last executing test programs: 2m47.987742647s ago: executing program 0 (id=443): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x22301, 0x0) r1 = epoll_create(0xc02) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)={0x6000200e}) epoll_pwait2(r1, &(0x7f0000000040)=[{}], 0x1, &(0x7f0000000080)={0x77359400}, 0x0, 0x0) 2m47.80636785s ago: executing program 0 (id=446): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3b}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) close(r0) 2m47.673600401s ago: executing program 0 (id=449): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a000000040000800400", @ANYRES32=r0], 0x1c}}, 0x0) 2m47.472307703s ago: executing program 0 (id=454): sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmdt(r0) 2m47.330846394s ago: executing program 0 (id=456): open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x18) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) unlink(&(0x7f0000000040)='./bus\x00') 2m47.168181623s ago: executing program 0 (id=458): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000f3000100c00000e7ff0000000000b100004eedf79cbe05d9fb84916c4695bff3294a024018"]) 2m32.030553822s ago: executing program 32 (id=458): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000f3000100c00000e7ff0000000000b100004eedf79cbe05d9fb84916c4695bff3294a024018"]) 1m17.781656633s ago: executing program 3 (id=1925): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000000c0)={0x2, {{0x2, 0x400, @multicast1}}, {{0x2, 0x0, @private=0xa010101}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000480)={0x5, {{0x2, 0x0, @multicast1}}}, 0x108) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @multicast1}, @address_request}}}}, 0x0) 1m17.517644589s ago: executing program 3 (id=1930): r0 = socket$igmp6(0xa, 0x3, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x5e, &(0x7f0000000340)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @rand_addr=' \x01\x00', @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @dev, @dev}}}}}}, 0x0) 1m17.263263645s ago: executing program 3 (id=1937): r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000040)=0x7, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='bridge_slave_0\x00', 0x10) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000200)="08001efbb07d586e", 0x8}], 0x1, 0x0, 0x0, 0x60000000}, 0x0) 1m17.016731032s ago: executing program 3 (id=1941): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000480)='./file0/file0\x00', 0x0, 0x2000, 0x0) 1m16.907969682s ago: executing program 3 (id=1943): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x11, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x0, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) r1 = socket$inet(0x2, 0x1, 0x6) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x8919, &(0x7f0000000040)) 1m16.640019995s ago: executing program 3 (id=1948): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x3, r2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 1m16.379174062s ago: executing program 33 (id=1948): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x3, r2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 21.828469544s ago: executing program 1 (id=2909): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x1, 0x0, 0xd66, 0xf5ffffff}, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) sendmsg$tipc(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="fb3f0ab3d8", 0x5dc}, {0x0}], 0x2, 0x0, 0x0, 0x40}, 0x20008081) 21.647684779s ago: executing program 1 (id=2913): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5800000010000300"/20, @ANYRES32=r2, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005000400010000001c001a8018000a8014000700fc"], 0x58}, 0x1, 0x2}, 0x0) 21.484026614s ago: executing program 1 (id=2917): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) 20.461392929s ago: executing program 1 (id=2935): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1041, 0x0) umount2(&(0x7f0000000000)='./file0/../file0\x00', 0x1) 20.24809556s ago: executing program 1 (id=2939): syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 20.040192535s ago: executing program 1 (id=2943): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) r1 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x40001) ioctl$LOOP_CHANGE_FD(r1, 0x4c03, 0xffffffffffffffff) 19.717857942s ago: executing program 34 (id=2943): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) r1 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x40001) ioctl$LOOP_CHANGE_FD(r1, 0x4c03, 0xffffffffffffffff) 2.598177819s ago: executing program 7 (id=3169): r0 = socket(0x1000000000000010, 0x80802, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000200000000000c00095000000000000002ba728041598d6fbd30cb599e83d24a3aa81d36b26fb0b71d0e6adfefcf1d8f7faf75e0f226bd99eea7960717142fa9ea4318123741c4a0e168c1886d0d4d94f2f4e345c652fbc16ee988e6e0dc8cedf3ce99fbfbf9b0a4def23d410f6296b32a334388107200759cda9036b4e369a9e152ddcc7f05a5f3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c3b35967deabe802f5ab3e89bd6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d6ececb0cd2b6d357b85a0218ce740068725837074e098ee207d2f73902fbcfcf49822775985bf32d715f5888b24efa000000000000ffffffdf000000000000000000000089a7b9b00000000000000000000000000000b27cf3d1848a54d7132be1ffb0adf9deab29ea3323aa9fdfb52faf449c3bfd09000000b91ab219efdebb7b3de8f67581cf796a1d4223b9ff7ffcad3f6c962b9f292324b7ab7f91a31cf41ab11f12fb1e0a494034127de7c6592df1a6c64d8f20a67745409e011f1264d43e153b3d34899f40159e800ea2474b544035a30b23bcee46762c2093bcc9eae5dff5adbdee3e980026c96f80ee1a74e04bde740750fa4d9aaa705989b8e673e3296e52d337c56abf1128744bab6677fcb78e313841ec309baed0495f06d058a75fa4c81e5c9f42d9383e41d277b10392a912ffaf6f658f3fadd16286744f839c3f128f8f92d0992239eafce5c1b3f97a297c9e49a0c3510ef74080e6d1e0c8a868a353409e34d3e82279637598f37ad380a447483cac394c7bbdcd0e3b1c39b6e00916de48a4e70f03cc4146a77af02c1d4cef5379da860aed8477dfa8ceefb405005c6977c78cdbf37704ec73755539280b064bda154910fe050038ec9e47de89298b7bf4d769ccc18eede00e8ca5457870eb30d211e23ccc8e06cd58b61799257ab55ff413c86ba9affb12ec757c7234c270246c87a901160e6c07bc6cf8809c3a0d46ff7f008000000000ad1e1f493354b2822b98371d000000167d78e65b90eba0768e825972ea3b774a1467c89fa0f82e8440105051e5510a33dcda5e143fbfff161c12ca389cbe4c51b3fa00675cd1b66c5fd9c26a54d43fa050645bd9109b7e7131421c0f39113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a84a4e3344b155cc20f49e298727340e97cdefb40e56e9cfad973347d0de7ba4754ff231a1b033d8f931ba3442b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf46306f2ef79b8d4c2ff030000000000000007b82e6044f643068cd47ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c99220002af8c5e53d52c83ac3fa7c3a3ee6c08384865b66d2b4dcb5dd9cba16b64ebbbf8702ae12c77e6e34991a225c120a3c950942fe0bc9f2a1a7506d35e5b439edeb7088aeda890cf8a4a6f31ba6d9b8cb098f935bdcbb29fd0f1a342c9eed00000000ab6648a9dea0b6c91996d65da6c24a702a86c814459f3cdaaf99000000000000000000bfb32c826563c518d0ad23bc83ba3f3757210a057eff7615c868bd7d74233da1a3b56d4e04a7ec4792b1c4cffddbbdcfdd23ab5268f1b3d08ebb8ce498cbaaf5aaab812201d1aba3d70471fcd9b466569f3ef72f39d87fcccab514fc02b70be8629c9b73ce7bc4be7f8be71cb7b2d0a4acff8f6abe7dbad64dfa44966945d93c33b038ce0d890f851811e387723a25dda119f64b35e71c5400000000000000000000000000000034c751ebdf3f20a95b817ea3df3d6c0002a41783058e56c70afe8016b3dd9dc7785b36e609f173cc6b893ecd138289709839747837d6a6283b3452c57a5d44cacd363589845637071320921d22c1663964eddec902fc7cc33158bc306d8c3bdae8108a23d2dc96a5cdb518f58832ec0906aaec43659c79c8ad37b0f961f3beaa3e02f7762c5dd633d13b5e487e996597b2ab42c898b7dd8390e13b395aacce4683e55bcfe8c17615257364365fd48bd77da79e52ce9adfe6dca9c42c4d719347f39ef006c2df747ee6adb7cd04faf05c36de72354c64ebaf28a3de18607ebc4b70f50f71dae565749568a23319232dc213342fb472e98c9a412199ce7976bee5eaf40e60cb3fbe8b92dae5008e92d17d05ce74ffffe74ae71d5b8bd43a4e0bf0390335aa489689f5e3a4ac5adca96caab658b43cd499d95d3876c220d147ad1d0e626621d88f1370982f663793cac52ea0d14e595ff1f56427a0a813bb3b84d31d021eeea8faeff25bb66f5940d08a5509a66fc43962bcb2f7415bc38e355e80ec935aa6fe2d74bd475d89449fb46320fee40faff2fd005549fe6a042bd95decfde5e166971935f4cfd9c9e5bfd2d803644f4e5b7e6dc1a7a35df7134e2fad79269bf24bea4eb0213068e3054d9e4a8d1a9eb032cb390e2016d0ce10549728cb4732dc5adab16fa19ac70780b29e079be27c95d3dd2bd91a584c46d84d430fc6ea31ce0ba62fa27be9f6bc435203da7c3a5d68bf4dd4f81cbfaa1c87a15b9272853c9837db930952dca667194b71815a9eb49b495360dcdf31e0e560857d0541a916d6b5469ac1b36babc5a91e1d58925f20d9d5f8a0da3c30711b0d101cabceffbe072be69613ea0003c6e9bb5cd2413c8ddc17cfa319cf7aaeed0ffb07a08f8fb439f709dfe0732fe42192819870bdd87d5f612ade03540a28be446095269d9ea5a60bba1f2462f9921f2a731dbcf1d03964ea1e4f79514914d37877f57617b60fa2b58aa694fcb023024653c4b73efb12a57ffc6f8943262b77be933051e12bd4d768a422ea652d45b04a9c43b5c97fc3edea7002d51a0a74889334ee"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x29, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000001c0)=r1, 0x4) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe800c00080008001100080000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20642383656d4d2449155037", 0x55}], 0x1}, 0x0) 2.340796343s ago: executing program 7 (id=3172): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000020c0), 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000002480)={0x0, 0x7}, 0x8) sendmsg$inet6(r0, &(0x7f0000003940)={&(0x7f00000024c0)={0xa, 0x4e20, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fff}, 0x1c, &(0x7f0000003700)=[{&(0x7f0000002500)="847b", 0x2}], 0x1}, 0x4040) 2.122091209s ago: executing program 7 (id=3175): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'}}}]}, 0x48}}, 0x0) 1.935316415s ago: executing program 7 (id=3179): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002840)=ANY=[@ANYBLOB="05"], 0x48}}, 0x1004c000) sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="050000000109"], 0x80}}, 0x0) 1.778480663s ago: executing program 7 (id=3183): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000040), 0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000001580)={0x0, @in={{0x2, 0x0, @private=0xa010101}}}, &(0x7f0000000540)=0x9c) 1.62549056s ago: executing program 6 (id=3186): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 1.531905986s ago: executing program 2 (id=3188): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 870.5022ms ago: executing program 7 (id=3189): r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}}, 0x0) 870.391596ms ago: executing program 2 (id=3190): r0 = epoll_create(0x8001) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x60000006}) pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x5, 0x5, 0x0, 0x1, 0x652dcd9a, 0x4}, 0x0, &(0x7f0000000080)={0x8, 0x23e2, 0x8781, 0xffffffffffffffff, 0x1000, 0x8, 0xa, 0xb}, &(0x7f00000000c0)={0x0, 0x3938700}, 0x0) 870.302699ms ago: executing program 6 (id=3191): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e22, @remote}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in6={{0xa, 0x3, 0x0, @dev={0xfe, 0x80, '\x00', 0x36}}}}, &(0x7f0000000040)=0x84) 870.236311ms ago: executing program 4 (id=3192): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) fcntl$notify(r0, 0x402, 0x29) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r1, &(0x7f0000000300)=""/4102, 0x1006) 868.323251ms ago: executing program 5 (id=3199): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)=0x3) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030064766d727009000000000000000000001800128008000100707070000c00028008000100", @ANYRES16=r0], 0x4c}}, 0x0) 751.833492ms ago: executing program 6 (id=3193): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) sendmmsg$inet6(r0, &(0x7f0000004880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000080) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10) 735.146416ms ago: executing program 5 (id=3194): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_ext={0x1c, 0xf, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='GPL\x00', 0xfffffff8, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x25ad0, r2, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) 674.635698ms ago: executing program 4 (id=3195): unshare(0x4000400) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='ext4_es_lookup_extent_enter\x00', r0}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={0x0, r1}, 0x18) 659.997644ms ago: executing program 2 (id=3196): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x101}, @IFLA_BR_MAX_AGE={0x8}]}}}]}, 0x44}}, 0x0) 554.300852ms ago: executing program 6 (id=3197): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x1000) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x4000) 554.200345ms ago: executing program 5 (id=3198): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x6, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 553.814505ms ago: executing program 4 (id=3200): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x28, r2, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4051}, 0x4) 425.413206ms ago: executing program 4 (id=3201): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000440)='block_bio_complete\x00', r1}, 0x18) write$cgroup_int(r0, &(0x7f0000000040)=0x1c8, 0x12) 384.318433ms ago: executing program 2 (id=3202): sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1cf90103", @ANYRES16=0x0, @ANYBLOB="c89045b2a6c0b186f6eb1f00000008003617"], 0x1c}}, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff0000000071109e000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) 383.767138ms ago: executing program 5 (id=3203): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) getsockname(r0, 0x0, &(0x7f00000008c0)) 289.143ms ago: executing program 4 (id=3204): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) io_submit(0x0, 0x1, &(0x7f0000000440)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0, 0x2}]) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2778) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000140)=""/128) 250.750832ms ago: executing program 2 (id=3205): r0 = fsopen(&(0x7f0000000000)='devtmpfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 132.172473ms ago: executing program 5 (id=3206): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x4, 0x0, 0x0) setsockopt$inet_buf(r1, 0x0, 0x4, 0x0, 0x0) 126.678058ms ago: executing program 6 (id=3207): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) fchmod(r0, 0x8) 90.550439ms ago: executing program 4 (id=3208): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, &(0x7f0000000640)={0x7, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x0, 0xae, 0x6, 0x7, 0x4, 0xfffffffffffff04f, 0x7, 0x80000000, 0xfffffffffffffff8, 0xffffffffffffffff, 0x6, 0x0, 0x100, 0x4, 0x2, 0x5, 0x3, 0x8, 0x8}) clock_adjtime(0x0, &(0x7f0000000900)={0x6, 0xe, 0xf, 0x0, 0xf, 0x8000000000000000, 0xa, 0x2, 0x9, 0x2, 0x4, 0x8000000000000000, 0xc, 0x9, 0x7, 0x9, 0x7, 0x3, 0x8, 0xfffffffffffffffa, 0x0, 0x5, 0x8, 0x7, 0x3, 0x6}) 259.479µs ago: executing program 2 (id=3209): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = landlock_create_ruleset(&(0x7f0000000080)={0x90f, 0x0, 0x1}, 0x18, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f00000001c0)={0xa, r1}, 0x0) 85.473µs ago: executing program 5 (id=3210): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)=0x7ffd) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xd4}]}) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000100)={0x0, 0x0}) 0s ago: executing program 6 (id=3211): r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000540)=[{{0x1, 0x1, 0x0, 0x1}, {0x4, 0x0, 0x1}}, {{0x3, 0x1}, {0x0, 0x0, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): =0 ses=4294967295 subj=_ pid=7059 comm="syz.1.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8126f8d169 code=0x7ffc0000 [ 113.863425][ T30] audit: type=1326 audit(1741757725.941:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7059 comm="syz.1.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8126f8d169 code=0x7ffc0000 [ 113.931552][ T30] audit: type=1326 audit(1741757725.941:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7059 comm="syz.1.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8126f84127 code=0x7ffc0000 [ 114.021517][ T30] audit: type=1326 audit(1741757725.941:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7059 comm="syz.1.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8126f29359 code=0x7ffc0000 [ 114.081025][ T30] audit: type=1326 audit(1741757725.941:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7059 comm="syz.1.