last executing test programs: 12.42372838s ago: executing program 0 (id=522): syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000000000)={'\x00', 0x2, 0x6f11, 0xb, 0x0, 0x11c3adec}) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, 0x0, 0x14) syz_io_uring_setup(0x70ca, 0x0, 0x0, &(0x7f00000007c0)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0186404, &(0x7f0000000000)={&(0x7f00003ae000/0x1000)=nil}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x15, 0x5, 0x0) readv(r0, &(0x7f00000001c0), 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r3, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'lc\x00', 0x12, 0x4000ffc, 0x54}, 0x2c) shmctl$SHM_STAT_ANY(0x0, 0xf, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 10.769909562s ago: executing program 0 (id=526): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x28, 0x97, 0xb9, 0x10, 0x4b3, 0x4001, 0x110, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x66, 0x0, 0x0, 0x88, 0xa4, 0x1}}]}}]}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={0x28, 0x15, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, 0x0, 0x0) fchmod(0xffffffffffffffff, 0x32) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xffe4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) 9.464670167s ago: executing program 1 (id=531): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) 7.464850466s ago: executing program 0 (id=533): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000c40)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000004c0)="33b6f982a62e715f3484fab4d07991a770bcae58c28945eaaeae058df5a923d651da3784c21428b02b2e1cc931d0822040fa6cda6079442f208f9488c0fa6e3a80c26b1d1b23fe4da5bf681446155a6994e346d2e844895b4eb1a6a14b6f0b6114", 0xffffff99}, {&(0x7f0000000600)="d09ef15703efa654edd387ed90d643beaf9b3aeb05160c5aaeafc5f20047d5c3966bd83fe1ea6ddf432db90b8d8cb2696edb962654f023f00790673e077e93713677b8672664a8fa91df9768f7b14e83a0b12ae1c4fa61fb8d3bbfc736b7ab83bc21ce66d122ce768d032f6690555f4420919edb6454bd0be2d36c9851a4e4c894ef9624e4973f2b3eb4e2a356b9af3c416676be5828c5c8ceeed81a978fd9c32d877ec94961df3203f2b7bafe86580c10d29ad805053e356bd960018a", 0xbd}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, {0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="1914593fbe63c1c99bcbf2a2e1688c0ff2ee5b69", 0x14}, {&(0x7f00000006c0)="8d6500d3deb0317161b5e261a7f1e9dea247618f9703f844911f62e1d5ef48f42d25c5df86a12c2cb3d6678a34e724e3ab1620eaccf431a7b3233dd844f7f64b315280ab081a0adf7fe1e097111217fc5b32a93de5000e99be1f6930ec7f4400a24c04303d1b4a44569bfe6763fa541e3ba6f0b4ab128aca96995a3a8f1bc07e30add8ba2bdfe022", 0x88}], 0x2, &(0x7f0000000f40)=[@iv={0xe8, 0x117, 0x2, 0xcf, "62783c54cdc47da6cdb7f03d8cab5abe1a2c7fba3106730d09833a5f362901e8998d1bdb7b17d2231b63942a4e156500be1246b02efe051a238dc81ee8438f6b2ff7e93b21ff348844f5e5a67df0de01ec340585f874125320137c0bd3c5ea253f30729a229af1f07def7e9c5681f97cb16eb40f04477084186b7ef0e9431a107bf991abef4bbe24aa287d12171617a1748f0d13a7951392b8c8bd22c7d29d83480a7d720f738e8b2e22d5d6adb8656c6be7f8d4c74b19e9be637735447ed3b0d157c47581a13a9ca3cadaee1b605a"}, @assoc={0x18, 0x117, 0x4, 0x7}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x7}, @assoc={0x18, 0x117, 0x4, 0x80}, @assoc={0x18, 0x117, 0x4, 0xae5}, @iv={0x40, 0x117, 0x2, 0x25, "bd2dfdf3a35167789d1e86eb11d3da70196a98ded037398fd10a44e4483892f9e41494aeae"}, @iv={0x0, 0x117, 0x2, 0x0, "a1525e4edb3ed20038351cbec9986b7f1548bae5344672d70bc4d90e089d8633b56f8225904f42e78f6230ee768d387680c1bf7e20c820e147bd8f79440392b7eefd4c5864e0f2a352fd4075429d9bc38be3651a9cf1c8fbc4e8483928334ef4890430eaf0a72d1e68b1d11113c773cd53225e60024023b723f721683d79a8533a6cd2b3b7eb0862c4f44eb5"}, @op={0x18}, @iv={0x30, 0x117, 0x2, 0x15, "e186f696fd1013a29e3da8955ad005d353361442a1"}], 0x200, 0x4044044}, {0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)="eeec18b7a2f22103ffd1f9150c0e463d450dc5a4615dc8d05e03e6e8a4246acfedd42008bf0732311cbca46040ac3ba8b9f3d42acd5c6f364ce65a", 0x3b}], 0x1, &(0x7f0000000d40)=[@assoc={0x18, 0x117, 0x4, 0x9}, @iv={0x50, 0x117, 0x2, 0x38, "ad9d57ae1a34cd169d6fad8561a7ecad9a52c724a11e24510fc61cfeb3470c372d2eff433cea2fec76c92d3482c3c6692d8275cd566690ad"}, @op={0x18}, @iv={0x140, 0x117, 0x2, 0x128, "526b0e047fbc4fc252eaaa51f7070028035fd68fb6a92539435a12fdd225925548abd17a81e91752f591a67510f95fed70277e530a0b2df40e11706c22ec31fa53c1633bdd18cae8d5f81a9cdbf6cbe2071e0bc29a15a0f8da17b970b2a255f66034ee2b8d5279aebd8443314ef736cc8877f63cf74b1ea57afcffff685b654790d2808056973ed5942a0b1eff9f9a579ff973f5ea72daa97da16b68e3673a015aba3a67d562dcf23d9c0d49fad7dc7a393c5930587e7134f5223a8d448c9eea6096d5daee0474879430adc1c28c5261a66ce95d9669576bb8e4cf5ebe4b2bd49a4edd6323179758dd152f4467c2de203fa6d1221b0c0d11e37a6e3a2b484bc9c07b9f91f394da7fe4bea5dcabafc0e4add1cfb250702f606ded8df35eff331aedfd9aacc8b7656d"}, @assoc={0x18, 0x117, 0x4, 0xeed}], 0x1d8, 0x4000010}, {0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000ac0)="e57b2098eebbf00e85c066cd616ac4c7f7aad46ad25398631c11a50d045d08af9c20922a4d95b0e6f376a6acf9baffa30229d37793c31505429b9aeb02ebbce4a2", 0x41}], 0x1, &(0x7f0000000b40)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x7}, @assoc={0x0, 0x117, 0x4, 0x1}, @iv={0x80, 0x117, 0x2, 0x65, "433075e40e764ff78e98d6e2fd28ab1e7de0926b29692837e244860a37ed45eef4be3fa9abbd4b13ca0aac110785fc948b1797d36763c6d368e52217fda90bbe4fc93ce397e33566a5f1637e9ab82231e64719d3529d653ab937022831b3a638704fe05ac9"}], 0xc8, 0x7a4e64b47bb0bd6a}], 0x4, 0x0) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) 7.092827423s ago: executing program 1 (id=535): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) syz_clone(0x10eb22f000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000001c0), 0x12) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f00000003c0)=ANY=[@ANYBLOB='+cpu'], 0x5) write$cgroup_subtree(r7, &(0x7f0000000440)=ANY=[], 0x5) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x80, &(0x7f0000000280), 0x0, &(0x7f0000000340), &(0x7f0000000380), &(0x7f0000000480)="013c8b202dfeac33e9a0409142e4d22a66f01010fa22f7e3518012b4a0295d038cd6856f04476a75721b656c8f83e7512ab2e1c92b72802437791b97222b1c0273503eb19dcb589d48973afc86427013d94ea3007ac8584d5caaefa8e17dec7d45645120db3cc33899b35d3c585c32ba34fbc575073f6f4fc8ebbfa655bb86a5a5640b8a2532b6873bbeb1d3102681b648bda7f5c083a33efb5c30790abd6a850affe1ca6d8057b4d25fe2697f35f5a9640f2ac2d2b20f6c4d88a506a4acf3f12fe17465b4e2") syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x29, 0x6f, 0xb6, 0x8, 0x9022, 0xd484, 0xff88, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x95, 0x0, 0x81, [{{0x9, 0x4, 0x1e, 0x80, 0x0, 0x56, 0xa7, 0xf6, 0x2}}]}}]}}, &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x16}) r8 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r8, 0x707, &(0x7f0000000080)={&(0x7f00000001c0)=[{0x1, 0x9211, 0x0, &(0x7f00000000c0)}, {0x9, 0xa200, 0x0, 0x0}], 0x2}) 5.010471973s ago: executing program 2 (id=544): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(r0, 0x0, 0x0) 3.976612433s ago: executing program 2 (id=545): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0xff}, 0x20) ioctl$SIOCSIFHWADDR(r3, 0x8b0d, &(0x7f0000000000)={'bridge_slave_1\x00'}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r7, 0x4004551e, &(0x7f00000004c0)={0x0, 0x1, "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"}) ioctl$USBDEVFS_SETINTERFACE(r7, 0x80085504, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 3.854301805s ago: executing program 1 (id=547): syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000000000)={'\x00', 0x2, 0x6f11, 0xb, 0x0, 0x11c3adec}) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, 0x0, 0x14) syz_io_uring_setup(0x70ca, 0x0, 0x0, &(0x7f00000007c0)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0186404, &(0x7f0000000000)={&(0x7f00003ae000/0x1000)=nil}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x15, 0x5, 0x0) readv(r0, &(0x7f00000001c0), 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r3, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'lc\x00', 0x12, 0x4000ffc, 0x54}, 0x2c) shmctl$SHM_STAT_ANY(0x0, 0xf, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 3.036775121s ago: executing program 2 (id=548): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x68029f84}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000001}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}]}}}]}]}], {0x14}}, 0xe8}}, 0x24044810) syz_emit_ethernet(0x7e, &(0x7f0000000300)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x48, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "88c73b21f267636d01dbe5712c1c941e1cdafbbb43f09c70", "e13808ca72381f41e5fff9620915b6f78670dfaf9a2038083179cf6b7931c9b4"}}}}}}}, 0x0) 2.168168088s ago: executing program 2 (id=549): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x8000000, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x97, 0x0, 0xb2, 0xe9, 0x8, 0x2}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) 2.09320078s ago: executing program 3 (id=550): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x101, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0x9, 0x3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.038875451s ago: executing program 0 (id=551): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r3}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) prlimit64(0x0, 0x7, &(0x7f0000000ec0), 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x8, 0x0, &(0x7f00000001c0)=[@decrefs={0x40046307, 0x1}], 0x3, 0x1000000000000, &(0x7f0000000340)="cbe601"}) 1.867213404s ago: executing program 4 (id=552): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(r0, 0xffffffffffffffff, 0x0) 1.817622125s ago: executing program 4 (id=553): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000740)=""/4100, 0x1004}], 0x1, 0x145, 0x80000000) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r3, &(0x7f0000000400)={0x28, 0x0, 0x2710, @my=0x1}, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x34004811) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x13, r4, 0x0) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x2a1, 0x21, &(0x7f0000000240)={0x0, 0x6, 0xd, 0x360}, 0x8, 0x7, 0x7f, 0x0, 0x1, 0x101, 0x0}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(r5, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r5, &(0x7f0000004300)="00e7a0633e8438bafa888b9b02144af32e296a0a01dc194d649b6fa26d6d5e63bac4a04baeeb8aacb22c6eec461b67db6a737737c6d2687acb00572f92e3fdb5d0cb2f11121c557a943020200755bcab77b39c406b733239e2bb1175b9322ba39dc7d67da8f77aed1714dae2e6c24c3ea96be9d151c6ab7b3c54bbe507b8b2461fb4be8dc90042184af6d48f8ace16abb5e3fc943cf61cdb75624a259bdb5f7829b9775820f85f2d1a6ee6c6c2af4fd41ab8a41ecb2612abf13cd2c6f9f3e6db505e4bbe68cc000cf5fa6d5636191a4b366ab59af52132a3f9678d4ed1bd577bacffb3b52850804005eebf3dfa4763168ff30490a11acdbbf4c3312a45f30139f6b72b1e7cdec185006bb30e0e8fa88da2cefc718cae7e9830f7ca101e4e23c6bd16bfacf4a9927fb13af4b79c86ab999beda4ad396abdda354a42fb4ef21d6749175dc21a0cf9191aa4f90d274b50370a580ad8dcd166d2b06c0d8b071973c3fde30f7e2bc371a51ca5866bf8b24eaac75bf482dd4436b214ff62d32e20df223b0b680ede28b3a49e66e330a8a3ecace0db9855d235d5ff23765e742d1a739c2ac8743f4c62664a3b347279da55a1a5b16e1e2828b584a013577d50f890e3894d9e8d6bfccdfb2b70221f12a7fac24b7a8818edce72b65f622c77bf1312771a2c0d805ec9a25c536c91868762032255be78903b77b2c1a773a03996fabba69214e76f5df6df0375b592692a2c3c86c75a3be56fe598ddaea0b9901d20db7e43e128e04e5509283f833c24c625887288459db5727210ba9a301fb8c934dd1d8dca68039fe5b2e1a8d7cdfc6d875e5851098100c3cd42544ed90bb55b58d20a501fabbc485d148c615a3b070fa0520da2ed68ee115a4411d5418b47f3d95616096f67a7a36d68f1e8df82eca8ef96fb4a96b3422fe046a37ea5f5967513a559bd770fecab7228b0692f439765c9e9c6ea4fc608e0b27f9b49064daa2bac06f83f6d87ebc61fa3a29bb5ed39641245ce8cf43770df32a84838802b0827ca5a40e2003915e2ed108a005637bb028d29bd2cfd28a1bd55e67ed1b6b7b72163c27c4b0e36d1b134d6dfdb165a66fb46498fc04bb8053b84098af5b18758631d1318d625a6fa4d3ce5a4d3a90e10c6363a26b5ae96c2d56f87ad21a6118af6847d041f88f852ddc3f250c088ef5cb31198f3ac81cff9a5bab26ed56c09f8416188974e08349f7da28fc754b98c1ac4ea0060ac1e1b1c49f7dbadbc59254b265dc418cab9ac14e2bbecc4c3103543e37984efb1f61315e10d2b422732217d3a9b0cfe4561f3765d3bda60be239e02bdc164dd631582e8c87dd8fa60d63dcf9e7f3dadc4ce5e4433a42425b8ee8cb8a2defab0bf9b6109c90b5655b79b18c06884f2670a985d454e08e54de69f645cb0cbb70620bd988ee717c310ae77b4abe81c01c6e7f47268ee20bc30b9062830917705682eba2c5ef966b877f33294aa5f8b29d3dd5ed92302087f34fa18d19a005de05f925e3e93c8c0f24507ff20cd23d9ae5452c32ff58c78ccdb1ab32c98edfaa6d2c3971934ca8f849ac360c286566eb72b0793f12cef84bd282368d533247ee750f18aeda484167f3d680e4aaa3aa0694441d4ff6a71531f1a30f87eeb71afd04c5d686e1f86f27586f4e2c8ff77c09612ba1af9b3fb93efd31af42f8e0498f35d07c662b743a08f2839cad8f95b90cbb4fc0ed2ca45dd093a549cde4c6ff08ce09a2cbc6f9f78b6f96643357f92f8f403202742057731fd3e343a87c0affe803cfdbddb8c2694ab63f2dc35da705624747e30a943000fc82c40f10e1975d2e2ec15aefd531b6dbc053606b054dc976f44d5b5a5f37e9c08532ce16cf8bca55ab6c814ceb855ab50b8b52620f8645a9dc25fcb732080d84bf39c3ebb235b4d96da527b64ec4b72f69e91d16a4efcaf76f2e1f968ca68a06f60b01ec7becc9ffd7877c0992cb0f80fb3daabc039513896bd7697843be06aba53e7761e11e075c61ef2d897d4d9f90041c14283746feeb3f0d456ba4be27843350fe43e7c1110b4439489139f6dae01c43f23ec71f08d3042663c65e059d368e4e2c6e49de45bf078d3182a1bc1208bc59379e705aa3309579947409f2a8b3d79099c8619f916e7a6fa333d2312a274247156b8c25cbcfcc59ef13339c700f56a8691dff39bd4338789001872c0d90929037dc0ad99b380a6ba73f331f73f9274f4c2bf5233d7482edf37bf6ffed4f2c0ee44a1d57cae0d644f25591dc03bf837571a82d0c31b61be7ff85a5b3843e8f96a50eaa43f5c137ecfc4e4530d08a2afa4ba02fcc50117a4ad0d5862302017639344c82749f673dbd650e49b35302d0acbab45c0973198291bb42b4cfcd3b0c272074341ea8eca19e122cd234da6d41bf5eedb706e16c17687ed8b84db67130796d26b94eac83bbcd785b603242bd6252c155711efd7dd22cc54e1eaf6d910d0f22c701f3d4da0314dd2829c6ee13bbcbd126558b47b8066bf0766c792a012315bd29bfeda8f28a2c1f4e638b701758e19a0e5bd5b4f19048b00a877d956292e345f8a3a8367892f955bcb5e50ca145ec5e2c9309e25941bd277e393aaad38f9b72a42514b27da6856223c37a1fc1327fa760551d3fdeb0b222ab180b16c9eea138cf4f327e88fdfee293c5b6b007028eb796a60772148282dcd17ffc1c90ed8b6540ede933545ed5a5301d6ff39734444ff3d85cda4ac3befa5083a4685e9e231eba4a91a35f4f7f48fd5ac2447c64c010e2a9f8e80691c95460e1995444466ec5f3cd71fe509a26ff0b7f3254bc8c3255e903834e841b37c70b267fb33deb0d1ed4ea84a869453ba508fc255b12cf847103d5195046c930ae4a75c956f22fcfe4186d547686b54bd7a534940d5d62216994eac0e8ed3bd2bd59354e6b9c6b5b10511d54a8b928040f1e1024a423b0cf519fc6e9673df5c48c0778c7edb8fa8d8ace77463a77d2d6313160e1ee72742953e433b6732ced59c93464fd91520847db238610ed0c289fc55647881a7d6257cf28090c75a6f19df079cfd35742a74a5ab270314f7c8039c20ff0f3f543d029b75a741b5dc6425241ac2ffabf1f96288e6d4ba34da09fb6049c2c8753fbd41fdb4bc68c57bf374ef4feb0df00c41319debb26afba2ff39e1799a1c2137f4e920ee5b02d93789b6b0c853e8143dae5b08ee85da2ea7c31803610ce797293ea95c16ade6dae2afb008e59d8b9505737f008b5227df5f1e4eb5d707f502698a17ead9b1f5ec09dff34248ff2fb153dc6df4812e39754a4baa42e1d8b77fbddef3ca091701ac28ae5fd422dbd8db5b122d3965383abc37a52d2fca5ce56eba974dba3d059cefe40e3c35c9daa8ae31198214303c1dcb90d58fc983ccfd504fa43925636f94b128d44e8aa5cd3ecfabd50a84062d03f7508a0575ab65ecc749d3ef566fdbc529a8139b7a7fb3a9bd784df52cddc6f2699044ba47615163fbbe19f3d88d38a8b71fe52b2611ca74341429d1cef1a7e350545be29d2caa560e60352cab074c298c44ca2c07f9795ce52f10aa3e2fcdef371f24e309b19e52218881f25a4674527edbe3b3bd0b9b536d810c6f9500c0c81bcfd9a440dd91c1d35c52758d2b2ae1a8497bb394c4f09d3947cf777727b0d1daf5ac4fe4fa3c247a791702cb84b96321b7fec81bf549d4eb5d6dafe019b26187417c68b064e4308908535a3e77b6cd3e28caaf12d726f15590b7958e40134d045a38cbb689131a7e85532f1c63dd4bac9e4d00645cd7b2b71704563f3738b92044a8153f6ba717800ab7cb238175c376d7add2c5ec38e4c856f1ab9c3ee33f6ca6d576ae908dd290e4bae23470182e253765e04e8eb02a791c4396a511ef467879a9e2818b8a4b1b0b39a6c44e816e3ebf6e3be93929dfcb38d5dad7d20b60215447674d0608b8b02331ac20e57083cb9b4449fecbb149441aea0ad82f00a82d87d743fc80d410922bc20923516885440f43c9f32beb81ce148def6140952583a7825c2d2fe012d52d30ef66d32a8a0864ac5c1737e2506228d41ff0515ee80be4cf012927dde0fd2a07cac68eff8c4437f2844d4df07936fd8753e5909f962c5c767f8719cc295bdfa8a16f3f36ff56e34d7b14b6b8c46d5af248b04a9c5396f84990e23d145670950bce5f5638e5e2cea37c371a4483729338f1305cbb32fa1c05dd9d21d2a69e5fa3abe9a2dad2237be20b4088393c04aa66cf13718de4bffac72f641a8c017a1d5568fa15a6a06e4dc833874ec95af6f115bdadf15179bfc8c4e3e64f26f1299e282c4ab397340934efc1e601afc630fe195e8ae7d8da1310568cab4f2fad085d0ec39710d8b7c812b3fd55c6f50925bcfc90fbcb35b8daa0f1e1f69d82fae2034039f7ad6921694ed48a55a68bc541e6d86f1e33c261a92d48b50eb58a03d8e31b2f6564a4ddc3ee988d0dc47b4b610a9a9dcb87571b5c1edb3362df0ec3d58872157e0f7247dfa8100b4478b705702a5620c9201010f40232327550db333e845dbecd6aadbd0a94c064862b1100b4dd45ece811b8c0275e3753e11b4bcd8bc5ed7668e72afa5bc5cc17b4c313273755f532ecfdefdf2d5c47999453a3b7c158d98332f0bd3a820cfb2c8c3bcd43197e7395a032cec6e41662079f2f654965aebc393e22b5c8516d9b8ad01e33ee481a4ac46a2df304dadeaa9e5274d340aaebe14dcea315fe1279f1a41a5c7aa8c94bf4b3d48757503171f53488e01210145e62c0de7c39737848dbdb1b207d4d33b8de180b020e8a76b1b521905e5e3ce97292f8558fb68efdee774681bfffcf1dc3eef35f660dd1659a32950de2d50e762313beee330d9c2a9fe8ce5e4e61ddd86378d3551335f6ef62053d3b248a8c33a11abdf3f3aa1975a15f4a6957a13d5b12a44d0f2b52b9a2d996e98c630c0f2abca80c7ae89efcf81ae284a0d19582cb1319d207077e5657d245533181ed6e07e0f7647123fc46c37bd75b4f4d181112b4a08acdcf445332cb9dde69a0923dd9244dd2ecd818b19588939922e3b2d8dd9d9fed95fa55b0e4564b38aca2c4d24eebc634664400177fbdeaeb278bb1d8eb11baf4be5c87d4f8d9a855bfa75df4c51fb4eec87a27c59df9a47d82523b08022a1c0fb22ff6f93c3d2cc22a4111a6ec5be428cba33617be65739c2240248f3a02d01ddf2d6aca9e537a2296b16d082d2b868504371dd5e41898885b03ebfaca73b40e8924ece83c1c80de6ce14943e1199c6f81bf359f44c3ed5ae3c6eacb730b1039f0b6555347bd566dfff45a7a2176420ab2b40916a73b66a3ad07af6e1ac5597393d203fa1ad34d4564af956a0a3e2997e27a4e5eff67dd89cce8875d995e00c1858234f149f6ad4cac2b8056966f726df57b8c4ee8f22f23097ba1471b1f1036e3a499400fccdb75b56eb13e9eca1407d5bff4b075b06d00fcbfcafc28431eb33156232e73c6577e3eca437330c494ede57b9609e1f40634918dea767338b5542197410cdc000143ace89ca0b7bf645b3267f74767d7c7fce05d2f59c137204e56bfa711f66903c511f681cf7a1b4f9fc0f42b7c438ff8957e1059375321df5b0c5c884f46d94c21686e1300582d34928bc398653118f79bfeea2e7cfbbf31a7718f4aab50fae57db94203d43e060365c9a7455241be03d82dffc3783d0f6aa170c0866eb0dad07485831526922d8348a7a16e2e9903a2ac93c58c6dce83127fab17703ec004a519ae5675baffb31bf4b52f9ca992a84017a44d68dc693abd829947342f277fdcbc87168bcc03c32b8b1e81a1915af2517c464af07d52b79d1b0e53164c82ba049f81e92ed1dc20a88fd72e9ce7aa4b22a7cc57dc5527d14f62bc29cfc9d57ed26fd523cac39ac00ba12d3a49d694709924275fc0793d56acf9558818dc9eb210749fa5307d45886b879257d627cee0542b51c2ce6ce134100efb47c92456ece5b73cdc051f570810a8d534222649eb56cf73a377162b753de6c282bcd4a25dda21dd10901bd8dfe8fd4ba8a70811c39707beded23dd60f23e2933372e3a6bce099899b07f0a4c4956fd98e956a8649622c77717de099463c0c6c9389ab4a1ae10f8ddd086d876af2943ee0b6b402ae5f89e09922e8c510ec0caa0a83e366e916400bfec88a52ab457037a35ddc6a8e2289c33684a5915c37bf5d227cbc65a737b52bdcb4fbbb7b4e7f965db116b46044d0870846c730dce12e120b1fe6dd5798ced24cad72c59a3f44de4978b8bc05a1dbeb766be6e2abf6ef46c67a58a370e54e92d89e5f44525e82b94a388d8d0cb20c3469a258c1633c9dddb6854aee255f93f59435ff317622f6899250aa185c207644275278580c5d32401741fe264a2e03b80f442ed58fd0704ebac923ac6a5abb7f0c695252f82e3fbcf2b99d721589a8fe3fad4d5926aee3d7bfafb6739e525faae3d25b12841fa2cc61dddc44d36acb9a8b72d60ecdd9c8cf04f9bac341b5e0f9bc59042db8126324888b07afe72b18cce36d61eec975b6b4ef5dc4a16ac14440cf770599bd4db630bd110eb63a03a80cd95c16d314a4de60cc5115bf0754cb7ab84a827ecefafa96069c721a5979f227fdc2467b4cd1975dafb5b28e1d6f3c1c3a2816ad831dd98c1378a03798c128f176426eaa0e361571e758d54bf4ec2c988355f016e16d6cd5cf97bb4891ab33f5623b7e796af313cc7a9e2f9510cd2bead1ea5dd080d9de1f595b2629ebccf69a0feaed3963ae8a6c89edd66fbf6e566379898185828925f8669668d6bddff961b08aaedbbe7fc196931a887ec740da6bcdab8f826a34aa2aa1e406a258558f3baf022a64222df4d6ee8726c79ba3dd6e11a19e4b4bb49b4a8cd99c189e6392f08ad731e415b65d0ccb919dca46efe9f79e21437111ab09e926d3038182044ae047bf1cc92e2d2644c528985719667a1a8abaf65d0f211172ea789b2fa016e1a88325d1ed706239da4dbb9e2079e3598b4ae5885667