last executing test programs: 1m48.31941517s ago: executing program 2 (id=2118): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x38, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x24]}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 1m48.120275633s ago: executing program 2 (id=2123): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x1a9882) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000040)={0x0, 0x7ff, 0x41}) close_range(r0, 0xffffffffffffffff, 0x0) 1m48.056450905s ago: executing program 2 (id=2126): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000240)={r2}, 0x8) 1m47.941803716s ago: executing program 2 (id=2129): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'}}}]}, 0x48}}, 0x0) 1m47.711802675s ago: executing program 2 (id=2134): r0 = socket$unix(0x1, 0x2, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000200)=0x10) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1m47.577719909s ago: executing program 2 (id=2137): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x80042, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x2000000000000270, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80, @void, @value}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000100)={{0x9, 0xfffffffa}, {0x49, 0x1003ff}, 0xffffffff, 0x7}) 1m42.532012274s ago: executing program 1 (id=2202): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) r1 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x20000, 0x2) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000000)=0xfffffffd) 1m42.350046323s ago: executing program 1 (id=2205): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)={0x40, 0xa, 0x1, 'D'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m39.95649364s ago: executing program 1 (id=2211): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_procfs$pagemap(0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 1m38.954340284s ago: executing program 1 (id=2220): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 1m38.781418504s ago: executing program 1 (id=2222): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000780)=0x9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000380)=0x9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x17) 1m38.562054383s ago: executing program 1 (id=2224): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r2, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050003"], 0x7c}}, 0x0) 1m38.021550315s ago: executing program 32 (id=2224): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r2, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050003"], 0x7c}}, 0x0) 1m32.420000299s ago: executing program 33 (id=2137): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x80042, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x2000000000000270, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80, @void, @value}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000100)={{0x9, 0xfffffffa}, {0x49, 0x1003ff}, 0xffffffff, 0x7}) 1m2.671774821s ago: executing program 3 (id=2687): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 1m2.483310854s ago: executing program 3 (id=2691): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x34, r1, 0x1, 0x3, 0x0, {{0xa}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_IDX={0x5}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48881}, 0x40) 1m2.361771996s ago: executing program 3 (id=2693): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x0) request_key(&(0x7f0000000300)='id_resolver\x00', &(0x7f0000000280)={'syz', 0x2}, &(0x7f00000001c0)='\xc8\xb7\xa3T\b>\x17\x10\xaf\\\xb1\x18\x99\x9d\xdbC\x88\xd1\xa6#U', r0) 1m2.188684388s ago: executing program 3 (id=2698): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1m2.113305813s ago: executing program 3 (id=2700): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) sendmsg$inet6(r0, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e20, 0x1000000080000, @dev={0xfe, 0x80, '\x00', 0x3f}}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="120000000000000029000000040000002b0000000000000712"], 0x30}, 0x0) 1m1.638628759s ago: executing program 3 (id=2706): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r0, 0x0, 0x2000, 0x3) 1m1.358675387s ago: executing program 34 (id=2706): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r0, 0x0, 0x2000, 0x3) 4.841575186s ago: executing program 7 (id=3653): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x7000001, 0x12, r0, 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) 4.710367374s ago: executing program 7 (id=3656): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000440), 0x4) 4.601371638s ago: executing program 7 (id=3659): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x75, 0x1c, 0x1, 0x10, 0xfe6, 0x9800, 0xd19a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x2, 0x2, 0xb4, 0x8c, 0xbb, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000300)={0x0, 0x13, 0x6, "5ccf6191b29f"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f00000001c0)={0x20, 0x27, 0x2, "be26"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.153159658s ago: executing program 0 (id=3689): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='tlb_flush\x00', r0, 0x0, 0x10000000000000}, 0x18) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 2.009348866s ago: executing program 0 (id=3691): unshare(0x22020600) r0 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) pidfd_send_signal(r1, 0x1f, 0x0, 0x0) 1.940857275s ago: executing program 0 (id=3694): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0003}]}) shutdown(0xffffffffffffffff, 0x1) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f00000012c0), 0x0, 0x0, 0x0) fremovexattr(r0, &(0x7f0000002480)=@known='trusted.overlay.upper\x00') 1.870408232s ago: executing program 0 (id=3696): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0xd) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) 1.73487823s ago: executing program 0 (id=3700): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) syz_usb_connect(0x2, 0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000ebeaa220d0070141c087010203010902"], 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCGFEATURE(r1, 0xc0404807, 0x0) 1.506966598s ago: executing program 7 (id=3703): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x5c, r1, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="ae356d4e2bfd0ce575608318b1b9e3da50d569a232a38f60"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "07cc8bc4d264a002"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="46d1f0f6519a138823eaeb5a911fb4b4"}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc5149aae0af4b1cf}, 0x20048040) 1.314801773s ago: executing program 7 (id=3706): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)={0x30, r1, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0xea}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x6}]}]}, 0x30}}, 0x0) 1.313210465s ago: executing program 4 (id=3708): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x20, &(0x7f0000000680)=[@cr4={0x1, 0x40104}], 0x1) 1.165853272s ago: executing program 7 (id=3710): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x9, 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.162947791s ago: executing program 6 (id=3711): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000100000004"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r1}, 0x10) 1.029241249s ago: executing program 6 (id=3713): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000280)=[{0x200000000006, 0x0, 0xfd, 0x7ffc0002}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0x6}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 957.836396ms ago: executing program 4 (id=3714): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x42581, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) syz_clone3(&(0x7f0000000100)={0x224004080, 0x0, 0x0, 0x0, {0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc004ae0a, &(0x7f0000000080)=""/1) 833.925139ms ago: executing program 6 (id=3716): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000003040)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0xdd65, @local, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)='7', 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e21, 0x130a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000200)='7', 0x1}], 0x1}}], 0x2, 0xd8) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={0x0, 0xff, 0x1, 0x7f}, 0x10) 673.902435ms ago: executing program 5 (id=3717): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="44010000100001000000000019002000fe800000000000000000000000000000ac1e000100000000000000000000000000000000000000000000000032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000f2ffffffffffffff000032"], 0x144}}, 0xc050) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010326bd6000000000002d9300000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20040814) 673.436257ms ago: executing program 4 (id=3718): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x1, @any, 0x0, 0x2}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x1, @none, 0x0, 0x1}, 0xe) 588.961679ms ago: executing program 6 (id=3719): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x68, r2, 0x1, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x3a, 0x33, @probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1}, {0xb}, @device_a, @device_a, @from_mac, {0x7, 0xb49}}, @void, @val, @void, @val={0x2d, 0x1a, {0xc, 0x2, 0x5, 0x0, {0xf, 0x2, 0x0, 0xf, 0x0, 0x1, 0x1, 0x2}, 0xe, 0x8}}, @void}}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x68}, 0x1, 0x0, 0x0, 0x6a845ecb4f20be60}, 0x24008080) 576.421499ms ago: executing program 5 (id=3720): r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x2) r1 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x1000000d}) syz_open_dev$midi(&(0x7f0000000080), 0x2, 0x40) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x1e4011, 0x0) 505.136623ms ago: executing program 4 (id=3721): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_normal', 0x42, 0x0) r1 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0xeb72}, &(0x7f0000000200)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r0, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r1, 0x47f5, 0x0, 0x0, 0x0, 0x0) 432.116839ms ago: executing program 5 (id=3722): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private=0x4000000}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x400}}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, '$'}], 0x18, 0xe000}, 0x5}], 0x1, 0x0) 340.043243ms ago: executing program 6 (id=3723): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001b40)=""/153, 0x99}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000002c40)=""/187, 0xbb}], 0x3}, 0x6}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/179, 0xb3}, {&(0x7f00000001c0)=""/230, 0xe6}, {&(0x7f0000000340)=""/45, 0x2d}, {&(0x7f0000000840)=""/81, 0x51}, {&(0x7f0000002fc0)=""/4091, 0xffb}, {&(0x7f0000000100)=""/68, 0x44}, {&(0x7f00000006c0)=""/243, 0xf3}], 0x7}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x27}], 0x5, 0x20, 0x0) 325.20424ms ago: executing program 5 (id=3724): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x238, r1, 0x205, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4a, 0xe, {{{}, {}, @device_b, @broadcast, @from_mac=@device_b}, 0x0, @default, 0x8000, @void, @void, @val={0x3, 0x1, 0xb8}, @void, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x80, 0x1, 0x6, 0x0, {0x7, 0xc9, 0x0, 0x7, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x8, 0xb, 0x4}}, @void, @void, @void}}, @NL80211_ATTR_PROBE_RESP={0x1b6, 0x91, "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"}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x238}}, 0x0) 283.241041ms ago: executing program 0 (id=3725): sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f0000000300)={0x0, 0x12c, @ioapic={0xffff1000, 0x8000, 0x2, 0x80000001, 0x0, [{0x1, 0x85, 0x1, '\x00', 0x4}, {0x9, 0x3, 0x0, '\x00', 0x6}, {0x7, 0x3, 0xe, '\x00', 0x3b}, {0x4e, 0xe, 0xd6, '\x00', 0x86}, {0xc, 0xb, 0x6, '\x00', 0x4}, {0xf, 0x8, 0xf5, '\x00', 0x3}, {0x2, 0xa, 0x51, '\x00', 0x6}, {0x88, 0x3, 0x2a, '\x00', 0x80}, {0x4, 0x0, 0xa, '\x00', 0x1}, {0x8, 0x9, 0x3, '\x00', 0x8}, {0x3, 0x6, 0x4, '\x00', 0x6}, {0x2, 0x9, 0x0, '\x00', 0x7f}, {0x14, 0x51, 0xa, '\x00', 0xfc}, {0xe, 0xfc, 0xc0, '\x00', 0x1}, {0x9, 0x2, 0x6, '\x00', 0x9}, {0x1, 0x3, 0xfe, '\x00', 0x3}, {0x2, 0xb, 0xd6, '\x00', 0x7f}, {0x7, 0x15, 0xca, '\x00', 0x6}, {0x0, 0x1, 0x4, '\x00', 0x13}, {0x4, 0x0, 0x40, '\x00', 0xda}, {0x3, 0x3, 0x6, '\x00', 0x9}, {0x9, 0x3, 0x1, '\x00', 0x2}, {0xf9, 0xbc, 0x4, '\x00', 0x7f}, {0x8, 0xc, 0x0, '\x00', 0x6}]}}) 219.59959ms ago: executing program 4 (id=3726): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca0200000000000000adcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d070490893616810a121ff4feedd1d176b313b9fc7bf31ddff431a4a50760ce18a76c4b7aa73cec3eec984c76d16f798c436410f3f4a41715e736a132c3cb9421be0b3c2bd40b75896c007fa2d47e3d8392d905d582b8eff689b0f493770c91e8c2e8bd0b08ffa4fd0289b04b0ea024768d196ef721314d68d29988b01871c6ea39f95a0b77744caadd24867acab274e8e4bf3fb44df31e15ffdce52f9f60ffe"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r1, r1, 0x2f, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000140)={@cgroup=r0, r1, 0x2f, 0x18, 0x4, @void, @value}, 0x20) 162.806887ms ago: executing program 5 (id=3727): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x3, 0x2000) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xec1}], 0x1}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0x5452, &(0x7f00000001c0)) 77.954319ms ago: executing program 6 (id=3728): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x8001) r2 = getpgid(0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x2, r2}) sendmmsg$unix(r0, &(0x7f0000000380)=[{{0x0, 0x500, &(0x7f0000000080)=[{&(0x7f0000000300)="11", 0x1}], 0x1, 0x0, 0x0, 0x20000045}}], 0x1, 0x40015) 3.216302ms ago: executing program 4 (id=3729): r0 = socket$netlink(0x10, 0x3, 0x14) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000780)=ANY=[@ANYBLOB="3800000003145d00"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) 0s ago: executing program 5 (id=3730): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000010000000be2e510f0000000c00018008000100", @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x0) kernel console output (not intermixed with test programs): 0:2 : does not exist [ 208.162758][ T5880] usb 1-1: USB disconnect, device number 10 [ 208.202536][ T9407] mkiss: ax0: crc mode is auto. [ 208.568870][ T9424] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1553'. [ 208.853735][ T9432] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1557'. [ 210.359452][ T5911] kernel read not supported for file /dsp1 (pid: 5911 comm: kworker/1:6) [ 210.937936][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 210.973011][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 210.990509][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 211.147952][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 211.198731][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 211.207893][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 211.232768][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 211.582266][ T9509] bridge0: entered promiscuous mode [ 211.603191][ T9509] macvlan2: entered promiscuous mode [ 211.742586][ T5840] Bluetooth: hci0: command 0x0401 tx timeout [ 211.748846][ T5841] Bluetooth: hci2: command 0x0406 tx timeout [ 211.748874][ T5839] Bluetooth: hci3: command 0x0406 tx timeout [ 211.754871][ T5841] Bluetooth: hci1: command 0x0406 tx timeout [ 211.761810][ T5838] Bluetooth: hci4: command 0x0405 tx timeout [ 211.879096][ T9522] capability: warning: `syz.1.1597' uses 32-bit capabilities (legacy support in use) [ 212.261987][ T9540] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 212.655555][ T9521] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 212.687948][ T9521] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 212.762072][ T9521] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 212.801892][ T9521] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 212.882242][ T9521] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 212.905465][ T9521] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 212.945325][ T9521] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 212.967723][ T9521] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 213.069100][ T9521] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 213.088739][ T9521] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 214.328962][ T9] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 214.510252][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.560748][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 214.580847][ T9] usb 5-1: New USB device strings: Mfr=32, Product=0, SerialNumber=9 [ 214.597726][ T9] usb 5-1: Manufacturer: syz [ 214.607791][ T9] usb 5-1: SerialNumber: syz [ 214.617636][ T9] usb 5-1: config 0 descriptor?? [ 214.893564][ T5881] usb 5-1: USB disconnect, device number 16 [ 215.246977][ T9656] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1643'. [ 215.313896][ T9656] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1643'. [ 215.768307][ T5881] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 215.953959][ T5881] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.981197][ T5881] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.018459][ T5881] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 216.027963][ T5881] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.057520][ T5881] usb 1-1: config 0 descriptor?? [ 216.489007][ T5881] pyra 0003:1E7D:2CF6.000F: unknown main item tag 0x0 [ 216.495876][ T5881] pyra 0003:1E7D:2CF6.000F: unknown main