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8126f84127 code=0x7ffc0000 [ 114.267006][ T7082] tap0: tun_chr_ioctl cmd 1074025677 [ 114.277262][ T7082] tap0: linktype set to 1 [ 114.735991][ T7105] netlink: 8 bytes leftover after parsing attributes in process `syz.3.542'. [ 115.283758][ T5875] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 115.463744][ T5875] usb 2-1: Using ep0 maxpacket: 16 [ 115.471552][ T5875] usb 2-1: config 0 has an invalid interface number: 4 but max is 0 [ 115.484568][ T5875] usb 2-1: config 0 has no interface number 0 [ 115.511057][ T5875] usb 2-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.526158][ T7134] 8021q: adding VLAN 0 to HW filter on device bond1 [ 115.553505][ T5875] usb 2-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.601627][ T5875] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 115.644424][ T5875] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.666460][ T5875] usb 2-1: config 0 descriptor?? [ 116.101494][ T5875] hid (null): unknown global tag 0xd [ 116.218903][ T7161] netlink: 4 bytes leftover after parsing attributes in process `syz.4.569'. [ 116.227932][ T7161] netlink: 'syz.4.569': attribute type 2 has an invalid length. [ 116.234066][ T978] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 116.236464][ T7161] netlink: 4 bytes leftover after parsing attributes in process `syz.4.569'. [ 116.310420][ T5875] usb 2-1: USB disconnect, device number 3 [ 116.403791][ T978] usb 3-1: Using ep0 maxpacket: 32 [ 116.422255][ T978] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=a6.13 [ 116.438134][ T978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.447737][ T978] usb 3-1: Product: syz [ 116.451932][ T978] usb 3-1: Manufacturer: syz [ 116.460988][ T978] usb 3-1: SerialNumber: syz [ 116.468820][ T978] usb 3-1: config 0 descriptor?? [ 116.480373][ T978] pvrusb2: Hardware description: Terratec Grabster AV400 [ 116.494831][ T978] pvrusb2: ********** [ 116.498856][ T978] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 116.517884][ T978] pvrusb2: Important functionality might not be entirely working. [ 116.527099][ T978] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 116.543116][ T978] pvrusb2: ********** [ 116.583984][ T975] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 116.678425][ T2339] pvrusb2: Invalid write control endpoint [ 116.714286][ T2339] pvrusb2: Invalid write control endpoint [ 116.720063][ T2339] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 116.732890][ T2339] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 116.742781][ T2339] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 116.756024][ T2339] pvrusb2: Device being rendered inoperable [ 116.762135][ T2339] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 116.769337][ T2339] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 116.779043][ T2339] pvrusb2: Attached sub-driver cx25840 [ 116.784841][ T2339] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 116.795056][ T2339] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 116.824001][ T975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.838072][ T975] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 116.847742][ T975] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.858447][ T975] usb 5-1: config 0 descriptor?? [ 116.928953][ T5874] usb 3-1: USB disconnect, device number 5 [ 117.275653][ T975] lua 0003:1E7D:2C2E.0006: item fetching failed at offset 0/5 [ 117.304339][ T975] lua 0003:1E7D:2C2E.0006: parse failed [ 117.311400][ T975] lua 0003:1E7D:2C2E.0006: probe with driver lua failed with error -22 [ 117.489166][ T975] usb 5-1: USB disconnect, device number 9 [ 117.572755][ T7187] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 118.165762][ T7203] netlink: 8 bytes leftover after parsing attributes in process `syz.4.589'. [ 118.473817][ T5874] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 118.662338][ T5874] usb 4-1: config 0 has an invalid interface number: 199 but max is 1 [ 118.673771][ T5874] usb 4-1: config 0 has no interface number 1 [ 118.679933][ T5874] usb 4-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 118.724201][ T5874] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 118.759113][ T5874] usb 4-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 118.774168][ T5874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 118.792467][ T5874] usb 4-1: SerialNumber: syz [ 118.804604][ T5874] usb 4-1: config 0 descriptor?? [ 118.843807][ T5875] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 119.014495][ T5875] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.034334][ T5874] usb 4-1: Found UVC 0.00 device (0002:0000) [ 119.041402][ T5875] usb 3-1: config 0 has no interfaces? [ 119.054138][ T5874] usb 4-1: No valid video chain found. [ 119.066486][ T5875] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 119.084306][ T5874] usb 4-1: USB disconnect, device number 6 [ 119.095751][ T5875] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.122912][ T5875] usb 3-1: config 0 descriptor?? [ 119.355359][ T5874] usb 3-1: USB disconnect, device number 6 [ 120.093452][ T978] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 120.384346][ T7248] netlink: 12 bytes leftover after parsing attributes in process `syz.2.608'. [ 120.424288][ T978] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.464655][ T978] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.513979][ T978] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 120.544844][ T978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.584375][ T978] usb 4-1: config 0 descriptor?? [ 121.016628][ T7258] netlink: 4 bytes leftover after parsing attributes in process `syz.1.613'. [ 121.069713][ T978] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 121.113864][ T978] cp2112 0003:10C4:EA90.0007: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 121.273270][ T978] cp2112 0003:10C4:EA90.0007: Part Number: 0x82 Device Version: 0xFE [ 121.474507][ T978] cp2112 0003:10C4:EA90.0007: error requesting SMBus config [ 121.509170][ T978] cp2112 0003:10C4:EA90.0007: probe with driver cp2112 failed with error -71 [ 121.546268][ T978] usb 4-1: USB disconnect, device number 7 [ 121.825261][ T7279] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 121.888744][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 121.906812][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 121.918201][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 121.934508][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 121.943287][ T55] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 121.955596][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 122.096467][ T3459] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 122.138011][ T3459] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.164172][ T7286] netlink: 28 bytes leftover after parsing attributes in process `syz.1.626'. [ 122.315960][ T3459] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 122.338910][ T3459] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.485377][ T3459] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 122.505579][ T3459] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.659889][ T3459] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 122.687983][ T3459] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.814105][ T5824] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 122.889994][ T7283] chnl_net:caif_netlink_parms(): no params data found [ 122.963573][ T3459] bridge_slave_1: left promiscuous mode [ 122.971792][ T3459] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.995208][ T3459] bridge_slave_0: left allmulticast mode [ 123.000917][ T3459] bridge_slave_0: left promiscuous mode [ 123.006993][ T3459] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.016447][ T5824] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.028977][ T5824] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.038969][ T5824] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 123.051337][ T5824] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.063940][ T5824] usb 3-1: config 0 descriptor?? [ 123.483034][ T5824] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 123.505431][ T5824] cp2112 0003:10C4:EA90.0008: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 123.693798][ T5824] cp2112 0003:10C4:EA90.0008: Part Number: 0x82 Device Version: 0xFE [ 123.749935][ T3459] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 123.778248][ T3459] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 123.797974][ T3459] bond0 (unregistering): Released all slaves [ 123.821403][ T7354] netlink: 64 bytes leftover after parsing attributes in process `syz.3.656'. [ 123.905039][ T5824] cp2112 0003:10C4:EA90.0008: error requesting SMBus config [ 123.935240][ T5824] cp2112 0003:10C4:EA90.0008: probe with driver cp2112 failed with error -71 [ 123.950260][ T5824] usb 3-1: USB disconnect, device number 7 [ 124.030345][ T5827] Bluetooth: hci0: command tx timeout [ 124.142537][ T7283] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.152185][ T7283] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.170727][ T7283] bridge_slave_0: entered allmulticast mode [ 124.195017][ T7283] bridge_slave_0: entered promiscuous mode [ 124.230230][ T7283] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.248063][ T7283] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.261716][ T7283] bridge_slave_1: entered allmulticast mode [ 124.271793][ T7283] bridge_slave_1: entered promiscuous mode [ 124.422412][ T7283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.448366][ T7283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.584875][ T3459] hsr_slave_0: left promiscuous mode [ 124.595118][ T3459] hsr_slave_1: left promiscuous mode [ 124.602136][ T3459] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.612118][ T3459] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.628523][ T3459] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.639696][ T3459] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.675871][ T3459] veth1_macvtap: left promiscuous mode [ 124.682869][ T3459] veth0_macvtap: left promiscuous mode [ 124.693217][ T3459] veth1_vlan: left promiscuous mode [ 124.705889][ T3459] veth0_vlan: left promiscuous mode [ 125.169675][ T7401] sg_read: process 324 (syz.4.677) changed security contexts after opening file descriptor, this is not allowed. [ 125.384095][ T3459] team0 (unregistering): Port device team_slave_1 removed [ 125.432264][ T3459] team0 (unregistering): Port device team_slave_0 removed [ 125.803275][ T7283] team0: Port device team_slave_0 added [ 125.816793][ T7384] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 125.885910][ T7283] team0: Port device team_slave_1 added [ 126.021339][ T7283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.053758][ T7283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.105940][ T5827] Bluetooth: hci0: command tx timeout [ 126.129385][ T7283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.194903][ T7283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.222275][ T7283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.302961][ T7283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.472454][ T7283] hsr_slave_0: entered promiscuous mode [ 126.482353][ T7283] hsr_slave_1: entered promiscuous mode [ 126.491278][ T5875] kernel write not supported for file /bluetooth/6lowpan_control (pid: 5875 comm: kworker/0:5) [ 126.508754][ T7283] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 126.526722][ T7283] Cannot create hsr debugfs directory [ 126.644996][ T7433] netlink: 4 bytes leftover after parsing attributes in process `syz.3.694'. [ 126.901058][ T7283] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 126.913015][ T7283] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 126.923299][ T7283] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 126.941529][ T7283] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 127.023994][ T5824] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 127.094351][ T7283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.146141][ T7283] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.178317][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.185504][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.206302][ T5824] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 127.215135][ T5824] usb 4-1: config 0 has no interface number 0 [ 127.221276][ T5824] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 127.236626][ T1136] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.243836][ T1136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.252519][ T5824] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.264922][ T5824] usb 4-1: config 0 descriptor?? [ 127.280437][ T5824] usb 4-1: selecting invalid altsetting 1 [ 127.297494][ T5824] dvb_ttusb_budget: ttusb_init_controller: error [ 127.314104][ T5824] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 127.483525][ T5824] DVB: Unable to find symbol cx22700_attach() [ 127.519116][ T5824] DVB: Unable to find symbol tda10046_attach() [ 127.526071][ T5824] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 127.541482][ T5824] usb 4-1: USB disconnect, device number 8 [ 127.611710][ T7283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.657159][ T7473] netlink: 'syz.1.708': attribute type 25 has an invalid length. [ 127.680012][ T7473] netlink: 'syz.1.708': attribute type 7 has an invalid length. [ 127.880149][ T5824] kernel write not supported for file /356/attr/exec (pid: 5824 comm: kworker/1:3) [ 127.916071][ T7283] veth0_vlan: entered promiscuous mode [ 127.953055][ T7283] veth1_vlan: entered promiscuous mode [ 128.000292][ T7283] veth0_macvtap: entered promiscuous mode [ 128.039887][ T7283] veth1_macvtap: entered promiscuous mode [ 128.091373][ T7283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.121325][ T7283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.139580][ T7283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.164487][ T5905] Process accounting resumed [ 128.180148][ T7283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.190645][ T5827] Bluetooth: hci0: command tx timeout [ 128.204524][ T7283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.215390][ T7283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.225799][ T7283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.236352][ T7283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.247831][ T7283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.263302][ T7283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.275028][ T7283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.286827][ T7283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.297900][ T7283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.308134][ T7283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.318828][ T7283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.344838][ T7283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.356924][ T7283] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.370094][ T7283] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.395850][ T7283] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.413758][ T7283] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.448657][ T7498] netdevsim netdevsim3: Direct firmware load for ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa failed with error -2 [ 128.480162][ T7504] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 128.502573][ T7498] netdevsim netdevsim3: Falling back to sysfs fallback for: ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 128.666408][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.703533][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.721442][ T7507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.764912][ T7507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.775267][ T7507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.790964][ T7507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.801235][ T7507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.812046][ T7507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.827181][ T7507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.840033][ T7507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.850342][ T7507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.854210][ T7514] netlink: 4 bytes leftover after parsing attributes in process `syz.2.726'. [ 128.860992][ T7507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.881575][ T7507] batadv_slave_0: entered promiscuous mode [ 128.888633][ T7507] batadv_slave_0: left promiscuous mode [ 128.949633][ T3459] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.974134][ T3459] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.434039][ T5824] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 129.595679][ T5824] usb 5-1: Using ep0 maxpacket: 16 [ 129.614815][ T5824] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.631530][ T5824] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.643982][ T5824] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 129.653853][ T5824] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.668992][ T5824] usb 5-1: config 0 descriptor?? [ 129.855120][ T5905] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 129.889333][ T30] kauditd_printk_skb: 121 callbacks suppressed [ 129.889348][ T30] audit: type=1326 audit(1741757742.365:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7558 comm="syz.2.747" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f213c78d169 code=0x0 [ 129.916609][ C0] vkms_vblank_simulate: vblank timer overrun [ 130.055762][ T5905] usb 2-1: Using ep0 maxpacket: 16 [ 130.068270][ T5905] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.081181][ T5905] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 130.098058][ T5905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.119342][ T5905] usb 2-1: config 0 descriptor?? [ 130.137143][ T5824] mcp2221 0003:04D8:00DD.0009: item fetching failed at offset 1/5 [ 130.155098][ T5824] mcp2221 0003:04D8:00DD.0009: can't parse reports [ 130.161765][ T5824] mcp2221 0003:04D8:00DD.0009: probe with driver mcp2221 failed with error -22 [ 130.264079][ T5827] Bluetooth: hci0: command tx timeout [ 130.366520][ T5874] usb 5-1: USB disconnect, device number 10 [ 130.368571][ T7575] bond0: option resend_igmp: invalid value (18446744071877857421) [ 130.374857][ T12] bond0: (slave bond_slave_0): interface is now down [ 130.387358][ T7575] bond0: option resend_igmp: allowed values 0 - 255 [ 130.396991][ T12] bond0: (slave bond_slave_1): interface is now down [ 130.411261][ T12] bond0: now running without any active interface! [ 130.511878][ T30] audit: type=1326 audit(1741757742.975:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7578 comm="syz.5.756" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6977d8d169 code=0x0 [ 130.551414][ T5905] mcp2221 0003:04D8:00DD.000A: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 130.630573][ T5905] gpio gpiochip0: gpiochip_add_data_with_key: get_direction failed: -38 [ 130.640424][ T5905] gpio gpiochip0: gpiochip_add_data_with_key: get_direction failed: -38 [ 130.649770][ T5905] gpio gpiochip0: gpiochip_add_data_with_key: get_direction failed: -38 [ 130.659367][ T5905] gpio gpiochip0: gpiochip_add_data_with_key: get_direction failed: -38 [ 131.001305][ T5905] usb 2-1: USB disconnect, device number 4 [ 131.264744][ T5824] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 131.434485][ T5824] usb 5-1: Using ep0 maxpacket: 16 [ 131.451251][ T5824] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.467722][ T5824] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.482962][ T5824] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 131.501704][ T5824] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 131.511955][ T5824] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.533025][ T5824] usb 5-1: config 0 descriptor?? [ 131.958398][ T5824] microsoft 0003:045E:07DA.000B: unknown main item tag 0x2 [ 131.987482][ T5824] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 132.007566][ T5824] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 132.027886][ T5824] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 132.049318][ T5824] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 132.072048][ T5824] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 132.090240][ T5824] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 132.098647][ T5824] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 132.106799][ T5824] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 132.130608][ T5824] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.000B/input/input12 [ 132.193905][ T5824] microsoft 0003:045E:07DA.000B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 132.214091][ T5824] usb 5-1: USB disconnect, device number 11 [ 132.827790][ T7644] netlink: 132 bytes leftover after parsing attributes in process `syz.1.786'. [ 133.150256][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.156746][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.527790][ T7675] netpci0: tun_chr_ioctl cmd 1074812118 [ 133.625288][ T7681] ceph: missing cluster fsid [ 133.630044][ T7681] ceph: separator ':' missing in source [ 133.875571][ T7696] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 134.712070][ T7730] capability: warning: `syz.5.825' uses deprecated v2 capabilities in a way that may be insecure [ 134.792124][ T7734] vivid-008: disconnect [ 134.806912][ T7732] vivid-008: reconnect [ 135.565209][ T7753] sp0: Synchronizing with TNC [ 135.931442][ T7765] netlink: 20 bytes leftover after parsing attributes in process `syz.3.839'. [ 136.683908][ T5904] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 136.853893][ T5905] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 136.876011][ T5904] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 136.886703][ T5904] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 136.898087][ T5904] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 136.924054][ T5904] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.932105][ T5904] usb 3-1: Product: syz [ 136.943521][ T5904] usb 3-1: Manufacturer: syz [ 136.948240][ T5904] usb 3-1: SerialNumber: syz [ 137.003423][ T30] audit: type=1326 audit(1741757749.465:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7770 comm="syz.3.842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1d678d169 code=0x7fc00000 [ 137.028359][ T30] audit: type=1326 audit(1741757749.465:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7770 comm="syz.3.842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe1d678d169 code=0x7fc00000 [ 137.051656][ T5905] usb 6-1: Using ep0 maxpacket: 8 [ 137.082010][ T5905] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.093416][ T5905] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.114897][ T30] audit: type=1326 audit(1741757749.465:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7770 comm="syz.3.842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1d678d169 code=0x7fc00000 [ 137.136621][ T5905] usb 6-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 137.164108][ T5905] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.183896][ T5905] usb 6-1: config 0 descriptor?? [ 137.196745][ T30] audit: type=1326 audit(1741757749.465:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7770 comm="syz.3.842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1d678d169 code=0x7fc00000 [ 137.241999][ T30] audit: type=1326 audit(1741757749.465:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7770 comm="syz.3.842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1d678d169 code=0x7fc00000 [ 137.305755][ T30] audit: type=1326 audit(1741757749.465:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7770 comm="syz.3.842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1d678d169 code=0x7fc00000 [ 137.333404][ T30] audit: type=1326 audit(1741757749.465:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7770 comm="syz.3.842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1d678d169 code=0x7fc00000 [ 137.355726][ T30] audit: type=1326 audit(1741757749.465:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7770 comm="syz.3.842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1d678d169 code=0x7fc00000 [ 137.377722][ T30] audit: type=1326 audit(1741757749.465:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7770 comm="syz.3.842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1d678d169 code=0x7fc00000 [ 137.421397][ T5904] usb 3-1: 0:2 : does not exist [ 137.427256][ T5905] usbhid 6-1:0.0: can't add hid device: -71 [ 137.436986][ T5905] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 137.446748][ T30] audit: type=1326 audit(1741757749.465:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7770 comm="syz.3.842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1d678d169 code=0x7fc00000 [ 137.471042][ T5905] usb 6-1: USB disconnect, device number 2 [ 137.828761][ T5875] usb 3-1: USB disconnect, device number 8 [ 138.170245][ T7843] tipc: Started in network mode [ 138.181124][ T7843] tipc: Node identity ff, cluster identity 4711 [ 138.189723][ T7843] tipc: Enabling of bearer rejected, failed to enable media [ 138.286293][ T7845] netlink: 12 bytes leftover after parsing attributes in process `syz.5.875'. [ 138.674635][ T7862] netlink: 4 bytes leftover after parsing attributes in process `syz.4.883'. [ 138.848984][ T7864] kvm: user requested TSC rate below hardware speed [ 139.211750][ T7886] input: syz0 as /devices/virtual/input/input14 [ 139.394877][ T7895] netlink: 8 bytes leftover after parsing attributes in process `syz.1.899'. [ 139.565936][ T7902] netlink: 20 bytes leftover after parsing attributes in process `syz.5.902'. [ 140.045666][ T7928] netlink: 'syz.4.915': attribute type 6 has an invalid length. [ 140.838954][ T7973] overlay: Unknown parameter 'uid<00000000000000060928' [ 140.862077][ T7974] netlink: 84 bytes leftover after parsing attributes in process `syz.4.934'. [ 141.052921][ T7985] netlink: 'syz.5.940': attribute type 10 has an invalid length. [ 141.093464][ T7985] veth0_vlan: left promiscuous mode [ 141.115003][ T7985] veth0_vlan: entered promiscuous mode [ 141.143318][ T7985] team0: Device veth0_vlan failed to register rx_handler [ 141.210726][ T7991] netlink: 'syz.2.943': attribute type 4 has an invalid length. [ 141.228055][ T7994] Invalid/unusable pipe [ 141.321766][ T7985] syz.5.940 (7985) used greatest stack depth: 18256 bytes left [ 141.416800][ T7999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.947'. [ 141.436167][ T7999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.947'. [ 142.009387][ T8027] ALSA: mixer_oss: invalid OSS volume '' [ 142.920424][ T8068] batadv_slave_1: entered promiscuous mode [ 142.935281][ T8068] batadv_slave_1: left promiscuous mode [ 143.121640][ T8078] capability: warning: `syz.2.983' uses 32-bit capabilities (legacy support in use) [ 143.524329][ T975] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 143.720138][ T975] usb 5-1: config 0 interface 0 altsetting 101 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.743773][ T975] usb 5-1: config 0 interface 0 has no altsetting 0 [ 143.761163][ T975] usb 5-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00 [ 143.774457][ T975] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.794661][ T975] usb 5-1: config 0 descriptor?? [ 143.904219][ T5874] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 143.995875][ T978] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 144.063868][ T5874] usb 4-1: Using ep0 maxpacket: 32 [ 144.081665][ T5874] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 144.101619][ T5874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.122848][ T5874] usb 4-1: config 0 descriptor?? [ 144.134416][ T5874] gspca_main: sunplus-2.14.0 probing 041e:400b [ 144.176297][ T978] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.208443][ T978] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 144.227683][ T975] holtek_mouse 0003:04D9:A072.000C: unknown main item tag 0x4 [ 144.233767][ T978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.241477][ T975] holtek_mouse 0003:04D9:A072.000C: unknown main item tag 0x3 [ 144.261108][ T978] usb 2-1: config 0 descriptor?? [ 144.274073][ T975] holtek_mouse 0003:04D9:A072.000C: hidraw0: USB HID v0.00 Device [HID 04d9:a072] on usb-dummy_hcd.4-1/input0 [ 144.430016][ T5905] usb 5-1: USB disconnect, device number 12 [ 144.506430][ T978] usbhid 2-1:0.0: can't add hid device: -71 [ 144.512473][ T978] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 144.532921][ T978] usb 2-1: USB disconnect, device number 5 [ 144.838043][ T8140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1014'. [ 144.961505][ T5874] gspca_sunplus: reg_w_riv err -71 [ 144.966922][ T5874] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 144.995465][ T5874] usb 4-1: USB disconnect, device number 9 [ 145.775480][ T8174] IPVS: persistence engine module ip_vs_pe_ not found [ 145.955934][ T8187] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 145.968432][ T8188] netlink: 'syz.3.1035': attribute type 10 has an invalid length. [ 146.030284][ T8188] veth0_vlan: left promiscuous mode [ 146.067546][ T8188] veth0_vlan: entered promiscuous mode [ 146.087356][ T8188] team0: Device veth0_vlan failed to register rx_handler [ 146.204007][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 146.371700][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 146.388574][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.413733][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.441743][ T10] usb 3-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 146.461345][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.476677][ T10] usb 3-1: config 0 descriptor?? [ 146.914898][ T10] uclogic 0003:5543:0003.000D: item fetching failed at offset 0/3 [ 146.941402][ T10] uclogic 0003:5543:0003.000D: parse failed [ 146.974691][ T10] uclogic 0003:5543:0003.000D: probe with driver uclogic failed with error -22 [ 147.138482][ T10] usb 3-1: USB disconnect, device number 9 [ 147.329377][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 147.329397][ T30] audit: type=1326 audit(1741757759.795:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8250 comm="syz.5.1066" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6977d8d169 code=0x0 [ 148.330997][ T30] audit: type=1800 audit(1741757760.805:221): pid=8306 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.1092" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 148.719920][ T8326] random: crng reseeded on system resumption [ 148.773789][ T978] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 148.827023][ T8329] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1103'. [ 148.843838][ T8329] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1103'. [ 148.864021][ T8329] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1103'. [ 148.958349][ T978] usb 4-1: config 7 has an invalid interface number: 34 but max is 0 [ 148.977235][ T978] usb 4-1: config 7 has no interface number 0 [ 148.997088][ T978] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db51, bcdDevice=5e.35 [ 149.006590][ T978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.022856][ T978] usb 4-1: Product: syz [ 149.036166][ T978] usb 4-1: Manufacturer: syz [ 149.046219][ T978] usb 4-1: SerialNumber: syz [ 149.488726][ T8346] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1110'. [ 149.833284][ T978] dvb-usb: found a 'DViCO FusionHDTV DVB-T Dual USB' in warm state. [ 149.887058][ T978] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 149.912108][ T8362] syz.1.1116: attempt to access beyond end of device [ 149.912108][ T8362] loop1: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 149.916410][ T978] dvb-usb: DViCO FusionHDTV DVB-T Dual USB error while loading driver (-19) [ 149.955571][ T978] dvb_usb_cxusb 4-1:7.34: probe with driver dvb_usb_cxusb failed with error -22 [ 149.964574][ T8362] XFS (loop1): SB validate failed with error -5. [ 150.044190][ T5874] usb 4-1: USB disconnect, device number 10 [ 150.723027][ T8397] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 150.733423][ T8397] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 150.778352][ T8397] vhci_hcd vhci_hcd.0: Device attached [ 150.796750][ T8400] vhci_hcd: connection closed [ 150.804173][ T12] vhci_hcd: stop threads [ 150.813202][ T12] vhci_hcd: release socket [ 150.853844][ T12] vhci_hcd: disconnect device [ 151.390119][ T8428] program syz.3.1141 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 151.770569][ T8445] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1149'. [ 151.783823][ T5874] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 151.801401][ T8445] bridge: RTM_NEWNEIGH with unconfigured vlan 16 on bridge0 [ 151.960010][ T5874] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 151.987564][ T5874] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.004936][ T5874] usb 4-1: Product: syz [ 152.009662][ T5874] usb 4-1: Manufacturer: syz [ 152.031543][ T5874] usb 4-1: SerialNumber: syz [ 152.059041][ T5874] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 152.101632][ T10] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 152.922305][ T8475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.938951][ T8475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.143922][ T10] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 153.171031][ T10] ath9k_htc: Failed to initialize the device [ 153.259828][ T10] usb 4-1: ath9k_htc: USB layer deinitialized [ 153.272635][ T975] usb 4-1: USB disconnect, device number 11 [ 153.291229][ T30] audit: type=1326 audit(1741757765.765:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8493 comm="syz.1.