587ba1e0921c9ba55d7a3be4c47bc2f2f3547ce9efe32e5a22855f761bd4cbe1cd9337eda4bd7d82a918084d7e116b656104ca87e64b1b8c62323c3c296c5b5b98051feb607b872edf9f789744aff710c4b7279711182bcac6b76c05f5cd982f52f451e7e29046550e012e01d8cdd3e305427030f4247488c9136303084c12175c5c781cdd08aede5a356ea0ccdd05a460be3c7b4bfd62c3ce9ab68e285a36c1546d0b18edad71f69f5bedb340772e1bbb035514b085067259e39f59dc292a12557350c66904b253efee29a5eb7a6920f583c899dc46a1d3e2af2db3a3d1a0e8d1f98722a16c6cc1e401058d60c8c436d8f1166ba53bdde5810f9d0288528affd486c266546a864c92af3df8abd451cc1e0d6bfea534865cea9d49b3ea5e390fa823118df8a61e31022f5fbb8ceee870bf2e60890263c4d14e24d053d0fddf665ff80a66fa00a5957f8a30fe82a4b82cf2f6b4d49def98f66bfcdaa0aef13314e950ca9f3849b1edf3b82eaf74a0dbcf45c3dba9bd2d853281a78484f1efaf4150da1207ec3cb61fbcbf759f8182b7052b28d7164b73197b0a440759fe9d5ddf827f1897a174e82fb968a9a07c61bee44bc1f7f9ee5c6de04c02d57735c5fab741b36aec7c8642e56cba932a08b8e8a9d3eb066a4ee7cbf22e5abbd4346de59eca1f24ad9f7f9ff7621e5f30dd08f4cddda8e80e496908109f5212a72bab1378d1237def07bdda4178719975346c68405de15153031fb17535894e5e3c1de6fdd507333f0226b78ba7cae509cfb48d6735ede9392650bf85ac1db919b1e9fe0a823119d8253204dbb2f7a8f524be6d419f3a45c5051a7a88ef0bd41586d90c11a894d647f03895f671a6e19f1c70e32668653aba8366a3d372522f49844081a9637db080663ab02f4a8af502955d5411461b62f85308c91852f8fb9f0bdddd500b4a133791d3a2f91a82dc4b09f5ad2196a9172ab0cd3fafe7266e9f6d159110d99ca8da8a34b17be17a04ad4509a9fffab1e45e10f10e0cf9cfbd9c761ad044064c07e473fdc626289cfb88b13a11455c069b70aa02426d9119ac878a14c9483be9c0d5bcbb5fa76c8d06531f59c7cf7c26372e750e2f332418ca769e5e7fbeb3ada7bb58b573a0635e2e3ad9a53ddb809ea01086a3fa993ad57e89da6f9c5e61bd0f8ba69212a386b2aa1ae17520d7fb989dbe14021885eb50fa3048aebd42c861a09a308b660d382c0480ead8a52a1e14927c7c77957f94bb59ccfd557f8c4a7af23360a298a603d20ebc386db041d8c306b3e32b0bff541bdec5ff75c3b40950815cf9f89d48a382f67e44c409d046c01fb1262aca0df6f5238a3c3c09977261494f7361ba326815d6e23f49e4d6d4b54665081067332265fff59cf54af9da0db9d19bc611cbcb6e6f3f1e2e1ffb6cdd6253578d78d06a2ff5f9250f1994c5749e3ce49231fbd63bba28e948f9150933e3ae31299babaa41043b181a100882e613b4b4b8f49ceeb742d22f860853a9b917f5a323a8a1fb1f3363a7be4407fba44b408f259b5db79a055b92ce3d7a0649cc59f4afa2b1f69959d5c6f5eef1fa7987a47bee4491f685c52e9db1ee1a231ab5a4bae1019c97868a409dd0d57b32525394a233023c4a7ac429808bbcb57a34b41883202744c3bdebc0a637773273f19c2be6e806bef7fc1002846db762ee4e16867773808c5477987d5851d5b1641d070feabc203cb3d7943ffb206272fcac1bccb616352d85975f5a22c0f247548535ad9fb83fb2be17689453f10691143c060cd964df63c3c70e7b1cfc7e2b468015f327f9869353477bfeeed330b03ddd9e4e0a2441182244da283d7a59d2b2b20e6de3e3a47c26aeef4944c1190bba674523a6c3c4ed6bac53b9edffcb0e9fb19d8bf36949d03ef6a7e59eb903a00d9614f642d1932c766421906f5b177963c71e881453560e3ffcec792e8dc46b1832a8fcb2ab2268a9c1fb648d1c6fa1c8cbd50d5a2d8264fbc6c063e6daac5519d362da389dcd3d12c8039f991de91e728abf5bab95c3aef66dd8cc36c60e73cb10afb02eff6df20ff12c59b142b07fc48fe94612de80b8b958f78256fd7cf3c6f79a83867f3bb5f70da392957badadecefdf7b6e4ebd39ff945397c7d302ca0a5a3918d8abb893cd9cdd680916a50fe19699ff0476ad82e6ba46523f26ccc5eb65313c1df1077c8876d2b73bf86ba311862d12b0c557a92ef827197121512e87f817167d4b17c7e225a48b3f8fbbf4187438e0e9b78e905cdbeb72e80dfb37ec0104f5186b39b4ff34f0cdf4b74dc915acd3f98874cd6a67308d0ad9697121ac477550b1affe004f433705933f9647522be65cb5a7471120ec942aeb956f195be0c1783102cf7d842f2968222ae1a7fa6513f200d3fa85d71724956ed697f0673ee3b40a4d46ba4850439ec125b708ed52b52b9f72906477d520c90a9f5dd49a7a33a328137a183f439895532b78ae451a8c3db789bc862fbc37241d523027e1a008629c969380f6eb55f9cf3f0675bca6851f00df6aaf90de9f62d5c179945ef81d1073850301f97e379ea415d830e3f3751cf83e2dba541cb6cdd89e6b674f2c53e329e5f3dd418d534ada6469a5b3bca5b7cfbdfdd6df4abaf77d4520d0311e801145c91b52586a56086e663841b702f52cef9fff8cfb7b33dfa125688ba6b4fadd1dca8defaf4259ca85323b23d3bbb45933562c25af3e8d7bc6ad4a50ae974f8d207994b3bd74a6812ab6a40fcaf96bb4e17bd20d742b14c72226caef3e0f5c56c4930071e9f9a894f18650fbb785c6f707605c86b634c9722c8690cf3a954f68d7c2db3a257339ade67a41259f6f878dd0ab7876deffa77f6f00819282a8f4c4da84c6cf4f335cd0410770a2b1a1fbb3f85f4489eeceb78bbfddb2d1866c57b41f6ed179a0bc3750a486403d23473f2feef43ebc5af1018d9c20089e277d77fb9c34f425c8f8af4c49864b57572fa8c232e61ef37194251a1ddc2f73ffecd57e638751cb72bcb2c40d22540166ca1e8588f24b010c9fbd962e3a2c23a7e93f131df61b8703ce326ed80cc87912d3c6aaa27574bbe8d65bcaecd660c31cead132a44b1d0e4a53cacc0b82a263c4e7783944af0af08ea9e68e8e25ed9111cfef841f1b2fd24164f9097f70efe09b1109e5cb91fe68a2760381fd63a7fd422dd578a60661abc9ee3a5db1c2cde2fb21f2040f1ed3fc27b99e254256949d0560e8b98fa028fca50768caa951a87bf8969af498d50a9ee773c9caa7d9f7d8e1955506013f198cda316d79b177e59f233b98f727afd2494fc18642f0015adab756ea6742690c7d00f28655b915ce4eb8b3ba2e8559ba23e1ff1ccc9f79ae2df85f924459c56715dec78ef4592352eb1a850cd65ecd36e1a9121e888586b7b2fa84da920b8cf44480433e61ab076b10171c0537524bb170a4b99b0b0c437418a665b7ef909652b6483b20362e557c1480c2a2a0efa221fc59054a48122b52d38245f9bd026001635be5b155f5c766a59306fbde231fa72b4d74449a2fe8fb969496ee26af5881adaafb4189b439877ab8f78709cfd32c10ea576a010bfc137b7a4aae137ea3d29070ce3bc8dbe6655e967115ca3461ad9d28b9cf8af07441e68a54ec5e889846f3978f07ba51f7d5af5da78c5c675dc5d0c1a4a399ff4247203573a46fb903eaf7bc886e6cbd3126fa4a3fe3bb13bbdfea7da871f6563aa750f6ad7895b34b2809563dcf5ed30f1c60cef4138aa49d4f55e396534ed10cf4d857723a2b442f47d79de162c30ec6c4daf939b4c88649494e3682d1da81b4a5928d8e18a16c46707a685305e592589acb484e28e9d5af89c44b6e563d125ec97c0155410527406d94b90bc9576a662db99da1cb82b04d610d02187ce08f22ea0e8fd31919d53fa6aaf980e31ca7f8610e695a41919c24136a8406c62d5f15fca36507002b54ece17664b5247583ad60d863f283f3c288946139575dcaedc978762e85f534e56334ef0221c34ffae054ddf79339b8f08701e9699b11041df8f518dd33203363c8098fbefb01555bcc2542422777b38d8dff11b15aadb0c251ce2c5b32f8735b3cb784f2e5731b48feb5a0e791a1106abdea0f7d1f087737cbe7fdf523fa14c9be2a2987511004c5b7ac1814ef6961db16799698242452c469a07c30e4a1f73193c74a41bdd88aef50035e4648bc9dfa276951798420a45e4085932bdb9381af3cc4678bd962af616549e4020d2c9fd25e2117a6d8934fde2218273d7833d60ea492e251417a27e7fb32012a940a6b6487af4b64958bf05f1b1107732149d227eeda5ca5a43cf583dc297d66072a1acd75e93a7caefd36a0d581e21d5cb08654c4ecef46ebac5391546e0b7d2a6418548d8f816446bcf237f676e873e6bae9107234abe5ab24c53ea472ad10653cef068fd9f4e729fc0d526e489f8df13af5575f1e70e0ec22899728b0659d70fc2dd509d9df3ec170638f89e540f4d3f02aa9b1b1819f84da596e0d7b45a5818061728f8eeccd2bea0f460dd7e18cb95f2364c50e351f0690e184eb63ebbb14a0b4b2117e44f3b2b3", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0xfffffffffffffee7, 0x7ffffffffffffff1, 0x403, {0x1, 0x5, 0x0, '\x00', {0x1, 0xad4, 0x8, 0x8, r6, r7, 0xc000, '\x00', 0x5, 0x8, 0x100000000, 0x6, {0x1, 0x6}, {0x20000000000006}, {0x100000000, 0x2}, {0x8, 0xa04}, 0x4, 0x80000b, 0x5, 0x3}}}}) getresgid(&(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0)=0x0) fchown(r1, r6, r8) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) socket$kcm(0x10, 0x2, 0x4) 1.673708988s ago: executing program 2 (id=554): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x4, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0x8, 0x2, 0xa}) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x101) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x406, 0xd1, 0x800}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) close_range(r0, 0xffffffffffffffff, 0x0) 1.639861718s ago: executing program 4 (id=555): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) syz_clone(0x10eb22f000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000001c0), 0x12) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB='+cpu'], 0x5) 1.57855288s ago: executing program 3 (id=556): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x20000, 0x5e}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, &(0x7f0000000080)={@hyper}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000240)={@hyper}) socket$inet_sctp(0x2, 0x1, 0x84) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x40) close(r2) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000040)={0xe, 0x91, 0x1, 0x8000, 0x5, 0x0, 0x8, 0x64246694, r4}, 0x20) 1.373422734s ago: executing program 2 (id=557): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) syz_clone(0x10eb22f000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000001c0), 0x12) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f00000003c0)=ANY=[@ANYBLOB='+cpu'], 0x5) write$cgroup_subtree(r7, &(0x7f0000000440)=ANY=[], 0x5) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x80, &(0x7f0000000280), 0x0, &(0x7f0000000340), &(0x7f0000000380), &(0x7f0000000480)="013c8b202dfeac33e9a0409142e4d22a66f01010fa22f7e3518012b4a0295d038cd6856f04476a75721b656c8f83e7512ab2e1c92b72802437791b97222b1c0273503eb19dcb589d48973afc86427013d94ea3007ac8584d5caaefa8e17dec7d45645120db3cc33899b35d3c585c32ba34fbc575073f6f4fc8ebbfa655bb86a5a5640b8a2532b6873bbeb1d3102681b648bda7f5c083a33efb5c30790abd6a850affe1ca6d8057b4d25fe2697f35f5a9640f2ac2d2b20f6c4d88a506a4acf3f12fe17465b4e2") syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x29, 0x6f, 0xb6, 0x8, 0x9022, 0xd484, 0xff88, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x95, 0x0, 0x81, [{{0x9, 0x4, 0x1e, 0x80, 0x0, 0x56, 0xa7, 0xf6, 0x2}}]}}]}}, &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x16}) r8 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r8, 0x707, &(0x7f0000000080)={&(0x7f00000001c0)=[{0x1, 0x9211, 0x0, &(0x7f00000000c0)}, {0x9, 0xa200, 0x0, 0x0}], 0x2}) 1.319633305s ago: executing program 1 (id=558): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) setrlimit(0x5, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x2}) close(r0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x200000000000000) 1.319344245s ago: executing program 3 (id=559): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x54, 0x10, 0x1, 0x70bd2c, 0x20, {0x0, 0x0, 0x0, 0x0, 0xdf15003157970113, 0x8084}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x20, 0x16, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x9, 0x61b, 0x10000, 0x8100}}]}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000084}, 0x20000010) 1.260548256s ago: executing program 4 (id=560): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x81c0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0xd, 0x200200090}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000080)=0x3) landlock_restrict_self(r0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r4, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x121101, 0x0) clock_settime(0xfffffffb, &(0x7f0000000140)) truncate(&(0x7f0000000240)='./file0\x00', 0x1) 1.143566608s ago: executing program 3 (id=561): r0 = fsopen(&(0x7f00000003c0)='virtiofs\x00', 0x1) close(r0) 1.143255368s ago: executing program 1 (id=562): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xff, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56f41, 0x1070b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0x8, 0xb}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x4008004) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.009298251s ago: executing program 0 (id=563): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(r0, 0xffffffffffffffff, 0x0) 290.445745ms ago: executing program 4 (id=564): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffb0}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0xb5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 207.452166ms ago: executing program 3 (id=565): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000740)=""/4100, 0x1004}], 0x1, 0x145, 0x80000000) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r3, &(0x7f0000000400)={0x28, 0x0, 0x2710, @my=0x1}, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x34004811) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x13, r4, 0x0) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x2a1, 0x21, &(0x7f0000000240)={0x0, 0x6, 0xd, 0x360}, 0x8, 0x7, 0x7f, 0x0, 0x1, 0x101, 0x0}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(r5, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r5, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0xfffffffffffffee7, 0x7ffffffffffffff1, 0x403, {0x1, 0x5, 0x0, '\x00', {0x1, 0xad4, 0x8, 0x8, r6, r7, 0xc000, '\x00', 0x5, 0x8, 0x100000000, 0x6, {0x1, 0x6}, {0x20000000000006}, {0x100000000, 0x2}, {0x8, 0xa04}, 0x4, 0x80000b, 0x5, 0x3}}}}) getresgid(&(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0)=0x0) fchown(r1, r6, r8) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) socket$kcm(0x10, 0x2, 0x4) 207.129756ms ago: executing program 0 (id=566): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r2, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 171.944737ms ago: executing program 4 (id=567): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x101, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0x9, 0x3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 30.4639ms ago: executing program 1 (id=568): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x4, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0x8, 0x2, 0xa}) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x101) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x406, 0xd1, 0x800}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=569): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x79d987e41f219aec, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000040)=0x1000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x2d) alarm(0x8000000000000001) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x8, 0xc, 0x0, 0x8, 0x0, 0x10, 0x3, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x40, '\x00', 0x0, 0x6}) ioctl$KVM_RUN(r4, 0xae80, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r10 = dup(r1) write$FUSE_BMAP(r10, &(0x7f0000000000)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=fscache']) kernel console output (not intermixed with test programs): 63.007334][ T4259] Bluetooth: hci2: command 0x041b tx timeout [ 63.007910][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.013446][ T4259] Bluetooth: hci4: command 0x041b tx timeout [ 63.020449][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.028124][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.045114][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.053714][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.063905][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.072146][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.080147][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.090261][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.099075][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.133910][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.149067][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.168765][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.180669][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.192896][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.201505][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.210824][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.222148][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.249789][ T4185] device veth0_vlan entered promiscuous mode [ 63.266092][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.284041][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.311177][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.335230][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.343796][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.352577][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.362452][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.370071][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.377668][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.396010][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.408409][ T4185] device veth1_vlan entered promiscuous mode [ 63.435915][ T4193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.453386][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.472359][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.481164][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.545596][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.556152][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.573189][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.582153][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.599110][ T4185] device veth0_macvtap entered promiscuous mode [ 63.619057][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.633110][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.645646][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.667665][ T4195] device veth0_vlan entered promiscuous mode [ 63.675441][ T4185] device veth1_macvtap entered promiscuous mode [ 63.686412][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.697333][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.707365][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.717327][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.726875][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.735009][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.742476][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.751098][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.771054][ T4184] device veth0_vlan entered promiscuous mode [ 63.782638][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.792364][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.800483][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.808767][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.820310][ T4195] device veth1_vlan entered promiscuous mode [ 63.830892][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.847088][ T4184] device veth1_vlan entered promiscuous mode [ 63.865074][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.873233][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.881576][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.891113][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.899458][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.908739][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.918223][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.925890][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.935375][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.968226][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.976698][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.985625][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.994008][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.002827][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.019525][ T4195] device veth0_macvtap entered promiscuous mode [ 64.028509][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.037816][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.046382][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.056479][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.066195][ T4184] device veth0_macvtap entered promiscuous mode [ 64.076445][ T4185] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.085435][ T4185] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.096123][ T4185] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.105257][ T4185] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.125771][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.135349][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.143351][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.152306][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.162991][ T4184] device veth1_macvtap entered promiscuous mode [ 64.184732][ T4195] device veth1_macvtap entered promiscuous mode [ 