b2f2008c9f106eae565ef605278b8779ece25cda761069c7c72f020b820a39e6d0c441cdb00a41292c3146f39d2a5f7bb2fc8723a318fe3df11ce8a2e81eeabd0dd9245cb0f54a6d048c428c899182804cff8947361c01b009214b7d95617d312fbbfd379925f402bd9cc0cf5c25f14c24c64ccc7d87add9ce615711c9c6df6b0861f4669030abde15fd2e4059f25ad1c5543ededdf6d26c5a4f52d6c4448d105bbaad24a88cdc41b7e741c82973dc2578f9f1fd1faf4e522eb08c430f4efc4772fa4f6e504164b7b0b275635446c64fe3764cc13b1903b2a359eaa16c28abd331a34f78354ef286116c7b4a0ed3b8c38e8667f26a4ad8de9e205b9f1b24ec8c46a3c3578655f45d4356bd9504b2c4bceab55e7b02cd53139c1b5f044d9182b1e41c9020ad44eb31b8e8a7bf01e85c182ec849d7ed42d69eda8eb57d58c1c38e4ef4c3266fab97db4047eee31d289e91c53b243f5ad50af8de32c35cdd1165c894cfc9df5f59f55b2acdf81b6ee3db4eeed50c7cad36cf53dd10ad592c6d059f067d76711c067d42a148443a195512ea16f41589b3f1dace5e63d2c1255ea19c8ef1836ed19ff7ccaf96536548c06d4fdc76daf99d960c040e4df0e5a1f39f57bcd6dc294adff4af3a8ef364338049c5991d532a248aef4a0d166de764a4c3b583b6f8c30a8cad255f34f342f2b778fdda98766e11c21f4df0db226e6bfb66e71c342d904e99d506aea721d01456938e02f60e78b2652204819ed4595ee77e987d9646b2720ecdd41869653f7225e23dec28dbf0709a1da684693cb22f5b74f569f2d424499eb246ca8d8cf9ba86b2f1d25ac5e3707d46c46fa5d3008cc01aaf2e645b92dda134010df5ce5ad6ca03c2a30ae023a72688f766bcc821f24fb81d1c9edf5da5d96816476a3afcd4df699cc2b98664af0d1365e589673ee7272e3746d7e95ff6c87e1d5ae8055551724e3ad3c50d852eeac1333a4507d096687c6a7765accefc4b22dcc36a73f231d6c9dc242a5e7a0309415bb10455c2df3bf719c79d73e35ad068f5473b66c7e9bf769919b295d6c9dce8f774a21bb7878fd7d4b887bd2efaee03c73532a35bd23810dfe10e214d4f9cec03c72afa212f009e068852546eca171ce2c7070228901527621eca6771cb75b1613df30ad1582df923e12b91013f73102f130fb33b85d82f038bc1f54e6f126d5077262ca82ea7130995a5b24c4974ca8a1b1d4ae7c3417d05547cdf5e6030c4d02c6cfa0bec697be7df432b8d78926831d00e7bca1a5e67e6d55666cca07c6842950cd793ce986da89185efe61046e863add47c745775b8e3727b074434f1c14c502e44d276b73ad2faad946cef2435fbf1225076c461b76b3f83e24a05cbaf0fed70c3a05f4765c0499a9b7a80805be294053e7f27e2260e1ddd1737d535aeb7692a0c8c169b5c058a9d217776b1a9888dd8175477f4cfa44b83715ab4f6f212153628554f719fcdb6bd376c1d443c2692ba8f2db168c63723eb8c88e9a9612a0934ee66dd63daab19078d61fe68ab10a621460d98d12bd3cc6799b2c35eb1010a457e2f36fccf3b37a96233d844291bf798f630fec23525ffa41e64b17b895c28ff7699cf31e9faab9b2f515d2e14dd3981ac7c21dea76810ab33ac178648ecab1cb09b158f43d1d9a97ab05b52c322d02206922a719a400367796063570b480980d4f9347214d747ce0de4f56902df321e892bac8a79ededdac14b93682b9ca8b95452b68c8ec3fa1ed188237dd1f67a286d988fb8e43889c00f4a87a3e6416bfb34259646296cd5f73d0e00534309af6e8f5e0e54c63fca9822505237f4e3cd95b8adccf45f3709e8427da5d7c3c57c99286a2c094db3f815373a756e9ffd2af88d6e69a8829dd4a7cee75942aea8556ffcd82653fce46daeee574ed7502fb2b1e8dd8d60a5d46b898684a0d715f643a6a1d0c447e036e1ca25419cd8bd785402d88bce5e40532b1806aee693f8b5030cfad71e9f52d0445304aa2af28893b1bc731f37b55bfc6e5846634482cfa3cee7e9d2c8a34a48fcca25393d7b3fe5c5a3c2d53de126654468984ab1777954272c6e25ba392f3c3c2a658518625921196839ddfbaa0bab14836ea12e63542a60db72048bc0770351cc2c30ed6185ce69b61f8160078415e86f9bab5f399bd7ed4b720fd19fa327f440f6054937b0dd6ef511849823e6162e0c7d1f846f9ebafc32583954e7b136303977a191d9974e939fc7cac14134026967b5408fa6907afbdfa41cf80a17c251fc1363725987819f165518f86fee07ca1660c25d04f157ecd43b8b92f93b2c6c02e0c1e715836d70c503e60ceaeaaac61f7b9e07d3fc9904ecfc81ece857754191e57a8991bd0042750b53722f35741641ebd5c5febee02d648fc1d048bf916a8d8f33227fca790602c02dfbd4aad34f2dc8e77e537ad4042a553e5e8a0a15dbee27da24ac13048378899c3a8772a0d8b85c442c8082f464b58fc016e845186bafa8fdf4f04d0d952136d4c7be90a909e3e6adcb3d74ed37da19769cb81114ead1a40dc0368169e5c230eb02a0d1c1a11ffd808f27159baeaa8879a034dcaf6a70b2f99e5859ad9c7465d61b4b51e993d8b93095ca63675dee276ba112bd2f469efdfb79fc8c97b809e0076001b98651bffa6829b2141fb3ff789d0ddc3d73b077d36521841ed9aa5a8a134f5875c444c62efa1f9b0d98a4bb4a62760a15d33824791420a5a89467ec364f30954db77219b849677e0f5bfea9c3d2a3a1e1e76ce3df4c8b9a6a3866b20566e7c68c6d32bad4d70fd2b9235fa7d38475ec1b9c9d746f55b02bdbdee6dcb6238caeed353de28d1e6e2d5126117e5fa82b9d57b703dd527736b51444b0d7d4b77562d4a370a202ed70b4940bf58ef3ff8801f78d632f2d2428fb133a910aaf4757b32d657d831c5575398aa88643e7fb1431ed0dec16a505e2d8583ef3d8787413bbdfe132c921d16cf272ca791e88e196824ea3a5c009a6a21b88dd1d6d6f87733528959ed24a4d3505d469d32a09b1970329add757c533afea8f8314c58400c0f3e25b703d9757c4b04f1b1bf293defb008ea60dcc77b0d3a6e9a1286c761bb3aa0c8f3aed74f8cab11094741c093e495867afb3857d3a92ef0fae7253b2bc3291a9ac0dcdb62c517ce2471ca23d985012f2e860238ccbec834039e8538de07f6086d1ac09027729bcc4e0bbd36e931be4242ec7135d16b01b3da39b1cd1c1d751017df8ffb31875f5a541a94099a4f035044f310fe5356d3b2d9a1eb5bcefd422e546bb3c169b8793df2764e6390dd161d90943a55d40f1984e1e211fd0227296e2b5c6485ad19675dcbce483a88f5c68d44b80ebb716c1aa0017ebafe340a0273b48979c7dd4e426f8c0a736e40c4f844a037742d00a73b67fba3c14051c6278c4dabdc4d8446ab5762e2d9d4f34359da34cdc333735b02e5deb9f71c8af1a5cea228eb70d0d8b371e378f5fd8172e60d9432e38e8eef54758d89e5413693ff2deb95fadfda6ecb6feb3adeae0c08860056a23d122e7b070568ca196b58cf0c5e737be9f2d9c66fa2be4f532c603ea8533cf06152d231cd2513cdcf212af2869ab96488f5cc484cf773c4d6eff8573b9487e51c84c3ea2e03e0bf3bea7717b8c92470a05d6e518265e8d31e23a22dbefbf82bb2a81d6c76372c5f41b19c5bcbea706ebd0b3cb7e52be6f8c70b7fbbfda4de69318cf9186aaba9d94c93b2df2310c44ed93d937db65b5f596dfaf6b52a7a4ae77c4b096d0075189cb568e4bbf6ce9c796839855440e6f060e241f295e4f76b0f162dacb2cb2e47a06961152e0057ed615fe14943822e8d6fa18636f3168f09ff2986dbf1904043ba4fee74b5c4706781568861df4c9b13bf2a815ba7c69a0b60114e19d817c3a038921fbb1b47acb8597bb38f7980f8b628f3565b09d7f7be504264ff143409b54516b4e79bdf7147eac7b1de7e43d76c558d6306bf780095f2bb5b9ffa3846df980001b22171d65463c17f4adbb95274abe315707946e65026a86d1b368586046e0cfd2a99352c16b9bbd91bb839c443e9962ae35a9d0dd6e2a48e773e6ac06597c6e428f5cc14836e6462135972bec63de2e7e3b5306704d44c2d9367308ffc4bb43cf839e37ee5fda8e50383aaf2eb67004645fad98662d6ce3d499ed921c9015ee5691b030f53cf95c346131097fd8fdbf257dbbb4410fb1dd14d64e384ad486ed5903866cb1982c606d41d611d4bb6298fb26cf965a7dbaf57309d46483fd5ff7c4782341446e7ad9695c52f7aa57a0c856214f67b7a7b8def0e915f5eb2ae457e4800d8791faac0133cb3851881aa429826cda874a42b7956a032f3d0615296c4f706ed649690d196ca6a6a2481be470c0a3922c7789276effa51e0221c8e163ce47dd8ba62391882338ad843d5579a6c3cd3ed711d770b8e0be9de4c91120bc01d69f457715fd770d6c335de853c87be3b638953faa0f2284d415c537e01285afe9b7f54d7a432bb7e16cd18621b6e5769b635dba997a5c65279bad6522d189da110e549f51fe20af42fcabf1a900cdea166bfe279855b8fdcb1bfb97049238dd17aec8093ea38b04e04bf43dd1b43658abab3b0b395cecf73d59279b9001e0d4ba93b95de101534ac718336a82216f2112b7aa0235c15594960f4771a0fdc21b4636ce3ddda5dd63291bfedce53347b725f8fe17848319b05cdf4c8d3d198b64deb3e10f6fab3db35ecce06908cd4f26cbda0f8c4a7deeb6ee12e0b5c13dd022851e6da21f44505697a4a974a10e57145bc75960ba59e189768938e89eb0c81071b45345ce428e90c4fc04ba11e75127f96698a4a2dba776a0f0a1576853d39e0ad3addb7bc1f3c030794d1fe621799d34582d07b80114df1039cd2866f1899f19fe34b946571c17f8b3efdc0e857fcf83f1ebc2b99ad59485fef3057e07534d36e7b4350dee86fe84f6f85f75330064301e2f055e017cc187f93bb8e92583b9e6e3999ae5c7ad1521ec77ee0ba476308242f9d6cad4d5ed385924c3806077f0d143bce70b9205b6d59f8f107f50133fd6fa87ddffaabab3a16156d353c28c5b3d92ba8643e4f06b866ea3f7ffc604a234750e5eba551e4787b340ddc90081b74a0d2e7df723e73b09e5cd38568993f171ecd6056aee45496c8d8fc458f8e2e721e359541cbb9dbcb1d801538cb84324fb090e960d53bc81c0020229e38e36c186cfaff1a1bc385e2d5338bd3bd9148730275b36f2dab198ee329b060159efb17ab00e40a940245d8ca47712921db546dde1100c29ff47dab5dd8cf10cca97565ed96901b0309841d7e3d746cde9fb1985cc276e4420636b145a2ee8720ad2fa2c256b995879b95e2e597f6d6fdeac1f2d349e3305322cd4b0df519abf958e874ed6d25bd4eb7418e9e45addd44e4a9e6cdf7b553cb48fc0c2d12683b2a83d2aeeaf03b6718abfaaffa59f38879a1b380668ade3e320ec2db4bdfa4409d09abf35fdd2ff501dafd55fbb2dd2ff2821a47ef41f644f4cc87d4a41576e2618a4da38302aa3ab38516e656b5a64f790a008d0200aede7267bea8bfe554e7d082d11d8ec186e314b070b5ea07b0ae722b4f2ab965bea7f906326710e0909eb1c0ba9959dd97a7b5331494d87b74c04587e4b78c420b8aa8ac99ad6c59d05d35a2e370b2126de5eb8901cc6ba879ee86de290bcf77e0bed67a74932794b3faaa187f5fd23a7932037f0a3d4517a1509eb981752492d13aa7d48d997fb71e65ee97db61d51ede49a215a158890bb60103f5502893a998be6ba800a07ecf9d8e5379b817621047933b3b314b7cb20abb6c30c6d490db451c7ee5c37942b5e886e0b43f21b9ff383ab80461e1a2c9c05f870111d023fc49dc425fae83e848eae43772902f83bdb1af645039e0cc961d6ce39588bd4b00e2a5e55ec02cfcc3ebe3783fbedab8ab64ed2d78202493ff6550471ba6196e73ad2b35f828eceaf8e340b78e9ff0fca04431e56cb7d0c3e366f938f0d7d966ba34458b0ac9dd6dd5c0034f73f902ed2183d7438377b72e81919ce168f29400a501ec8e47b2d1f3f69605ce91fc825b5c4ac7b267718cf28c81d485aaa7de1d0dee66f677b6ee9ad02d75099c653decac58e0f1e13f414304b972d6e17d3d1fc0ff30591b82aa785a3dbf24c59bc8efc57fdef33c7c2d051214d9d8f48a9a71ed77ee6a3a2a699bd3882a4a71ccb714c8a911388be571a2a7136b9c308c5c854f6ed7bb74bab77076ff3d48ba989384ee4dc996262fc9e1585d2638107df8615d66f335d147efb64373ad8668fb50e00eba86ef4c65842cbf246496e997fcf0546c043740035af30e05f69d69ae06334e249fc828d5c3d1d58f31f2e439fd6d415be63ac6c88385935bdb11f4e8cba2f0209314253a0e5001fb029cfff63e012c379d8269611eb3868055868087f3916990089d3cb9dd201db0fbc4768a03b4c36c2a58511932468ce65f6b2d5fdaf3b1e669dbb7bd3ed2525d6f81944512d79918b1b14e17e225b3b7cce0bbcc073eec2ca8aa47a260d4842ab5a0e29b163d83ed1392ede695ad64e44f530af80aa4af328f8fbad8e4ea11f71bfc8418a145ae47612f9e7a7d4d037c3249e5d3a1feded9798dbd78af07990aa8d607254194256c1c662479a881f8bb6e6ecc4cb92aacd919fef13e78b58ad44ef3a3e7e0145950706e762c1ac44e78249cd1a29c5dd1f635c596c8046cc432024079ac0eb4b7376d89ac60485300594ce3a2498a374e0ef103a6aa5e0c42df5cbdb6da478bcfece47ff79e79cc2abaa7678a2d6f5f26bf3702d3b07cc5cdf5f402b2b5801c7d5489ecdef4477d111a5040f65cf7ba8586509151890a0a1ff2a093b1b969a4d01fbb29de063138d5407ff358d7c98a8ec79a424d3080d5b9b4533f23dc80ad3fd9baef5d1895576a8af9479c65f772874b9f7b0379d9212f386af9fbe816179316290746a973b5178601b861c1054e9d8f38426edfbe8206765314c723f262fe0e32950f68f00a45582e6e72d0140614035f58e3527eba96d29363f966bda6a29b4453285ad94b3eb51ebfbf5afba8bd6a89fc54e8cfc1d8b91555282e27ebcba8b2aa7f4d397b6b017bbcd80d30fc0180cd93b97541a0b127925d609baae79e4243c34b9660a17ff066c4b906ba554655dc30e47cca38f18e5190ff861dc3cb2bf777052da48bcac3925db0b9e9ce401c1cb2c2a1c51d0c420d357af3c939166cc01759d50f9e65fb04957c7c5c5ac46433e064ec563233d8dc7eea97d9f5c12b4a03a46ce306550f3bd4c7166dea3d4876f7a83b39b207654e6fd2a01abadfb2a3f19436c065088ea49859d5dbc8fdfcf1e0c4857cc512870795fe74989f674f40875a5104713ad3560ee1ce61df8fa6b97937703c7434fbf81009890d98f327954c3f7800e39fe5269e5b030b6cd8312bff2c0c44eb435ab1a3d861a0aaf01e992776d135d33e0b02fb28ca2d06c545366f222f55d28514d883e11aa255681ee7f20d61f73a5c20955ea919c557c1b7403401c34ceb76cde309ab991a13a5b6c3535dff4118b1162a22329be3efba01f08d3f0a9a68becd040c09bf6da005aea6c8120af5c6775925af7e042a1847087067c1b8e1527dc2b9ba6fc3082b47a9e42a7eddb980ecda3f66ab5af600b5f92d1db42032b1fb4a11ed8a4732ea3ec73454ebf0b84acd58a545ccc95b9f413044f47b9e40df58a8225651c379ace7b826cfe7f5bd5205917b606cc7fe266702918eb7da26be268e137aea627ba1b849961692ccc8a6fe2d42957601fc95e393a399c6199a2f1c0adf2187711b9e82023872a99fc25c7144131364ddb03d392961080734533c49911fc91e1a2d2b14f7db46d8133a9b2ab3824b53f620b659c877ca458c1c8d0cef838ec467bf67f2060b688fdb0f8ba0948da364a742d87e2eb2173b2cc019d1c76b53505a87ae986cab70db7885056a3989dd1a3abb6f21d3415f3e53aba7ed09b6864a00", 0x2000, &(0x7f0000000440)={&(0x7f00000003c0)={0x50, 0xffffffffffffffda, 0x418, {0x7, 0x29, 0x2, 0x1021a00, 0x5c9, 0x1, 0x3, 0x8, 0x0, 0x0, 0x1, 0x40}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) removexattr(&(0x7f0000000580)='./file0\x00', &(0x7f0000000640)=@known='system.posix_acl_default\x00') 0s ago: executing program 6 (id=1917): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x56c, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="09000000e700140000007e7bfbf788a83baa9900d6f18f8e9500a8a800008100", 0x20, 0x24040801, &(0x7f0000000300)={0x11, 0x8100, r2, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, 0x14) kernel console output (not intermixed with test programs): promiscuous mode [ 96.963955][ T5807] veth0_vlan: entered promiscuous mode [ 96.977860][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.994919][ T5798] veth0_macvtap: entered promiscuous mode [ 97.024540][ T5798] veth1_macvtap: entered promiscuous mode [ 97.029341][ T5807] veth1_vlan: entered promiscuous mode [ 97.115783][ T5796] veth0_macvtap: entered promiscuous mode [ 97.146436][ T5801] veth0_vlan: entered promiscuous mode [ 97.158444][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.178457][ T5796] veth1_macvtap: entered promiscuous mode [ 97.198475][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.228300][ T5801] veth1_vlan: entered promiscuous mode [ 97.267868][ T43] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.293429][ T43] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.302972][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.303043][ T43] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.332093][ T5807] veth0_macvtap: entered promiscuous mode [ 97.336571][ T3600] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.360569][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.364676][ T5807] veth1_macvtap: entered promiscuous mode [ 97.439536][ T3600] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.478375][ T3600] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.490872][ T3600] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.513692][ T3600] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.615438][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.646471][ T5801] veth0_macvtap: entered promiscuous mode [ 97.682489][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.745643][ T5801] veth1_macvtap: entered promiscuous mode [ 97.807291][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.807316][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.827853][ T1164] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.845730][ T1164] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.856337][ T1164] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.864283][ T1164] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.864478][ T5809] veth0_vlan: entered promiscuous mode [ 97.957049][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.999247][ T5809] veth1_vlan: entered promiscuous mode [ 98.020966][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.020985][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.048268][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.128060][ T2152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.128082][ T2152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.128335][ T1164] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.168250][ T1164] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.175736][ T1164] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.195073][ T1164] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.252566][ T2152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.252587][ T2152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.376510][ T1118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.376532][ T1118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.472807][ T5809] veth0_macvtap: entered promiscuous mode [ 98.581711][ T5809] veth1_macvtap: entered promiscuous mode [ 98.613299][ T2152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.613318][ T2152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.719811][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.719840][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.747156][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.795728][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.858622][ T1164] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.871595][ T1164] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.911717][ T1173] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.942510][ T1173] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.948542][ T1173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.948570][ T1173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.404435][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.404456][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.506362][ T5938] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 99.628255][ T1173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.628275][ T1173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.376864][ T5948] ======================================================= [ 100.376864][ T5948] WARNING: The mand mount option has been deprecated and [ 100.376864][ T5948] and is ignored by this kernel. Remove the mand [ 100.376864][ T5948] option from the mount to silence this warning. [ 100.376864][ T5948] ======================================================= [ 100.376951][ T5948] binder: Unknown parameter 'context' [ 100.672372][ T5951] evm: overlay not supported [ 102.239659][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 102.241327][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 102.300988][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 103.037989][ T5982] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 103.597063][ T5989] netlink: 80 bytes leftover after parsing attributes in process `syz.2.27'. [ 105.509653][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 106.459660][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 107.377100][ C1] vkms_vblank_simulate: vblank timer overrun [ 109.067897][ C1] vkms_vblank_simulate: vblank timer overrun [ 109.921873][ C1] vkms_vblank_simulate: vblank timer overrun [ 110.731082][ C1] vkms_vblank_simulate: vblank timer overrun [ 110.896086][ C1] vkms_vblank_simulate: vblank timer overrun [ 111.904660][ T6107] bridge0: port 3(erspan0) entered blocking state [ 111.904854][ T6107] bridge0: port 3(erspan0) entered disabled state [ 111.906539][ T6107] erspan0: entered allmulticast mode [ 111.915610][ T6107] erspan0: entered promiscuous mode [ 111.916931][ T6107] bridge0: port 3(erspan0) entered blocking state [ 111.917080][ T6107] bridge0: port 3(erspan0) entered forwarding state [ 115.429695][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 115.759674][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 115.810186][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 115.810409][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 116.145888][ T6169] overlayfs: failed to resolve '/Jòv ‚Øz/@«FÄòæê7ÁðÀG¬çµÀ¨!