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8126f8d169 code=0x7ffc0000 [ 153.345337][ T8499] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1174'. [ 153.373556][ T30] audit: type=1326 audit(1741757765.765:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8493 comm="syz.1.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8126f8d169 code=0x7ffc0000 [ 153.442610][ T30] audit: type=1326 audit(1741757765.765:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8493 comm="syz.1.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f8126f8d169 code=0x7ffc0000 [ 153.505684][ T8506] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 153.523987][ T30] audit: type=1326 audit(1741757765.765:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8493 comm="syz.1.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8126f8d169 code=0x7ffc0000 [ 153.575827][ T30] audit: type=1326 audit(1741757765.765:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8493 comm="syz.1.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8126f8d169 code=0x7ffc0000 [ 153.637959][ T30] audit: type=1326 audit(1741757765.765:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8493 comm="syz.1.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7f8126f8d169 code=0x7ffc0000 [ 153.702450][ T30] audit: type=1326 audit(1741757765.765:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8493 comm="syz.1.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8126f8d169 code=0x7ffc0000 [ 153.732166][ T30] audit: type=1326 audit(1741757765.765:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8493 comm="syz.1.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8126f8d169 code=0x7ffc0000 [ 153.765556][ T8514] tipc: Enabling of bearer rejected, already enabled [ 153.844822][ T8518] vivid-004: disconnect [ 153.856477][ T8517] vivid-004: reconnect [ 154.500404][ T8549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1198'. [ 156.130543][ T8638] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1241'. [ 156.140004][ T8638] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1241'. [ 156.152563][ T8638] netlink: 'syz.3.1241': attribute type 20 has an invalid length. [ 156.264711][ T8640] netlink: 'syz.2.1242': attribute type 3 has an invalid length. [ 156.272498][ T8640] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1242'. [ 156.311814][ T8645] 9p: Unknown uid 00000000004294967295 [ 156.498172][ T30] audit: type=1326 audit(1741757768.975:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8651 comm="syz.3.1247" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe1d678d169 code=0x0 [ 157.166377][ T8685] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1262'. [ 157.259905][ T8689] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1265'. [ 157.484654][ T8698] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1269'. [ 157.863921][ T8710] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1276'. [ 157.890950][ T8710] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1276'. [ 157.942134][ T8710] vlan2: entered allmulticast mode [ 158.056284][ T8721] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1280'. [ 158.596973][ T975] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 158.776216][ T975] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 158.803834][ T975] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.843235][ T975] usb 2-1: config 0 descriptor?? [ 159.094497][ T975] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 159.103052][ T975] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 159.134072][ T975] [drm:udl_init] *ERROR* Selecting channel failed [ 159.168443][ T975] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 159.223971][ T975] [drm] Initialized udl on minor 2 [ 159.232405][ T975] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 159.283504][ T975] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 159.316530][ T5874] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 159.335061][ T975] usb 2-1: USB disconnect, device number 6 [ 159.342263][ T5874] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 159.925158][ T8768] tipc: Started in network mode [ 159.930218][ T8768] tipc: Node identity ac14140f, cluster identity 4711 [ 159.950710][ T8768] tipc: New replicast peer: 255.255.255.255 [ 159.969061][ T8768] tipc: Enabled bearer , priority 10 [ 160.970394][ T8805] netlink: 165 bytes leftover after parsing attributes in process `syz.1.1312'. [ 161.084247][ T10] tipc: Node number set to 2886997007 [ 161.830919][ T8846] sctp: [Deprecated]: syz.1.1331 (pid 8846) Use of struct sctp_assoc_value in delayed_ack socket option. [ 161.830919][ T8846] Use struct sctp_sack_info instead [ 161.865118][ T8849] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 161.967972][ T8855] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 164.962614][ T55] Bluetooth: hci0: Invalid handle: 0x9500 > 0x0eff [ 165.143186][ T1136] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.349745][ T1136] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.535440][ T1136] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.692525][ T1136] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.836198][ T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 165.849566][ T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 165.870828][ T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 165.883239][ T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 165.894435][ T55] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 165.911602][ T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 165.982593][ T1136] bridge_slave_1: left allmulticast mode [ 165.999576][ T1136] bridge_slave_1: left promiscuous mode [ 166.027191][ T1136] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.065087][ T1136] bridge_slave_0: left allmulticast mode [ 166.074041][ T1136] bridge_slave_0: left promiscuous mode [ 166.080173][ T1136] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.659880][ T1136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.673428][ T1136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.691607][ T1136] bond0 (unregistering): Released all slaves [ 166.770022][ T1136] tipc: Disabling bearer [ 166.787032][ T1136] tipc: Left network mode [ 166.885358][ T8966] chnl_net:caif_netlink_parms(): no params data found [ 167.258158][ T9008] sctp: [Deprecated]: syz.1.1404 (pid 9008) Use of struct sctp_assoc_value in delayed_ack socket option. [ 167.258158][ T9008] Use struct sctp_sack_info instead [ 167.275260][ T1136] hsr_slave_0: left promiscuous mode [ 167.330324][ T1136] hsr_slave_1: left promiscuous mode [ 167.347503][ T1136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.362149][ T1136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.424353][ T1136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.431825][ T1136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.508552][ T1136] veth1_macvtap: left promiscuous mode [ 167.521741][ T1136] veth0_macvtap: left promiscuous mode [ 167.528282][ T1136] veth1_vlan: left promiscuous mode [ 167.533607][ T1136] veth0_vlan: left promiscuous mode [ 167.851095][ T9033] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 168.023830][ T55] Bluetooth: hci1: command tx timeout [ 168.110120][ T9041] xt_CT: No such helper "snmp" [ 168.628449][ T1136] team0 (unregistering): Port device team_slave_1 removed [ 168.761723][ T1136] team0 (unregistering): Port device team_slave_0 removed [ 169.492580][ T8966] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.503091][ T8966] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.510660][ T8966] bridge_slave_0: entered allmulticast mode [ 169.518263][ T8966] bridge_slave_0: entered promiscuous mode [ 169.526923][ T9073] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 169.538966][ T8966] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.554610][ T8966] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.561852][ T8966] bridge_slave_1: entered allmulticast mode [ 169.569129][ T8966] bridge_slave_1: entered promiscuous mode [ 170.111643][ T55] Bluetooth: hci1: command tx timeout [ 170.199808][ T8966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.267965][ T8966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.401124][ T8966] team0: Port device team_slave_0 added [ 170.437320][ T8966] team0: Port device team_slave_1 added [ 170.589522][ T8966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.597233][ T8966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.603915][ T975] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 170.643460][ T8966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.689367][ T8966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.703729][ T8966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.764141][ T8966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.815686][ T975] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 170.834570][ T975] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.857705][ T975] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 170.858567][ T8966] hsr_slave_0: entered promiscuous mode [ 170.877999][ T975] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.883745][ T8966] hsr_slave_1: entered promiscuous mode [ 170.906397][ T975] usb 2-1: config 0 descriptor?? [ 170.923174][ T975] hub 2-1:0.0: USB hub found [ 170.953008][ T9112] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 170.973774][ T9112] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 170.992413][ T9112] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 171.134708][ T975] hub 2-1:0.0: 1 port detected [ 171.390109][ T8966] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 171.400525][ T8966] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 171.417124][ T8966] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 171.435161][ T8966] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 171.544676][ T975] usb 2-1: USB disconnect, device number 7 [ 171.609349][ T8966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.640157][ T8966] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.659712][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.666908][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.694967][ T3459] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.702111][ T3459] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.762674][ T9126] netlink: 'syz.4.1456': attribute type 1 has an invalid length. [ 171.784211][ T9126] netlink: 'syz.4.1456': attribute type 3 has an invalid length. [ 171.792582][ T9126] netlink: 216 bytes leftover after parsing attributes in process `syz.4.1456'. [ 171.826192][ T9126] NCSI netlink: No device for ifindex 813332851 [ 171.970613][ T975] IPVS: starting estimator thread 0... [ 172.046976][ T8966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.064083][ T9137] IPVS: using max 25 ests per chain, 60000 per kthread [ 172.157474][ T8966] veth0_vlan: entered promiscuous mode [ 172.187563][ T8966] veth1_vlan: entered promiscuous mode [ 172.187640][ T55] Bluetooth: hci1: command tx timeout [ 172.276345][ T8966] veth0_macvtap: entered promiscuous mode [ 172.302839][ T8966] veth1_macvtap: entered promiscuous mode [ 172.379566][ T8966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.390413][ T8966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.402119][ T8966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.439799][ T8966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.465015][ T8966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.482897][ T8966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.495474][ T8966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.512248][ T8966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.539997][ T8966] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.552548][ T8966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.568520][ T8966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.580358][ T8966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.599830][ T8966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.622656][ T8966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.635209][ T8966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.656628][ T8966] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.701519][ T8966] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.724745][ T8966] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.733493][ T8966] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.784105][ T8966] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.986515][ T1136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.015335][ T1136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.076526][ T3459] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.102631][ T3459] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.109037][ T9218] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1497'. [ 174.149026][ T9220] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1498'. [ 174.264446][ T55] Bluetooth: hci1: command tx timeout [ 175.418999][ T9274] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1524'. [ 175.440843][ T9274] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1524'. [ 175.598218][ T9283] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1528'. [ 175.614063][ T5905] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 175.787469][ T5905] usb 4-1: Using ep0 maxpacket: 8 [ 175.803397][ T5905] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 175.823778][ T5905] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 175.843990][ T5905] usb 4-1: config 0 has no interface number 0 [ 175.850148][ T5905] usb 4-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 175.874858][ T5905] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 175.886583][ T5905] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 175.906298][ T5905] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 175.950278][ T5905] usb 4-1: config 0 interface 52 has no altsetting 0 [ 175.960375][ T5905] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 175.983717][ T5905] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.007013][ T5905] usb 4-1: config 0 descriptor?? [ 176.228816][ T5905] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.52/input/input15 [ 176.457357][ T5874] usb 4-1: USB disconnect, device number 12 [ 176.877366][ T9309] netlink: 'syz.1.1540': attribute type 6 has an invalid length. [ 176.885495][ T9309] bond0: option use_carrier: invalid value (255) [ 178.967573][ T30] audit: type=1800 audit(1741757791.445:231): pid=9402 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.1577" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 179.468054][ T9426] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1593'. [ 179.739921][ T9439] vxcan1: tx address claim with dest, not broadcast [ 179.961947][ T9447] tun0: tun_chr_ioctl cmd 1074025678 [ 179.985130][ T9447] tun0: group set to 0 [ 180.051730][ T9453] 9pnet_fd: Insufficient options for proto=fd [ 180.479873][ T9473] syz.1.1616 uses obsolete (PF_INET,SOCK_PACKET) [ 180.839724][ T9489] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1622'. [ 181.421690][ T9516] netlink: 'syz.2.1634': attribute type 46 has an invalid length. [ 181.453887][ T9516] netlink: 212868 bytes leftover after parsing attributes in process `syz.2.1634'. [ 181.952662][ T9532] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.434132][ T9554] syzkaller0: tun_chr_ioctl cmd 3288896564 [ 182.750741][ T9568] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1659'. [ 183.201432][ T30] audit: type=1326 audit(1741757795.675:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9593 comm="syz.2.1672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94438d169 code=0x7ffc0000 [ 183.265534][ T30] audit: type=1326 audit(1741757795.675:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9593 comm="syz.2.1672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94438d169 code=0x7ffc0000 [ 183.334217][ T30] audit: type=1326 audit(1741757795.695:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9593 comm="syz.2.1672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7fc94438d169 code=0x7ffc0000 [ 183.411272][ T30] audit: type=1326 