64.227709][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.238602][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.251919][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.265809][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.273923][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.284582][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.293065][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.301958][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.310979][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.320035][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.328400][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.337018][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.345409][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.353251][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.362041][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.370889][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.382145][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.392801][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.403270][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.417825][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.428440][ T4193] device veth0_vlan entered promiscuous mode [ 64.445515][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.455568][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.466846][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.477905][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.490136][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.499733][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.514476][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.524803][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.535481][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.547358][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.555314][ T4191] device veth0_vlan entered promiscuous mode [ 64.565873][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.574929][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.583584][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.592483][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.611145][ T4184] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.621639][ T4184] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.630570][ T4184] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.639288][ T4184] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.668094][ T4193] device veth1_vlan entered promiscuous mode [ 64.686236][ T4195] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.697118][ T4195] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.706184][ T4195] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.715649][ T4195] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.730631][ T4191] device veth1_vlan entered promiscuous mode [ 64.765569][ T1236] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.773846][ T1236] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.784888][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.841099][ T1236] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.852111][ T1236] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.878154][ T3100] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.886485][ T3100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.895674][ T3100] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.921437][ T4193] device veth0_macvtap entered promiscuous mode [ 64.954538][ T3100] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.969700][ T3100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.980988][ T3100] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.985080][ T4237] Bluetooth: hci0: command 0x040f tx timeout [ 64.998132][ T4191] device veth0_macvtap entered promiscuous mode [ 65.005116][ T4237] Bluetooth: hci1: command 0x040f tx timeout [ 65.025659][ T4193] device veth1_macvtap entered promiscuous mode [ 65.040301][ T747] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.051769][ T747] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.059337][ T1236] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.079446][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.090165][ T4249] Bluetooth: hci4: command 0x040f tx timeout [ 65.096495][ T1236] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.108704][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.110995][ T4249] Bluetooth: hci2: command 0x040f tx timeout [ 65.118791][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.135986][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.151365][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.163321][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.169018][ T4249] Bluetooth: hci3: command 0x040f tx timeout [ 65.180802][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.201163][ T4191] device veth1_macvtap entered promiscuous mode [ 65.212748][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.222816][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.232291][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.241264][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.250331][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.258540][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.268223][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.306126][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.311925][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.324809][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.343357][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.353483][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.364619][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.374936][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.386220][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.396571][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.407300][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.419157][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.427475][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.438249][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.448461][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.459105][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.470093][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.480846][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.491809][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.499950][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.508131][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.517796][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.526584][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.535898][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.548640][ T1236] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.557337][ T1236] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.579816][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.590723][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.600897][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.611809][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.621665][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.633095][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.643174][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.653862][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.667134][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.678273][ T4193] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.687381][ T4193] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.696989][ T4193] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.707006][ T4193] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.732293][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.741293][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.750332][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.773822][ T4191] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.810442][ T4191] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.825503][ T4191] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.838765][ T4191] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.041595][ T1236] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.073393][ T1236] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.085026][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.116311][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.152195][ T3100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.161883][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.172362][ T3100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.186046][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.196044][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.298000][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.343699][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.387650][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.929508][ T4315] bond0: option primary_reselect: invalid value (255) [ 66.986569][ T21] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 67.064925][ T4249] Bluetooth: hci1: command 0x0419 tx timeout [ 67.081210][ T4249] Bluetooth: hci0: command 0x0419 tx timeout [ 67.139787][ T26] audit: type=1326 audit(1757692927.297:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4309 comm="syz.1.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f064a081ba9 code=0x7ffc0000 [ 67.145210][ T4318] Bluetooth: hci4: command 0x0419 tx timeout [ 67.224670][ T4229] Bluetooth: hci3: command 0x0419 tx timeout [ 67.234218][ T21] usb 4-1: Using ep0 maxpacket: 8 [ 67.241699][ T4229] Bluetooth: hci2: command 0x0419 tx timeout [ 67.256193][ T26] audit: type=1326 audit(1757692927.347:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4309 comm="syz.1.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f064a081ba9 code=0x7ffc0000 [ 67.310611][ T26] audit: type=1326 audit(1757692927.347:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4309 comm="syz.1.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f064a081ba9 code=0x7ffc0000 [ 67.341332][ T26] audit: type=1326 audit(1757692927.347:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4309 comm="syz.1.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f064a081ba9 code=0x7ffc0000 [ 67.364273][ T4244] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 67.377861][ T26] audit: type=1326 audit(1757692927.357:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4309 comm="syz.1.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f064a081ba9 code=0x7ffc0000 [ 67.439766][ T26] audit: type=1326 audit(1757692927.357:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4309 comm="syz.1.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f064a081ba9 code=0x7ffc0000 [ 67.513200][ T26] audit: type=1326 audit(1757692927.357:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4309 comm="syz.1.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f064a081ba9 code=0x7ffc0000 [ 67.556952][ T21] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 67.572568][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.596273][ T21] usb 4-1: Product: syz [ 67.604255][ T26] audit: type=1326 audit(1757692927.357:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4309 comm="syz.1.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f064a081ba9 code=0x7ffc0000 [ 67.634170][ T21] usb 4-1: Manufacturer: syz [ 67.641275][ T21] usb 4-1: SerialNumber: syz [ 67.657055][ T26] audit: type=1326 audit(1757692927.367:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4309 comm="syz.1.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f064a081ba9 code=0x7ffc0000 [ 67.682343][ T26] audit: type=1326 audit(1757692927.367:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4309 comm="syz.1.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f064a081ba9 code=0x7ffc0000 [ 67.784865][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 67.793900][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 67.803213][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 67.804519][ T4244] usb 1-1: not running at top speed; connect to a high speed hub [ 67.920211][ T21] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 67.934348][ T4244] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 67.951026][ T4244] usb 1-1: config 1 has an invalid descriptor of length 200, skipping remainder of the config [ 67.978567][ T4244] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 68.003077][ T4244] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 4, skipping [ 68.050753][ T4244] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 68.182304][ T23] usb 4-1: USB disconnect, device number 2 [ 68.209531][ T23] usblp0: removed [ 68.254473][ T4244] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 68.270207][ T4244] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.287988][ T4244] usb 1-1: Product: syz [ 68.297851][ T4244] usb 1-1: Manufacturer: syz [ 68.309151][ T4244] usb 1-1: SerialNumber: syz [ 69.198708][ T4340] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 69.244421][ T4244] usb 1-1: 0:2 : does not exist [ 69.346614][ T4244] usb 1-1: USB disconnect, device number 2 [ 69.424171][ T7] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 69.476329][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 69.545671][ T4343] Zero length message leads to an empty skb [ 69.684228][ T7] usb 4-1: Using ep0 maxpacket: 16 [ 69.815784][ T7] usb 4-1: config 0 has an invalid interface number: 102 but max is 0 [ 69.826553][ T7] usb 4-1: config 0 has no interface number 0 [ 69.925106][ T4349] syz.0.21 uses obsolete (PF_INET,SOCK_PACKET) [ 69.954213][ T2285] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 70.025727][ T7] usb 4-1: New USB device found, idVendor=04b3, idProduct=4001, bcdDevice= 1.10 [ 70.038015][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.046566][ T7] usb 4-1: Product: syz [ 70.050893][ T7] usb 4-1: Manufacturer: syz [ 70.056005][ T7] usb 4-1: SerialNumber: syz [ 70.072222][ T7] usb 4-1: config 0 descriptor?? [ 70.125288][ T7] usb-storage 4-1:0.102: USB Mass Storage device detected [ 70.159521][ T7] usb-storage 4-1:0.102: Quirks match for vid 04b3 pid 4001: 2000 [ 70.177257][ T7] usb-storage 4-1:0.102: This device (04b3,4001,0110 S a4 P 01) has an unneeded Protocol entry in unusual_devs.h (kernel syzkaller) [ 70.177257][ T7] Please send a copy of this message to and [ 70.234514][ T2285] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 70.244284][ T13] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 70.344786][ T2285] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 70.349861][ T4244] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 70.353708][ T2285] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 70.394237][ T2285] usb 3-1: config 0 interface 0 has no altsetting 0 [ 70.484841][ T2285] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 70.493774][ T2285] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 70.519108][ T2285] usb 3-1: config 0 interface 0 has no altsetting 0 [ 70.614449][ T2285] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 70.634477][ T4244] usb 1-1: Using ep0 maxpacket: 16 [ 70.635582][ T2285] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 70.670198][ T2285] usb 3-1: config 0 interface 0 has no altsetting 0 [ 70.754502][ T4244] usb 1-1: config 0 has an invalid interface number: 94 but max is 0 [ 70.779003][ T4244] usb 1-1: config 0 has no interface number 0 [ 70.794366][ T13] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 70.794408][ T2285] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 70.803752][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.841252][ T13] usb 5-1: Product: syz [ 70.851439][ T13] usb 5-1: Manufacturer: syz [ 70.863124][ T13] usb 5-1: SerialNumber: syz [ 70.872743][ T2285] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 70.917478][ T2285] usb 3-1: config 0 interface 0 has no altsetting 0 [ 70.964524][ T4244] usb 1-1: New USB device found, idVendor=04dd, idProduct=8007, bcdDevice=45.90 [ 70.980048][ T4244] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.996352][ T4244] usb 1-1: Product: syz [ 71.011050][ T4244] usb 1-1: Manufacturer: syz [ 71.015843][ T4244] usb 1-1: SerialNumber: syz [ 71.037167][ T4244] usb 1-1: config 0 descriptor?? [ 71.048045][ T2285] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 71.073007][ T2285] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 71.115328][ T4244] usb 1-1: unsupported MDLM descriptors [ 71.152193][ T2285] usb 3-1: config 0 interface 0 has no altsetting 0 [ 71.254321][ T2285] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 71.263496][ T2285] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 71.276075][ T2285] usb 3-1: config 0 interface 0 has no altsetting 0 [ 71.313459][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.320360][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.364259][ T2285] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 71.381028][ T2285] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 71.385570][ T4351] udc-core: couldn't find an available UDC or it's busy [ 71.413550][ T4351] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 71.434610][ T13] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 71.449813][ T2285] usb 3-1: config 0 interface 0 has no altsetting 0 [ 71.494330][ T13] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 71.509168][ T13] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 71.523454][ T13] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 71.534781][ T13] lan78xx: probe of 5-1:1.0 failed with error -71 [ 71.564253][ T2285] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 71.581711][ T13] usb 5-1: USB disconnect, device number 2 [ 71.596215][ T2285] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 71.622828][ T2285] usb 3-1: config 0 interface 0 has no altsetting 0 [ 71.661868][ T21] usb 1-1: USB disconnect, device number 3 [ 71.704317][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 71.815437][ T2285] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 71.827810][ T2285] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 71.856544][ T2285] usb 3-1: Product: syz [ 71.863677][ T2285] usb 3-1: Manufacturer: syz [ 71.881713][ T2285] usb 3-1: SerialNumber: syz [ 71.935982][ T2285] usb 3-1: config 0 descriptor?? [ 71.945410][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #01!!! [ 71.983810][ T2285] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 72.329594][ T26] kauditd_printk_skb: 22 callbacks suppressed [ 72.329605][ T26] audit: type=1326 audit(1757692932.507:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4366 comm="syz.4.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55fecc7ba9 code=0x7ffc0000 [ 72.370564][ T4244] usb 3-1: USB disconnect, device number 2 [ 72.374278][ C1] usb 3-1: yurex_control_callback - control failed: -71 [ 72.431480][ T4244] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 72.547918][ T26] audit: type=1326 audit(1757692932.577:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4366 comm="syz.4.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f55fecc7ba9 code=0x7ffc0000 [ 72.632935][ T26] audit: type=1326 audit(1757692932.577:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4366 comm="syz.4.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55fecc7ba9 code=0x7ffc0000 [ 72.708525][ T26] audit: type=1326 audit(1757692932.587:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4366 comm="syz.4.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f55fecc7ba9 code=0x7ffc0000 [ 72.814232][ T26] audit: type=1326 audit(1757692932.587:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4366 comm="syz.4.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55fecc7ba9 code=0x7ffc0000 [ 72.883403][ T26] audit: type=1326 audit(1757692932.587:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4366 comm="syz.4.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55fecc7ba9 code=0x7ffc0000 [ 73.024355][ T26] audit: type=1326 audit(1757692932.587:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4366 comm="syz.4.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f55fecc7ba9 code=0x7ffc0000 [ 73.429517][ T26] audit: type=1326 audit(1757692932.587:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4366 comm="syz.4.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55fecc7ba9 code=0x7ffc0000 [ 73.545729][ T21] usb 4-1: USB disconnect, device number 3 [ 73.564413][ T26] audit: type=1326 audit(1757692932.587:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4366 comm="syz.4.