last executing test programs: 8m29.343301615s ago: executing program 3 (id=2532): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800e00010069703665727370616e000000100002800400120006001800177b000008000a00", @ANYRES32=r1], 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000) 8m29.197697577s ago: executing program 3 (id=2535): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="030000000400000004000000"], 0x48) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x8) unshare(0x2040400) socket$packet(0x11, 0x3, 0x300) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) socket(0x10, 0x3, 0x0) 8m22.443241634s ago: executing program 3 (id=2555): mount$bind(0x0, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x8b189a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xe}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c383032313100"], 0x20}}, 0x0) 8m21.46072605s ago: executing program 3 (id=2557): madvise(&(0x7f0000b0f000/0x2000)=nil, 0x2000, 0x16) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x9b, 0x5, 0xffffffff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x7ff, 0x100000000, 0x6eb, 0x0, 0x7, 0x2c0b}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 8m20.085631608s ago: executing program 3 (id=2561): syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x10040881) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) mount$9p_rdma(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x10400, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e24,posixacl,smackfsroot=+%,rootcontext=user_u,me', @ANYRESDEC, @ANYBLOB]) sendto$inet(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000b4000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000d100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e003000028008000100100000001c000580"], 0x68}}, 0x64000004) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000040)="e2", 0x1}], 0x1) 8m15.313412662s ago: executing program 3 (id=2572): socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x8080, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r4 = add_key$user(&(0x7f0000000340), &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000002440), 0xb, r3) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@keyring={'key_or_keyring:', r4}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r5, &(0x7f0000005200), 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x1, 0x0, 0xdd9f83, 0x0, 0x2f, 0xf3, 0x2, 0x8, 0x722, 0x6, 0x7, 0x83, 0x27, 0x20, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) 8m0.240163189s ago: executing program 32 (id=2572): socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x8080, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r4 = add_key$user(&(0x7f0000000340), &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000002440), 0xb, r3) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@keyring={'key_or_keyring:', r4}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r5, &(0x7f0000005200), 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x1, 0x0, 0xdd9f83, 0x0, 0x2f, 0xf3, 0x2, 0x8, 0x722, 0x6, 0x7, 0x83, 0x27, 0x20, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) 11.499846477s ago: executing program 1 (id=3624): syz_usb_connect$uac1(0x0, 0x72, &(0x7f0000000380)=ANY=[@ANYBLOB="1201100300000040532b31004000010203010902600003010710040904000000010100000a240172270a0002010209040100000102000009040101"], &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) 11.053249637s ago: executing program 5 (id=3626): syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES32], 0x0) 9.585950884s ago: executing program 1 (id=3634): sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000042c0)={{0x14, 0x10, 0x1, 0x0, 0x3000000, {0x7}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xc, 0x1, 'RATEEST\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) 9.23732696s ago: executing program 1 (id=3636): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) r1 = syz_io_uring_setup(0x110, &(0x7f0000000180)={0x0, 0xfad8, 0x800, 0x2, 0x3}, 0x0, &(0x7f0000000940)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r1, 0x133d, 0x0, 0x8, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x0, 0x80, 0x0, 0x4000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r5, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) r6 = dup(r5) r7 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r6, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r7, 0x488e, 0x0, 0x4, 0x0, 0x0) shutdown(r6, 0x1) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) inotify_init1(0x80800) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, &(0x7f0000000000)=0x7, 0x4) 8.668833011s ago: executing program 5 (id=3638): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x4780, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x20202) syz_open_dev$audion(&(0x7f0000000040), 0x1ff, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x101a01) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x1cf) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x141000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x275a, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='.