®Ié«$‚@VÀ': -2 [ 116.369686][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 118.840712][ T37] audit: type=1800 audit(1763105784.971:2): pid=6199 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.105" name="cpuacct.usage_percpu" dev="overlay" ino=140 res=0 errno=0 [ 122.332839][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 123.445946][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.446035][ T10] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 123.446057][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.513130][ T10] usb 2-1: config 0 descriptor?? [ 123.540346][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 123.616341][ T6273] binder: 6270:6273 ioctl 4018620d 0 returned -22 [ 124.159077][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 124.180395][ T10] pwc: recv_control_msg error -32 req 02 val 2700 [ 124.181856][ T10] pwc: recv_control_msg error -32 req 02 val 2c00 [ 124.185100][ T10] pwc: recv_control_msg error -32 req 04 val 1000 [ 124.188758][ T10] pwc: recv_control_msg error -32 req 04 val 1300 [ 124.219810][ T10] pwc: recv_control_msg error -32 req 04 val 1400 [ 124.223648][ T10] pwc: recv_control_msg error -32 req 02 val 2000 [ 124.224729][ T10] pwc: recv_control_msg error -32 req 02 val 2100 [ 124.939890][ T10] pwc: recv_control_msg error -32 req 04 val 1500 [ 125.088333][ T10] pwc: recv_control_msg error -32 req 02 val 2500 [ 125.089370][ T10] pwc: recv_control_msg error -32 req 02 val 2400 [ 125.301988][ T10] pwc: recv_control_msg error -71 req 02 val 2900 [ 125.303241][ T10] pwc: recv_control_msg error -71 req 02 val 2800 [ 125.303927][ T10] pwc: recv_control_msg error -71 req 04 val 1100 [ 125.304400][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 125.338361][ T10] pwc: Registered as video103. [ 125.356783][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input5 [ 125.403158][ T10] usb 2-1: USB disconnect, device number 2 [ 125.421695][ T6297] netlink: 20 bytes leftover after parsing attributes in process `syz.3.146'. [ 125.487427][ T6302] netlink: 20 bytes leftover after parsing attributes in process `syz.3.146'. [ 125.942935][ T6315] netlink: 72 bytes leftover after parsing attributes in process `syz.1.153'. [ 126.372809][ T6326] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 129.979208][ T6370] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 130.854417][ T6394] binder: 6393:6394 ioctl c0306201 0 returned -14 [ 132.903866][ T6431] syz.0.202 (6431) used greatest stack depth: 17704 bytes left [ 132.958941][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.959031][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.190272][ T37] audit: type=1326 audit(1763105799.321:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6438 comm="syz.1.206" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f17abe7f6c9 code=0x0 [ 135.174006][ T6478] binder: Bad value for 'stats' [ 136.538159][ T6499] binder: Unknown parameter 'contextÌðÔð' [ 137.926175][ T37] audit: type=1326 audit(1763105804.071:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6505 comm="syz.2.233" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa3c6faf6c9 code=0x0 [ 139.862472][ T6530] overlayfs: failed to get inode (-116) [ 139.865367][ T6530] overlayfs: failed to get inode (-116) [ 142.983296][ T6580] overlayfs: failed to resolve './file1/file0': -2 [ 144.699525][ T6628] syz.0.285 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 150.733337][ T6708] netlink: 188 bytes leftover after parsing attributes in process `syz.0.315'. [ 156.598786][ T6777] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.346' sets config #1 [ 157.816778][ T6814] cgroup: none used incorrectly [ 160.168726][ T6834] syzkaller0: entered promiscuous mode [ 160.168751][ T6834] syzkaller0: entered allmulticast mode [ 160.779108][ T6847] process 'syz.1.373' launched './file0' with NULL argv: empty string added [ 162.549883][ T5876] IPVS: starting estimator thread 0... [ 162.640090][ T6861] IPVS: using max 13 ests per chain, 31200 per kthread [ 165.589025][ T37] audit: type=1326 audit(1763105831.721:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6909 comm="syz.1.399" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f17abe7f6c9 code=0x0 [ 170.407833][ T6955] netlink: 'syz.4.412': attribute type 4 has an invalid length. [ 170.847343][ T6962] netlink: 44 bytes leftover after parsing attributes in process `syz.3.416'. [ 170.847369][ T6962] netlink: 32 bytes leftover after parsing attributes in process `syz.3.416'. [ 171.290365][ T10] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 171.624354][ T10] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 171.624384][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 171.839828][ T10] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 171.839857][ T10] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 171.839876][ T10] usb 1-1: Product: syz [ 171.839888][ T10] usb 1-1: Manufacturer: syz [ 171.839901][ T10] usb 1-1: SerialNumber: syz [ 171.962063][ T10] usb 1-1: config 0 descriptor?? [ 172.053937][ T10] usb 1-1: selecting invalid altsetting 0 [ 173.481304][ T37] audit: type=1326 audit(1763105839.631:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6991 comm="syz.4.427" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9734aff6c9 code=0x0 [ 175.017830][ T10] usb 1-1: USB disconnect, device number 2 [ 175.262181][ T37] audit: type=1804 audit(1763105841.401:7): pid=7006 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.429" name="bus" dev="ramfs" ino=13997 res=1 errno=0 [ 175.346922][ T7009] binder: 7008:7009 ioctl c0306201 0 returned -14 [ 175.422274][ T7006] Invalid ELF header magic: != ELF [ 179.484717][ T7055] tipc: Failed to remove unknown binding: 66,1,1/0:433489753/433489755 [ 179.489514][ T7055] tipc: Failed to remove unknown binding: 66,1,1/0:433489753/433489755 [ 179.489551][ T7055] tipc: Failed to remove unknown binding: 66,1,1/0:433489753/433489755 [ 180.785570][ T7065] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 182.750198][ T37] audit: type=1326 audit(1763105848.871:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7082 comm="syz.2.460" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa3c6faf6c9 code=0x0 [ 183.671896][ T7093] macsec0: entered promiscuous mode [ 183.672129][ T7093] macsec0: entered allmulticast mode [ 183.672143][ T7093] veth1_macvtap: entered allmulticast mode [ 187.854478][ T7135] netlink: 'syz.4.475': attribute type 4 has an invalid length. [ 187.907470][ T7136] netlink: 'syz.4.475': attribute type 4 has an invalid length. [ 190.575254][ T37] audit: type=1326 audit(1763105856.721:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7167 comm="syz.4.488" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9734aff6c9 code=0x0 [ 190.718086][ T7172] tipc: Started in network mode [ 190.718115][ T7172] tipc: Node identity 0a250e00c56c, cluster identity 4711 [ 190.718904][ T7172] tipc: Enabled bearer , priority 0 [ 190.720674][ T7172] syzkaller0: entered promiscuous mode [ 190.720697][ T7172] syzkaller0: entered allmulticast mode [ 192.055626][ T7180] tipc: Resetting bearer [ 192.069521][ T7179] kthread_run failed with err -4 [ 192.069566][ T7179] netlink: 212 bytes leftover after parsing attributes in process `syz.2.490'. [ 192.228373][ T7170] tipc: Resetting bearer [ 192.429481][ T7170] tipc: Disabling bearer [ 192.626152][ T993] tipc: Node number set to 3477671424 [ 193.732203][ T7221] tipc: Started in network mode [ 193.732242][ T7221] tipc: Node identity fa34f7edf1a, cluster identity 4711 [ 193.732716][ T7221] tipc: Enabled bearer , priority 0 [ 193.737552][ T7221] syzkaller0: entered promiscuous mode [ 193.737574][ T7221] syzkaller0: entered allmulticast mode [ 193.927044][ T7222] tipc: Resetting bearer [ 194.006639][ T7220] tipc: Resetting bearer [ 194.314311][ T7220] tipc: Disabling bearer [ 194.402797][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.402872][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.804229][ T7295] tipc: Started in network mode [ 199.804258][ T7295] tipc: Node identity 7e46f1216e76, cluster identity 4711 [ 199.804465][ T7295] tipc: Enabled bearer , priority 0 [ 199.812183][ T7295] syzkaller0: entered promiscuous mode [ 199.812206][ T7295] syzkaller0: entered allmulticast mode [ 200.001412][ T7304] tipc: Resetting bearer [ 200.063632][ T7294] tipc: Resetting bearer [ 200.331368][ T7294] tipc: Disabling bearer [ 200.711888][ T7322] netlink: 24 bytes leftover after parsing attributes in process `syz.1.542'. [ 201.025973][ T37] audit: type=1107 audit(1763105867.131:10): pid=7323 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 210.627580][ T7415] binder: 7408:7415 ioctl c0306201 200000000540 returned -14 [ 211.672275][ T37] audit: type=1326 audit(1763105877.821:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7421 comm="syz.0.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eb2d7f6c9 code=0x7ffc0000 [ 211.673749][ T37] audit: type=1326 audit(1763105877.821:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7421 comm="syz.0.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eb2d7f6c9 code=0x7ffc0000 [ 211.673963][ T37] audit: type=1326 audit(1763105877.821:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7421 comm="syz.0.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eb2d7f6c9 code=0x7ffc0000 [ 211.674221][ T37] audit: type=1326 audit(1763105877.821:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7421 comm="syz.0.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f3eb2d7f6c9 code=0x7ffc0000 [ 211.748633][ T37] audit: type=1326 audit(1763105877.891:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7421 comm="syz.0.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eb2d7f6c9 code=0x7ffc0000 [ 211.748688][ T37] audit: type=1326 audit(1763105877.891:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7421 comm="syz.0.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eb2d7f6c9 code=0x7ffc0000 [ 211.748728][ T37] audit: type=1326 audit(1763105877.821:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7421 comm="syz.0.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eb2d7f6c9 code=0x7ffc0000 [ 211.748768][ T37] audit: type=1326 audit(1763105877.891:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7421 comm="syz.0.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f3eb2d7f6c9 code=0x7ffc0000 [ 211.748833][ T37] audit: type=1326 audit(1763105877.891:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7421 comm="syz.0.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eb2d7f6c9 code=0x7ffc0000 [ 211.755741][ T37] audit: type=1326 audit(1763105877.901:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7421 comm="syz.0.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eb2d7f6c9 code=0x7ffc0000 [ 212.072201][ T5810] Bluetooth: hci1: command 0x0406 tx timeout [ 212.072249][ T5810] Bluetooth: hci3: command 0x0406 tx timeout [ 212.072274][ T5810] Bluetooth: hci2: command 0x0406 tx timeout [ 212.072300][ T5810] Bluetooth: hci0: command 0x0406 tx timeout [ 212.615137][ T7436] netlink: 'syz.0.585': attribute type 4 has an invalid length. [ 212.670047][ T7439] netlink: 'syz.0.585': attribute type 4 has an invalid length. [ 213.475689][ C1] vkms_vblank_simulate: vblank timer overrun [ 214.328898][ C1] vkms_vblank_simulate: vblank timer overrun [ 214.675532][ C1] vkms_vblank_simulate: vblank timer overrun [ 214.727993][ C1] vkms_vblank_simulate: vblank timer overrun [ 215.983600][ C1] vkms_vblank_simulate: vblank timer overrun [ 216.347831][ C1] vkms_vblank_simulate: vblank timer overrun [ 216.513151][ C1] vkms_vblank_simulate: vblank timer overrun [ 216.529918][ T7481] syz.2.600 (7481) used greatest stack depth: 16248 bytes left [ 216.762753][ T7490] netlink: 288 bytes leftover after parsing attributes in process `syz.0.604'. [ 217.511527][ C1] vkms_vblank_simulate: vblank timer overrun [ 217.912753][ T7515] input: syz0 as /devices/virtual/input/input8 [ 218.675746][ T7525] capability: warning: `syz.1.619' uses 32-bit capabilities (legacy support in use) [ 223.861059][ T7578] Zero length message leads to an empty skb [ 226.565236][ T7601] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20004 [ 227.953242][ C1] vkms_vblank_simulate: vblank timer overrun [ 228.582517][ C1] vkms_vblank_simulate: vblank timer overrun [ 228.666239][ C1] vkms_vblank_simulate: vblank timer overrun [ 228.787403][ C1] vkms_vblank_simulate: vblank timer overrun [ 229.628145][ T7629] tipc: Enabled bearer , priority 0 [ 229.632619][ T7629] syzkaller0: entered promiscuous mode [ 229.632642][ T7629] syzkaller0: entered allmulticast mode [ 230.059747][ T5802] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 230.241436][ C1] vkms_vblank_simulate: vblank timer overrun [ 230.264552][ T5802] usb 3-1: Using ep0 maxpacket: 32 [ 230.604453][ C1] vkms_vblank_simulate: vblank timer overrun [ 230.722413][ T10] tipc: Node number set to 194312173 [ 230.861272][ C1] vkms_vblank_simulate: vblank timer overrun [ 230.862693][ T5802] usb 3-1: config 0 has an invalid interface number: 230 but max is 0 [ 230.862718][ T5802] usb 3-1: config 0 has no interface number 0 [ 230.862752][ T5802] usb 3-1: config 0 interface 230 has no altsetting 0 [ 230.915301][ T5802] usb 3-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 230.915330][ T5802] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.915349][ T5802] usb 3-1: Product: syz [ 230.915363][ T5802] usb 3-1: Manufacturer: syz [ 230.915377][ T5802] usb 3-1: SerialNumber: syz [ 230.929091][ T5802] usb 3-1: config 0 descriptor?? [ 231.027888][ T5802] ums-usbat 3-1:0.230: USB Mass Storage device detected [ 231.095916][ T5802] ums-usbat 3-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 231.184623][ T7629] tipc: Resetting bearer [ 231.317791][ T7627] tipc: Resetting bearer [ 231.871463][ C1] vkms_vblank_simulate: vblank timer overrun [ 