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f55fecc7ba9 code=0x7ffc0000 [ 73.593752][ T26] audit: type=1326 audit(1757692932.587:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4366 comm="syz.4.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55fecc7ba9 code=0x7ffc0000 [ 73.695738][ T4244] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 74.074347][ T4244] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.084268][ T21] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 74.143726][ T4244] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.175574][ T4244] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 74.194197][ T4244] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.241210][ T4244] usb 3-1: config 0 descriptor?? [ 74.384175][ T21] usb 4-1: Using ep0 maxpacket: 16 [ 74.434209][ T4229] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 74.506388][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.600783][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.640103][ T21] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 74.667861][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.683837][ T21] usb 4-1: config 0 descriptor?? [ 74.857702][ T4244] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 74.881487][ T4244] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 74.934571][ T4229] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 74.955910][ T4229] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 74.971083][ T4229] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 74.978497][ T4244] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 74.980754][ T4229] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.026299][ T4385] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 75.038940][ T4244] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 75.140217][ T4244] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 75.212766][ T4244] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 75.228095][ T4244] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 75.274339][ T2285] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 75.320771][ T4244] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 75.335147][ T21] usbhid 4-1:0.0: can't add hid device: -32 [ 75.341284][ T21] usbhid: probe of 4-1:0.0 failed with error -32 [ 75.367940][ T4385] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 75.419463][ T21] usb 2-1: USB disconnect, device number 2 [ 75.479104][ T4244] cp2112 0003:10C4:EA90.0001: Part Number: 0x00 Device Version: 0x00 [ 75.574431][ T2285] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 75.694348][ T2285] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 75.710721][ T2285] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 75.743381][ T2285] usb 5-1: config 0 interface 0 has no altsetting 0 [ 75.802050][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 75.864369][ T2285] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 75.884365][ T2285] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 75.909065][ T2285] usb 5-1: config 0 interface 0 has no altsetting 0 [ 75.978290][ T4376] cp2112 0003:10C4:EA90.0001: Error starting transaction: -38 [ 76.014444][ T2285] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 76.024463][ T2285] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 76.036879][ T4244] cp2112 0003:10C4:EA90.0001: error reading lock byte: -71 [ 76.054585][ T2285] usb 5-1: config 0 interface 0 has no altsetting 0 [ 76.107376][ T4244] usb 3-1: USB disconnect, device number 3 [ 76.164367][ T2285] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 76.186151][ T2285] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 76.232175][ T2285] usb 5-1: config 0 interface 0 has no altsetting 0 [ 76.267237][ T4404] fido_id[4404]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 76.302645][ T4406] binder: 4405:4406 ioctl c018620c 200000000280 returned -22 [ 76.344415][ T2285] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 76.371003][ T2285] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 76.398641][ T2285] usb 5-1: config 0 interface 0 has no altsetting 0 [ 76.524393][ T2285] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 76.539875][ T2285] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 76.551549][ T2285] usb 5-1: config 0 interface 0 has no altsetting 0 [ 76.639843][ T2285] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 76.653175][ T2285] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 76.670396][ T2285] usb 5-1: config 0 interface 0 has no altsetting 0 [ 76.762185][ T4411] tipc: Started in network mode [ 76.764296][ T2285] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 76.770638][ T4244] usb 4-1: USB disconnect, device number 4 [ 76.805514][ T2285] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 76.844829][ T4411] tipc: Node identity 4a1df0881e4f, cluster identity 4711 [ 76.847157][ T2285] usb 5-1: config 0 interface 0 has no altsetting 0 [ 76.868742][ T4411] tipc: Enabled bearer , priority 0 [ 76.887560][ T4416] device syzkaller0 entered promiscuous mode [ 76.908368][ T4415] device syzkaller1 entered promiscuous mode [ 76.977078][ T4411] tipc: Resetting bearer [ 76.999034][ T4410] tipc: Resetting bearer [ 77.045370][ T2285] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 77.061669][ T2285] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 77.082894][ T2285] usb 5-1: Product: syz [ 77.099601][ T2285] usb 5-1: Manufacturer: syz [ 77.112520][ T2285] usb 5-1: SerialNumber: syz [ 77.131403][ T2285] usb 5-1: config 0 descriptor?? [ 77.144374][ T4410] tipc: Disabling bearer [ 77.178226][ T2285] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 77.504176][ T2285] usb 5-1: USB disconnect, device number 3 [ 77.514176][ C1] usb 5-1: yurex_control_callback - control failed: -71 [ 77.525275][ T2285] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 79.732852][ T4467] program syz.0.54 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 80.355591][ T4476] AppArmor: change_hat: Invalid input 'ë' [ 81.027545][ T26] kauditd_printk_skb: 40 callbacks suppressed [ 81.027559][ T26] audit: type=1326 audit(1757692941.207:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4484 comm="syz.4.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55fecc7ba9 code=0x7ffc0000 [ 81.061471][ C1] vkms_vblank_simulate: vblank timer overrun [ 81.189431][ T26] audit: type=1326 audit(1757692941.267:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4484 comm="syz.4.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55fecc7ba9 code=0x7ffc0000 [ 81.211549][ C1] vkms_vblank_simulate: vblank timer overrun [ 81.557075][ T1111] cfg80211: failed to load regulatory.db [ 82.272157][ T4463] ODEBUG: Out of memory. ODEBUG disabled [ 82.322961][ T4483] syz.3.58 (4483): drop_caches: 2 [ 82.721445][ T4499] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.729816][ T4499] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.343023][ T4530] netlink: 8 bytes leftover after parsing attributes in process `syz.3.72'. [ 84.604223][ T4230] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 84.864245][ T4230] usb 1-1: Using ep0 maxpacket: 8 [ 84.874224][ T4541] loop6: detected capacity change from 0 to 7 [ 84.936085][ T4402] Dev loop6: unable to read RDB block 7 [ 84.941813][ T4402] loop6: AHDI p4 [ 84.959227][ T4402] loop6: partition table partially beyond EOD, truncated [ 85.010783][ T4541] Dev loop6: unable to read RDB block 7 [ 85.043839][ T4541] loop6: AHDI p4 [ 85.054206][ T4541] loop6: partition table partially beyond EOD, truncated [ 85.193637][ T26] audit: type=1326 audit(1757692945.367:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4537 comm="syz.3.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1542199ba9 code=0x7ffc0000 [ 85.288898][ T4230] usb 1-1: unable to get BOS descriptor or descriptor too short [ 85.328349][ T26] audit: type=1326 audit(1757692945.367:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4537 comm="syz.3.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1542199ba9 code=0x7ffc0000 [ 85.395344][ T4230] usb 1-1: config 4 has an invalid interface number: 30 but max is 0 [ 85.456172][ T4230] usb 1-1: config 4 has no interface number 0 [ 85.462398][ T4230] usb 1-1: config 4 interface 30 has no altsetting 0 [ 85.814342][ T4230] usb 1-1: string descriptor 0 read error: -22 [ 85.823767][ T4230] usb 1-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 85.930827][ T4230] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.029567][ T4229] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 86.149942][ T4230] dw2102: su3000_identify_state [ 86.241158][ T4230] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 86.274224][ T4229] usb 3-1: Using ep0 maxpacket: 16 [ 86.309471][ T4463] Set syz1 is full, maxelem 65536 reached [ 86.380037][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #01!!! [ 86.395616][ T4229] usb 3-1: config 0 has an invalid interface number: 102 but max is 0 [ 86.408672][ T4229] usb 3-1: config 0 has no interface number 0 [ 86.439015][ T4230] dw2102: su3000_power_ctrl: 1, initialized 0 [ 86.514851][ T4230] dvb-usb: bulk message failed: -22 (2/0) [ 86.595150][ T4229] usb 3-1: New USB device found, idVendor=04b3, idProduct=4001, bcdDevice= 1.10 [ 86.628913][ T4229] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.671209][ T4229] usb 3-1: Product: syz [ 86.691451][ T4229] usb 3-1: Manufacturer: syz [ 86.714907][ T4229] usb 3-1: SerialNumber: syz [ 86.749706][ T4555] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 86.775518][ T4229] usb 3-1: config 0 descriptor?? [ 86.794271][ T4230] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 86.825017][ T4229] usb-storage 3-1:0.102: USB Mass Storage device detected [ 86.872436][ T4229] usb-storage 3-1:0.102: Quirks match for vid 04b3 pid 4001: 2000 [ 86.896899][ T4229] usb-storage 3-1:0.102: This device (04b3,4001,0110 S a4 P 01) has an unneeded Protocol entry in unusual_devs.h (kernel syzkaller) [ 86.896899][ T4229] Please send a copy of this message to and [ 86.964163][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 86.973232][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 87.036139][ T4230] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 87.073769][ T4230] usb 1-1: media controller created [ 87.089764][ T4230] dvb-usb: bulk message failed: -22 (6/0) [ 87.140895][ T4230] dw2102: i2c transfer failed. [ 87.177791][ T4230] dvb-usb: bulk message failed: -22 (6/0) [ 87.254254][ T4230] dw2102: i2c transfer failed. [ 87.270152][ T4564] device syzkaller0 entered promiscuous mode [ 87.278094][ T4230] dvb-usb: bulk message failed: -22 (6/0) [ 87.326010][ T4230] dw2102: i2c transfer failed. [ 87.347284][ T4230] dvb-usb: bulk message failed: -22 (6/0) [ 87.372801][ T4230] dw2102: i2c transfer failed. [ 87.390599][ T4230] dvb-usb: bulk message failed: -22 (6/0) [ 87.417139][ T4230] dw2102: i2c transfer failed. [ 87.442376][ T4230] dvb-usb: bulk message failed: -22 (6/0) [ 87.489966][ T4230] dw2102: i2c transfer failed. [ 87.514668][ T4570] netlink: 'syz.1.83': attribute type 1 has an invalid length. [ 87.526785][ T4230] dvb-usb: MAC address: 02:02:02:02:02:02 [ 87.617313][ T4230] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 87.747065][ T4571] netlink: 4 bytes leftover after parsing attributes in process `syz.1.83'. [ 87.769645][ T4230] dvb-usb: bulk message failed: -22 (3/0) [ 87.815042][ T4230] dw2102: command 0x0e transfer failed. [ 87.864342][ T4230] dvb-usb: bulk message failed: -22 (3/0) [ 87.902620][ T4230] dw2102: command 0x0e transfer failed. [ 88.145304][ T4578] tipc: Started in network mode [ 88.204817][ T4578] tipc: Node identity 3a29c4cee19b, cluster identity 4711 [ 88.244535][ T4578] tipc: Enabled bearer , priority 0 [ 88.278983][ T4581] device syzkaller0 entered promiscuous mode [ 88.304513][ T4230] dvb-usb: bulk message failed: -22 (3/0) [ 88.315092][ T4230] dw2102: command 0x0e transfer failed. [ 88.362066][ T4578] tipc: Resetting bearer [ 88.391762][ T4230] dvb-usb: bulk message failed: -22 (3/0) [ 88.419854][ T4230] dw2102: command 0x0e transfer failed. [ 88.454577][ T4230] dvb-usb: bulk message failed: -22 (1/0) [ 88.479424][ T4230] dw2102: command 0x51 transfer failed. [ 88.504230][ T4230] dvb-usb: bulk message failed: -22 (5/0) [ 88.550767][ T4230] dw2102: i2c probe for address 0x68 failed. [ 88.586110][ T4230] dvb-usb: bulk message failed: -22 (5/0) [ 88.598204][ T4230] dw2102: i2c probe for address 0x69 failed. [ 88.624136][ T4230] dvb-usb: bulk message failed: -22 (5/0) [ 88.648311][ T4230] dw2102: i2c probe for address 0x6a failed. [ 88.664372][ T4230] dw2102: probing for demodulator failed. Is the external power switched on? [ 88.705363][ T4230] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 88.777709][ T4575] tipc: Resetting bearer [ 88.792466][ T4575] tipc: Disabling bearer [ 88.851217][ T4588] tipc: Enabled bearer , priority 0 [ 89.039827][ T1108] usb 3-1: USB disconnect, device number 4 [ 89.045907][ T4230] rc_core: IR keymap rc-tt-1500 not found [ 89.053784][ T4230] Registered IR keymap rc-empty [ 89.107145][ T4230] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 89.191700][ T4230] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input5 [ 89.275587][ T4230] dvb-usb: schedule remote query interval to 250 msecs. [ 89.309953][ T4230] dw2102: su3000_power_ctrl: 0, initialized 1 [ 89.338147][ T4230] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 89.397352][ T4230] usb 1-1: USB disconnect, device number 4 [ 89.699236][ T4230] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 89.795226][ T4608] netlink: 'syz.1.96': attribute type 1 has an invalid length. [ 89.915970][ T4612] netlink: 4 bytes leftover after parsing attributes in process `syz.1.96'. [ 89.966669][ T1326] tipc: Node number set to 1414721672 [ 90.156390][ T4615] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 90.384231][ T1111] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 90.445671][ T4621] tipc: Started in network mode [ 90.503526][ T4621] tipc: Node identity 9a00a08ddda1, cluster identity 4711 [ 90.563794][ T4621] tipc: Enabled bearer , priority 0 [ 90.602463][ T4622] device syzkaller0 entered promiscuous mode [ 90.692813][ T4620] tipc: Resetting bearer [ 90.744681][ T4620] tipc: Disabling bearer [ 90.771550][ T4627] tipc: Started in network mode [ 90.809495][ T4627] tipc: Node identity e64b89fed293, cluster identity 4711 [ 90.834288][ T4627] tipc: Enabled bearer , priority 0 [ 90.858632][ T4628] device syzkaller0 entered promiscuous mode [ 90.865262][ T1111] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.902502][ T1111] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 90.932730][ T1111] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 90.935256][ T4627] tipc: Resetting bearer [ 90.975147][ T1111] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.988679][ T4626] tipc: Resetting bearer [ 91.020383][ T1111] usb 2-1: config 0 descriptor?? [ 91.044231][ T4626] tipc: Disabling bearer [ 91.063338][ T4529] tipc: Resetting bearer [ 91.076073][ T1111] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 91.093459][ T1111] dvb-usb: bulk message failed: -22 (3/0) [ 91.100360][ T4529] tipc: Disabling bearer [ 91.118573][ T4631] tipc: Enabled bearer , priority 0 [ 91.134457][ T4630] device syzkaller0 entered promiscuous mode [ 91.135860][ T1111] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 91.184994][ T4631] tipc: Resetting bearer [ 91.204656][ T1111] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 91.231559][ T1111] usb 2-1: media controller created [ 91.245365][ T1111] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 91.278979][ T1111] dvb-usb: bulk message failed: -22 (6/0) [ 91.284993][ T1111] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 91.319147][ T4629] tipc: Resetting bearer [ 91.352132][ T4629] tipc: Disabling bearer [ 91.375100][ T1111] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input6 [ 91.475013][ T1111] dvb-usb: schedule remote query interval to 150 msecs. [ 91.496697][ T1111] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 91.561792][ T1111] usb 2-1: USB disconnect, device number 3 [ 91.660613][ T1111] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 92.457673][ T4653] netlink: 'syz.0.110': attribute type 1 has an invalid length. [ 92.644025][ T4655] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 92.726284][ T4664] tipc: Enabling of bearer rejected, failed to enable media [ 92.853976][ T4656] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 92.980566][ T4656] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 93.125683][ T4656] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 93.184386][ T4666] device syzkaller0 entered promiscuous mode [ 93.217893][ T4679] tipc: Enabled bearer , priority 0 [ 93.265458][ T4678] device syzkaller0 entered promiscuous mode [ 93.310374][ T4678] tipc: Resetting bearer [ 93.379696][ T4677] tipc: Resetting bearer [ 93.409940][ T4677] tipc: Disabling bearer [ 93.494492][ T4681] tipc: Enabled bearer , priority 0 [ 93.503384][ T4681] device syzkaller0 entered promiscuous mode [ 93.565370][ T4681] tipc: Resetting bearer [ 93.610154][ T4680] tipc: Resetting bearer [ 93.657860][ T4680] tipc: Disabling bearer [ 95.504609][ T4696] binder: transaction release 28 bad handle 1, ret = -22 [ 95.667152][ T4701] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 95.743836][ T4706] netlink: 'syz.2.126': attribute type 1 has an invalid length. [ 95.819389][ T1326] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 95.870880][ T4710] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 95.884199][ T4710] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 95.894836][ T4710] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 95.934475][ T4704] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.943602][ T4704] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.952529][ T4704] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.961310][ T4704] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.980467][ T4704] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 95.989540][ T4704] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 95.998684][ T4704] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 96.007630][ T4704] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 96.064167][ T1326] usb 1-1: Using ep0 maxpacket: 16 [ 96.073956][ T4709] tipc: Enabled bearer , priority 0 [ 96.081666][ T4714] device syzkaller0 entered promiscuous mode [ 96.173499][ T4714] tipc: Resetting bearer [ 96.184427][ T1326] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.200313][ T4717] netlink: 8 bytes leftover after parsing attributes in process `syz.2.128'. [ 96.213120][ T1326] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.229453][ T1326] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 96.238911][ T1326] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.284375][ T1326] usb 1-1: config 0 descriptor?? [ 96.303809][ T4704] syz.4.125 (4704) used greatest stack depth: 21152 bytes left [ 96.338720][ T4714] tipc: Disabling bearer [ 96.411345][ T4719] tipc: Started in network mode [ 96.430664][ T4719] tipc: Node identity f6b423346ffe, cluster identity 4711 [ 96.453693][ T4719] tipc: Enabled bearer , priority 0 [ 96.476135][ T4719] tipc: Resetting bearer [ 96.496182][ T4718] tipc: Disabling bearer [ 96.921518][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 97.237072][ T1326] usbhid 1-1:0.0: can't add hid device: -32 [ 97.258925][ T1326] usbhid: probe of 1-1:0.0 failed with error -32 [ 97.465595][ T4738] binder: transaction release 39 bad handle 1, ret = -22 [ 97.622066][ T4740] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 97.761260][ T4745] netlink: 'syz.2.139': attribute type 1 has an invalid length. [ 97.842822][ T4747] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 98.024179][ T4747] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 98.054994][ T4747] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 98.318642][ T4755] tipc: Enabled bearer , priority 0 [ 