item tag 0x0 [ 216.547858][ T5881] pyra 0003:1E7D:2CF6.000F: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0 [ 216.893849][ T5881] pyra 0003:1E7D:2CF6.000F: couldn't init struct pyra_device [ 216.918134][ T5881] pyra 0003:1E7D:2CF6.000F: couldn't install mouse [ 216.941876][ T5881] pyra 0003:1E7D:2CF6.000F: probe with driver pyra failed with error -71 [ 216.982493][ T5881] usb 1-1: USB disconnect, device number 11 [ 217.430782][ T9753] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.439778][ T9753] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.448961][ T9753] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.457921][ T9753] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.987835][ T5880] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 218.156868][ T5880] usb 3-1: Using ep0 maxpacket: 16 [ 218.185116][ T5880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.206683][ T5880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.237779][ T5880] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 218.264866][ T5880] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.296433][ T9782] netlink: 356 bytes leftover after parsing attributes in process `syz.1.1687'. [ 218.296613][ T5880] usb 3-1: config 0 descriptor?? [ 218.789950][ T5880] corsair 0003:1B1C:1B02.0010: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.2-1/input0 [ 218.979027][ T9812] netem: change failed [ 219.195627][ T5880] usb 3-1: USB disconnect, device number 14 [ 219.259833][ T30] audit: type=1326 audit(1748061045.397:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9818 comm="syz.4.1702" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0f98b8e969 code=0x0 [ 219.979590][ T9850] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1715'. [ 220.095212][ T9857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1716'. [ 220.440919][ T9870] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1723'. [ 220.829103][ T9890] netlink: 'syz.4.1735': attribute type 8 has an invalid length. [ 220.867965][ T9890] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1735'. [ 220.923007][ T9890] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.932613][ T9890] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.979871][ T9890] bridge0: entered allmulticast mode [ 220.991701][ T9901] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1740'. [ 221.329613][ T5880] kernel write not supported for file /input/mouse0 (pid: 5880 comm: kworker/1:4) [ 221.594115][ T9930] syz.3.1753 (9930) used greatest stack depth: 18752 bytes left [ 221.888271][ T9] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 222.067563][ T9] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 222.108196][ T9] usb 5-1: config 0 has no interface number 0 [ 222.114376][ T9] usb 5-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 222.166795][ T9] usb 5-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 222.204335][ T9] usb 5-1: config 0 interface 255 has no altsetting 0 [ 222.237973][ T9] usb 5-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 222.247170][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.288784][ T9] usb 5-1: config 0 descriptor?? [ 222.302404][ T9] ums-realtek 5-1:0.255: USB Mass Storage device detected [ 222.517126][ T5880] usb 5-1: USB disconnect, device number 17 [ 222.841073][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 222.878805][ T975] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 222.891139][ T5911] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 223.001100][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 223.008763][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 195, changing to 11 [ 223.024659][ T9] usb 2-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 223.037805][ T975] usb 3-1: Using ep0 maxpacket: 8 [ 223.047956][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.051664][ T975] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 223.067855][ T5911] usb 1-1: Using ep0 maxpacket: 8 [ 223.076098][ T9] usb 2-1: config 0 descriptor?? [ 223.077952][ T975] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 223.107915][ T975] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 223.118939][ T5911] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 223.128311][ T5911] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.136350][ T5911] usb 1-1: Product: syz [ 223.147776][ T975] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 223.161105][ T5911] usb 1-1: Manufacturer: syz [ 223.165768][ T5911] usb 1-1: SerialNumber: syz [ 223.171161][ T975] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 223.194219][ T5911] usb 1-1: config 0 descriptor?? [ 223.202302][ T975] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 223.219224][ T5911] gspca_main: se401-2.14.0 probing 047d:5003 [ 223.237769][ T975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.460520][ T975] usb 3-1: GET_CAPABILITIES returned 0 [ 223.469045][ T975] usbtmc 3-1:16.0: can't read capabilities [ 223.497386][ T9990] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1780'. [ 223.517071][ T9] aureal 0003:0755:2626.0011: unbalanced collection at end of report description [ 223.529704][ T9] aureal 0003:0755:2626.0011: probe with driver aureal failed with error -22 [ 223.585225][ T9990] team0: Port device team_slave_0 removed [ 223.653852][ T5911] gspca_se401: Frame size: 0x0 1/16th janggu [ 223.668016][ T5911] gspca_se401: Frame size: 0x0 1/16th janggu [ 223.684321][ T5911] gspca_se401: Frame size: 0x0 1/16th janggu [ 223.697826][ T5911] gspca_se401: Frame size: 17x0 bayer [ 223.698239][ T9] usb 3-1: USB disconnect, device number 15 [ 223.708207][ T5911] gspca_se401: Frame size: 0x0 1/16th janggu [ 223.725745][ T5911] gspca_se401: Frame size: 0x0 1/16th janggu [ 223.735597][ T5911] gspca_se401: Frame size: 0x0 1/16th janggu [ 223.755926][ T5911] gspca_se401: Frame size: 0x0 1/16th janggu [ 223.857464][ T5911] input: se401 as /devices/platform/dummy_hcd.0/usb1/1-1/input/input25 [ 223.894079][ T5911] usb 1-1: USB disconnect, device number 12 [ 223.942296][ T9] usb 2-1: USB disconnect, device number 14 [ 224.708101][ T5881] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 224.903426][ T5881] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 224.914813][ T30] audit: type=1800 audit(1748061051.037:93): pid=10032 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.1799" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=27426 res=0 errno=0 [ 224.927794][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.004009][T10034] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1801'. [ 225.016317][ T5881] usb 5-1: Product: syz [ 225.025759][T10034] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1801'. [ 225.042853][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 225.064353][ T5881] usb 5-1: Manufacturer: syz [ 225.064862][T10034] gretap1: entered promiscuous mode [ 225.069440][ T5881] usb 5-1: SerialNumber: syz [ 225.085985][ T5881] usb 5-1: config 0 descriptor?? [ 225.112395][ T5881] gspca_main: sq930x-2.14.0 probing 2770:930c [ 225.431801][T10050] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 225.446180][T10050] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 225.539730][T10052] netlink: 'syz.3.1809': attribute type 58 has an invalid length. [ 225.548269][T10052] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1809'. [ 225.681238][T10054] mkiss: ax0: crc mode is auto. [ 225.739565][T10054] Falling back ldisc for ttyS3. [ 225.936878][ T5881] gspca_sq930x: ucbus_write failed -71 [ 226.092824][T10068] Falling back ldisc for ttyS3. [ 226.167850][ T5881] gspca_sq930x: Sensor ov9630 not yet treated [ 226.174075][ T5881] sq930x 5-1:0.0: probe with driver sq930x failed with error -22 [ 226.193561][ T5881] usb 5-1: USB disconnect, device number 18 [ 226.554423][T10090] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1827'. [ 226.768500][T10102] random: crng reseeded on system resumption [ 226.947906][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 227.506640][T10124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1842'. [ 227.997245][T10149] bridge0: port 2(bridge_slave_1) entered learning state [ 228.146573][T10159] misc userio: Begin command sent, but we're already running [ 228.166236][T10161] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1857'. [ 229.460837][ T5881] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 229.621034][ T5881] usb 3-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 229.640251][ T5881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.677476][ T5881] usb 3-1: config 0 descriptor?? [ 229.694004][ T5881] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 230.378160][ T5836] Bluetooth: hci5: command 0x1003 tx timeout [ 230.378416][ T5835] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 230.502892][ T5881] gspca_sunplus: reg_w_riv err -71 [ 230.513186][ T5881] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 230.542089][ T5881] usb 3-1: USB disconnect, device number 16 [ 230.937957][ T975] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 231.287726][ T975] usb 1-1: Using ep0 maxpacket: 32 [ 231.294950][ T975] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 231.313785][ T975] usb 1-1: config 0 has no interface number 0 [ 231.339809][ T975] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 231.387883][ T975] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.395968][ T975] usb 1-1: Product: syz [ 231.427981][ T975] usb 1-1: Manufacturer: syz [ 231.432668][ T975] usb 1-1: SerialNumber: syz [ 231.472307][ T975] usb 1-1: config 0 descriptor?? [ 231.489720][ T975] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 231.709853][ T975] usb 1-1: qt2_attach - failed to power on unit: -71 [ 231.731366][ T975] quatech2 1-1:0.51: probe with driver quatech2 failed with error -71 [ 231.772279][ T975] usb 1-1: USB disconnect, device number 13 [ 231.918659][ T5814] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 231.925421][T10288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1909'. [ 232.070020][T10295] netlink: 'syz.3.1913': attribute type 10 has an invalid length. [ 232.078106][ T5881] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 232.086253][ T5814] usb 3-1: Using ep0 maxpacket: 32 [ 232.094140][ T5814] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 232.103112][ T5814] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 232.112007][ T5814] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 232.121841][T10295] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1913'. [ 232.131803][ T5814] usb 3-1: config 1 has no interface number 0 [ 232.139505][ T5814] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 232.151039][ T5814] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 232.165580][ T5814] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 232.174941][ T5814] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.207486][ T5814] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 232.240456][ T5881] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 232.252184][ T5881] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 232.302464][ T5881] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 232.315772][ T5881] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.366413][T10282] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 232.384133][ T5881] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 232.404901][ T5814] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 232.612863][ T975] usb 5-1: USB disconnect, device number 19 [ 232.874301][ T975] usb 3-1: USB disconnect, device number 17 [ 232.889946][ T975] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 233.288107][ T5881] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 233.478021][ T5881] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.499772][ T5881] usb 4-1: config 0 has no interfaces? [ 233.505337][ T5881] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 233.535068][ T5881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.559428][ T5881] usb 4-1: config 0 descriptor?? [ 233.781853][ T5881] usb 4-1: USB disconnect, device number 17 [ 235.274915][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 235.407809][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 235.630180][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 235.636898][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 235.649041][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.670940][ T9] usb 2-1: config 0 descriptor?? [ 235.874504][T10374] overlayfs: workdir and upperdir must be separate subtrees [ 236.495217][ T9] video4linux radio48: keene_cmd_main failed (-71) [ 236.505111][ T9] radio-keene 2-1:0.0: V4L2 device registered as radio48 [ 236.536173][ T9] usb 2-1: USB disconnect, device number 15 [ 236.612449][ T30] audit: type=1400 audit(1748061062.747:94): lsm=SMACK fn=smack_task_setpgid action=denied subject="w" object="_" requested=w pid=10393 comm="syz.3.1960" opid=10393 ocomm="syz.3.1960" [ 236.693414][T10396] af_packet: tpacket_rcv: packet too big, clamped from 126 to 4294967286. macoff=82 [ 237.350426][T10408] mkiss: ax0: crc mode is auto. [ 237.518080][ T5881] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 237.668214][ T5881] usb 4-1: Using ep0 maxpacket: 32 [ 237.678531][ T5881] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 237.691868][ T5881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.713559][ T5881] usb 4-1: config 0 descriptor?? [ 237.801735][T10423] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1973'. [ 237.857896][ T5880] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 237.940194][ T5881] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 237.972751][ T5881] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 238.000537][ T5881] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 238.021334][ T5881] usb 4-1: media controller created [ 238.022151][ T5880] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 238.057416][ T5880] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 238.066927][ T5881] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 238.090606][ T5880] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 238.120206][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.140461][ T5880] usb 2-1: Product: syz [ 238.142626][ T5881] az6027: usb out operation failed. (-71) [ 238.144672][ T5880] usb 2-1: Manufacturer: syz [ 238.153519][ T5881] az6027: usb out operation failed. (-71) [ 238.171248][ T5881] stb0899_attach: Driver disabled by Kconfig [ 238.175644][ T5880] usb 2-1: SerialNumber: syz [ 238.189700][ T5881] az6027: no front-end attached [ 238.189700][ T5881] [ 238.207417][ T5881] az6027: usb out operation failed. (-71) [ 238.217207][ T5881] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 238.260308][ T5881] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input27 [ 238.302938][ T5881] dvb-usb: schedule remote query interval to 400 msecs. [ 238.322933][ T5881] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 238.352945][ T5881] usb 4-1: USB disconnect, device number 18 [ 238.531263][ T5881] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 238.639029][ T5880] usb 2-1: 0:2 : does not exist [ 238.948609][T10430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1976'. [ 239.062189][ T5880] usb 2-1: USB disconnect, device number 16 [ 239.075987][T10321] Set syz1 is full, maxelem 65536 reached [ 239.112571][T10433] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 239.502610][T10446] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 239.551170][T10444] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 240.396773][T10477] mkiss: ax0: crc mode is auto. [ 242.810902][T10560] binder: binder_mmap: 10559 200000afe000-200000b01000 bad vm_flags failed -1 [ 243.248156][ T5881] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 243.467724][ T5881] usb 4-1: Using ep0 maxpacket: 16 [ 243.484261][ T5881] usb 4-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 243.499848][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.515442][ T5881] usb 4-1: Product: syz [ 243.526296][ T5881] usb 4-1: Manufacturer: syz [ 243.561003][ T5881] usb 4-1: SerialNumber: syz [ 243.588084][ T5881] usb 4-1: config 0 descriptor?? [ 243.610090][ T5881] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 243.821969][ T5881] gspca_sn9c2028: read1 error -32 [ 243.835796][ T5881] gspca_sn9c2028: read1 error -32 [ 243.932809][ T30] audit: type=1326 audit(1748061070.067:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10606 comm="syz.1.2055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f05f8e969 code=0x7ffc0000 [ 243.986118][ T30] audit: type=1326 audit(1748061070.097:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10606 comm="syz.1.2055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f05f8e969 code=0x7ffc0000 [ 244.047769][ T30] audit: type=1326 audit(1748061070.097:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10606 comm="syz.1.2055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3f05f8e969 code=0x7ffc0000 [ 244.103624][ T30] audit: type=1326 audit(1748061070.097:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10606 comm="syz.1.2055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f05f8e969 code=0x7ffc0000 [ 244.107777][ T5814] usb 4-1: USB disconnect, device number 19 [ 244.163879][ T30] audit: type=1326 audit(1748061070.097:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10606 comm="syz.1.2055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f05f8e969 code=0x7ffc0000 [ 244.194044][ T30] audit: type=1326 audit(1748061070.097:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10606 comm="syz.1.2055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3f05f8e969 code=0x7ffc0000 [ 244.218413][ T30] audit: type=1326 audit(1748061070.097:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10606 comm="syz.1.2055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f05f8e969 code=0x7ffc0000 [ 244.240013][ C0] vkms_vblank_simulate: vblank timer overrun [ 244.246946][ T30] audit: type=1326 audit(1748061070.097:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10606 comm="syz.1.2055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3f05f85927 code=0x7ffc0000 [ 244.271859][ T30] audit: type=1326 audit(1748061070.097:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10606 comm="syz.1.2055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3f05f2ab39 code=0x7ffc0000 [ 244.302022][T10615] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 244.336584][ T30] audit: type=1326 audit(1748061070.097:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10606 comm="syz.1.2055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3f05f85927 code=0x7ffc0000 [ 244.358146][ C0] vkms_vblank_simulate: vblank timer overrun [ 244.517217][T10626] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2065'. [ 247.503632][T10680] netlink: 'syz.0.2096': attribute type 1 has an invalid length. [ 248.128473][T10692] ALSA: mixer_oss: invalid index 40000 [ 248.390895][T10702] Bluetooth: hci5: Frame reassembly failed (-84) [ 248.412962][ T3016] Bluetooth: hci5: Frame reassembly failed (-84) [ 248.973306][T10719] netlink: 27 bytes leftover after parsing attributes in process `syz.2.2106'. [ 249.267007][T10726] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 249.632359][T10732] netlink: 'syz.2.2111': attribute type 46 has an invalid length. [ 249.651025][T10732] netlink: 212868 bytes leftover after parsing attributes in process `syz.2.2111'. [ 249.961055][T10738] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 250.461927][ T5835] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 250.468876][ T5836] Bluetooth: hci5: command 0x1003 tx timeout [ 250.860009][ T5880] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 251.029268][ T5880] usb 5-1: Using ep0 maxpacket: 32 [ 251.055884][ T5880] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 251.075675][ T5880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.118985][ T5880] usb 5-1: config 0 descriptor?? [ 251.309840][T10797] loop2: detected capacity change from 0 to 7 [ 251.335369][ T5880] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 251.355914][T10797] Dev loop2: unable to read RDB block 7 [ 251.359579][ T5880] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 251.368915][T10797] loop2: unable to read partition table [ 251.382768][T10797] loop2: partition table beyond EOD, truncated [ 251.389117][ T5880] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 251.404846][ T5880] usb 5-1: media controller created [ 251.441402][T10797] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 251.480060][ T5880] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 251.552146][ T5880] az6027: usb out operation failed. (-71) [ 251.568529][ T5880] az6027: usb out operation failed. (-71) [ 251.584638][ T5880] stb0899_attach: Driver disabled by Kconfig [ 251.597732][ T5880] az6027: no front-end attached [ 251.597732][ T5880] [ 251.625422][ T5880] az6027: usb out operation failed. (-71) [ 251.631356][ T5880] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 251.650033][ T5880] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input28 [ 251.679462][ T5880] dvb-usb: schedule remote query interval to 400 msecs. [ 251.694819][ T5880] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 251.704539][T10806] @: renamed from vlan0 (while UP) [ 251.725649][ T5880] usb 5-1: USB disconnect, device number 20 [ 251.788045][ T5911] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 251.864800][ T5880] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 251.968077][ T5911] usb 1-1: Using ep0 maxpacket: 8 [ 251.979368][ T5911] usb 1-1: config 0 has no interfaces? [ 251.984941][ T5911] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 252.017762][ T5911] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.042338][ T5911] usb 1-1: config 0 descriptor?? [ 252.203234][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 252.203255][ T30] audit: type=1326 audit(1748065173.331:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10812 comm="syz.3.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e1e58e969 code=0x7ffc0000 [ 252.231163][ C0] vkms_vblank_simulate: vblank timer overrun [ 252.301129][T10801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.318098][ T30] audit: type=1326 audit(1748065173.331:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10812 comm="syz.3.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e1e58e969 code=0x7ffc0000 [ 252.340819][T10801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.389682][ T975] usb 1-1: USB disconnect, device number 14 [ 252.400853][ T30] audit: type=1326 audit(1748065173.331:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10812 comm="syz.3.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f1e1e58e969 code=0x7ffc0000 [ 252.472890][ T5881] IPVS: starting estimator thread 0... [ 252.502107][ T30] audit: type=1326 audit(1748065173.331:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10812 comm="syz.3.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e1e58e969 code=0x7ffc0000 [ 252.560900][ T30] audit: type=1326 audit(1748065173.331:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10812 comm="syz.3.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e1e58e969 code=0x7ffc0000 [ 252.577928][T10821] IPVS: using max 28 ests per chain, 67200 per kthread [ 252.596843][ T30] audit: type=1326 audit(1748065173.331:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10812 comm="syz.3.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7f1e1e58e969 code=0x7ffc0000 [ 252.630570][ T30] audit: type=1326 audit(1748065173.331:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10812 comm="syz.3.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e1e58e969 code=0x7ffc0000 [ 252.696250][ T30] audit: type=1326 audit(1748065173.331:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10812 comm="syz.3.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e1e58e969 code=0x7ffc0000 [ 253.486291][T10838] kvm_intel: kvm [10836]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x1 [ 253.957759][ T5881] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 254.118399][ T5881] usb 5-1: Using ep0 maxpacket: 16 [ 254.141709][ T5881] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.163663][ T5881] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 17768, setting to 1024 [ 254.185798][ T5881] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 254.218894][ T5881] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 254.238775][ T5881] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.260801][ T5881] usb 5-1: config 0 descriptor?? [ 254.266640][T10843] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 254.302792][ T5881] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input29 [ 254.532640][ T5881] usb 5-1: USB disconnect, device number 21 [ 255.529226][T10910] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2194'. [ 255.561021][T10910] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2194'. [ 255.741778][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.750300][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.941686][T10930] netlink: 'syz.0.2212': attribute type 1 has an invalid length. [ 255.970993][T10930] netlink: 'syz.0.2212': attribute type 4 has an invalid length. [ 256.007920][ T9] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 256.023722][T10930] netlink: 192 bytes leftover after parsing attributes in process `syz.0.2212'. [ 256.168048][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 256.180039][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.211496][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 17768, setting to 1024 [ 256.243521][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 256.342133][ T5881] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 256.350361][ T9] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 256.362243][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.379307][ T9] usb 4-1: config 0 descriptor?? [ 256.385178][T10924] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 256.419158][ T9] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input30 [ 256.520831][ T5881] usb 2-1: Using ep0 maxpacket: 16 [ 256.531404][ T5881] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 256.543984][ T5881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 256.584983][ T5881] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 256.594530][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.641427][ T5881] usb 2-1: Product: syz [ 256.645709][ T5881] usb 2-1: Manufacturer: syz [ 257.002069][ T5881] usb 2-1: SerialNumber: syz [ 257.009185][ T5911] usb 4-1: USB disconnect, device number 20 [ 257.020672][ T5881] usb 2-1: config 0 descriptor?? [ 257.029572][ T5881] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 257.038991][ T5881] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 257.587787][ T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 257.675340][ T5881] em28xx 2-1:0.0: chip ID is em2884 [ 257.750306][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.761680][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.778166][ T9] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 257.797555][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.826887][ T9] usb 1-1: config 0 descriptor?? [ 257.875983][ T5881] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 257.883804][ T5881] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 257.899518][ T5881] em28xx 2-1:0.0: No AC97 audio processor [ 257.926195][ T5881] usb 2-1: USB disconnect, device number 17 [ 257.948052][ T5881] em28xx 2-1:0.0: Disconnecting em28xx [ 257.956905][ T5881] em28xx 2-1:0.0: Freeing device [ 258.289011][ T9] playstation 0003:054C:0DF2.0012: unknown main item tag 0x0 [ 258.296523][ T9] playstation 0003:054C:0DF2.0012: unknown main item tag 0x0 [ 258.307894][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 258.312917][ T9] playstation 0003:054C:0DF2.0012: unknown main item tag 0x0 [ 258.362106][ T9] playstation 0003:054C:0DF2.0012: unknown main item tag 0x0 [ 258.373357][ T9] playstation 0003:054C:0DF2.0012: unknown main item tag 0x0 [ 258.424598][ T9] playstation 0003:054C:0DF2.0012: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0 [ 258.522909][ T9] playstation 0003:054C:0DF2.0012: Invalid byte count transferred, expected 20 got 0 [ 258.542916][ T9] playstation 0003:054C:0DF2.0012: Failed to retrieve DualSense pairing info: -22 [ 258.553169][ T9] playstation 0003:054C:0DF2.0012: Failed to get MAC address from DualSense [ 258.568683][ T9] playstation 0003:054C:0DF2.0012: Failed to create dualsense. [ 258.581356][ T9] playstation 0003:054C:0DF2.0012: probe with driver playstation failed with error -22 [ 258.763961][ T9] usb 1-1: USB disconnect, device number 15 [ 259.648470][ T9] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 259.759507][ T5822] bond0: (slave syz_tun): Releasing backup interface [ 259.834963][ T9] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 259.864648][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.899173][ T9] usb 4-1: Product: syz [ 259.903415][ T9] usb 4-1: Manufacturer: syz [ 259.935299][ T9] usb 4-1: SerialNumber: syz [ 259.971038][ T9] usb 4-1: config 0 descriptor?? [ 259.983345][ T2972] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 260.017978][ T2972] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.463930][ T2972] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 260.507865][ T9] usb 4-1: Firmware: major: 60, minor: 54, hardware type: ATUSB (1) [ 260.510803][ T2972] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.744991][ T9] usb 4-1: failed to fetch extended address, random address set [ 260.766211][ T2972] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 260.819059][ T2972] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.987345][ T9] usb 4-1: USB disconnect, device number 21 [ 261.068927][T10978] openvswitch: netlink: IP tunnel TTL not specified. [ 261.131540][ T2972] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.161193][ T2972] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.320753][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 261.330823][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 261.343856][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 261.359416][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 261.369158][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 261.398225][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 261.406074][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 261.413642][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 261.441477][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 261.461397][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 261.763018][ T2972] bridge_slave_1: left allmulticast mode [ 261.788152][ T2972] bridge_slave_1: left promiscuous mode [ 261.795505][ T2972] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.822390][T10994] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2236'. [ 261.849734][ T2972] bridge_slave_0: left allmulticast mode [ 261.855440][ T2972] bridge_slave_0: left promiscuous mode [ 261.887916][ T2972] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.394186][ T2972] erspan0 (unregistering): left promiscuous mode [ 262.444518][ T2972] gretap0 (unregistering): left promiscuous mode [ 262.527476][T10932] Set syz1 is full, maxelem 65536 reached [ 263.042998][ T2972] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 263.061140][ T2972] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 263.075968][ T2972] bond0 (unregistering): Released all slaves [ 263.503234][ T5835] Bluetooth: hci1: command tx timeout [ 263.882377][ T2972] hsr_slave_0: left promiscuous mode [ 263.924014][ T2972] hsr_slave_1: left promiscuous mode [ 263.930499][ T2972] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 263.954105][ T2972] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 263.973863][ T2972] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.987858][ T2972] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 264.024050][ T2972] veth1_macvtap: left promiscuous mode [ 264.033678][ T2972] veth0_macvtap: left promiscuous mode [ 264.042473][ T2972] veth1_vlan: left promiscuous mode [ 264.048442][ T2972] veth0_vlan: left promiscuous mode [ 264.806085][ T2972] team0 (unregistering): Port device team_slave_1 removed [ 264.871227][ T2972] team0 (unregistering): Port device team_slave_0 removed [ 265.379039][T11026] bridge0: entered promiscuous mode [ 265.400356][T11026] bridge0: port 4(macvlan2) entered blocking state [ 265.407182][T11026] bridge0: port 4(macvlan2) entered disabled state [ 265.428041][T11026] macvlan2: entered allmulticast mode [ 265.433501][T11026] bridge0: entered allmulticast mode [ 265.459024][T11026] macvlan2: left allmulticast mode [ 265.464222][T11026] bridge0: left allmulticast mode [ 265.489103][T11026] bridge0: left promiscuous mode [ 265.577883][ T5835] Bluetooth: hci1: command 0x041b tx timeout [ 265.588039][T10981] chnl_net:caif_netlink_parms(): no params data found [ 265.651065][T11034] netlink: 'syz.4.2253': attribute type 5 has an invalid length. [ 266.258418][ T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 266.408028][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 266.415295][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 266.434645][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 266.457829][ T9] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 266.475599][ T9] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 266.498172][ T9] usb 1-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 266.548565][ T9] usb 1-1: config 1 interface 0 has no altsetting 0 [ 266.555300][ T9] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 266.569967][ T5836] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 266.581804][ T5836] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 266.590599][ T5836] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 266.599950][ T5836] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 266.608189][ T5836] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 266.611975][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.696134][ T9] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 266.720785][T10981] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.731951][T10981] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.741939][T10981] bridge_slave_0: entered allmulticast mode [ 266.755814][T10981] bridge_slave_0: entered promiscuous mode [ 266.766088][T10981] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.776741][T10981] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.784363][T10981] bridge_slave_1: entered allmulticast mode [ 266.792796][ T975] IPVS: starting estimator thread 0... [ 266.796936][T10981] bridge_slave_1: entered promiscuous mode [ 266.887848][T11064] IPVS: using max 27 ests per chain, 64800 per kthread [ 266.890792][T11046] netlink: 71 bytes leftover after parsing attributes in process `syz.0.2257'. [ 266.929340][T10981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.930755][ T119] usb 1-1: USB disconnect, device number 16 [ 266.953143][T10981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.078069][T10981] team0: Port device team_slave_0 added [ 267.104816][T10981] team0: Port device team_slave_1 added [ 267.185397][T11075] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 