231.935509][ C1] vkms_vblank_simulate: vblank timer overrun [ 232.021986][ C1] vkms_vblank_simulate: vblank timer overrun [ 232.156479][ T5802] usb 3-1: USB disconnect, device number 2 [ 232.321170][ T7627] tipc: Disabling bearer [ 232.392512][ C1] vkms_vblank_simulate: vblank timer overrun [ 232.744277][ C1] vkms_vblank_simulate: vblank timer overrun [ 233.436881][ T5920] udevd[5920]: setting mode of /dev/gsmtty7 to 020600 failed: No such file or directory [ 233.437124][ T5920] udevd[5920]: setting owner of /dev/gsmtty7 to uid=0, gid=0 failed: No such file or directory [ 237.343940][ T7690] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 237.489911][ T7693] capability: warning: `syz.1.674' uses deprecated v2 capabilities in a way that may be insecure [ 239.552779][ T7716] netlink: 188 bytes leftover after parsing attributes in process `syz.2.681'. [ 241.329881][ C1] vkms_vblank_simulate: vblank timer overrun [ 241.392926][ C1] vkms_vblank_simulate: vblank timer overrun [ 242.063063][ C1] vkms_vblank_simulate: vblank timer overrun [ 242.551758][ C1] vkms_vblank_simulate: vblank timer overrun [ 242.586659][ C1] vkms_vblank_simulate: vblank timer overrun [ 243.123129][ C1] vkms_vblank_simulate: vblank timer overrun [ 243.586789][ C1] vkms_vblank_simulate: vblank timer overrun [ 243.964741][ C1] vkms_vblank_simulate: vblank timer overrun [ 244.861795][ C1] vkms_vblank_simulate: vblank timer overrun [ 245.471817][ T37] kauditd_printk_skb: 32 callbacks suppressed [ 245.471830][ T37] audit: type=1800 audit(1763105911.611:53): pid=7783 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.704" name="bus" dev="tmpfs" ino=980 res=0 errno=0 [ 245.576419][ C1] vkms_vblank_simulate: vblank timer overrun [ 246.296647][ C1] vkms_vblank_simulate: vblank timer overrun [ 255.481115][ T7867] netlink: 8 bytes leftover after parsing attributes in process `syz.1.732'. [ 255.840716][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.840787][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.239168][ T7918] netlink: 4 bytes leftover after parsing attributes in process `syz.4.750'. [ 262.249941][ T7918] netlink: 4 bytes leftover after parsing attributes in process `syz.4.750'. [ 263.440986][ T7927] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 263.441048][ T7927] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 263.597231][ T7927] comedi comedi3: 8255: I/O port conflict (0x3fd,4) [ 263.597296][ T7927] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 263.597451][ T7927] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 263.597501][ T7927] comedi comedi3: 8255: I/O port conflict (0x10005,4) [ 263.597550][ T7927] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 263.597681][ T7927] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 263.597734][ T7927] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 263.597784][ T7927] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 263.597877][ T7927] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 263.597929][ T7927] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 263.597980][ T7927] comedi comedi3: 8255: I/O port conflict (0x8000007,4) [ 263.598068][ T7927] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 263.740159][ T7927] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 265.139759][ T7933] binder: BINDER_SET_CONTEXT_MGR already set [ 265.139773][ T7933] binder: 7932:7933 ioctl 4018620d 200000000040 returned -16 [ 266.430828][ T7953] 9pnet_fd: Insufficient options for proto=fd [ 274.542740][ T8006] netlink: 'syz.3.777': attribute type 2 has an invalid length. [ 274.542760][ T8006] netlink: 1 bytes leftover after parsing attributes in process `syz.3.777'. [ 274.733048][ T8010] overlayfs: overlapping lowerdir path [ 279.003686][ T8066] gfs2: error -5 reading superblock [ 287.949654][ T5876] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 288.121594][ T5876] usb 2-1: Using ep0 maxpacket: 8 [ 288.569515][ T5876] usb 2-1: unable to get BOS descriptor or descriptor too short [ 288.724081][ T5876] usb 2-1: config 1 interface 0 altsetting 4 bulk endpoint 0x82 has invalid maxpacket 32 [ 288.724113][ T5876] usb 2-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 288.724139][ T5876] usb 2-1: config 1 interface 0 has no altsetting 0 [ 288.764016][ T5876] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 288.764045][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.764064][ T5876] usb 2-1: Product: syz [ 288.764077][ T5876] usb 2-1: SerialNumber: syz [ 288.778701][ T8127] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 290.263221][ T5876] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 290.296158][ T5876] usb 2-1: USB disconnect, device number 3 [ 293.356879][ C0] vkms_vblank_simulate: vblank timer overrun [ 293.505243][ C0] vkms_vblank_simulate: vblank timer overrun [ 294.146927][ C0] vkms_vblank_simulate: vblank timer overrun [ 294.680915][ C0] vkms_vblank_simulate: vblank timer overrun [ 294.871765][ C0] vkms_vblank_simulate: vblank timer overrun [ 295.349803][ T5929] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 295.542274][ T5929] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 295.542299][ T5929] usb 5-1: config 0 has no interfaces? [ 295.542328][ T5929] usb 5-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=40.85 [ 295.542348][ T5929] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.707577][ T5929] usb 5-1: config 0 descriptor?? [ 296.520118][ C0] vkms_vblank_simulate: vblank timer overrun [ 296.578244][ C0] vkms_vblank_simulate: vblank timer overrun [ 296.888247][ C0] vkms_vblank_simulate: vblank timer overrun [ 297.283659][ T8190] netlink: 4 bytes leftover after parsing attributes in process `syz.2.835'. [ 297.417263][ T5876] usb 5-1: USB disconnect, device number 2 [ 301.980555][ T8210] Bluetooth: MGMT ver 1.23 [ 307.049846][ T5929] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 307.199940][ T5929] usb 1-1: Using ep0 maxpacket: 8 [ 307.202372][ T5929] usb 1-1: config 0 interface 0 has no altsetting 0 [ 307.202420][ T5929] usb 1-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 307.202433][ T5929] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.240540][ T5929] usb 1-1: config 0 descriptor?? [ 310.257796][ T5929] usbhid 1-1:0.0: can't add hid device: -71 [ 310.263149][ T5929] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 310.362924][ T5929] usb 1-1: USB disconnect, device number 3 [ 317.696995][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.697167][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.818864][ T5815] Bluetooth: hci4: command 0x0406 tx timeout [ 327.227420][ T8339] hub 1-0:1.0: USB hub found [ 327.364072][ T8339] hub 1-0:1.0: 1 port detected [ 330.066363][ T8351] tipc: Enabling of bearer rejected, failed to enable media [ 330.612665][ T5815] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 330.633418][ T5815] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 330.634896][ T5815] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 330.636101][ T5815] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 330.636888][ T5815] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 330.892545][ T8361] gfs2: gfs2 mount does not exist [ 333.527633][ T5815] Bluetooth: hci5: command tx timeout [ 333.675666][ C0] vkms_vblank_simulate: vblank timer overrun [ 334.862336][ C0] vkms_vblank_simulate: vblank timer overrun [ 334.897510][ T5800] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 334.908287][ T5800] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 334.909507][ T5800] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 334.910687][ T5800] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 334.911442][ T5800] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 335.077973][ C0] vkms_vblank_simulate: vblank timer overrun [ 335.287214][ C0] vkms_vblank_simulate: vblank timer overrun [ 335.389797][ C0] vkms_vblank_simulate: vblank timer overrun [ 336.373655][ C0] vkms_vblank_simulate: vblank timer overrun [ 336.459821][ T5800] Bluetooth: hci5: command tx timeout [ 336.691209][ T8375] vlan2: entered allmulticast mode [ 336.691223][ T8375] hsr_slave_1: entered allmulticast mode [ 336.964963][ T5800] Bluetooth: hci3: command tx timeout [ 339.368904][ T5800] Bluetooth: hci5: command tx timeout [ 339.373871][ T5800] Bluetooth: hci3: command tx timeout [ 339.578318][ T37] audit: type=1326 audit(2000000062.760:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8407 comm="syz.0.889" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3eb2d7f6c9 code=0x0 [ 339.778190][ T8411] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 339.778987][ T8411] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 339.786644][ T8411] vhci_hcd vhci_hcd.0: Device attached [ 340.089902][ T5863] usb 33-1: new high-speed USB device number 2 using vhci_hcd [ 340.229542][ T8392] tipc: Enabling of bearer rejected, failed to enable media [ 340.444032][ T8412] vhci_hcd: connection reset by peer [ 340.527584][ T3600] vhci_hcd: stop threads [ 340.528579][ T3600] vhci_hcd: release socket [ 340.608960][ T3600] vhci_hcd: disconnect device [ 341.430157][ T5800] Bluetooth: hci3: command tx timeout [ 341.430191][ T5800] Bluetooth: hci5: command tx timeout [ 341.484331][ C0] vkms_vblank_simulate: vblank timer overrun [ 342.204319][ C0] vkms_vblank_simulate: vblank timer overrun [ 342.265194][ T43] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.359774][ T990] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 343.244727][ C0] vkms_vblank_simulate: vblank timer overrun [ 343.374433][ T990] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 343.374462][ T990] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.374480][ T990] usb 4-1: Product: syz [ 343.374494][ T990] usb 4-1: Manufacturer: syz [ 343.374507][ T990] usb 4-1: SerialNumber: syz [ 343.425805][ T990] usb 4-1: config 0 descriptor?? [ 343.510663][ T5815] Bluetooth: hci3: command tx timeout [ 343.670835][ C0] vkms_vblank_simulate: vblank timer overrun [ 343.747483][ T43] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.764864][ C0] vkms_vblank_simulate: vblank timer overrun [ 344.906529][ T8358] chnl_net:caif_netlink_parms(): no params data found [ 344.919724][ T990] airspy 4-1:0.0: usb_control_msg() failed -110 request 09 [ 344.919756][ T990] airspy 4-1:0.0: Could not detect board [ 344.919864][ T990] airspy 4-1:0.0: probe with driver airspy failed with error -110 [ 344.926416][ T990] usb 4-1: USB disconnect, device number 2 [ 345.109508][ T8435] netlink: 92 bytes leftover after parsing attributes in process `syz.0.895'. [ 345.229414][ C0] vkms_vblank_simulate: vblank timer overrun [ 345.319824][ T5863] vhci_hcd: vhci_device speed not set [ 345.461993][ C0] vkms_vblank_simulate: vblank timer overrun [ 346.668795][ T43] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.552970][ T43] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.168684][ T8358] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.168857][ T8358] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.169052][ T8358] bridge_slave_0: entered allmulticast mode [ 352.197107][ T8358] bridge_slave_0: entered promiscuous mode [ 352.599878][ T8358] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.603323][ T8358] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.621216][ T8358] bridge_slave_1: entered allmulticast mode [ 352.636953][ T8358] bridge_slave_1: entered promiscuous mode [ 353.215138][ T8358] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 353.394207][ T8358] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 353.954709][ T8358] team0: Port device team_slave_0 added [ 353.955539][ T8380] chnl_net:caif_netlink_parms(): no params data found [ 354.147347][ T8358] team0: Port device team_slave_1 added [ 354.185298][ T43] bridge_slave_1: left allmulticast mode [ 354.185519][ T43] bridge_slave_1: left promiscuous mode [ 354.188689][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.521719][ T43] bridge_slave_0: left allmulticast mode [ 354.521746][ T43] bridge_slave_0: left promiscuous mode [ 354.521989][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.480483][ T37] audit: type=1326 audit(2000000078.670:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8503 comm="syz.0.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eb2d7f6c9 code=0x7ffc0000 [ 355.482249][ T37] audit: type=1326 audit(2000000078.670:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8503 comm="syz.0.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eb2d7f6c9 code=0x7ffc0000 [ 355.482745][ T37] audit: type=1326 audit(2000000078.670:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8503 comm="syz.0.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f3eb2d7f6c9 code=0x7ffc0000 [ 355.604421][ T37] audit: type=1326 audit(2000000078.670:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8503 comm="syz.0.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eb2d7f6c9 code=0x7ffc0000 [ 355.604471][ T37] audit: type=1326 audit(2000000078.790:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8503 comm="syz.0.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f3eb2d7f6c9 code=0x7ffc0000 [ 355.604510][ T37] audit: type=1326 audit(2000000078.790:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8503 comm="syz.0.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eb2d7f6c9 code=0x7ffc0000 [ 355.604544][ T37] audit: type=1326 audit(2000000078.790:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8503 comm="syz.0.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eb2d7f6c9 code=0x7ffc0000 [ 355.728890][ T37] audit: type=1326 audit(2000000078.910:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8503 comm="syz.0.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3eb2d7df10 code=0x7ffc0000 [ 355.730722][ T37] audit: type=1326 audit(2000000078.920:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8503 comm="syz.0.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eb2d7f6c9 code=0x7ffc0000 [ 355.731502][ T37] audit: type=1326 audit(2000000078.920:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8503 comm="syz.0.