audit(1741757795.705:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9593 comm="syz.2.1672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94438d169 code=0x7ffc0000 [ 183.447816][ T30] audit: type=1326 audit(1741757795.705:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9593 comm="syz.2.1672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94438d169 code=0x7ffc0000 [ 183.723885][ T5874] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 183.903735][ T5874] usb 5-1: Using ep0 maxpacket: 16 [ 183.911038][ T5874] usb 5-1: config 0 has an invalid interface number: 4 but max is 0 [ 183.922408][ T5874] usb 5-1: config 0 has no interface number 0 [ 183.934149][ T5874] usb 5-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.945587][ T5874] usb 5-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.957215][ T5874] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 183.979449][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.001693][ T5874] usb 5-1: config 0 descriptor?? [ 184.459769][ T5874] hid (null): bogus close delimiter [ 184.475432][ T5874] hid (null): unknown global tag 0xc [ 184.637343][ T9662] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1703'. [ 184.671683][ T5874] usb 5-1: USB disconnect, device number 13 [ 185.037208][ T30] audit: type=1326 audit(1741757797.515:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9678 comm="syz.2.1712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94438d169 code=0x7ffc0000 [ 185.058688][ C1] vkms_vblank_simulate: vblank timer overrun [ 185.102482][ T30] audit: type=1326 audit(1741757797.555:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9678 comm="syz.2.1712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7fc94438d169 code=0x7ffc0000 [ 185.123980][ C1] vkms_vblank_simulate: vblank timer overrun [ 185.161990][ T30] audit: type=1326 audit(1741757797.555:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9678 comm="syz.2.1712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94438d169 code=0x7ffc0000 [ 185.222832][ T30] audit: type=1326 audit(1741757797.555:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9678 comm="syz.2.1712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94438d169 code=0x7ffc0000 [ 185.262434][ T30] audit: type=1326 audit(1741757797.555:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9678 comm="syz.2.1712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fc94438d169 code=0x7ffc0000 [ 185.375547][ T30] audit: type=1326 audit(1741757797.555:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9678 comm="syz.2.1712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94438d169 code=0x7ffc0000 [ 185.376841][ T9688] geneve2: entered promiscuous mode [ 185.450595][ T9688] geneve2: entered allmulticast mode [ 185.455983][ T30] audit: type=1326 audit(1741757797.555:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9678 comm="syz.2.1712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94438d169 code=0x7ffc0000 [ 185.456023][ T30] audit: type=1326 audit(1741757797.555:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9678 comm="syz.2.1712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fc94438d169 code=0x7ffc0000 [ 185.456050][ T30] audit: type=1326 audit(1741757797.555:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9678 comm="syz.2.1712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94438d169 code=0x7ffc0000 [ 185.456111][ T30] audit: type=1326 audit(1741757797.555:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9678 comm="syz.2.1712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94438d169 code=0x7ffc0000 [ 185.542828][ C1] vkms_vblank_simulate: vblank timer overrun [ 185.817752][ T9700] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1720'. [ 186.629306][ T9732] veth0_virt_wifi: entered allmulticast mode [ 186.640510][ T9731] veth0_virt_wifi: left allmulticast mode [ 188.328544][ T9807] mkiss: ax0: crc mode is auto. [ 188.672730][ T9829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1778'. [ 188.805482][ T9836] netlink: 'syz.5.1780': attribute type 1 has an invalid length. [ 189.524946][ T978] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 189.696071][ T978] usb 2-1: config 0 has an invalid interface number: 120 but max is 0 [ 189.714166][ T978] usb 2-1: config 0 has no interface number 0 [ 189.720544][ T978] usb 2-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 189.742761][ T978] usb 2-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 189.752204][ T978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.775646][ T978] usb 2-1: config 0 descriptor?? [ 189.791632][ T978] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.120/input/input16 [ 190.013578][ T978] usb 2-1: USB disconnect, device number 8 [ 190.489499][ T9916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1817'. [ 190.513138][ T9916] bridge0: entered promiscuous mode [ 190.553878][ T9916] macsec1: entered promiscuous mode [ 191.217330][ T9949] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1833'. [ 191.543815][ T5832] Bluetooth: hci2: command 0x0406 tx timeout [ 191.550218][ T5831] Bluetooth: hci3: command 0x0406 tx timeout [ 191.839201][ T9979] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1846'. [ 193.059070][T10034] netlink: 'syz.2.1870': attribute type 3 has an invalid length. [ 193.309867][T10046] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 193.352341][T10051] sch_fq: defrate 2 ignored. [ 193.542985][T10061] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1879'. [ 193.587946][T10061] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1879'. [ 193.639576][T10061] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1879'. [ 193.660980][T10067] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1883'. [ 193.984855][T10086] ucma_write: process 859 (syz.4.1892) changed security contexts after opening file descriptor, this is not allowed. [ 194.579372][T10111] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 194.596397][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.602751][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.615402][T10111] syzkaller0: linktype set to 769 [ 195.778869][T10172] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 195.817251][T10177] netlink: 'syz.2.1932': attribute type 21 has an invalid length. [ 195.841737][T10177] netlink: 'syz.2.1932': attribute type 1 has an invalid length. [ 195.878470][T10177] netlink: 16050 bytes leftover after parsing attributes in process `syz.2.1932'. [ 195.888132][ T55] Bluetooth: hci3: Malformed LE Event: 0x1d [ 195.965363][ T30] audit: type=1326 audit(1741757808.435:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10183 comm="syz.4.1936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb2e58d169 code=0x7ffc0000 [ 196.043784][ T30] audit: type=1326 audit(1741757808.435:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10183 comm="syz.4.1936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb2e58d169 code=0x7ffc0000 [ 196.114109][ T30] audit: type=1326 audit(1741757808.435:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10183 comm="syz.4.1936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fbb2e58d169 code=0x7ffc0000 [ 196.163738][ T30] audit: type=1326 audit(1741757808.435:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10183 comm="syz.4.1936" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbb2e58d169 code=0x0 [ 196.685567][ T1136] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.779099][ T1136] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.931404][ T1136] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.111236][ T1136] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.333099][ T1136] bridge_slave_0: left promiscuous mode [ 197.352737][ T1136] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.390752][ T5827] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 197.403282][ T5827] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 197.413090][ T5827] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 197.422465][ T5827] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 197.430248][ T5827] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 197.437946][ T5827] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 197.827521][ T1136] team0: Port device geneve0 removed [ 197.883756][ T10] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 198.031943][ T1136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.045225][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.058335][ T1136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.067099][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.077426][ T10] usb 5-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 198.091066][ T1136] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 198.102308][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.111377][ T1136] bond0 (unregistering): Released all slaves [ 198.122973][ T10] usb 5-1: config 0 descriptor?? [ 198.130607][T10233] netlink: 'syz.2.1959': attribute type 21 has an invalid length. [ 198.145255][T10233] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1959'. [ 198.170594][T10233] netlink: 'syz.2.1959': attribute type 4 has an invalid length. [ 198.199127][T10233] netlink: 'syz.2.1959': attribute type 5 has an invalid length. [ 198.208021][T10233] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1959'. [ 198.546863][ T10] sony 0003:054C:024B.000F: unexpected long global item [ 198.562191][ T10] sony 0003:054C:024B.000F: parse failed [ 198.568155][ T10] sony 0003:054C:024B.000F: probe with driver sony failed with error -22 [ 198.767008][ T10] usb 5-1: USB disconnect, device number 14 [ 198.828947][T10230] chnl_net:caif_netlink_parms(): no params data found [ 199.041207][T10230] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.059693][T10230] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.073030][T10230] bridge_slave_0: entered allmulticast mode [ 199.087009][T10230] bridge_slave_0: entered promiscuous mode [ 199.101353][T10291] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1984'. [ 199.115190][T10230] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.153805][T10230] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.167820][T10230] bridge_slave_1: entered allmulticast mode [ 199.190114][T10230] bridge_slave_1: entered promiscuous mode [ 199.261230][T10230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.303400][T10230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.470827][T10302] 9pnet_fd: Insufficient options for proto=fd [ 199.470945][T10230] team0: Port device team_slave_0 added [ 199.535364][T10230] team0: Port device team_slave_1 added [ 199.545143][ T5827] Bluetooth: hci4: command tx timeout [ 199.610291][ T1136] tipc: Disabling bearer [ 199.616048][ T1136] tipc: Left network mode [ 199.691705][T10230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.698922][T10230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.799077][T10230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.852986][T10308] netlink: 'syz.5.1993': attribute type 14 has an invalid length. [ 200.120279][T10230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.162260][T10230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.240199][T10230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.730289][T10230] hsr_slave_0: entered promiscuous mode [ 200.749067][T10230] hsr_slave_1: entered promiscuous mode [ 200.770399][T10230] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 200.791529][T10230] Cannot create hsr debugfs directory [ 200.934972][ T1136] hsr_slave_0: left promiscuous mode [ 200.948364][ T1136] hsr_slave_1: left promiscuous mode [ 200.963820][ T1136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.981717][ T1136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.999530][ T1136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.010397][ T1136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.052146][ T1136] bridge_slave_0: left allmulticast mode [ 201.058255][ T1136] veth1_macvtap: left promiscuous mode [ 201.063975][ T1136] veth0_macvtap: left promiscuous mode [ 201.069691][ T1136] veth1_vlan: left promiscuous mode [ 201.604137][ T5905] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 201.635274][ T5827] Bluetooth: hci4: command tx timeout [ 201.795518][ T5905] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 201.813114][ T5905] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 201.837040][ T5905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.861148][ T1136] team0 (unregistering): Port device team_slave_1 removed [ 201.868499][ T5905] usb 5-1: config 0 descriptor?? [ 201.876794][ T5905] pwc: Askey VC010 type 2 USB webcam detected. [ 201.929621][ T1136] team0 (unregistering): Port device team_slave_0 removed [ 202.505485][ T5905] pwc: recv_control_msg error -32 req 02 val 2700 [ 202.512555][ T5905] pwc: recv_control_msg error -71 req 02 val 2c00 [ 202.539866][ T5905] pwc: recv_control_msg error -71 req 04 val 1000 [ 202.559333][ T5905] pwc: recv_control_msg error -71 req 04 val 1300 [ 202.569447][ T5905] pwc: recv_control_msg error -71 req 04 val 1400 [ 202.577134][ T5905] pwc: recv_control_msg error -71 req 02 val 2000 [ 202.584179][ T5905] pwc: recv_control_msg error -71 req 02 val 2100 [ 202.591090][ T5905] pwc: recv_control_msg error -71 req 04 val 1500 [ 202.599187][ T5905] pwc: recv_control_msg error -71 req 02 val 2500 [ 202.606230][ T5905] pwc: recv_control_msg error -71 req 02 val 2400 [ 202.613312][ T5905] pwc: recv_control_msg error -71 req 02 val 2600 [ 202.620522][ T5905] pwc: recv_control_msg error -71 req 02 val 2900 [ 202.627540][ T5905] pwc: recv_control_msg error -71 req 02 val 2800 [ 202.639638][ T5905] pwc: recv_control_msg error -71 req 04 val 1100 [ 202.646758][ T5905] pwc: recv_control_msg error -71 req 04 val 1200 [ 202.698517][ T5905] pwc: Registered as video103. [ 202.713012][ T5905] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input17 [ 202.727718][ T5905] usb 5-1: USB disconnect, device number 15 [ 202.762988][T10354] netlink: 'syz.2.2011': attribute type 12 has an invalid length. [ 202.772610][T10354] netlink: 'syz.2.2011': attribute type 29 has an invalid length. [ 202.781896][T10354] netlink: 'syz.2.2011': attribute type 2 has an invalid length. [ 202.790673][T10354] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2011'. [ 203.183190][T10230] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 203.220791][T10230] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 203.275447][T10230] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 203.305037][T10230] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 203.497352][T10230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.541815][T10230] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.553800][ T5875] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 203.564806][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.573214][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.626163][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.633318][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.704612][ T5827] Bluetooth: hci4: command tx timeout [ 203.743747][ T5875] usb 2-1: Using ep0 maxpacket: 16 [ 203.765055][ T5875] usb 2-1: config 8 has an invalid interface number: 39 but max is 0 [ 203.783606][ T5875] usb 2-1: config 8 has no interface number 0 [ 203.789898][ T5875] usb 2-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 203.840008][ T5875] usb 2-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 203.893765][ T5875] usb 2-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 203.923697][ T5875] usb 2-1: config 8 interface 39 has no altsetting 0 [ 203.955376][ T5875] usb 2-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 203.964708][ T5875] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.972727][ T5875] usb 2-1: Product: syz [ 203.999732][ T5875] usb 2-1: Manufacturer: syz [ 204.016284][ T5875] usb 2-1: SerialNumber: syz [ 204.073356][T10230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.204957][ T5824] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 204.366792][ T5824] usb 3-1: config 1 has an invalid descriptor of length 105, skipping remainder of the config [ 204.391493][ T5824] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 204.415047][ T5824] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 204.441828][ T5824] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 204.462719][ T5824] usb 3-1: SerialNumber: syz [ 204.543100][T10230] veth0_vlan: entered promiscuous mode [ 204.564591][T10230] veth1_vlan: entered promiscuous mode [ 