last executing test programs: 12.749053635s ago: executing program 0 (id=366): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) 12.401424786s ago: executing program 2 (id=370): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x1b, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff0f0000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000500008500000017000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x2, 0x8, &(0x7f00000002c0)="b800", &(0x7f0000000300)=""/8, 0x2b000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 12.28425523s ago: executing program 0 (id=371): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x17, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000030000000000000003000002791928000000000095"], 0x0, 0x6, 0x0, 0x0, 0x41000, 0x48}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 11.871425339s ago: executing program 0 (id=372): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) io_setup(0x222, &(0x7f0000000180)=0x0) eventfd2(0x1, 0x80800) io_submit(r2, 0x0, 0x0) 11.653084009s ago: executing program 2 (id=376): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f00000001c0)={'batadv_slave_0\x00'}) syz_clone(0x410a4400, 0x0, 0xfffffffffffffd56, 0x0, 0x0, 0xffffffffffffffff) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) 11.241131875s ago: executing program 4 (id=377): syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_setup(0x37, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0x2) syz_io_uring_setup(0x893, &(0x7f00000003c0)={0x0, 0xaee1, 0x0, 0x0, 0x1a3}, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002211c0000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x4000000) 11.044477597s ago: executing program 1 (id=378): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xb, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000800000000000000080000006b110b000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 10.721847293s ago: executing program 3 (id=379): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x121a01, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x10000000}) 10.56438726s ago: executing program 4 (id=380): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0x1, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000002e40)={&(0x7f00000001c0)=@kern={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0) 10.537776654s ago: executing program 1 (id=381): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000200)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x28, 0x0, 0x0, 0xfff7f038}, {0x6, 0xff}]}, 0x8) sendmmsg$unix(r2, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="0200f355", 0x4}], 0x1, 0x0, 0x0, 0x4000880}}], 0x1, 0x4002104) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000340)={0x2, &(0x7f0000000300)=[{0x81, 0x5, 0xf8, 0xfffffffa}, {0x6, 0x10, 0x3, 0x8}]}, 0x8) setsockopt$inet6_int(r1, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000540)="69d2eafb", 0x4}, {0x0}], 0x2}, 0x4048040) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4ea3, 0x8002, @empty, 0xf64}, 0x1c) listen(r5, 0x50) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e23, 0x5, @empty, 0x4}, 0x1c) listen(r6, 0x50) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000080)={@local, @ipv4={'\x00', '\xff\xff', @multicast2}, @local, 0x8, 0x800, 0x8c11, 0x500, 0x8, 0x40800000}) close_range(r0, 0xffffffffffffffff, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x441c2, 0x0) ftruncate(r7, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) r8 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) listen(r8, 0x50) 10.43443292s ago: executing program 0 (id=382): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) syz_clone(0xe8344400, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000f53000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000a22000/0x2000)=nil) mremap(&(0x7f0000ca6000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) 10.25847531s ago: executing program 3 (id=383): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x102) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x4100, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3) close(r0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) 10.160986532s ago: executing program 2 (id=384): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000002900)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 10.083266961s ago: executing program 4 (id=385): r0 = syz_clone(0x5020000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000080)={0x0}) 9.968261196s ago: executing program 1 (id=386): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_pts(r0, 0x80001) syz_open_pts(r1, 0x92000) 9.701224905s ago: executing program 2 (id=387): setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000580)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x80000380, 0x0, 0x0, 0x800003b0, 0x800003e0], 0x0, 0x0, 0x0}, 0x119) 9.678819402s ago: executing program 3 (id=388): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000140)=0x400, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendto$packet(r0, &(0x7f0000000100)="09000000e700140000007e7bfbf788a83baa9900d6f18035950088a800008100", 0x20, 0x24040801, &(0x7f0000000300)={0x11, 0x88a8, 0x0, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, 0x14) 9.476061667s ago: executing program 4 (id=389): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/211, 0xd3) 9.462075499s ago: executing program 1 (id=390): syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_setup(0x37, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0x2) syz_io_uring_setup(0x893, &(0x7f00000003c0)={0x0, 0xaee1, 0x0, 0x0, 0x1a3}, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002211c0000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x4000000) 9.284278603s ago: executing program 2 (id=391): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) io_uring_register$IORING_REGISTER_MEM_REGION(0xffffffffffffffff, 0x22, 0x0, 0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) io_uring_enter(r4, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 9.202865057s ago: executing program 3 (id=392): syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000000000040c50f80b00000000000010902"], 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$rds(0x15, 0x5, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x70de, &(0x7f0000000300)={0x0, 0x5bbd, 0x1, 0x1, 0x195}, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sndctrl(&(0x7f00000002c0), 0x0, 0x80002) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 1.717652509s ago: executing program 2 (id=393): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0x7fffffff, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xfb}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000100)="ac", 0x1) recvmmsg$unix(r1, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10003, 0x0) 1.517720349s ago: executing program 4 (id=394): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = io_uring_setup(0xf08, &(0x7f00000003c0)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000c000/0x1000)=nil, &(0x7f000001f000/0x1000)=nil, &(0x7f0000015000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000000c000/0x4000)=nil, &(0x7f000001d000/0x3000)=nil, &(0x7f0000012000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000bf00)=@newtaction={0x114, 0x30, 0x200, 0x70bd29, 0x25dfdbfc, {}, [{0x100, 0x1, [@m_police={0xfc, 0x18, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0xffffffffffffffff, 0x4, 0x3, 0x1, {0x95, 0x1, 0xb, 0x8, 0xf6, 0xfffffffa}, {0x9, 0x0, 0xff, 0x8, 0x1bed, 0x9}, 0x0, 0x80000001, 0x3e}}]]}, {0x91, 0x6, "d087ea06528c49fdd2f8773f075474c04e24bc674ffa7ff4197b8c118cc36a8e001b7d028a120757d4654d50a353ead91a7a8f546058e1e06aeba141f04e8c8f60d4a6dd1d10e16ae223becd5c2583c59cc4e64da4c9326fcb393fb3bb6f5f78d65fac872fcc3379a2a19a96bc60620de4fbf47ad7465e3d683e455b7be48a691989371090b6663fb5bc5955c4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) io_uring_register$IORING_REGISTER_FILES(r2, 0x20, &(0x7f0000000000)=[r2], 0x1) recvmmsg(0xffffffffffffffff, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)}}], 0x1, 0x700, 0x0) 1.351052467s ago: executing program 3 (id=395): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = getpgid(0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f0000000040)='.