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3eb2d7f6c9 code=0x7ffc0000 [ 361.025899][ T8534] autofs: Unknown parameter '/dev/sequencer' [ 366.701562][ T5815] Bluetooth: hci0: unexpected event for opcode 0x1003 [ 367.547460][ T8547] syz.0.922 (8547): attempted to duplicate a private mapping with mremap. This is not supported. [ 370.713070][ T5815] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 370.713219][ T5815] Bluetooth: hci0: Injecting HCI hardware error event [ 370.717819][ T5800] Bluetooth: hci0: hardware error 0x00 [ 370.919982][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 370.985622][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 371.030277][ T43] bond0 (unregistering): Released all slaves [ 372.378904][ C0] vkms_vblank_simulate: vblank timer overrun [ 372.612517][ C0] vkms_vblank_simulate: vblank timer overrun [ 372.638166][ C0] vkms_vblank_simulate: vblank timer overrun [ 373.002912][ T5800] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 373.102360][ C0] vkms_vblank_simulate: vblank timer overrun [ 373.200980][ T5876] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 373.434299][ T5876] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 373.434335][ T5876] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 373.434348][ T5876] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 373.434359][ T5876] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 373.434382][ T5876] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 373.434393][ T5876] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.601220][ T5876] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 373.606782][ T5876] usb 4-1: invalid MIDI out EP 0 [ 373.787462][ C0] vkms_vblank_simulate: vblank timer overrun [ 373.928413][ C0] vkms_vblank_simulate: vblank timer overrun [ 374.486839][ C0] vkms_vblank_simulate: vblank timer overrun [ 374.764481][ C0] vkms_vblank_simulate: vblank timer overrun [ 374.941663][ T8358] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.941674][ T8358] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.941687][ T8358] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 375.185943][ C0] vkms_vblank_simulate: vblank timer overrun [ 375.980301][ C0] vkms_vblank_simulate: vblank timer overrun [ 376.180886][ C0] vkms_vblank_simulate: vblank timer overrun [ 376.295472][ C0] vkms_vblank_simulate: vblank timer overrun [ 377.197814][ T8358] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 377.197831][ T8358] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 377.197857][ T8358] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 378.836964][ T5876] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 378.871188][ T5876] usb 4-1: USB disconnect, device number 3 [ 378.894170][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.894239][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.355118][ T8626] 9pnet_virtio: no channels available for device [ 383.619382][ T8644] /dev/nullb0: Can't lookup blockdev [ 384.601639][ T8380] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.601773][ T8380] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.601993][ T8380] bridge_slave_0: entered allmulticast mode [ 384.638155][ T8380] bridge_slave_0: entered promiscuous mode [ 384.691935][ T8358] hsr_slave_0: entered promiscuous mode [ 384.706046][ T8358] hsr_slave_1: entered promiscuous mode [ 384.709384][ T8358] debugfs: 'hsr0' already exists in 'hsr' [ 384.709409][ T8358] Cannot create hsr debugfs directory [ 385.187778][ T5863] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 385.773088][ T43] hsr_slave_0: left promiscuous mode [ 385.825258][ T43] hsr_slave_1: left promiscuous mode [ 385.826294][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 385.827237][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 385.880796][ T5863] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 385.880820][ T5863] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.880830][ T5863] usb 4-1: Product: syz [ 385.880837][ T5863] usb 4-1: Manufacturer: syz [ 385.880850][ T5863] usb 4-1: SerialNumber: syz [ 385.931931][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 385.931957][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 386.038583][ T43] veth1_macvtap: left promiscuous mode [ 386.038886][ T43] veth0_macvtap: left promiscuous mode [ 386.039187][ T43] veth1_vlan: left promiscuous mode [ 386.039519][ T43] veth0_vlan: left promiscuous mode [ 386.370787][ T5815] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 386.381825][ T5815] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 386.383113][ T5815] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 386.386857][ T5815] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 386.387720][ T5815] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 388.164291][ T43] team0 (unregistering): Port device team_slave_1 removed [ 388.334051][ T43] team0 (unregistering): Port device team_slave_0 removed [ 388.472085][ T5815] Bluetooth: hci4: command tx timeout [ 390.473709][ T8380] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.473847][ T8380] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.474080][ T8380] bridge_slave_1: entered allmulticast mode [ 390.482389][ T8380] bridge_slave_1: entered promiscuous mode [ 390.537303][ T5815] Bluetooth: hci4: command tx timeout [ 390.562353][ T8650] @: renamed from vlan0 (while UP) [ 390.946708][ T5863] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 390.946768][ T5863] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 390.946787][ T5863] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 391.096047][ T5863] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 392.621323][ T5863] usb 4-1: USB disconnect, device number 4 [ 392.622493][ T5815] Bluetooth: hci4: command tx timeout [ 394.395173][ T5800] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 394.405054][ T5800] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 394.406378][ T5800] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 394.407702][ T5800] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 394.411084][ T5800] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 394.796076][ T5815] Bluetooth: hci4: command tx timeout [ 396.929238][ T5800] Bluetooth: hci6: command tx timeout [ 397.287005][ T8707] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 397.287043][ T8707] overlayfs: failed to set xattr on upper [ 397.287050][ T8707] overlayfs: ...falling back to redirect_dir=nofollow. [ 397.287057][ T8707] overlayfs: ...falling back to index=off. [ 397.287062][ T8707] overlayfs: ...falling back to uuid=null. [ 397.354841][ T8711] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 398.004366][ T8722] 9pnet_virtio: no channels available for device syz [ 401.239258][ T5800] Bluetooth: hci6: command tx timeout [ 402.136537][ T5802] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 402.297862][ T5802] usb 1-1: Using ep0 maxpacket: 16 [ 402.300142][ T5802] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 402.300223][ T5802] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 402.300248][ T5802] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 402.308000][ T5802] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 402.308026][ T5802] usb 1-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3 [ 402.308045][ T5802] usb 1-1: Product: syz [ 402.308058][ T5802] usb 1-1: Manufacturer: syz [ 402.308071][ T5802] usb 1-1: SerialNumber: syz [ 402.636987][ T5802] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 402.637044][ T5802] usb 1-1: MIDIStreaming interface descriptor not found [ 402.637659][ T8734] tipc: Enabled bearer , priority 0 [ 402.642643][ T8737] syzkaller0: entered promiscuous mode [ 402.642665][ T8737] syzkaller0: entered allmulticast mode [ 402.746303][ T5929] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 402.751312][ T8757] syz.2.965 uses obsolete (PF_INET,SOCK_PACKET) [ 402.881491][ T5802] usb 1-1: USB disconnect, device number 4 [ 402.897712][ T5929] usb 4-1: Using ep0 maxpacket: 32 [ 402.900398][ T5929] usb 4-1: config 0 has an invalid interface number: 230 but max is 0 [ 402.900412][ T5929] usb 4-1: config 0 has no interface number 0 [ 402.900436][ T5929] usb 4-1: config 0 interface 230 has no altsetting 0 [ 402.920793][ T5929] usb 4-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 402.920820][ T5929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.920838][ T5929] usb 4-1: Product: syz [ 402.920851][ T5929] usb 4-1: Manufacturer: syz [ 402.920868][ T5929] usb 4-1: SerialNumber: syz [ 403.056002][ T5929] usb 4-1: config 0 descriptor?? [ 403.173787][ T5929] ums-usbat 4-1:0.230: USB Mass Storage device detected [ 403.205227][ T5929] ums-usbat 4-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 403.249639][ T5800] Bluetooth: hci6: command tx timeout [ 403.754725][ T8730] tipc: Resetting bearer [ 403.774793][ T5802] usb 4-1: USB disconnect, device number 5 [ 403.789066][ T5929] tipc: Node number set to 271642913 [ 404.791526][ T8658] chnl_net:caif_netlink_parms(): no params data found [ 405.022126][ T8749] delete_channel: no stack [ 405.125040][ T8729] tipc: Resetting bearer [ 405.295837][ T8729] tipc: Disabling bearer [ 405.324913][ T5800] Bluetooth: hci6: command tx timeout [ 405.664075][ T8684] chnl_net:caif_netlink_parms(): no params data found [ 405.676471][ T8786] netlink: 8 bytes leftover after parsing attributes in process `syz.0.969'. [ 405.915217][ T8796] netlink: 'syz.2.972': attribute type 10 has an invalid length. [ 406.312217][ T8796] 8021q: adding VLAN 0 to HW filter on device team0 [ 406.324231][ T8796] bond0: (slave team0): Enslaving as an active interface with an up link [ 406.511810][ T8804] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 407.505117][ T43] bridge_slave_1: left allmulticast mode [ 407.505148][ T43] bridge_slave_1: left promiscuous mode [ 407.505409][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.514775][ T43] bridge_slave_0: left allmulticast mode [ 408.514825][ T43] bridge_slave_0: left promiscuous mode [ 408.515829][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.813258][ C1] vkms_vblank_simulate: vblank timer overrun [ 408.848330][ C1] vkms_vblank_simulate: vblank timer overrun [ 408.870752][ T43] bridge_slave_1: left allmulticast mode [ 408.870781][ T43] bridge_slave_1: left promiscuous mode [ 408.871046][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.479344][ C1] vkms_vblank_simulate: vblank timer overrun [ 409.850301][ C1] vkms_vblank_simulate: vblank timer overrun [ 410.011216][ C1] vkms_vblank_simulate: vblank timer overrun [ 410.052653][ T993] IPVS: starting estimator thread 0... [ 410.054188][ T43] bridge_slave_0: left allmulticast mode [ 410.054211][ T43] bridge_slave_0: left promiscuous mode [ 410.054455][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.089454][ T8824] netlink: 'syz.2.982': attribute type 1 has an invalid length. [ 410.149639][ T8826] netlink: 220 bytes leftover after parsing attributes in process `syz.2.983'. [ 410.152580][ T8822] IPVS: using max 7 ests per chain, 16800 per kthread [ 410.326097][ C1] vkms_vblank_simulate: vblank timer overrun [ 410.813587][ C1] vkms_vblank_simulate: vblank timer overrun [ 411.365355][ T8839] netlink: 16 bytes leftover after parsing attributes in process `syz.2.988'. [ 411.435632][ C1] vkms_vblank_simulate: vblank timer overrun [ 411.647215][ C1] vkms_vblank_simulate: vblank timer overrun [ 412.355524][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 412.634525][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 412.824221][ T43] bond0 (unregistering): Released all slaves [ 412.978219][ T43] bond0 (unregistering): Released all slaves [ 413.278707][ C1] vkms_vblank_simulate: vblank timer overrun [ 413.368420][ T8658] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.369101][ T8658] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.369360][ T8658] bridge_slave_0: entered allmulticast mode [ 413.394358][ T8658] bridge_slave_0: entered promiscuous mode [ 413.486416][ T8658] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.499483][ T8658] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.499734][ T8658] bridge_slave_1: entered allmulticast mode [ 413.525334][ T8658] bridge_slave_1: entered promiscuous mode [ 414.077508][ T8901] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1013'. [ 414.223945][ T8909] netlink: 'syz.2.1017': attribute type 8 has an invalid length. [ 414.278045][ T8684] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.278170][ T8684] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.278374][ T8684] bridge_slave_0: entered allmulticast mode [ 414.291393][ T8684] bridge_slave_0: entered promiscuous mode [ 414.307209][ T8658] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 414.310924][ T8684] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.311051][ T8684] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.311240][ T8684] bridge_slave_1: entered allmulticast mode [ 414.319346][ T8684] bridge_slave_1: entered promiscuous mode [ 414.370379][ T43] hsr_slave_0: left promiscuous mode [ 414.410529][ T43] hsr_slave_1: left promiscuous mode [ 414.411539][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 414.472654][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 415.134694][ T43] team0 (unregistering): Port device team_slave_1 removed [ 415.260481][ T43] team0 (unregistering): Port device team_slave_0 removed [ 416.014070][ T8658] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 416.121273][ T8919] tipc: Enabling of bearer rejected, failed to enable media [ 416.293259][ T8954] binder: Bad value for 'stats' [ 416.620298][ T8684] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 416.641836][ T8658] team0: Port device team_slave_0 added [ 416.647217][ T8684] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 416.668879][ T8658] team0: Port device team_slave_1 added [ 417.168130][ T8973] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 417.518317][ T8684] team0: Port device team_slave_0 added [ 417.563637][ T8658] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 417.563652][ T8658] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 417.563671][ T8658] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 417.567411][ T8986] tipc: Enabled bearer , priority 0 [ 417.577542][ T8684] team0: Port device team_slave_1 added [ 417.580467][ T8658] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 417.580480][ T8658] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 417.580505][ T8658] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 417.788800][ T5802] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 417.898792][ T5863] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 417.962999][ T8991] syzkaller0: entered promiscuous mode [ 417.963026][ T8991] syzkaller0: entered allmulticast mode [ 417.969280][ T5802] usb 4-1: Using ep0 maxpacket: 16 [ 417.971354][ T5802] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 417.975921][ T5802] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 417.975948][ T5802] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.975966][ T5802] usb 4-1: Product: syz [ 417.975979][ T5802] usb 4-1: Manufacturer: syz [ 417.976001][ T5802] usb 4-1: SerialNumber: syz [ 418.010646][ T5802] usb 4-1: config 0 descriptor?? [ 418.053396][ T5802] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 418.057905][ T5802] usb 4-1: Detected FT232R [ 418.061991][ T5863] usb 1-1: Using ep0 maxpacket: 32 [ 418.067849][ T5863] usb 1-1: config 0 has an invalid interface number: 230 but max is 0 [ 418.067873][ T5863] usb 1-1: config 0 has no interface number 0 [ 418.067904][ T5863] usb 1-1: config 0 interface 230 has no altsetting 0 [ 418.071409][ T5863] usb 1-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 418.071435][ T5863] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.071453][ T5863] usb 1-1: Product: syz [ 418.071467][ T5863] usb 1-1: Manufacturer: syz [ 418.071480][ T5863] usb 1-1: SerialNumber: syz [ 418.077166][ T5863] usb 1-1: config 0 descriptor?? [ 418.095242][ T5863] ums-usbat 1-1:0.230: USB Mass Storage device detected [ 418.192469][ T5863] ums-usbat 1-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 418.223180][ T5802] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 418.223577][ T5802] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 418.224016][ T5802] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 418.253832][ T8684] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 418.253849][ T8684] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 418.253875][ T8684] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 418.283433][ T5802] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 418.344957][ T5802] usb 4-1: USB disconnect, device number 6 [ 418.384047][ T5802] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 418.385038][ T5802] ftdi_sio 4-1:0.0: device disconnected [ 418.615022][ T5863] usb 1-1: USB disconnect, device number 5 [ 418.725602][ T8684] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 418.725618][ T8684] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 418.725643][ T8684] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 418.799499][ T8981] tipc: Resetting bearer [ 418.947886][ T9012] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1053'. [ 419.079796][ T8981] tipc: Disabling bearer [ 419.252317][ T8658] hsr_slave_0: entered promiscuous mode [ 419.253569][ T8658] hsr_slave_1: entered promiscuous mode [ 419.254512][ T8658] debugfs: 'hsr0' already exists in 'hsr' [ 419.254535][ T8658] Cannot create hsr debugfs directory [ 419.850912][ T8684] hsr_slave_0: entered promiscuous mode [ 419.852306][ T8684] hsr_slave_1: entered promiscuous mode [ 419.853274][ T8684] debugfs: 'hsr0' already exists in 'hsr' [ 419.853297][ T8684] Cannot create hsr debugfs directory [ 420.561116][ T9048] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1066'. [ 421.556899][ T5891] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 421.705334][ T8658] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 421.715737][ T5891] usb 1-1: Using ep0 maxpacket: 32 [ 421.725497][ T5891] usb 1-1: config 