98.341592][ T4755] device syzkaller0 entered promiscuous mode [ 98.390944][ T4755] tipc: Resetting bearer [ 98.437360][ T4754] tipc: Resetting bearer [ 98.490931][ T4758] netlink: 8 bytes leftover after parsing attributes in process `syz.3.142'. [ 98.545169][ T4754] tipc: Disabling bearer [ 98.634507][ T4230] usb 1-1: USB disconnect, device number 5 [ 98.744606][ T4765] tipc: Enabled bearer , priority 0 [ 98.781757][ T4765] tipc: Resetting bearer [ 98.803715][ T4762] tipc: Disabling bearer [ 98.894075][ T4767] tipc: Enabled bearer , priority 0 [ 98.928539][ T4769] device syzkaller0 entered promiscuous mode [ 98.982729][ T4761] tipc: Resetting bearer [ 99.069448][ T4761] tipc: Disabling bearer [ 99.089888][ T4776] binder_alloc: 4775: binder_alloc_buf, no vma [ 99.173944][ T4779] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 99.493413][ T4786] netlink: 4 bytes leftover after parsing attributes in process `syz.3.150'. [ 100.065644][ T4785] netlink: 'syz.4.151': attribute type 1 has an invalid length. [ 100.716366][ T4230] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 101.277424][ T4794] kvm [4793]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0xbe706111 [ 101.414384][ T4808] tipc: Enabled bearer , priority 0 [ 101.454481][ T4808] device syzkaller0 entered promiscuous mode [ 101.482640][ T4808] tipc: Resetting bearer [ 101.501646][ T4807] tipc: Resetting bearer [ 101.524371][ T4230] usb 5-1: Using ep0 maxpacket: 16 [ 101.543140][ T4807] tipc: Disabling bearer [ 101.599324][ T4812] tipc: Enabled bearer , priority 0 [ 101.607604][ T4812] device syzkaller0 entered promiscuous mode [ 101.660757][ T4811] tipc: Resetting bearer [ 101.684360][ T4230] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.701768][ T4230] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.714514][ T4230] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 101.727972][ T4230] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.741928][ T4230] usb 5-1: config 0 descriptor?? [ 101.751744][ T4811] tipc: Disabling bearer [ 101.783294][ T4815] tipc: Enabled bearer , priority 0 [ 101.790882][ T4815] device syzkaller0 entered promiscuous mode [ 101.808587][ T4814] tipc: Resetting bearer [ 101.845889][ T4814] tipc: Disabling bearer [ 101.999310][ T4822] binder_alloc: 4821: binder_alloc_buf, no vma [ 102.344617][ T4230] usbhid 5-1:0.0: can't add hid device: -32 [ 102.358535][ T4230] usbhid: probe of 5-1:0.0 failed with error -32 [ 103.174692][ T4847] tipc: Enabled bearer , priority 0 [ 103.219188][ T4847] device syzkaller0 entered promiscuous mode [ 103.279924][ T4849] tipc: Enabled bearer , priority 0 [ 103.351995][ T4851] device syzkaller0 entered promiscuous mode [ 103.394387][ T4846] tipc: Resetting bearer [ 103.459435][ T4846] tipc: Disabling bearer [ 103.506465][ T4853] device syzkaller0 entered promiscuous mode [ 103.523184][ T4854] tipc: Enabled bearer , priority 0 [ 103.567402][ T4853] tipc: Resetting bearer [ 103.734666][ T4229] usb 5-1: USB disconnect, device number 4 [ 104.551590][ T4230] tipc: Node number set to 3685926094 [ 104.552590][ T4852] tipc: Resetting bearer [ 104.578809][ T4863] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 104.609259][ T4852] tipc: Disabling bearer [ 104.649847][ T4867] binder_alloc: 4865: binder_alloc_buf, no vma [ 105.000916][ T4880] netlink: 'syz.0.181': attribute type 1 has an invalid length. [ 105.830346][ T4883] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 105.926371][ T4883] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 105.944414][ T26] audit: type=1326 audit(1757692966.127:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4891 comm="syz.1.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f064a081ba9 code=0x7ffc0000 [ 106.004239][ T4883] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 106.019274][ T26] audit: type=1326 audit(1757692966.147:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4891 comm="syz.1.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f064a081ba9 code=0x7ffc0000 [ 106.079879][ T26] audit: type=1326 audit(1757692966.147:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4891 comm="syz.1.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f064a081ba9 code=0x7ffc0000 [ 106.140335][ T26] audit: type=1326 audit(1757692966.147:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4891 comm="syz.1.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f064a081ba9 code=0x7ffc0000 [ 106.165983][ T4896] tipc: Enabled bearer , priority 0 [ 106.235175][ T4896] tipc: Disabling bearer [ 106.241048][ T26] audit: type=1326 audit(1757692966.147:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4891 comm="syz.1.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f064a081ba9 code=0x7ffc0000 [ 106.249010][ T4888] kvm [4887]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0xbe706111 [ 106.286986][ T4898] device syzkaller0 entered promiscuous mode [ 106.302627][ T26] audit: type=1326 audit(1757692966.147:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4891 comm="syz.1.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f064a081ba9 code=0x7ffc0000 [ 106.374198][ T26] audit: type=1326 audit(1757692966.147:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4891 comm="syz.1.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f064a081ba9 code=0x7ffc0000 [ 106.389142][ T4888] kvm [4887]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0xbe706111 [ 106.575685][ T26] audit: type=1326 audit(1757692966.147:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4891 comm="syz.1.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f064a081ba9 code=0x7ffc0000 [ 106.628782][ T4888] kvm [4887]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0xbe706111 [ 107.278566][ T4230] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 107.394034][ T4911] tipc: Enabled bearer , priority 0 [ 107.401720][ T4911] device syzkaller0 entered promiscuous mode [ 107.406848][ T4915] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 107.592430][ T4911] tipc: Resetting bearer [ 107.796533][ T4230] usb 1-1: Using ep0 maxpacket: 16 [ 107.848841][ T4910] tipc: Resetting bearer [ 107.929060][ T4910] tipc: Disabling bearer [ 107.935163][ T4230] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.965873][ T4230] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.011049][ T4230] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 108.051584][ T4230] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.092380][ T4230] usb 1-1: config 0 descriptor?? [ 108.439032][ T4927] netlink: 'syz.4.197': attribute type 1 has an invalid length. [ 108.696082][ T4931] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 108.718000][ T4932] mmap: syz.1.196 (4932) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 108.782614][ T4931] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 108.851419][ T4931] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 108.889428][ T4230] usbhid 1-1:0.0: can't add hid device: -32 [ 108.895602][ T4230] usbhid: probe of 1-1:0.0 failed with error -32 [ 108.910574][ T4833] tipc: Resetting bearer [ 108.960135][ T4833] tipc: Disabling bearer [ 108.989403][ T4935] tipc: Enabled bearer , priority 0 [ 109.003786][ T4935] device syzkaller0 entered promiscuous mode [ 109.069067][ T4935] tipc: Resetting bearer [ 109.101273][ T4934] tipc: Resetting bearer [ 109.143945][ T4934] tipc: Disabling bearer [ 109.364237][ T7] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 109.779573][ T7] usb 5-1: Using ep0 maxpacket: 8 [ 109.894581][ T4946] netlink: 88 bytes leftover after parsing attributes in process `syz.3.202'. [ 109.905477][ T4946] netlink: 40 bytes leftover after parsing attributes in process `syz.3.202'. [ 110.580183][ T1108] usb 1-1: USB disconnect, device number 6 [ 110.634403][ T4244] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 110.672004][ T4949] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 110.875091][ T7] usb 5-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 110.893103][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.901533][ T7] usb 5-1: Product: syz [ 110.906564][ T7] usb 5-1: Manufacturer: syz [ 110.912247][ T7] usb 5-1: SerialNumber: syz [ 110.937069][ T7] usb 5-1: config 0 descriptor?? [ 111.014262][ T4244] usb 2-1: Using ep0 maxpacket: 16 [ 111.022553][ T7] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 111.105367][ T4957] tipc: Enabled bearer , priority 0 [ 111.151879][ T4957] device syzkaller0 entered promiscuous mode [ 111.174468][ T4244] usb 2-1: config 0 has an invalid interface number: 102 but max is 0 [ 111.183820][ T4244] usb 2-1: config 0 has no interface number 0 [ 111.194879][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88801eba7400: rx timeout, send abort [ 111.230043][ T4957] tipc: Resetting bearer [ 111.289390][ T4956] tipc: Resetting bearer [ 111.342035][ T4956] tipc: Disabling bearer [ 111.436669][ T4244] usb 2-1: New USB device found, idVendor=04b3, idProduct=4001, bcdDevice= 1.10 [ 111.470906][ T4244] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.506645][ T4244] usb 2-1: Product: syz [ 111.512269][ T4244] usb 2-1: Manufacturer: syz [ 111.521978][ T4244] usb 2-1: SerialNumber: syz [ 111.542130][ T4244] usb 2-1: config 0 descriptor?? [ 111.600482][ T4244] usb-storage 2-1:0.102: USB Mass Storage device detected [ 111.610018][ T4962] netlink: 'syz.3.209': attribute type 1 has an invalid length. [ 111.648706][ T4962] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 111.662112][ T4244] usb-storage 2-1:0.102: Quirks match for vid 04b3 pid 4001: 2000 [ 111.671040][ T4244] usb-storage 2-1:0.102: This device (04b3,4001,0110 S a4 P 01) has an unneeded Protocol entry in unusual_devs.h (kernel syzkaller) [ 111.671040][ T4244] Please send a copy of this message to and [ 111.696848][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88801eba5400: rx timeout, send abort [ 111.705322][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88801eba7400: abort rx timeout. Force session deactivation [ 111.718904][ T4962] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 111.730327][ T4962] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 112.013611][ T4938] udc-core: couldn't find an available UDC or it's busy [ 112.022279][ T4938] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 112.106251][ T4972] autofs4:pid:4972:autofs_fill_super: called with bogus options [ 112.747937][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88801eba5400: abort rx timeout. Force session deactivation [ 113.031270][ T4983] tipc: Enabled bearer , priority 0 [ 113.044373][ T7] gspca_sonixj: reg_w1 err -71 [ 113.049406][ T7] sonixj: probe of 5-1:0.0 failed with error -71 [ 113.053674][ T4983] device syzkaller0 entered promiscuous mode [ 113.073907][ T7] usb 5-1: USB disconnect, device number 5 [ 113.102988][ T4983] tipc: Resetting bearer [ 113.130630][ T4981] tipc: Resetting bearer [ 113.192393][ T4981] tipc: Disabling bearer [ 113.194349][ T4229] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 113.389757][ T4993] device syzkaller0 entered promiscuous mode [ 113.454263][ T4229] usb 1-1: Using ep0 maxpacket: 8 [ 113.614351][ T4229] usb 1-1: unable to get BOS descriptor or descriptor too short [ 113.657553][ T5000] tipc: Enabled bearer , priority 0 [ 113.674992][ T5000] device syzkaller0 entered promiscuous mode [ 113.705751][ T5000] tipc: Resetting bearer [ 113.834384][ T4229] usb 1-1: config 4 has an invalid interface number: 30 but max is 0 [ 113.887438][ T4229] usb 1-1: config 4 has no interface number 0 [ 113.893660][ T4229] usb 1-1: config 4 interface 30 has no altsetting 0 [ 114.351510][ T4999] tipc: Resetting bearer [ 114.406014][ T4999] tipc: Disabling bearer [ 114.459102][ T5003] tipc: Enabled bearer , priority 0 [ 114.488870][ T5008] netlink: 'syz.4.222': attribute type 1 has an invalid length. [ 114.514954][ T4229] usb 1-1: string descriptor 0 read error: -22 [ 114.521222][ T4229] usb 1-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 114.533779][ T5010] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 114.567268][ T4229] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.575573][ T5010] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 114.588730][ T5010] bond3: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 114.636029][ T5012] tipc: Disabling bearer [ 114.671797][ T4229] dw2102: su3000_identify_state [ 114.704393][ T4229] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 114.747081][ T4229] dw2102: su3000_power_ctrl: 1, initialized 0 [ 114.765119][ T4252] usb 2-1: USB disconnect, device number 4 [ 114.777414][ T4229] dvb-usb: bulk message failed: -22 (2/0) [ 114.805057][ T4229] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 114.882830][ T4975] dvb-usb: bulk message failed: -22 (4/0) [ 114.908762][ T4975] dw2102: i2c transfer failed. [ 114.914745][ T4229] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 114.922284][ T4975] dvb-usb: bulk message failed: -22 (3/0) [ 114.922322][ T4975] dw2102: i2c transfer failed. [ 114.988135][ T4229] usb 1-1: media controller created [ 115.034279][ T4229] dvb-usb: bulk message failed: -22 (6/0) [ 115.243928][ T4229] dw2102: i2c transfer failed. [ 115.266317][ T4229] dvb-usb: bulk message failed: -22 (6/0) [ 115.288226][ T5030] binder: BINDER_SET_CONTEXT_MGR already set [ 115.681836][ T4229] dw2102: i2c transfer failed. [ 116.054250][ T5030] binder: 5026:5030 ioctl 4018620d 2000000002c0 returned -16 [ 116.085265][ T4229] dvb-usb: bulk message failed: -22 (6/0) [ 116.104154][ T4229] dw2102: i2c transfer failed. [ 116.109068][ T4229] dvb-usb: bulk message failed: -22 (6/0) [ 116.115054][ T4229] dw2102: i2c transfer failed. [ 116.120065][ T4229] dvb-usb: bulk message failed: -22 (6/0) [ 116.125876][ T4229] dw2102: i2c transfer failed. [ 116.130857][ T4229] dvb-usb: bulk message failed: -22 (6/0) [ 116.136642][ T4229] dw2102: i2c transfer failed. [ 116.160518][ T4229] dvb-usb: MAC address: 02:02:02:02:02:02 [ 116.221692][ T4229] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 116.238416][ T4229] dvb-usb: bulk message failed: -22 (3/0) [ 116.251155][ T4229] dw2102: command 0x0e transfer failed. [ 116.257803][ T4229] dvb-usb: bulk message failed: -22 (3/0) [ 116.263910][ T4229] dw2102: command 0x0e transfer failed. [ 116.870807][ T23] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 116.870942][ T4229] dvb-usb: bulk message failed: -22 (3/0) [ 117.431485][ T5048] device syzkaller0 entered promiscuous mode [ 117.469877][ T4229] dw2102: command 0x0e transfer failed. [ 117.475582][ T4229] dvb-usb: bulk message failed: -22 (3/0) [ 117.485682][ T4229] dw2102: command 0x0e transfer failed. [ 117.491408][ T4229] dvb-usb: bulk message failed: -22 (1/0) [ 117.497233][ T4229] dw2102: command 0x51 transfer failed. [ 117.502799][ T4229] dvb-usb: bulk message failed: -22 (5/0) [ 117.508779][ T4229] dw2102: i2c probe for address 0x68 failed. [ 117.518670][ T4229] dvb-usb: bulk message failed: -22 (5/0) [ 117.544389][ T4229] dw2102: i2c probe for address 0x69 failed. [ 117.550426][ T4229] dvb-usb: bulk message failed: -22 (5/0) [ 117.556566][ T4229] dw2102: i2c probe for address 0x6a failed. [ 117.562562][ T4229] dw2102: probing for demodulator failed. Is the external power switched on? [ 117.577488][ T4229] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 117.613421][ T5050] netlink: 'syz.2.235': attribute type 1 has an invalid length. [ 117.694230][ T23] usb 5-1: Using ep0 maxpacket: 8 [ 117.760537][ T5052] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 117.798820][ T5052] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 117.809550][ T5052] bond3: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 117.832606][ T5050] netlink: 4 bytes leftover after parsing attributes in process `syz.2.235'. [ 117.851317][ T4229] rc_core: IR keymap rc-tt-1500 not found [ 117.857498][ T4229] Registered IR keymap rc-empty [ 117.863968][ T4229] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 117.889313][ T4229] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input7 [ 117.940293][ T4229] dvb-usb: schedule remote query interval to 250 msecs. [ 118.010912][ T4229] dw2102: su3000_power_ctrl: 0, initialized 1 [ 118.053647][ T4229] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 118.141828][ T4229] usb 1-1: USB disconnect, device number 7 [ 118.184596][ T23] usb 5-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 118.229157][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.421180][ T23] usb 5-1: Product: syz [ 118.436635][ T23] usb 5-1: Manufacturer: syz [ 118.441274][ T23] usb 5-1: SerialNumber: syz [ 118.451287][ T23] usb 5-1: config 0 descriptor?? [ 118.519039][ T23] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 119.172051][ T4229] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 119.263947][ T5074] binder: 5073:5074 ioctl c0306201 0 returned -14 [ 119.393779][ T5076] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 119.435446][ T5036] udc-core: couldn't find an available UDC or it's busy [ 119.458072][ T5036] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 120.020544][ T5081] binder: transaction release 80 bad handle 1, ret = -22 [ 120.027882][ T23] gspca_sonixj: reg_w1 err -71 [ 120.032911][ T23] sonixj: probe of 5-1:0.0 failed with error -71 [ 120.058787][ T23] usb 5-1: USB disconnect, device number 6 [ 121.718267][ T5097] device syzkaller0 entered promiscuous mode [ 122.249725][ T5104] netlink: 'syz.0.248': attribute type 1 has an invalid length. [ 122.527138][ T5105] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 122.604264][ T5105] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 122.634276][ T5105] bond3: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 122.769648][ T5107] netlink: 4 bytes leftover after parsing attributes in process `syz.0.248'. [ 123.301392][ T5118] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 123.407052][ T5122] tipc: Enabled bearer , priority 0 [ 123.420023][ T5120] tipc: Enabled bearer , priority 0 [ 123.434604][ T5122] device syzkaller0 entered promiscuous mode [ 123.464780][ T5122] tipc: Resetting bearer [ 123.494637][ T5120] device syzkaller0 entered promiscuous mode [ 123.503666][ T5121] tipc: Resetting bearer [ 123.533250][ T5121] tipc: Disabling bearer [ 123.574638][ T5120] tipc: Resetting bearer [ 123.641505][ T5119] tipc: Resetting bearer [ 123.725408][ T5119] tipc: Disabling bearer [ 124.004295][ T23] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 124.254216][ T23] usb 5-1: Using ep0 maxpacket: 8 [ 124.479067][ T7] tipc: Node number set to 2571772724 [ 124.764222][ T23] usb 5-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 124.785122][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.804436][ T23] usb 5-1: Product: syz [ 124.808641][ T23] usb 5-1: Manufacturer: syz [ 124.813255][ T23] usb 5-1: SerialNumber: syz [ 124.836790][ T23] usb 5-1: config 0 descriptor?? [ 124.876970][ T23] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 124.975736][ T5139] device syzkaller0 entered promiscuous mode [ 125.858595][ T5127] udc-core: couldn't find an available UDC or it's busy [ 125.895350][ T5127] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 126.131971][ T5147] tipc: Enabled bearer , priority 0 [ 126.139405][ T5147] device syzkaller0 entered promiscuous mode [ 126.170349][ T5147] tipc: Resetting bearer [ 126.179239][ T5146] tipc: Resetting bearer [ 126.212715][ T5146] tipc: Disabling bearer [ 126.300311][ T5151] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 126.402593][ T5157] tipc: Enabled bearer , priority 0 [ 126.409956][ T5157] device syzkaller0 entered promiscuous mode [ 126.432112][ T5157] tipc: Resetting bearer [ 126.439539][ T5156] tipc: Resetting bearer [ 126.455219][ T5156] tipc: Disabling bearer [ 126.534224][ T23] gspca_sonixj: reg_w1 err -71 [ 126.539175][ T23] sonixj: probe of 5-1:0.0 failed with error -71 [ 126.547452][ T23] usb 5-1: USB disconnect, device number 7 [ 126.649476][ T5159] qnx6: unable to read the first superblock [ 127.270834][ T5161] input: syz1 as /devices/virtual/input/input8 [ 127.729605][ T5175] binder: transaction release 87 bad handle 