\x00', 0x2) 1.231725689s ago: executing program 1 (id=396): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000200)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x28, 0x0, 0x0, 0xfff7f038}, {0x6, 0xff}]}, 0x8) sendmmsg$unix(r2, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="0200f355", 0x4}], 0x1, 0x0, 0x0, 0x4000880}}], 0x1, 0x4002104) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000340)={0x2, &(0x7f0000000300)=[{0x81, 0x5, 0xf8, 0xfffffffa}, {0x6, 0x10, 0x3, 0x8}]}, 0x8) setsockopt$inet6_int(r1, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000540)="69d2eafb", 0x4}, {0x0}], 0x2}, 0x4048040) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4ea3, 0x8002, @empty, 0xf64}, 0x1c) listen(r5, 0x50) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e23, 0x5, @empty, 0x4}, 0x1c) listen(r6, 0x50) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000080)={@local, @ipv4={'\x00', '\xff\xff', @multicast2}, @local, 0x8, 0x800, 0x8c11, 0x500, 0x8, 0x40800000}) close_range(r0, 0xffffffffffffffff, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x441c2, 0x0) ftruncate(r7, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) r8 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) listen(r8, 0x50) 806.580931ms ago: executing program 3 (id=397): add_key(0x0, 0x0, &(0x7f0000000100)="3082", 0x2, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpid() fcntl$setownex(r1, 0xf, &(0x7f0000000000)={0x2, r2}) fcntl$getownex(r0, 0x10, &(0x7f0000000780)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r3 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000100)="58000000140019234083feff040d8c560a06580200ff0000000000000020ffff00000000000064009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000b0c10000000224effffffff", 0x58}], 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000400)={0xa, 0x5e20, 0x8, @local, 0x2}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/stat\x00', 0x1800, 0x0) writev(r6, &(0x7f0000000300)=[{&(0x7f0000000140)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008050f6fae9c4bbd2ed00cc62eb139d6469c3000000dd00000010000100070c1000", 0x58}], 0x1) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) unshare(0x44040200) 727.863345ms ago: executing program 1 (id=398): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="61030204030d23c95e5c6e740454ebf59bcace8b9660dd77860ce701"], 0x1c) 669.94064ms ago: executing program 0 (id=399): openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x2, "fa02c80a3a1e9d4b9aaf000000008d674fe69b5b7638dd031dd7504fe5809639", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45b00e4f5b53e0ca34dd02acecdc67c5e3126628168", 0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x6, "34e6498c25f58dad9987ffe93bbabd18cf504a2700", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f00000000c0)={"0e337b42cc00d331ff0007000000000000001a00", r3}) 138.209344ms ago: executing program 0 (id=400): bpf$MAP_CREATE(0x0, &(0x7f00000016c0)=ANY=[@ANYRES32], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) 0s ago: executing program 4 (id=401): setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000580)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x80000380, 0x0, 0x0, 0x800003b0, 0x800003e0], 0x0, 0x0, 0x0}, 0x119) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.234' (ED25519) to the list of known hosts. [ 165.505970][ T5772] cgroup: Unknown subsys name 'net' [ 165.657543][ T5772] cgroup: Unknown subsys name 'cpuset' [ 165.670938][ T5772] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 171.126596][ T5772] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 175.158894][ T5792] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 175.184413][ T5793] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 175.198047][ T5794] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 175.206207][ T5794] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 175.214137][ T5794] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 175.225845][ T5794] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 175.234586][ T5794] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 175.242589][ T5794] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 175.252502][ T5794] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 175.260598][ T5794] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 175.271805][ T5803] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 175.281002][ T5803] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 175.289759][ T5803] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 175.295179][ T5794] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 175.308343][ T5807] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 175.319495][ T5805] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 175.334122][ T5794] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 175.341943][ T5794] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 175.352079][ T5803] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 175.357286][ T5805] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 175.362593][ T5808] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 175.377475][ T5803] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 175.386408][ T5803] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 175.396688][ T5794] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 175.419684][ T5803] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 176.479417][ T5789] chnl_net:caif_netlink_parms(): no params data found [ 176.940828][ T5795] chnl_net:caif_netlink_parms(): no params data found [ 177.210576][ T5802] chnl_net:caif_netlink_parms(): no params data found [ 177.397941][ T5790] chnl_net:caif_netlink_parms(): no params data found [ 177.503753][ T5088] Bluetooth: hci3: command tx timeout [ 177.509365][ T5088] Bluetooth: hci1: command tx timeout [ 177.511812][ T5793] Bluetooth: hci0: command tx timeout [ 177.515146][ T5803] Bluetooth: hci2: command tx timeout [ 177.521476][ T5793] Bluetooth: hci4: command tx timeout [ 177.676620][ T5798] chnl_net:caif_netlink_parms(): no params data found [ 177.696566][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.704836][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.712434][ T5789] bridge_slave_0: entered allmulticast mode [ 177.721781][ T5789] bridge_slave_0: entered promiscuous mode [ 177.758003][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.765582][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.773132][ T5789] bridge_slave_1: entered allmulticast mode [ 177.785646][ T5789] bridge_slave_1: entered promiscuous mode [ 178.029613][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.126131][ T5795] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.136484][ T5795] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.144233][ T5795] bridge_slave_0: entered allmulticast mode [ 178.153220][ T5795] bridge_slave_0: entered promiscuous mode [ 178.181825][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.195544][ T5795] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.203011][ T5795] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.210817][ T5795] bridge_slave_1: entered allmulticast mode [ 178.220087][ T5795] bridge_slave_1: entered promiscuous mode [ 178.369095][ T5802] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.376706][ T5802] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.384525][ T5802] bridge_slave_0: entered allmulticast mode [ 178.393821][ T5802] bridge_slave_0: entered promiscuous mode [ 178.473259][ T5789] team0: Port device team_slave_0 added [ 178.507222][ T5802] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.514838][ T5802] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.522397][ T5802] bridge_slave_1: entered allmulticast mode [ 178.531536][ T5802] bridge_slave_1: entered promiscuous mode [ 178.551368][ T5795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.600168][ T5789] team0: Port device team_slave_1 added [ 178.658238][ T5795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.818164][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.825389][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 178.851705][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.922600][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.930699][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.938352][ T5790] bridge_slave_0: entered allmulticast mode [ 178.946555][ T5790] bridge_slave_0: entered promiscuous mode [ 178.991942][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.000332][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 179.027871][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.080116][ T5802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.090116][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.097672][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.105492][ T5790] bridge_slave_1: entered allmulticast mode [ 179.113744][ T5790] bridge_slave_1: entered promiscuous mode [ 179.131138][ T5795] team0: Port device team_slave_0 added [ 179.180971][ T5798] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.188591][ T5798] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.196346][ T5798] bridge_slave_0: entered allmulticast mode [ 179.205007][ T5798] bridge_slave_0: entered promiscuous mode [ 179.221055][ T5795] team0: Port device team_slave_1 added [ 179.235578][ T5802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.302737][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.310409][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.318240][ T5798] bridge_slave_1: entered allmulticast mode [ 179.326672][ T5798] bridge_slave_1: entered promiscuous mode [ 179.430076][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.502559][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.509873][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 179.536252][ T5795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.583143][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.593226][ T5793] Bluetooth: hci2: command tx timeout [ 179.600181][ T5801] Bluetooth: hci1: command tx timeout [ 179.605859][ T5801] Bluetooth: hci0: command tx timeout [ 179.611398][ T5801] Bluetooth: hci3: command tx timeout [ 179.617119][ T5793] Bluetooth: hci4: command tx timeout [ 179.644578][ T5802] team0: Port device team_slave_0 added [ 179.652148][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.659930][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 179.686189][ T5795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.705475][ T5802] team0: Port device team_slave_1 added [ 179.724705][ T5789] hsr_slave_0: entered promiscuous mode [ 179.734332][ T5789] hsr_slave_1: entered promiscuous mode [ 179.810089][ T5798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.901581][ T5798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.920007][ T5790] team0: Port device team_slave_0 added [ 179.965458][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.972581][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 179.999622][ T5802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 180.017658][ T5790] team0: Port device team_slave_1 