267.204418][ T2972] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 267.222764][ T2972] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.266691][T10981] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.275784][T10981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.302232][T10981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.323571][T10981] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.331622][T10981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.362210][T10981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.412953][ T2972] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 267.423621][ T2972] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.600882][ T2972] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 267.617951][ T2972] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.653054][T10981] hsr_slave_0: entered promiscuous mode [ 267.661304][T10981] hsr_slave_1: entered promiscuous mode [ 267.670407][ T5836] Bluetooth: hci1: command 0x041b tx timeout [ 267.673223][T10981] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 267.692576][T10981] Cannot create hsr debugfs directory [ 267.735423][ T2972] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 267.753304][ T2972] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.877859][ T5911] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 268.049752][ T5911] usb 5-1: config 7 has an invalid interface number: 101 but max is 0 [ 268.073270][ T5911] usb 5-1: config 7 has no interface number 0 [ 268.091533][ T5911] usb 5-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 268.115546][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.140720][ T5911] usb 5-1: Product: syz [ 268.145072][ T5911] usb 5-1: Manufacturer: syz [ 268.145436][T11052] chnl_net:caif_netlink_parms(): no params data found [ 268.157272][ T5911] usb 5-1: SerialNumber: syz [ 268.388144][ T5911] as10x_usb: device has been detected [ 268.394389][ T5911] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 268.397088][ T2972] bridge_slave_1: left allmulticast mode [ 268.420298][ T5911] usb 5-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 268.428268][ T2972] bridge_slave_1: left promiscuous mode [ 268.437486][ T2972] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.461193][ T5911] as10x_usb: error during firmware upload part1 [ 268.471227][ T2972] bridge_slave_0: left allmulticast mode [ 268.476936][ T2972] bridge_slave_0: left promiscuous mode [ 268.483142][ T5911] Registered device Elgato EyeTV DTT Deluxe [ 268.485137][ T5911] usb 5-1: USB disconnect, device number 22 [ 268.497472][ T2972] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.526605][ T5911] Unregistered device Elgato EyeTV DTT Deluxe [ 268.550280][ T5911] as10x_usb: device has been disconnected [ 268.717757][ T5836] Bluetooth: hci5: command tx timeout [ 268.842419][T11121] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 269.238416][ T2972] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 269.254749][ T2972] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 269.266705][ T2972] bond0 (unregistering): Released all slaves [ 269.286578][ T2972] bond1 (unregistering): Released all slaves [ 269.314048][T11138] 9pnet_fd: p9_fd_create_unix (11138): problem connecting socket: ./file0: -111 [ 269.714238][T11052] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.733524][T11052] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.754614][ T5836] Bluetooth: hci1: command 0x041b tx timeout [ 269.758504][T11052] bridge_slave_0: entered allmulticast mode [ 269.797199][T11052] bridge_slave_0: entered promiscuous mode [ 269.857264][T11153] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2300'. [ 269.934673][T11052] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.947259][T11052] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.976056][T11052] bridge_slave_1: entered allmulticast mode [ 269.985863][T11052] bridge_slave_1: entered promiscuous mode [ 270.113581][T11052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.138367][T11052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.167287][ T2972] hsr_slave_0: left promiscuous mode [ 270.188718][ T975] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 270.203885][ T2972] hsr_slave_1: left promiscuous mode [ 270.221585][ T2972] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.230079][ T2972] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.238579][ T2972] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.246332][ T2972] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.253738][ T119] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 270.283337][ T2972] veth1_macvtap: left promiscuous mode [ 270.293353][ T2972] veth0_macvtap: left promiscuous mode [ 270.299388][ T2972] veth1_vlan: left promiscuous mode [ 270.305045][ T2972] veth0_vlan: left promiscuous mode [ 270.351438][ T975] usb 4-1: Using ep0 maxpacket: 32 [ 270.363859][ T975] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 270.377823][ T975] usb 4-1: config 0 has no interface number 0 [ 270.397393][ T975] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 270.409792][ T119] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 270.412683][ T975] usb 4-1: New USB device strings: Mfr=1, Product=229, SerialNumber=2 [ 270.432412][ T975] usb 4-1: Product: syz [ 270.436703][ T975] usb 4-1: Manufacturer: syz [ 270.441919][ T975] usb 4-1: SerialNumber: syz [ 270.443243][ T119] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 270.449982][ T975] usb 4-1: config 0 descriptor?? [ 270.474110][ T975] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 270.493483][ T119] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 270.513104][ T119] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.539685][ T119] usb 5-1: Product: syz [ 270.543943][ T119] usb 5-1: Manufacturer: syz [ 270.563383][ T119] usb 5-1: SerialNumber: syz [ 270.692552][ T975] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 270.717070][ T975] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 270.777952][ T5836] Bluetooth: hci5: command tx timeout [ 270.799057][T11159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.817959][T11159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.835901][ T119] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 270.866090][ T119] usb 5-1: USB disconnect, device number 23 [ 270.923353][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - xmit_empty message too short [ 271.145095][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 271.146247][ T9] usb 4-1: USB disconnect, device number 22 [ 271.190562][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 271.231431][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 271.258370][ T9] quatech2 4-1:0.51: device disconnected [ 271.280817][ T2972] team0 (unregistering): Port device team_slave_1 removed [ 271.352691][ T2972] team0 (unregistering): Port device team_slave_0 removed [ 271.367782][ T119] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 271.527918][ T119] usb 5-1: Using ep0 maxpacket: 8 [ 271.535369][ T119] usb 5-1: config index 0 descriptor too short (expected 301, got 72) [ 271.554125][ T119] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 271.585841][ T119] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 271.606977][ T119] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 271.634012][ T119] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 271.644497][ T119] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.655810][ T119] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 271.666502][ T119] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.826999][ T5836] Bluetooth: hci1: command 0x041b tx timeout [ 271.894347][ T119] usb 5-1: usb_control_msg returned -71 [ 271.902071][ T119] usbtmc 5-1:16.0: can't read capabilities [ 271.929767][T10981] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 271.958258][ T119] usb 5-1: USB disconnect, device number 24 [ 272.051094][T11052] team0: Port device team_slave_0 added [ 272.062729][T10981] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 272.079212][T11052] team0: Port device team_slave_1 added [ 272.130429][T10981] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 272.175852][T10981] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 272.200974][T11052] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.208217][T11052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.240455][T11052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.266869][T11052] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.279571][T11052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.310316][T11052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.443576][T11052] hsr_slave_0: entered promiscuous mode [ 272.453823][T11052] hsr_slave_1: entered promiscuous mode [ 272.716160][T10981] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.779341][T11052] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 272.790926][T11052] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 272.812893][T10981] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.820266][T11052] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 272.832813][T11052] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 272.850332][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.857531][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.868292][ T5836] Bluetooth: hci5: command tx timeout [ 272.882073][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.889252][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.039797][T11052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.085658][T11052] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.105928][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.113222][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.139847][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.147068][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.265860][T10981] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.495563][T11052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.631653][T10981] veth0_vlan: entered promiscuous mode [ 273.661917][T10981] veth1_vlan: entered promiscuous mode [ 273.715191][T10981] veth0_macvtap: entered promiscuous mode [ 273.726648][T10981] veth1_macvtap: entered promiscuous mode [ 273.757054][T10981] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.779933][T10981] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.800789][T10981] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.815359][T10981] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.841018][T10981] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.857933][T10981] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.974423][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.983924][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.021451][T11052] veth0_vlan: entered promiscuous mode [ 274.029536][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.037425][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.046766][T11052] veth1_vlan: entered promiscuous mode [ 274.106564][T11052] veth0_macvtap: entered promiscuous mode [ 274.122261][T11052] veth1_macvtap: entered promiscuous mode [ 274.164080][T11052] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.201196][T11052] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.262755][T11052] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.281013][T11052] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.294780][T11052] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.314086][T11052] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.527932][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.535831][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.595511][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.607300][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.855808][T11226] cgroup: fork rejected by pids controller in /syz6 [ 274.949904][ T5836] Bluetooth: hci5: command tx timeout [ 276.404961][ T13] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.967571][ T13] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.161206][ T13] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.347066][ T13] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.587822][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 277.608048][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 277.625986][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 277.657597][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 277.672699][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 277.672744][ T13] bridge_slave_1: left allmulticast mode [ 277.708283][ T13] bridge_slave_1: left promiscuous mode [ 277.714149][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.741506][ T13] bridge_slave_0: left allmulticast mode [ 277.768578][ T13] bridge_slave_0: left promiscuous mode [ 277.778055][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.336150][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 278.347414][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 278.359325][ T13] bond0 (unregistering): Released all slaves [ 279.140263][ T13] hsr_slave_0: left promiscuous mode [ 279.157048][ T13] hsr_slave_1: left promiscuous mode [ 279.169760][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 279.179450][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 279.190788][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 279.198790][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 279.257556][ T13] veth1_macvtap: left promiscuous mode [ 279.264925][ T13] veth0_macvtap: left promiscuous mode [ 279.275220][ T13] veth1_vlan: left promiscuous mode [ 279.282772][ T13] veth0_vlan: left promiscuous mode [ 279.743295][ T5836] Bluetooth: hci0: command tx timeout [ 279.834215][ T13] team0 (unregistering): Port device team_slave_1 removed [ 279.876943][ T13] team0 (unregistering): Port device team_slave_0 removed [ 280.394567][T11377] bridge0: port 3(macvlan3) entered blocking state [ 280.414457][T11377] bridge0: port 3(macvlan3) entered disabled state [ 280.433513][T11377] macvlan3: entered allmulticast mode [ 280.502359][T11377] macvlan3: left allmulticast mode [ 280.543050][T11384] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2391'. [ 280.582602][T11308] chnl_net:caif_netlink_parms(): no params data found [ 281.060369][T11308] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.073654][T11308] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.083396][T11308] bridge_slave_0: entered allmulticast mode [ 281.091625][T11308] bridge_slave_0: entered promiscuous mode [ 281.127319][T11308] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.157947][T11308] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.179034][T11308] bridge_slave_1: entered allmulticast mode [ 281.192812][T11308] bridge_slave_1: entered promiscuous mode [ 281.365619][T11308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.408368][T11308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.517583][T11308] team0: Port device team_slave_0 added [ 281.535622][T11308] team0: Port device team_slave_1 added [ 281.641774][T11308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.657306][T11308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.690533][T11308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.722683][T11308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 281.739091][T11308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.784666][T11308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.827812][ T5836] Bluetooth: hci0: command tx timeout [ 281.937528][T11434] geneve2: entered promiscuous mode [ 281.952406][T11434] geneve2: entered allmulticast mode [ 282.102546][T11438] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 282.111629][T11438] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 282.120536][T11438] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 282.127382][T11442] input: syz1 as /devices/virtual/input/input31 [ 282.129333][T11438] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 282.143942][T11308] hsr_slave_0: entered promiscuous mode [ 282.169007][T11308] hsr_slave_1: entered promiscuous mode [ 282.537298][T11458] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2422'. [ 282.698499][T11463] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2426'. [ 282.717315][T11463] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2426'. [ 283.372516][T11308] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 283.442955][T11308] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 283.489041][T11308] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 283.534559][T11308] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 283.779850][T11308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.859775][T11308] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.898226][ T5836] Bluetooth: hci0: command tx timeout [ 283.900843][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.910877][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.965599][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.972846][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.494764][T11308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.232800][T11308] veth0_vlan: entered promiscuous mode [ 285.278695][T11308] veth1_vlan: entered promiscuous mode [ 285.365210][T11308] veth0_macvtap: entered promiscuous mode [ 285.408024][T11308] veth1_macvtap: entered promiscuous mode [ 285.455844][T11308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 285.483808][T11571] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 285.505595][T11308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 