204.605390][T10230] veth0_macvtap: entered promiscuous mode [ 204.621589][T10230] veth1_macvtap: entered promiscuous mode [ 204.657517][T10230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.678570][ T5875] ipheth 2-1:8.39: ipheth_enable_ncm: usb_control_msg: 0 [ 204.684349][ T5824] usb 3-1: 0:2 : does not exist [ 204.695052][T10230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.705424][T10230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.713025][ T5824] usb 3-1: USB disconnect, device number 10 [ 204.715986][T10230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.716011][T10230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.716027][T10230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.716043][T10230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.716056][T10230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.717182][T10230] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.790034][ T5875] ipheth 2-1:8.39: Apple iPhone USB Ethernet device attached [ 204.815919][T10230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.843975][T10230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.863708][T10230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.878015][T10230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.902408][ T10] usb 2-1: USB disconnect, device number 9 [ 204.923897][T10230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.934442][T10230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.945393][T10230] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.981372][T10230] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.992220][T10230] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.001069][T10230] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.010556][T10230] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.049612][ T10] ipheth 2-1:8.39: Apple iPhone USB Ethernet now disconnected [ 205.197004][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.213557][T10461] netlink: 'syz.4.2057': attribute type 1 has an invalid length. [ 205.228707][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.243906][T10461] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2057'. [ 205.334965][ T1136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.346750][ T1136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.785400][ T5827] Bluetooth: hci4: command tx timeout [ 205.836114][T10481] syz.4.2065 (10481) used greatest stack depth: 17824 bytes left [ 206.149521][T10493] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2070'. [ 206.508043][T10506] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 206.997267][T10533] overlay: Unknown parameter ' [ 206.997267][T10533] time [ 206.997267][T10533] string [ 206.997267][T10533] statistic [ 206.997267][T10533] state [ 206.997267][T10533] realm [ 206.997267][T10533] rateest [ 206.997267][T10533] quota [ 206.997267][T10533] pkttype [ 206.997267][T10533] physdev [ 206.997267][T10533] cgroup [ 206.997267][T10533] cgroup [ 206.997267][T10533] cgroup [ 206.997267][T10533] owner [ 206.997267][T10533] nfacct [ 206.997267][T10533] nfacct [ 206.997267][T10533] mac [ 206.997267][T10533] limit [ 206.997267][T10533] ipvs [ 206.997267][T10533] helper [ 206.997267][T10533] devgroup [ 206.997267][T10533] cpu [ 206.997267][T10533] conntrack [ 206.997267][T10533] conntrack [ 206.997267][T10533] conntrack [ 206.997267][T10533] connlabel [ 206.997267][T10533] connbytes [ 206.997267][T10533] comment [ 206.997267][T10533] bpf [ 206.997267][T10533] bpf [ 206.997267][T10533] connmark [ 206.997267][T10533] mark [ 206.997267][T10533] rpfilter [ 206.997267][T10533] ah [ 206.997267][T10533] tcpmss [ 206.997267][T10533] socket [ 206.997267][T10533] socket [ 206.997267][T10533] socket [ 206.997267][T10533] socket [ 206.997267][T10533] sctp [ 206.997267][T10533] recent [ 206.997267][T10533] recent [ 206.997267][T10533] policy [ 206.997267][T10533] osf [ 206.997267][T10533] multiport [ 206.997267][T10533] length [ 206.997267][T10533] l2tp [ 206.997267][T10533] iprange [ 206.997267][T10533] ipcomp [ 206.997267][T10533] ttl [ 206.997267][T10533] hashlimit [ 206.997267][T10533] hashlimit [ 206.997267][T10533] hashlimit [ 206.997267][T10533] esp [ 206.997267][T10533] ecn [ 206.997267][T10533] tos [ 206.997267][T10533] dscp [ 206.997267][T10533] dccp [ 206.997267][T10533] connlimit [ 206.997267][T10533] cluster [ 206.997267][T10533] addrtype [ 206.997267][T10533] addrtype [ 206.997267][T10533] set [ 206.997267][T10533] set [ 206.997267][T10533] set [ 206.997267][T10533] set [ 206.997267][T10533] set [ 206.997267][T10533] icmp [ 207.587841][T10546] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 207.850620][T10560] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2099'. [ 208.075634][T10566] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2102'. [ 210.488347][T10678] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.317951][T10721] 9pnet_fd: Insufficient options for proto=fd [ 212.212750][T10756] overlayfs: failed to clone upperpath [ 212.533086][T10761] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2191'. [ 212.559681][T10761] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2191'. [ 212.713605][T10763] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2192'. [ 212.763967][T10763] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2192'. [ 212.792757][T10763] bridge0: port 3(vlan3) entered blocking state [ 212.814007][T10763] bridge0: port 3(vlan3) entered disabled state [ 212.827616][T10763] vlan3: entered allmulticast mode [ 212.851433][T10763] vlan3: left allmulticast mode [ 214.680730][T10859] team0: No ports can be present during mode change [ 214.772929][ T30] audit: type=1326 audit(1741757827.245:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10860 comm="syz.2.2238" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc94438d169 code=0x0 [ 215.087791][T10871] netlink: 88 bytes leftover after parsing attributes in process `syz.5.2241'. [ 216.774499][T10944] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2276'. [ 216.983220][ T30] audit: type=1400 audit(1741757829.455:252): lsm=SMACK fn=smack_key_permission action=denied subject="w" object="_" requested=w pid=10952 comm="syz.2.2281" key_serial=824049870 key_desc="_uid_ses.0" [ 217.605687][T10976] netlink: 'syz.1.2289': attribute type 10 has an invalid length. [ 217.622224][T10976] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.658998][ C0] hrtimer: interrupt took 44868 ns [ 218.331659][T11014] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2307'. [ 218.606590][T11024] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2313'. [ 219.256514][T11058] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2328'. [ 219.677178][T11082] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2340'. [ 219.693728][ T10] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 219.898832][ T10] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 219.914796][ T10] usb 3-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 219.925429][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 219.934735][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 219.949111][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 219.969633][ T10] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 219.999960][ T10] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 220.015865][ T10] usb 3-1: Product: syz [ 220.020088][ T10] usb 3-1: Manufacturer: syz [ 220.032966][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 220.038812][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 220.062376][ T10] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 220.072916][ T10] cdc_wdm 3-1:1.0: Unknown control protocol [ 220.263582][ T5876] usb 3-1: USB disconnect, device number 11 [ 220.403819][ T10] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 220.564032][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 220.581461][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 220.599868][ T10] usb 5-1: New USB device found, idVendor=056a, idProduct=037a, bcdDevice= 0.00 [ 220.623761][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.644575][ T10] usb 5-1: config 0 descriptor?? [ 221.072229][ T10] wacom 0003:056A:037A.0010: Unknown device_type for 'HID 056a:037a'. Assuming pen. [ 221.099446][ T10] wacom 0003:056A:037A.0010: hidraw0: USB HID v0.07 Device [HID 056a:037a] on usb-dummy_hcd.4-1/input0 [ 221.131014][ T10] input: Wacom One by Wacom S Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:037A.0010/input/input18 [ 221.315821][ T10] usb 5-1: USB disconnect, device number 16 [ 221.643941][T11146] Â: renamed from pim6reg1 [ 223.223961][ T5873] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 223.375765][ T5873] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 223.414733][ T5873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 223.451062][ T5873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 223.491506][ T5873] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 223.534811][ T5873] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 223.544365][ T5873] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 223.561443][ T5873] usb 3-1: Manufacturer: syz [ 223.570299][ T5873] usb 3-1: config 0 descriptor?? [ 223.843710][ T5873] rc_core: IR keymap rc-hauppauge not found [ 223.849674][ T5873] Registered IR keymap rc-empty [ 223.874732][ T5873] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 223.893865][ T5873] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 223.914530][ T5873] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 223.933105][ T5873] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input21 [ 223.970962][ T5873] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 224.020124][ T5873] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 224.033831][ T5876] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 224.073862][ T5873] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 224.093956][ T5873] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 224.116850][ T5873] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 224.143818][ T5873] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 224.163880][ T5873] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 224.184268][ T5873] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 224.195884][ T5876] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 224.206701][ T5873] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 224.214874][ T5876] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 224.228825][ T5876] usb 5-1: New USB device found, idVendor=04e6, idProduct=1010, bcdDevice=6f.3b [ 224.238313][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.246684][ T5873] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 224.254406][ T5876] usb 5-1: Product: syz [ 224.258669][ T5876] usb 5-1: Manufacturer: syz [ 224.263352][ T5876] usb 5-1: SerialNumber: syz [ 224.270400][ T5876] usb 5-1: config 0 descriptor?? [ 224.275550][ T5873] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 224.286645][ T5876] ums-usbat 5-1:0.0: USB Mass Storage device detected [ 224.295007][ T5873] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 224.304723][ T5873] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 224.321900][ T5876] ums-usbat 5-1:0.0: Quirks match for vid 04e6 pid 1010: 1 [ 224.336913][ T5873] usb 3-1: USB disconnect, device number 12 [ 224.515554][ T5876] usb 5-1: USB disconnect, device number 17 [ 224.770601][T11281] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 224.874381][T11285] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.456334][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 226.012221][T11345] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2460'. [ 228.567599][T11437] netlink: 'syz.4.2499': attribute type 9 has an invalid length. [ 228.592277][T11437] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2499'. [ 228.622059][T11437] hsr0: entered promiscuous mode [ 228.628491][T11437] macvlan2: entered promiscuous mode [ 228.642803][T11437] macvlan2: entered allmulticast mode [ 228.652546][T11437] hsr0: entered allmulticast mode [ 228.657770][T11437] hsr_slave_0: entered allmulticast mode [ 228.673789][T11437] hsr_slave_1: entered allmulticast mode [ 228.903941][T11446] geneve2: entered promiscuous mode [ 228.909304][T11446] geneve2: entered allmulticast mode [ 229.271508][T11463] xt_hashlimit: size too large, truncated to 1048576 [ 231.372107][T11547] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2547'. [ 233.694471][T11641] netlink: 312 bytes leftover after parsing attributes in process `syz.4.2589'. [ 233.930491][T11659] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 233.951890][T11659] macsec3: entered promiscuous mode [ 233.984521][T11659] macsec3: entered allmulticast mode [ 233.993520][T11659] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 234.044176][ T5876] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 234.193868][ T5876] usb 2-1: Using ep0 maxpacket: 8 [ 234.205488][ T5876] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 234.223749][ T5876] usb 2-1: config 179 has no interface number 0 [ 234.230288][ T5876] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 234.243258][ T5876] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 234.256437][ T5876] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 234.287476][ T5876] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 234.356176][ T5876] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 234.380716][ T5876] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 234.400317][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.426312][T11671] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2602'. [ 234.427552][T11651] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 234.442845][T11668] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2602'. [ 234.482424][T11671] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2602'. [ 234.755730][ T5876] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input22 [ 234.962207][ T5876] usb 2-1: USB disconnect, device number 10 [ 234.968236][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 234.968284][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 234.999049][T11686] netlink: 'syz.4.2610': attribute type 34 has an invalid length. [ 234.999970][ T5876] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 235.029229][T11688] ALSA: mixer_oss: invalid OSS volume 'Ö' [ 235.464784][T11707] 9pnet_fd: Insufficient options for proto=fd [ 235.595576][T11713] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2623'. [ 236.192071][T11735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2631'. [ 236.992949][T11755] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 237.028158][T11755] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 237.169158][T11762] support for the xor transformation has been removed. [ 237.340258][ T30] audit: type=1326 audit(1741757849.805:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11768 comm="syz.6.2648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb06f78d169 code=0x7ffc0000 [ 237.418873][ T30] audit: type=1326 audit(1741757849.805:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11768 comm="syz.6.2648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb06f78d169 code=0x7ffc0000 [ 237.478461][ T30] audit: type=1326 audit(1741757849.805:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11768 comm="syz.6.2648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7fb06f78d169 code=0x7ffc0000 [ 237.500786][ T30] audit: type=1326 audit(1741757849.805:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11768 comm="syz.6.2648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb06f78d169 code=0x7ffc0000 [ 237.568747][ T30] audit: type=1326 audit(1741757849.805:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11768 comm="syz.6.2648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb06f78d169 code=0x7ffc0000 [ 237.598472][ T30] audit: type=1326 audit(1741757850.005:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11778 comm="syz.4.2653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb2e58d169 code=0x7ffc0000 [ 237.629936][ T30] audit: type=1326 audit(1741757850.005:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11778 comm="syz.4.2653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb2e58d169 code=0x7ffc0000 [ 237.673360][ T30] audit: type=1326 audit(1741757850.015:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11778 comm="syz.4.2653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7fbb2e58d169 code=0x7ffc0000 [ 237.739769][ T30] audit: type=1326 