last executing test programs: 1m14.886181219s ago: executing program 3 (id=921): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x5}}}}]}, 0x44}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x14, 0x2, [@TCA_CGROUP_EMATCHES={0x10, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x44}}, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m14.72437787s ago: executing program 3 (id=923): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0, @ANYRES32=r0, @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xc392}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x7, @loopback, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, 0xffffffffffffffff, 0x7fff}}, 0x48) socket$rds(0x15, 0x5, 0x0) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) socket(0x15, 0x5, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xb0, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x31]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x10000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0xfffffffffffffffc}]}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1m12.198523206s ago: executing program 3 (id=929): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190a0101000000020073797a32000000000900010073797a3100000000"], 0x2c}}, 0x8004) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1, 0xa}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000040)=0x706, 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m10.519036257s ago: executing program 3 (id=938): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000240)={0x20, 0xe, 0x1, "c5"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000280)={0x40, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000dc0)={0x2c, &(0x7f0000000ac0)={0x0, 0x9}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000880)={0x44, &(0x7f00000005c0)={0x20, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x44, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000001800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000380)={0x40, 0xc}, 0x0, 0x0, 0x0, 0x0}) 1m9.139728611s ago: executing program 3 (id=942): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f28bd421850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000026c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) nanosleep(0x0, 0x0) 1m9.136486678s ago: executing program 4 (id=943): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003000aac0f00050002"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1m8.513757118s ago: executing program 4 (id=944): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0)=0x7fff, 0x4) sendto(r0, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) 1m6.069658156s ago: executing program 4 (id=948): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) fdatasync(r0) 1m6.006336988s ago: executing program 3 (id=949): r0 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x200003, 0x1af}, &(0x7f00000001c0)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)=[{0x0}, {0x0}], 0x2}, 0x0, 0x3, 0x0, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) io_uring_enter(r0, 0x47f8, 0x4000, 0x2, 0x0, 0x1f) 1m5.842584554s ago: executing program 4 (id=950): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x20000000002, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, 0x0, 0x48) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000b40)=[{0x0}, {0x0}], 0x2) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000a80), 0x2080, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, 0x0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)={0x14, r2, 0x30b, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4044}, 0x20000004) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000780)={0x1, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)=""/184, 0xb8}], &(0x7f00000005c0), 0x1}, 0x20) 1m4.578628763s ago: executing program 4 (id=953): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a31000000000800054000000002"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, 0x0, 0x0) 1m4.248966685s ago: executing program 4 (id=955): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1600000000000000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) 49.646183196s ago: executing program 32 (id=949): r0 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x200003, 0x1af}, &(0x7f00000001c0)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)=[{0x0}, {0x0}], 0x2}, 0x0, 0x3, 0x0, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) io_uring_enter(r0, 0x47f8, 0x4000, 0x2, 0x0, 0x1f) 48.714073288s ago: executing program 33 (id=955): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1600000000000000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) 13.188759776s ago: executing program 2 (id=1070): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) close(r0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r2, 0x400, 0x1) r3 = memfd_create(0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r4 = memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0x2, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f00000005c0)="24785466124cebc6c88735f544a9", 0xe, 0x440040c4, &(0x7f00000001c0)={0x11, 0xf8, r6, 0x1, 0xd8, 0x6, @remote}, 0x14) 6.532800155s ago: executing program 2 (id=1085): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000540001002cbd7000fddbdf2507000000", @ANYRES32=r4, @ANYBLOB="20000100", @ANYRES32=r3, @ANYBLOB="01020000cf1b"], 0x38}, 0x1, 0x0, 0x0, 0x2404c010}, 0x800) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_read(r0, 0x6, 0x7e, &(0x7f0000000400)=""/126) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bind$can_j1939(r1, &(0x7f0000000bc0)={0x1d, r4, 0x4, {0x2, 0xf0, 0x4}, 0xfd}, 0x18) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f00000001c0)={0x20, 0x0, 0x1b, "c2001b86b7cbfb651d159645a3489371e7d8dd1ef641a6f65f36f6"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000003c0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000180)={0x40, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r5, 0x0, 0x0) 3.524524281s ago: executing program 0 (id=1091): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x200, 0x0) 3.484312984s ago: executing program 1 (id=1092): getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000280)={'security\x00'}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000050000090900010073797a310000000054000000030a03000000000000000000050000030900010073797a31000000000900030073797a320000000028000480080001400000000108000240"], 0x9c}, 0x1, 0x0, 0x0, 0x24000144}, 0x20000050) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000850}, 0x89c) 3.321701966s ago: executing program 2 (id=1093): socket$rds(0x15, 0x5, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b2b, 0x0) r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xa, 0x86, 0xf3, 0x40, 0x1110, 0x9024, 0xdb24, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xe9, 0x50, 0x9, [{{0x9, 0x4, 0x62, 0x4, 0x0, 0x6f, 0x6f, 0x49, 0x5}}]}}]}}, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x3, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x140c}}]}) ioctl$UI_ABS_SETUP(r0, 0x401c5504, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) 3.115927661s ago: executing program 1 (id=1094): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000850}, 0x89c) 2.910960512s ago: executing program 0 (id=1095): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_open_dev$I2C(0x0, 0x1, 0x402) ioctl$KVM_RUN(r0, 0xae80, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd09003012030e8000000060ce902d120c2f0081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) 2.823675584s ago: executing program 1 (id=1096): socket(0x1e, 0x4, 0x0) socket(0x1e, 0x4, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffff22}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001c00357428bd7000fed3df2502000000", @ANYRES32=r1, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x20004001}, 0x80c0) 1.944399045s ago: executing program 1 (id=1097): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r3}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) 1.610899645s ago: executing program 1 (id=1098): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x14, 0x46, 0x107, 0x70bd28, 0x25dfdbfc, {0x4, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0xc080) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x401, 0x7ff7, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x1, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7d, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x4, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x7, 0x5, 0x8000003, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x8, 0x3437, 0x3, 0x9, 0xfd, 0x601, 0x101, 0xdd80, 0x60a2, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x7, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0x55, 0x40, 0xff, 0x5, 0x1, 0x7, 0xe, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x2, 0x14, 0xf0, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x100000000000003, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0x10000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.21761703s ago: executing program 0 (id=1099): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x14, 0x2, [@TCA_CGROUP_EMATCHES={0x10, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x44}}, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.05438518s ago: executing program 0 (id=1100): pipe2(&(0x7f00000006c0)={0xffffffffffffffff}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, 0xa, 0xa, 0x101}, 0x14}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 842.160761ms ago: executing program 0 (id=1101): r0 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\x83\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x124, &(0x7f0000000300)={0x0, 0x3, 0x3}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000005000000080000000e"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000540)=""/207, 0xcf, 0xffefffffffffffff, 0x0) 707.754033ms ago: executing program 0 (id=1102): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000c80)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b9432f74331c", 0xc9}], 0x1}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000a00)="449f6aed247d197178d7f0a82e1deae14825b22ab6c0ec1ca0c27cd21d8a48637cb781581aac75a2f8", 0x29}, {&(0x7f0000000a40)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9ef104c95e999766bbf27d74ad5d8fa63210cde65d384dd3e87c3fedaec3144d1ee66a0eb0750363e346cb930dae6109df6b9955bf8af119b5c9a86622af4ff8b5949fb90f8edbde416d046d61512fe4c453bb601a780e1bbc00dbedc5e50d3cd9bc920810eaefd5f9a171e9d32ab46b", 0xe7}], 0x2}}], 0x2, 0x54004) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 515.122825ms ago: executing program 2 (id=1103): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) close(r0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r2, 0x400, 0x1) r3 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r4 = memfd_create(0x0, 0x2) write$binfmt_misc(r4, &(0x7f0000000180)="e502", 0x2) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 187.246755ms ago: executing program 2 (id=1104): r0 = socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1}, 0x10) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=1105): socket(0x1e, 0x4, 0x0) socket(0x1e, 0x4, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cf84ded40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c86e00f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec231fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895012f1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c3405000000000000003871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d37261774cc5a3bf6b466cb72812da518ff602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d50a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a31b16ac5fb73fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953f88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a5fe1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9d66ebbc8bab4ea81232fbef665f6212f875b2a00000000000000aceb111b66a500ca52fd8f848088c67ee65dfdcc4c580e9bc18c1699dca07d019bf1bf9dd3da480d6c155d7e60674ce88ab5ae07a9d16e22792d99986b531ab4e592ab5925da779e700cf20309a2137877690dc5c07956fc82d7b3bb46d3138041af18508938c9be4e5d0a98073463a5cff6c146d020743da474cb81677a6f389f0e00c33b70b7f8bab95435c27167f365a29fb09cbf35bf192f6a65616fa2ad9a6c7ca3a3ecd96aaecd993e8badb40e7eb8a22b0015e70c885cd519e28448168c6d914265998bff74ea1b0e651a6cae9419096248a0e41573827ad60fafce6e6540734c1f23f75337d836c31497e8112969a039d65aa297e2b046b5f4d11116a89f9f65693d4dc3e70fbfe0b2044fdb3f87e887d1daae8e38a0c19f668f776e19a02bb2449ee4384f6536879c85d7e41bc0276ee2b125d41ff358323311703ec01d64a573bdeb75bdcc87d01de38365ab9222713d2d1640a742d62fefb5403b2ed9969c32a0841e8c36b0107bb888eb14ac62e6d4bdfaeb9ee7436b97bf3825a19d6c8997ce285edf1d277ed703f560460417bfe702af833e83c5b987befb6d1fcf765ab7ea537d9dafb622a1ba8686cb9b1c63b84470364942e90d1cf856cead864f5e38c83b9ed86cc5725a20299ce512b165"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffff22}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001c00357428bd7000fed3df2502000000", @ANYRES32=r1, @ANYBLOB="4000b00408000100"], 0x30}, 0x1, 0x0, 0x0, 0x20004001}, 0x80c0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.185' (ED25519) to the list of known hosts. [ 112.372897][ T5788] cgroup: Unknown subsys name 'net' [ 112.614728][ T5788] cgroup: Unknown subsys name 'cpuset' [ 112.669451][ T5788] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 115.228017][ T5788] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 118.013563][ T5809] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 118.034426][ T5113] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 118.035166][ T5113] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 118.037378][ T5113] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 118.042669][ T5113] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 118.044006][ T5113] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 118.085525][ T61] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 118.091952][ T61] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 118.096346][ T61] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 118.097389][ T61] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 118.180214][ T61] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 118.190138][ T61] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 118.192673][ T61] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 118.194793][ T61] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 118.195838][ T61] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 118.231794][ T61] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 118.237951][ T61] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 118.239408][ T61] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 118.277805][ T5812] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 118.289341][ T5812] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 118.289418][ T5809] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 118.293994][ T5809] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 118.294958][ T5809] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 118.336365][ T5809] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 118.337732][ T5809] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 119.530426][ T5805] chnl_net:caif_netlink_parms(): no params data found [ 119.590531][ T5818] chnl_net:caif_netlink_parms(): no params data found [ 119.604647][ T5807] chnl_net:caif_netlink_parms(): no params data found [ 119.929914][ T5806] chnl_net:caif_netlink_parms(): no params data found [ 119.936108][ T5813] chnl_net:caif_netlink_parms(): no params data found [ 120.090172][ T61] Bluetooth: hci0: command tx timeout [ 120.171489][ T61] Bluetooth: hci1: command tx timeout [ 120.248931][ T61] Bluetooth: hci3: command tx timeout [ 120.330587][ T61] Bluetooth: hci2: command tx timeout [ 120.418566][ T61] Bluetooth: hci4: command tx timeout [ 120.661104][ T5805] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.662285][ T5805] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.662771][ T5805] bridge_slave_0: entered allmulticast mode [ 120.664935][ T5805] bridge_slave_0: entered promiscuous mode [ 120.841656][ T5805] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.841792][ T5805] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.842017][ T5805] bridge_slave_1: entered allmulticast mode [ 120.844624][ T5805] bridge_slave_1: entered promiscuous mode [ 120.848124][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.848477][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.848681][ T5818] bridge_slave_0: entered allmulticast mode [ 120.852650][ T5818] bridge_slave_0: entered promiscuous mode [ 120.932937][ T5807] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.933049][ T5807] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.933199][ T5807] bridge_slave_0: entered allmulticast mode [ 120.935135][ T5807] bridge_slave_0: entered promiscuous mode [ 121.009671][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.009780][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.009928][ T5818] bridge_slave_1: entered allmulticast mode [ 121.011801][ T5818] bridge_slave_1: entered promiscuous mode [ 121.171113][ T5807] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.171278][ T5807] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.171427][ T5807] bridge_slave_1: entered allmulticast mode [ 121.173297][ T5807] bridge_slave_1: entered promiscuous mode [ 121.505004][ T5805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.589639][ T5806] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.589804][ T5806] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.589958][ T5806] bridge_slave_0: entered allmulticast mode [ 121.592319][ T5806] bridge_slave_0: entered promiscuous mode [ 121.595531][ T5813] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.595682][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.595884][ T5813] bridge_slave_0: entered allmulticast mode [ 121.598197][ T5813] bridge_slave_0: entered promiscuous mode [ 121.752337][ T5805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.756657][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.756936][ T5806] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.757063][ T5806] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.757250][ T5806] bridge_slave_1: entered allmulticast mode [ 121.761334][ T5806] bridge_slave_1: entered promiscuous mode [ 121.764164][ T5813] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.764318][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.764998][ T5813] bridge_slave_1: entered allmulticast mode [ 121.769569][ T5813] bridge_slave_1: entered promiscuous mode [ 121.837601][ T5807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.942869][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.081879][ T5807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.179989][ T61] Bluetooth: hci0: command tx timeout [ 122.258581][ T61] Bluetooth: hci1: command tx timeout [ 122.328504][ T61] Bluetooth: hci3: command tx timeout [ 122.408485][ T61] Bluetooth: hci2: command tx timeout [ 122.427764][ T5805] team0: Port device team_slave_0 added [ 122.488561][ T61] Bluetooth: hci4: command tx timeout [ 122.509256][ T5806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.513358][ T5813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.602857][ T5805] team0: Port device team_slave_1 added [ 122.605104][ T5818] team0: Port device team_slave_0 added [ 122.609838][ T5806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.613665][ T5813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.617383][ T5807] team0: Port device team_slave_0 added [ 122.692548][ T5818] team0: Port device team_slave_1 added [ 122.831856][ T5807] team0: Port device team_slave_1 added [ 123.480716][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.480732][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.480751][ T5805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.592398][ T5806] team0: Port device team_slave_0 added [ 123.595816][ T5813] team0: Port device team_slave_0 added [ 123.596838][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.596854][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.596884][ T5805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.710844][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.710862][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.710883][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.714252][ T5806] team0: Port device team_slave_1 added [ 123.716837][ T5813] team0: Port device team_slave_1 added [ 123.792004][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.792022][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.792041][ T5807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.910808][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.910827][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.910848][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.032450][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.032466][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 124.032486][ T5807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.248535][ T61] Bluetooth: hci0: command tx timeout [ 124.279578][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.279598][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 124.279623][ T5806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.282862][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.282880][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 124.282899][ T5813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.328479][ T61] Bluetooth: hci1: command tx timeout [ 124.412028][ T61] Bluetooth: hci3: command tx timeout [ 124.427254][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.427276][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 124.427302][ T5806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.431087][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.431108][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 124.431140][ T5813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.488482][ T61] Bluetooth: hci2: command tx timeout [ 124.570487][ T61] Bluetooth: hci4: command tx timeout [ 124.644681][ T5805] hsr_slave_0: entered promiscuous mode [ 124.646025][ T5805] hsr_slave_1: entered promiscuous mode [ 124.866398][ T5818] hsr_slave_0: entered promiscuous mode [ 124.867711][ T5818] hsr_slave_1: entered promiscuous mode [ 124.879034][ T5818] debugfs: 'hsr0' already exists in 'hsr' [ 124.879135][ T5818] Cannot create hsr debugfs directory [ 124.995384][ T5807] hsr_slave_0: entered promiscuous mode [ 124.996457][ T5807] hsr_slave_1: entered promiscuous mode [ 124.997344][ T5807] debugfs: 'hsr0' already exists in 'hsr' [ 124.997372][ T5807] Cannot create hsr debugfs directory [ 125.496223][ T5806] hsr_slave_0: entered promiscuous mode [ 125.497810][ T5806] hsr_slave_1: entered promiscuous mode [ 125.512543][ T5806] debugfs: 'hsr0' already exists in 'hsr' [ 125.512567][ T5806] Cannot create hsr debugfs directory [ 125.606688][ T5813] hsr_slave_0: entered promiscuous mode [ 125.607686][ T5813] hsr_slave_1: entered promiscuous mode [ 125.609435][ T5813] debugfs: 'hsr0' already exists in 'hsr' [ 125.609467][ T5813] Cannot create hsr debugfs directory [ 126.328547][ T61] Bluetooth: hci0: command tx timeout [ 126.408559][ T61] Bluetooth: hci1: command tx timeout [ 126.491547][ T61] Bluetooth: hci3: command tx timeout [ 126.568382][ T61] Bluetooth: hci2: command tx timeout [ 126.648526][ T61] Bluetooth: hci4: command tx timeout [ 127.229313][ T5805] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 127.271399][ T5805] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 127.294011][ T5805] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 127.334218][ T5805] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 127.472431][ T5818] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 127.515825][ T5818] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 127.564535][ T5818] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 127.608157][ T5818] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 127.756038][ T5806] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 127.795483][ T5806] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 127.842958][ T5806] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 127.897498][ T5806] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 128.067026][ T5807] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 128.118469][ T5807] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 128.182096][ T5807] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 128.248919][ T5807] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 128.401063][ T5813] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 128.462687][ T5805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.463114][ T5813] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 128.513798][ T5813] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 128.560287][ T5813] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 128.706797][ T5805] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.759271][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.776366][ T166] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.776554][ T166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.822788][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.822927][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.910924][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.959610][ T5806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.978946][ T1211] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.979130][ T1211] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.049981][ T166] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.050110][ T166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.191547][ T5806] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.222666][ T5807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.246504][ T150] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.246669][ T150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.313364][ T139] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.313588][ T139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.404768][ T5807] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.438454][ T5813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.487441][ T194] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.490378][ T194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.575928][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.576720][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.665311][ T5813] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.747975][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.748133][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.813522][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.813718][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.946365][ T5805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.214787][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.585075][ T5818] veth0_vlan: entered promiscuous mode [ 130.734572][ T5818] veth1_vlan: entered promiscuous mode [ 130.855196][ T5806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.973857][ T5807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.996301][ T5818] veth0_macvtap: entered promiscuous mode [ 131.055706][ T5818] veth1_macvtap: entered promiscuous mode [ 131.185894][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.203494][ T5813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.216357][ T5806] veth0_vlan: entered promiscuous mode [ 131.252004][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.287602][ T5805] veth0_vlan: entered promiscuous mode [ 131.320469][ T68] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.326833][ T5806] veth1_vlan: entered promiscuous mode [ 131.328023][ T68] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.353743][ T68] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.391237][ T68] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.425008][ T5805] veth1_vlan: entered promiscuous mode [ 131.468918][ T5807] veth0_vlan: entered promiscuous mode [ 131.571214][ T5807] veth1_vlan: entered promiscuous mode [ 131.767234][ T5806] veth0_macvtap: entered promiscuous mode [ 131.794911][ T5813] veth0_vlan: entered promiscuous mode [ 131.817998][ T5805] veth0_macvtap: entered promiscuous mode [ 131.826669][ T4493] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.826696][ T4493] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.833011][ T5806] veth1_macvtap: entered promiscuous mode [ 131.878144][ T5813] veth1_vlan: entered promiscuous mode [ 131.896138][ T5805] veth1_macvtap: entered promiscuous mode [ 131.966981][ T5807] veth0_macvtap: entered promiscuous mode [ 131.983566][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.983590][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.008130][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.024323][ T5807] veth1_macvtap: entered promiscuous mode [ 132.066833][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.093268][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.122389][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.158029][ T69] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.175620][ T69] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.181991][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.204768][ T69] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.221621][ T69] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.229816][ T69] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.246843][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.260658][ T5813] veth0_macvtap: entered promiscuous mode [ 132.264650][ T69] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.295145][ T69] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.299560][ T69] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.369784][ T5813] veth1_macvtap: entered promiscuous mode [ 132.457767][ T69] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.473521][ T69] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.590742][ T69] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.599667][ T69] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.952586][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.143380][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.189031][ T4493] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.189057][ T4493] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.260862][ T139] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.264693][ T139] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.267023][ T139] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.285870][ T4493] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.285901][ T4493] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.294469][ T139] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.558195][ T4493] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.559709][ T4493] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.759982][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.760009][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.053873][ T4258] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.053897][ T4258] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.194981][ T37] audit: type=1107 audit(1765171331.029:2): pid=5925 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 134.380746][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.380770][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.688489][ T5933] syz.2.10 uses obsolete (PF_INET,SOCK_PACKET) [ 134.740024][ T139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.740061][ T139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.204999][ T139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.205027][ T139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.709082][ T37] audit: type=1326 audit(1765171332.579:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5945 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8476b2f749 code=0x7ffc0000 [ 135.731133][ T37] audit: type=1326 audit(1765171332.589:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5945 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8476b2f749 code=0x7ffc0000 [ 135.742993][ T37] audit: type=1326 audit(1765171332.619:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5945 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f8476b2f749 code=0x7ffc0000 [ 135.748526][ T37] audit: type=1326 audit(1765171332.619:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5945 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8476b2f749 code=0x7ffc0000 [ 135.753203][ T37] audit: type=1326 audit(1765171332.629:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5945 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8476b2f749 code=0x7ffc0000 [ 136.358998][ T5960] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 136.372314][ T5961] IPVS: stopping master sync thread 5960 ... [ 136.915225][ T37] audit: type=1326 audit(1765171333.789:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5966 comm="syz.3.