285.545114][T11308] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.575199][T11308] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.597900][T11308] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.606680][T11308] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.622926][T11575] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2473'. [ 285.880002][T11587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2479'. [ 285.890870][ T2972] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.908104][ T2972] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.979080][ T5836] Bluetooth: hci0: command tx timeout [ 286.001906][ T2972] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.026946][ T2972] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.846965][T11634] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2500'. [ 286.898105][ T47] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 286.937301][T11640] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2502'. [ 287.084059][ T47] usb 7-1: Using ep0 maxpacket: 16 [ 287.097735][ T30] audit: type=1326 audit(1748065208.221:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11643 comm="syz.0.2505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa8e8f85927 code=0x7ffc0000 [ 287.130807][ T30] audit: type=1326 audit(1748065208.221:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11643 comm="syz.0.2505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa8e8f2ab39 code=0x7ffc0000 [ 287.155812][ T47] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.169495][ T47] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.183085][ T47] usb 7-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 287.208090][ T30] audit: type=1326 audit(1748065208.221:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11643 comm="syz.0.2505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa8e8f85927 code=0x7ffc0000 [ 287.238388][ T47] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.278987][ T47] usb 7-1: config 0 descriptor?? [ 287.287003][ T30] audit: type=1326 audit(1748065208.221:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11643 comm="syz.0.2505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa8e8f2ab39 code=0x7ffc0000 [ 287.360610][ T30] audit: type=1326 audit(1748065208.231:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11643 comm="syz.0.2505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8e8f8e969 code=0x7ffc0000 [ 287.412684][ T30] audit: type=1326 audit(1748065208.231:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11643 comm="syz.0.2505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa8e8f85927 code=0x7ffc0000 [ 287.450427][ T30] audit: type=1326 audit(1748065208.231:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11643 comm="syz.0.2505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa8e8f2ab39 code=0x7ffc0000 [ 287.476691][ T30] audit: type=1326 audit(1748065208.231:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11643 comm="syz.0.2505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa8e8f85927 code=0x7ffc0000 [ 287.507836][ T30] audit: type=1326 audit(1748065208.231:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11643 comm="syz.0.2505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa8e8f2ab39 code=0x7ffc0000 [ 287.538094][ T30] audit: type=1326 audit(1748065208.231:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11643 comm="syz.0.2505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa8e8f85927 code=0x7ffc0000 [ 287.777147][ T47] playstation 0003:054C:05C4.0013: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.6-1/input0 [ 287.972867][ T47] playstation 0003:054C:05C4.0013: Invalid byte count transferred, expected 16 got 0 [ 287.989852][ T47] playstation 0003:054C:05C4.0013: Failed to retrieve DualShock4 pairing info: -22 [ 288.004577][ T47] playstation 0003:054C:05C4.0013: Failed to get MAC address from DualShock4 [ 288.022812][ T47] playstation 0003:054C:05C4.0013: Failed to create dualshock4. [ 288.030533][ T9] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 288.094726][ T47] playstation 0003:054C:05C4.0013: probe with driver playstation failed with error -22 [ 288.205619][ T10] usb 7-1: USB disconnect, device number 2 [ 288.228030][ T9] usb 5-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 288.237162][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.261338][ T9] usb 5-1: config 0 descriptor?? [ 288.432040][T11693] program syz.3.2527 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 288.452620][T11696] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2528'. [ 288.474968][T11697] Invalid/unusable pipe [ 288.500622][ T9] kaweth 5-1:0.0: Firmware present in device. [ 288.686154][ T9] kaweth 5-1:0.0: Statistics collection: 0 [ 288.692230][ T9] kaweth 5-1:0.0: Multicast filter limit: 0 [ 288.707771][ T9] kaweth 5-1:0.0: MTU: 0 [ 288.713390][ T9] kaweth 5-1:0.0: Read MAC address 00:00:00:00:00:00 [ 289.084097][T11726] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.2542'. [ 289.088759][ T9] kaweth 5-1:0.0: Error setting SOFS wait [ 289.099941][ T9] kaweth 5-1:0.0: probe with driver kaweth failed with error -5 [ 289.109937][T11727] program syz.6.2543 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 289.134552][ T9] usb 5-1: USB disconnect, device number 25 [ 289.587838][T11745] netlink: 'syz.0.2552': attribute type 3 has an invalid length. [ 289.595639][T11745] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2552'. [ 289.666847][T11745] netlink: 'syz.0.2552': attribute type 3 has an invalid length. [ 289.679185][T11745] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2552'. [ 289.758167][T11749] tap0: tun_chr_ioctl cmd 1074812118 [ 289.981234][T11762] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2561'. [ 290.476082][T11789] netlink: 'syz.5.2572': attribute type 1 has an invalid length. [ 290.497816][T11789] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2572'. [ 290.565513][ C1] hrtimer: interrupt took 45946 ns [ 290.709214][T11801] batadv0: entered promiscuous mode [ 290.749609][T11801] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 290.798947][T11801] batadv0: left promiscuous mode [ 290.888542][T11807] netlink: 'syz.4.2580': attribute type 1 has an invalid length. [ 291.579150][ T5835] Bluetooth: hci0: command tx timeout [ 291.673466][T11849] input: syz0 as /devices/virtual/input/input33 [ 292.295540][T11876] loop6: detected capacity change from 0 to 524287999 [ 292.317063][T11876] Buffer I/O error on dev loop6, logical block 0, async page read [ 292.328139][T11876] Buffer I/O error on dev loop6, logical block 0, async page read [ 292.336624][T11876] Buffer I/O error on dev loop6, logical block 0, async page read [ 292.348465][T11876] Buffer I/O error on dev loop6, logical block 0, async page read [ 292.365303][T11876] Buffer I/O error on dev loop6, logical block 0, async page read [ 292.406262][T11876] Buffer I/O error on dev loop6, logical block 0, async page read [ 292.434775][T11876] Buffer I/O error on dev loop6, logical block 0, async page read [ 292.453024][T11876] Buffer I/O error on dev loop6, logical block 0, async page read [ 292.468144][T11876] ldm_validate_partition_table(): Disk read failed. [ 292.485249][T11876] Buffer I/O error on dev loop6, logical block 0, async page read [ 292.503963][T11876] Buffer I/O error on dev loop6, logical block 0, async page read [ 292.522993][T11876] Dev loop6: unable to read RDB block 0 [ 292.543027][T11876] loop6: unable to read partition table [ 292.577390][T11881] ldm_validate_partition_table(): Disk read failed. [ 292.597758][T11876] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 292.600473][T11881] Dev loop6: unable to read RDB block 0 [ 292.688507][T11881] loop6: unable to read partition table [ 292.711634][T11881] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 293.658496][ T5835] Bluetooth: hci0: command 0x0405 tx timeout [ 294.312218][T11969] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2652'. [ 294.327805][T11969] netlink: 'syz.3.2652': attribute type 21 has an invalid length. [ 294.974730][T11998] overlayfs: missing 'workdir' [ 295.149900][T12004] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 295.487862][ T119] usb 7-1: new low-speed USB device number 3 using dummy_hcd [ 295.586200][T12032] input: syz1 as /devices/virtual/input/input34 [ 295.640461][ T119] usb 7-1: config index 0 descriptor too short (expected 6427, got 27) [ 295.664839][ T119] usb 7-1: config 0 has an invalid interface number: 21 but max is 0 [ 295.706749][ T119] usb 7-1: config 0 has no interface number 0 [ 295.718762][ T119] usb 7-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 295.747711][ T119] usb 7-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 295.782205][ T119] usb 7-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 295.811414][ T119] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.851743][ T119] usb 7-1: config 0 descriptor?? [ 296.486904][ T119] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.21/input/input35 [ 296.505387][T11944] bridge0: port 3(syz_tun) entered disabled state [ 296.605615][ T119] input: failed to attach handler kbd to device input35, error: -5 [ 296.623936][T11944] syz_tun (unregistering): left allmulticast mode [ 296.631380][T11944] syz_tun (unregistering): left promiscuous mode [ 296.641279][T11944] bridge0: port 3(syz_tun) entered disabled state [ 296.693768][ T119] usb 7-1: USB disconnect, device number 3 [ 297.342450][T12089] netlink: 252 bytes leftover after parsing attributes in process `syz.6.2712'. [ 297.582680][T12095] netlink: 'syz.0.2715': attribute type 1 has an invalid length. [ 297.602927][T12095] nbd: error processing sock list [ 297.612443][ T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 297.622922][ T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 297.638523][T12095] block nbd2: shutting down sockets [ 297.650882][ T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 297.685030][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 297.696450][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 297.749649][T12103] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2718'. [ 297.824386][T12106] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2719'. [ 297.994199][T12110] 8021q: adding VLAN 0 to HW filter on device bond2 [ 298.003571][T12110] bond0: (slave bond2): Enslaving as an active interface with an up link [ 298.071053][T12116] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2723'. [ 298.124899][T12116] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2723'. [ 298.166384][T12116] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2723'. [ 298.212303][T12116] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2723'. [ 298.223045][T12116] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2723'. [ 298.446096][T12100] chnl_net:caif_netlink_parms(): no params data found [ 298.478053][T12132] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2729'. [ 298.741239][T12100] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.754399][T12100] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.820334][T12100] bridge_slave_0: entered allmulticast mode [ 298.839760][T12100] bridge_slave_0: entered promiscuous mode [ 298.857791][T12100] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.865119][T12100] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.887933][T12100] bridge_slave_1: entered allmulticast mode [ 298.907856][T12100] bridge_slave_1: entered promiscuous mode [ 299.049223][T12100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 299.086257][T12100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 299.224964][T12100] team0: Port device team_slave_0 added [ 299.238862][T12100] team0: Port device team_slave_1 added [ 299.328718][T12100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.350308][T12100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.404834][T12100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.459754][T12100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.466777][T12100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.514256][T12100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.690756][T12100] hsr_slave_0: entered promiscuous mode [ 299.702130][T12100] hsr_slave_1: entered promiscuous mode [ 299.729099][T12100] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 299.747099][T12100] Cannot create hsr debugfs directory [ 299.786599][T12172] __nla_validate_parse: 1 callbacks suppressed [ 299.786620][T12172] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2747'. [ 299.823704][ T55] Bluetooth: hci4: command tx timeout [ 300.066139][T12181] ptrace attach of "./syz-executor exec"[5823] was attempted by ""[12181] [ 300.542402][T12197] loop6: detected capacity change from 0 to 524287999 [ 300.574163][T12197] buffer_io_error: 22 callbacks suppressed [ 300.574184][T12197] Buffer I/O error on dev loop6, logical block 0, async page read [ 300.662773][T12197] Buffer I/O error on dev loop6, logical block 0, async page read [ 300.663877][T12200] Buffer I/O error on dev loop6, logical block 1048575, async page read [ 300.743790][T12197] Buffer I/O error on dev loop6, logical block 0, async page read [ 300.759866][T12100] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 300.777280][T12197] Buffer I/O error on dev loop6, logical block 0, async page read [ 300.803731][T12100] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 300.813540][T12197] Buffer I/O error on dev loop6, logical block 0, async page read [ 300.828776][T12197] Buffer I/O error on dev loop6, logical block 0, async page read [ 300.837114][T12100] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 300.865914][T12100] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 300.871907][T12197] Buffer I/O error on dev loop6, logical block 0, async page read [ 300.888335][T12197] Buffer I/O error on dev loop6, logical block 0, async page read [ 300.896377][T12197] ldm_validate_partition_table(): Disk read failed. [ 300.909115][T12197] Buffer I/O error on dev loop6, logical block 0, async page read [ 300.917482][T12197] Dev loop6: unable to read RDB block 0 [ 300.943416][T12197] loop6: unable to read partition table [ 300.963415][T12197] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 301.064696][T12207] tap0: tun_chr_ioctl cmd 35108 [ 301.212879][T12100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.275336][T12100] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.316954][ T3032] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.324214][ T3032] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.361722][ T3004] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.368983][ T3004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.898031][ T55] Bluetooth: hci4: command tx timeout [ 301.970223][T12100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 302.306122][T12256] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 302.389331][ T47] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 302.497250][T12266] input: syz1 as /devices/virtual/input/input36 [ 302.551096][ T47] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 302.580352][ T47] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 302.611909][ T47] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 302.638460][ T47] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 302.666021][ T47] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 302.684075][T12100] veth0_vlan: entered promiscuous mode [ 302.712381][ T47] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 302.717425][T12100] veth1_vlan: entered promiscuous mode [ 302.732535][ T47] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 302.751429][ T47] usb 7-1: Product: syz [ 302.755685][ T47] usb 7-1: Manufacturer: syz [ 302.783514][ T47] cdc_wdm 7-1:1.0: skipping garbage [ 302.795282][ T47] cdc_wdm 7-1:1.0: skipping garbage [ 302.815311][T12100] veth0_macvtap: entered promiscuous mode [ 302.824803][ T47] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 302.850807][T12100] veth1_macvtap: entered promiscuous mode [ 302.854654][ T47] cdc_wdm 7-1:1.0: Unknown control protocol [ 302.904842][T12100] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 302.929766][T12100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 302.952828][T12100] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.969185][T12100] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.981246][T12100] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.993789][T12100] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.112451][ T2972] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.128614][ T2972] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.171464][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.193675][ T47] usb 7-1: USB disconnect, device number 4 [ 303.207473][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.979348][ T55] Bluetooth: hci4: command tx timeout [ 303.987236][T12314] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2805'. [ 304.651865][T12352] netlink: 'syz.6.2823': attribute type 1 has an invalid length. [ 305.637846][ T5903] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 305.798313][ T5903] usb 5-1: Using ep0 maxpacket: 16 [ 305.814416][ T5903] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 305.844748][ T5903] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 305.860778][ T5903] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 305.889915][ T5903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.937742][ T5903] usb 5-1: Product: syz [ 305.943637][ T5903] usb 5-1: Manufacturer: syz [ 305.956305][ T5903] usb 5-1: SerialNumber: syz [ 306.067420][ T55] Bluetooth: hci4: command tx timeout [ 306.387956][ T5903] usb 5-1: cannot find UAC_HEADER [ 