audit(1741757850.015:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11778 comm="syz.4.2653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb2e58d169 code=0x7ffc0000 [ 237.823893][ T30] audit: type=1326 audit(1741757850.015:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11778 comm="syz.4.2653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb2e58d169 code=0x7ffc0000 [ 237.907831][T11794] netlink: 280 bytes leftover after parsing attributes in process `syz.5.2660'. [ 238.294235][ T5904] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 238.453934][ T5905] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 238.468262][ T5904] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 238.478383][ T5904] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.498086][ T5904] usb 3-1: Product: syz [ 238.508235][ T5904] usb 3-1: Manufacturer: syz [ 238.520241][ T5904] usb 3-1: SerialNumber: syz [ 238.532275][ T5904] usb 3-1: config 0 descriptor?? [ 238.603777][ T5905] usb 5-1: Using ep0 maxpacket: 32 [ 238.610930][ T5905] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 238.644158][ T5905] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 238.653360][ T5905] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 238.674985][ T5905] usb 5-1: Product: syz [ 238.679238][ T5905] usb 5-1: Manufacturer: syz [ 238.693825][ T5905] usb 5-1: SerialNumber: syz [ 238.711079][ T5905] usb 5-1: config 0 descriptor?? [ 238.727314][T11810] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 238.735737][ T5905] hub 5-1:0.0: bad descriptor, ignoring hub [ 238.741744][ T5905] hub 5-1:0.0: probe with driver hub failed with error -5 [ 238.969145][ T5904] usb 3-1: Firmware: major: 210, minor: 12, hardware type: ATUSB (1) [ 239.170116][ T5904] usb 3-1: failed to fetch extended address, random address set [ 239.234045][ T5904] usb 3-1: USB disconnect, device number 13 [ 239.265795][ T5905] usb 5-1: USB disconnect, device number 18 [ 240.262926][T11870] Illegal XDP return value 4006105935 on prog (id 314) dev N/A, expect packet loss! [ 240.652652][T11886] UBIFS error (pid: 11886): cannot open "/dev/loop1", error -22 [ 240.734719][T11890] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2701'. [ 240.756301][T11890] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2701'. [ 241.180565][T11912] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2712'. [ 241.206085][T11914] netlink: 'syz.5.2713': attribute type 1 has an invalid length. [ 241.225502][T11914] netlink: 134708 bytes leftover after parsing attributes in process `syz.5.2713'. [ 241.377362][T11922] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2717'. [ 241.830930][T11942] kvm: kvm [11941]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x40 [ 242.637050][T11977] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2743'. [ 242.985136][ T55] Bluetooth: hci4: command 0x0405 tx timeout [ 243.147391][T11995] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.282508][T11995] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.294394][ T5824] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 243.422932][T11995] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.467273][ T5824] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 243.493483][ T5824] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.539664][ T5824] usb 3-1: config 0 descriptor?? [ 243.554202][ T5824] cp210x 3-1:0.0: cp210x converter detected [ 243.620656][T11995] netdevsim netdevsim4 netdevsim0 (unregistering): left allmulticast mode [ 243.703102][T11995] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.870436][T11995] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.911791][T12028] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 243.934687][T11995] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.971556][ T5824] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 243.980764][T11995] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.993544][ T5824] usb 3-1: cp210x converter now attached to ttyUSB0 [ 244.020858][T12031] 8021q: adding VLAN 0 to HW filter on device bond1 [ 244.037750][T12031] bond0: (slave bond1): Enslaving as an active interface with a down link [ 244.057378][T11995] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.199278][ T5873] usb 3-1: USB disconnect, device number 14 [ 244.231488][ T5873] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 244.255685][ T5873] cp210x 3-1:0.0: device disconnected [ 244.647781][T12039] sctp: [Deprecated]: syz.4.2773 (pid 12039) Use of int in max_burst socket option. [ 244.647781][T12039] Use struct sctp_assoc_value instead [ 245.477197][T12081] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2793'. [ 245.685088][T12095] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2798'. [ 245.729380][T12095] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2798'. [ 246.343062][T12123] netlink: 'syz.5.2811': attribute type 2 has an invalid length. [ 246.363486][T12123] netlink: 'syz.5.2811': attribute type 2 has an invalid length. [ 246.784483][ T5924] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 246.968696][ T5924] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 246.986532][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.015078][ T5924] usb 2-1: config 0 descriptor?? [ 247.022964][ T5924] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 247.164005][T12165] pimreg: entered allmulticast mode [ 247.172984][T12165] pimreg: left allmulticast mode [ 247.356086][T12173] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.2834'. [ 247.366957][T12173] tc_dump_action: action bad kind [ 247.644470][ T5924] gspca_cpia1: usb_control_msg 01, error -71 [ 247.650658][ T5924] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 247.667097][ T5924] usb 2-1: USB disconnect, device number 11 [ 248.321637][T12209] block device autoloading is deprecated and will be removed. [ 249.515978][T12260] loop4: detected capacity change from 0 to 524255232 [ 250.033940][ T5876] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 250.202225][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.223984][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 41407, setting to 1024 [ 250.248956][ T5876] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 250.268310][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.285257][ T5876] usb 2-1: Product: syz [ 250.294072][ T5876] usb 2-1: Manufacturer: syz [ 250.303220][ T5876] usb 2-1: SerialNumber: syz [ 250.304448][T12297] vivid-000: disconnect [ 250.313149][ T5876] usb 2-1: config 0 descriptor?? [ 250.318736][T12295] vivid-000: reconnect [ 250.342365][ T5876] usb 2-1: Found UVC 0.00 device syz (18ec:3288) [ 250.361902][ T5876] usb 2-1: No valid video chain found. [ 250.544957][ T5904] usb 2-1: USB disconnect, device number 12 [ 251.225280][T12326] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 251.225280][T12326] The task syz.5.2904 (12326) triggered the difference, watch for misbehavior. [ 252.107589][T12364] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2923'. [ 252.244060][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 252.244077][ T30] audit: type=1326 audit(1741757864.715:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12367 comm="syz.5.2925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6977d84127 code=0x7ffc0000 [ 252.329356][ T30] audit: type=1326 audit(1741757864.715:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12367 comm="syz.5.2925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6977d29359 code=0x7ffc0000 [ 252.368923][ T30] audit: type=1326 audit(1741757864.715:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12367 comm="syz.5.2925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6977d84127 code=0x7ffc0000 [ 252.429600][ T30] audit: type=1326 audit(1741757864.715:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12367 comm="syz.5.2925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6977d29359 code=0x7ffc0000 [ 252.474516][ T30] audit: type=1326 audit(1741757864.715:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12367 comm="syz.5.2925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6977d84127 code=0x7ffc0000 [ 252.574496][ T30] audit: type=1326 audit(1741757864.715:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12367 comm="syz.5.2925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6977d29359 code=0x7ffc0000 [ 252.642115][ T30] audit: type=1326 audit(1741757864.715:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12367 comm="syz.5.2925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6977d84127 code=0x7ffc0000 [ 252.673786][ T30] audit: type=1326 audit(1741757864.715:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12367 comm="syz.5.2925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6977d29359 code=0x7ffc0000 [ 252.705497][ T30] audit: type=1326 audit(1741757864.715:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12367 comm="syz.5.2925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6977d84127 code=0x7ffc0000 [ 252.742053][ T30] audit: type=1326 audit(1741757864.715:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12367 comm="syz.5.2925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6977d29359 code=0x7ffc0000 [ 252.836947][T12387] xt_hashlimit: size too large, truncated to 1048576 [ 253.492372][ T1136] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.697709][ T1136] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.832308][ T1136] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.854495][T12419] dccp_v4_rcv: dropped packet with invalid checksum [ 254.036535][ T1136] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.114485][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 254.124406][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 254.134211][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 254.143112][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 254.151605][ T55] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 254.165199][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 254.180367][T12432] netlink: 830 bytes leftover after parsing attributes in process `syz.5.2956'. [ 254.436963][ T1136] bridge_slave_1: left allmulticast mode [ 254.442662][ T1136] bridge_slave_1: left promiscuous mode [ 254.484118][ T1136] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.509963][ T1136] bridge_slave_0: left allmulticast mode [ 254.533757][ T1136] bridge_slave_0: left promiscuous mode [ 254.545782][ T1136] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.003477][ T1136] team0: Port device geneve0 removed [ 255.337735][ T1136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 255.351934][ T1136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 255.362426][ T1136] bond0 (unregistering): Released all slaves [ 255.601862][T12429] chnl_net:caif_netlink_parms(): no params data found [ 255.773773][ T5873] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 255.875290][T12429] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.884835][T12429] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.892093][T12429] bridge_slave_0: entered allmulticast mode [ 255.901614][T12429] bridge_slave_0: entered promiscuous mode [ 255.909710][T12429] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.917446][T12429] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.931104][T12429] bridge_slave_1: entered allmulticast mode [ 255.937161][T12486] 9pnet_fd: Insufficient options for proto=fd [ 255.938361][T12429] bridge_slave_1: entered promiscuous mode [ 255.952333][ T5873] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 255.972015][ T5873] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 255.981274][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.006764][T12429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.020954][ T5873] usb 3-1: config 0 descriptor?? [ 256.033404][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.039815][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.049203][T12429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.062578][ T5873] pwc: Askey VC010 type 2 USB webcam detected. [ 256.118482][T12429] team0: Port device team_slave_0 added [ 256.136855][T12429] team0: Port device team_slave_1 added [ 256.263872][ T5827] Bluetooth: hci3: command tx timeout [ 256.345645][T12429] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.361362][T12429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.392335][T12429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.406713][T12429] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.435590][T12429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.488661][ T5873] pwc: recv_control_msg error -32 req 02 val 2b00 [ 256.496418][T12429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.697050][ T5873] pwc: recv_control_msg error -71 req 02 val 2c00 [ 256.722972][ T5873] pwc: recv_control_msg error -71 req 04 val 1000 [ 256.739530][T12429] hsr_slave_0: entered promiscuous mode [ 256.748196][ T5873] pwc: recv_control_msg error -71 req 04 val 1300 [ 256.757876][ T5873] pwc: recv_control_msg error -71 req 04 val 1400 [ 256.765005][ T5873] pwc: recv_control_msg error -71 req 02 val 2000 [ 256.773964][T12429] hsr_slave_1: entered promiscuous mode [ 256.780711][ T5873] pwc: recv_control_msg error -71 req 02 val 2100 [ 256.794563][T12429] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 256.802160][T12429] Cannot create hsr debugfs directory [ 256.814699][ T5873] pwc: recv_control_msg error -71 req 04 val 1500 [ 256.823891][ T5873] pwc: recv_control_msg error -71 req 02 val 2500 [ 256.842673][ T5873] pwc: recv_control_msg error -71 req 02 val 2400 [ 256.851559][ T5873] pwc: recv_control_msg error -71 req 02 val 2600 [ 256.859008][ T5873] pwc: recv_control_msg error -71 req 02 val 2900 [ 256.867816][ T5873] pwc: recv_control_msg error -71 req 02 val 2800 [ 256.874906][ T5873] pwc: recv_control_msg error -71 req 04 val 1100 [ 256.882511][ T5873] pwc: recv_control_msg error -71 req 04 val 1200 [ 256.926012][ T5873] pwc: Registered as video103. [ 256.931921][ T5873] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input23 [ 256.974123][ T5873] usb 3-1: USB disconnect, device number 15 [ 257.186862][T12429] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 257.206628][T12429] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 257.254175][T12429] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 257.374123][T12429] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 257.401411][T12515] ?: renamed from vlan0 (while UP) [ 257.850828][ T1136] hsr_slave_0: left promiscuous mode [ 257.859803][ T1136] hsr_slave_1: left promiscuous mode [ 257.869422][ T1136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.880474][ T1136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.934198][ T1136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.941677][ T1136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.010738][ T1136] veth1_macvtap: left promiscuous mode [ 258.023941][ T1136] veth0_macvtap: left promiscuous mode [ 258.029617][ T1136] veth1_vlan: left promiscuous mode [ 258.042127][ T1136] veth0_vlan: left promiscuous mode [ 258.353792][ T5827] Bluetooth: hci3: command tx timeout [ 258.940067][ T1136] team0 (unregistering): Port device team_slave_1 removed [ 258.978912][ T1136] team0 (unregistering): Port device team_slave_0 removed [ 259.343744][T12539] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.352534][T12539] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.562497][T12429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.603125][T12429] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.615832][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.622967][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.659839][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.667004][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.865534][T12568] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.125042][T12577] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3020'. [ 260.196422][T12429] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.424685][ T5827] Bluetooth: hci3: command tx timeout [ 260.719831][T12429] veth0_vlan: entered promiscuous mode [ 260.762301][T12429] veth1_vlan: entered promiscuous mode [ 260.821707][T12429] veth0_macvtap: entered promiscuous mode [ 260.841271][T12429] veth1_macvtap: entered promiscuous mode [ 260.906963][T12429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.922969][T12429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.937403][T12607] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3030'. [ 