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f6dbf749 code=0x7ffc0000 [ 136.915356][ T37] audit: type=1326 audit(1765171333.789:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5966 comm="syz.3.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f6dbf749 code=0x7ffc0000 [ 136.950715][ T37] audit: type=1326 audit(1765171333.829:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5966 comm="syz.3.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f88f6dbf749 code=0x7ffc0000 [ 136.960825][ T37] audit: type=1326 audit(1765171333.829:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5966 comm="syz.3.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f6dbf749 code=0x7ffc0000 [ 137.270192][ T5974] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 137.910071][ T5946] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1'. [ 138.004845][ T5973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 138.581900][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.582020][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.196368][ T5984] syz.4.27 (5984) used greatest stack depth: 17336 bytes left [ 139.506745][ T37] kauditd_printk_skb: 36 callbacks suppressed [ 139.506785][ T37] audit: type=1326 audit(1765171336.379:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6007 comm="syz.0.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8476b2f749 code=0x7ffc0000 [ 139.569580][ T37] audit: type=1326 audit(1765171336.439:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6007 comm="syz.0.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8476b2f749 code=0x7ffc0000 [ 139.569978][ T37] audit: type=1326 audit(1765171336.449:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6007 comm="syz.0.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8476b2f749 code=0x7ffc0000 [ 139.600381][ T37] audit: type=1326 audit(1765171336.449:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6007 comm="syz.0.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8476b2f749 code=0x7ffc0000 [ 139.617428][ T37] audit: type=1326 audit(1765171336.479:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6007 comm="syz.0.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8476b2f749 code=0x7ffc0000 [ 139.617500][ T37] audit: type=1326 audit(1765171336.479:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6007 comm="syz.0.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8476b2f749 code=0x7ffc0000 [ 139.734196][ T37] audit: type=1326 audit(1765171336.609:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6007 comm="syz.0.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8476b2f749 code=0x7ffc0000 [ 139.804157][ T37] audit: type=1326 audit(1765171336.649:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6007 comm="syz.0.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8476b2f749 code=0x7ffc0000 [ 139.804222][ T37] audit: type=1326 audit(1765171336.649:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6007 comm="syz.0.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8476b2f749 code=0x7ffc0000 [ 139.804271][ T37] audit: type=1326 audit(1765171336.649:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6007 comm="syz.0.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8476b2f749 code=0x7ffc0000 [ 142.921631][ T6066] Zero length message leads to an empty skb [ 144.320291][ T6091] 9p: Bad value for 'rfdno' [ 144.459827][ T6099] capability: warning: `syz.3.70' uses 32-bit capabilities (legacy support in use) [ 145.089260][ T6117] syzkaller0: entered promiscuous mode [ 145.089291][ T6117] syzkaller0: entered allmulticast mode [ 146.497230][ T6135] 9p: Bad value for 'rfdno' [ 147.995610][ T6163] syzkaller0: entered promiscuous mode [ 147.995641][ T6163] syzkaller0: entered allmulticast mode [ 149.664320][ T6195] process 'syz.0.106' launched '/dev/fd/6' with NULL argv: empty string added [ 150.702418][ T6220] syzkaller0: entered promiscuous mode [ 150.702451][ T6220] syzkaller0: entered allmulticast mode [ 150.812874][ T6226] capability: warning: `syz.2.118' uses deprecated v2 capabilities in a way that may be insecure [ 151.446177][ T6240] netlink: 'syz.2.124': attribute type 39 has an invalid length. [ 151.446777][ T6235] netlink: 'syz.1.121': attribute type 3 has an invalid length. [ 151.810019][ T6245] loop7: detected capacity change from 0 to 7 [ 151.896568][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 151.896668][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 151.922877][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 151.922921][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 151.925061][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 151.925095][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 151.956219][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 151.956269][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 151.978397][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 151.978449][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 151.978960][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 151.978994][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 151.980755][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 151.980807][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 151.980936][ T6245] ldm_validate_partition_table(): Disk read failed. [ 151.981242][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 151.981273][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 151.981574][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 151.981606][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 151.982006][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 151.982037][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 151.982437][ T6245] Dev loop7: unable to read RDB block 0 [ 152.009739][ T6245] loop7: unable to read partition table [ 152.010368][ T6245] loop7: partition table beyond EOD, truncated [ 152.010663][ T6245] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 152.508833][ T6257] syzkaller0: entered promiscuous mode [ 152.508862][ T6257] syzkaller0: entered allmulticast mode [ 153.133583][ T6269] netlink: 'syz.4.137': attribute type 3 has an invalid length. [ 153.812146][ T6283] netlink: 'syz.2.141': attribute type 39 has an invalid length. [ 154.128320][ T6291] gretap1: entered promiscuous mode [ 155.525930][ T6314] netlink: 101656 bytes leftover after parsing attributes in process `syz.4.152'. [ 158.428097][ T6384] syz.4.180 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 160.519195][ T6451] netlink: 96 bytes leftover after parsing attributes in process `syz.3.208'. [ 160.639716][ T37] kauditd_printk_skb: 8 callbacks suppressed [ 160.639747][ T37] audit: type=1326 audit(1765171357.509:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6449 comm="syz.3.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f6dbf749 code=0x7ffc0000 [ 160.639790][ T37] audit: type=1326 audit(1765171357.509:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6449 comm="syz.3.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f6dbf749 code=0x7ffc0000 [ 160.639829][ T37] audit: type=1326 audit(1765171357.519:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6449 comm="syz.3.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7f88f6dbf749 code=0x7ffc0000 [ 160.760484][ T6451] syzkaller0: entered allmulticast mode [ 160.760776][ T6451] syzkaller0: entered promiscuous mode [ 161.376837][ T6449] syzkaller0: left promiscuous mode [ 161.377350][ T6449] syzkaller0: left allmulticast mode [ 161.896828][ T37] audit: type=1326 audit(1765171358.759:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6455 comm="syz.4.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10b509f749 code=0x7ffc0000 [ 161.897254][ T37] audit: type=1326 audit(1765171358.769:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6455 comm="syz.4.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f10b509f749 code=0x7ffc0000 [ 161.952919][ T37] audit: type=1326 audit(1765171358.819:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6455 comm="syz.4.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10b509f749 code=0x7ffc0000 [ 161.953316][ T37] audit: type=1326 audit(1765171358.829:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6455 comm="syz.4.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f10b509f749 code=0x7ffc0000 [ 161.954069][ T37] audit: type=1326 audit(1765171358.829:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6455 comm="syz.4.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10b509f749 code=0x7ffc0000 [ 161.957357][ T37] audit: type=1326 audit(1765171358.829:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6455 comm="syz.4.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f10b509f749 code=0x7ffc0000 [ 162.059269][ T37] audit: type=1326 audit(1765171358.829:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6455 comm="syz.4.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10b509f749 code=0x7ffc0000 [ 162.066991][ T6456] netlink: 4 bytes leftover after parsing attributes in process `syz.4.209'. [ 162.067140][ T6456] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.067168][ T6456] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.195516][ T6456] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.195549][ T6456] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.214750][ T6526] netlink: 'syz.1.241': attribute type 39 has an invalid length. [ 163.340095][ T6528] netlink: 19 bytes leftover after parsing attributes in process `syz.3.242'. [ 163.602118][ T6538] netlink: 'syz.0.246': attribute type 1 has an invalid length. [ 163.741662][ T6540] syzkaller0: entered promiscuous mode [ 163.741706][ T6540] syzkaller0: entered allmulticast mode [ 164.743008][ T6572] netlink: 'syz.1.262': attribute type 39 has an invalid length. [ 165.600983][ T6591] Driver unsupported XDP return value 0 on prog (id 97) dev N/A, expect packet loss! [ 176.492202][ T6604] macvtap0: refused to change device tx_queue_len [ 177.788051][ T44] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 177.948869][ T6640] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 177.949073][ T6640] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 178.168598][ T44] usb 2-1: Using ep0 maxpacket: 16 [ 178.195436][ T44] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 178.195477][ T44] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 178.195499][ T44] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 178.219682][ T44] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 178.219730][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.219755][ T44] usb 2-1: Product: syz [ 178.219773][ T44] usb 2-1: Manufacturer: syz [ 178.219791][ T44] usb 2-1: SerialNumber: syz [ 178.283461][ T6640] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 178.447559][ T6657] netlink: 20 bytes leftover after parsing attributes in process `syz.2.300'. [ 178.671293][ T6640] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 178.671443][ T6640] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 178.967416][ T6640] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 179.088014][ T44] usb 2-1: 0:2 : does not exist [ 179.346188][ T6640] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 179.367843][ T6640] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 179.502420][ T6640] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 179.817857][ T6640] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 179.833915][ T6640] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 179.873223][ T44] usb 2-1: 1:0: failed to get current value for ch 0 (-22) [ 179.925468][ T6640] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 179.974748][ T44] usb 2-1: USB disconnect, device number 2 [ 180.008415][ T61] Bluetooth: hci0: command 0x0c1a tx timeout [ 180.080604][ T6640] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 180.080700][ T6640] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 180.163040][ T6640] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 180.585067][ T6683] netlink: 20 bytes leftover after parsing attributes in process `syz.0.313'. [ 180.728324][ T61] Bluetooth: hci1: command 0x0c1a tx timeout [ 180.950938][ T6694] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 181.368355][ T61] Bluetooth: hci3: command 0x0c1a tx timeout [ 181.436444][ T6712] netlink: 20 bytes leftover after parsing attributes in process `syz.2.325'. [ 182.050842][ T61] Bluetooth: hci2: command 0x0c1a tx timeout [ 182.088950][ T5809] Bluetooth: hci0: command 0x0c1a tx timeout [ 182.091967][ T61] Bluetooth: hci4: command 0x0c1a tx timeout [ 182.118890][ T6728] netlink: 28 bytes leftover after parsing attributes in process `syz.0.332'. [ 182.118922][ T6728] netlink: 28 bytes leftover after parsing attributes in process `syz.0.332'. [ 182.130221][ T6728] netlink: 28 bytes leftover after parsing attributes in process `syz.0.332'. [ 182.130258][ T6728] netlink: 28 bytes leftover after parsing attributes in process `syz.0.332'. [ 182.338788][ T6734] netlink: 4 bytes leftover after parsing attributes in process `syz.0.334'. [ 182.560590][ T6738] netlink: 20 bytes leftover after parsing attributes in process `syz.3.337'. [ 182.811122][ T61] Bluetooth: hci1: command 0x0c1a tx timeout [ 182.989204][ T6754] netlink: 28 bytes leftover after parsing attributes in process `syz.3.344'. [ 183.515340][ T6765] __nla_validate_parse: 4 callbacks suppressed [ 183.515363][ T6765] netlink: 20 bytes leftover after parsing attributes in process `syz.3.349'. [ 183.661029][ T61] Bluetooth: hci3: command 0x0c1a tx timeout [ 184.091313][ T61] Bluetooth: hci2: command 0x0c1a tx timeout [ 184.186934][ T5809] Bluetooth: hci0: command 0x0c1a