306.457161][ T5903] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 306.486584][ T5903] usb 5-1: USB disconnect, device number 26 [ 307.027834][ T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 307.198024][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 307.210496][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.227793][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.244234][ T9] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 307.256358][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.268971][ T9] usb 1-1: config 0 descriptor?? [ 307.700964][ T9] konepure 0003:1E7D:2DB4.0014: unknown main item tag 0x0 [ 307.730114][ T9] konepure 0003:1E7D:2DB4.0014: unknown main item tag 0x0 [ 307.737465][ T9] konepure 0003:1E7D:2DB4.0014: unknown main item tag 0x0 [ 307.745944][T12479] binder: 12478:12479 ioctl c018620c 200000000700 returned -1 [ 307.753758][ T9] konepure 0003:1E7D:2DB4.0014: unknown main item tag 0x0 [ 307.774933][ T9] konepure 0003:1E7D:2DB4.0014: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.0-1/input0 [ 307.941538][ T5903] usb 1-1: USB disconnect, device number 17 [ 308.278941][T12506] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2894'. [ 308.403874][T12512] tap0: tun_chr_ioctl cmd 1074025677 [ 308.404649][T12514] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2898'. [ 308.409740][T12512] tap0: linktype set to 270 [ 308.432161][T12514] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2898'. [ 308.625350][T12523] netlink: 'syz.4.2901': attribute type 10 has an invalid length. [ 308.641411][T12523] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2901'. [ 308.741731][T12523] team0: Port device geneve0 added [ 309.040242][T12542] dvmrp0: entered allmulticast mode [ 309.066990][T12542] dvmrp0: left allmulticast mode [ 309.667868][ T5880] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 309.691737][T12570] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2926'. [ 309.820810][ T5880] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 309.848597][ T5880] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 309.875920][ T5880] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 309.905834][ T5880] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 309.926388][ T5880] usb 6-1: SerialNumber: syz [ 310.154358][ T5880] usb 6-1: 0:2 : does not exist [ 310.162660][ T5880] usb 6-1: unit 255 not found! [ 310.190672][ T5880] usb 6-1: USB disconnect, device number 2 [ 310.217364][T12591] Bluetooth: MGMT ver 1.23 [ 310.882287][T12615] bpf: Bad value for 'gid' [ 311.350785][T12629] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 311.544681][T12641] netlink: 'syz.5.2953': attribute type 12 has an invalid length. [ 311.567484][T12641] netlink: 9472 bytes leftover after parsing attributes in process `syz.5.2953'. [ 312.797785][ T47] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 312.807961][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 312.833708][T12697] 9p: Unknown access argument 18446744073709551615: -34 [ 312.963144][ T47] usb 7-1: Using ep0 maxpacket: 32 [ 312.977764][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 312.982211][ T47] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.995979][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 313.016507][ T47] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.024049][ T9] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 313.034923][ T47] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 313.046309][ T47] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.052670][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.066732][ T9] usb 6-1: Product: syz [ 313.073529][ T47] usb 7-1: config 0 descriptor?? [ 313.083110][ T9] usb 6-1: Manufacturer: syz [ 313.097535][ T9] usb 6-1: SerialNumber: syz [ 313.110736][ T9] usb 6-1: config 0 descriptor?? [ 313.128966][ T9] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 313.137588][ T9] usb 6-1: Detected FT232R [ 313.364788][ T9] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 313.427970][ T10] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 313.515005][ T47] savu 0003:1E7D:2D5A.0015: unknown main item tag 0x0 [ 313.522177][ T47] savu 0003:1E7D:2D5A.0015: unknown main item tag 0x0 [ 313.533611][ T47] savu 0003:1E7D:2D5A.0015: unknown main item tag 0x0 [ 313.550402][ T47] savu 0003:1E7D:2D5A.0015: unknown main item tag 0x0 [ 313.557279][ T47] savu 0003:1E7D:2D5A.0015: unknown main item tag 0x0 [ 313.566433][ T47] savu 0003:1E7D:2D5A.0015: unbalanced collection at end of report description [ 313.577143][ T47] savu 0003:1E7D:2D5A.0015: parse failed [ 313.584170][ T47] savu 0003:1E7D:2D5A.0015: probe with driver savu failed with error -22 [ 313.605380][ T10] usb 1-1: config 0 has no interfaces? [ 313.614557][ T9] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 313.629912][ T10] usb 1-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 313.641337][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.649533][ T10] usb 1-1: Product: syz [ 313.653784][ T10] usb 1-1: Manufacturer: syz [ 313.661354][ T10] usb 1-1: SerialNumber: syz [ 313.672745][ T10] usb 1-1: config 0 descriptor?? [ 313.740207][ T47] usb 7-1: USB disconnect, device number 5 [ 313.817441][ T5903] usb 6-1: USB disconnect, device number 3 [ 313.841157][ T5903] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 313.851310][ T5903] ftdi_sio 6-1:0.0: device disconnected [ 313.886422][ T10] usb 1-1: USB disconnect, device number 18 [ 314.070469][T12732] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 314.589636][T12760] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3008'. [ 314.873589][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 314.873608][ T30] audit: type=1400 audit(1748065236.005:172): lsm=SMACK fn=smack_inode_permission action=denied subject="y" object="_" requested=wx pid=12775 comm="syz.4.3016" name="596" dev="tmpfs" ino=3044 [ 314.997772][ T10] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 315.167945][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 315.204902][ T10] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 315.340871][ T10] usb 1-1: config 179 has no interface number 0 [ 315.348474][ T10] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 315.361416][ T10] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 315.378706][ T10] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 315.390016][ T10] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 315.402979][ T10] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 315.416484][ T10] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 315.477688][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.505695][T12767] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 315.839667][ T10] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input38 [ 316.039611][ T47] usb 1-1: USB disconnect, device number 19 [ 316.039647][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 316.054047][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 316.062962][ T47] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 316.354086][T12814] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3033'. [ 316.734561][T12834] syz_tun: entered allmulticast mode [ 316.744047][T12833] syz_tun: left allmulticast mode [ 316.864569][T12839] netlink: 'syz.0.3045': attribute type 11 has an invalid length. [ 316.872923][T12839] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3045'. [ 317.025561][T12838] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 317.193677][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.560975][T12869] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode [ 317.659867][T12875] input: syz1 as /devices/virtual/input/input39 [ 317.911278][ T10] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 318.118972][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 318.136557][ T10] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 318.147323][ T10] usb 5-1: config 0 has no interface number 0 [ 318.176385][ T10] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 318.195998][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.218728][ T10] usb 5-1: Product: syz [ 318.223028][ T10] usb 5-1: Manufacturer: syz [ 318.242195][ T10] usb 5-1: SerialNumber: syz [ 318.266091][ T10] usb 5-1: config 0 descriptor?? [ 318.293646][ T10] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 318.524244][ T10] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 318.571025][ T10] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 318.839045][T12915] netlink: 'syz.5.3075': attribute type 18 has an invalid length. [ 318.951451][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 318.952611][ T47] usb 5-1: USB disconnect, device number 27 [ 318.989256][ T47] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 319.034078][ T47] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 319.076341][ T47] quatech2 5-1:0.51: device disconnected [ 319.784093][T12953] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3093'. [ 320.193545][T12975] sp0: Synchronizing with TNC [ 320.337909][T12981] sp0: Synchronizing with TNC [ 320.516294][T12990] kvm: kvm [12989]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010004) = 0x3 [ 320.912919][T13006] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3119'. [ 321.087395][T13017] syz_tun: entered promiscuous mode [ 321.111685][T13017] syz_tun: left promiscuous mode [ 321.598440][T13043] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3136'. [ 322.300934][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 322.488552][ T55] block nbd2: Receive control failed (result -107) [ 322.548536][T13074] nbd2: detected capacity change from 0 to 32 [ 322.669290][T13084] netlink: 'syz.5.3155': attribute type 10 has an invalid length. [ 322.745091][T13084] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 323.113187][T13104] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 323.301591][T13109] sp0: Synchronizing with TNC [ 323.407133][T13112] [U] è [ 323.569475][T13122] netlink: 27 bytes leftover after parsing attributes in process `syz.5.3172'. [ 324.023723][T13139] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3181'. [ 324.057826][T13139] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3181'. [ 324.139649][T13144] block device autoloading is deprecated and will be removed. [ 324.180159][T13144] syz.7.3182: attempt to access beyond end of device [ 324.180159][T13144] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 324.661777][T13160] 9pnet_fd: p9_fd_create_unix (13160): problem connecting socket: éq‰Y’3aK: -111 [ 324.684184][T13165] netlink: 'syz.0.3192': attribute type 10 has an invalid length. [ 324.696423][T13164] netlink: 136 bytes leftover after parsing attributes in process `syz.5.3190'. [ 324.727730][T13164] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 324.773967][T13165] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 325.264740][T13190] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3203'. [ 325.283381][T13188] netlink: 'syz.7.3204': attribute type 11 has an invalid length. [ 327.177764][ T5814] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 327.347740][ T5814] usb 6-1: Using ep0 maxpacket: 16 [ 327.363430][ T5814] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 327.393435][ T5814] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 327.417352][ T5814] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 327.474910][ T5814] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.498398][ T5814] usb 6-1: Product: syz [ 327.502639][ T5814] usb 6-1: Manufacturer: syz [ 327.507272][ T5814] usb 6-1: SerialNumber: syz [ 327.550842][ T5814] usb 6-1: config 0 descriptor?? [ 327.569524][ T5814] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 327.598409][ T5814] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 328.175816][ T5814] em28xx 6-1:0.0: chip ID is em2870 [ 328.382866][ T5903] usb 6-1: USB disconnect, device number 4 [ 328.403588][ T5903] em28xx 6-1:0.0: Disconnecting em28xx [ 328.417431][ T5903] em28xx 6-1:0.0: Freeing device [ 328.436621][T13278] trusted_key: encrypted_key: keyword 'upd' not recognized [ 329.954328][T13319] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3258'. [ 329.993324][T13319] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3258'. [ 330.341327][T13337] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3269'. [ 331.175540][ T47] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 331.275721][T13370] binder: 13369:13370 ioctl 6611 0 returned -22 [ 331.361614][ T47] usb 6-1: Using ep0 maxpacket: 32 [ 331.427738][ T47] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 331.435899][ T47] usb 6-1: config 0 has no interface number 0 [ 331.488160][ T47] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 331.497286][ T47] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.528004][ T47] usb 6-1: Product: syz [ 331.532259][ T47] usb 6-1: Manufacturer: syz [ 331.536893][ T47] usb 6-1: SerialNumber: syz [ 331.587442][ T47] usb 6-1: config 0 descriptor?? [ 331.616952][ T47] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 331.758270][T13387] program syz.6.3293 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 331.831505][ T47] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 331.868911][ T47] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 332.245079][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 332.255429][ T47] usb 6-1: USB disconnect, device number 5 [ 332.284952][ T47] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 332.317384][ T47] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 332.330529][T13406] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3301'. [ 332.336878][T13408] netlink: 'syz.6.3302': attribute type 13 has an invalid length. [ 332.344120][ T47] quatech2 6-1:0.51: device disconnected [ 332.497291][T13408] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.505283][T13408] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.860986][T13408] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 332.924976][T13408] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 333.276469][T13408] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.302685][T13408] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.334869][T13408] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.351030][T13408] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.562968][T13439] netlink: 'syz.6.3315': attribute type 6 has an invalid length. [ 333.702436][T13446] bridge_slave_0: left allmulticast mode [ 333.710073][T13446] bridge_slave_0: left promiscuous mode [ 333.716162][T13446] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.735043][T13446] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 334.265994][T13456] netlink: 'syz.6.3322': attribute type 10 has an invalid length. [ 334.663011][T13477] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3332'. [ 334.677947][T13477] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3332'. [ 334.923222][T13492] can0: slcan on ttyS3. [ 334.991332][T13492] can0 (unregistered): slcan off ttyS3. [ 335.279451][T13507] bridge_slave_0: default FDB implementation only supports local addresses [ 335.751502][T13529] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3358'. [ 336.108741][T13549] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3366'. [ 336.308239][ T5903] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 336.468206][ T5903] usb 1-1: Using ep0 maxpacket: 16 [ 336.485804][ T30] audit: type=1326 audit(1748065257.615:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13569 comm="syz.6.3377" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb6efd8e969 code=0x0 [ 336.537005][ T5903] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.570300][ T5903] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.598167][ T5903] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 336.623732][ T5903] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.666881][ T5903] usb 1-1: config 0 descriptor?? [ 337.117366][ T5903] savu 0003:1E7D:2D5A.0016: unknown main item tag 0x0 [ 337.140092][ T5903] savu 0003:1E7D:2D5A.0016: unknown main item tag 0x0 [ 337.147140][ T5903] savu 0003:1E7D:2D5A.0016: unknown main item tag 0x0 [ 337.157534][ T5903] savu 0003:1E7D:2D5A.0016: unknown main item tag 0x0 [ 337.173225][ T5903] savu 0003:1E7D:2D5A.0016: unknown main item tag 0x0 [ 337.186594][ T5903] savu 0003:1E7D:2D5A.0016: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 337.300584][ T9] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 337.345843][ T5903] usb 1-1: USB disconnect, device number 20 [ 337.490855][ T9] usb 5-1: config 54 has an invalid interface number: 154 but max is 0 [ 337.504922][ T9] usb 5-1: config 54 has no interface number 0 [ 337.522235][ T9] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.ec [ 337.531758][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.539861][ T9] usb 5-1: Product: syz [ 337.544161][ T9] usb 5-1: Manufacturer: syz [ 337.560865][ T9] usb 5-1: SerialNumber: syz [ 337.661424][ T5880] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 337.779026][T13591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.788494][T13591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.810622][ T9] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 337.813002][ T59] usb 5-1: Failed to submit usb control message: -71 [ 337.827928][ T5880] usb 7-1: Using ep0 maxpacket: 32 [ 337.833259][ T59] usb 5-1: unable to send the bmi data to the device: -71 [ 337.840811][ T9] usb 5-1: USB disconnect, device number 28 [ 337.849075][ T59] usb 5-1: unable to get target info from device [ 337.855719][ T59] usb 5-1: could not get target info (-71) [ 337.863729][ T59] usb 5-1: could not probe fw (-71) [ 337.874414][ T5880] usb 7-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 337.890513][ T5880] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.899715][ T5880] usb 7-1: Product: syz [ 337.908812][ T5880] usb 7-1: Manufacturer: syz [ 337.916740][ T5880] usb 7-1: SerialNumber: syz [ 337.940900][ T5880] usb 7-1: config 0 descriptor?? [ 337.995520][T13621] ipvlan2: entered promiscuous mode [ 338.003150][T13621] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 338.010926][T13621] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 338.357533][ T5880] airspy 7-1:0.0: Board ID: 00 [ 338.365366][ T5880] airspy 7-1:0.0: Firmware version: [ 338.764112][ T5880] airspy 7-1:0.0: usb_control_msg() failed -71 request 0e [ 338.783821][ T5903] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 338.799014][ T5880] airspy 7-1:0.0: Registered as swradio24 [ 338.805233][ T5880] airspy 7-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 338.823634][ T5880] usb 7-1: USB disconnect, device number 6 [ 338.928204][T13655] netlink: 136 bytes leftover after parsing attributes in process `syz.5.3414'. [ 338.938913][ T5903] usb 5-1: Using ep0 maxpacket: 32 [ 338.946665][ T5903] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 338.958518][ T5903] usb 5-1: config 0 has no interface number 0 [ 338.964800][ T5903] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.987724][ T5903] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.016295][ T5903] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 339.036264][ T5903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.065710][ T5903] usb 5-1: config 0 descriptor?? [ 339.243062][T13663] team0: No ports can be present during mode change [ 339.719530][ T5903] uclogic 0003:28BD:0094.0017: pen parameters not found [ 339.737298][ T5903] uclogic 0003:28BD:0094.0017: interface is invalid, ignoring [ 339.746468][T13674] netlink: 'syz.6.3424': attribute type 1 has an invalid length. [ 339.760781][T13674] netlink: 'syz.6.3424': attribute type 3 has an invalid length. [ 339.769251][T13674] netlink: 216 bytes leftover after parsing attributes in process `syz.6.3424'. [ 339.779846][T13674] NCSI netlink: No device for ifindex 813332851 [ 339.941188][ T5880] usb 5-1: USB disconnect, device number 29 [ 340.088117][ T5903] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 340.242497][ T5903] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.269733][ T5903] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 340.284798][ T5903] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.299191][ T5903] usb 7-1: config 0 descriptor?? [ 340.726726][ T5903] keytouch 0003:0926:3333.0018: fixing up Keytouch IEC report descriptor [ 340.754754][ T5903] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.0018/input/input42 [ 340.911915][ T5903] keytouch 0003:0926:3333.0018: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0 [ 342.129779][T13775] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 342.901364][ T9] usb 7-1: USB disconnect, device number 7 [ 342.988268][T13801] program syz.7.3479 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 343.070239][ T5903] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 343.240619][ T5903] usb 1-1: Using ep0 maxpacket: 16 [ 343.257336][ T5903] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.291862][ T5903] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 343.305179][ T5903] usb 1-1: config 0 interface 0 has no altsetting 0 [ 343.316840][ T5903] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 343.333434][ T5903] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.346544][ T5903] usb 1-1: config 0 descriptor?? [ 343.786032][ T5903] hid (null): unknown global tag 0xc [ 343.801019][ T5903] hid (null): report_id 0 is invalid [ 343.818188][ T5903] hid (null): unknown global tag 0xe [ 344.025005][ T5903] usb 1-1: USB disconnect, device number 21 [ 344.424725][T13836] sctp: [Deprecated]: syz.5.3495 (pid 13836) Use of int in maxseg socket option. [ 344.424725][T13836] Use struct sctp_assoc_value instead [ 344.618797][T13841] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3497'. [ 344.647717][T13841] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3497'. [ 344.800778][T13847] overlayfs: invalid origin (0000) [ 345.086819][T13861] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 345.988491][ T5903] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 346.177368][ T5903] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 346.192504][ T5903] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.213786][ T5903] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.254107][ T5903] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 346.291906][ T5903] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 346.306666][ T5903] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 346.325777][ T5903] usb 1-1: Manufacturer: syz [ 346.344643][ T5903] usb 1-1: config 0 descriptor?? [ 346.435268][T13907] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3527'. [ 346.592652][T13907] hsr_slave_1 (unregistering): left promiscuous mode [ 346.787425][ T5903] appleir 0003:05AC:8243.001A: unknown main item tag 0x0 [ 346.808778][ T5903] appleir 0003:05AC:8243.001A: No inputs registered, leaving [ 346.846322][ T5903] appleir 0003:05AC:8243.001A: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 347.081956][ T5814] usb 1-1: USB disconnect, device number 22 [ 348.302722][T13973] syzkaller1: entered promiscuous mode [ 348.317730][T13973] syzkaller1: entered allmulticast mode [ 348.395788][T13977] input: syz0 as /devices/virtual/input/input43 [ 349.996798][T14052] Bluetooth: hci5: Frame reassembly failed (-84) [ 350.087665][T14056] loop6: detected capacity change from 0 to 524287999 [ 350.198209][ T5911] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 350.372763][ T5911] usb 6-1: Using ep0 maxpacket: 32 [ 350.383113][ T5911] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 350.394667][ T5911] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.425373][ T5911] usb 6-1: config 0 descriptor?? [ 350.653985][ T5911] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 350.664003][ T5911] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 350.693609][ T5911] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 350.704476][ T5911] usb 6-1: media controller created [ 350.775736][ T5911] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 350.858598][ T5911] az6027: usb out operation failed. (-71) [ 350.864826][ T5911] az6027: usb out operation failed. (-71) [ 350.877320][ T5911] stb0899_attach: Driver disabled by Kconfig [ 350.883703][ T5911] az6027: no front-end attached [ 350.883703][ T5911] [ 350.907996][ T5911] az6027: usb out operation failed. (-71) [ 350.917767][ T5911] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 350.931326][ T5911] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input44 [ 350.945846][ T5911] dvb-usb: schedule remote query interval to 400 msecs. [ 350.981983][ T5911] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 350.992710][ T5911] usb 6-1: USB disconnect, device number 6 [ 351.074376][T14094] syzkaller1: entered promiscuous mode [ 351.080246][T14094] syzkaller1: entered allmulticast mode [ 351.111046][ T5911] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 351.723302][T14124] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3625'. [ 351.758944][T14124] ipvlan2: entered promiscuous mode [ 352.044895][T14137] syzkaller1: entered promiscuous mode [ 352.059085][ T55] Bluetooth: hci5: command 0x1003 tx timeout [ 352.067488][ T5835] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 352.079194][T14137] syzkaller1: entered allmulticast mode [ 352.096257][ T119] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 352.256101][ T119] usb 7-1: Using ep0 maxpacket: 16 [ 352.275654][ T119] usb 7-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01 [ 352.294946][ T119] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.315592][T14142] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3633'. [ 352.338151][T14144] loop8: detected capacity change from 0 to 7 [ 352.346047][ T119] usb 7-1: Product: syz [ 352.354653][ T119] usb 7-1: Manufacturer: syz [ 352.370696][ T119] usb 7-1: SerialNumber: syz [ 352.373379][T14144] Dev loop8: unable to read RDB block 7 [ 352.399108][ T119] usb 7-1: config 0 descriptor?? [ 352.418509][T14144] loop8: AHDI p1 p3 p4 [ 352.419774][ T119] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected. [ 352.431076][T14144] loop8: partition table partially beyond EOD, truncated [ 352.461836][T14144] loop8: p1 start 975770946 is beyond EOD, truncated [ 352.499410][T14144] loop8: p3 start 6514546 is beyond EOD, truncated [ 352.634322][ T119] pwc: Warning: more than 1 configuration available. [ 352.653148][ T119] pwc: Failed to set LED on/off time (-71) [ 352.661323][ T119] pwc: send_video_command error -71 [ 352.679527][ T119] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 352.695381][ T119] Philips webcam 7-1:0.0: probe with driver Philips webcam failed with error -71 [ 352.708438][ T119] usb 7-1: USB disconnect, device number 8 [ 352.708707][T14160] loop6: detected capacity change from 0 to 63 [ 352.726596][T14160] buffer_io_error: 7 callbacks suppressed [ 352.726616][T14160] Buffer I/O error on dev loop6, logical block 0, async page read [ 352.763753][T14160] Buffer I/O error on dev loop6, logical block 1, async page read [ 352.772859][T14160] Buffer I/O error on dev loop6, logical block 2, async page read [ 352.784024][T14160] Buffer I/O error on dev loop6, logical block 3, async page read [ 352.792368][T14160] Buffer I/O error on dev loop6, logical block 0, async page read [ 352.806208][T14160] Buffer I/O error on dev loop6, logical block 1, async page read [ 352.814491][T14160] Buffer I/O error on dev loop6, logical block 2, async page read [ 352.823037][T14160] Buffer I/O error on dev loop6, logical block 3, async page read [ 352.898967][ T5911] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 353.056177][ T5911] usb 1-1: Using ep0 maxpacket: 32 [ 353.067017][ T5911] usb 1-1: config 0 has an invalid interface number: 151 but max is 0 [ 353.075459][ T5911] usb 1-1: config 0 has no interface number 0 [ 353.093128][ T5911] usb 1-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 353.104479][ T5911] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.113252][ T5911] usb 1-1: Product: syz [ 353.118878][ T5911] usb 1-1: Manufacturer: syz [ 353.124575][ T5911] usb 1-1: SerialNumber: syz [ 353.132595][ T5911] usb 1-1: config 0 descriptor?? [ 353.590105][T14158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.613306][T14158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.713118][ T5911] usb 1-1: USB disconnect, device number 23 [ 353.815605][ T5903] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 353.985245][ T5903] usb 7-1: Using ep0 maxpacket: 32 [ 353.998020][ T5903] usb 7-1: config 0 has an invalid interface number: 12 but max is 0 [ 354.016852][ T5903] usb 7-1: config 0 has no interface number 0 [ 354.023169][ T5903] usb 7-1: config 0 interface 12 has no altsetting 0 [ 354.034016][ T5903] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 354.044467][ T5903] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.052690][ T5903] usb 7-1: Product: syz [ 354.060988][ T5903] usb 7-1: Manufacturer: syz [ 354.066167][ T5903] usb 7-1: SerialNumber: syz [ 354.099008][ T5903] usb 7-1: config 0 descriptor?? [ 354.212737][ T5835] Bluetooth: hci4: link tx timeout [ 354.218529][ T5835] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 354.232646][ T5835] Bluetooth: hci4: link tx timeout [ 354.237894][ T5835] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 354.245938][ T5835] Bluetooth: hci4: link tx timeout [ 354.251100][ T5835] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 354.259344][ T5835] Bluetooth: hci4: link tx timeout [ 354.264537][ T5835] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 354.273236][ T5835] Bluetooth: hci4: link tx timeout [ 354.278700][ T5835] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 354.286579][ T5835] Bluetooth: hci4: link tx timeout [ 354.291762][ T5835] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 354.300529][ T5835] Bluetooth: hci4: link tx timeout [ 354.305765][ T5835] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 354.396305][ T47] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 354.438481][T14216] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3668'. [ 354.557583][ T47] usb 6-1: Using ep0 maxpacket: 8 [ 354.575547][ T47] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 354.584745][ T47] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.600540][ T47] usb 6-1: config 0 descriptor?? [ 354.825012][ T47] asix 6-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 355.145134][ T5903] f81534 7-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 355.152984][ T5903] f81534 7-1:0.12: f81534_find_config_idx: read failed: -71 [ 355.176294][ T5903] f81534 7-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 355.184071][ T5903] f81534 7-1:0.12: probe with driver f81534 failed with error -71 [ 355.237477][ T5903] usb 7-1: USB disconnect, device number 9 [ 355.653601][ T47] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 355.683902][ T47] asix 6-1:0.0: probe with driver asix failed with error -71 [ 355.706269][ T47] usb 6-1: USB disconnect, device number 7 [ 356.296265][ T5835] Bluetooth: hci4: command 0x0406 tx timeout [ 356.658535][T14276] bond_slave_0: entered promiscuous mode [ 356.664628][T14276] bond_slave_1: entered promiscuous mode [ 356.670430][T14276] mac80211_hwsim hwsim13 wlan1: entered promiscuous mode [ 356.708790][ T5880] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 356.712741][T14276] macsec2: entered promiscuous mode [ 356.722058][T14276] bond0: entered promiscuous mode [ 356.733663][T14276] macsec2: entered allmulticast mode [ 356.739340][T14276] bond0: entered allmulticast mode [ 356.744694][ T5880] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 356.758482][T14276] bond_slave_0: entered allmulticast mode [ 356.764953][T14276] bond_slave_1: entered allmulticast mode [ 356.770944][T14276] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode [ 356.802807][T14276] bond0: left allmulticast mode [ 356.823111][T14276] bond_slave_0: left allmulticast mode [ 356.833022][T14276] bond_slave_1: left allmulticast mode [ 356.846270][T14276] mac80211_hwsim hwsim13 wlan1: left allmulticast mode [ 356.854365][T14276] bond0: left promiscuous mode [ 356.860304][T14276] bond_slave_0: left promiscuous mode [ 356.865833][T14276] bond_slave_1: left promiscuous mode [ 356.871506][T14276] mac80211_hwsim hwsim13 wlan1: left promiscuous mode [ 356.890517][ T5903] kernel write not supported for file /521/coredump_filter (pid: 5903 comm: kworker/1:5) [ 356.964660][ T47] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 356.993562][T14290] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3704'. [ 357.140610][ T47] usb 1-1: config 0 has no interfaces? [ 357.149916][ T47] usb 1-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=87.c0 [ 357.166869][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.194043][ T47] usb 1-1: Product: syz [ 357.198271][ T47] usb 1-1: Manufacturer: syz [ 357.202886][ T47] usb 1-1: SerialNumber: syz [ 357.240363][ T47] usb 1-1: config 0 descriptor?? [ 357.399891][T14307] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3712'. [ 357.424729][ T30] audit: type=1326 audit(1748065277.556:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14308 comm="syz.6.3713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6efd8e969 code=0x7ffc0000 [ 357.484290][ T47] usb 1-1: USB disconnect, device number 24 [ 357.511208][ T30] audit: type=1326 audit(1748065277.556:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14308 comm="syz.6.3713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6efd8e969 code=0x7ffc0000 [ 357.576652][ T30] audit: type=1326 audit(1748065277.556:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14308 comm="syz.6.3713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb6efd8e969 code=0x7ffc0000 [ 357.629712][ T30] audit: type=1326 audit(1748065277.556:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14308 comm="syz.6.3713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6efd8e969 code=0x7ffc0000 [ 357.708204][ T30] audit: type=1326 audit(1748065277.556:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14308 comm="syz.6.3713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6efd8e969 code=0x7ffc0000 [ 357.752519][ T30] audit: type=1326 audit(1748065277.566:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14308 comm="syz.6.3713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb6efd8e969 code=0x7ffc0000 [ 357.823451][ T30] audit: type=1326 audit(1748065277.566:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14308 comm="syz.6.3713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6efd8e969 code=0x7ffc0000 [ 357.878867][ T30] audit: type=1326 audit(1748065277.566:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14308 comm="syz.6.3713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb6efd85927 code=0x7ffc0000 [ 357.927165][ T30] audit: type=1326 audit(1748065277.566:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14308 comm="syz.6.3713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb6efd2ab39 code=0x7ffc0000 [ 358.000486][ T30] audit: type=1326 audit(1748065277.566:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14308 comm="syz.6.3713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb6efd8e969 code=0x7ffc0000 [ 358.147651][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 358.370110][T14344] [ 358.372509][T14344] ===================================================== [ 358.379500][T14344] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 358.387000][T14344] 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 Not tainted [ 358.394143][T14344] ----------------------------------------------------- [ 358.401109][T14344] syz.6.3728/14344 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 358.408868][T14344] ffffffff8dc0c058 (tasklist_lock){.