added [ 180.062699][ T5798] team0: Port device team_slave_0 added [ 180.105108][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 180.112155][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 180.138796][ T5802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.218032][ T5798] team0: Port device team_slave_1 added [ 180.423337][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 180.430586][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 180.458138][ T5798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 180.475434][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 180.482534][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 180.509936][ T5798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.537369][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 180.544681][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 180.571100][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 180.596390][ T5795] hsr_slave_0: entered promiscuous mode [ 180.606391][ T5795] hsr_slave_1: entered promiscuous mode [ 180.614807][ T5795] debugfs: 'hsr0' already exists in 'hsr' [ 180.620701][ T5795] Cannot create hsr debugfs directory [ 180.629129][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 180.636491][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 180.662830][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.851536][ T5802] hsr_slave_0: entered promiscuous mode [ 180.860496][ T5802] hsr_slave_1: entered promiscuous mode [ 180.868594][ T5802] debugfs: 'hsr0' already exists in 'hsr' [ 180.874507][ T5802] Cannot create hsr debugfs directory [ 181.095673][ T5798] hsr_slave_0: entered promiscuous mode [ 181.105401][ T5798] hsr_slave_1: entered promiscuous mode [ 181.113969][ T5798] debugfs: 'hsr0' already exists in 'hsr' [ 181.119833][ T5798] Cannot create hsr debugfs directory [ 181.138189][ T5790] hsr_slave_0: entered promiscuous mode [ 181.147011][ T5790] hsr_slave_1: entered promiscuous mode [ 181.154991][ T5790] debugfs: 'hsr0' already exists in 'hsr' [ 181.160812][ T5790] Cannot create hsr debugfs directory [ 181.663735][ T5793] Bluetooth: hci3: command tx timeout [ 181.669316][ T5793] Bluetooth: hci4: command tx timeout [ 181.671972][ T5803] Bluetooth: hci2: command tx timeout [ 181.675121][ T5801] Bluetooth: hci0: command tx timeout [ 181.680510][ T5803] Bluetooth: hci1: command tx timeout [ 182.259890][ T5789] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 182.304685][ T5789] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 182.334938][ T5789] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 182.387563][ T5789] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 182.441926][ T5790] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 182.511582][ T5790] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 182.570170][ T5790] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 182.590092][ T5790] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 182.720248][ T5795] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 182.769007][ T5795] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 182.798196][ T5798] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 182.842375][ T5798] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 182.865804][ T5795] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 182.905995][ T5798] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 182.946144][ T5798] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 182.967694][ T5795] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 183.186052][ T5802] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 183.297132][ T5802] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 183.395917][ T5802] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 183.440055][ T5802] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 183.746271][ T5803] Bluetooth: hci1: command tx timeout [ 183.751964][ T5088] Bluetooth: hci4: command tx timeout [ 183.754761][ T5793] Bluetooth: hci0: command tx timeout [ 183.758577][ T5803] Bluetooth: hci2: command tx timeout [ 183.764356][ T5801] Bluetooth: hci3: command tx timeout [ 183.885139][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.927154][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.143907][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.169213][ T5798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.192089][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.264965][ T5078] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.272558][ T5078] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.329183][ T5795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.377858][ T5078] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.385542][ T5078] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.399652][ T5078] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.407203][ T5078] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.421574][ T5078] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.429137][ T5078] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.464089][ T5798] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.598388][ T5078] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.605943][ T5078] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.625547][ T5795] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.707280][ T5078] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.714870][ T5078] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.886809][ T5790] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 184.898076][ T5790] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 184.975637][ T5078] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.983090][ T5078] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.012493][ T5078] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.020042][ T5078] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.116164][ T5789] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 185.160965][ T5798] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 185.260972][ T5802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.541006][ T5802] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.640839][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.648446][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.740833][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.748412][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.707346][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.894992][ T5798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.116443][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.159341][ T5790] veth0_vlan: entered promiscuous mode [ 187.291920][ T5790] veth1_vlan: entered promiscuous mode [ 187.336640][ T5795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.412143][ T5798] veth0_vlan: entered promiscuous mode [ 187.529464][ T5798] veth1_vlan: entered promiscuous mode [ 187.614226][ T5789] veth0_vlan: entered promiscuous mode [ 187.699826][ T5790] veth0_macvtap: entered promiscuous mode [ 187.757138][ T5802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.772407][ T5789] veth1_vlan: entered promiscuous mode [ 187.819292][ T5790] veth1_macvtap: entered promiscuous mode [ 187.938255][ T5798] veth0_macvtap: entered promiscuous mode [ 187.997618][ T5798] veth1_macvtap: entered promiscuous mode [ 188.009397][ T5795] veth0_vlan: entered promiscuous mode [ 188.118187][ T5795] veth1_vlan: entered promiscuous mode [ 188.138580][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.190386][ T5789] veth0_macvtap: entered promiscuous mode [ 188.249723][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.264811][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.331061][ T161] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.360853][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.407160][ T5789] veth1_macvtap: entered promiscuous mode [ 188.434257][ T161] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.487457][ T4491] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.534500][ T5795] veth0_macvtap: entered promiscuous mode [ 188.549762][ T4491] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.594665][ T4491] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.630173][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.656487][ T5795] veth1_macvtap: entered promiscuous mode [ 188.674182][ T4491] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.683205][ T4491] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.705590][ T4491] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.746722][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.825970][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.894052][ T4269] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.905194][ T35] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.946952][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.964467][ T35] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.008833][ T35] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.083508][ T35] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.092492][ T35] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.193191][ T35] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.202993][ T35] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.221179][ T5802] veth0_vlan: entered promiscuous mode [ 190.342766][ T5802] veth1_vlan: entered promiscuous mode [ 190.630794][ T5802] veth0_macvtap: entered promiscuous mode [ 190.697162][ T5802] veth1_macvtap: entered promiscuous mode [ 190.897675][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.958619][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.067679][ T4269] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.123788][ T4269] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.174051][ T4269] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.203643][ T4269] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.062797][ T4119] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.071206][ T4119] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.214062][ T5078] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.222073][ T5078] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.332852][ T5078] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.341102][ T5078] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.556011][ T5798] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 194.602946][ T159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.611117][ T159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.661384][ T4269] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.669619][ T4269] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.691814][ T4119] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.699909][ T4119] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.892129][ T4303] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.900869][ T4303] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.975584][ T5078] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.983929][ T5078] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.759250][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 196.068760][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 196.076362][ T5983] bond1: option arp_interval: invalid value (18446744073709551615) [ 196.085126][ T5983] bond1: option arp_interval: allowed values 0 - 2147483647 [ 196.099552][ T5983] bond1 (unregistering): Released all slaves [ 196.665000][ T4157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.673142][ T4157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.018615][ T161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.028394][ T161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.565976][ T6003] netlink: 'syz.1.7': attribute type 10 has an invalid length. [ 197.613512][ T6003] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 197.901225][ T6003] 8021q: adding VLAN 0 to HW filter on device bond1 [ 197.985587][ T6003] bond_slave_0: entered promiscuous mode [ 197.991442][ T6003] bond_slave_1: entered promiscuous mode [ 197.997360][ T6003] syz_tun: entered promiscuous mode [ 198.004232][ T6003] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 198.018050][ T6003] bond1: (slave macvlan2): unknown ethtool speed (30000) for port 1 (set it to 0) [ 198.027534][ T6003] bond1: (slave macvlan2): speed changed to 0 on port 1 [ 198.038673][ T6003] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 198.607792][ T6011] netlink: 'syz.4.8': attribute type 10 has an invalid length. [ 198.697758][ T6011] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 199.135716][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 200.075924][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 200.127822][ T6017] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 200.265454][ T0] NOHZ tick-stop error: local softirq work is pending, handler #2c0!!! [ 200.353878][ T5845] IPVS: starting estimator thread 0... [ 200.510720][ T6022] input: syz1 as /devices/virtual/input/input5 [ 200.533989][ T6021] IPVS: using max 336 ests per chain, 16800 per kthread [ 201.264524][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 201.530531][ T6025] fuse: Bad value for 'group_id' [ 201.535725][ T6025] fuse: Bad value for 'group_id' [ 202.421279][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 202.725237][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 204.154871][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 204.758626][ T6033] snd_dummy snd_dummy.0: control 4:2:0:syz0:211 is already present [ 205.182098][ T798] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 205.396556][ T798] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 205.407185][ T798] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 205.418762][ T798] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 205.428702][ T798] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 205.596311][ T798] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 205.605975][ T798] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 205.614544][ T798] usb 4-1: Manufacturer: syz [ 205.635432][ T798] usb 4-1: config 0 descriptor?? [ 205.993708][ T30] audit: type=1326 audit(1766166669.983:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6039 comm="syz.4.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c0338f749 code=0x7ffc0000 [ 206.257237][ T30] audit: type=1326 audit(1766166670.063:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6039 comm="syz.4.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f1c0338f749 code=0x7ffc0000 [ 206.281134][ T30] audit: type=1326 audit(1766166670.063:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6039 comm="syz.4.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c0338f749 code=0x7ffc0000 [ 206.309558][ T30] audit: type=1326 audit(1766166670.073:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6039 comm="syz.4.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1c0338df90 code=0x7ffc0000 [ 206.333304][ T30] audit: type=1326 audit(1766166670.073:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6039 comm="syz.4.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c0338f749 code=0x7ffc0000 [ 206.355911][ T30] audit: type=1326 audit(1766166670.083:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6039 comm="syz.4.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1c0338f749 code=0x7ffc0000 [ 206.378203][ T30] audit: type=1326 audit(1766166670.083:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6039 comm="syz.4.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c0338f749 code=0x7ffc0000 [ 206.403204][ T30] audit: type=1326 audit(1766166670.093:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6039 comm="syz.4.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f1c0338f749 code=0x7ffc0000 [ 206.412368][ T6045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.430784][ T30] audit: type=1326 audit(1766166670.093:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6039 comm="syz.4.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c0338f749 code=0x7ffc0000 [ 206.435573][ T6045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.466102][ T30] audit: type=1326 audit(1766166670.093:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6039 comm="syz.4.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1c0338f749 code=0x7ffc0000 [ 206.653922][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 208.542898][ T6056] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 208.869959][ T6059] fuse: Bad value for 'group_id' [ 208.875479][ T6059] fuse: Bad value for 'group_id' [ 208.982863][ T798] rc_core: IR keymap rc-hauppauge not found [ 208.989216][ T798] Registered IR keymap rc-empty [ 208.994867][ T798] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 209.035608][ T798] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 209.079439][ T798] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 209.094232][ T798] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input6 [ 209.204843][ T798] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 209.233814][ T798] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 209.262161][ T798] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 209.311734][ T798] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 209.342176][ T798] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 209.402014][ T798] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 209.425767][ T798] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 209.464078][ T798] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 209.544596][ T798] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 209.623765][ T798] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 209.658409][ T798] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 209.666998][ T798] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 209.764946][ T798] usb 4-1: USB disconnect, device number 2 [ 210.267012][ T6067] netlink: 4 bytes leftover after parsing attributes in process `syz.2.24'. [ 210.285366][ T6076] mmap: syz.1.25 (6076) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 210.435992][ T6079] trusted_key: encrypted_key: insufficient parameters specified [ 210.642899][ T6067] hub 9-0:1.0: USB hub found [ 210.652505][ T6067] hub 9-0:1.0: 1 port detected [ 215.123960][ T798] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 215.364099][ T798] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 215.374698][ T798] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 215.386287][ T798] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 215.396276][ T798] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 215.546471][ T798] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 215.556282][ T798] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 215.564824][ T798] usb 4-1: Manufacturer: syz [ 215.642156][ T798] usb 4-1: config 0 descriptor?? [ 216.324412][ T6105] Zero length message leads to an empty skb [ 216.347051][ T6106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.356893][ T6106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.624817][ T798] rc_core: IR keymap rc-hauppauge not found [ 219.630906][ T798] Registered IR keymap rc-empty [ 219.636602][ T798] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 219.734205][ T798] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 219.805486][ T798] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 219.819935][ T798] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input7 [ 219.936524][ T798] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 219.994248][ T798] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 220.014207][ T798] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 220.060536][ T798] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 220.084019][ T798] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 220.109247][ T798] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 220.120995][ T6121] fuse: Bad value for 'group_id' [ 220.126564][ T6121] fuse: Bad value for 'group_id' [ 220.144936][ T798] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 220.170293][ T798] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 220.193896][ T798] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 220.213946][ T798] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 220.270823][ T798] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 220.279405][ T798] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 220.301035][ T798] usb 4-1: USB disconnect, device number 3 [ 221.109767][ T6131] raw_sendmsg: syz.2.42 forgot to set AF_INET. Fix it! [ 221.459019][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 221.459088][ T30] audit: type=1326 audit(1766166685.443:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.0.