\x00', 0x1000000, 0x0) 8.325371331s ago: executing program 2 (id=3641): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) read$FUSE(0xffffffffffffffff, &(0x7f0000000880)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x10) getpgid(r0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x58051}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}, @IFLA_MTU={0x8, 0x4, 0xd4}, @IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x7ff, 0x5}}]}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000014) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="01002cbd7000fd0fe42501000000"], 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x4040) r5 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r6, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r6, 0xa, 0x12) syz_emit_ethernet(0x38b, &(0x7f0000000940)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x355, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x22, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e100908f61640000000200000000000000000002000000008879e66485201a0015ca83747357a02745000400"/55}, {0x0, 0x12, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12"}, {0x0, 0x2, "d5170000dce9674a36da018dff16e70b"}]}}}}}}, 0x0) readv(r7, &(0x7f0000000400)=[{&(0x7f00000004c0)=""/157, 0x9d}], 0x1) dup2(r6, r7) fcntl$setown(r6, 0x8, r5) tkill(r5, 0x13) syz_socket_connect_nvme_tcp() socket$kcm(0x10, 0x2, 0x0) 8.27789684s ago: executing program 5 (id=3642): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$sock(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000980)="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", 0x373}, {&(0x7f0000000680)}, {&(0x7f0000000540)="2219a8d10300004000000000cace0cbd98984c9264b47153", 0x18}, {0x0}], 0x5}, 0x800) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {0x0}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 7.57336996s ago: executing program 5 (id=3643): syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0xff, 0xff, 0x0, 0x40, 0xbda, 0x8150, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x80, 0x0, "", {{0x9, 0x4, 0x0, 0x7f, 0x3, 0xff, 0x11, 0x1, 0x5, "", {{0x9, 0x5, 0x81, 0x2, 0x40, 0x6, 0x9, 0x4}, {0x9, 0x5, 0x2, 0x2, 0x20, 0x2, 0x57, 0x6e}, {0x9, 0x5, 0x83, 0x3, 0x240, 0x3, 0x82, 0x8}}}}}}]}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x88001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f00000002c0)={0x0, 0x0}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) syz_genetlink_get_family_id$devlink(0x0, r2) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4048aecb, &(0x7f0000000240)) 6.944049844s ago: executing program 2 (id=3645): socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdir(0x0, 0x0) r2 = fsopen(&(0x7f0000000080)='securityfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = openat$sysfs(0xffffff9c, 0x0, 0x0, 0x0) r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x2, &(0x7f0000000180)=""/120, &(0x7f0000000300)=0x78) r5 = fsmount(r4, 0x1, 0x0) fchmodat(r5, &(0x7f0000000000)='.\x00', 0xe0) 6.865702146s ago: executing program 2 (id=3646): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000002e00090027bd7000001000000400000004001d00070011"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 6.815539452s ago: executing program 0 (id=3647): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x80240, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) syz_io_uring_setup(0x1e1e, &(0x7f0000000380)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000), 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x1f, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 6.616578606s ago: executing program 4 (id=3648): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x180, 0x0) ioctl$TIOCGSOFTCAR(r2, 0x5414, &(0x7f0000000000)) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x23a, &(0x7f00000004c0)={0x0, 0x1c2a, 0x10000, 0x1, 0x25c, 0x0, r1}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8}, 0x1}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a0500000049da000000000000070000000900010073797a300000000048000000090a010400000000000000000700000900010073797a30000000000c0009800800014060000002080005400000100008000a400000000109de2acfe9797a31000046334d1a8d226284774e870020140000001000010000683df95fd3eb"], 0x90}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) chdir(&(0x7f0000000280)='./cgroup/file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='rdma.current\x00', 0x275a, 0x0) readv(r0, &(0x7f0000000440)=[{&(0x7f0000000380)=""/133, 0x85}, {&(0x7f0000000540)=""/134, 0x86}, {&(0x7f0000000700)=""/218, 0xda}, {&(0x7f00000002c0)=""/68, 0x44}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/155, 0x9b}, {&(0x7f0000001c40)=""/147, 0x93}, {&(0x7f0000001980)=""/210, 0xd2}, {&(0x7f0000001a80)=""/140, 0x8c}, {&(0x7f0000001b40)=""/251, 0xfb}], 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000)=0x1, r7, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r7, 0x10, 0x0, @ib={0x1b, 0x7, 0x0, {"00000000000000000000000000000001"}, 0x2000000000001005, 0x19dff, 0x400000000}}}, 0x90) io_uring_enter(r3, 0x2ded, 0x4000, 0x50, 0x0, 0x0) ioctl$SNDCTL_SEQ_GETTIME(r1, 0x80045113, &(0x7f00000000c0)) inotify_init1(0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 6.50010252s ago: executing program 0 (id=3649): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2003, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x1}]}}]}, 0x40}}, 0x4000010) 6.462030268s ago: executing program 2 (id=3650): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r2], 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000) 6.375625585s ago: executing program 0 (id=3651): r0 = landlock_create_ruleset(&(0x7f0000000080)={0x10}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x4) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x8172}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x6) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) 6.194421423s ago: executing program 0 (id=3652): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000, 0x1}) 6.131123356s ago: executing program 1 (id=3653): r0 = fsopen(&(0x7f00000001c0)='tracefs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="940000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff02000000040000000000000000000114000400000000f7000000000000ffffac1e00"], 0x94}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0xa0, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x18, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xa0}}, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 4.925914957s ago: executing program 0 (id=3654): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000780)={0x24, &(0x7f0000000a00)=ANY=[@ANYBLOB="110117"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.912354382s ago: executing program 1 (id=3655): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) read$FUSE(0xffffffffffffffff, &(0x7f0000000880)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x10) getpgid(r0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x58051}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}, @IFLA_MTU={0x8, 0x4, 0xd4}, @IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x7ff, 0x5}}]}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000014) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="01002cbd7000fd0fe42501000000"], 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x4040) r5 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r6, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r6, 0xa, 0x12) syz_emit_ethernet(0x38b, &(0x7f0000000940)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x355, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x22, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e100908f61640000000200000000000000000002000000008879e66485201a0015ca83747357a02745000400"/55}, {0x0, 0x12, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12"}, {0x0, 0x2, "d5170000dce9674a36da018dff16e70b"}]}}}}}}, 0x0) readv(r7, &(0x7f0000000400)=[{&(0x7f00000004c0)=""/157, 0x9d}], 0x1) dup2(r6, r7) fcntl$setown(r6, 0x8, r5) tkill(r5, 0x13) syz_socket_connect_nvme_tcp() socket$kcm(0x10, 0x2, 0x0) 4.858621171s ago: executing program 2 (id=3656): socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdir(0x0, 0x0) r4 = fsopen(&(0x7f0000000080)='securityfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = openat$sysfs(0xffffff9c, 0x0, 0x0, 0x0) r6 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x2, &(0x7f0000000180)=""/120, &(0x7f0000000300)=0x78) r7 = fsmount(r6, 0x1, 0x0) fchmodat(r7, &(0x7f0000000000)='.\x00', 0xe0) 3.838029907s ago: executing program 5 (id=3657): unshare(0x6a040000) r0 = socket(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) recvmmsg$unix(r4, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r0, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f0000002cc0)=[{&(0x7f0000004a80)=""/4083, 0xff3}], 0x1}}], 0x1, 0x0, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) open_by_handle_at(r7, &(0x7f00000002c0)=@shmem={0xc, 0x1, {0x9, 0x38000}}, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000100)={0x400, 0xa, 0x400, 0x0, 0x0, 0x180, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x10, 0xfffffffe, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}) 3.832527312s ago: executing program 2 (id=3658): openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000003c0)={{0x3, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40585414, &(0x7f0000000400)={0x0, 0x6, 0x40081, 0x0, 0x5}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0002000001, 0xfa11, 0x3}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r3}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r5, 0x0, 0x0}, 0x10) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x17ef, 0x60a3, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0xd0, 0xfd, "", [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x4, 0x3, 0xf4, 0x20, 0x4}, 0xf, &(0x7f0000000180)={0x5, 0xf, 0xf, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x2, 0x0, 0x9}, @ptm_cap={0x3}]}, 0x4, [{0x0, 0x0}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xc0c}}, {0x2, &(0x7f0000000300)=@string={0x2}}, {0x97, &(0x7f0000000380)=@string={0x97, 0x3, "209ef01f22f9094330e7bb9ad5e92cbd98d1f98f06d7d34b0a24a19a3f69197d44b1cb80fdc84fb872b2655aedc84e882570ecf6c1e7fb216401496d1ca1a97746d30c6f6013bc6c1714eecd1953365cdc724643d26accadd2a834e8f897d05e1d3f8567bd605587078e13825cc99218c2776ddb57e33733a11c835681b25ea9cf168b557783f1c18cb59bbaf7042b8d9762a38538"}}]}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) r6 = mq_open(&(0x7f00000000c0)='eth0\x00', 0x42, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) lseek(r6, 0x3, 0x1) 3.182633459s ago: executing program 4 (id=3659): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002840)={0x1, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000068a00800000000004000000cb2004"], 0x0, 0x9, 0xfe5, &(0x7f0000001840)=""/4069, 0x41100}, 0x94) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000340)={0x1, @vbi={0x0, 0x0, 0x0, 0x47425247}}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x2, @in6=@mcast2, 0x6, 0x4, 0x3, 0x0, 0xffffefd3}]}]}, 