0 has an invalid interface number: 230 but max is 0 [ 421.725523][ T5891] usb 1-1: config 0 has no interface number 0 [ 421.725556][ T5891] usb 1-1: config 0 interface 230 has no altsetting 0 [ 421.755382][ T5891] usb 1-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 421.755411][ T5891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.755430][ T5891] usb 1-1: Product: syz [ 421.755453][ T5891] usb 1-1: Manufacturer: syz [ 421.755465][ T5891] usb 1-1: SerialNumber: syz [ 421.803642][ T8658] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 421.830508][ T5891] usb 1-1: config 0 descriptor?? [ 421.844396][ T5891] ums-usbat 1-1:0.230: USB Mass Storage device detected [ 421.884208][ T5891] ums-usbat 1-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 421.888483][ T8658] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 422.144706][ T8658] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 422.148028][ T5891] usb 1-1: USB disconnect, device number 6 [ 422.212208][ T9078] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1076'. [ 422.782966][ T8684] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 422.812479][ T8684] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 422.882820][ T8684] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 422.938220][ T8684] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 423.431064][ T8658] 8021q: adding VLAN 0 to HW filter on device bond0 [ 423.630428][ T8684] 8021q: adding VLAN 0 to HW filter on device bond0 [ 423.646210][ T8658] 8021q: adding VLAN 0 to HW filter on device team0 [ 423.690181][ T9123] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 423.722834][ T8785] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.723435][ T8785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 423.775489][ T8785] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.777633][ T8785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 423.808830][ T8684] 8021q: adding VLAN 0 to HW filter on device team0 [ 423.887800][ T8005] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.888613][ T8005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 423.947791][ T2152] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.957627][ T2152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 424.723786][ T8658] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 424.926626][ T8684] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 425.437435][ T9173] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 425.678563][ T9182] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1105'. [ 425.711515][ T8658] veth0_vlan: entered promiscuous mode [ 425.743087][ T8658] veth1_vlan: entered promiscuous mode [ 425.828160][ T9186] netlink: 'syz.2.1106': attribute type 21 has an invalid length. [ 425.980415][ T8658] veth0_macvtap: entered promiscuous mode [ 426.017925][ T8658] veth1_macvtap: entered promiscuous mode [ 426.020413][ T8684] veth0_vlan: entered promiscuous mode [ 426.062459][ T8684] veth1_vlan: entered promiscuous mode [ 426.094664][ T993] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 426.122239][ T8658] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 426.137590][ T9191] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 426.183994][ T8658] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 426.238274][ T2152] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.240147][ T2152] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.245099][ T2152] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.246253][ T2152] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.254492][ T993] usb 4-1: Using ep0 maxpacket: 32 [ 426.260624][ T993] usb 4-1: config 0 has an invalid interface number: 230 but max is 0 [ 426.260649][ T993] usb 4-1: config 0 has no interface number 0 [ 426.260680][ T993] usb 4-1: config 0 interface 230 has no altsetting 0 [ 426.289328][ T993] usb 4-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 426.289355][ T993] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.289373][ T993] usb 4-1: Product: syz [ 426.289386][ T993] usb 4-1: Manufacturer: syz [ 426.289399][ T993] usb 4-1: SerialNumber: syz [ 426.331621][ T993] usb 4-1: config 0 descriptor?? [ 426.339359][ T993] ums-usbat 4-1:0.230: USB Mass Storage device detected [ 426.341146][ T8684] veth0_macvtap: entered promiscuous mode [ 426.366821][ T993] ums-usbat 4-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 426.415879][ T8684] veth1_macvtap: entered promiscuous mode [ 426.462467][ C0] vkms_vblank_simulate: vblank timer overrun [ 426.558855][ T5883] usb 4-1: USB disconnect, device number 7 [ 427.005065][ T8684] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 427.228956][ T8684] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 427.237616][ T2152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.237635][ T2152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.254023][ T7857] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.254191][ T7857] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.254265][ T7857] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.254298][ T7857] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.516701][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.516722][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.936196][ T8785] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.936217][ T8785] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 428.107933][ T2152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.107952][ T2152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.514276][ T9245] warning: `syz.3.1130' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 429.820212][ T9257] xt_time: unknown flags 0xf4 [ 430.903345][ T37] kauditd_printk_skb: 21 callbacks suppressed [ 430.903362][ T37] audit: type=1326 audit(2000000154.117:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9306 comm="syz.3.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02ff3df6c9 code=0x7ffc0000 [ 430.907342][ T37] audit: type=1326 audit(2000000154.127:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9306 comm="syz.3.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02ff3df6c9 code=0x7ffc0000 [ 430.968594][ T37] audit: type=1326 audit(2000000154.127:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9306 comm="syz.3.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02ff3df6c9 code=0x7ffc0000 [ 430.969912][ T37] audit: type=1326 audit(2000000154.187:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9306 comm="syz.3.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f02ff3df6c9 code=0x7ffc0000 [ 430.969957][ T37] audit: type=1326 audit(2000000154.187:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9306 comm="syz.3.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02ff3df6c9 code=0x7ffc0000 [ 430.970006][ T37] audit: type=1326 audit(2000000154.187:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9306 comm="syz.3.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02ff3df6c9 code=0x7ffc0000 [ 430.970045][ T37] audit: type=1326 audit(2000000154.187:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9306 comm="syz.3.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02ff3df6c9 code=0x7ffc0000 [ 430.970084][ T37] audit: type=1326 audit(2000000154.187:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9306 comm="syz.3.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02ff3df6c9 code=0x7ffc0000 [ 430.993073][ T37] audit: type=1326 audit(2000000154.217:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9306 comm="syz.3.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02ff3df6c9 code=0x7ffc0000 [ 430.993124][ T37] audit: type=1326 audit(2000000154.187:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9306 comm="syz.3.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7f02ff3df6c9 code=0x7ffc0000 [ 432.032898][ T5890] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 432.143969][ T9349] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 432.144223][ T9349] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 432.144711][ T9349] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 432.144830][ T9349] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 432.145180][ T9349] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 432.145297][ T9349] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 432.145639][ T9349] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 432.146180][ T9349] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 432.146542][ T9349] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 432.146661][ T9349] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 432.243589][ T5890] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 432.243646][ T5890] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.247137][ T5890] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 432.247163][ T5890] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 432.247181][ T5890] usb 1-1: Manufacturer: syz [ 432.303169][ T5890] usb 1-1: config 0 descriptor?? [ 432.451328][ T5890] rc_core: IR keymap rc-hauppauge not found [ 432.451347][ T5890] Registered IR keymap rc-empty [ 432.454291][ T5890] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 432.491126][ T5890] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input11 [ 432.587702][ T5883] usb 1-1: USB disconnect, device number 7 [ 433.904838][ T9408] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1203'. [ 434.168990][ T9417] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1209'. [ 436.062450][ T5863] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 436.219673][ T5863] usb 4-1: Using ep0 maxpacket: 32 [ 436.222191][ T5863] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 436.222215][ T5863] usb 4-1: config 0 has no interface number 0 [ 436.230587][ T5863] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 436.230613][ T5863] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.230631][ T5863] usb 4-1: Product: syz [ 436.230644][ T5863] usb 4-1: Manufacturer: syz [ 436.230657][ T5863] usb 4-1: SerialNumber: syz [ 436.251605][ T5863] usb 4-1: config 0 descriptor?? [ 436.299638][ T5863] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 436.566409][ T5863] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 436.699550][ T5863] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 436.900741][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 436.901476][ T5863] usb 4-1: USB disconnect, device number 8 [ 437.028721][ T5863] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 437.108357][ T5863] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 437.120706][ T5863] quatech2 4-1:0.51: device disconnected [ 437.675182][ T37] kauditd_printk_skb: 3 callbacks suppressed [ 437.675199][ T37] audit: type=1326 audit(2000000160.901:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9545 comm="syz.6.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f449f3ff6c9 code=0x7ffc0000 [ 437.675245][ T37] audit: type=1326 audit(2000000160.901:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9545 comm="syz.6.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f449f3ff6c9 code=0x7ffc0000 [ 437.687682][ T37] audit: type=1326 audit(2000000160.911:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9545 comm="syz.6.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f449f3ff6c9 code=0x7ffc0000 [ 437.687734][ T37] audit: type=1326 audit(2000000160.911:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9545 comm="syz.6.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f449f3ff6c9 code=0x7ffc0000 [ 437.687774][ T37] audit: type=1326 audit(2000000160.911:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9545 comm="syz.6.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f449f3ff6c9 code=0x7ffc0000 [ 437.688029][ T37] audit: type=1326 audit(2000000160.911:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9545 comm="syz.6.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f449f3ff6c9 code=0x7ffc0000 [ 437.688313][ T37] audit: type=1326 audit(2000000160.911:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9545 comm="syz.6.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f449f3ff6c9 code=0x7ffc0000 [ 437.688555][ T37] audit: type=1326 audit(2000000160.911:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9545 comm="syz.6.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f449f3ff6c9 code=0x7ffc0000 [ 439.217966][ T10] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 439.302097][ T9604] fuse: Bad value for 'user_id' [ 439.302117][ T9604] fuse: Bad value for 'user_id' [ 439.381255][ T10] usb 4-1: too many endpoints for config 0 interface 0 altsetting 1: 189, using maximum allowed: 30 [ 439.381298][ T10] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 189 [ 439.381324][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 439.381354][ T10] usb 4-1: New USB device found, idVendor=056a, idProduct=00b9, bcdDevice= 0.00 [ 439.381380][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.402040][ T10] usb 4-1: config 0 descriptor?? [ 439.658860][ T37] audit: type=1326 audit(2000000162.882:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9614 comm="syz.6.1286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f449f3ff6c9 code=0x7ffc0000 [ 439.666569][ T37] audit: type=1326 audit(2000000162.892:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9614 comm="syz.6.1286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f449f3ff6c9 code=0x7ffc0000 [ 439.857715][ T990] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 439.864268][ T10] hid (null): usage index exceeded [ 439.933151][ T10] wacom 0003:056A:00B9.0001: ignoring exceeding usage max [ 439.934479][ T10] wacom 0003:056A:00B9.0001: usage index exceeded [ 439.934501][ T10] wacom 0003:056A:00B9.0001: item 0 1 2 0 parsing failed [ 439.935376][ T10] wacom 0003:056A:00B9.0001: parse failed [ 439.935478][ T10] wacom 0003:056A:00B9.0001: probe with driver wacom failed with error -22 [ 440.007542][ T990] usb 1-1: Using ep0 maxpacket: 8 [ 440.017295][ T990] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 440.017324][ T990] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.017343][ T990] usb 1-1: Product: syz [ 440.017356][ T990] usb 1-1: Manufacturer: syz [ 440.017370][ T990] usb 1-1: SerialNumber: syz [ 440.070362][ T990] usb 1-1: config 0 descriptor?? [ 440.086915][ T990] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 440.086982][ T990] usb 1-1: setting power ON [ 440.102874][ T990] dvb-usb: bulk message failed: -22 (2/0) [ 440.115466][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.115535][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.161606][ T10] usb 4-1: USB disconnect, device number 9 [ 440.246993][ T990] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 440.257613][ T990] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 440.257698][ T990] usb 1-1: media controller created [ 440.300778][ T9613] dvb-usb: bulk message failed: -22 (3/0) [ 440.300800][ T9613] cxusb: i2c wr: len=79 is too big! [ 440.300800][ T9613] [ 440.338651][ T990] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 440.385444][ T990] usb 1-1: selecting invalid altsetting 6 [ 440.385467][ T990] usb 1-1: digital interface selection failed (-22) [ 440.385482][ T990] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 440.412763][ T990] usb 1-1: setting power OFF [ 440.413079][ T990] dvb-usb: bulk message failed: -22 (2/0) [ 440.413098][ T990] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 440.413110][ T990] (NULL device *): no alternate interface [ 440.441399][ T9627] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1291'. [ 440.524134][ T990] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 440.549730][ T990] usb 1-1: USB disconnect, device number 8 [ 440.578049][ T9631] bpf: Bad value for 'uid' [ 440.940966][ T9643] bond0: option ad_select: unable to set because the bond device is up [ 441.134492][ T9653] net_ratelimit: 66 callbacks suppressed [ 441.134513][ T9653] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 441.196993][ T5863] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 441.305939][ T9658] Invalid ELF header magic: != ELF [ 441.346974][ T5863] usb 7-1: Using ep0 maxpacket: 8 [ 441.349307][ T5863] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 441.349370][ T5863] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 441.349395][ T5863] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 441.349419][ T5863] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 441.349440][ T5863] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 441.365868][ T5863] usb 7-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 441.365895][ T5863] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 441.365914][ T5863] usb 7-1: Product: syz [ 441.365927][ T5863] usb 7-1: Manufacturer: syz [ 441.365940][ T5863] usb 7-1: SerialNumber: syz [ 441.420601][ T5863] usb 7-1: config 0 descriptor?? [ 441.648493][ T5863] radio-si470x 7-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 441.648519][ T5863] radio-si470x 7-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 441.855540][ T5863] radio-si470x 7-1:0.0: software version 116, hardware version 35 [ 441.855565][ T5863] radio-si470x 7-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 442.059763][ T5863] radio-si470x 7-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 442.059821][ T5863] radio-si470x 7-1:0.0: submitting int urb failed (-90) [ 442.060254][ T5863] radio-si470x 7-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 442.060625][ T5863] radio-si470x 7-1:0.0: probe with driver radio-si470x failed with error -22 [ 442.135176][ T5863] usb 7-1: USB disconnect, device number 2 [ 442.147850][ T10] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 442.329210][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 442.329236][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 442.329292][ T10] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 442.329313][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.379704][ T10] usb 1-1: config 0 descriptor?? [ 442.409199][ T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 442.409516][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 442.478770][ T10] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 442.479725][ T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 442.479779][ T10] usb 1-1: media controller created [ 442.483198][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 442.589429][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 442.589558][ T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 442.604954][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input12 [ 442.685859][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 442.685882][ T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 442.771672][ T10] usb 1-1: USB disconnect, device number 9 [ 442.850847][ T9703] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1321'. [ 443.028116][ T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 443.095343][ T9716] ptrace attach of "./syz-executor exec"[9717] was attempted by "./syz-executor exec"[9716] [ 444.005605][ T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 444.156610][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 444.163158][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 444.166194][ T10] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 444.166222][ T10] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 444.166240][ T10] usb 1-1: Product: syz [ 444.166254][ T10] usb 1-1: Manufacturer: syz [ 444.166267][ T10] usb 1-1: SerialNumber: syz [ 444.470300][ T10] usb 1-1: Handspring Visor / Palm OS: No valid connect info available [ 444.470325][ T10] usb 1-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 444.470343][ T10] usb 1-1: Handspring Visor / Palm OS: port 147, is for Console use [ 444.470360][ T10] usb 1-1: Handspring Visor / Palm OS: Number of ports: 2 [ 444.675335][ T10] usb 1-1: palm_os_3_probe - error -71 getting bytes available request [ 444.675420][ T10] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 444.713988][ T10] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 444.739915][ T10] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 444.743351][ T10] usb 1-1: USB disconnect, device number 10 [ 444.780807][ T10] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 444.803388][ T10] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 444.804967][ T10] visor 1-1:1.0: device disconnected [ 444.839704][ T8765] udevd[8765]: setting mode of /dev/bus/usb/001/010 to 020664 failed: No such file or directory [ 444.839901][ T8765] udevd[8765]: setting owner of /dev/bus/usb/001/010 to uid=0, gid=0 failed: No such file or directory [ 445.184427][ T9793] netlink: 'syz.6.1365': attribute type 1 has an invalid length. [ 445.595576][ T10] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 445.662393][ T9812] netlink: 'syz.0.1375': attribute type 2 has an invalid length. [ 445.754779][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 445.757505][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 445.757549][ T10] usb 7-1: New USB device found, idVendor=05ac, idProduct=027b, bcdDevice= 0.00 [ 445.757570][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.803785][ T10] usb 7-1: config 0 descriptor?? [ 446.306283][ T10] apple 0003:05AC:027B.0002: hidraw0: USB HID v0.05 Device [HID 05ac:027b] on usb-dummy_hcd.6-1/input0 [ 446.459225][ T10] usb 7-1: USB disconnect, device number 3 [ 446.588932][ T9835] veth1_macvtap: left promiscuous mode [ 446.588956][ T9835] macsec0: entered promiscuous mode [ 446.588970][ T9835] macsec0: entered allmulticast mode [ 446.606307][ T9835] veth1_macvtap: entered promiscuous mode [ 446.606331][ T9835] veth1_macvtap: entered allmulticast mode [ 446.606720][ T9835] macsec0: left promiscuous mode [ 446.606950][ T9835] macsec0: left allmulticast mode [ 446.606962][ T9835] veth1_macvtap: left allmulticast mode [ 447.573777][ T990] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 447.728818][ T990] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 447.728850][ T990] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 447.728872][ T990] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 447.728912][ T990] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 447.728933][ T990] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.741123][ T990] usb 1-1: config 0 descriptor?? [ 447.843834][ T9883] lo speed is unknown, defaulting to 1000 [ 447.851220][ T9883] lo speed is unknown, defaulting to 1000 [ 447.932266][ T9883] lo speed is unknown, defaulting to 1000 [ 448.002991][ T9883] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 448.031775][ T9883] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 448.106770][ T9883] lo speed is unknown, defaulting to 1000 [ 448.156938][ T9883] lo speed is unknown, defaulting to 1000 [ 448.159815][ T9883] lo speed is unknown, defaulting to 1000 [ 448.188421][ T9883] lo speed is unknown, defaulting to 1000 [ 448.191705][ T9883] lo speed is unknown, defaulting to 1000 [ 448.210546][ T9883] lo speed is unknown, defaulting to 1000 [ 448.436358][ T990] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 448.524407][ T990] usb 1-1: USB disconnect, device number 11 [ 448.696520][ T9901] fido_id[9901]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 449.299303][ T9923] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1427'. [ 449.622711][ T5800] Bluetooth: hci4: command tx timeout [ 449.902648][ T10] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 449.963684][ T9952] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 450.082028][ T10] usb 4-1: config 5 has an invalid interface number: 3 but max is 0 [ 450.082054][ T10] usb 4-1: config 5 has no interface number 0 [ 450.100989][ T10] usb 4-1: New USB device found, idVendor=09fb, idProduct=602a, bcdDevice=fd.36 [ 450.101015][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.101031][ T10] usb 4-1: Product: syz [ 450.101043][ T10] usb 4-1: Manufacturer: syz [ 450.101056][ T10] usb 4-1: SerialNumber: syz [ 450.174694][ T10] ftdi_sio 4-1:5.3: FTDI USB Serial Device converter detected [ 450.176561][ T10] ftdi_sio ttyUSB0: unknown device type: 0xfd36 [ 450.378534][ T5863] usb 4-1: USB disconnect, device number 10 [ 450.390590][ T5863] ftdi_sio 4-1:5.3: device disconnected [ 450.988367][ T9981] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1455'. [ 451.461116][T10000] 9pnet_fd: Insufficient options for proto=fd [ 451.879798][T10010] tipc: Started in network mode [ 451.879828][T10010] tipc: Node identity 6ea0dda5f602, cluster identity 4711 [ 451.880028][T10010] tipc: Enabled bearer , priority 0 [ 451.996978][ T2152] tipc: Subscription rejected, illegal request [ 452.151584][ T5863] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 452.171636][ T5890] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 452.303824][ T5863] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 452.303885][ T5863] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 452.305458][ T5863] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 452.305484][ T5863] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 452.305501][ T5863] usb 4-1: Manufacturer: syz [ 452.321430][ T5890] usb 7-1: Using ep0 maxpacket: 32 [ 452.323984][ T5890] usb 7-1: config 0 has an invalid interface number: 230 but max is 0 [ 452.324007][ T5890] usb 7-1: config 0 has no interface number 0 [ 452.324037][ T5890] usb 7-1: config 0 interface 230 has no altsetting 0 [ 452.327042][ T5890] usb 7-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 452.327066][ T5890] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.327084][ T5890] usb 7-1: Product: syz [ 452.327097][ T5890] usb 7-1: Manufacturer: syz [ 452.327110][ T5890] usb 7-1: SerialNumber: syz [ 452.441882][ T5890] usb 7-1: config 0 descriptor?? [ 452.442515][ T5863] usb 4-1: config 0 descriptor?? [ 452.469456][ T5890] ums-usbat 7-1:0.230: USB Mass Storage device detected [ 452.513779][ T5890] ums-usbat 7-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 452.631629][ T5863] rc_core: IR keymap rc-hauppauge not found [ 452.631649][ T5863] Registered IR keymap rc-empty [ 452.633260][ T5863] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 452.636413][ T5863] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input13 [ 452.647885][T10010] tipc: Resetting bearer [ 452.650886][ T5890] usb 7-1: USB disconnect, device number 4 [ 452.758259][ T5863] usb 4-1: USB disconnect, device number 11 [ 452.889753][T10009] tipc: Disabling bearer [ 453.087489][ T990] tipc: Node number set to 2560810405 [ 453.161479][T10034] block nbd0: NBD_DISCONNECT [ 454.788696][T10073] tipc: Enabling of bearer rejected, failed to enable media [ 456.079037][T10114] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1514'. [ 458.389262][ T10] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 458.558855][ T10] usb 1-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=6c.de [ 458.558874][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.558883][ T10] usb 1-1: Product: syz [ 458.558890][ T10] usb 1-1: Manufacturer: syz [ 458.558897][ T10] usb 1-1: SerialNumber: syz [ 458.569472][ T10] usb 1-1: config 0 descriptor?? [ 458.602018][ T10] ems_usb 1-1:0.0 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 458.603602][ T10] ems_usb 1-1:0.0: probe with driver ems_usb failed with error -22 [ 458.811256][ T10] usb 1-1: USB disconnect, device number 12 [ 459.137369][T10180] syzkaller0: entered promiscuous mode [ 459.137395][T10180] syzkaller0: entered allmulticast mode [ 460.397453][ T5863] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 460.561871][ T5863] usb 4-1: unable to get BOS descriptor or descriptor too short [ 460.563756][ T5863] usb 4-1: not running at top speed; connect to a high speed hub [ 460.565802][ T5863] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 460.565824][ T5863] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 460.589718][ T5863] usb 4-1: string descriptor 0 read error: -22 [ 460.589882][ T5863] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 460.589904][ T5863] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.622162][ T5863] usb 4-1: 0:2 : does not exist [ 461.258774][ T5863] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 461.273272][ T5863] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 461.287180][ T5863] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 461.442880][ T5863] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 461.465053][ T5863] usb 4-1: USB disconnect, device number 12 [ 461.528341][ T8727] udevd[8727]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 461.588469][ T10] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 461.736929][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 461.739973][ T10] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 461.740002][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.744148][ T10] usb 1-1: config 0 descriptor?? [ 461.954286][ T10] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 461.965221][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 461.967665][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 461.967717][ T10] usb 1-1: media controller created [ 462.049552][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 462.194571][T10277] program syz.3.1588 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 462.579082][ T10] az6027: usb out operation failed. (-71) [ 462.579101][ T10] stb0899_attach: Driver disabled by Kconfig [ 462.579111][ T10] az6027: no front-end attached [ 462.579111][ T10] [ 462.579529][ T10] az6027: usb out operation failed. (-71) [ 462.579542][ T10] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 462.582918][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input14 [ 462.597587][ T10] dvb-usb: schedule remote query interval to 400 msecs. [ 462.597607][ T10] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 462.616421][ T10] usb 1-1: USB disconnect, device number 13 [ 463.024682][ T10] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 463.788476][T10316] syzkaller0: entered promiscuous mode [ 463.788501][T10316] syzkaller0: entered allmulticast mode [ 464.215453][ T5890] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 464.365344][ T5890] usb 7-1: Using ep0 maxpacket: 32 [ 464.367788][ T5890] usb 7-1: config 0 has an invalid interface number: 230 but max is 0 [ 464.367814][ T5890] usb 7-1: config 0 has no interface number 0 [ 464.367849][ T5890] usb 7-1: config 0 interface 230 has no altsetting 0 [ 464.371057][ T5890] usb 7-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 464.371083][ T5890] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.371102][ T5890] usb 7-1: Product: syz [ 464.371116][ T5890] usb 7-1: Manufacturer: syz [ 464.371130][ T5890] usb 7-1: SerialNumber: syz [ 464.457434][ T5890] usb 7-1: config 0 descriptor?? [ 464.475078][ T5890] ums-usbat 7-1:0.230: USB Mass Storage device detected [ 464.517210][ T5890] ums-usbat 7-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 464.775279][ T5890] usb 7-1: USB disconnect, device number 5 [ 465.157663][ C1] vkms_vblank_simulate: vblank timer overrun [ 466.770837][T10427] tipc: Enabled bearer , priority 0 [ 467.104043][ T993] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 467.281777][ T993] usb 4-1: Using ep0 maxpacket: 32 [ 467.295837][ T993] usb 4-1: config 0 has an invalid interface number: 230 but max is 0 [ 467.295861][ T993] usb 4-1: config 0 has no interface number 0 [ 467.295896][ T993] usb 4-1: config 0 interface 230 has no altsetting 0 [ 467.311854][ T993] usb 4-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 467.311882][ T993] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.311900][ T993] usb 4-1: Product: syz [ 467.311913][ T993] usb 4-1: Manufacturer: syz [ 467.311927][ T993] usb 4-1: SerialNumber: syz [ 467.336302][ T993] usb 4-1: config 0 descriptor?? [ 467.368140][ T993] ums-usbat 4-1:0.230: USB Mass Storage device detected [ 467.422224][ T993] ums-usbat 4-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 467.556117][T10427] tipc: Resetting bearer [ 467.587881][ T993] usb 4-1: USB disconnect, device number 13 [ 467.791720][ C1] vkms_vblank_simulate: vblank timer overrun [ 