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fced0b8f749 code=0x7ffc0000 [ 221.494510][ T30] audit: type=1326 audit(1766166685.443:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.0.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fced0b8f749 code=0x7ffc0000 [ 221.521164][ T30] audit: type=1326 audit(1766166685.453:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.0.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fced0b8df90 code=0x7ffc0000 [ 221.545536][ T30] audit: type=1326 audit(1766166685.453:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.0.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fced0b8f749 code=0x7ffc0000 [ 221.570883][ T30] audit: type=1326 audit(1766166685.453:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.0.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fced0b8f749 code=0x7ffc0000 [ 221.594589][ T30] audit: type=1326 audit(1766166685.453:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.0.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fced0b8f749 code=0x7ffc0000 [ 221.617045][ T30] audit: type=1326 audit(1766166685.463:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.0.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fced0b8f749 code=0x7ffc0000 [ 221.639321][ T30] audit: type=1326 audit(1766166685.463:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.0.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fced0b8f749 code=0x7ffc0000 [ 221.661672][ T30] audit: type=1326 audit(1766166685.463:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.0.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fced0b8f749 code=0x7ffc0000 [ 221.687103][ T30] audit: type=1326 audit(1766166685.463:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.0.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fced0b8f749 code=0x7ffc0000 [ 222.663700][ T5845] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 222.919382][ T5845] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 222.929863][ T5845] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 222.941107][ T5845] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 222.953868][ T5845] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 223.026258][ T5845] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 223.036503][ T5845] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 223.044956][ T5845] usb 2-1: Manufacturer: syz [ 223.134828][ T6152] syz.2.48 uses obsolete (PF_INET,SOCK_PACKET) [ 223.152150][ T5845] usb 2-1: config 0 descriptor?? [ 223.877073][ T6156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.886756][ T6156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.154028][ T11] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 224.357371][ T11] usb 4-1: Using ep0 maxpacket: 32 [ 224.381721][ T11] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 224.390288][ T11] usb 4-1: config 0 has no interface number 0 [ 224.396722][ T11] usb 4-1: config 0 interface 184 has no altsetting 0 [ 224.508696][ T11] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 224.518375][ T11] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.526735][ T11] usb 4-1: Product: syz [ 224.531144][ T11] usb 4-1: Manufacturer: syz [ 224.538204][ T11] usb 4-1: SerialNumber: syz [ 224.557419][ T11] usb 4-1: config 0 descriptor?? [ 224.574270][ T11] smsc75xx v1.0.0 [ 224.726456][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 224.733070][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 225.232306][ T11] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 225.243590][ T11] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 225.878490][ T11] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 225.889935][ T11] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 225.900110][ T11] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 225.910271][ T11] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -32 [ 226.173896][ T5845] rc_core: IR keymap rc-hauppauge not found [ 226.179999][ T5845] Registered IR keymap rc-empty [ 226.185726][ T5845] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 226.228604][ T5845] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 226.290099][ T5845] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 226.305381][ T5845] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input8 [ 226.444586][ T5845] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 226.475243][ T5845] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 226.540046][ T5845] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 226.578996][ T5845] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 226.638184][ T5845] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 226.677963][ T5845] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 226.731394][ T5845] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 226.771535][ T5845] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 226.810405][ T5845] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 226.853913][ T5845] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 226.917392][ T5845] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 226.925673][ T5845] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 227.024568][ T5845] usb 2-1: USB disconnect, device number 2 [ 227.244637][ T11] usb 4-1: USB disconnect, device number 4 [ 228.535468][ T6168] fuse: Bad value for 'group_id' [ 228.540588][ T6168] fuse: Bad value for 'group_id' [ 232.661171][ T6189] snd_dummy snd_dummy.0: control 4:2:0:syz0:211 is already present [ 232.963811][ T798] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 233.164090][ T798] usb 2-1: Using ep0 maxpacket: 32 [ 233.204206][ T6194] sctp: [Deprecated]: syz.0.62 (pid 6194) Use of int in maxseg socket option. [ 233.204206][ T6194] Use struct sctp_assoc_value instead [ 233.213730][ T798] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 233.227297][ T798] usb 2-1: config 0 has no interface number 0 [ 233.233658][ T798] usb 2-1: config 0 interface 184 has no altsetting 0 [ 233.313254][ T798] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 233.322920][ T798] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.331268][ T798] usb 2-1: Product: syz [ 233.335762][ T798] usb 2-1: Manufacturer: syz [ 233.344519][ T798] usb 2-1: SerialNumber: syz [ 233.381010][ T798] usb 2-1: config 0 descriptor?? [ 233.411612][ T798] smsc75xx v1.0.0 [ 233.606240][ T6200] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 234.130129][ T798] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 234.141491][ T798] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 234.373706][ T6204] input: syz1 as /devices/virtual/input/input9 [ 234.653936][ T5845] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 234.808029][ T798] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 234.819480][ T798] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 234.829313][ T798] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 234.839684][ T798] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -32 [ 234.911932][ T5845] usb 5-1: Using ep0 maxpacket: 16 [ 234.933966][ T5845] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 234.943452][ T5845] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.960860][ T5845] usb 5-1: config 0 descriptor?? [ 235.057821][ T5845] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 235.385454][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 235.385527][ T30] audit: type=1326 audit(1766166699.413:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6207 comm="syz.0.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fced0b8f749 code=0x7ffc0000 [ 235.420227][ T30] audit: type=1326 audit(1766166699.413:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6207 comm="syz.0.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fced0b8f749 code=0x7ffc0000 [ 235.619623][ T30] audit: type=1326 audit(1766166699.473:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6207 comm="syz.0.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fced0b8f749 code=0x7ffc0000 [ 235.642581][ T30] audit: type=1326 audit(1766166699.473:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6207 comm="syz.0.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fced0b8f749 code=0x7ffc0000 [ 235.665089][ T30] audit: type=1326 audit(1766166699.473:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6207 comm="syz.0.