1, ret = -22 [ 127.890685][ T5179] tipc: Enabled bearer , priority 0 [ 127.934752][ T5179] device syzkaller0 entered promiscuous mode [ 127.968331][ T5179] tipc: Resetting bearer [ 127.988315][ T5178] tipc: Resetting bearer [ 128.062313][ T5178] tipc: Disabling bearer [ 128.330844][ T5185] tipc: Enabled bearer , priority 0 [ 128.338702][ T5185] device syzkaller0 entered promiscuous mode [ 128.361878][ T5185] tipc: Resetting bearer [ 128.391136][ T5184] tipc: Resetting bearer [ 128.405933][ T5184] tipc: Disabling bearer [ 129.526558][ T7] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 129.535719][ T5197] tipc: Enabled bearer , priority 0 [ 129.574861][ T5197] device syzkaller0 entered promiscuous mode [ 129.651021][ T5197] tipc: Resetting bearer [ 129.901493][ T7] usb 5-1: Using ep0 maxpacket: 8 [ 130.121432][ T5196] tipc: Resetting bearer [ 130.143009][ T5196] tipc: Disabling bearer [ 130.425015][ T5214] tipc: Enabled bearer , priority 0 [ 130.452663][ T5214] device syzkaller0 entered promiscuous mode [ 130.525753][ T5214] tipc: Resetting bearer [ 130.535762][ T7] usb 5-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 130.545304][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.553379][ T7] usb 5-1: Product: syz [ 130.558050][ T7] usb 5-1: Manufacturer: syz [ 130.562655][ T7] usb 5-1: SerialNumber: syz [ 130.568964][ T7] usb 5-1: config 0 descriptor?? [ 130.570455][ T5217] tipc: Enabled bearer , priority 0 [ 130.599210][ T5212] tipc: Resetting bearer [ 130.612550][ T7] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 130.808782][ T5212] tipc: Disabling bearer [ 131.396226][ T5217] tipc: Disabling bearer [ 131.522101][ T5228] device syzkaller0 entered promiscuous mode [ 131.566898][ T5193] udc-core: couldn't find an available UDC or it's busy [ 131.573923][ T5193] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 132.354229][ T7] gspca_sonixj: reg_w1 err -71 [ 132.359180][ T7] sonixj: probe of 5-1:0.0 failed with error -71 [ 132.405799][ T7] usb 5-1: USB disconnect, device number 8 [ 132.625895][ T5247] tipc: Enabled bearer , priority 0 [ 132.640170][ T5247] device syzkaller0 entered promiscuous mode [ 132.673913][ T5246] tipc: Resetting bearer [ 132.722010][ T5246] tipc: Disabling bearer [ 132.747552][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.753941][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.073504][ T5269] tipc: Enabled bearer , priority 0 [ 134.100268][ T5269] tipc: Resetting bearer [ 134.136867][ T5266] tipc: Disabling bearer [ 134.159304][ T5270] tipc: Enabled bearer , priority 0 [ 134.166529][ T5274] device syzkaller0 entered promiscuous mode [ 134.191083][ T5270] netem: change failed [ 134.213184][ T5270] tipc: Resetting bearer [ 134.233357][ T5276] device syzkaller0 entered promiscuous mode [ 134.253864][ T5268] tipc: Resetting bearer [ 134.278847][ T5268] tipc: Disabling bearer [ 134.468554][ T5281] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 134.799066][ T5289] device syzkaller0 entered promiscuous mode [ 135.334446][ T5294] netlink: 160 bytes leftover after parsing attributes in process `syz.0.315'. [ 135.428220][ T5295] tipc: Enabled bearer , priority 0 [ 135.452744][ T5295] device syzkaller0 entered promiscuous mode [ 135.521937][ T5295] tipc: Resetting bearer [ 135.603984][ T5293] tipc: Resetting bearer [ 135.656543][ T5293] tipc: Disabling bearer [ 135.688640][ T5309] tipc: Enabled bearer , priority 0 [ 135.702352][ T5309] tipc: Resetting bearer [ 135.729370][ T5308] tipc: Disabling bearer [ 136.635532][ T5315] tipc: Enabled bearer , priority 0 [ 136.709412][ T5315] device syzkaller0 entered promiscuous mode [ 136.731160][ T5315] netem: change failed [ 136.754607][ T5315] tipc: Resetting bearer [ 136.779801][ T5314] tipc: Resetting bearer [ 136.811334][ T5314] tipc: Disabling bearer [ 137.002111][ T5325] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 137.114136][ T1108] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 137.464366][ T1108] usb 3-1: Using ep0 maxpacket: 8 [ 137.667003][ T1108] usb 3-1: unable to get BOS descriptor or descriptor too short [ 137.866281][ T1108] usb 3-1: config 4 has an invalid interface number: 30 but max is 0 [ 138.132707][ T1108] usb 3-1: config 4 has no interface number 0 [ 138.144475][ T1108] usb 3-1: config 4 interface 30 has no altsetting 0 [ 138.335286][ T5337] tipc: Enabled bearer , priority 0 [ 138.458525][ T1108] usb 3-1: string descriptor 0 read error: -22 [ 138.474186][ T1108] usb 3-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 138.512737][ T1108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.070857][ T1108] dw2102: su3000_identify_state [ 139.082916][ T5336] tipc: Disabling bearer [ 139.094174][ T1108] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 139.149572][ T1108] dw2102: su3000_power_ctrl: 1, initialized 0 [ 139.174975][ T1108] dvb-usb: bulk message failed: -22 (2/0) [ 139.221198][ T1108] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 139.248025][ T5319] dvb-usb: bulk message failed: -22 (4/0) [ 139.274416][ T5319] dw2102: i2c transfer failed. [ 139.279265][ T5319] dvb-usb: bulk message failed: -22 (3/0) [ 139.285567][ T1108] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 139.293610][ T1108] usb 3-1: media controller created [ 139.311589][ T5350] tipc: Enabling of bearer rejected, failed to enable media [ 139.339535][ T5319] dw2102: i2c transfer failed. [ 139.358322][ T1108] dvb-usb: bulk message failed: -22 (6/0) [ 139.366356][ T1108] dw2102: i2c transfer failed. [ 139.381399][ T1108] dvb-usb: bulk message failed: -22 (6/0) [ 139.401623][ T1108] dw2102: i2c transfer failed. [ 139.411744][ T1108] dvb-usb: bulk message failed: -22 (6/0) [ 139.432045][ T1108] dw2102: i2c transfer failed. [ 139.440407][ T1108] dvb-usb: bulk message failed: -22 (6/0) [ 139.457566][ T1108] dw2102: i2c transfer failed. [ 139.462413][ T1108] dvb-usb: bulk message failed: -22 (6/0) [ 139.488623][ T1108] dw2102: i2c transfer failed. [ 139.493450][ T1108] dvb-usb: bulk message failed: -22 (6/0) [ 139.529226][ T1108] dw2102: i2c transfer failed. [ 139.543038][ T1108] dvb-usb: MAC address: 02:02:02:02:02:02 [ 140.067717][ T1108] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 140.540518][ T1108] dvb-usb: bulk message failed: -22 (3/0) [ 140.616574][ T1108] dw2102: command 0x0e transfer failed. [ 140.634754][ T5358] tipc: Enabled bearer , priority 0 [ 140.705695][ T1108] dvb-usb: bulk message failed: -22 (3/0) [ 140.779267][ T1108] dw2102: command 0x0e transfer failed. [ 141.711176][ T5354] tipc: Resetting bearer [ 141.964447][ T5353] tipc: Disabling bearer [ 142.054242][ T1108] dvb-usb: bulk message failed: -22 (3/0) [ 142.064234][ T1108] dw2102: command 0x0e transfer failed. [ 142.069819][ T1108] dvb-usb: bulk message failed: -22 (3/0) [ 142.122427][ T1108] dw2102: command 0x0e transfer failed. [ 142.182423][ T1108] dvb-usb: bulk message failed: -22 (1/0) [ 142.214989][ T1108] dw2102: command 0x51 transfer failed. [ 142.228479][ T1108] dvb-usb: bulk message failed: -22 (5/0) [ 142.265843][ T1108] dw2102: i2c probe for address 0x68 failed. [ 142.285220][ T1108] dvb-usb: bulk message failed: -22 (5/0) [ 142.291064][ T1108] dw2102: i2c probe for address 0x69 failed. [ 142.317434][ T1108] dvb-usb: bulk message failed: -22 (5/0) [ 142.323270][ T1108] dw2102: i2c probe for address 0x6a failed. [ 142.358104][ T1108] dw2102: probing for demodulator failed. Is the external power switched on? [ 142.424296][ T1108] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 143.764163][ T1108] rc_core: IR keymap rc-tt-1500 not found [ 143.769986][ T1108] Registered IR keymap rc-empty [ 143.804807][ T1108] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 143.837255][ T5389] netlink: 'syz.0.346': attribute type 1 has an invalid length. [ 143.854355][ T1108] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input9 [ 143.907984][ T1108] dvb-usb: schedule remote query interval to 250 msecs. [ 143.924376][ T1108] dw2102: su3000_power_ctrl: 0, initialized 1 [ 143.930496][ T1108] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 143.971111][ T1108] usb 3-1: USB disconnect, device number 5 [ 144.023152][ T5398] tipc: Enabling of bearer rejected, failed to enable media [ 144.075182][ T1108] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 144.097305][ T5390] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 144.134122][ T5390] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 144.199597][ T5390] bond4: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 144.320462][ T5411] usb usb8: usbfs: process 5411 (syz.2.350) did not claim interface 7 before use [ 145.151099][ T5409] batman_adv: batadv0: Adding interface: dummy0 [ 145.160725][ T5409] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.185993][ C0] vkms_vblank_simulate: vblank timer overrun [ 145.204221][ T5409] batman_adv: batadv0: Interface activated: dummy0 [ 145.218944][ T5413] batadv0: mtu less than device minimum [ 145.237352][ T5413] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 145.250345][ T5413] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 145.262812][ T5413] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 145.275323][ T5413] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 145.287672][ T5413] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 145.300034][ T5413] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 145.312366][ T5413] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 145.324894][ T5413] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 145.337353][ T5413] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 145.554334][ T5412] tipc: Enabled bearer , priority 0 [ 145.562489][ T5400] device syzkaller0 entered promiscuous mode [ 145.611771][ T5414] tipc: Disabling bearer [ 145.857743][ T5430] tipc: Enabled bearer , priority 0 [ 145.866026][ T5427] device syzkaller0 entered promiscuous mode [ 145.897104][ T5427] tipc: Resetting bearer [ 146.012587][ T5424] tipc: Resetting bearer [ 146.294014][ T5424] tipc: Disabling bearer [ 146.682912][ T5440] netlink: 8 bytes leftover after parsing attributes in process `syz.1.358'. [ 146.726276][ T5440] team0: No ports can be present during mode change [ 149.712857][ T5466] netlink: 'syz.0.366': attribute type 1 has an invalid length. [ 149.755829][ T5467] tipc: Enabled bearer , priority 0 [ 149.780855][ T5466] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 149.805586][ T5466] bond5: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 149.829393][ T5466] bond5: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 149.876496][ T5472] tipc: Enabled bearer , priority 0 [ 149.888829][ T5467] tipc: Resetting bearer [ 149.899354][ T5470] device syzkaller0 entered promiscuous mode [ 149.919543][ T5464] tipc: Disabling bearer [ 149.935839][ T5469] tipc: Resetting bearer [ 149.970277][ T5469] tipc: Disabling bearer [ 151.514128][ T4252] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 152.322453][ T5491] tipc: Enabled bearer , priority 0 [ 152.489823][ T4252] usb 5-1: Using ep0 maxpacket: 8 [ 152.613906][ T5491] tipc: Disabling bearer [ 152.714267][ T4252] usb 5-1: unable to get BOS descriptor or descriptor too short [ 153.007020][ T4252] usb 5-1: config 4 has an invalid interface number: 30 but max is 0 [ 153.024709][ T4252] usb 5-1: config 4 has no interface number 0 [ 153.031118][ T4252] usb 5-1: config 4 interface 30 has no altsetting 0 [ 153.824291][ T4252] usb 5-1: string descriptor 0 read error: -71 [ 153.830976][ T4252] usb 5-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 153.895518][ T4252] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.913386][ T5518] netlink: 'syz.1.380': attribute type 1 has an invalid length. [ 154.884334][ T4252] usb 5-1: can't set config #4, error -71 [ 154.937081][ T4252] usb 5-1: USB disconnect, device number 9 [ 155.247994][ T5538] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 155.255496][ T5538] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 156.362061][ T5548] tipc: Enabling of bearer rejected, failed to enable media [ 157.174595][ T26] audit: type=1326 audit(1757693017.357:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5564 comm="syz.1.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f064a081ba9 code=0x7ffc0000 [ 157.325728][ T26] audit: type=1326 audit(1757693017.387:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5564 comm="syz.1.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f064a081ba9 code=0x7ffc0000 [ 157.347834][ C0] vkms_vblank_simulate: vblank timer overrun [ 157.423141][ T26] audit: type=1326 audit(1757693017.387:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5564 comm="syz.1.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f064a081ba9 code=0x7ffc0000 [ 157.690813][ T26] audit: type=1326 audit(1757693017.387:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5564 comm="syz.1.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f064a081ba9 code=0x7ffc0000 [ 157.713050][ C0] vkms_vblank_simulate: vblank timer overrun [ 158.084535][ T5572] tipc: Enabled bearer , priority 0 [ 158.157248][ T5572] tipc: Resetting bearer [ 158.213895][ T5570] tipc: Disabling bearer [ 158.570183][ T5588] tipc: Enabling of bearer rejected, failed to enable media [ 158.674217][ T2285] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 159.860000][ T5604] tipc: Enabled bearer , priority 0 [ 159.986518][ T2285] usb 1-1: config 0 interface 0 has no altsetting 0 [ 159.997349][ T2285] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 160.024142][ T2285] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.055707][ T2285] usb 1-1: config 0 descriptor?? [ 160.272947][ T5604] tipc: Resetting bearer [ 160.474344][ T5603] tipc: Disabling bearer [ 161.520044][ T5628] tipc: Enabled bearer , priority 0 [ 161.536432][ T5628] tipc: Resetting bearer [ 161.552159][ T5627] tipc: Disabling bearer [ 161.584289][ T2285] radio-keene 1-1:0.0: V4L2 device registered as radio48 [ 161.789501][ T4252] usb 1-1: USB disconnect, device number 8 [ 162.357649][ T2285] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 162.940942][ T5643] tipc: Enabling of bearer rejected, failed to enable media [ 163.174233][ T2285] usb 4-1: Using ep0 maxpacket: 16 [ 163.511313][ T2285] usb 4-1: config 0 has an invalid interface number: 102 but max is 0 [ 163.787230][ T2285] usb 4-1: config 0 has no interface number 0 [ 163.994287][ T2285] usb 4-1: New USB device found, idVendor=04b3, idProduct=4001, bcdDevice= 1.10 [ 164.017930][ T2285] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.038094][ T2285] usb 4-1: Product: syz [ 164.064861][ T2285] usb 4-1: Manufacturer: syz [ 164.092738][ T2285] usb 4-1: SerialNumber: syz [ 164.174943][ T2285] usb 4-1: config 0 descriptor?? [ 164.257356][ T2285] usb-storage 4-1:0.102: USB Mass Storage device detected [ 164.269150][ T5662] tipc: Enabled bearer , priority 0 [ 164.304186][ T1326] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 164.312534][ T2285] usb-storage 4-1:0.102: Quirks match for vid 04b3 pid 4001: 2000 [ 164.340148][ T2285] usb-storage 4-1:0.102: This device (04b3,4001,0110 S a4 P 01) has an unneeded Protocol entry in unusual_devs.h (kernel syzkaller) [ 164.340148][ T2285] Please send a copy of this message to and [ 164.398475][ T5662] tipc: Resetting bearer [ 164.435231][ T5661] tipc: Disabling bearer [ 164.594131][ T1326] usb 5-1: Using ep0 maxpacket: 8 [ 164.774274][ T1326] usb 5-1: unable to get BOS descriptor or descriptor too short [ 164.874396][ T1326] usb 5-1: config 4 has an invalid interface number: 30 but max is 0 [ 164.903991][ T1326] usb 5-1: config 4 has no interface number 0 [ 164.928302][ T1326] usb 5-1: config 4 interface 30 has no altsetting 0 [ 165.595639][ T5684] tipc: Enabled bearer , priority 0 [ 165.763723][ T5684] tipc: Resetting bearer [ 165.774247][ T1326] usb 5-1: string descriptor 0 read error: -22 [ 165.780531][ T1326] usb 5-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 166.159655][ T5683] tipc: Disabling bearer [ 166.513693][ T1326] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.585678][ T1326] dw2102: su3000_identify_state [ 166.596076][ T1326] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 166.613429][ T1326] dw2102: su3000_power_ctrl: 1, initialized 0 [ 166.644513][ T1326] dvb-usb: bulk message failed: -22 (2/0) [ 166.666046][ T1326] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 166.734412][ T1326] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 166.744240][ T1326] usb 5-1: media controller created [ 166.749485][ T1326] dvb-usb: bulk message failed: -22 (6/0) [ 166.770620][ T5696] tipc: Enabled bearer , priority 0 [ 166.795554][ T1326] dw2102: i2c transfer failed. [ 166.819858][ T5696] device syzkaller0 entered promiscuous mode [ 166.826199][ T1326] dvb-usb: bulk message failed: -22 (6/0) [ 166.864111][ T13] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 166.892044][ T1326] dw2102: i2c transfer failed. [ 166.913694][ T1326] dvb-usb: bulk message failed: -22 (6/0) [ 166.932404][ T1326] dw2102: i2c transfer failed. [ 166.954118][ T1326] dvb-usb: bulk message failed: -22 (6/0) [ 166.981024][ T1326] dw2102: i2c transfer failed. [ 167.004612][ T1326] dvb-usb: bulk message failed: -22 (6/0) [ 167.032154][ T1326] dw2102: i2c transfer failed. [ 167.055903][ T1326] dvb-usb: bulk message failed: -22 (6/0) [ 167.077335][ T1326] dw2102: i2c transfer failed. [ 167.098976][ T1326] dvb-usb: MAC address: 02:02:02:02:02:02 [ 167.114127][ T13] usb 3-1: Using ep0 maxpacket: 16 [ 167.163729][ T1326] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 167.191693][ T1326] dvb-usb: bulk message failed: -22 (3/0) [ 167.205537][ T1326] dw2102: command 0x0e transfer failed. [ 167.218192][ T1326] dvb-usb: bulk message failed: -22 (3/0) [ 167.224590][ T1326] dw2102: command 0x0e transfer failed. [ 167.234540][ T13] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 167.246926][ T5696] tipc: Resetting bearer [ 167.263014][ T13] usb 3-1: config 0 has no interface number 0 [ 167.273710][ T5703] tipc: Enabled bearer , priority 0 [ 167.291041][ T5704] device syzkaller0 entered promiscuous mode [ 167.311680][ T13] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 167.336983][ T13] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 167.360566][ T13] usb 3-1: config 0 interface 41 has no altsetting 0 [ 167.388101][ T5658] tipc: Resetting bearer [ 167.470779][ T5658] tipc: Disabling bearer [ 167.524253][ T13] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 167.539659][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.548230][ T1326] dvb-usb: bulk message failed: -22 (3/0) [ 167.558446][ T1326] dw2102: command 0x0e transfer failed. [ 167.564014][ T1326] dvb-usb: bulk message failed: -22 (3/0) [ 167.570904][ T13] usb 3-1: Product: syz [ 167.575394][ T13] usb 3-1: Manufacturer: syz [ 167.580208][ T1326] dw2102: command 0x0e transfer failed. [ 167.587078][ T13] usb 3-1: SerialNumber: syz [ 167.603241][ T1326] dvb-usb: bulk message failed: -22 (1/0) [ 167.618196][ T13] usb 3-1: config 0 descriptor?? [ 167.625084][ T1326] dw2102: command 0x51 transfer failed. [ 167.630884][ T1326] dvb-usb: bulk message failed: -22 (5/0) [ 167.637287][ T5693] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 167.645310][ T5693] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 167.652307][ T1326] dw2102: i2c probe for address 0x68 failed. [ 167.659195][ T1326] dvb-usb: bulk message failed: -22 (5/0) [ 168.149930][ T1326] dw2102: i2c probe for address 0x69 failed. [ 168.156312][ T5693] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 168.164154][ T5693] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 168.170136][ T1326] dvb-usb: bulk message failed: -22 (5/0) [ 168.200495][ T1326] dw2102: i2c probe for address 0x6a failed. [ 168.214150][ T1326] dw2102: probing for demodulator failed. Is the external power switched on? [ 168.244187][ T1326] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 168.274318][ T5695] tipc: Resetting bearer [ 168.280341][ T7] usb 4-1: USB disconnect, device number 5 [ 168.309230][ T5695] tipc: Disabling bearer [ 168.330386][ T5711] tipc: Enabled bearer , priority 0 [ 168.444172][ T1326] rc_core: IR keymap rc-tt-1500 not found [ 168.449932][ T1326] Registered IR keymap rc-empty [ 168.465758][ T1326] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 168.504461][ T1326] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input10 [ 168.531482][ T5711] tipc: Disabling bearer [ 168.536290][ T1326] dvb-usb: schedule remote query interval to 250 msecs. [ 168.567876][ T1326] dw2102: su3000_power_ctrl: 0, initialized 1 [ 168.585145][ T1326] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 168.622365][ T1326] usb 5-1: USB disconnect, device number 10 [ 168.705999][ T1326] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 168.814391][ T13] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 169.620877][ T5735] device syzkaller0 entered promiscuous mode [ 169.834418][ T5742] tipc: Enabling of bearer rejected, failed to enable media [ 169.979446][ T1111] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 170.254129][ T1111] usb 1-1: Using ep0 maxpacket: 8 [ 170.294254][ T2285] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 170.304289][ T13] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffb9 [ 170.354308][ T13] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 170.388450][ T13] CoreChips: probe of 3-1:0.41 failed with error -71 [ 170.441726][ T13] usb 3-1: USB disconnect, device number 6 [ 170.454243][ T1111] usb 1-1: unable to get BOS descriptor or descriptor too short [ 170.554317][ T1111] usb 1-1: config 4 has an invalid interface number: 30 but max is 0 [ 170.562511][ T2285] usb 2-1: Using ep0 maxpacket: 8 [ 170.588089][ T1111] usb 1-1: config 4 has no interface number 0 [ 170.614145][ T1111] usb 1-1: config 4 interface 30 has no altsetting 0 [ 170.764157][ T1326] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 170.904471][ T2285] usb 2-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 171.035933][ T1111] usb 1-1: string descriptor 0 read error: -22 [ 171.042962][ T1111] usb 1-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 171.052542][ T2285] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.090252][ T1111] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.113721][ T2285] usb 2-1: Product: syz [ 171.119108][ T2285] usb 2-1: Manufacturer: syz [ 171.124128][ T1326] usb 5-1: Using ep0 maxpacket: 16 [ 171.125343][ T2285] usb 2-1: SerialNumber: syz [ 171.573970][ T1111] dw2102: su3000_identify_state [ 171.586291][ T2285] usb 2-1: config 0 descriptor?? [ 171.591489][ T1111] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 171.618462][ T1111] dw2102: su3000_power_ctrl: 1, initialized 0 [ 171.634301][ T1111] dvb-usb: bulk message failed: -22 (2/0) [ 171.634456][ T1326] usb 5-1: config 0 has an invalid interface number: 102 but max is 0 [ 171.643262][ T1111] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 171.661246][ T2285] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 171.666596][ T1326] usb 5-1: config 0 has no interface number 0 [ 171.758203][ T1111] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 171.774222][ T1111] usb 1-1: media controller created [ 171.779479][ T1111] dvb-usb: bulk message failed: -22 (6/0) [ 171.786107][ T1111] dw2102: i2c transfer failed. [ 171.794470][ T1111] dvb-usb: bulk message failed: -22 (6/0) [ 171.800228][ T1111] dw2102: i2c transfer failed. [ 171.805313][ T1111] dvb-usb: bulk message failed: -22 (6/0) [ 171.830206][ T1111] dw2102: i2c transfer failed. [ 171.837624][ T1111] dvb-usb: bulk message failed: -22 (6/0) [ 171.957167][ T1111] dw2102: i2c transfer failed. [ 171.972568][ T1111] dvb-usb: bulk message failed: -22 (6/0) [ 171.984200][ T1111] dw2102: i2c transfer failed. [ 171.989208][ T1111] dvb-usb: bulk message failed: -22 (6/0) [ 171.998833][ T1111] dw2102: i2c transfer failed. [ 171.998957][ T1326] usb 5-1: New USB device found, idVendor=04b3, idProduct=4001, bcdDevice= 1.10 [ 172.003712][ T1111] dvb-usb: MAC address: 02:02:02:02:02:02 [ 172.016905][ T1111] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 172.280371][ T1111] dvb-usb: bulk message failed: -22 (3/0) [ 172.286286][ T1111] dw2102: command 0x0e transfer failed. [ 172.291980][ T1111] dvb-usb: bulk message failed: -22 (3/0) [ 172.302931][ T1111] dw2102: command 0x0e transfer failed. [ 172.450556][ T1326] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.499470][ T1326] usb 5-1: Product: syz [ 172.528386][ T1326] usb 5-1: Manufacturer: syz [ 172.558978][ T1326] usb 5-1: SerialNumber: syz [ 172.616079][ T1326] usb 5-1: config 0 descriptor?? [ 172.624718][ T1111] dvb-usb: bulk message failed: -22 (3/0) [ 172.626925][ T5749] udc-core: couldn't find an available UDC or it's busy [ 172.633690][ T1111] dw2102: command 0x0e transfer failed. [ 172.645634][ T5749] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 172.658024][ T1111] dvb-usb: bulk message failed: -22 (3/0) [ 172.675245][ T1326] usb-storage 5-1:0.102: USB Mass Storage device detected [ 172.703874][ T1111] dw2102: command 0x0e transfer failed. [ 172.729619][ T1111] dvb-usb: bulk message failed: -22 (1/0) [ 172.739219][ T1326] usb-storage 5-1:0.102: Quirks match for vid 04b3 pid 4001: 2000 [ 172.756093][ T1326] usb-storage 5-1:0.102: This device (04b3,4001,0110 S a4 P 01) has an unneeded Protocol entry in unusual_devs.h (kernel syzkaller) [ 172.756093][ T1326] Please send a copy of this message to and [ 172.775552][ T1111] dw2102: command 0x51 transfer failed. [ 172.806888][ T5771] tipc: Enabled bearer , priority 0 [ 172.836403][ T5771] device syzkaller0 entered promiscuous mode [ 172.853938][ T1111] dvb-usb: bulk message failed: -22 (5/0) [ 172.867989][ T5771] tipc: Resetting bearer [ 172.870876][ T1111] dw2102: i2c probe for address 0x68 failed. [ 172.898508][ T5769] tipc: Resetting bearer [ 172.923679][ T5769] tipc: Disabling bearer [ 172.924132][ T1111] dvb-usb: bulk message failed: -22 (5/0) [ 172.954090][ T1111] dw2102: i2c probe for address 0x69 failed. [ 172.977049][ T1111] dvb-usb: bulk message failed: -22 (5/0) [ 172.999267][ T1111] dw2102: i2c probe for address 0x6a failed. [ 173.020327][ T5737] dvb-usb: bulk message failed: -22 (4/0) [ 173.044095][ T1111] dw2102: probing for demodulator failed. Is the external power switched on? [ 173.061152][ T5737] dw2102: i2c transfer failed. [ 173.087487][ T5737] dvb-usb: bulk message failed: -22 (3/0) [ 173.093272][ T5737] dw2102: i2c transfer failed. [ 173.098522][ T1111] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 173.108635][ T5775] tipc: Enabled bearer , priority 0 [ 173.177691][ T2285] gspca_sonixj: reg_w1 err -71 [ 173.182939][ T2285] sonixj: probe of 2-1:0.0 failed with error -71 [ 173.212405][ T2285] usb 2-1: USB disconnect, device number 5 [ 173.253418][ T5775] tipc: Resetting bearer [ 173.285645][ T1111] rc_core: IR keymap rc-tt-1500 not found [ 173.304337][ T1111] Registered IR keymap rc-empty [ 173.333180][ T1111] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 173.355128][ T1111] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input11 [ 173.386392][ T1111] dvb-usb: schedule remote query interval to 250 msecs. [ 173.414161][ T1111] dw2102: su3000_power_ctrl: 0, initialized 1 [ 173.488505][ T1111] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 173.531790][ T1111] usb 1-1: USB disconnect, device number 9 [ 173.579726][ T5774] tipc: Disabling bearer [ 173.642203][ T1111] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 174.647950][ T5788] tipc: Enabling of bearer rejected, failed to enable media [ 174.986879][ T5767] usb 5-1: USB disconnect, device number 11 [ 177.243372][ T5807] sched: RT throttling activated [ 178.232859][ T5819] tipc: Enabling of bearer rejected, failed to enable media [ 178.854538][ T5838] tipc: Enabling of bearer rejected, failed to enable media [ 178.944260][ T23] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 179.029654][ T5845] netlink: 'syz.4.463': attribute type 1 has an invalid length. [ 179.954116][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 179.988598][ T5851] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 180.008097][ T5851] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 180.021002][ T5851] bond4: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 180.234400][ T23] usb 3-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 180.253264][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.317817][ T26] audit: type=1326 audit(1757693040.497:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5869 comm="syz.3.468" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1542199ba9 code=0x0 [ 180.339646][ C1] vkms_vblank_simulate: vblank timer overrun [ 180.545891][ T23] usb 3-1: Product: syz [ 180.550106][ T23] usb 3-1: Manufacturer: syz [ 180.554784][ T23] usb 3-1: SerialNumber: syz [ 180.562314][ T23] usb 3-1: config 0 descriptor?? [ 180.606335][ T23] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 180.904692][ T5767] Bluetooth: hci0: command 0x0406 tx timeout [ 181.491093][ T5835] udc-core: couldn't find an available UDC or it's busy [ 181.524235][ T5835] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 181.606001][ T13] Bluetooth: hci1: command 0x0406 tx timeout [ 181.757109][ T5887] device syzkaller0 entered promiscuous mode [ 182.064286][ T23] gspca_sonixj: reg_w1 err -71 [ 182.069730][ T23] sonixj: probe of 3-1:0.0 failed with error -71 [ 182.126757][ T23] usb 3-1: USB disconnect, device number 7 [ 182.136156][ T5891] tipc: Enabling of bearer rejected, failed to enable media [ 182.434211][ T13] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 182.480488][ T5907] tipc: Enabling of bearer rejected, failed to enable media [ 182.551805][ T5909] netlink: 'syz.1.479': attribute type 1 has an invalid length. [ 182.650994][ T5913] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 182.694918][ T5913] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 182.705516][ T5913] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 182.769630][ T5909] netlink: 4 bytes leftover after parsing attributes in process `syz.1.479'. [ 182.839963][ T13] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 182.858665][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.014914][ T13] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 183.823022][ T13] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 183.831477][ T13] usb 5-1: Manufacturer: syz [ 183.848131][ T13] usb 5-1: config 0 descriptor?? [ 184.122133][ T13] rc_core: IR keymap rc-hauppauge not found [ 184.132746][ T13] Registered IR keymap rc-empty [ 184.139345][ T13] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 184.151742][ T13] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input12 [ 184.192738][ T13] usb 5-1: USB disconnect, device number 12 [ 184.959826][ T5946] device syzkaller0 entered promiscuous mode [ 185.135573][ T5954] tipc: Enabling of bearer rejected, failed to enable media [ 185.305356][ T5963] tipc: Enabling of bearer rejected, failed to enable media [ 185.474243][ T4244] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 185.724304][ T4244] usb 4-1: Using ep0 maxpacket: 16 [ 185.846232][ T4244] usb 4-1: config 0 has an invalid interface number: 102 but max is 0 [ 185.862034][ T4244] usb 4-1: config 0 has no interface number 0 [ 185.971066][ T5976] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 186.034825][ T5766] Bluetooth: hci3: command 0x0406 tx timeout [ 186.041078][ T5766] Bluetooth: hci2: command 0x0406 tx timeout [ 186.073571][ T5766] Bluetooth: hci4: command 0x0406 tx timeout [ 186.084434][ T4244] usb 4-1: New USB device found, idVendor=04b3, idProduct=4001, bcdDevice= 1.10 [ 186.124190][ T4244] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.150561][ T4244] usb 4-1: Product: syz [ 186.180318][ T4244] usb 4-1: Manufacturer: syz [ 186.207235][ T4244] usb 4-1: SerialNumber: syz [ 186.232499][ T4244] usb 4-1: config 0 descriptor?? [ 186.275104][ T4244] usb-storage 4-1:0.102: USB Mass Storage device detected [ 186.395763][ T4244] usb-storage 4-1:0.102: Quirks match for vid 04b3 pid 4001: 2000 [ 186.424797][ T4244] usb-storage 4-1:0.102: This device (04b3,4001,0110 S a4 P 01) has an unneeded Protocol entry in unusual_devs.h (kernel syzkaller) [ 186.424797][ T4244] Please send a copy of this message to and [ 187.532237][ T6009] device syzkaller0 entered promiscuous mode [ 188.223538][ T6018] tipc: Enabling of bearer rejected, failed to enable media [ 191.356439][ T6040] netlink: 40 bytes leftover after parsing attributes in process `syz.0.510'. [ 191.365504][ T6040] netlink: 40 bytes leftover after parsing attributes in process `syz.0.510'. [ 191.409752][ T6040] netlink: 40 bytes leftover after parsing attributes in process `syz.0.510'. [ 191.498340][ T6040] net_ratelimit: 10 callbacks suppressed [ 191.498359][ T6040] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 192.682628][ T6048] netlink: 4 bytes leftover after parsing attributes in process `syz.1.512'. [ 192.704125][ T5766] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 192.974185][ T5766] usb 1-1: Using ep0 maxpacket: 8 [ 193.107156][ T4244] usb 4-1: USB disconnect, device number 6 [ 193.134260][ T5766] usb 1-1: config 0 has an invalid interface number: 86 but max is 0 [ 193.142397][ T5766] usb 1-1: config 0 has no interface number 0 [ 193.155097][ T5767] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 193.177580][ T6060] netlink: 4 bytes leftover after parsing attributes in process `syz.3.516'. [ 193.224213][ T6028] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 193.344272][ T5766] usb 1-1: New USB device found, idVendor=5032, idProduct=0bb9, bcdDevice=ff.80 [ 193.365094][ T5766] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.404185][ T5766] usb 1-1: Product: syz [ 193.414176][ T5767] usb 3-1: Using ep0 maxpacket: 8 [ 193.419461][ T5766] usb 1-1: Manufacturer: syz [ 193.437771][ T5766] usb 1-1: SerialNumber: syz [ 193.453315][ T5766] usb 1-1: config 0 descriptor?? [ 193.486426][ T6028] usb 5-1: Using ep0 maxpacket: 8 [ 193.526286][ T5766] dvb-usb: found a 'Grandtec USB1.1 DVB-T' in warm state. [ 193.544366][ T5766] dvb-usb: bulk message failed: -22 (3/0) [ 193.594231][ T5767] usb 3-1: unable to get BOS descriptor or descriptor too short [ 193.604559][ T5766] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 193.649909][ T5766] dvbdev: DVB: registering new adapter (Grandtec USB1.1 DVB-T) [ 193.678107][ T5766] usb 1-1: media controller created [ 193.695685][ T6069] tipc: Enabling of bearer rejected, failed to enable media [ 193.714422][ T5767] usb 3-1: config 4 has an invalid interface number: 30 but max is 0 [ 193.764228][ T6028] usb 5-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 193.859518][ T5766] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 193.859718][ T6028] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.867967][ T5767] usb 3-1: config 4 has no interface number 0 [ 193.868621][ T5767] usb 3-1: config 4 interface 30 has no altsetting 0 [ 193.889607][ T6028] usb 5-1: Product: syz [ 193.894109][ T6028] usb 5-1: Manufacturer: syz [ 193.898935][ T6028] usb 5-1: SerialNumber: syz [ 194.203742][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.452627][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.625615][ T6028] usb 5-1: config 0 descriptor?? [ 194.678508][ T5766] dvb-usb: bulk message failed: -22 (6/0) [ 194.682678][ T6028] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 194.722282][ T5766] dvb-usb: no frontend was attached by 'Grandtec USB1.1 DVB-T' [ 195.654299][ T5767] usb 3-1: string descriptor 0 read error: -22 [ 195.848360][ T6056] udc-core: couldn't find an available UDC or it's busy [ 195.964126][ T5767] usb 3-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 195.973221][ T5767] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.994601][ T5766] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input13 [ 196.037793][ T6056] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 196.274738][ T5766] dvb-usb: schedule remote query interval to 150 msecs. [ 196.286169][ T5766] dvb-usb: bulk message failed: -22 (3/0) [ 196.294281][ T5767] usb 3-1: can't set config #4, error -71 [ 196.312422][ T5767] usb 3-1: USB disconnect, device number 8 [ 196.318606][ T5766] dvb-usb: Grandtec USB1.1 DVB-T successfully initialized and connected. [ 196.479039][ T5766] usb 1-1: USB disconnect, device number 10 [ 197.112234][ T6028] gspca_sonixj: reg_w1 err -110 [ 197.117206][ T6028] sonixj: probe of 5-1:0.0 failed with error -110 [ 197.210399][ T2285] usb 5-1: USB disconnect, device number 13 [ 197.274591][ T5766] dvb-usb: Grandtec USB1.1 DVB-T successfully deinitialized and disconnected. [ 197.290906][ T6103] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 197.544201][ T4576] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 197.634169][ T5766] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 197.801654][ T5767] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 197.814378][ T4576] usb 3-1: Using ep0 maxpacket: 8 [ 197.990621][ T6116] syz.1.531[6116] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 197.990722][ T6116] syz.1.531[6116] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 199.009715][ T4576] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 199.060859][ T4576] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.087700][ T4576] usb 3-1: Product: syz [ 199.092361][ T4576] usb 3-1: Manufacturer: syz [ 199.107588][ T4576] usb 3-1: SerialNumber: syz [ 199.443959][ T6121] tipc: Enabling of bearer rejected, failed to enable media [ 199.470440][ T4576] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 199.713856][ T4576] usb 3-1: USB disconnect, device number 9 [ 199.741245][ T4576] usblp0: removed [ 200.244123][ T5766] usb 1-1: device not accepting address 11, error -71 [ 200.694199][ T5767] usb 4-1: unable to get BOS descriptor or descriptor too short [ 200.814231][ T5767] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 200.826445][ T5767] usb 4-1: can't read configurations, error -71 [ 201.269087][ T6152] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 201.277944][ T23] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 201.404126][ T5767] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 201.698482][ T6163] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 201.774221][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 201.814248][ T5767] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 201.915107][ T5767] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 201.944236][ T5767] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 201.994339][ T23] usb 2-1: unable to get BOS descriptor or descriptor too short [ 202.030153][ T5767] usb 4-1: config 0 interface 0 has no altsetting 0 [ 202.094326][ T23] usb 2-1: config 4 has an invalid interface number: 30 but max is 0 [ 202.129814][ T23] usb 2-1: config 4 has no interface number 0 [ 202.136582][ T5767] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 202.156636][ T5767] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 202.180497][ T23] usb 2-1: config 4 interface 30 has no altsetting 0 [ 202.227626][ T5767] usb 4-1: config 0 interface 0 has no altsetting 0 [ 202.424146][ T4252] Bluetooth: hci4: command 0x0405 tx timeout [ 202.502161][ T5767] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 202.544473][ T5767] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 202.624113][ T5767] usb 4-1: config 0 interface 0 has no altsetting 0 [ 203.164381][ T5767] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 203.173482][ T5767] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 203.184800][ T23] usb 2-1: string descriptor 0 read error: -71 [ 203.195788][ T6176] tipc: Enabling of bearer rejected, failed to enable media [ 203.203726][ T23] usb 2-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 203.214128][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.246897][ T5767] usb 4-1: config 0 interface 0 has no altsetting 0 [ 203.309981][ T23] usb 2-1: can't set config #4, error -71 [ 204.020248][ T23] usb 2-1: USB disconnect, device number 6 [ 204.124250][ T5767] usb 4-1: unable to read config index 4 descriptor/all [ 204.131343][ T5767] usb 4-1: can't read configurations, error -71 [ 204.168427][ T5767] usb usb4-port1: attempt power cycle [ 205.186863][ T6199] tipc: Enabled bearer , priority 0 [ 205.219228][ T6194] tipc: Resetting bearer [ 205.323415][ T6193] tipc: Disabling bearer [ 205.357189][ T6206] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 206.845531][ T6231] tipc: Enabling of bearer rejected, failed to enable media [ 207.000900][ T6244] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 207.014750][ T6246] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 207.056461][ T6248] tipc: Enabled bearer , priority 0 [ 207.077859][ T6248] tipc: Resetting bearer [ 207.130832][ T6251] [ 207.133217][ T6251] ====================================================== [ 207.140239][ T6251] WARNING: possible circular locking dependency detected [ 207.147253][ T6251] syzkaller #0 Not tainted [ 207.151654][ T6251] ------------------------------------------------------ [ 207.158670][ T6251] syz.0.566/6251 is trying to acquire lock: [ 207.164548][ T6251] ffff888025465120 (sk_lock-AF_AX25){+.