467.807285][T10425] tipc: Disabling bearer [ 468.440022][T10497] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1673'. [ 468.636424][T10508] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1677'. [ 468.743223][ T993] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 468.895214][ T993] usb 7-1: Using ep0 maxpacket: 16 [ 468.900823][ T993] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 468.900849][ T993] usb 7-1: config 1 has no interface number 1 [ 468.900893][ T993] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 468.900932][ T993] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 468.906502][ T993] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 468.906532][ T993] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.906550][ T993] usb 7-1: Product: syz [ 468.906564][ T993] usb 7-1: Manufacturer: syz [ 468.906576][ T993] usb 7-1: SerialNumber: syz [ 469.162348][T10526] netlink: 'syz.2.1688': attribute type 6 has an invalid length. [ 469.315087][T10534] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1691'. [ 469.374313][ T993] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 469.606169][T10543] pim6reg: entered allmulticast mode [ 469.610904][T10540] pim6reg: left allmulticast mode [ 469.736092][ C1] vkms_vblank_simulate: vblank timer overrun [ 469.808452][ T993] usb 7-1: USB disconnect, device number 6 [ 470.052851][T10552] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 470.053081][T10552] syzkaller1: linktype set to 0 [ 470.423114][ T5891] kernel write not supported for file /vbi3 (pid: 5891 comm: kworker/1:5) [ 470.662453][ T10] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 470.812609][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 470.821917][ T10] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 470.821944][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.821962][ T10] usb 1-1: Product: syz [ 470.821982][ T10] usb 1-1: Manufacturer: syz [ 470.822876][ T10] usb 1-1: SerialNumber: syz [ 470.837981][ T10] usb 1-1: config 0 descriptor?? [ 470.856766][ T10] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 471.416834][T10603] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1723'. [ 471.557307][ C1] vkms_vblank_simulate: vblank timer overrun [ 471.690172][ T10] gspca_ov534_9: reg_w failed -71 [ 471.705893][T10603] vxlan0: entered promiscuous mode [ 471.705930][T10603] vxlan0: entered allmulticast mode [ 471.736453][ T1173] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 471.739176][ T1173] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 471.739225][ T1173] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 471.739257][ T1173] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 471.929247][T10613] program syz.6.1728 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 471.971988][ T10] gspca_ov534_9: Unknown sensor 0000 [ 471.972086][ T10] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 471.982671][ T10] usb 1-1: USB disconnect, device number 14 [ 472.468409][ T5800] block nbd0: Receive control failed (result -32) [ 472.715060][T10641] tipc: Enabling of bearer rejected, failed to enable media [ 472.851154][ T5890] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 473.002075][ T5890] usb 7-1: Using ep0 maxpacket: 8 [ 473.007543][ T5890] usb 7-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 473.007566][ T5890] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.007575][ T5890] usb 7-1: Product: syz [ 473.007583][ T5890] usb 7-1: Manufacturer: syz [ 473.007593][ T5890] usb 7-1: SerialNumber: syz [ 473.017886][ T5890] usb 7-1: config 0 descriptor?? [ 473.029804][ T5890] option 7-1:0.0: GSM modem (1-port) converter detected [ 473.071093][ T5891] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 473.235956][ T5890] usb 7-1: USB disconnect, device number 7 [ 473.239350][ T5890] option 7-1:0.0: device disconnected [ 473.245078][ T5891] usb 4-1: Using ep0 maxpacket: 32 [ 473.247560][ T5891] usb 4-1: config 0 has an invalid interface number: 230 but max is 0 [ 473.247584][ T5891] usb 4-1: config 0 has no interface number 0 [ 473.247614][ T5891] usb 4-1: config 0 interface 230 has no altsetting 0 [ 473.251079][ T5891] usb 4-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 473.251105][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.251124][ T5891] usb 4-1: Product: syz [ 473.251136][ T5891] usb 4-1: Manufacturer: syz [ 473.251149][ T5891] usb 4-1: SerialNumber: syz [ 473.324877][ T5891] usb 4-1: config 0 descriptor?? [ 473.354074][ T5891] ums-usbat 4-1:0.230: USB Mass Storage device detected [ 473.365991][ T5891] ums-usbat 4-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 473.653683][ T993] usb 4-1: USB disconnect, device number 14 [ 474.091749][ T5890] hid-generic 0003:80000004:0000.0004: unknown main item tag 0x0 [ 474.091789][ T5890] hid-generic 0003:80000004:0000.0004: unknown main item tag 0x0 [ 474.091815][ T5890] hid-generic 0003:80000004:0000.0004: unknown main item tag 0x0 [ 474.091837][ T5890] hid-generic 0003:80000004:0000.0004: unknown main item tag 0x0 [ 474.091860][ T5890] hid-generic 0003:80000004:0000.0004: unknown main item tag 0x0 [ 474.091884][ T5890] hid-generic 0003:80000004:0000.0004: unknown main item tag 0x0 [ 474.091907][ T5890] hid-generic 0003:80000004:0000.0004: unknown main item tag 0x0 [ 474.091931][ T5890] hid-generic 0003:80000004:0000.0004: unknown main item tag 0x0 [ 474.091956][ T5890] hid-generic 0003:80000004:0000.0004: unknown main item tag 0x0 [ 474.091980][ T5890] hid-generic 0003:80000004:0000.0004: unknown main item tag 0x0 [ 474.219925][ T5890] hid-generic 0003:80000004:0000.0004: hidraw0: USB HID v0.00 Device [syz1] on syz0 [ 474.511295][T10681] fido_id[10681]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 474.612757][T10686] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1759'. [ 474.956924][T10702] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1765'. [ 474.964884][T10702] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1765'. [ 475.130054][ T10] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 475.283593][ T10] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 475.283620][ T10] usb 7-1: config 0 has no interface number 0 [ 475.286633][ T10] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 475.286660][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.286687][ T10] usb 7-1: Product: syz [ 475.286701][ T10] usb 7-1: Manufacturer: syz [ 475.286715][ T10] usb 7-1: SerialNumber: syz [ 475.342239][ T10] usb 7-1: config 0 descriptor?? [ 475.559571][ T10] usb 7-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 475.589364][ T10] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 475.600609][ T10] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 475.600668][ T10] usb 7-1: media controller created [ 475.655850][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 475.749139][T10725] program syz.0.1776 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 476.809820][ T10] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 476.901490][ T10] usb 7-1: USB disconnect, device number 8 [ 478.368384][ T993] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 478.520858][ T993] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 478.520886][ T993] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 478.520902][ T993] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 478.520951][ T993] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 478.523207][ T993] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 478.523233][ T993] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 478.523251][ T993] usb 4-1: Product: syz [ 478.523264][ T993] usb 4-1: Manufacturer: syz [ 478.601594][ T993] cdc_wdm 4-1:1.0: skipping garbage [ 478.601614][ T993] cdc_wdm 4-1:1.0: skipping garbage [ 478.649287][ T993] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 478.649321][ T993] cdc_wdm 4-1:1.0: Unknown control protocol [ 478.894021][T10791] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1804'. [ 478.990319][ C0] cdc_wdm 4-1:1.0: Unexpected error -71 [ 478.994095][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 478.995113][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 478.996444][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 478.996466][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 478.997696][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 478.997716][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 478.998955][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 478.998977][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 478.999206][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 478.999224][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 478.999454][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 478.999475][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 478.999705][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 478.999725][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 479.000365][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 479.000387][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 479.000610][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 479.000628][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 479.003392][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 479.003414][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 479.008174][ T5891] usb 4-1: USB disconnect, device number 15 [ 479.008345][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 480.118432][ T993] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 480.279748][ T993] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 480.279775][ T993] usb 7-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 480.279793][ T993] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 480.279811][ T993] usb 7-1: config 220 has no interface number 2 [ 480.279887][ T993] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 480.279913][ T993] usb 7-1: config 220 interface 0 has no altsetting 0 [ 480.279930][ T993] usb 7-1: config 220 interface 76 has no altsetting 0 [ 480.279947][ T993] usb 7-1: config 220 interface 1 has no altsetting 0 [ 480.282966][ T993] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 480.282993][ T993] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.283011][ T993] usb 7-1: Product: syz [ 480.283031][ T993] usb 7-1: Manufacturer: syz [ 480.283045][ T993] usb 7-1: SerialNumber: syz [ 480.629177][ T993] uvcvideo 7-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 480.629217][ T993] uvcvideo 7-1:220.0: No valid video chain found. [ 480.629300][ T993] usb 7-1: selecting invalid altsetting 0 [ 480.670798][ T993] usb 7-1: selecting invalid altsetting 0 [ 480.670836][ T993] usbtest 7-1:220.1: probe with driver usbtest failed with error -22 [ 480.675599][ T993] usb 7-1: USB disconnect, device number 9 [ 481.316892][ T5890] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 481.393192][T10859] mmap: syz.2.1838 (10859) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 481.482979][ T5890] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 481.483009][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.483028][ T5890] usb 1-1: Product: syz [ 481.483043][ T5890] usb 1-1: Manufacturer: syz [ 481.483056][ T5890] usb 1-1: SerialNumber: syz [ 481.496230][ T5890] usb 1-1: config 0 descriptor?? [ 481.508286][ T5890] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 481.536920][ T5876] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 481.683013][T10866] ip6erspan0: entered promiscuous mode [ 481.698209][ T5876] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 481.698296][ T5876] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 481.698320][ T5876] usb 4-1: config 0 interface 0 has no altsetting 0 [ 481.701335][ T5876] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 481.701365][ T5876] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 481.701385][ T5876] usb 4-1: Product: syz [ 481.701399][ T5876] usb 4-1: Manufacturer: syz [ 481.701413][ T5876] usb 4-1: SerialNumber: syz [ 481.768574][ T5876] usb 4-1: config 0 descriptor?? [ 481.784594][ T5876] hub 4-1:0.0: bad descriptor, ignoring hub [ 481.784633][ T5876] hub 4-1:0.0: probe with driver hub failed with error -5 [ 481.808748][ T5876] usb 4-1: selecting invalid altsetting 0 [ 483.116878][ T5800] Bluetooth: hci6: link tx timeout [ 483.117172][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.124680][T10901] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1856'. [ 483.124703][T10901] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 483.128151][ T5800] Bluetooth: hci6: link tx timeout [ 483.128168][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.128291][ T5800] Bluetooth: hci6: link tx timeout [ 483.128301][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.128412][ T5800] Bluetooth: hci6: link tx timeout [ 483.128423][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.128533][ T5800] Bluetooth: hci6: link tx timeout [ 483.128544][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.128655][ T5800] Bluetooth: hci6: link tx timeout [ 483.128665][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.128772][ T5800] Bluetooth: hci6: link tx timeout [ 483.128783][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.128893][ T5800] Bluetooth: hci6: link tx timeout [ 483.128903][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.129010][ T5800] Bluetooth: hci6: link tx timeout [ 483.129026][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.129138][ T5800] Bluetooth: hci6: link tx timeout [ 483.129148][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.129258][ T5800] Bluetooth: hci6: link tx timeout [ 483.129268][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.129462][ T5800] Bluetooth: hci6: link tx timeout [ 483.129473][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.129586][ T5800] Bluetooth: hci6: link tx timeout [ 483.129596][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.129725][ T5800] Bluetooth: hci6: link tx timeout [ 483.129735][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.129863][ T5800] Bluetooth: hci6: link tx timeout [ 483.129874][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.129983][ T5800] Bluetooth: hci6: link tx timeout [ 483.129993][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.130110][ T5800] Bluetooth: hci6: link tx timeout [ 483.130120][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.130228][ T5800] Bluetooth: hci6: link tx timeout [ 483.130239][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.130345][ T5800] Bluetooth: hci6: link tx timeout [ 483.130356][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.130463][ T5800] Bluetooth: hci6: link tx timeout [ 483.130473][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.130580][ T5800] Bluetooth: hci6: link tx timeout [ 483.130590][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.130699][ T5800] Bluetooth: hci6: link tx timeout [ 483.130709][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.130815][ T5800] Bluetooth: hci6: link tx timeout [ 483.130826][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.130933][ T5800] Bluetooth: hci6: link tx timeout [ 483.130943][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.131059][ T5800] Bluetooth: hci6: link tx timeout [ 483.131070][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.131177][ T5800] Bluetooth: hci6: link tx timeout [ 483.131187][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.131293][ T5800] Bluetooth: hci6: link tx timeout [ 483.131304][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.131411][ T5800] Bluetooth: hci6: link tx timeout [ 483.131421][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.131529][ T5800] Bluetooth: hci6: link tx timeout [ 483.131539][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.131646][ T5800] Bluetooth: hci6: link tx timeout [ 483.131656][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.131762][ T5800] Bluetooth: hci6: link tx timeout [ 483.131772][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.131879][ T5800] Bluetooth: hci6: link tx timeout [ 