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fced0b8df90 code=0x7ffc0000 [ 235.687559][ T30] audit: type=1326 audit(1766166699.473:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6207 comm="syz.0.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fced0b8f749 code=0x7ffc0000 [ 235.714746][ T30] audit: type=1326 audit(1766166699.473:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6207 comm="syz.0.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fced0b8f749 code=0x7ffc0000 [ 235.740489][ T30] audit: type=1326 audit(1766166699.483:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6207 comm="syz.0.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fced0b8f749 code=0x7ffc0000 [ 235.763268][ T30] audit: type=1326 audit(1766166699.483:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6207 comm="syz.0.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fced0b8f749 code=0x7ffc0000 [ 235.786236][ T30] audit: type=1326 audit(1766166699.483:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6207 comm="syz.0.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fced0b8f749 code=0x7ffc0000 [ 236.198178][ T798] usb 2-1: USB disconnect, device number 3 [ 237.301148][ T5845] gspca_sonixj: reg_r err -32 [ 237.301475][ T5845] sonixj 5-1:0.0: probe with driver sonixj failed with error -32 [ 237.381935][ T798] usb 5-1: USB disconnect, device number 2 [ 239.336647][ T6224] snd_dummy snd_dummy.0: control 4:2:0:syz0:211 is already present [ 240.715405][ T11] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 240.937441][ T11] usb 5-1: Using ep0 maxpacket: 16 [ 240.955977][ T11] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.963694][ T798] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 240.967349][ T11] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.986507][ T11] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 240.999754][ T11] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 241.009150][ T11] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.037105][ T11] usb 5-1: config 0 descriptor?? [ 241.301532][ T798] usb 2-1: Using ep0 maxpacket: 16 [ 241.396283][ T798] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.407750][ T798] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 241.417317][ T798] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.546258][ T798] usb 2-1: config 0 descriptor?? [ 241.657930][ T11] microsoft 0003:045E:07DA.0001: item 0 4 0 8 parsing failed [ 241.746814][ T11] microsoft 0003:045E:07DA.0001: parse failed [ 241.753840][ T11] microsoft 0003:045E:07DA.0001: probe with driver microsoft failed with error -22 [ 241.904767][ T11] usb 5-1: USB disconnect, device number 3 [ 242.121173][ T798] mcp2221 0003:04D8:00DD.0002: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 242.388135][ T798] usb 2-1: USB disconnect, device number 4 [ 242.694522][ T6235] netlink: 'syz.3.76': attribute type 2 has an invalid length. [ 242.716076][ T6236] input: syz1 as /devices/virtual/input/input10 [ 242.852794][ T6235] input: syz0 as /devices/virtual/input/input11 [ 244.327521][ T6254] snd_dummy snd_dummy.0: control 4:2:0:syz0:211 is already present [ 246.453510][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 246.530739][ T6284] bond1: option arp_interval: invalid value (18446744073709551615) [ 246.539192][ T6284] bond1: option arp_interval: allowed values 0 - 2147483647 [ 246.669367][ T6284] bond1 (unregistering): Released all slaves [ 246.763749][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 246.775386][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 246.785562][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 247.017576][ T9] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 247.027616][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.036012][ T9] usb 4-1: Product: syz [ 247.040317][ T9] usb 4-1: Manufacturer: syz [ 247.045054][ T9] usb 4-1: SerialNumber: syz [ 247.149441][ T9] usb 4-1: config 0 descriptor?? [ 247.365807][ T9] adutux 4-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 248.047482][ T9] usb 4-1: USB disconnect, device number 5 [ 250.296043][ T6301] warning: `syz.2.98' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 250.331122][ T6301] pimreg: entered allmulticast mode [ 250.358562][ T6301] pimreg: left allmulticast mode [ 252.352717][ T798] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 252.606022][ T798] usb 4-1: Using ep0 maxpacket: 32 [ 252.633681][ T798] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 252.642419][ T798] usb 4-1: config 0 has no interface number 0 [ 252.648910][ T798] usb 4-1: config 0 interface 184 has no altsetting 0 [ 252.710648][ T798] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 252.720180][ T798] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.728786][ T798] usb 4-1: Product: syz [ 252.733120][ T798] usb 4-1: Manufacturer: syz [ 252.738071][ T798] usb 4-1: SerialNumber: syz [ 252.931568][ T798] usb 4-1: config 0 descriptor?? [ 252.983917][ T798] smsc75xx v1.0.0 [ 253.598882][ T798] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 253.610172][ T798] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 254.294084][ T798] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 254.305289][ T798] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 254.315170][ T798] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 254.325455][ T798] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -61 [ 256.040164][ T9] usb 4-1: USB disconnect, device number 6 [ 261.807841][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804f0b4800: rx timeout, send abort [ 261.817796][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88804f0b4800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 263.055565][ T6346] Set syz1 is full, maxelem 65536 reached [ 264.222391][ T6367] snd_dummy snd_dummy.0: control 4:2:0:syz0:211 is already present [ 264.316658][ T798] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 264.585538][ T798] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 264.596757][ T798] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.608168][ T798] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.618189][ T798] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 264.632381][ T798] usb 3-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 264.641836][ T798] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.797445][ T798] usb 3-1: config 0 descriptor?? [ 264.914223][ T6375] netlink: 24 bytes leftover after parsing attributes in process `syz.0.123'. [ 265.357351][ T6366] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 265.651247][ T798] hid-picolcd 0003:04D8:C002.0003: unknown main item tag 0x7 [ 265.659096][ T798] hid-picolcd 0003:04D8:C002.0003: unknown main item tag 0x0 [ 265.667008][ T798] hid-picolcd 0003:04D8:C002.0003: unknown main item tag 0x0 [ 265.674821][ T798] hid-picolcd 0003:04D8:C002.0003: unknown main item tag 0x0 [ 265.682473][ T798] hid-picolcd 0003:04D8:C002.0003: unknown main item tag 0x0 [ 265.858006][ T6379] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 265.894018][ T798] hid-picolcd 0003:04D8:C002.0003: No report with id 0x11 found [ 266.321808][ T798] usb 3-1: USB disconnect, device number 2 [ 267.654132][ T6404] snd_dummy snd_dummy.0: control 4:2:0:syz0:211 is already present [ 268.042278][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 268.042349][ T30] audit: type=1326 audit(1766166732.063:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6409 comm="syz.3.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f590a18f749 code=0x7ffc0000 [ 268.120029][ T30] audit: type=1326 audit(1766166732.133:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6409 comm="syz.3.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f590a18f749 code=0x7ffc0000 [ 268.142976][ T30] audit: type=1326 audit(1766166732.133:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6409 comm="syz.3.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f590a18f749 code=0x7ffc0000 [ 268.168938][ T30] audit: type=1326 audit(1766166732.133:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6409 comm="syz.3.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f590a18f749 code=0x7ffc0000 [ 268.192303][ T30] audit: type=1326 audit(1766166732.133:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6409 comm="syz.3.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f590a18f749 code=0x7ffc0000 [ 268.214982][ T30] audit: type=1326 audit(1766166732.133:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6409 comm="syz.3.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f590a18f749 code=0x7ffc0000 [ 268.237551][ T30] audit: type=1326 audit(1766166732.133:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6409 comm="syz.3.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f590a18f749 code=0x7ffc0000 [ 268.263026][ T30] audit: type=1326 audit(1766166732.143:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6409 comm="syz.3.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f590a18f749 code=0x7ffc0000 [ 268.286795][ T30] audit: type=1326 audit(1766166732.143:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6409 comm="syz.3.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f590a18f749 code=0x7ffc0000 [ 268.309424][ T30] audit: type=1326 audit(1766166732.193:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6409 comm="syz.3.