0xfc}}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregset(0x4205, r2, 0x1, &(0x7f00000001c0)={&(0x7f0000000000)="c945b941eb6a3f6d", 0x8}) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000300)=0xffffffffffffffff, 0x4) writev(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x10, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) 2.706579051s ago: executing program 0 (id=3660): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000000)={0x0, 0x498, 0x3400, 0x1, 0x161}, &(0x7f0000000dc0)=0x0, &(0x7f0000000240)=0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000280)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_LINKAT={0x27, 0x4c, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000011c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0x1000}) io_uring_enter(r2, 0x847ba, 0x4c86, 0x5, 0x0, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f00000018c0)={{0x12, 0x1, 0x0, 0x65, 0xe3, 0x9, 0x8, 0x1199, 0x6839, 0x74e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xff, 0x9, 0x70, 0xb, "", [{{0x9, 0x4, 0xfc, 0x9, 0x0, 0x4, 0x6e, 0x6f, 0x90}}]}}]}}, 0x0) 2.465767692s ago: executing program 1 (id=3661): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) socket(0x1, 0x803, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001400b59500000000000000000a400000", @ANYRES32, @ANYBLOB="1400020000000000000000000000ff"], 0x34}}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001400b59500000000000000000a000000", @ANYRES32, @ANYBLOB="1400020000000000000000000000ffff00000000080008007002"], 0x34}}, 0x0) 1.700951383s ago: executing program 4 (id=3662): r0 = landlock_create_ruleset(&(0x7f0000000080)={0x10}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x4) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x8172}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x6) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) 1.521227811s ago: executing program 5 (id=3663): r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 1.377274044s ago: executing program 4 (id=3664): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)="314ab7", &(0x7f0000000280), 0x84, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180800000000000000000000000000001812", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 1.076103664s ago: executing program 4 (id=3665): r0 = fsopen(&(0x7f00000001c0)='tracefs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="940000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff02000000040000000000000000000114000400000000f7000000000000ffffac1e00"], 0x94}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0xa0, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x18, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xa0}}, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=3666): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800e0001006970366572737061", @ANYRES32=r2], 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000) kernel console output (not intermixed with test programs): ec"[9878] was attempted by "./syz-executor exec"[9865] [ 424.872204][ T9889] ptrace attach of ""[9891] was attempted by "./syz-executor exec"[9889] [ 430.177232][ T9942] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1329'. [ 430.178030][ T9942] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1329'. [ 435.931070][T10021] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 438.820805][T10059] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 439.993148][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.993215][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 456.768525][T10266] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 457.616617][T10277] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1438'. [ 459.279076][T10307] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 462.394731][T10339] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1456'. [ 463.841560][T10347] fuse: Bad value for 'fd' [ 464.353746][T10363] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1462'. [ 473.089679][T10475] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1500'. [ 473.465840][T10484] netlink: 'syz.4.1504': attribute type 10 has an invalid length. [ 473.485249][T10484] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 473.487860][T10484] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 473.490988][T10484] warning: `syz.4.1504' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 480.507553][T10582] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1530'. [ 486.162255][T10684] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 487.456327][T10711] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 489.888726][T10717] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1577'. [ 489.939130][ T36] audit: type=1800 audit(1772389219.059:12): pid=10719 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.1569" name="nullb0" dev="tmpfs" ino=1711 res=0 errno=0 [ 493.619799][T10759] ptrace attach of ""[10761] was attempted by "./syz-executor exec"[10759] [ 494.661115][T10790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1590'. [ 494.874974][T10804] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1607'. [ 495.126501][ T5863] IPVS: starting estimator thread 0... [ 496.157360][T10816] IPVS: using max 16 ests per chain, 38400 per kthread [ 496.355596][T10829] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1620'. [ 