+.}-{0:0}, at: ax25_device_event+0x217/0x4f0 [ 207.173942][ T6251] [ 207.173942][ T6251] but task is already holding lock: [ 207.181295][ T6251] ffffffff8d238048 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x54e/0xe50 [ 207.189559][ T6251] [ 207.189559][ T6251] which lock already depends on the new lock. [ 207.189559][ T6251] [ 207.199952][ T6251] [ 207.199952][ T6251] the existing dependency chain (in reverse order) is: [ 207.208969][ T6251] [ 207.208969][ T6251] -> #1 (rtnl_mutex){+.+.}-{3:3}: [ 207.216166][ T6251] __mutex_lock_common+0x1eb/0x2390 [ 207.221882][ T6251] mutex_lock_nested+0x17/0x20 [ 207.227170][ T6251] ax25_setsockopt+0x830/0xa40 [ 207.232445][ T6251] __sys_setsockopt+0x2bf/0x3d0 [ 207.237829][ T6251] __x64_sys_setsockopt+0xb1/0xc0 [ 207.243397][ T6251] do_syscall_64+0x4c/0xa0 [ 207.248350][ T6251] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 207.254761][ T6251] [ 207.254761][ T6251] -> #0 (sk_lock-AF_AX25){+.+.}-{0:0}: [ 207.262394][ T6251] __lock_acquire+0x2c33/0x7c60 [ 207.267765][ T6251] lock_acquire+0x197/0x3f0 [ 207.272783][ T6251] lock_sock_nested+0x44/0x100 [ 207.278061][ T6251] ax25_device_event+0x217/0x4f0 [ 207.283517][ T6251] raw_notifier_call_chain+0xcb/0x160 [ 207.289417][ T6251] __dev_notify_flags+0x178/0x2d0 [ 207.294962][ T6251] dev_change_flags+0xe3/0x1a0 [ 207.300238][ T6251] dev_ifsioc+0x147/0xe70 [ 207.305077][ T6251] dev_ioctl+0x55f/0xe50 [ 207.309849][ T6251] sock_do_ioctl+0x222/0x2f0 [ 207.314957][ T6251] sock_ioctl+0x4ed/0x6e0 [ 207.319797][ T6251] __se_sys_ioctl+0xfa/0x170 [ 207.324906][ T6251] do_syscall_64+0x4c/0xa0 [ 207.329941][ T6251] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 207.336546][ T6251] [ 207.336546][ T6251] other info that might help us debug this: [ 207.336546][ T6251] [ 207.347063][ T6251] Possible unsafe locking scenario: [ 207.347063][ T6251] [ 207.354506][ T6251] CPU0 CPU1 [ 207.359855][ T6251] ---- ---- [ 207.365223][ T6251] lock(rtnl_mutex); [ 207.369201][ T6251] lock(sk_lock-AF_AX25); [ 207.376214][ T6251] lock(rtnl_mutex); [ 207.382705][ T6251] lock(sk_lock-AF_AX25); [ 207.387105][ T6251] [ 207.387105][ T6251] *** DEADLOCK *** [ 207.387105][ T6251] [ 207.395232][ T6251] 1 lock held by syz.0.566/6251: [ 207.400150][ T6251] #0: ffffffff8d238048 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x54e/0xe50 [ 207.408842][ T6251] [ 207.408842][ T6251] stack backtrace: [ 207.414727][ T6251] CPU: 1 PID: 6251 Comm: syz.0.566 Not tainted syzkaller #0 [ 207.421989][ T6251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 207.432057][ T6251] Call Trace: [ 207.435327][ T6251] [ 207.438247][ T6251] dump_stack_lvl+0x168/0x230 [ 207.443004][ T6251] ? load_image+0x3b0/0x3b0 [ 207.447501][ T6251] ? show_regs_print_info+0x20/0x20 [ 207.452704][ T6251] ? print_circular_bug+0x12b/0x1a0 [ 207.457903][ T6251] check_noncircular+0x274/0x310 [ 207.462848][ T6251] ? add_chain_block+0x940/0x940 [ 207.467800][ T6251] ? lockdep_lock+0xdc/0x1e0 [ 207.472385][ T6251] ? lockdep_unlock+0x134/0x2d0 [ 207.477230][ T6251] ? mark_lock+0x94/0x320 [ 207.481551][ T6251] __lock_acquire+0x2c33/0x7c60 [ 207.486410][ T6251] ? lock_chain_count+0x20/0x20 [ 207.491257][ T6251] ? mark_lock+0x94/0x320 [ 207.495583][ T6251] ? verify_lock_unused+0x140/0x140 [ 207.500770][ T6251] ? verify_lock_unused+0x140/0x140 [ 207.505958][ T6251] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 207.511936][ T6251] ? lockdep_hardirqs_on_prepare+0x760/0x760 [ 207.517908][ T6251] ? __local_bh_enable_ip+0x12a/0x1b0 [ 207.523286][ T6251] ? mark_lock+0x94/0x320 [ 207.527607][ T6251] lock_acquire+0x197/0x3f0 [ 207.532121][ T6251] ? ax25_device_event+0x217/0x4f0 [ 207.537221][ T6251] ? lock_chain_count+0x20/0x20 [ 207.542061][ T6251] ? read_lock_is_recursive+0x10/0x10 [ 207.547423][ T6251] ? __local_bh_enable_ip+0x12a/0x1b0 [ 207.552783][ T6251] ? lockdep_hardirqs_on+0x94/0x140 [ 207.557970][ T6251] ? __local_bh_enable_ip+0x12a/0x1b0 [ 207.563327][ T6251] ? _local_bh_enable+0xa0/0xa0 [ 207.568166][ T6251] lock_sock_nested+0x44/0x100 [ 207.572918][ T6251] ? ax25_device_event+0x217/0x4f0 [ 207.578104][ T6251] ax25_device_event+0x217/0x4f0 [ 207.583033][ T6251] raw_notifier_call_chain+0xcb/0x160 [ 207.588399][ T6251] __dev_notify_flags+0x178/0x2d0 [ 207.593413][ T6251] ? __dev_change_flags+0x6a0/0x6a0 [ 207.598599][ T6251] ? __dev_change_flags+0x4bb/0x6a0 [ 207.603786][ T6251] ? dev_get_flags+0x1c0/0x1c0 [ 207.608537][ T6251] ? do_raw_spin_unlock+0x11d/0x230 [ 207.613737][ T6251] dev_change_flags+0xe3/0x1a0 [ 207.618505][ T6251] dev_ifsioc+0x147/0xe70 [ 207.622833][ T6251] ? dev_ioctl+0x54e/0xe50 [ 207.627244][ T6251] ? dev_ioctl+0xe50/0xe50 [ 207.631663][ T6251] ? apparmor_capable+0x12c/0x190 [ 207.636678][ T6251] ? full_name_hash+0x8e/0xe0 [ 207.641346][ T6251] dev_ioctl+0x55f/0xe50 [ 207.645579][ T6251] ? _copy_from_user+0x111/0x170 [ 207.650508][ T6251] sock_do_ioctl+0x222/0x2f0 [ 207.655090][ T6251] ? sock_show_fdinfo+0xb0/0xb0 [ 207.659934][ T6251] sock_ioctl+0x4ed/0x6e0 [ 207.664251][ T6251] ? sock_poll+0x3f0/0x3f0 [ 207.668661][ T6251] ? bpf_lsm_file_ioctl+0x5/0x10 [ 207.673600][ T6251] ? security_file_ioctl+0x7c/0xa0 [ 207.678995][ T6251] ? sock_poll+0x3f0/0x3f0 [ 207.683415][ T6251] __se_sys_ioctl+0xfa/0x170 [ 207.688002][ T6251] do_syscall_64+0x4c/0xa0 [ 207.692425][ T6251] ? clear_bhb_loop+0x30/0x80 [ 207.697100][ T6251] ? clear_bhb_loop+0x30/0x80 [ 207.701769][ T6251] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 207.707664][ T6251] RIP: 0033:0x7f1931700ba9 [ 207.712071][ T6251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.731666][ T6251] RSP: 002b:00007f192f947038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 207.740070][ T6251] RAX: ffffffffffffffda RBX: 00007f1931948090 RCX: 00007f1931700ba9 [ 207.748054][ T6251] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000004 [ 207.756026][ T6251] RBP: 00007f1931783e19 R08: 0000000000000000 R09: 0000000000000000 [ 207.764002][ T6251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 207.772002][ T6251] R13: 00007f1931948128 R14: 00007f1931948090 R15: 00007ffc8df71278 [ 207.779988][ T6251] [ 207.783056][ C1] vkms_vblank_simulate: vblank timer overrun [ 207.871829][ T6251] ================================================================== [ 207.879919][ T6251] BUG: KASAN: use-after-free in ax25_dev_device_down+0x35e/0x520 [ 207.887634][ T6251] Write of size 4 at addr ffff8880243379b8 by task syz.0.566/6251 [ 207.895421][ T6251] [ 207.897742][ T6251] CPU: 0 PID: 6251 Comm: syz.0.566 Not tainted syzkaller #0 [ 207.905029][ T6251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 207.915078][ T6251] Call Trace: [ 207.918350][ T6251] [ 207.921371][ T6251] dump_stack_lvl+0x168/0x230 [ 207.926055][ T6251] ? show_regs_print_info+0x20/0x20 [ 207.931275][ T6251] ? load_image+0x3b0/0x3b0 [ 207.935893][ T6251] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 207.941262][ T6251] print_address_description+0x60/0x2d0 [ 207.946813][ T6251] ? ax25_dev_device_down+0x35e/0x520 [ 207.952188][ T6251] kasan_report+0xdf/0x130 [ 207.956610][ T6251] ? ax25_dev_device_down+0x35e/0x520 [ 207.961985][ T6251] ? kfree+0xef/0x2a0 [ 207.965964][ T6251] kasan_check_range+0x27b/0x290 [ 207.970899][ T6251] ax25_dev_device_down+0x35e/0x520 [ 207.976106][ T6251] ax25_device_event+0x4b4/0x4f0 [ 207.981060][ T6251] raw_notifier_call_chain+0xcb/0x160 [ 207.986429][ T6251] __dev_notify_flags+0x178/0x2d0 [ 207.991449][ T6251] ? __dev_change_flags+0x6a0/0x6a0 [ 207.996640][ T6251] ? __dev_change_flags+0x4bb/0x6a0 [ 208.001848][ T6251] ? dev_get_flags+0x1c0/0x1c0 [ 208.006607][ T6251] ? do_raw_spin_unlock+0x11d/0x230 [ 208.011801][ T6251] dev_change_flags+0xe3/0x1a0 [ 208.016565][ T6251] dev_ifsioc+0x147/0xe70 [ 208.020905][ T6251] ? dev_ioctl+0x54e/0xe50 [ 208.025328][ T6251] ? dev_ioctl+0xe50/0xe50 [ 208.029782][ T6251] ? apparmor_capable+0x12c/0x190 [ 208.034803][ T6251] ? full_name_hash+0x8e/0xe0 [ 208.039473][ T6251] dev_ioctl+0x55f/0xe50 [ 208.043712][ T6251] ? _copy_from_user+0x111/0x170 [ 208.048644][ T6251] sock_do_ioctl+0x222/0x2f0 [ 208.053247][ T6251] ? sock_show_fdinfo+0xb0/0xb0 [ 208.058100][ T6251] sock_ioctl+0x4ed/0x6e0 [ 208.062522][ T6251] ? sock_poll+0x3f0/0x3f0 [ 208.066946][ T6251] ? bpf_lsm_file_ioctl+0x5/0x10 [ 208.071881][ T6251] ? security_file_ioctl+0x7c/0xa0 [ 208.077010][ T6251] ? sock_poll+0x3f0/0x3f0 [ 208.081424][ T6251] __se_sys_ioctl+0xfa/0x170 [ 208.086014][ T6251] do_syscall_64+0x4c/0xa0 [ 208.090424][ T6251] ? clear_bhb_loop+0x30/0x80 [ 208.095094][ T6251] ? clear_bhb_loop+0x30/0x80 [ 208.099765][ T6251] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 208.105659][ T6251] RIP: 0033:0x7f1931700ba9 [ 208.110071][ T6251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.129669][ T6251] RSP: 002b:00007f192f947038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 208.138072][ T6251] RAX: ffffffffffffffda RBX: 00007f1931948090 RCX: 00007f1931700ba9 [ 208.146032][ T6251] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000004 [ 208.153992][ T6251] RBP: 00007f1931783e19 R08: 0000000000000000 R09: 0000000000000000 [ 208.161957][ T6251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 208.169918][ T6251] R13: 00007f1931948128 R14: 00007f1931948090 R15: 00007ffc8df71278 [ 208.177890][ T6251] [ 208.180914][ T6251] [ 208.183239][ T6251] Allocated by task 6244: [ 208.187659][ T6251] __kasan_kmalloc+0xb5/0xf0 [ 208.192242][ T6251] ax25_dev_device_up+0x50/0x580 [ 208.197167][ T6251] ax25_device_event+0x483/0x4f0 [ 208.202090][ T6251] raw_notifier_call_chain+0xcb/0x160 [ 208.207452][ T6251] __dev_notify_flags+0x178/0x2d0 [ 208.212472][ T6251] dev_change_flags+0xe3/0x1a0 [ 208.217226][ T6251] dev_ifsioc+0x147/0xe70 [ 208.221543][ T6251] dev_ioctl+0x55f/0xe50 [ 208.225772][ T6251] sock_do_ioctl+0x222/0x2f0 [ 208.230350][ T6251] sock_ioctl+0x4ed/0x6e0 [ 208.234679][ T6251] __se_sys_ioctl+0xfa/0x170 [ 208.239266][ T6251] do_syscall_64+0x4c/0xa0 [ 208.243671][ T6251] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 208.249559][ T6251] [ 208.251870][ T6251] Freed by task 6251: [ 208.255831][ T6251] kasan_set_track+0x4b/0x70 [ 208.260411][ T6251] kasan_set_free_info+0x1f/0x40 [ 208.265355][ T6251] ____kasan_slab_free+0xd5/0x110 [ 208.270363][ T6251] slab_free_freelist_hook+0xea/0x170 [ 208.275727][ T6251] kfree+0xef/0x2a0 [ 208.279529][ T6251] ax25_dev_device_down+0x1c0/0x520 [ 208.284720][ T6251] ax25_device_event+0x4b4/0x4f0 [ 208.289741][ T6251] raw_notifier_call_chain+0xcb/0x160 [ 208.295114][ T6251] __dev_notify_flags+0x178/0x2d0 [ 208.300127][ T6251] dev_change_flags+0xe3/0x1a0 [ 208.304882][ T6251] dev_ifsioc+0x147/0xe70 [ 208.309203][ T6251] dev_ioctl+0x55f/0xe50 [ 208.313437][ T6251] sock_do_ioctl+0x222/0x2f0 [ 208.318024][ T6251] sock_ioctl+0x4ed/0x6e0 [ 208.322346][ T6251] __se_sys_ioctl+0xfa/0x170 [ 208.326935][ T6251] do_syscall_64+0x4c/0xa0 [ 208.331345][ T6251] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 208.337230][ T6251] [ 208.339559][ T6251] Last potentially related work creation: [ 208.345258][ T6251] kasan_save_stack+0x35/0x60 [ 208.349926][ T6251] kasan_record_aux_stack+0xb8/0x100 [ 208.355203][ T6251] call_rcu+0x182/0x930 [ 208.359346][ T6251] inetdev_event+0x771/0x1360 [ 208.364033][ T6251] raw_notifier_call_chain+0xcb/0x160 [ 208.369407][ T6251] unregister_netdevice_many+0xf57/0x18f0 [ 208.375117][ T6251] rtnl_newlink+0x1610/0x17d0 [ 208.379800][ T6251] rtnetlink_rcv_msg+0x9b9/0xe60 [ 208.384727][ T6251] netlink_rcv_skb+0x1e0/0x430 [ 208.389486][ T6251] netlink_unicast+0x774/0x920 [ 208.394238][ T6251] netlink_sendmsg+0x8ab/0xbc0 [ 208.398993][ T6251] ____sys_sendmsg+0x5a2/0x8c0 [ 208.403749][ T6251] ___sys_sendmsg+0x1f0/0x260 [ 208.408415][ T6251] __se_sys_sendmsg+0x190/0x250 [ 208.413256][ T6251] do_syscall_64+0x4c/0xa0 [ 208.417664][ T6251] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 208.423559][ T6251] [ 208.425875][ T6251] Second to last potentially related work creation: [ 208.432447][ T6251] kasan_save_stack+0x35/0x60 [ 208.437117][ T6251] kasan_record_aux_stack+0xb8/0x100 [ 208.442395][ T6251] insert_work+0x54/0x3d0 [ 208.446718][ T6251] __queue_work+0x9c5/0xd50 [ 208.451216][ T6251] queue_work_on+0x11d/0x1d0 [ 208.455791][ T6251] inet6addr_event+0x9c/0xc0 [ 208.460371][ T6251] atomic_notifier_call_chain+0x15d/0x280 [ 208.466078][ T6251] addrconf_ifdown+0xdf4/0x1970 [ 208.470914][ T6251] addrconf_notify+0x445/0xf00 [ 208.475667][ T6251] raw_notifier_call_chain+0xcb/0x160 [ 208.481030][ T6251] dev_set_mtu_ext+0x432/0x610 [ 208.485782][ T6251] dev_set_mtu+0x41/0xc0 [ 208.490017][ T6251] dev_ifsioc+0x47d/0xe70 [ 208.494338][ T6251] dev_ioctl+0x55f/0xe50 [ 208.498600][ T6251] sock_do_ioctl+0x222/0x2f0 [ 208.503184][ T6251] sock_ioctl+0x4ed/0x6e0 [ 208.507514][ T6251] __se_sys_ioctl+0xfa/0x170 [ 208.512126][ T6251] do_syscall_64+0x4c/0xa0 [ 208.516560][ T6251] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 208.522449][ T6251] [ 208.524778][ T6251] The buggy address belongs to the object at ffff888024337900 [ 208.524778][ T6251] which belongs to the cache kmalloc-192 of size 192 [ 208.538821][ T6251] The buggy address is located 184 bytes inside of [ 208.538821][ T6251] 192-byte region [ffff888024337900, ffff8880243379c0) [ 208.552094][ T6251] The buggy address belongs to the page: [ 208.557749][ T6251] page:ffffea000090cdc0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x24337 [ 208.567902][ T6251] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 208.575444][ T6251] raw: 00fff00000000200 ffffea00009af280 0000000400000003 ffff888016841a00 [ 208.584029][ T6251] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 208.592617][ T6251] page dumped because: kasan: bad access detected [ 208.599035][ T6251] page_owner tracks the page as allocated [ 208.604777][ T6251] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 1, ts 10721955444, free_ts 10651431780 [ 208.620574][ T6251] get_page_from_freelist+0x1b77/0x1c60 [ 208.626125][ T6251] __alloc_pages+0x1e1/0x470 [ 208.630712][ T6251] alloc_page_interleave+0x24/0x1e0 [ 208.635911][ T6251] new_slab+0xc0/0x4b0 [ 208.639982][ T6251] ___slab_alloc+0x81e/0xdf0 [ 208.644580][ T6251] kmem_cache_alloc_trace+0x1a5/0x2a0 [ 208.649950][ T6251] call_usermodehelper_setup+0x8a/0x260 [ 208.655510][ T6251] kobject_uevent_env+0x65e/0x890 [ 208.660528][ T6251] device_add+0x91c/0xfb0 [ 208.664863][ T6251] usb_set_configuration+0x1991/0x1fd0 [ 208.670315][ T6251] usb_generic_driver_probe+0x89/0x150 [ 208.675762][ T6251] usb_probe_device+0x139/0x270 [ 208.680720][ T6251] really_probe+0x284/0xc80 [ 208.685238][ T6251] __driver_probe_device+0x18c/0x330 [ 208.690522][ T6251] driver_probe_device+0x4f/0x420 [ 208.695535][ T6251] __device_attach_driver+0x2b0/0x500 [ 208.700929][ T6251] page last free stack trace: [ 208.705589][ T6251] free_unref_page_prepare+0x637/0x6c0 [ 208.711039][ T6251] free_unref_page+0x94/0x280 [ 208.715709][ T6251] __vunmap+0x8ab/0xa40 [ 208.719853][ T6251] free_work+0x56/0x80 [ 208.723911][ T6251] process_one_work+0x863/0x1000 [ 208.728878][ T6251] worker_thread+0xaa8/0x12a0 [ 208.733546][ T6251] kthread+0x436/0x520 [ 208.737617][ T6251] ret_from_fork+0x1f/0x30 [ 208.742047][ T6251] [ 208.744357][ T6251] Memory state around the buggy address: [ 208.750011][ T6251] ffff888024337880: 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc [ 208.758066][ T6251] ffff888024337900: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 208.766117][ T6251] >ffff888024337980: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 208.774172][ T6251] ^ [ 208.780072][ T6251] ffff888024337a00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 208.788128][ T6251] ffff888024337a80: 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 208.796179][ T6251] ================================================================== [ 208.808152][ T4252] tipc: Node number set to 1201774733 [ 208.866798][ T6251] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 208.874047][ T6251] CPU: 1 PID: 6251 Comm: syz.0.566 Tainted: G B syzkaller #0 [ 208.882732][ T6251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 208.892798][ T6251] Call Trace: [ 208.896084][ T6251] [ 208.899022][ T6251] dump_stack_lvl+0x168/0x230 [ 208.903717][ T6251] ? show_regs_print_info+0x20/0x20 [ 208.908930][ T6251] ? load_image+0x3b0/0x3b0 [ 208.913462][ T6251] panic+0x2c9/0x7f0 [ 208.917366][ T6251] ? bpf_jit_dump+0xd0/0xd0 [ 208.921875][ T6251] ? ax25_dev_device_down+0x35e/0x520 [ 208.927301][ T6251] ? check_panic_on_warn+0x6c/0xa0 [ 208.932420][ T6251] ? ax25_dev_device_down+0x35e/0x520 [ 208.937803][ T6251] check_panic_on_warn+0x80/0xa0 [ 208.942748][ T6251] ? ax25_dev_device_down+0x35e/0x520 [ 208.948133][ T6251] end_report+0x6d/0xf0 [ 208.952306][ T6251] kasan_report+0x102/0x130 [ 208.956817][ T6251] ? ax25_dev_device_down+0x35e/0x520 [ 208.962194][ T6251] ? kfree+0xef/0x2a0 [ 208.966200][ T6251] kasan_check_range+0x27b/0x290 [ 208.971165][ T6251] ax25_dev_device_down+0x35e/0x520 [ 208.976403][ T6251] ax25_device_event+0x4b4/0x4f0 [ 208.981364][ T6251] raw_notifier_call_chain+0xcb/0x160 [ 208.986751][ T6251] __dev_notify_flags+0x178/0x2d0 [ 208.991796][ T6251] ? __dev_change_flags+0x6a0/0x6a0 [ 208.997013][ T6251] ? __dev_change_flags+0x4bb/0x6a0 [ 209.002231][ T6251] ? dev_get_flags+0x1c0/0x1c0 [ 209.007004][ T6251] ? do_raw_spin_unlock+0x11d/0x230 [ 209.012219][ T6251] dev_change_flags+0xe3/0x1a0 [ 209.017003][ T6251] dev_ifsioc+0x147/0xe70 [ 209.021347][ T6251] ? dev_ioctl+0x54e/0xe50 [ 209.025775][ T6251] ? dev_ioctl+0xe50/0xe50 [ 209.030203][ T6251] ? apparmor_capable+0x12c/0x190 [ 209.035243][ T6251] ? full_name_hash+0x8e/0xe0 [ 209.039941][ T6251] dev_ioctl+0x55f/0xe50 [ 209.044195][ T6251] ? _copy_from_user+0x111/0x170 [ 209.049144][ T6251] sock_do_ioctl+0x222/0x2f0 [ 209.053743][ T6251] ? sock_show_fdinfo+0xb0/0xb0 [ 209.058606][ T6251] sock_ioctl+0x4ed/0x6e0 [ 209.062944][ T6251] ? sock_poll+0x3f0/0x3f0 [ 209.067378][ T6251] ? bpf_lsm_file_ioctl+0x5/0x10 [ 209.072327][ T6251] ? security_file_ioctl+0x7c/0xa0 [ 209.077451][ T6251] ? sock_poll+0x3f0/0x3f0 [ 209.081896][ T6251] __se_sys_ioctl+0xfa/0x170 [ 209.086497][ T6251] do_syscall_64+0x4c/0xa0 [ 209.090935][ T6251] ? clear_bhb_loop+0x30/0x80 [ 209.095619][ T6251] ? clear_bhb_loop+0x30/0x80 [ 209.100302][ T6251] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 209.106196][ T6251] RIP: 0033:0x7f1931700ba9 [ 209.110629][ T6251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.130246][ T6251] RSP: 002b:00007f192f947038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 209.138668][ T6251] RAX: ffffffffffffffda RBX: 00007f1931948090 RCX: 00007f1931700ba9 [ 209.146654][ T6251] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000004 [ 209.154633][ T6251] RBP: 00007f1931783e19 R08: 0000000000000000 R09: 0000000000000000 [ 209.162618][ T6251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 209.170592][ T6251] R13: 00007f1931948128 R14: 00007f1931948090 R15: 00007ffc8df71278 [ 209.178569][ T6251] [ 209.181856][ T6251] Kernel Offset: disabled [ 209.186184][ T6251] Rebooting in 86400 seconds..