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f590a18f749 code=0x7ffc0000 [ 272.955614][ T6453] snd_dummy snd_dummy.0: control 4:2:0:syz0:211 is already present [ 278.159532][ T42] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 278.418278][ T42] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 278.430677][ T42] usb 3-1: config 0 has no interfaces? [ 278.456503][ T42] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 278.466258][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.474643][ T42] usb 3-1: Product: syz [ 278.478959][ T42] usb 3-1: Manufacturer: syz [ 278.483808][ T42] usb 3-1: SerialNumber: syz [ 278.521361][ T42] usb 3-1: config 0 descriptor?? [ 279.313952][ T6478] snd_dummy snd_dummy.0: control 4:2:0:syz0:211 is already present [ 280.059869][ T6492] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 280.067836][ T6492] batadv_slave_0: entered promiscuous mode [ 280.930940][ T6500] netlink: 'syz.4.166': attribute type 4 has an invalid length. [ 280.939235][ T6500] netlink: 152 bytes leftover after parsing attributes in process `syz.4.166'. [ 281.042186][ T6500] .`: renamed from bond0 (while UP) [ 281.349043][ T11] usb 3-1: USB disconnect, device number 3 [ 281.783858][ T11] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 281.957376][ T6512] snd_dummy snd_dummy.0: control 4:2:0:syz0:211 is already present [ 282.011945][ T11] usb 4-1: Using ep0 maxpacket: 16 [ 282.031050][ T11] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.042619][ T11] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 282.052142][ T11] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.246495][ T11] usb 4-1: config 0 descriptor?? [ 282.784003][ T11] mcp2221 0003:04D8:00DD.0004: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 283.168543][ T11] usb 4-1: USB disconnect, device number 7 [ 283.969844][ T11] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 284.189451][ T11] usb 3-1: config 0 interface 0 altsetting 60 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 284.200929][ T11] usb 3-1: config 0 interface 0 altsetting 60 endpoint 0xD has invalid wMaxPacketSize 0 [ 284.211103][ T11] usb 3-1: config 0 interface 0 has no altsetting 0 [ 284.218097][ T11] usb 3-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=ae.ad [ 284.227546][ T11] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.246716][ T11] usb 3-1: config 0 descriptor?? [ 284.470183][ T6530] netlink: 384 bytes leftover after parsing attributes in process `syz.2.177'. [ 284.544064][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 284.574652][ T11] usb 3-1: string descriptor 0 read error: -71 [ 284.582930][ T11] usb 3-1: ucan: probing device on interface #0 [ 284.589531][ T11] usb 3-1: ucan: invalid endpoint configuration [ 284.595982][ T11] usb 3-1: ucan: probe failed; try to update the device firmware [ 284.701488][ T11] usb 3-1: USB disconnect, device number 4 [ 284.778781][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 284.789308][ T9] usb 5-1: config 0 has no interfaces? [ 284.868115][ T9] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 284.878679][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.887187][ T9] usb 5-1: Product: syz [ 284.891487][ T9] usb 5-1: Manufacturer: syz [ 284.896359][ T9] usb 5-1: SerialNumber: syz [ 284.936785][ T9] usb 5-1: config 0 descriptor?? [ 285.506018][ T6546] snd_dummy snd_dummy.0: control 4:2:0:syz0:211 is already present [ 285.833731][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 286.055296][ T9] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 286.064267][ T9] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 286.075354][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 286.084635][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 286.096228][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 286.182774][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 286.189544][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 286.286391][ T9] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 286.295869][ T9] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 286.304343][ T9] usb 4-1: Product: syz [ 286.308662][ T9] usb 4-1: Manufacturer: syz [ 286.373942][ T798] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 286.418606][ T9] cdc_wdm 4-1:1.0: skipping garbage [ 286.424035][ T9] cdc_wdm 4-1:1.0: skipping garbage [ 286.450897][ T9] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 286.457093][ T9] cdc_wdm 4-1:1.0: Unknown control protocol [ 286.554442][ T798] usb 2-1: Using ep0 maxpacket: 32 [ 286.590593][ T798] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.601006][ T798] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 286.647601][ T798] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 286.657473][ T798] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.665849][ T798] usb 2-1: Product: syz [ 286.670215][ T798] usb 2-1: Manufacturer: syz [ 286.675084][ T798] usb 2-1: SerialNumber: syz [ 286.715669][ T798] usb 2-1: config 0 descriptor?? [ 287.092274][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 4 bytes [ 287.356247][ T798] usb 5-1: USB disconnect, device number 4 [ 288.748902][ T9] usb 4-1: USB disconnect, device number 8 [ 289.519613][ T798] usb 2-1: USB disconnect, device number 5 [ 289.971970][ T6587] snd_dummy snd_dummy.0: control 4:2:0:syz0:211 is already present [ 291.178621][ T6608] netlink: 28 bytes leftover after parsing attributes in process `syz.4.206'. [ 291.188168][ T6608] netlink: 28 bytes leftover after parsing attributes in process `syz.4.206'. [ 291.209249][ T6608] syz_tun: entered promiscuous mode [ 291.215153][ T6608] syz_tun: left promiscuous mode [ 291.713799][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 291.905342][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 291.945198][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 291.955558][ T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 292.012100][ T9] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 292.022006][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.030462][ T9] usb 2-1: Product: syz [ 292.034918][ T9] usb 2-1: Manufacturer: syz [ 292.039690][ T9] usb 2-1: SerialNumber: syz [ 292.057954][ T9] usb 2-1: config 0 descriptor?? [ 292.086588][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 292.086663][ T30] audit: type=1326 audit(1766166756.103:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6614 comm="syz.2.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1a7d8f749 code=0x7ffc0000 [ 292.116005][ T30] audit: type=1326 audit(1766166756.103:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6614 comm="syz.2.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe1a7d8f783 code=0x7ffc0000 [ 292.141728][ T30] audit: type=1326 audit(1766166756.103:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6614 comm="syz.2.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe1a7d8f783 code=0x7ffc0000 [ 292.164880][ T30] audit: type=1326 audit(1766166756.113:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6614 comm="syz.2.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fe1a7d8f749 code=0x7ffc0000 [ 292.187541][ T30] audit: type=1326 audit(1766166756.113:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6614 comm="syz.2.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1a7d8f749 code=0x7ffc0000 [ 292.209964][ T30] audit: type=1326 audit(1766166756.113:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6614 comm="syz.2.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1a7d8f749 code=0x7ffc0000 [ 292.234250][ T30] audit: type=1326 audit(1766166756.113:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6614 comm="syz.2.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1a7d8f749 code=0x7ffc0000 [ 292.257010][ T30] audit: type=1326 audit(1766166756.113:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6614 comm="syz.2.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe1a7d8f783 code=0x7ffc0000 [ 292.319093][ T30] audit: type=1326 audit(1766166756.343:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6614 comm="syz.2.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fe1a7d8f807 code=0x7ffc0000 [ 292.343213][ T30] audit: type=1326 audit(1766166756.343:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6614 comm="syz.2.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fe1a7d46bdd code=0x7ffc0000 [ 294.537040][ T798] usb 2-1: USB disconnect, device number 6 [ 295.113025][ T6646] netlink: 28 bytes leftover after parsing attributes in process `syz.2.219'. [ 295.122406][ T6646] netlink: 28 bytes leftover after parsing attributes in process `syz.2.219'. [ 295.140928][ T6646] syz_tun: entered promiscuous mode [ 295.193786][ T6646] syz_tun: left promiscuous mode [ 296.004426][ T798] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 296.200289][ T798] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 296.210980][ T798] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 296.307900][ T798] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 296.320224][ T798] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.329237][ T798] usb 2-1: Product: syz [ 296.333733][ T798] usb 2-1: Manufacturer: syz [ 296.338497][ T798] usb 2-1: SerialNumber: syz [ 296.456190][ T798] usb 2-1: config 0 descriptor?? [ 296.715929][ T798] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 296.761423][ T6669] vivid-005: ================= START STATUS ================= [ 296.769958][ T6669] vivid-005: FM Deviation: 75000 [ 296.775325][ T6669] vivid-005: ================== END STATUS ================== [ 296.884258][ T798] usb 5-1: Using ep0 maxpacket: 32 [ 296.897727][ T798] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 296.908133][ T798] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 296.941555][ T798] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 296.951064][ T798] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.959506][ T798] usb 5-1: Product: syz [ 296.964373][ T798] usb 5-1: Manufacturer: syz [ 