tx timeout [ 184.187127][ T61] Bluetooth: hci4: command 0x0c1a tx timeout [ 184.898570][ T61] Bluetooth: hci1: command 0x0c1a tx timeout [ 185.619057][ T6792] rdma_op ffff888039793270 conn xmit_rdma 0000000000000000 [ 186.970794][ T61] Bluetooth: hci3: command 0x0c1a tx timeout [ 186.970839][ T61] Bluetooth: hci2: command 0x0c1a tx timeout [ 186.970869][ T61] Bluetooth: hci4: command 0x0c1a tx timeout [ 187.163482][ T6798] netlink: 28 bytes leftover after parsing attributes in process `syz.1.358'. [ 187.273525][ T6786] netlink: 28 bytes leftover after parsing attributes in process `syz.2.356'. [ 187.273654][ T6786] netlink: 28 bytes leftover after parsing attributes in process `syz.2.356'. [ 187.273923][ T6789] netlink: 28 bytes leftover after parsing attributes in process `syz.2.356'. [ 187.273943][ T6789] netlink: 28 bytes leftover after parsing attributes in process `syz.2.356'. [ 187.274242][ T6791] netlink: 4 bytes leftover after parsing attributes in process `syz.4.357'. [ 187.349064][ T6799] netlink: 28 bytes leftover after parsing attributes in process `syz.1.358'. [ 187.551002][ T6806] tipc: Started in network mode [ 187.551029][ T6806] tipc: Node identity 4, cluster identity 4711 [ 187.551043][ T6806] tipc: Node number set to 4 [ 189.424918][ T6797] IPVS: starting estimator thread 0... [ 189.535146][ T6825] IPVS: using max 11 ests per chain, 26400 per kthread [ 189.553465][ T6823] nbd0: detected capacity change from 0 to 127 [ 189.554205][ T6826] netlink: 64 bytes leftover after parsing attributes in process `syz.2.367'. [ 189.557114][ T5809] block nbd0: Receive control failed (result -32) [ 189.638369][ T809] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 189.678365][ T6797] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 189.808442][ T809] usb 5-1: Using ep0 maxpacket: 16 [ 189.811448][ T809] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 189.811485][ T809] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 189.814948][ T809] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 189.814982][ T809] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.815004][ T809] usb 5-1: Product: syz [ 189.815019][ T809] usb 5-1: Manufacturer: syz [ 189.815035][ T809] usb 5-1: SerialNumber: syz [ 189.840929][ T809] usb 5-1: config 0 descriptor?? [ 189.965716][ T809] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 189.965756][ T809] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 190.058339][ T6797] usb 4-1: Using ep0 maxpacket: 16 [ 190.060976][ T6797] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 190.061004][ T6797] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 190.061025][ T6797] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 190.066733][ T6797] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 190.066767][ T6797] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.066789][ T6797] usb 4-1: Product: syz [ 190.066805][ T6797] usb 4-1: Manufacturer: syz [ 190.066821][ T6797] usb 4-1: SerialNumber: syz [ 190.199842][ T6832] tipc: Started in network mode [ 190.199869][ T6832] tipc: Node identity 4, cluster identity 4711 [ 190.199882][ T6832] tipc: Node number set to 4 [ 190.474030][ T809] em28xx 5-1:0.0: unknown em28xx chip ID (224) [ 190.620505][ T6797] usb 4-1: 0:2 : does not exist [ 190.681791][ T809] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 191.093403][ T809] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 191.093433][ T809] em28xx 5-1:0.0: No AC97 audio processor [ 191.139845][ T809] usb 5-1: USB disconnect, device number 2 [ 191.142839][ T809] em28xx 5-1:0.0: Disconnecting em28xx [ 191.184790][ T809] em28xx 5-1:0.0: Freeing device [ 191.283340][ T6797] usb 4-1: 1:0: failed to get current value for ch 0 (-22) [ 191.396864][ T6797] usb 4-1: USB disconnect, device number 2 [ 191.704987][ T6842] netlink: 12 bytes leftover after parsing attributes in process `syz.1.373'. [ 194.117454][ T6868] netlink: 'syz.1.382': attribute type 39 has an invalid length. [ 194.283193][ T6872] genirq: Flags mismatch irq 4. 00202000 (pcl816) vs. 00202080 (ttyS0) [ 194.625746][ T6886] netlink: 12 bytes leftover after parsing attributes in process `syz.4.390'. [ 194.628378][ T6797] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 194.652515][ T6883] syzkaller0: entered promiscuous mode [ 194.652545][ T6883] syzkaller0: entered allmulticast mode [ 194.778335][ T6797] usb 3-1: Using ep0 maxpacket: 16 [ 194.781527][ T6797] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 194.781555][ T6797] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 194.781575][ T6797] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 194.784899][ T6797] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 194.784930][ T6797] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.784951][ T6797] usb 3-1: Product: syz [ 194.784966][ T6797] usb 3-1: Manufacturer: syz [ 194.784981][ T6797] usb 3-1: SerialNumber: syz [ 195.367861][ T6797] usb 3-1: 0:2 : does not exist [ 195.796650][ T6797] usb 3-1: 1:0: cannot get min/max values for control 4 (id 1) [ 195.872891][ T6797] usb 3-1: USB disconnect, device number 2 [ 196.406642][ T6899] netlink: 'syz.4.394': attribute type 39 has an invalid length. [ 196.928367][ T6797] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 197.102260][ T6797] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 197.102298][ T6797] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 197.102328][ T6797] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 197.102375][ T6797] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 197.102399][ T6797] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.156218][ T6904] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 197.754586][ T6923] syzkaller0: entered promiscuous mode [ 197.754616][ T6923] syzkaller0: entered allmulticast mode [ 198.426898][ T6938] netlink: 'syz.4.409': attribute type 39 has an invalid length. [ 198.598428][ T5654] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 198.745203][ T6944] netlink: 28 bytes leftover after parsing attributes in process `syz.1.412'. [ 198.745236][ T6944] netlink: 28 bytes leftover after parsing attributes in process `syz.1.412'. [ 198.764948][ T5654] usb 4-1: config 0 has an invalid interface number: 98 but max is 0 [ 198.764982][ T5654] usb 4-1: config 0 has no interface number 0 [ 198.765020][ T5654] usb 4-1: config 0 interface 98 has no altsetting 0 [ 198.772795][ T5654] usb 4-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 198.772833][ T5654] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.772856][ T5654] usb 4-1: Product: syz [ 198.772874][ T5654] usb 4-1: Manufacturer: syz [ 198.772892][ T5654] usb 4-1: SerialNumber: syz [ 198.802479][ T5654] usb 4-1: config 0 descriptor?? [ 198.806140][ T6944] netlink: 28 bytes leftover after parsing attributes in process `syz.1.412'. [ 198.806171][ T6944] netlink: 28 bytes leftover after parsing attributes in process `syz.1.412'. [ 199.087637][ T5654] usb 4-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II [ 199.308948][ T6797] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 199.316830][ T6797] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input5 [ 199.817671][ T5654] usb 4-1: reset high-speed USB device number 3 using dummy_hcd [ 199.977424][ T6797] usb 1-1: USB disconnect, device number 2 [ 199.977513][ C0] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 200.005734][ T6947] syz.2.413 (6947) used greatest stack depth: 15552 bytes left [ 200.039218][ T44] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 200.040811][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.040887][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.098321][ T5654] usb 4-1: device firmware changed [ 200.150062][ T5654] usb 4-1: [ueagle-atm] pre-firmware device, uploading firmware [ 200.150237][ T5654] usb 4-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 200.164507][ T5654] usb 4-1: USB disconnect, device number 3 [ 200.194597][ T5816] usb 4-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2 [ 200.194621][ T5816] usb 4-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw [ 200.238509][ T44] usb 5-1: Using ep0 maxpacket: 32 [ 200.243777][ T44] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 200.243810][ T44] usb 5-1: config 0 has no interface number 0 [ 200.243863][ T44] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 200.286174][ T44] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 200.286205][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.286251][ T44] usb 5-1: Product: syz [ 200.286267][ T44] usb 5-1: Manufacturer: syz [ 200.286282][ T44] usb 5-1: SerialNumber: syz [ 200.328062][ T44] usb 5-1: config 0 descriptor?? [ 200.340701][ T6959] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 200.393688][ T5654] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 200.553640][ T6959] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 200.661287][ T5654] usb 4-1: config 0 has an invalid interface number: 98 but max is 0 [ 200.661323][ T5654] usb 4-1: config 0 has no interface number 0 [ 200.661362][ T5654] usb 4-1: config 0 interface 98 has no altsetting 0 [ 200.706782][ T5654] usb 4-1: string descriptor 0 read error: -22 [ 200.706926][ T5654] usb 4-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 200.706951][ T5654] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.736601][ T5654] usb 4-1: config 0 descriptor?? [ 200.803068][ T5654] usb 4-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II [ 200.938402][ T5654] usb 4-1: reset high-speed USB device number 4 using dummy_hcd [ 201.409516][ T6986] netlink: 168 bytes leftover after parsing attributes in process `syz.2.428'. [ 201.855979][ T5654] usb 4-1: [ueagle-atm] pre-firmware device, uploading firmware [ 201.856166][ T5654] usb 4-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 201.886299][ T5654] usb 4-1: USB disconnect, device number 4 [ 202.771378][ T5969] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 202.930622][ T5969] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.930688][ T5969] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 202.930713][ T5969] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.978517][ T5969] usb 4-1: config 0 descriptor?? [ 203.002516][ T5969] pwc: Askey VC010 type 2 USB webcam detected. [ 203.032478][ T44] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 203.038016][ T44] asix 5-1:0.188: probe with driver asix failed with error -71 [ 203.103250][ T44] usb 5-1: USB disconnect, device number 3 [ 203.427584][ T5969] pwc: recv_control_msg error -32 req 02 val 2b00 [ 203.432814][ T5969] pwc: recv_control_msg error -32 req 02 val 2700 [ 203.435656][ T5969] pwc: recv_control_msg error -32 req 02 val 2c00 [ 203.457233][ T5969] pwc: recv_control_msg error -32 req 04 val 1000 [ 203.463105][ T5969] pwc: recv_control_msg error -32 req 04 val 1300 [ 203.467029][ T5969] pwc: recv_control_msg error -32 req 04 val 1400 [ 203.468082][ T5969] pwc: recv_control_msg error -32 req 02 val 2000 [ 203.471496][ T5969] pwc: recv_control_msg error -32 req 02 val 2100 [ 203.481727][ T5969] pwc: recv_control_msg error -32 req 04 val 1500 [ 203.483554][ T5969] pwc: recv_control_msg error -32 req 02 val 2500 [ 203.484966][ T5969] pwc: recv_control_msg error -32 req 02 val 2400 [ 203.487573][ T5969] pwc: recv_control_msg error -32 req 02 val 2600 [ 203.490163][ T5969] pwc: recv_control_msg error -71 req 02 val 2900 [ 203.492900][ T5969] pwc: recv_control_msg error -71 req 02 val 2800 [ 203.497741][ T5969] pwc: recv_control_msg error -71 req 04 val 1100 [ 203.499883][ T5969] pwc: recv_control_msg error -71 req 04 val 1200 [ 203.559922][ T5969] pwc: Registered as video103. [ 203.575551][ T5969] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input6 [ 203.621260][ T5969] usb 4-1: USB disconnect, device number 5 [ 205.628548][ T5654] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 205.783626][ T5654] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.783673][ T5654] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.783696][ T5654] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 205.783740][ T5654] usb 2-1: New USB device found, idVendor=0458, idProduct=5014, bcdDevice= 0.00 [ 205.783764][ T5654] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.843782][ T5654] usb 2-1: config 0 descriptor?? [ 206.271788][ T5654] kye 0003:0458:5014.0001: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 206.303440][ T5654] kye 0003:0458:5014.0001: hidraw0: USB HID ve.50 Device [HID 0458:5014] on usb-dummy_hcd.1-1/input0 [ 206.303477][ T5654] kye 0003:0458:5014.0001: tablet-enabling feature report not found [ 206.303492][ T5654] kye 0003:0458:5014.0001: tablet enabling failed [ 206.469011][ T5969] usb 2-1: USB disconnect, device number 3 [ 206.571194][ T5809] Bluetooth: hci0: command 0x0c1a tx timeout [ 207.024023][ T5809] Bluetooth: hci2: unexpected event for opcode 0x0c05 [ 207.052019][ T7185] netlink: 4 bytes leftover after parsing attributes in process `syz.4.507'. [ 207.121213][ T7190] netlink: 4 bytes leftover after parsing attributes in process `syz.4.507'. [ 207.701759][ T61] Bluetooth: hci1: unexpected event for opcode 0x080c [ 209.759774][ T7246] tipc: Started in network mode [ 209.759808][ T7246] tipc: Node identity 02255a37bb89, cluster identity 4711 [ 209.762444][ T7246] tipc: Enabled bearer , priority 0 [ 209.800149][ T7246] tipc: Resetting bearer [ 210.492302][ T7245] tipc: Disabling bearer [ 213.438228][ T7293] netlink: 8 bytes leftover after parsing attributes in process `syz.3.543'. [ 213.534770][ T7290] ceph: No mds server is up or the cluster is laggy [ 213.582832][ T809] libceph: connect (1)[c::]:6789 error -101 [ 213.583909][ T809] libceph: mon0 (1)[c::]:6789 connect error [ 214.214395][ T7307] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.548'. [ 215.996750][ T7337] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.559'. [ 216.498362][ T809] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 216.658467][ T809] usb 5-1: Using ep0 maxpacket: 16 [ 216.665621][ T809] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.665691][ T809] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.665717][ T809] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 216.665763][ T809] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 216.665855][ T809] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.759788][ T809] usb 5-1: config 0 descriptor?? [ 217.029328][ T7350] tipc: Started in network mode [ 217.029362][ T7350] tipc: Node identity 0e7aa29379aa, cluster identity 4711 [ 217.029566][ T7350] tipc: Enabled bearer , priority 0 [ 217.034745][ T7348] tipc: Resetting bearer [ 217.423864][ T809] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 217.423904][ T809] shield 0003:0955:7214.0002: item fetching failed at offset 4/5 [ 217.424728][ T809] shield 0003:0955:7214.0002: Parse failed [ 217.424805][ T809] shield 0003:0955:7214.0002: probe with driver shield failed with error -22 [ 217.590923][ T5887] usb 5-1: USB disconnect, device number 4 [ 218.156109][ T5654] tipc: Node number set to 2010161811 [ 219.342245][ T7397] tipc: Enabled bearer , priority 0 [ 219.751531][ T7386] tipc: Resetting bearer [ 219.752150][ T7389] syzkaller0: entered promiscuous mode [ 219.752175][ T7389] syzkaller0: entered allmulticast mode [ 220.085684][ T7385] tipc: Resetting bearer [ 220.188318][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 220.308261][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 220.309817][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 220.309897][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 220.309977][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 