260.957205][T12429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.983851][T12429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.013700][T12429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.045200][T12429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.063823][T12429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.084751][T12429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.110517][T12429] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.113619][ T30] kauditd_printk_skb: 94 callbacks suppressed [ 261.113743][ T30] audit: type=1326 audit(1741757873.585:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12610 comm="syz.2.3032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94438d169 code=0x7ffc0000 [ 261.138400][T12429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.218051][T12429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.230292][ T30] audit: type=1326 audit(1741757873.625:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12610 comm="syz.2.3032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94438d169 code=0x7ffc0000 [ 261.245349][T12429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.286584][T12429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.291218][ T30] audit: type=1326 audit(1741757873.635:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12610 comm="syz.2.3032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fc94438d169 code=0x7ffc0000 [ 261.311326][T12429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.366885][T12429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.367142][ T30] audit: type=1326 audit(1741757873.635:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12610 comm="syz.2.3032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94438d169 code=0x7ffc0000 [ 261.408815][T12429] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.451025][T12429] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.451175][ T30] audit: type=1326 audit(1741757873.635:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12610 comm="syz.2.3032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94438d169 code=0x7ffc0000 [ 261.478815][T12429] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.507474][T12429] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.534430][T12429] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.540044][ T30] audit: type=1326 audit(1741757873.635:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12610 comm="syz.2.3032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7fc94438d169 code=0x7ffc0000 [ 261.609414][ T30] audit: type=1326 audit(1741757873.635:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12610 comm="syz.2.3032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94438d169 code=0x7ffc0000 [ 261.694079][ T30] audit: type=1326 audit(1741757873.635:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12610 comm="syz.2.3032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94438d169 code=0x7ffc0000 [ 261.738595][ T30] audit: type=1326 audit(1741757873.635:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12610 comm="syz.2.3032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7fc94438d169 code=0x7ffc0000 [ 261.843039][ T1136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.851086][ T1136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.859128][ T30] audit: type=1326 audit(1741757873.635:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12610 comm="syz.2.3032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94438d169 code=0x7ffc0000 [ 261.930272][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.964023][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.504053][ T5827] Bluetooth: hci3: command tx timeout [ 263.165888][T12656] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3051'. [ 264.085418][ T5904] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 264.253895][ T5904] usb 5-1: Using ep0 maxpacket: 16 [ 264.260994][ T5904] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 264.285743][ T5904] usb 5-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 264.305168][ T5904] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.325850][ T5904] usb 5-1: config 0 descriptor?? [ 264.412148][T12706] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 264.746232][ T5904] logitech 0003:046D:C626.0011: ignoring exceeding usage max [ 264.780012][ T5904] logitech 0003:046D:C626.0011: hidraw0: USB HID v10.00 Device [HID 046d:c626] on usb-dummy_hcd.4-1/input0 [ 264.945178][T12730] 8021q: adding VLAN 0 to HW filter on device bond1 [ 264.958202][ T5904] usb 5-1: USB disconnect, device number 19 [ 264.994998][T12730] bond0: (slave bond1): Enslaving as an active interface with an up link [ 265.279282][T12750] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3094'. [ 265.790408][T12763] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.907340][T12763] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.151506][T12763] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.365426][T12763] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.553469][T12763] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.570190][T12763] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.616790][T12763] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.738188][T12763] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.226458][ T3459] wlan1: Trigger new scan to find an IBSS to join [ 267.899941][T12823] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.118104][T12823] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.253020][T12823] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.319095][T12849] ref_ctr_offset mismatch. inode: 0x4a offset: 0x7 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 268.346063][ T55] Bluetooth: hci0: command 0x0406 tx timeout [ 268.371686][T12823] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.591649][T12823] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.698970][T12863] bridge0: port 3(vlan2) entered blocking state [ 268.706168][T12863] bridge0: port 3(vlan2) entered disabled state [ 268.712797][T12863] vlan2: entered allmulticast mode [ 268.718570][T12863] gretap0: entered allmulticast mode [ 268.729179][T12863] vlan2: entered promiscuous mode [ 268.737207][T12863] gretap0: entered promiscuous mode [ 268.743358][T12863] bridge0: port 3(vlan2) entered blocking state [ 268.749795][T12863] bridge0: port 3(vlan2) entered forwarding state [ 268.776611][T12823] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.819607][T12823] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.881560][T12823] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.988638][T12898] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.184104][ T12] wlan1: Trigger new scan to find an IBSS to join [ 270.199650][T12898] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.436682][T12898] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.680899][T12898] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.774719][T12918] netlink: 'syz.7.3169': attribute type 15 has an invalid length. [ 270.940705][T12898] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.003854][T12898] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.031066][T12898] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.098814][T12898] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.537963][T12968] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.730899][T12968] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.885634][T12968] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.044725][T12968] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.148564][ T13] wlan1: Creating new IBSS network, BSSID aa:04:5d:1e:24:56 [ 378.233662][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 378.240659][ C0] rcu: (detected by 0, t=10503 jiffies, g=44749, q=308 ncpus=2) [ 378.248378][ C0] rcu: All QSes seen, last rcu_preempt kthread activity 10503 (4294974909-4294964406), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 378.261752][ C0] rcu: rcu_preempt kthread starved for 10503 jiffies! g44749 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 378.272945][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 378.282914][ C0] rcu: RCU grace-period kthread stack dump: [ 378.288798][ C0] task:rcu_preempt state:R running task stack:25200 pid:18 tgid:18 ppid:2 task_flags:0x208040 flags:0x00004000 [ 378.302308][ C0] Call Trace: [ 378.305591][ C0] [ 378.308529][ C0] __schedule+0x18bc/0x4c40 [ 378.313058][ C0] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 378.318975][ C0] ? __pfx___schedule+0x10/0x10 [ 378.323833][ C0] ? __pfx_lock_release+0x10/0x10 [ 378.328870][ C0] ? __pfx___mod_timer+0x10/0x10 [ 378.333812][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 378.340151][ C0] ? schedule+0x90/0x320 [ 378.344398][ C0] schedule+0x14b/0x320 [ 378.348564][ C0] schedule_timeout+0x15a/0x290 [ 378.353418][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 378.358793][ C0] ? __pfx_process_timeout+0x10/0x10 [ 378.364090][ C0] ? prepare_to_swait_event+0x330/0x350 [ 378.369644][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 378.374848][ C0] rcu_gp_fqs_loop+0x2df/0x1330 [ 378.379705][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 378.384910][ C0] ? rcu_gp_init+0x1256/0x1630 [ 378.389688][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 378.394632][ C0] ? __pfx_rcu_watching_snap_save+0x10/0x10 [ 378.400531][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 378.405820][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 378.411724][ C0] ? finish_swait+0xd4/0x1e0 [ 378.416319][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 378.421529][ C0] rcu_gp_kthread+0xa7/0x3b0 [ 378.426130][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 378.431340][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 378.437241][ C0] ? __kthread_parkme+0x169/0x1d0 [ 378.442274][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 378.447482][ C0] kthread+0x7a9/0x920 [ 378.451556][ C0] ? __pfx_kthread+0x10/0x10 [ 378.456155][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 378.461368][ C0] ? __pfx_kthread+0x10/0x10 [ 378.465962][ C0] ? __pfx_kthread+0x10/0x10 [ 378.470559][ C0] ? __pfx_kthread+0x10/0x10 [ 378.475155][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 378.480358][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 378.485561][ C0] ? __pfx_kthread+0x10/0x10 [ 378.490156][ C0] ret_from_fork+0x4b/0x80 [ 378.494575][ C0] ? __pfx_kthread+0x10/0x10 [ 378.499171][ C0] ret_from_fork_asm+0x1a/0x30 [ 378.503953][ C0] [ 378.506976][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 378.513309][ C0] Sending NMI from CPU 0 to CPUs 1: [ 378.518535][ C1] NMI backtrace for cpu 1 [ 378.518559][ C1] CPU: 1 UID: 0 PID: 12999 Comm: syz.4.3208 Not tainted 6.14.0-rc6-syzkaller-00016-g0fed89a961ea #0 [ 378.518580][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 378.518592][ C1] RIP: 0010:kasan_check_range+0xb/0x290 [ 378.518622][ C1] Code: 90 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 55 41 57 41 56 41 54 <53> b0 01 48 85 f6 0f 84 a0 01 00 00 4c 8d 04 37 49 39 f8 0f 82 56 [ 378.518634][ C1] RSP: 0018:ffffc90000a28908 EFLAGS: 00000046 [ 378.518648][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff819ce4e4 [ 378.518658][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff94514840 [ 378.518667][ C1] RBP: ffff888035630b18 R08: ffffffff94514847 R09: 1ffffffff28a2908 [ 378.518678][ C1] R10: dffffc0000000000 R11: fffffbfff28a2909 R12: ffff888035630ad4 [ 378.518688][ C1] R13: ffff888035630000 R14: 0000000000000000 R15: ffff888035630b38 [ 378.518699][ C1] FS: 000055558364a500(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 378.518711][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 378.518721][ C1] CR2: 000000110c41ce96 CR3: 000000005323a000 CR4: 00000000003526f0 [ 378.518734][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 378.518743][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 378.518751][ C1] Call Trace: [ 378.518758][ C1] [ 378.518765][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 378.518801][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 378.518844][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 378.518895][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 378.518930][ C1] ? nmi_handle+0x14f/0x5a0 [ 378.518970][ C1] ? nmi_handle+0x2a/0x5a0 [ 378.519012][ C1] ? kasan_check_range+0xb/0x290 [ 378.519054][ C1] ? default_do_nmi+0x63/0x160 [ 378.519088][ C1] ? exc_nmi+0x123/0x1f0 [ 378.519126][ C1] ? end_repeat_nmi+0xf/0x53 [ 378.519148][ C1] ? __lock_acquire+0xc94/0x2100 [ 378.519166][ C1] ? kasan_check_range+0xb/0x290 [ 378.519185][ C1] ? kasan_check_range+0xb/0x290 [ 378.519204][ C1] ? kasan_check_range+0xb/0x290 [ 378.519223][ C1] [ 378.519228][ C1] [ 378.519233][ C1] __lock_acquire+0xc94/0x2100 [ 378.519257][ C1] lock_acquire+0x1ed/0x550 [ 378.519274][ C1] ? debug_object_deactivate+0x158/0x390 [ 378.519297][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 378.519317][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 378.519336][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 378.519354][ C1] _raw_spin_lock_irqsave+0xd5/0x120 [ 378.519370][ C1] ? debug_object_deactivate+0x158/0x390 [ 378.519388][ C1] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 378.519409][ C1] debug_object_deactivate+0x158/0x390 [ 378.519428][ C1] ? advance_sched+0xa02/0xca0 [ 378.519444][ C1] ? __pfx_debug_object_deactivate+0x10/0x10 [ 378.519469][ C1] debug_deactivate+0x1b/0x220 [ 378.519484][ C1] __hrtimer_run_queues+0x305/0xd30 [ 378.519504][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 378.519517][ C1] ? handle_softirqs+0x7e0/0x9b0 [ 378.519533][ C1] ? read_tsc+0x9/0x20 [ 378.519546][ C1] ? ktime_get_update_offsets_now+0x38e/0x3b0 [ 378.519571][ C1] hrtimer_interrupt+0x403/0xa40 [ 378.519594][ C1] __sysvec_apic_timer_interrupt+0x110/0x420 [ 378.519614][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 378.519632][ C1] [ 378.519637][ C1] [ 378.519642][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 378.519661][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xd8/0x140 [ 378.519679][ C1] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 0e d8 22 f6 f6 44 24 21 02 75 52 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 63 bd 8b f5 65 8b 05 94 0f 00 74 85 c0 74 43 48 c7 04 24 0e 36 [ 378.519691][ C1] RSP: 0018:ffffc900043b7a60 EFLAGS: 00000206 [ 378.519703][ C1] RAX: e9624dbbf7274200 RBX: 1ffff92000876f50 RCX: ffffffff9a61b903 [ 378.519713][ C1] RDX: dffffc0000000000 RSI: ffffffff8c2ab3a0 RDI: 0000000000000001 [ 378.519723][ C1] RBP: ffffc900043b7af0 R08: ffffffff903bce77 R09: 1ffffffff20779ce [ 378.519734][ C1] R10: dffffc0000000000 R11: fffffbfff20779cf R12: dffffc0000000000 [ 378.519744][ C1] R13: 1ffff92000876f4c R14: ffffc900043b7a80 R15: 0000000000000246 [ 378.519761][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 378.519778][ C1] ? __futex_wait+0x280/0x320 [ 378.519800][ C1] debug_object_free+0x39e/0x460 [ 378.519819][ C1] ? __pfx_debug_object_free+0x10/0x10 [ 378.519839][ C1] ? hrtimer_try_to_cancel+0x45b/0x4a0 [ 378.519862][ C1] futex_wait+0x11d/0x360 [ 378.519880][ C1] ? __pfx_futex_wait+0x10/0x10 [ 378.519896][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 378.519914][ C1] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 378.519931][ C1] ? ktime_get+0x3e/0x200 [ 378.519945][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 378.519964][ C1] do_futex+0x33b/0x560 [ 378.519982][ C1] ? __pfx_do_futex+0x10/0x10 [ 378.519998][ C1] ? read_tsc+0x9/0x20 [ 378.520013][ C1] __se_sys_futex+0x3f9/0x480 [ 378.520031][ C1] ? __pfx___se_sys_futex+0x10/0x10 [ 378.520047][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 378.520065][ C1] ? do_syscall_64+0x100/0x230 [ 378.520085][ C1] ? __x64_sys_futex+0x21/0xf0 [ 378.520101][ C1] do_syscall_64+0xf3/0x230 [ 378.520119][ C1] ? clear_bhb_loop+0x35/0x90 [ 378.520138][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.520156][ C1] RIP: 0033:0x7fbb2e58d169 [ 378.520176][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 378.520188][ C1] RSP: 002b:00007fff47119318 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 378.520202][ C1] RAX: ffffffffffffffda RBX: 0000000000042b27 RCX: 00007fbb2e58d169 [ 378.520212][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fbb2e7a5fac [ 378.520222][ C1] RBP: 0000000000000032 R08: 7fffffffffffffff R09: 000000044711960f [ 378.520231][ C1] R10: 00007fff47119410 R11: 0000000000000246 R12: 00007fbb2e7a5fac [ 378.520242][ C1] R13: 00007fff47119410 R14: 0000000000042b59 R15: 00007fff47119430 [ 378.520257][ C1]