+.+}-{3:3}, at: send_sigurg+0x12b/0x420 [ 358.417640][T14344] [ 358.417640][T14344] and this task is already holding: [ 358.425043][T14344] ffff88805bd901a0 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420 [ 358.433895][T14344] which would create a new lock dependency: [ 358.439823][T14344] (&f_owner->lock){....}-{3:3} -> (tasklist_lock){.+.+}-{3:3} [ 358.447481][T14344] [ 358.447481][T14344] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 358.456965][T14344] (&dev->event_lock#2){..-.}-{3:3} [ 358.457018][T14344] [ 358.457018][T14344] ... which became SOFTIRQ-irq-safe at: [ 358.469975][T14344] lock_acquire+0x120/0x360 [ 358.474593][T14344] _raw_spin_lock_irqsave+0xa7/0xf0 [ 358.479892][T14344] input_event+0x7a/0xc0 [ 358.484239][T14344] hidinput_hid_event+0x12d7/0x1c90 [ 358.489540][T14344] hid_process_event+0x4be/0x620 [ 358.494586][T14344] hid_report_raw_event+0xe91/0x16d0 [ 358.499968][T14344] hid_input_report+0x43e/0x520 [ 358.504913][T14344] hid_irq_in+0x47e/0x6d0 [ 358.509340][T14344] __usb_hcd_giveback_urb+0x417/0x690 [ 358.514817][T14344] dummy_timer+0x862/0x4550 [ 358.519421][T14344] __hrtimer_run_queues+0x52c/0xc60 [ 358.524729][T14344] hrtimer_run_softirq+0x187/0x2b0 [ 358.529939][T14344] handle_softirqs+0x283/0x870 [ 358.534807][T14344] __irq_exit_rcu+0xca/0x1f0 [ 358.539505][T14344] irq_exit_rcu+0x9/0x30 [ 358.543853][T14344] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 358.549583][T14344] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 358.555686][T14344] lock_release+0x0/0x3e0 [ 358.560203][T14344] unwind_next_frame+0x19a9/0x2390 [ 358.565415][T14344] __unwind_start+0x5b9/0x760 [ 358.570187][T14344] arch_stack_walk+0xe4/0x150 [ 358.574973][T14344] stack_trace_save+0x9c/0xe0 [ 358.579747][T14344] kasan_save_track+0x3e/0x80 [ 358.584523][T14344] __kasan_kmalloc+0x93/0xb0 [ 358.589211][T14344] __kvmalloc_node_noprof+0x314/0x5e0 [ 358.594800][T14344] io_alloc_cache_init+0x3d/0x140 [ 358.599922][T14344] io_rsrc_cache_init+0x43/0x50 [ 358.604870][T14344] io_ring_ctx_alloc+0x4ab/0xa30 [ 358.609909][T14344] io_uring_create+0x130/0xb60 [ 358.614788][T14344] __se_sys_io_uring_setup+0x264/0x270 [ 358.620341][T14344] do_syscall_64+0xf6/0x210 [ 358.624948][T14344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.630945][T14344] [ 358.630945][T14344] to a SOFTIRQ-irq-unsafe lock: [ 358.637971][T14344] (tasklist_lock){.+.+}-{3:3} [ 358.638002][T14344] [ 358.638002][T14344] ... which became SOFTIRQ-irq-unsafe at: [ 358.650756][T14344] ... [ 358.650766][T14344] lock_acquire+0x120/0x360 [ 358.657975][T14344] _raw_read_lock+0x36/0x50 [ 358.662571][T14344] __do_wait+0xde/0x740 [ 358.666828][T14344] do_wait+0x1f8/0x520 [ 358.670998][T14344] kernel_wait+0xab/0x170 [ 358.675515][T14344] call_usermodehelper_exec_work+0xbe/0x230 [ 358.681510][T14344] process_scheduled_works+0xade/0x17a0 [ 358.687204][T14344] worker_thread+0x8a0/0xda0 [ 358.691910][T14344] kthread+0x711/0x8a0 [ 358.696085][T14344] ret_from_fork+0x4b/0x80 [ 358.700596][T14344] ret_from_fork_asm+0x1a/0x30 [ 358.705657][T14344] [ 358.705657][T14344] other info that might help us debug this: [ 358.705657][T14344] [ 358.715894][T14344] Chain exists of: [ 358.715894][T14344] &dev->event_lock#2 --> &f_owner->lock --> tasklist_lock [ 358.715894][T14344] [ 358.729679][T14344] Possible interrupt unsafe locking scenario: [ 358.729679][T14344] [ 358.738008][T14344] CPU0 CPU1 [ 358.744003][T14344] ---- ---- [ 358.749381][T14344] lock(tasklist_lock); [ 358.753644][T14344] local_irq_disable(); [ 358.760401][T14344] lock(&dev->event_lock#2); [ 358.767616][T14344] lock(&f_owner->lock); [ 358.774484][T14344] [ 358.777941][T14344] lock(&dev->event_lock#2); [ 358.782809][T14344] [ 358.782809][T14344] *** DEADLOCK *** [ 358.782809][T14344] [ 358.790955][T14344] 2 locks held by syz.6.3728/14344: [ 358.796152][T14344] #0: ffff88807fbd48c0 (&u->lock){+.+.}-{3:3}, at: queue_oob+0x1d7/0x4e0 [ 358.804729][T14344] #1: ffff88805bd901a0 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420 [ 358.813890][T14344] [ 358.813890][T14344] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 358.824749][T14344] -> (&dev->event_lock#2){..-.}-{3:3} { [ 358.830512][T14344] IN-SOFTIRQ-W at: [ 358.834679][T14344] lock_acquire+0x120/0x360 [ 358.841196][T14344] _raw_spin_lock_irqsave+0xa7/0xf0 [ 358.848403][T14344] input_event+0x7a/0xc0 [ 358.854651][T14344] hidinput_hid_event+0x12d7/0x1c90 [ 358.861862][T14344] hid_process_event+0x4be/0x620 [ 358.868811][T14344] hid_report_raw_event+0xe91/0x16d0 [ 358.876104][T14344] hid_input_report+0x43e/0x520 [ 358.882961][T14344] hid_irq_in+0x47e/0x6d0 [ 358.889299][T14344] __usb_hcd_giveback_urb+0x417/0x690 [ 358.896691][T14344] dummy_timer+0x862/0x4550 [ 358.903207][T14344] __hrtimer_run_queues+0x52c/0xc60 [ 358.910417][T14344] hrtimer_run_softirq+0x187/0x2b0 [ 358.917543][T14344] handle_softirqs+0x283/0x870 [ 358.924319][T14344] __irq_exit_rcu+0xca/0x1f0 [ 358.930920][T14344] irq_exit_rcu+0x9/0x30 [ 358.937171][T14344] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 358.945350][T14344] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 358.953338][T14344] lock_release+0x0/0x3e0 [ 358.959683][T14344] unwind_next_frame+0x19a9/0x2390 [ 358.966808][T14344] __unwind_start+0x5b9/0x760 [ 358.973579][T14344] arch_stack_walk+0xe4/0x150 [ 358.980269][T14344] stack_trace_save+0x9c/0xe0 [ 358.986976][T14344] kasan_save_track+0x3e/0x80 [ 358.993670][T14344] __kasan_kmalloc+0x93/0xb0 [ 359.000305][T14344] __kvmalloc_node_noprof+0x314/0x5e0 [ 359.007688][T14344] io_alloc_cache_init+0x3d/0x140 [ 359.014819][T14344] io_rsrc_cache_init+0x43/0x50 [ 359.021688][T14344] io_ring_ctx_alloc+0x4ab/0xa30 [ 359.028653][T14344] io_uring_create+0x130/0xb60 [ 359.035438][T14344] __se_sys_io_uring_setup+0x264/0x270 [ 359.042907][T14344] do_syscall_64+0xf6/0x210 [ 359.049431][T14344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.057333][T14344] INITIAL USE at: [ 359.061414][T14344] lock_acquire+0x120/0x360 [ 359.067843][T14344] _raw_spin_lock_irqsave+0xa7/0xf0 [ 359.074964][T14344] input_inject_event+0xab/0x320 [ 359.081830][T14344] kbd_led_trigger_activate+0xbc/0x100 [ 359.089218][T14344] led_trigger_set+0x52d/0x950 [ 359.095911][T14344] led_trigger_set_default+0x215/0x250 [ 359.103297][T14344] led_classdev_register_ext+0x73d/0x930 [ 359.110851][T14344] input_leds_connect+0x517/0x790 [ 359.117816][T14344] input_register_device+0xcee/0x10b0 [ 359.125126][T14344] atkbd_connect+0x70e/0x9c0 [ 359.131640][T14344] serio_driver_probe+0x7f/0xa0 [ 359.138422][T14344] really_probe+0x26d/0x9a0 [ 359.144860][T14344] __driver_probe_device+0x18c/0x2f0 [ 359.152071][T14344] driver_probe_device+0x4f/0x430 [ 359.159019][T14344] __driver_attach+0x452/0x700 [ 359.165707][T14344] bus_for_each_dev+0x233/0x2b0 [ 359.172666][T14344] serio_handle_event+0x1a2/0x860 [ 359.179649][T14344] process_scheduled_works+0xade/0x17a0 [ 359.187141][T14344] worker_thread+0x8a0/0xda0 [ 359.193665][T14344] kthread+0x711/0x8a0 [ 359.199655][T14344] ret_from_fork+0x4b/0x80 [ 359.205986][T14344] ret_from_fork_asm+0x1a/0x30 [ 359.212699][T14344] } [ 359.215391][T14344] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 359.224614][T14344] -> (&new->fa_lock){....}-{3:3} { [ 359.229855][T14344] INITIAL USE at: [ 359.233844][T14344] lock_acquire+0x120/0x360 [ 359.240102][T14344] _raw_write_lock_irq+0xa2/0xf0 [ 359.246790][T14344] fasync_remove_entry+0xf1/0x1c0 [ 359.253654][T14344] lease_modify+0x1ca/0x3c0 [ 359.259905][T14344] generic_setlease+0x9ab/0x1240 [ 359.266602][T14344] fcntl_setlease+0xc6/0x4c0 [ 359.272946][T14344] do_fcntl+0x6a0/0x1910 [ 359.279126][T14344] __se_sys_fcntl+0xc8/0x150 [ 359.285484][T14344] do_syscall_64+0xf6/0x210 [ 359.291751][T14344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.299393][T14344] INITIAL READ USE at: [ 359.303820][T14344] lock_acquire+0x120/0x360 [ 359.310510][T14344] _raw_read_lock_irqsave+0xaf/0x100 [ 359.317986][T14344] kill_fasync+0x199/0x4d0 [ 359.324673][T14344] lease_break_callback+0x26/0x30 [ 359.331891][T14344] __break_lease+0x6a5/0x1620 [ 359.338750][T14344] vfs_truncate+0x428/0x520 [ 359.345439][T14344] do_sys_truncate+0xdb/0x190 [ 359.352313][T14344] __x64_sys_truncate+0x5b/0x70 [ 359.359529][T14344] do_syscall_64+0xf6/0x210 [ 359.366217][T14344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.374404][T14344] } [ 359.377009][T14344] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 359.385797][T14344] ... acquired at: [ 359.389703][T14344] lock_acquire+0x120/0x360 [ 359.394419][T14344] _raw_read_lock_irqsave+0xaf/0x100 [ 359.399906][T14344] kill_fasync+0x199/0x4d0 [ 359.404532][T14344] mousedev_notify_readers+0x6f1/0xc00 [ 359.410180][T14344] mousedev_event+0x602/0x1320 [ 359.415133][T14344] input_handle_events_default+0xd1/0x1a0 [ 359.421049][T14344] input_pass_values+0x288/0x890 [ 359.426185][T14344] input_event_dispose+0x330/0x6b0 [ 359.431493][T14344] input_inject_event+0x1fe/0x320 [ 359.436706][T14344] evdev_write+0x2fc/0x480 [ 359.441335][T14344] vfs_write+0x27e/0xa90 [ 359.445770][T14344] ksys_write+0x145/0x250 [ 359.450283][T14344] do_syscall_64+0xf6/0x210 [ 359.454974][T14344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.461069][T14344] [ 359.463396][T14344] -> (&f_owner->lock){....}-{3:3} { [ 359.468626][T14344] INITIAL USE at: [ 359.472528][T14344] lock_acquire+0x120/0x360 [ 359.478613][T14344] _raw_write_lock_irq+0xa2/0xf0 [ 359.485126][T14344] __f_setown+0x67/0x370 [ 359.490956][T14344] fcntl_dirnotify+0x3d6/0x690 [ 359.497297][T14344] do_fcntl+0x6c7/0x1910 [ 359.503114][T14344] __se_sys_fcntl+0xc8/0x150 [ 359.509282][T14344] do_syscall_64+0xf6/0x210 [ 359.515365][T14344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.522833][T14344] INITIAL READ USE at: [ 359.527175][T14344] lock_acquire+0x120/0x360 [ 359.533696][T14344] _raw_read_lock_irqsave+0xaf/0x100 [ 359.540987][T14344] send_sigio+0x38/0x370 [ 359.547239][T14344] kill_fasync+0x24d/0x4d0 [ 359.553665][T14344] lease_break_callback+0x26/0x30 [ 359.560730][T14344] __break_lease+0x6a5/0x1620 [ 359.567431][T14344] vfs_truncate+0x428/0x520 [ 359.573950][T14344] do_sys_truncate+0xdb/0x190 [ 359.580639][T14344] __x64_sys_truncate+0x5b/0x70 [ 359.587530][T14344] do_syscall_64+0xf6/0x210 [ 359.594047][T14344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.601946][T14344] } [ 359.604447][T14344] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 359.613308][T14344] ... acquired at: [ 359.617120][T14344] lock_acquire+0x120/0x360 [ 359.621809][T14344] _raw_read_lock_irqsave+0xaf/0x100 [ 359.627283][T14344] send_sigio+0x38/0x370 [ 359.631709][T14344] kill_fasync+0x24d/0x4d0 [ 359.636310][T14344] lease_break_callback+0x26/0x30 [ 359.641519][T14344] __break_lease+0x6a5/0x1620 [ 359.646383][T14344] vfs_truncate+0x428/0x520 [ 359.651070][T14344] do_sys_truncate+0xdb/0x190 [ 359.655934][T14344] __x64_sys_truncate+0x5b/0x70 [ 359.660970][T14344] do_syscall_64+0xf6/0x210 [ 359.665663][T14344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.671733][T14344] [ 359.674062][T14344] [ 359.674062][T14344] the dependencies between the lock to be acquired [ 359.674074][T14344] and SOFTIRQ-irq-unsafe lock: [ 359.687601][T14344] -> (tasklist_lock){.+.+}-{3:3} { [ 359.692741][T14344] HARDIRQ-ON-R at: [ 359.696725][T14344] lock_acquire+0x120/0x360 [ 359.702895][T14344] _raw_read_lock+0x36/0x50 [ 359.709058][T14344] __do_wait+0xde/0x740 [ 359.714884][T14344] do_wait+0x1f8/0x520 [ 359.720639][T14344] kernel_wait+0xab/0x170 [ 359.726633][T14344] call_usermodehelper_exec_work+0xbe/0x230 [ 359.734281][T14344] process_scheduled_works+0xade/0x17a0 [ 359.741494][T14344] worker_thread+0x8a0/0xda0 [ 359.748002][T14344] kthread+0x711/0x8a0 [ 359.753746][T14344] ret_from_fork+0x4b/0x80 [ 359.759838][T14344] ret_from_fork_asm+0x1a/0x30 [ 359.766709][T14344] SOFTIRQ-ON-R at: [ 359.770710][T14344] lock_acquire+0x120/0x360 [ 359.776880][T14344] _raw_read_lock+0x36/0x50 [ 359.783306][T14344] __do_wait+0xde/0x740 [ 359.789125][T14344] do_wait+0x1f8/0x520 [ 359.794858][T14344] kernel_wait+0xab/0x170 [ 359.800864][T14344] call_usermodehelper_exec_work+0xbe/0x230 [ 359.808446][T14344] process_scheduled_works+0xade/0x17a0 [ 359.815666][T14344] worker_thread+0x8a0/0xda0 [ 359.821914][T14344] kthread+0x711/0x8a0 [ 359.827648][T14344] ret_from_fork+0x4b/0x80 [ 359.833725][T14344] ret_from_fork_asm+0x1a/0x30 [ 359.840161][T14344] INITIAL USE at: [ 359.844063][T14344] lock_acquire+0x120/0x360 [ 359.850154][T14344] _raw_write_lock_irq+0xa2/0xf0 [ 359.856666][T14344] copy_process+0x21d5/0x3b80 [ 359.862912][T14344] kernel_clone+0x224/0x7f0 [ 359.868982][T14344] user_mode_thread+0xdd/0x140 [ 359.875322][T14344] rest_init+0x23/0x300 [ 359.881059][T14344] start_kernel+0x470/0x4f0 [ 359.887140][T14344] x86_64_start_reservations+0x2a/0x30 [ 359.894182][T14344] x86_64_start_kernel+0x66/0x70 [ 359.900699][T14344] common_startup_64+0x13e/0x147 [ 359.907217][T14344] INITIAL READ USE at: [ 359.911554][T14344] lock_acquire+0x120/0x360 [ 359.918075][T14344] _raw_read_lock+0x36/0x50 [ 359.924597][T14344] __do_wait+0xde/0x740 [ 359.930766][T14344] do_wait+0x1f8/0x520 [ 359.936844][T14344] kernel_wait+0xab/0x170 [ 359.943179][T14344] call_usermodehelper_exec_work+0xbe/0x230 [ 359.951086][T14344] process_scheduled_works+0xade/0x17a0 [ 359.958650][T14344] worker_thread+0x8a0/0xda0 [ 359.965245][T14344] kthread+0x711/0x8a0 [ 359.971324][T14344] ret_from_fork+0x4b/0x80 [ 359.977747][T14344] ret_from_fork_asm+0x1a/0x30 [ 359.984527][T14344] } [ 359.987027][T14344] ... key at: [] tasklist_lock+0x18/0x40 [ 359.994762][T14344] ... acquired at: [ 359.998574][T14344] lock_acquire+0x120/0x360 [ 360.003299][T14344] _raw_read_lock+0x36/0x50 [ 360.007990][T14344] send_sigurg+0x12b/0x420 [ 360.012593][T14344] sk_send_sigurg+0x6c/0x2e0 [ 360.017367][T14344] queue_oob+0x3d9/0x4e0 [ 360.021795][T14344] unix_stream_sendmsg+0xa41/0xb60 [ 360.027173][T14344] __sock_sendmsg+0x219/0x270 [ 360.032108][T14344] ____sys_sendmsg+0x52d/0x830 [ 360.037067][T14344] ___sys_sendmsg+0x21f/0x2a0 [ 360.041944][T14344] __sys_sendmmsg+0x227/0x430 [ 360.046804][T14344] __x64_sys_sendmmsg+0xa0/0xc0 [ 360.051837][T14344] do_syscall_64+0xf6/0x210 [ 360.056527][T14344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.062603][T14344] [ 360.064932][T14344] [ 360.064932][T14344] stack backtrace: [ 360.070842][T14344] CPU: 1 UID: 0 PID: 14344 Comm: syz.6.3728 Not tainted 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 360.070867][T14344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 360.070881][T14344] Call Trace: [ 360.070890][T14344] [ 360.070903][T14344] dump_stack_lvl+0x189/0x250 [ 360.070930][T14344] ? __pfx_dump_stack_lvl+0x10/0x10 [ 360.070952][T14344] ? __pfx__printk+0x10/0x10 [ 360.070983][T14344] validate_chain+0x1f05/0x2140 [ 360.071020][T14344] __lock_acquire+0xaac/0xd20 [ 360.071048][T14344] ? send_sigurg+0x12b/0x420 [ 360.071065][T14344] lock_acquire+0x120/0x360 [ 360.071086][T14344] ? send_sigurg+0x12b/0x420 [ 360.071105][T14344] ? _raw_read_lock_irqsave+0xbb/0x100 [ 360.071133][T14344] _raw_read_lock+0x36/0x50 [ 360.071149][T14344] ? send_sigurg+0x12b/0x420 [ 360.071166][T14344] send_sigurg+0x12b/0x420 [ 360.071186][T14344] sk_send_sigurg+0x6c/0x2e0 [ 360.071202][T14344] queue_oob+0x3d9/0x4e0 [ 360.071223][T14344] ? __pfx_queue_oob+0x10/0x10 [ 360.071242][T14344] ? smack_socket_getpeersec_dgram+0x320/0x430 [ 360.071268][T14344] unix_stream_sendmsg+0xa41/0xb60 [ 360.071286][T14344] ? lockdep_hardirqs_on+0x9c/0x150 [ 360.071308][T14344] ? trace_sched_exit_tp+0x38/0x120 [ 360.071328][T14344] ? __schedule+0x16ad/0x4c70 [ 360.071345][T14344] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 360.071369][T14344] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 360.071386][T14344] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 360.071404][T14344] __sock_sendmsg+0x219/0x270 [ 360.071422][T14344] ____sys_sendmsg+0x52d/0x830 [ 360.071446][T14344] ? __pfx_____sys_sendmsg+0x10/0x10 [ 360.071472][T14344] ? import_iovec+0x74/0xa0 [ 360.071496][T14344] ___sys_sendmsg+0x21f/0x2a0 [ 360.071519][T14344] ? __pfx____sys_sendmsg+0x10/0x10 [ 360.071556][T14344] ? __fget_files+0x2a/0x420 [ 360.071570][T14344] ? __fget_files+0x3a0/0x420 [ 360.071589][T14344] __sys_sendmmsg+0x227/0x430 [ 360.071613][T14344] ? __pfx___sys_sendmmsg+0x10/0x10 [ 360.071639][T14344] ? __pfx_do_futex+0x10/0x10 [ 360.071653][T14344] ? smack_file_fcntl+0x137/0x2f0 [ 360.071676][T14344] ? rcu_is_watching+0x15/0xb0 [ 360.071704][T14344] __x64_sys_sendmmsg+0xa0/0xc0 [ 360.071727][T14344] do_syscall_64+0xf6/0x210 [ 360.071749][T14344] ? clear_bhb_loop+0x60/0xb0 [ 360.071767][T14344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.071783][T14344] RIP: 0033:0x7fb6efd8e969 [ 360.071806][T14344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 360.071820][T14344] RSP: 002b:00007fb6f0c9c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 360.071839][T14344] RAX: ffffffffffffffda RBX: 00007fb6effb5fa0 RCX: 00007fb6efd8e969 [ 360.071851][T14344] RDX: 0000000000000001 RSI: 0000200000000380 RDI: 0000000000000003 [ 360.071862][T14344] RBP: 00007fb6efe10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 360.071873][T14344] R10: 0000000000040015 R11: 0000000000000246 R12: 0000000000000000 [ 360.071883][T14344] R13: 0000000000000000 R14: 00007fb6effb5fa0 R15: 00007ffdd590e1d8 [ 360.071901][T14344]