220.315386][ T5809] Bluetooth: hci1: unexpected event for opcode 0x202d [ 220.390211][ T7385] tipc: Disabling bearer [ 220.843306][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 220.877959][ T7417] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.584'. [ 222.848493][ T31] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 222.998311][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 223.004883][ T31] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 223.004913][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 223.004935][ T31] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 223.018796][ T31] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 223.018836][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.018859][ T31] usb 4-1: Product: syz [ 223.018877][ T31] usb 4-1: Manufacturer: syz [ 223.018895][ T31] usb 4-1: SerialNumber: syz [ 224.433717][ T31] usb 4-1: 0:2 : does not exist [ 224.475882][ T31] usb 4-1: 1:0: cannot get min/max values for control 4 (id 1) [ 224.624807][ T31] usb 4-1: USB disconnect, device number 6 [ 224.632032][ T5889] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 224.780772][ T5889] usb 5-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06 [ 224.780812][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.786122][ T5889] usb 5-1: config 0 descriptor?? [ 224.888914][ T5887] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 224.999405][ T5809] Bluetooth: hci0: Malformed LE Event: 0x0d [ 225.006332][ T5889] usb 5-1: string descriptor 0 read error: -71 [ 225.029628][ T5889] usb-storage 5-1:0.0: USB Mass Storage device detected [ 225.038375][ T5887] usb 2-1: Using ep0 maxpacket: 8 [ 225.088345][ T5887] usb 2-1: unable to get BOS descriptor or descriptor too short [ 225.089590][ T5887] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 225.089625][ T5887] usb 2-1: can't read configurations, error -71 [ 225.090322][ T5889] usb-storage 5-1:0.0: Quirks match for vid 05ab pid 0060: 2 [ 225.140060][ T7469] fuse: Bad value for 'fd' [ 225.251552][ T5889] usb 5-1: USB disconnect, device number 5 [ 229.766443][ T7512] netlink: 'syz.3.619': attribute type 9 has an invalid length. [ 229.766473][ T7512] netlink: 'syz.3.619': attribute type 11 has an invalid length. [ 229.766488][ T7512] netlink: 'syz.3.619': attribute type 12 has an invalid length. [ 229.766504][ T7512] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.619'. [ 230.078339][ T5654] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 230.238486][ T5654] usb 2-1: Using ep0 maxpacket: 8 [ 230.254680][ T5654] usb 2-1: unable to get BOS descriptor or descriptor too short [ 230.256059][ T5654] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 230.256101][ T5654] usb 2-1: can't read configurations, error -71 [ 233.287341][ T7542] netlink: 12 bytes leftover after parsing attributes in process `syz.3.628'. [ 233.562379][ T7537] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 234.219233][ T7553] netlink: 'syz.0.633': attribute type 9 has an invalid length. [ 234.219269][ T7553] netlink: 'syz.0.633': attribute type 11 has an invalid length. [ 234.219284][ T7553] netlink: 'syz.0.633': attribute type 12 has an invalid length. [ 234.219301][ T7553] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.633'. [ 235.568670][ T31] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 235.718336][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 235.746601][ T31] usb 4-1: unable to get BOS descriptor or descriptor too short [ 235.747790][ T31] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 235.747826][ T31] usb 4-1: can't read configurations, error -71 [ 238.008966][ T7580] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 238.140809][ T31] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 238.339597][ T31] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 238.339632][ T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 238.341245][ T31] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 238.341275][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 238.341298][ T31] usb 1-1: SerialNumber: syz [ 238.593075][ T7586] netlink: 'syz.4.645': attribute type 9 has an invalid length. [ 238.593103][ T7586] netlink: 'syz.4.645': attribute type 11 has an invalid length. [ 238.593118][ T7586] netlink: 'syz.4.645': attribute type 12 has an invalid length. [ 238.593135][ T7586] netlink: 210020 bytes leftover after parsing attributes in process `syz.4.645'. [ 240.611896][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 240.612141][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 240.778216][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 240.957919][ T31] usb 1-1: invalid UAC_HEADER (v1) [ 241.100405][ T31] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 241.140623][ T31] usb 1-1: USB disconnect, device number 3 [ 241.478438][ T31] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 241.638407][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 241.658520][ T31] usb 1-1: config 255 has an invalid interface number: 3 but max is 0 [ 241.658555][ T31] usb 1-1: config 255 has no interface number 0 [ 241.658592][ T31] usb 1-1: config 255 interface 3 has no altsetting 0 [ 241.665748][ T31] usb 1-1: New USB device found, idVendor=19d2, idProduct=0176, bcdDevice=ae.39 [ 241.665794][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.665831][ T31] usb 1-1: Product: И [ 241.665847][ T31] usb 1-1: Manufacturer: 㐍 [ 241.665864][ T31] usb 1-1: SerialNumber: syz [ 241.988674][ T31] usb 1-1: USB disconnect, device number 4 [ 242.478728][ T7611] netlink: 28 bytes leftover after parsing attributes in process `syz.2.655'. [ 242.478769][ T7611] netlink: 28 bytes leftover after parsing attributes in process `syz.2.655'. [ 242.479248][ T7612] netlink: 28 bytes leftover after parsing attributes in process `syz.2.655'. [ 242.479271][ T7612] netlink: 28 bytes leftover after parsing attributes in process `syz.2.655'. [ 242.608379][ T31] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 242.818319][ T31] usb 5-1: Using ep0 maxpacket: 8 [ 242.858656][ T31] usb 5-1: config 255 has an invalid interface number: 3 but max is 2 [ 242.858693][ T31] usb 5-1: config 255 has an invalid interface number: 55 but max is 2 [ 242.858716][ T31] usb 5-1: config 255 has an invalid interface number: 6 but max is 2 [ 242.858739][ T31] usb 5-1: config 255 has an invalid descriptor of length 1, skipping remainder of the config [ 242.858761][ T31] usb 5-1: config 255 has no interface number 0 [ 242.858779][ T31] usb 5-1: config 255 has no interface number 1 [ 242.858798][ T31] usb 5-1: config 255 has no interface number 2 [ 242.858883][ T31] usb 5-1: config 255 interface 3 altsetting 5 endpoint 0x6 has invalid maxpacket 9225, setting to 64 [ 242.858914][ T31] usb 5-1: config 255 interface 3 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 242.858938][ T31] usb 5-1: config 255 interface 3 altsetting 5 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 242.858968][ T31] usb 5-1: config 255 interface 3 altsetting 5 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 242.859013][ T31] usb 5-1: config 255 interface 55 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 15 [ 242.859044][ T31] usb 5-1: too many endpoints for config 255 interface 6 altsetting 121: 179, using maximum allowed: 30 [ 242.859088][ T31] usb 5-1: config 255 interface 6 altsetting 121 has 0 endpoint descriptors, different from the interface descriptor's value: 179 [ 242.859117][ T31] usb 5-1: config 255 interface 3 has no altsetting 0 [ 242.859137][ T31] usb 5-1: config 255 interface 55 has no altsetting 0 [ 242.859156][ T31] usb 5-1: config 255 interface 6 has no altsetting 0 [ 242.863548][ T31] usb 5-1: New USB device found, idVendor=19d2, idProduct=0176, bcdDevice=ae.39 [ 242.863586][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.863609][ T31] usb 5-1: Product: И [ 242.863625][ T31] usb 5-1: Manufacturer: 㐍 [ 242.863641][ T31] usb 5-1: SerialNumber: syz [ 242.884866][ T5887] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 243.948369][ T7614] netlink: 16 bytes leftover after parsing attributes in process `syz.4.656'. [ 243.948655][ T7614] tipc: Enabling of bearer rejected, failed to enable media [ 244.014544][ T5887] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 244.014610][ T5887] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 244.014636][ T5887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.180276][ T31] usb 5-1: USB disconnect, device number 6 [ 244.197853][ T5887] usb 2-1: config 0 descriptor?? [ 244.279485][ T5887] pwc: Askey VC010 type 2 USB webcam detected. [ 244.285718][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 244.956293][ T5887] pwc: recv_control_msg error -32 req 02 val 2b00 [ 244.957976][ T5887] pwc: recv_control_msg error -32 req 02 val 2700 [ 244.959249][ T5887] pwc: recv_control_msg error -32 req 02 val 2c00 [ 244.960429][ T5887] pwc: recv_control_msg error -32 req 04 val 1000 [ 244.961549][ T5887] pwc: recv_control_msg error -32 req 04 val 1300 [ 244.962881][ T5887] pwc: recv_control_msg error -32 req 04 val 1400 [ 244.964104][ T5887] pwc: recv_control_msg error -32 req 02 val 2000 [ 244.965218][ T5887] pwc: recv_control_msg error -32 req 02 val 2100 [ 244.966370][ T5887] pwc: recv_control_msg error -32 req 04 val 1500 [ 244.967646][ T5887] pwc: recv_control_msg error -32 req 02 val 2500 [ 244.968865][ T5887] pwc: recv_control_msg error -32 req 02 val 2400 [ 245.510362][ T5887] pwc: recv_control_msg error -71 req 02 val 2900 [ 245.510912][ T5887] pwc: recv_control_msg error -71 req 02 val 2800 [ 245.511737][ T5887] pwc: recv_control_msg error -71 req 04 val 1100 [ 245.518390][ T5887] pwc: recv_control_msg error -71 req 04 val 1200 [ 245.844751][ T5887] pwc: Registered as video103. [ 245.847496][ T5887] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input7 [ 245.915540][ T5887] usb 2-1: USB disconnect, device number 8 [ 253.588951][ T7679] tipc: Enabled bearer , priority 0 [ 253.591612][ T7679] syzkaller0: entered promiscuous mode [ 253.591642][ T7679] syzkaller0: entered allmulticast mode [ 253.661132][ T7679] tipc: Resetting bearer [ 253.896806][ T7677] tipc: Resetting bearer [ 253.949259][ T5874] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 254.233230][ T5874] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 254.233294][ T5874] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 254.233328][ T5874] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.288072][ T5874] usb 1-1: config 0 descriptor?? [ 254.305252][ T5874] pwc: Askey VC010 type 2 USB webcam detected. [ 254.323742][ T7677] tipc: Disabling bearer [ 254.518414][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 254.688330][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 254.690453][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.690489][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 254.690535][ T10] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 254.690559][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.696788][ T10] usb 3-1: config 0 descriptor?? [ 254.763683][ T5874] pwc: recv_control_msg error -32 req 02 val 2b00 [ 254.765141][ T5874] pwc: recv_control_msg error -32 req 02 val 2700 [ 254.783253][ T5874] pwc: recv_control_msg error -32 req 02 val 2c00 [ 254.784243][ T5874] pwc: recv_control_msg error -32 req 04 val 1000 [ 254.785920][ T5874] pwc: recv_control_msg error -32 req 04 val 1300 [ 254.786809][ T5874] pwc: recv_control_msg error -32 req 04 val 1400 [ 254.787716][ T5874] pwc: recv_control_msg error -32 req 02 val 2000 [ 254.822794][ T5874] pwc: recv_control_msg error -32 req 02 val 2100 [ 254.843080][ T5874] pwc: recv_control_msg error -32 req 04 val 1500 [ 254.855303][ T5874] pwc: recv_control_msg error -32 req 02 val 2500 [ 254.882862][ T5874] pwc: recv_control_msg error -32 req 02 val 2400 [ 254.903763][ T7693] netlink: 12 bytes leftover after parsing attributes in process `syz.1.681'. [ 255.085496][ T5874] pwc: recv_control_msg error -71 req 02 val 2900 [ 255.087001][ T5874] pwc: recv_control_msg error -71 req 02 val 2800 [ 255.087739][ T5874] pwc: recv_control_msg error -71 req 04 val 1100 [ 255.096946][ T5874] pwc: recv_control_msg error -71 req 04 val 1200 [ 255.186566][ T5874] pwc: Registered as video103. [ 255.204590][ T5874] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input9 [ 255.206293][ T10] HID 045e:07da: Invalid code 65791 type 1 [ 255.253427][ T5874] usb 1-1: USB disconnect, device number 5 [ 255.296024][ T10] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0003/input/input8 [ 255.435064][ T10] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 255.468983][ T10] usb 3-1: USB disconnect, device number 3 [ 257.162250][ T5809] Bluetooth: hci1: unexpected event for opcode 0x0c05 [ 260.580871][ T7731] netlink: 12 bytes leftover after parsing attributes in process `syz.2.692'. [ 261.507405][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.507460][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.950033][ T5888] usb 4-1: [UEAGLE-ATM] firmware is not available [ 262.167739][ T5816] usb 4-1: [UEAGLE-ATM] firmware is not available [ 262.392321][ T61] Bluetooth: hci4: unexpected event for opcode 0x0c05 [ 262.508365][ T5888] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 262.658272][ T5888] usb 1-1: Using ep0 maxpacket: 16 [ 262.661295][ T5888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.661334][ T5888] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 262.661381][ T5888] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 262.661408][ T5888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.729123][ T5888] usb 1-1: config 0 descriptor?? [ 263.826476][ T5888] HID 045e:07da: Invalid code 65791 type 1 [ 263.842100][ T5888] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0004/input/input10 [ 263.999959][ T7765] fuse: Bad value for 'fd' [ 264.303266][ T5888] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 264.311114][ T5888] usb 1-1: USB disconnect, device number 6 [ 264.344682][ T7773] netlink: 12 bytes leftover after parsing attributes in process `syz.1.706'. [ 265.779113][ T44] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 266.002256][ T5888] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 266.604951][ T44] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 266.604987][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.605009][ T44] usb 2-1: Product: syz [ 266.605025][ T44] usb 2-1: Manufacturer: syz [ 266.605040][ T44] usb 2-1: SerialNumber: syz [ 266.739181][ T7797] fuse: Bad value for 'fd' [ 266.856024][ T5888] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 266.856063][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.856082][ T5888] usb 5-1: Product: syz [ 266.856097][ T5888] usb 5-1: Manufacturer: syz [ 266.856112][ T5888] usb 5-1: SerialNumber: syz [ 266.884591][ T5888] usb 5-1: config 0 descriptor?? [ 266.918997][ T5888] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 267.126814][ T44] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 267.126895][ T44] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 267.318757][ T5874] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 267.478378][ T5874] usb 4-1: Using ep0 maxpacket: 16 [ 267.485352][ T5874] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.485392][ T5874] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.485476][ T5874] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 267.485525][ T5874] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 267.485551][ T5874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.576786][ T5874] usb 4-1: config 0 descriptor?? [ 267.848395][ T61] Bluetooth: hci4: command 0x0c1a tx timeout [ 268.115682][ T5809] Bluetooth: hci2: Malformed HCI Event: 0x22 [ 268.272354][ T5874] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 268.272398][ T5874] shield 0003:0955:7214.0005: item fetching failed at offset 4/5 [ 268.275384][ T5874] shield 0003:0955:7214.0005: Parse failed [ 268.275689][ T5874] shield 0003:0955:7214.0005: probe with driver shield failed with error -22 [ 268.337137][ T5888] gspca_sunplus: reg_r err -71 [ 268.337242][ T5888] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 268.341946][ T5888] usb 5-1: USB disconnect, device number 7 [ 268.618623][ T5809] Bluetooth: hci4: unexpected event for opcode 0x0c05 [ 268.718988][ T7510] usb 4-1: USB disconnect, device number 9 [ 269.477063][ T7815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.493690][ T7815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.564831][ T7784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.567209][ T7784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.699692][ T44] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000080. ret = -EPROTO [ 269.699755][ T44] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 269.703367][ T44] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 269.780395][ T44] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 269.820111][ T44] usb 2-1: USB disconnect, device number 9 [ 274.104253][ T7831] netlink: 244 bytes leftover after parsing attributes in process `syz.3.724'. [ 274.746249][ T7833] fuse: Bad value for 'fd' [ 275.525622][ T5809] Bluetooth: hci1: unexpected event for opcode 0x0c05 [ 275.555870][ T7845] Bluetooth: MGMT ver 1.23 [ 275.751125][ T7854] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.732'. [ 275.928396][ T5888] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 275.980178][ T7664] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 276.169229][ T7664] usb 3-1: Using ep0 maxpacket: 16 [ 276.207337][ T5888] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 276.207458][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.207481][ T5888] usb 1-1: Product: syz [ 276.207497][ T5888] usb 1-1: Manufacturer: syz [ 276.207512][ T5888] usb 1-1: SerialNumber: syz [ 276.207757][ T7664] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.207787][ T7664] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.207809][ T7664] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 276.207838][ T7664] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 276.207854][ T7664] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.330928][ T7864] netlink: 244 bytes leftover after parsing attributes in process `syz.1.738'. [ 276.883995][ T7664] usb 3-1: config 0 descriptor?? [ 277.038833][ T5888] usb 1-1: config 0 descriptor?? [ 277.105350][ T5888] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 277.608351][ T5809] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 277.609691][ T5812] Bluetooth: hci0: command 0x0c1a tx timeout [ 277.730479][ T7664] shield 0003:0955:7214.0006: unknown main item tag 0x0 [ 277.730517][ T7664] shield 0003:0955:7214.0006: item fetching failed at offset 4/5 [ 277.731314][ T7664] shield 0003:0955:7214.0006: Parse failed [ 277.731391][ T7664] shield 0003:0955:7214.0006: probe with driver shield failed with error -22 [ 277.760286][ T61] Bluetooth: hci0: unexpected event for opcode 0x0c05 [ 277.897035][ T31] usb 3-1: USB disconnect, device number 4 [ 278.103939][ T7883] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.745'. [ 278.720200][ T7887] netlink: 28 bytes leftover after parsing attributes in process `syz.1.744'. [ 279.003513][ T7886] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 279.414788][ T61] Bluetooth: hci1: Malformed HCI Event: 0x22 [ 279.445429][ T5888] gspca_sunplus: reg_r err -71 [ 279.445505][ T5888] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 279.447943][ T5888] usb 1-1: USB disconnect, device number 7 [ 279.653127][ T61] Bluetooth: hci4: unexpected event for opcode 0x0c05 [ 279.723594][ T7910] syzkaller1: entered promiscuous mode [ 279.723623][ T7910] syzkaller1: entered allmulticast mode [ 279.739818][ T7913] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.756'. [ 280.517089][ T7927] netlink: 28 bytes leftover after parsing attributes in process `syz.4.759'. [ 280.951098][ T7926] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 281.468416][ T61] Bluetooth: hci0: Malformed HCI Event: 0x22 [ 281.511929][ T61] Bluetooth: hci1: unexpected event for opcode 0x0c05 [ 281.708386][ T61] Bluetooth: hci4: unexpected event for opcode 0x202d [ 281.751556][ T7954] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.768'. [ 283.463953][ T7961] netlink: 28 bytes leftover after parsing attributes in process `syz.1.772'. [ 283.507113][ T7963] ceph: No mds server is up or the cluster is laggy [ 283.507833][ T7652] libceph: connect (1)[c::]:6789 error -101 [ 283.508025][ T7652] libceph: mon0 (1)[c::]:6789 connect error [ 285.368735][ T61] Bluetooth: hci3: Malformed HCI Event: 0x22 [ 285.459985][ T7989] netlink: 72 bytes leftover after parsing attributes in process `syz.4.782'. [ 287.601236][ T8027] netlink: 72 bytes leftover after parsing attributes in process `syz.4.796'. [ 287.892069][ T8032] rdma_op ffff888033e68270 conn xmit_rdma 0000000000000000 [ 287.920719][ T8038] netlink: 'syz.3.797': attribute type 10 has an invalid length. [ 287.943253][ T8035] bridge_slave_0: left allmulticast mode [ 287.943301][ T8035] bridge_slave_0: left promiscuous mode [ 287.963732][ T8035] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.082889][ T8035] bridge_slave_1: left allmulticast mode [ 288.082925][ T8035] bridge_slave_1: left promiscuous mode [ 288.083299][ T8035] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.231922][ T8035] bond0: (slave bond_slave_0): Releasing backup interface [ 288.309372][ T8035] bond0: (slave bond_slave_1): Releasing backup interface [ 288.550927][ T8035] team0: Port device team_slave_0 removed [ 288.751160][ T8035] team0: Port device team_slave_1 removed [ 288.752535][ T8035] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 288.752562][ T8035] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.334512][ T8060] vivid-000: kernel_thread() failed [ 289.561469][ T8035] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.561504][ T8035] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.623135][ T8035] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 289.746961][ T8038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.761849][ T8038] team0: Port device bond0 added [ 289.855290][ T8069] netlink: 244 bytes leftover after parsing attributes in process `syz.2.811'. [ 289.855480][ T8065] netlink: 72 bytes leftover after parsing attributes in process `syz.4.810'. [ 290.349447][ T8083] rdma_op ffff888039786270 conn xmit_rdma 0000000000000000 [ 290.457571][ T37] kauditd_printk_skb: 8 callbacks suppressed [ 290.457592][ T37] audit: type=1326 audit(1765171487.329:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8088 comm="syz.3.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f6dbf749 code=0x7ffc0000 [ 290.458410][ T37] audit: type=1326 audit(1765171487.329:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8088 comm="syz.3.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f6dbf749 code=0x7ffc0000 [ 290.466743][ T37] audit: type=1326 audit(1765171487.339:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8088 comm="syz.3.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f88f6dbf749 code=0x7ffc0000 [ 290.524459][ T37] audit: type=1326 audit(1765171487.399:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8090 comm="syz.3.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f88f6df2005 code=0x7ffc0000 [ 290.524523][ T37] audit: type=1326 audit(1765171487.399:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8088 comm="syz.3.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f6dbf749 code=0x7ffc0000 [ 290.524918][ T37] audit: type=1326 audit(1765171487.399:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8088 comm="syz.3.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f6dbf749 code=0x7ffc0000 [ 290.687151][ T37] audit: type=1326 audit(1765171487.559:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8090 comm="syz.3.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f88f6dbf749 code=0x7ffc0000 [ 290.776808][ T37] audit: type=1326 audit(1765171487.649:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8088 comm="syz.3.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f88f6dbf749 code=0x7ffc0000 [ 290.784210][ T37] audit: type=1326 audit(1765171487.659:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8088 comm="syz.3.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f6dbf749 code=0x7ffc0000 [ 290.795547][ T37] audit: type=1326 audit(1765171487.669:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8088 comm="syz.3.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f88f6dbf749 code=0x7ffc0000 [ 291.658074][ T8104] input: syz1 as /devices/virtual/input/input11 [ 291.905739][ T8109] netlink: 64 bytes leftover after parsing attributes in process `syz.4.826'. [ 292.963861][ T7510] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 293.160314][ T7510] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 293.160349][ T7510] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.160370][ T7510] usb 3-1: Product: syz [ 293.160386][ T7510] usb 3-1: Manufacturer: syz [ 293.160401][ T7510] usb 3-1: SerialNumber: syz [ 293.176937][ T7510] usb 3-1: config 0 descriptor?? [ 293.199385][ T7510] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 294.108417][ T5887] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 295.626578][ T8166] netlink: 16 bytes leftover after parsing attributes in process `syz.3.847'. [ 297.114959][ T7510] gspca_sunplus: reg_r err -110 [ 297.119239][ T7510] sunplus 3-1:0.0: probe with driver sunplus failed with error -110 [ 297.437597][ T5887] usb 2-1: device descriptor read/all, error -71 [ 297.474845][ T5888] usb 3-1: USB disconnect, device number 5 [ 298.878363][ T8201] tipc: Enabling of bearer rejected, already enabled [ 298.881478][ T8201] syzkaller0: entered promiscuous mode [ 298.881508][ T8201] syzkaller0: entered allmulticast mode [ 301.353125][ T8211] input: syz1 as /devices/virtual/input/input12 [ 301.404983][ T8199] netlink: 32 bytes leftover after parsing attributes in process `syz.2.861'. [ 302.038391][ T5887] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 302.113205][ T5816] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 302.254601][ T5887] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 302.254636][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.254657][ T5887] usb 5-1: Product: syz [ 302.254672][ T5887] usb 5-1: Manufacturer: syz [ 302.254687][ T5887] usb 5-1: SerialNumber: syz [ 302.296958][ T5887] usb 5-1: config 0 descriptor?? [ 302.308014][ T5887] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 302.388318][ T5816] usb 4-1: Using ep0 maxpacket: 8 [ 302.412009][ T5816] usb 4-1: config 255 has an invalid interface number: 3 but max is 0 [ 302.412041][ T5816] usb 4-1: config 255 has no interface number 0 [ 302.412141][ T5816] usb 4-1: config 255 interface 3 has no altsetting 0 [ 302.447510][ T5816] usb 4-1: New USB device found, idVendor=19d2, idProduct=0176, bcdDevice=ae.39 [ 302.447762][ T5816] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.447785][ T5816] usb 4-1: Product: И [ 302.447801][ T5816] usb 4-1: Manufacturer: 㐍 [ 302.447817][ T5816] usb 4-1: SerialNumber: syz [ 302.568370][ T5861] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 302.890995][ T5861] usb 3-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06 [ 302.891031][ T5861] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.902834][ T5861] usb 3-1: config 0 descriptor?? [ 303.091621][ T8243] netlink: 'syz.1.869': attribute type 1 has an invalid length. [ 303.091645][ T8243] netlink: 224 bytes leftover after parsing attributes in process `syz.1.869'. [ 303.569381][ T5887] gspca_sunplus: reg_r err -110 [ 303.569489][ T5887] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 303.664847][ T8231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.679296][ T8231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.681022][ T61] Bluetooth: hci4: Malformed LE Event: 0x0d [ 303.687840][ T5861] usb 3-1: string descriptor 0 read error: -71 [ 303.721480][ T5861] usb-storage 3-1:0.0: USB Mass Storage device detected [ 303.760593][ T5861] usb-storage 3-1:0.0: Quirks match for vid 05ab pid 0060: 2 [ 303.797286][ T5816] usb 4-1: USB disconnect, device number 10 [ 303.876404][ T5861] usb 3-1: USB disconnect, device number 6 [ 304.554284][ T8269] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.875'. [ 305.813500][ T5888] usb 5-1: USB disconnect, device number 8 [ 306.510243][ T8302] netlink: 256 bytes leftover after parsing attributes in process `syz.1.881'. [ 307.148279][ T7664] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 307.603283][ T8313] netlink: 'syz.2.884': attribute type 1 has an invalid length. [ 307.603361][ T8313] netlink: 224 bytes leftover after parsing attributes in process `syz.2.884'. [ 308.061516][ T7664] usb 5-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06 [ 308.061552][ T7664] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.067010][ T7664] usb 5-1: config 0 descriptor?? [ 308.463571][ T8298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.464022][ T8298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.474003][ T61] Bluetooth: hci0: Malformed LE Event: 0x0d [ 308.492716][ T7664] usb 5-1: string descriptor 0 read error: -71 [ 308.495076][ T7664] usb-storage 5-1:0.0: USB Mass Storage device detected [ 308.520351][ T7664] usb-storage 5-1:0.0: Quirks match for vid 05ab pid 0060: 2 [ 308.597506][ T8326] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.888'. [ 308.969862][ T7664] usb 5-1: USB disconnect, device number 9 [ 310.988303][ T44] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 311.043582][ T8365] netlink: 4 bytes leftover after parsing attributes in process `syz.2.899'. [ 311.043694][ T8365] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 311.043722][ T8365] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 311.091507][ T8365] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 311.091540][ T8365] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 311.174594][ T44] usb 4-1: config 0 has an invalid interface number: 98 but max is 0 [ 311.174623][ T44] usb 4-1: config 0 has no interface number 0 [ 311.174653][ T44] usb 4-1: config 0 interface 98 has no altsetting 0 [ 311.182174][ T44] usb 4-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 311.182213][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.182236][ T44] usb 4-1: Product: syz [ 311.182361][ T44] usb 4-1: Manufacturer: syz [ 311.182380][ T44] usb 4-1: SerialNumber: syz [ 311.241884][ T44] usb 4-1: config 0 descriptor?? [ 311.481490][ T44] usb 4-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II [ 311.606365][ T8368] input: syz1 as /devices/virtual/input/input13 [ 312.405499][ T8379] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.901'. [ 312.418460][ T44] usb 4-1: reset high-speed USB device number 11 using dummy_hcd [ 312.619766][ T44] usb 4-1: device firmware changed [ 312.620458][ T44] usb 4-1: [ueagle-atm] pre-firmware device, uploading firmware [ 312.620546][ T44] usb 4-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 312.622057][ T5861] usb 4-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2 [ 312.622092][ T5861] usb 4-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw [ 314.843694][ T44] usb 4-1: USB disconnect, device number 11 [ 316.588753][ T8437] input: syz1 as /devices/virtual/input/input14 [ 318.619912][ T7664] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 318.790825][ T7664] usb 1-1: config 0 has an invalid interface number: 98 but max is 0 [ 318.790856][ T7664] usb 1-1: config 0 has no interface number 0 [ 318.790890][ T7664] usb 1-1: config 0 interface 98 has no altsetting 0 [ 318.794563][ T7664] usb 1-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 318.794592][ T7664] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.794613][ T7664] usb 1-1: Product: syz [ 318.794628][ T7664] usb 1-1: Manufacturer: syz [ 318.794643][ T7664] usb 1-1: SerialNumber: syz [ 318.899450][ T7664] usb 1-1: config 0 descriptor?? [ 319.163649][ T7664] usb 1-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II [ 319.856491][ T7664] usb 1-1: reset high-speed USB device number 8 using dummy_hcd [ 320.091902][ T7664] usb 1-1: device firmware changed [ 320.107808][ T7664] usb 1-1: [ueagle-atm] pre-firmware device, uploading firmware [ 320.107931][ T7664] usb 1-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 320.130580][ T7664] usb 1-1: USB disconnect, device number 8 [ 320.328573][ T7664] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 320.499480][ T7664] usb 1-1: device descriptor read/all, error -71 [ 321.169722][ T8470] netlink: 96 bytes leftover after parsing attributes in process `syz.4.924'. [ 322.836666][ T8501] syzkaller0: entered promiscuous mode [ 322.836696][ T8501] syzkaller0: entered allmulticast mode [ 323.768325][ T5887] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 323.956747][ T5887] usb 1-1: config 0 has an invalid interface number: 98 but max is 0 [ 323.956779][ T5887] usb 1-1: config 0 has no interface number 0 [ 323.956815][ T5887] usb 1-1: config 0 interface 98 has no altsetting 0 [ 323.964416][ T5887] usb 1-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 323.964450][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.964473][ T5887] usb 1-1: Product: syz [ 323.964489][ T5887] usb 1-1: Manufacturer: syz [ 323.964504][ T5887] usb 1-1: SerialNumber: syz [ 323.987546][ T5887] usb 1-1: config 0 descriptor?? [ 324.230844][ T5887] usb 1-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II [ 324.918362][ T5887] usb 1-1: reset high-speed USB device number 11 using dummy_hcd [ 325.105171][ T5887] usb 1-1: device firmware changed [ 325.105675][ T5887] usb 1-1: [ueagle-atm] pre-firmware device, uploading firmware [ 325.105764][ T5887] usb 1-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 325.121755][ T5887] usb 1-1: USB disconnect, device number 11 [ 325.348639][ T5887] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 325.514036][ T5887] usb 1-1: config 0 has an invalid interface number: 98 but max is 0 [ 325.514067][ T5887] usb 1-1: config 0 has no interface number 0 [ 325.514103][ T5887] usb 1-1: config 0 interface 98 has no altsetting 0 [ 325.883885][ T5887] usb 1-1: string descriptor 0 read error: -22 [ 325.884063][ T5887] usb 1-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 325.884090][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.941773][ T5887] usb 1-1: config 0 descriptor?? [ 326.966845][ T5887] usb 1-1: can't set config #0, error -71 [ 327.022904][ T5887] usb 1-1: USB disconnect, device number 12 [ 327.793583][ T37] kauditd_printk_skb: 9 callbacks suppressed [ 327.793604][ T37] audit: type=1326 audit(1765171524.669:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8543 comm="syz.4.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10b509f749 code=0x7ffc0000 [ 327.795023][ T37] audit: type=1326 audit(1765171524.669:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8543 comm="syz.4.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10b509f749 code=0x7ffc0000 [ 328.244895][ T37] audit: type=1326 audit(1765171525.119:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8543 comm="syz.4.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f10b509f749 code=0x7ffc0000 [ 328.382328][ T37] audit: type=1326 audit(1765171525.249:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8543 comm="syz.4.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10b509f749 code=0x7ffc0000 [ 328.382390][ T37] audit: type=1326 audit(1765171525.259:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8548 comm="syz.4.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f10b50d2005 code=0x7ffc0000 [ 328.386617][ T37] audit: type=1326 audit(1765171525.259:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8543 comm="syz.4.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10b509f749 code=0x7ffc0000 [ 328.544860][ T37] audit: type=1326 audit(1765171525.419:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8548 comm="syz.4.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f10b509f749 code=0x7ffc0000 [ 328.601241][ T37] audit: type=1326 audit(1765171525.479:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8543 comm="syz.4.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f10b503b829 code=0x7ffc0000 [ 328.601563][ T37] audit: type=1326 audit(1765171525.479:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8543 comm="syz.4.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10b509f749 code=0x7ffc0000 [ 328.717482][ T37] audit: type=1326 audit(1765171525.589:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8543 comm="syz.4.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f10b509f749 code=0x7ffc0000 [ 329.392906][ T8556] netlink: 'syz.2.954': attribute type 1 has an invalid length. [ 329.392932][ T8556] netlink: 60 bytes leftover after parsing attributes in process `syz.2.954'. [ 331.191232][ T8565] netlink: 60 bytes leftover after parsing attributes in process `syz.0.956'. [ 333.628265][ T6193] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 333.778326][ T6193] usb 3-1: Using ep0 maxpacket: 16 [ 333.780985][ T6193] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.781021][ T6193] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 333.781045][ T6193] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 333.781091][ T6193] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 333.781116][ T6193] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.786954][ T6193] usb 3-1: config 0 descriptor?? [ 334.633129][ T6193] shield 0003:0955:7214.0007: unknown main item tag 0x0 [ 334.633170][ T6193] shield 0003:0955:7214.0007: item fetching failed at offset 4/5 [ 334.633985][ T6193] shield 0003:0955:7214.0007: Parse failed [ 334.634062][ T6193] shield 0003:0955:7214.0007: probe with driver shield failed with error -22 [ 334.811032][ T6193] usb 3-1: USB disconnect, device number 7 [ 336.469505][ T8594] netlink: 104 bytes leftover after parsing attributes in process `syz.2.967'. [ 337.815036][ T8597] netlink: 60 bytes leftover after parsing attributes in process `syz.0.969'. [ 341.729189][ T8632] netlink: 104 bytes leftover after parsing attributes in process `syz.1.978'. [ 341.896548][ T8634] netlink: 'syz.2.979': attribute type 8 has an invalid length. [ 344.083488][ T8652] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.987'. [ 345.202850][ T8661] netlink: 104 bytes leftover after parsing attributes in process `syz.0.990'. [ 345.610327][ T8669] fuse: Unknown parameter 'grou00000000000000000000' [ 346.279547][ T5812] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 346.412525][ T5812] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 346.466854][ T5812] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 346.520462][ T5812] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 346.597141][ T5814] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 346.616475][ T5812] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 346.735376][ T5814] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 346.775327][ T5812] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 347.072638][ T5812] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 347.129365][ T8682] netlink: 8 bytes leftover after parsing attributes in process `syz.0.996'. [ 347.880207][ T5812] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 350.491391][ T61] Bluetooth: hci6: command tx timeout [ 350.590792][ T61] Bluetooth: hci5: command tx timeout [ 351.428318][ T5888] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 351.592494][ T5888] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 351.592531][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.633296][ T5888] usb 3-1: config 0 descriptor?? [ 351.808261][ T5887] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 351.847182][ T5888] usb 3-1: USB disconnect, device number 8 [ 351.978218][ T5887] usb 2-1: Using ep0 maxpacket: 16 [ 351.980831][ T5887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.980866][ T5887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 351.980891][ T5887] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 351.980936][ T5887] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 351.980961][ T5887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.070196][ T5887] usb 2-1: config 0 descriptor?? [ 352.568321][ T61] Bluetooth: hci6: command tx timeout [ 352.648302][ T61] Bluetooth: hci5: command tx timeout [ 352.887037][ T5887] shield 0003:0955:7214.0008: unknown main item tag 0x0 [ 352.887076][ T5887] shield 0003:0955:7214.0008: item fetching failed at offset 4/5 [ 352.952507][ T5887] shield 0003:0955:7214.0008: Parse failed [ 352.952595][ T5887] shield 0003:0955:7214.0008: probe with driver shield failed with error -22 [ 353.094321][ T8713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1006'. [ 353.133476][ T5887] usb 2-1: USB disconnect, device number 12 [ 353.435607][ T8673] chnl_net:caif_netlink_parms(): no params data found [ 354.649909][ T61] Bluetooth: hci6: command tx timeout [ 354.742688][ T61] Bluetooth: hci5: command tx timeout [ 356.815967][ T61] Bluetooth: hci6: command tx timeout [ 356.816048][ T5809] Bluetooth: hci5: command tx timeout [ 357.446036][ T8673] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.446613][ T8673] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.446849][ T8673] bridge_slave_0: entered allmulticast mode [ 357.482689][ T8673] bridge_slave_0: entered promiscuous mode [ 357.532893][ T8673] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.533072][ T8673] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.533315][ T8673] bridge_slave_1: entered allmulticast mode [ 357.536299][ T8673] bridge_slave_1: entered promiscuous mode [ 358.018018][ T8673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 358.092077][ T8673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 358.371617][ T8657] chnl_net:caif_netlink_parms(): no params data found [ 358.478445][ T195] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 358.634039][ T195] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 358.634076][ T195] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.685305][ T195] usb 1-1: config 0 descriptor?? [ 358.809553][ T8673] team0: Port device team_slave_0 added [ 358.864900][ T8673] team0: Port device team_slave_1 added [ 358.906466][ T8767] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1017'. [ 358.928799][ T195] usb 1-1: USB disconnect, device number 13 [ 361.251637][ T8673] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.251763][ T8673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 361.251905][ T8673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.539754][ T8673] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.539774][ T8673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 361.539804][ T8673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.479320][ T8657] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.479514][ T8657] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.480005][ T8657] bridge_slave_0: entered allmulticast mode [ 363.482719][ T8657] bridge_slave_0: entered promiscuous mode [ 363.633276][ T8657] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.633468][ T8657] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.633691][ T8657] bridge_slave_1: entered allmulticast mode [ 363.636801][ T8657] bridge_slave_1: entered promiscuous mode [ 363.699351][ T8673] hsr_slave_0: entered promiscuous mode [ 363.700972][ T8673] hsr_slave_1: entered promiscuous mode [ 363.702333][ T8673] debugfs: 'hsr0' already exists in 'hsr' [ 363.702361][ T8673] Cannot create hsr debugfs directory [ 365.865448][ T8657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 366.616485][ T8657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 367.174415][ T8839] syzkaller0: entered promiscuous mode [ 367.174446][ T8839] syzkaller0: entered allmulticast mode [ 367.195174][ T8657] team0: Port device team_slave_0 added [ 367.226800][ T8657] team0: Port device team_slave_1 added [ 369.391439][ T6193] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 369.958461][ T6193] usb 3-1: Using ep0 maxpacket: 16 [ 369.960961][ T6193] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 369.961009][ T6193] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 369.961035][ T6193] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 369.961086][ T6193] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 369.961111][ T6193] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.033222][ T6193] usb 3-1: config 0 descriptor?? [ 370.857542][ T6193] shield 0003:0955:7214.0009: unknown main item tag 0x0 [ 370.857583][ T6193] shield 0003:0955:7214.0009: item fetching failed at offset 4/5 [ 370.881983][ T6193] shield 0003:0955:7214.0009: Parse failed [ 370.882069][ T6193] shield 0003:0955:7214.0009: probe with driver shield failed with error -22 [ 370.918947][ T8657] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.918968][ T8657] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.918997][ T8657] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 371.072240][ T7664] usb 3-1: USB disconnect, device number 9 [ 371.215968][ T8657] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.215986][ T8657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 371.216008][ T8657] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 374.224985][ T5861] usb 4-1: [UEAGLE-ATM] firmware is not available [ 374.231835][ T10] usb 1-1: [UEAGLE-ATM] firmware is not available [ 374.232053][ T5816] usb 1-1: [UEAGLE-ATM] firmware is not available [ 374.347792][ T8657] hsr_slave_0: entered promiscuous mode [ 374.356428][ T8657] hsr_slave_1: entered promiscuous mode [ 374.357596][ T8657] debugfs: 'hsr0' already exists in 'hsr' [ 374.357624][ T8657] Cannot create hsr debugfs directory [ 374.571363][ T8884] fuse: Bad value for 'user_id' [ 374.571755][ T8884] fuse: Bad value for 'user_id' [ 374.865239][ T8887] syzkaller0: entered promiscuous mode [ 374.865275][ T8887] syzkaller0: entered allmulticast mode [ 375.177878][ T8673] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 376.031686][ T8673] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 376.327420][ T8904] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1065'. [ 376.438614][ T8673] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 380.129140][ T8917] fuse: Bad value for 'user_id' [ 380.129163][ T8917] fuse: Bad value for 'user_id' [ 380.242692][ T8673] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 380.720932][ T8930] syzkaller0: entered promiscuous mode [ 380.720962][ T8930] syzkaller0: entered allmulticast mode [ 381.488571][ T8673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 381.606755][ T8673] 8021q: adding VLAN 0 to HW filter on device team0 [ 381.662026][ T8657] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 381.709930][ T44] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 381.751418][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.751616][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 381.753410][ T8657] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 381.863982][ T8657] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 381.888720][ T44] usb 1-1: Using ep0 maxpacket: 16 [ 381.897690][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.897812][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 381.897830][ T44] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 381.902218][ T44] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 381.906280][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.009066][ T8657] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 382.061003][ T8530] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.061197][ T8530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.575364][ T8945] netlink: 'syz.1.1077': attribute type 10 has an invalid length. [ 382.575390][ T8945] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1077'. [ 382.575407][ T8945] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1077'. [ 383.060502][ T44] usb 1-1: config 0 descriptor?? [ 385.209607][ T8953] syzkaller0: entered promiscuous mode [ 385.209641][ T8953] syzkaller0: entered allmulticast mode [ 385.216166][ T44] shield 0003:0955:7214.000A: unknown main item tag 0x0 [ 385.216305][ T44] shield 0003:0955:7214.000A: item fetching failed at offset 4/5 [ 385.299279][ T44] shield 0003:0955:7214.000A: Parse failed [ 385.301752][ T44] shield 0003:0955:7214.000A: probe with driver shield failed with error -22 [ 385.570788][ T44] usb 1-1: USB disconnect, device number 14 [ 385.631396][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.129201][ T8977] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1082'. [ 387.982917][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.421872][ T44] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 389.993883][ T8673] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 390.179006][ T9002] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1092'. [ 390.255700][ T44] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 390.256873][ T44] usb 3-1: can't read configurations, error -71 [ 390.498067][ T8657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 390.668587][ T8657] 8021q: adding VLAN 0 to HW filter on device team0 [ 390.752185][ T8530] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.758086][ T8530] bridge0: port 1(bridge_slave_0) entered forwarding state [ 390.872852][ T44] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 391.040492][ T8530] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.047814][ T8530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 391.084910][ T9014] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1096'. [ 391.119651][ T44] usb 3-1: config 0 has an invalid interface number: 98 but max is 0 [ 391.119713][ T44] usb 3-1: config 0 has no interface number 0 [ 391.119789][ T44] usb 3-1: config 0 interface 98 has no altsetting 0 [ 391.394649][ T44] usb 3-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 391.394975][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.395237][ T44] usb 3-1: Product: syz [ 391.395432][ T44] usb 3-1: Manufacturer: syz [ 391.395630][ T44] usb 3-1: SerialNumber: syz [ 391.487965][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.667076][ T44] usb 3-1: config 0 descriptor?? [ 391.790692][ T9017] syzkaller1: entered promiscuous mode [ 391.790724][ T9017] syzkaller1: entered allmulticast mode [ 392.005628][ T44] usb 3-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II [ 392.253236][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.864550][ T44] usb 3-1: [ueagle-atm] pre-firmware device, uploading firmware [ 392.895473][ T44] usb 3-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 393.125579][ T8396] usb 3-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2 [ 393.126172][ T8396] usb 3-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw [ 393.133384][ T44] usb 3-1: USB disconnect, device number 11 [ 393.516355][ T8396] ================================================================== [ 393.516371][ T8396] BUG: KASAN: slab-use-after-free in kernfs_new_node+0x120/0x210 [ 393.516414][ T8396] Read of size 4 at addr ffff88806684a960 by task kworker/1:10/8396 [ 393.516427][ T8396] [ 393.516447][ T8396] CPU: 1 UID: 0 PID: 8396 Comm: kworker/1:10 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 393.516465][ T8396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 393.516475][ T8396] Workqueue: events request_firmware_work_func [ 393.516502][ T8396] Call Trace: [ 393.516514][ T8396] [ 393.516520][ T8396] dump_stack_lvl+0x189/0x250 [ 393.516543][ T8396] ? __kasan_check_byte+0x12/0x40 [ 393.516569][ T8396] ? __pfx_dump_stack_lvl+0x10/0x10 [ 393.516589][ T8396] ? lock_release+0x4b/0x3b0 [ 393.516615][ T8396] ? __virt_addr_valid+0x4a5/0x5c0 [ 393.516644][ T8396] print_report+0xca/0x240 [ 393.516663][ T8396] ? kernfs_new_node+0x120/0x210 [ 393.516685][ T8396] kasan_report+0x118/0x150 [ 393.516707][ T8396] ? kernfs_root+0x1c/0x230 [ 393.516729][ T8396] ? kernfs_new_node+0x120/0x210 [ 393.516756][ T8396] kasan_check_range+0x2b0/0x2c0 [ 393.516771][ T8396] kernfs_new_node+0x120/0x210 [ 393.516796][ T8396] kernfs_create_dir_ns+0x44/0x130 [ 393.516812][ T8396] sysfs_create_dir_ns+0x123/0x280 [ 393.516834][ T8396] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 393.516852][ T8396] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 393.516875][ T8396] ? rt_spin_unlock+0x161/0x200 [ 393.516896][ T8396] kobject_add_internal+0x6b1/0xcd0 [ 393.516923][ T8396] kobject_add+0x155/0x220 [ 393.516945][ T8396] ? __pfx_kobject_add+0x10/0x10 [ 393.516968][ T8396] ? kobject_init+0x83/0x1e0 [ 393.516989][ T8396] get_device_parent+0x31d/0x3a0 [ 393.517012][ T8396] device_add+0x2e1/0xb80 [ 393.517033][ T8396] firmware_fallback_sysfs+0x2e4/0xa40 [ 393.517057][ T8396] _request_firmware+0xfa4/0x1680 [ 393.517082][ T8396] ? __pfx__request_firmware+0x10/0x10 [ 393.517101][ T8396] ? process_scheduled_works+0x9ef/0x1770 [ 393.517125][ T8396] request_firmware_work_func+0xaf/0x1c0 [ 393.517152][ T8396] ? process_scheduled_works+0x9ef/0x1770 [ 393.517177][ T8396] process_scheduled_works+0xad1/0x1770 [ 393.517219][ T8396] ? __pfx_process_scheduled_works+0x10/0x10 [ 393.517254][ T8396] worker_thread+0x8a0/0xda0 [ 393.517283][ T8396] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 393.517308][ T8396] ? __kthread_parkme+0x7b/0x200 [ 393.517332][ T8396] kthread+0x711/0x8a0 [ 393.517354][ T8396] ? __pfx_worker_thread+0x10/0x10 [ 393.517371][ T8396] ? __pfx_kthread+0x10/0x10 [ 393.517391][ T8396] ? rt_spin_unlock+0x150/0x200 [ 393.517407][ T8396] ? rt_spin_unlock+0x161/0x200 [ 393.517420][ T8396] ? __pfx_kthread+0x10/0x10 [ 393.517442][ T8396] ret_from_fork+0x599/0xb30 [ 393.517460][ T8396] ? __pfx_ret_from_fork+0x10/0x10 [ 393.517481][ T8396] ? __switch_to_asm+0x39/0x70 [ 393.517502][ T8396] ? __switch_to_asm+0x33/0x70 [ 393.517523][ T8396] ? __pfx_kthread+0x10/0x10 [ 393.517545][ T8396] ret_from_fork_asm+0x1a/0x30 [ 393.517575][ T8396] [ 393.517580][ T8396] [ 393.517584][ T8396] Allocated by task 44: [ 393.517591][ T8396] kasan_save_track+0x3e/0x80 [ 393.517611][ T8396] __kasan_slab_alloc+0x6c/0x80 [ 393.517631][ T8396] kmem_cache_alloc_noprof+0x18d/0x6c0 [ 393.517650][ T8396] __kernfs_new_node+0xdc/0x900 [ 393.517670][ T8396] kernfs_new_node+0x102/0x210 [ 393.517691][ T8396] kernfs_create_dir_ns+0x44/0x130 [ 393.517703][ T8396] sysfs_create_dir_ns+0x123/0x280 [ 393.517722][ T8396] kobject_add_internal+0x6b1/0xcd0 [ 393.517741][ T8396] kobject_add+0x155/0x220 [ 393.517759][ T8396] device_add+0x408/0xb80 [ 393.517776][ T8396] usb_new_device+0xa29/0x1710 [ 393.517795][ T8396] hub_event+0x29de/0x4f30 [ 393.517807][ T8396] process_scheduled_works+0xad1/0x1770 [ 393.517822][ T8396] worker_thread+0x8a0/0xda0 [ 393.517837][ T8396] kthread+0x711/0x8a0 [ 393.517855][ T8396] ret_from_fork+0x599/0xb30 [ 393.517869][ T8396] ret_from_fork_asm+0x1a/0x30 [ 393.517904][ T8396] [ 393.517908][ T8396] Freed by task 28: [ 393.517914][ T8396] kasan_save_track+0x3e/0x80 [ 393.517933][ T8396] kasan_save_free_info+0x46/0x50 [ 393.517949][ T8396] __kasan_slab_free+0x5c/0x80 [ 393.517969][ T8396] kmem_cache_free+0x18f/0x8d0 [ 393.517989][ T8396] rcu_cpu_kthread+0xc96/0x1c40 [ 393.518011][ T8396] smpboot_thread_fn+0x542/0xa60 [ 393.518028][ T8396] kthread+0x711/0x8a0 [ 393.518046][ T8396] ret_from_fork+0x599/0xb30 [ 393.518060][ T8396] ret_from_fork_asm+0x1a/0x30 [ 393.518080][ T8396] [ 393.518084][ T8396] Last potentially related work creation: [ 393.518089][ T8396] kasan_save_stack+0x3e/0x60 [ 393.518115][ T8396] kasan_record_aux_stack+0xbd/0xd0 [ 393.518135][ T8396] call_rcu+0x157/0x9c0 [ 393.518154][ T8396] kernfs_put+0x191/0x470 [ 393.518181][ T8396] __kobject_del+0xe9/0x330 [ 393.518206][ T8396] kobject_del+0x45/0x60 [ 393.518231][ T8396] device_del+0x763/0x8e0 [ 393.518255][ T8396] usb_disconnect+0x5fb/0x970 [ 393.518281][ T8396] hub_event+0x1cd9/0x4f30 [ 393.518300][ T8396] process_scheduled_works+0xad1/0x1770 [ 393.518322][ T8396] worker_thread+0x8a0/0xda0 [ 393.518344][ T8396] kthread+0x711/0x8a0 [ 393.518371][ T8396] ret_from_fork+0x599/0xb30 [ 393.518391][ T8396] ret_from_fork_asm+0x1a/0x30 [ 393.518421][ T8396] [ 393.518426][ T8396] The buggy address belongs to the object at ffff88806684a960 [ 393.518426][ T8396] which belongs to the cache kernfs_node_cache of size 176 [ 393.518445][ T8396] The buggy address is located 0 bytes inside of [ 393.518445][ T8396] freed 176-byte region [ffff88806684a960, ffff88806684aa10) [ 393.518460][ T8396] [ 393.518464][ T8396] The buggy address belongs to the physical page: [ 393.518482][ T8396] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6684a [ 393.518496][ T8396] ksm flags: 0x80000000000000(node=0|zone=1) [ 393.518511][ T8396] page_type: f5(slab) [ 393.518525][ T8396] raw: 0080000000000000 ffff88801aaf1000 ffffea00012100c0 dead000000000007 [ 393.518538][ T8396] raw: 0000000000000000 0000000000110011 00000000f5000000 0000000000000000 [ 393.518546][ T8396] page dumped because: kasan: bad access detected [ 393.518557][ T8396] page_owner tracks the page as allocated [ 393.518562][ T8396] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5654, tgid 5654 (kworker/0:3), ts 200152700934, free_ts 199911155229 [ 393.518587][ T8396] post_alloc_hook+0x234/0x290 [ 393.518608][ T8396] get_page_from_freelist+0x28c0/0x2960 [ 393.518621][ T8396] __alloc_frozen_pages_noprof+0x181/0x370 [ 393.518635][ T8396] alloc_pages_mpol+0xd1/0x380 [ 393.518647][ T8396] allocate_slab+0x86/0x3b0 [ 393.518663][ T8396] ___slab_alloc+0xb10/0x1400 [ 393.518676][ T8396] __slab_alloc+0xc6/0x1f0 [ 393.518689][ T8396] kmem_cache_alloc_noprof+0x101/0x6c0 [ 393.518708][ T8396] __kernfs_new_node+0xdc/0x900 [ 393.518728][ T8396] kernfs_new_node+0x102/0x210 [ 393.518749][ T8396] __kernfs_create_file+0x4b/0x2e0 [ 393.518764][ T8396] sysfs_add_file_mode_ns+0x238/0x300 [ 393.518781][ T8396] internal_create_group+0x667/0x1170 [ 393.518801][ T8396] sysfs_create_groups+0x59/0x120 [ 393.518821][ T8396] device_add_attrs+0x1c4/0x5a0 [ 393.518839][ T8396] device_add+0x496/0xb80 [ 393.518856][ T8396] page last free pid 6946 tgid 6946 stack trace: [ 393.518864][ T8396] __free_frozen_pages+0xfe1/0x1170 [ 393.518885][ T8396] vfree+0x2ad/0x470 [ 393.518908][ T8396] xskq_destroy+0x40/0x60 [ 393.518922][ T8396] xsk_release+0x443/0x670 [ 393.518933][ T8396] sock_close+0xc3/0x240 [ 393.518948][ T8396] __fput+0x45b/0xa80 [ 393.518962][ T8396] task_work_run+0x1d4/0x260 [ 393.518983][ T8396] exit_to_user_mode_loop+0xff/0x4f0 [ 393.519004][ T8396] do_syscall_64+0x2e3/0xf80 [ 393.519022][ T8396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.519037][ T8396] [ 393.519040][ T8396] Memory state around the buggy address: [ 393.519048][ T8396] ffff88806684a800: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fa fb [ 393.519058][ T8396] ffff88806684a880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 393.519068][ T8396] >ffff88806684a900: fb fb fb fb fc fc fc fc fc fc fc fc fa fb fb fb [ 393.519076][ T8396] ^ [ 393.519084][ T8396] ffff88806684a980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 393.519094][ T8396] ffff88806684aa00: fb fb fc fc fc fc fc fc fc fc 00 00 00 00 00 00 [ 393.519102][ T8396] ================================================================== [ 393.519981][ T8396] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 393.520008][ T8396] CPU: 1 UID: 0 PID: 8396 Comm: kworker/1:10 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 393.520034][ T8396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 393.520048][ T8396] Workqueue: events request_firmware_work_func [ 393.520076][ T8396] Call Trace: [ 393.520084][ T8396] [ 393.520093][ T8396] dump_stack_lvl+0x99/0x250 [ 393.520123][ T8396] ? __asan_memcpy+0x40/0x70 [ 393.520151][ T8396] ? __pfx_dump_stack_lvl+0x10/0x10 [ 393.520179][ T8396] ? __pfx__printk+0x10/0x10 [ 393.520209][ T8396] vpanic+0x237/0x6d0 [ 393.520239][ T8396] ? __pfx_vpanic+0x10/0x10 [ 393.520269][ T8396] ? irqentry_exit+0x5dd/0x660 [ 393.520296][ T8396] ? lockdep_hardirqs_on+0x98/0x140 [ 393.520326][ T8396] panic+0xb9/0xc0 [ 393.520355][ T8396] ? __pfx_panic+0x10/0x10 [ 393.520392][ T8396] ? kernfs_new_node+0x120/0x210 [ 393.520425][ T8396] check_panic_on_warn+0x89/0xb0 [ 393.520458][ T8396] ? kernfs_new_node+0x120/0x210 [ 393.520487][ T8396] end_report+0x6f/0x140 [ 393.520517][ T8396] kasan_report+0x129/0x150 [ 393.520547][ T8396] ? kernfs_root+0x1c/0x230 [ 393.520577][ T8396] ? kernfs_new_node+0x120/0x210 [ 393.520613][ T8396] kasan_check_range+0x2b0/0x2c0 [ 393.520634][ T8396] kernfs_new_node+0x120/0x210 [ 393.520670][ T8396] kernfs_create_dir_ns+0x44/0x130 [ 393.520692][ T8396] sysfs_create_dir_ns+0x123/0x280 [ 393.520723][ T8396] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 393.520745][ T8396] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 393.520777][ T8396] ? rt_spin_unlock+0x161/0x200 [ 393.520800][ T8396] kobject_add_internal+0x6b1/0xcd0 [ 393.520837][ T8396] kobject_add+0x155/0x220 [ 393.520868][ T8396] ? __pfx_kobject_add+0x10/0x10 [ 393.520910][ T8396] ? kobject_init+0x83/0x1e0 [ 393.520940][ T8396] get_device_parent+0x31d/0x3a0 [ 393.520972][ T8396] device_add+0x2e1/0xb80 [ 393.521001][ T8396] firmware_fallback_sysfs+0x2e4/0xa40 [ 393.521036][ T8396] _request_firmware+0xfa4/0x1680 [ 393.521071][ T8396] ? __pfx__request_firmware+0x10/0x10 [ 393.521098][ T8396] ? process_scheduled_works+0x9ef/0x1770 [ 393.521126][ T8396] request_firmware_work_func+0xaf/0x1c0 [ 393.521152][ T8396] ? process_scheduled_works+0x9ef/0x1770 [ 393.521177][ T8396] process_scheduled_works+0xad1/0x1770 [ 393.521219][ T8396] ? __pfx_process_scheduled_works+0x10/0x10 [ 393.521254][ T8396] worker_thread+0x8a0/0xda0 [ 393.521281][ T8396] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 393.521314][ T8396] ? __kthread_parkme+0x7b/0x200 [ 393.521347][ T8396] kthread+0x711/0x8a0 [ 393.521378][ T8396] ? __pfx_worker_thread+0x10/0x10 [ 393.521403][ T8396] ? __pfx_kthread+0x10/0x10 [ 393.521431][ T8396] ? rt_spin_unlock+0x150/0x200 [ 393.521455][ T8396] ? rt_spin_unlock+0x161/0x200 [ 393.521475][ T8396] ? __pfx_kthread+0x10/0x10 [ 393.521506][ T8396] ret_from_fork+0x599/0xb30 [ 393.521532][ T8396] ? __pfx_ret_from_fork+0x10/0x10 [ 393.521563][ T8396] ? __switch_to_asm+0x39/0x70 [ 393.521593][ T8396] ? __switch_to_asm+0x33/0x70 [ 393.521624][ T8396] ? __pfx_kthread+0x10/0x10 [ 393.521656][ T8396] ret_from_fork_asm+0x1a/0x30 [ 393.521698][ T8396] [ 393.522009][ T8396] Kernel Offset: disabled