483.131890][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.131997][ T5800] Bluetooth: hci6: link tx timeout [ 483.132008][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.132123][ T5800] Bluetooth: hci6: link tx timeout [ 483.132134][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.132241][ T5800] Bluetooth: hci6: link tx timeout [ 483.132251][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.132360][ T5800] Bluetooth: hci6: link tx timeout [ 483.132371][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.132480][ T5800] Bluetooth: hci6: link tx timeout [ 483.132491][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.132596][ T5800] Bluetooth: hci6: link tx timeout [ 483.132607][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.132714][ T5800] Bluetooth: hci6: link tx timeout [ 483.132725][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.132831][ T5800] Bluetooth: hci6: link tx timeout [ 483.132841][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.132948][ T5800] Bluetooth: hci6: link tx timeout [ 483.132959][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.133075][ T5800] Bluetooth: hci6: link tx timeout [ 483.133086][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.133197][ T5800] Bluetooth: hci6: link tx timeout [ 483.133207][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.133315][ T5800] Bluetooth: hci6: link tx timeout [ 483.133325][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.133432][ T5800] Bluetooth: hci6: link tx timeout [ 483.133442][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.133551][ T5800] Bluetooth: hci6: link tx timeout [ 483.133562][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.133670][ T5800] Bluetooth: hci6: link tx timeout [ 483.133681][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.133787][ T5800] Bluetooth: hci6: link tx timeout [ 483.133798][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.133927][ T5800] Bluetooth: hci6: link tx timeout [ 483.133937][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.134050][ T5800] Bluetooth: hci6: link tx timeout [ 483.134060][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.134170][ T5800] Bluetooth: hci6: link tx timeout [ 483.134180][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.134286][ T5800] Bluetooth: hci6: link tx timeout [ 483.134296][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.134405][ T5800] Bluetooth: hci6: link tx timeout [ 483.134415][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.134539][ T5800] Bluetooth: hci6: link tx timeout [ 483.134549][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.134661][ T5800] Bluetooth: hci6: link tx timeout [ 483.134671][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.134779][ T5800] Bluetooth: hci6: link tx timeout [ 483.134789][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.134897][ T5800] Bluetooth: hci6: link tx timeout [ 483.134908][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.135023][ T5800] Bluetooth: hci6: link tx timeout [ 483.135034][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.135163][ T5800] Bluetooth: hci6: link tx timeout [ 483.135174][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.135311][ T5800] Bluetooth: hci6: link tx timeout [ 483.135321][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.135518][ T5800] Bluetooth: hci6: link tx timeout [ 483.135529][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.135638][ T5800] Bluetooth: hci6: link tx timeout [ 483.135648][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.135761][ T5800] Bluetooth: hci6: link tx timeout [ 483.135771][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.136055][ T5800] Bluetooth: hci6: link tx timeout [ 483.136068][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.136130][ T5800] Bluetooth: hci6: link tx timeout [ 483.136141][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.136232][ T5800] Bluetooth: hci6: link tx timeout [ 483.136243][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.136669][ T5800] Bluetooth: hci6: link tx timeout [ 483.136681][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.136782][ T5800] Bluetooth: hci6: link tx timeout [ 483.136794][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.136844][ T5800] Bluetooth: hci6: link tx timeout [ 483.136855][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.136926][ T5800] Bluetooth: hci6: link tx timeout [ 483.136937][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.137000][ T5800] Bluetooth: hci6: link tx timeout [ 483.137011][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.137059][ T5800] Bluetooth: hci6: link tx timeout [ 483.137069][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.137159][ T5800] Bluetooth: hci6: link tx timeout [ 483.137170][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.137233][ T5800] Bluetooth: hci6: link tx timeout [ 483.137244][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.137307][ T5800] Bluetooth: hci6: link tx timeout [ 483.137318][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.137385][ T5800] Bluetooth: hci6: link tx timeout [ 483.137396][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.137609][ T5800] Bluetooth: hci6: link tx timeout [ 483.137621][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.137643][ T5800] Bluetooth: hci6: link tx timeout [ 483.137653][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.137712][ T5800] Bluetooth: hci6: link tx timeout [ 483.137723][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.137852][ T5800] Bluetooth: hci6: link tx timeout [ 483.137863][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.137934][ T5800] Bluetooth: hci6: link tx timeout [ 483.137945][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.138012][ T5800] Bluetooth: hci6: link tx timeout [ 483.138028][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.138125][ T5800] Bluetooth: hci6: link tx timeout [ 483.138135][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.138156][ T5800] Bluetooth: hci6: link tx timeout [ 483.138167][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.138238][ T5800] Bluetooth: hci6: link tx timeout [ 483.138249][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.138314][ T5800] Bluetooth: hci6: link tx timeout [ 483.138325][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.138389][ T5800] Bluetooth: hci6: link tx timeout [ 483.138400][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.138464][ T5800] Bluetooth: hci6: link tx timeout [ 483.138475][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.138538][ T5800] Bluetooth: hci6: link tx timeout [ 483.138549][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.138613][ T5800] Bluetooth: hci6: link tx timeout [ 483.138624][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.138687][ T5800] Bluetooth: hci6: link tx timeout [ 483.138698][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.138760][ T5800] Bluetooth: hci6: link tx timeout [ 483.138771][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.138845][ T5800] Bluetooth: hci6: link tx timeout [ 483.138856][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.138922][ T5800] Bluetooth: hci6: link tx timeout [ 483.138933][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.138996][ T5800] Bluetooth: hci6: link tx timeout [ 483.139007][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.139070][ T5800] Bluetooth: hci6: link tx timeout [ 483.139081][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.139144][ T5800] Bluetooth: hci6: link tx timeout [ 483.139155][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.139221][ T5800] Bluetooth: hci6: link tx timeout [ 483.139231][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.139295][ T5800] Bluetooth: hci6: link tx timeout [ 483.139305][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.139369][ T5800] Bluetooth: hci6: link tx timeout [ 483.139381][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.139443][ T5800] Bluetooth: hci6: link tx timeout [ 483.139454][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.139519][ T5800] Bluetooth: hci6: link tx timeout [ 483.139529][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.139592][ T5800] Bluetooth: hci6: link tx timeout [ 483.139603][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.139669][ T5800] Bluetooth: hci6: link tx timeout [ 483.139680][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.139755][ T5800] Bluetooth: hci6: link tx timeout [ 483.139766][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.139835][ T5800] Bluetooth: hci6: link tx timeout [ 483.139846][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.139909][ T5800] Bluetooth: hci6: link tx timeout [ 483.139920][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.140004][ T5800] Bluetooth: hci6: link tx timeout [ 483.140015][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.140080][ T5800] Bluetooth: hci6: link tx timeout [ 483.140091][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.140154][ T5800] Bluetooth: hci6: link tx timeout [ 483.140165][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.140228][ T5800] Bluetooth: hci6: link tx timeout [ 483.140239][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.140302][ T5800] Bluetooth: hci6: link tx timeout [ 483.140313][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.140376][ T5800] Bluetooth: hci6: link tx timeout [ 483.140387][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.140450][ T5800] Bluetooth: hci6: link tx timeout [ 483.140461][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.140530][ T5800] Bluetooth: hci6: link tx timeout [ 483.140541][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.140605][ T5800] Bluetooth: hci6: link tx timeout [ 483.140616][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.140679][ T5800] Bluetooth: hci6: link tx timeout [ 483.140690][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.140775][ T5800] Bluetooth: hci6: link tx timeout [ 483.140786][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.140854][ T5800] Bluetooth: hci6: link tx timeout [ 483.140865][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.140928][ T5800] Bluetooth: hci6: link tx timeout [ 483.140939][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.141003][ T5800] Bluetooth: hci6: link tx timeout [ 483.141014][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 483.141077][ T5800] Bluetooth: hci6: link tx timeout [ 483.141087][ T5800] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 484.208071][ T5890] usb 1-1: USB disconnect, device number 15 [ 485.204952][ T5800] Bluetooth: hci6: command 0x0406 tx timeout [ 485.654487][T10949] Invalid ELF header len 16 [ 485.916494][ T5891] usb 4-1: USB disconnect, device number 16 [ 486.533243][ C1] vkms_vblank_simulate: vblank timer overrun [ 487.554503][ T3600] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.853682][ T5891] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 487.961604][ T5800] ================================================================== [ 487.961620][ T5800] BUG: KASAN: vmalloc-out-of-bounds in __list_del_entry_valid_or_report+0xb5/0x190 [ 487.961653][ T5800] Read of size 8 at addr ffffc9000edfd008 by task kworker/u9:2/5800 [ 487.961669][ T5800] [ 487.961690][ T5800] CPU: 1 UID: 0 PID: 5800 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 487.961711][ T5800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 487.961723][ T5800] Workqueue: hci1 hci_rx_work [ 487.961757][ T5800] Call Trace: [ 487.961769][ T5800] [ 487.961777][ T5800] dump_stack_lvl+0x189/0x250 [ 487.961806][ T5800] ? __pfx_dump_stack_lvl+0x10/0x10 [ 487.961833][ T5800] ? __pfx__printk+0x10/0x10 [ 487.961853][ T5800] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 487.961881][ T5800] ? __virt_addr_valid+0xdc/0x5c0 [ 487.961908][ T5800] ? __virt_addr_valid+0xdc/0x5c0 [ 487.961935][ T5800] print_report+0xca/0x240 [ 487.961959][ T5800] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 487.961982][ T5800] kasan_report+0x118/0x150 [ 487.962010][ T5800] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 487.962037][ T5800] __list_del_entry_valid_or_report+0xb5/0x190 [ 487.962062][ T5800] kcov_remote_start+0x2b0/0x6f0 [ 487.962089][ T5800] hci_rx_work+0x130/0xe80 [ 487.962112][ T5800] ? process_scheduled_works+0x9ef/0x17b0 [ 487.962136][ T5800] process_scheduled_works+0xae1/0x17b0 [ 487.962172][ T5800] ? __pfx_process_scheduled_works+0x10/0x10 [ 487.962203][ T5800] worker_thread+0x8a0/0xda0 [ 487.962238][ T5800] kthread+0x711/0x8a0 [ 487.962265][ T5800] ? __pfx_worker_thread+0x10/0x10 [ 487.962288][ T5800] ? __pfx_kthread+0x10/0x10 [ 487.962313][ T5800] ? rt_spin_unlock+0x150/0x200 [ 487.962336][ T5800] ? rt_spin_unlock+0x161/0x200 [ 487.962355][ T5800] ? __pfx_kthread+0x10/0x10 [ 487.962381][ T5800] ret_from_fork+0x4bc/0x870 [ 487.962412][ T5800] ? __pfx_ret_from_fork+0x10/0x10 [ 487.962438][ T5800] ? __switch_to_asm+0x39/0x70 [ 487.962457][ T5800] ? __switch_to_asm+0x33/0x70 [ 487.962474][ T5800] ? __pfx_kthread+0x10/0x10 [ 487.962501][ T5800] ret_from_fork_asm+0x1a/0x30 [ 487.962527][ T5800] [ 487.962535][ T5800] [ 487.962540][ T5800] The buggy address belongs to a vmalloc virtual mapping [ 487.962558][ T5800] Memory state around the buggy address: [ 487.962569][ T5800] ffffc9000edfcf00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 487.962582][ T5800] ffffc9000edfcf80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 487.962595][ T5800] >ffffc9000edfd000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 487.962610][ T5800] ^ [ 487.962620][ T5800] ffffc9000edfd080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 487.962632][ T5800] ffffc9000edfd100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 487.962641][ T5800] ================================================================== [ 487.962661][ T5800] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 487.962675][ T5800] CPU: 1 UID: 0 PID: 5800 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 487.962696][ T5800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 487.962708][ T5800] Workqueue: hci1 hci_rx_work [ 487.962727][ T5800] Call Trace: [ 487.962734][ T5800] [ 487.962741][ T5800] dump_stack_lvl+0x99/0x250 [ 487.962769][ T5800] ? __asan_memcpy+0x40/0x70 [ 487.962789][ T5800] ? __pfx_dump_stack_lvl+0x10/0x10 [ 487.962815][ T5800] ? __pfx__printk+0x10/0x10 [ 487.962843][ T5800] vpanic+0x237/0x6d0 [ 487.962860][ T5800] ? __pfx_vpanic+0x10/0x10 [ 487.962883][ T5800] panic+0xb9/0xc0 [ 487.962900][ T5800] ? __pfx_panic+0x10/0x10 [ 487.962916][ T5800] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 487.962945][ T5800] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 487.962974][ T5800] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 487.962997][ T5800] check_panic_on_warn+0x89/0xb0 [ 487.963016][ T5800] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 487.963039][ T5800] end_report+0x78/0x160 [ 487.963063][ T5800] kasan_report+0x129/0x150 [ 487.963088][ T5800] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 487.963116][ T5800] __list_del_entry_valid_or_report+0xb5/0x190 [ 487.963139][ T5800] kcov_remote_start+0x2b0/0x6f0 [ 487.963166][ T5800] hci_rx_work+0x130/0xe80 [ 487.963189][ T5800] ? process_scheduled_works+0x9ef/0x17b0 [ 487.963212][ T5800] process_scheduled_works+0xae1/0x17b0 [ 487.963264][ T5800] ? __pfx_process_scheduled_works+0x10/0x10 [ 487.963295][ T5800] worker_thread+0x8a0/0xda0 [ 487.963327][ T5800] kthread+0x711/0x8a0 [ 487.963352][ T5800] ? __pfx_worker_thread+0x10/0x10 [ 487.963373][ T5800] ? __pfx_kthread+0x10/0x10 [ 487.963405][ T5800] ? rt_spin_unlock+0x150/0x200 [ 487.963431][ T5800] ? rt_spin_unlock+0x161/0x200 [ 487.963447][ T5800] ? __pfx_kthread+0x10/0x10 [ 487.963469][ T5800] ret_from_fork+0x4bc/0x870 [ 487.963490][ T5800] ? __pfx_ret_from_fork+0x10/0x10 [ 487.963512][ T5800] ? __switch_to_asm+0x39/0x70 [ 487.963528][ T5800] ? __switch_to_asm+0x33/0x70 [ 487.963544][ T5800] ? __pfx_kthread+0x10/0x10 [ 487.963567][ T5800] ret_from_fork_asm+0x1a/0x30 [ 487.963593][ T5800] [ 487.963914][ T5800] Kernel Offset: disabled