296.969133][ T798] usb 5-1: SerialNumber: syz [ 296.983169][ T798] usb 5-1: config 0 descriptor?? [ 298.468208][ T5808] Bluetooth: hci4: command 0x0406 tx timeout [ 298.470545][ T5794] Bluetooth: hci1: command 0x0406 tx timeout [ 298.474700][ T5803] Bluetooth: hci0: command 0x0406 tx timeout [ 298.481430][ T5794] Bluetooth: hci2: command 0x0406 tx timeout [ 298.487171][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 298.699398][ T6687] netlink: 28 bytes leftover after parsing attributes in process `syz.0.233'. [ 298.708970][ T6687] netlink: 28 bytes leftover after parsing attributes in process `syz.0.233'. [ 298.732318][ T6687] syz_tun: entered promiscuous mode [ 298.814564][ T6687] syz_tun: left promiscuous mode [ 299.022368][ T9] usb 2-1: USB disconnect, device number 7 [ 299.822780][ T6698] netlink: 24 bytes leftover after parsing attributes in process `syz.0.237'. [ 299.869979][ T42] usb 5-1: USB disconnect, device number 5 [ 299.946857][ T6700] fuse: Bad value for 'fd' [ 300.273741][ T42] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 300.469042][ T42] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 300.479039][ T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.545095][ T42] usb 4-1: config 0 descriptor?? [ 300.600227][ T42] cp210x 4-1:0.0: cp210x converter detected [ 301.030627][ T42] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 301.076447][ T42] usb 4-1: cp210x converter now attached to ttyUSB0 [ 301.247909][ T42] usb 4-1: USB disconnect, device number 9 [ 301.280290][ T42] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 301.371371][ T42] cp210x 4-1:0.0: device disconnected [ 302.526336][ T6726] netlink: 28 bytes leftover after parsing attributes in process `syz.4.247'. [ 302.536308][ T6726] netlink: 28 bytes leftover after parsing attributes in process `syz.4.247'. [ 302.554583][ T6726] syz_tun: entered promiscuous mode [ 302.560228][ T6726] syz_tun: left promiscuous mode [ 303.456530][ T6737] netlink: 24 bytes leftover after parsing attributes in process `syz.2.252'. [ 303.485023][ T42] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 303.504350][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 303.684029][ T42] usb 5-1: Using ep0 maxpacket: 32 [ 303.702247][ T9] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 303.713790][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.717818][ T42] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 303.725100][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.744263][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 303.755853][ T42] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 303.757616][ T9] usb 4-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 303.767611][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.776875][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.784142][ T42] usb 5-1: Product: syz [ 303.799075][ T42] usb 5-1: Manufacturer: syz [ 303.804551][ T42] usb 5-1: SerialNumber: syz [ 303.845273][ T9] usb 4-1: config 0 descriptor?? [ 303.912663][ T42] usb 5-1: config 0 descriptor?? [ 304.456810][ T6731] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 304.591175][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 304.598731][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 304.675355][ T9] usb 4-1: USB disconnect, device number 10 [ 306.009741][ T6762] netlink: 28 bytes leftover after parsing attributes in process `syz.2.260'. [ 306.019307][ T6762] netlink: 28 bytes leftover after parsing attributes in process `syz.2.260'. [ 306.043756][ T6762] syz_tun: entered promiscuous mode [ 306.097179][ T6762] syz_tun: left promiscuous mode [ 306.328613][ T9] usb 5-1: USB disconnect, device number 6 [ 306.563864][ T6768] fuse: Bad value for 'user_id' [ 306.569005][ T6768] fuse: Bad value for 'user_id' [ 307.257787][ T6773] netlink: 24 bytes leftover after parsing attributes in process `syz.2.264'. [ 309.549291][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 309.764987][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 309.777728][ T6803] fuse: Bad value for 'fd' [ 309.786110][ T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 309.843205][ T9] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 309.853002][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.861253][ T9] usb 2-1: Product: syz [ 309.865561][ T9] usb 2-1: Manufacturer: syz [ 309.870388][ T9] usb 2-1: SerialNumber: syz [ 309.941396][ T9] usb 2-1: config 0 descriptor?? [ 311.735566][ T6829] netlink: 'syz.0.284': attribute type 10 has an invalid length. [ 311.849701][ T6829] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 312.490669][ T42] usb 2-1: USB disconnect, device number 8 [ 312.925548][ T6837] pim6reg1: entered promiscuous mode [ 312.931031][ T6837] pim6reg1: entered allmulticast mode [ 315.735852][ T6866] netlink: 'syz.1.297': attribute type 10 has an invalid length. [ 315.908820][ T6867] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 317.402701][ T6879] syzkaller0: entered promiscuous mode [ 317.411221][ T6879] syzkaller0: entered allmulticast mode [ 320.544232][ T6906] syzkaller0: entered promiscuous mode [ 320.549826][ T6906] syzkaller0: entered allmulticast mode [ 323.045409][ T6937] netlink: 184 bytes leftover after parsing attributes in process `syz.2.327'. [ 325.609311][ T6974] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 325.617343][ T6974] batadv_slave_0: entered promiscuous mode [ 327.789326][ T7014] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 327.848446][ T7014] 8021q: VLANs not supported on caif0 [ 329.868855][ T7055] 8021q: VLANs not supported on caif0 [ 331.705900][ T7086] 8021q: VLANs not supported on caif0 [ 339.193778][ T42] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 340.782804][ T4374] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0xd [ 340.791359][ T4374] ===================================================== [ 340.799069][ T4374] BUG: KMSAN: uninit-value in nci_ntf_packet+0x26b2/0x46c0 [ 340.806959][ T4374] nci_ntf_packet+0x26b2/0x46c0 [ 340.812008][ T4374] nci_rx_work+0x403/0x750 [ 340.816912][ T4374] process_scheduled_works+0xb91/0x1d80 [ 340.822708][ T4374] worker_thread+0xedf/0x1590 [ 340.827708][ T4374] kthread+0xd5c/0xf00 [ 340.831917][ T4374] ret_from_fork+0x208/0x710 [ 340.837240][ T4374] ret_from_fork_asm+0x1a/0x30 [ 340.842185][ T4374] [ 340.844712][ T4374] Uninit was created at: [ 340.849191][ T4374] kmem_cache_alloc_node_noprof+0x9e7/0x17a0 [ 340.855512][ T4374] kmalloc_reserve+0x13c/0x4b0 [ 340.864119][ T4374] __alloc_skb+0x866/0x10a0 [ 340.868790][ T4374] virtual_ncidev_write+0x6b/0x430 [ 340.874186][ T4374] vfs_write+0x48a/0x15d0 [ 340.878668][ T4374] __x64_sys_write+0x1fb/0x4d0 [ 340.883745][ T4374] x64_sys_call+0x30ab/0x3e70 [ 340.888591][ T4374] do_syscall_64+0xd9/0xf80 [ 340.893284][ T4374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.899475][ T4374] [ 340.901923][ T4374] CPU: 1 UID: 0 PID: 4374 Comm: kworker/u8:21 Tainted: G L syzkaller #0 PREEMPT(none) [ 340.913460][ T4374] Tainted: [L]=SOFTLOCKUP [ 340.917912][ T4374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 340.928565][ T4374] Workqueue: nfc2_nci_rx_wq nci_rx_work [ 340.934541][ T4374] ===================================================== [ 340.941639][ T4374] Disabling lock debugging due to kernel taint [ 340.948072][ T4374] Kernel panic - not syncing: kmsan.panic set ... [ 340.954651][ T4374] CPU: 1 UID: 0 PID: 4374 Comm: kworker/u8:21 Tainted: G B L syzkaller #0 PREEMPT(none) [ 340.965967][ T4374] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 340.971604][ T4374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 340.981784][ T4374] Workqueue: nfc2_nci_rx_wq nci_rx_work [ 340.987816][ T4374] Call Trace: [ 340.991171][ T4374] [ 340.994167][ T4374] __dump_stack+0x26/0x30 [ 340.998649][ T4374] dump_stack_lvl+0x53/0x270 [ 341.003392][ T4374] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 341.009389][ T4374] dump_stack+0x1e/0x25 [ 341.013686][ T4374] vpanic+0x435/0xd30 [ 341.017829][ T4374] panic+0x15d/0x160 [ 341.021923][ T4374] kmsan_report+0x31c/0x320 [ 341.026612][ T4374] ? __msan_warning+0x1b/0x30 [ 341.031445][ T4374] ? nci_ntf_packet+0x26b2/0x46c0 [ 341.036683][ T4374] ? nci_rx_work+0x403/0x750 [ 341.041447][ T4374] ? process_scheduled_works+0xb91/0x1d80 [ 341.047356][ T4374] ? worker_thread+0xedf/0x1590 [ 341.052323][ T4374] ? kthread+0xd5c/0xf00 [ 341.056691][ T4374] ? ret_from_fork+0x208/0x710 [ 341.061623][ T4374] ? ret_from_fork_asm+0x1a/0x30 [ 341.066715][ T4374] ? ret_from_fork_asm+0x1a/0x30 [ 341.071833][ T4374] ? vprintk_emit+0xc33/0xc50 [ 341.076650][ T4374] ? kmsan_get_metadata+0xfb/0x160 [ 341.081952][ T4374] ? vprintk_default+0x3f/0x50 [ 341.086863][ T4374] ? vprintk+0x36/0x50 [ 341.091044][ T4374] ? _printk+0x17e/0x1b0 [ 341.095467][ T4374] ? kmsan_get_metadata+0xfb/0x160 [ 341.100757][ T4374] __msan_warning+0x1b/0x30 [ 341.105418][ T4374] nci_ntf_packet+0x26b2/0x46c0 [ 341.110533][ T4374] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 341.116767][ T4374] ? sk_skb_reason_drop+0x13f/0x440 [ 341.122159][ T4374] nci_rx_work+0x403/0x750 [ 341.126754][ T4374] ? __pfx_nci_rx_work+0x10/0x10 [ 341.131851][ T4374] process_scheduled_works+0xb91/0x1d80 [ 341.137635][ T4374] worker_thread+0xedf/0x1590 [ 341.142459][ T4374] kthread+0xd5c/0xf00 [ 341.146650][ T4374] ? __pfx_worker_thread+0x10/0x10 [ 341.151905][ T4374] ? __pfx_kthread+0x10/0x10 [ 341.156621][ T4374] ret_from_fork+0x208/0x710 [ 341.161373][ T4374] ? __switch_to+0x53d/0x790 [ 341.166111][ T4374] ? __pfx_kthread+0x10/0x10 [ 341.170835][ T4374] ret_from_fork_asm+0x1a/0x30 [ 341.175788][ T4374] [ 341.179262][ T4374] Kernel Offset: disabled [ 341.183628][ T4374] Rebooting in 86400 seconds..