497.731230][T10854] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1629'. [ 497.734174][T10854] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1629'. [ 498.454769][T10887] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1641'. [ 498.468999][T10887] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1641'. [ 501.433045][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.433113][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.458296][ T808] IPVS: starting estimator thread 0... [ 504.558126][T10979] IPVS: using max 9 ests per chain, 21600 per kthread [ 505.737808][T11000] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1680'. [ 506.814977][T11023] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1691'. [ 510.017615][T11060] tmpfs: Bad value for 'mpol' [ 521.064222][T11221] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 530.681994][T11331] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1794'. [ 533.069864][T11357] 9pnet: Found fid 0 not clunked [ 554.228565][T11586] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1881'. [ 554.228606][T11586] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1881'. [ 555.852765][T11625] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1892'. [ 555.852805][T11625] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1892'. [ 558.883831][T11659] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1905'. [ 558.883857][T11659] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1905'. [ 559.390087][T11675] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 559.436112][T11680] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 559.436112][T11680] The task syz.0.1912 (11680) triggered the difference, watch for misbehavior. [ 559.452039][T11679] 9p: Unknown Cache mode or invalid value 0’ºßvŽö€mÒ [ 559.630654][T11687] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1917'. [ 560.134111][T11709] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 560.750595][T11729] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 2, id = 0 [ 561.181028][T11737] netlink: 67 bytes leftover after parsing attributes in process `syz.4.1937'. [ 561.557153][T11744] tipc: Started in network mode [ 561.557176][T11744] tipc: Node identity -, cluster identity 4711 [ 563.597469][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.597539][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.068951][ T36] audit: type=1326 audit(1772389293.169:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11777 comm="syz.0.1951" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f255095c799 code=0x0 [ 573.985783][ T60] Bluetooth: hci1: unexpected event for opcode 0x2027 [ 574.510651][T11921] netlink: 'syz.3.2000': attribute type 1 has an invalid length. [ 574.510673][T11921] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2000'. [ 574.510701][T11921] netlink: 4104 bytes leftover after parsing attributes in process `syz.3.2000'. [ 576.629598][ T60] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 584.979378][T12033] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.979816][T12033] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.517711][T12043] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2046'. [ 586.758068][ T60] Bluetooth: hci2: unexpected event for opcode 0x2027 [ 588.426094][T12076] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2040'. [ 588.426117][T12076] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2040'. [ 588.646073][T12084] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2059'. [ 590.952707][ T5898] Process accounting resumed [ 601.876758][T12217] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2101'. [ 604.092709][ T36] audit: type=1326 audit(1772389333.219:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12229 comm="syz.1.2105" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f92597bc799 code=0x0 [ 605.339780][ T36] audit: type=1326 audit(1772389334.449:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12243 comm="syz.3.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96a8e5c799 code=0x7ffc0000 [ 605.339832][ T36] audit: type=1326 audit(1772389334.449:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12243 comm="syz.3.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96a8e5c799 code=0x7ffc0000 [ 605.339873][ T36] audit: type=1326 audit(1772389334.449:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12243 comm="syz.3.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7f96a8e5c799 code=0x7ffc0000 [ 605.339913][ T36] audit: type=1326 audit(1772389334.449:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12243 comm="syz.3.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96a8e5c799 code=0x7ffc0000 [ 605.339952][ T36] audit: type=1326 audit(1772389334.449:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12243 comm="syz.3.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96a8e5c799 code=0x7ffc0000 [ 609.818048][ T36] audit: type=1326 audit(1772389338.939:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12306 comm="syz.4.2126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e0df4c799 code=0x7ffc0000 [ 609.821876][ T36] audit: type=1326 audit(1772389338.949:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12306 comm="syz.4.2126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e0df4c799 code=0x7ffc0000 [ 609.822440][ T36] audit: type=1326 audit(1772389338.949:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12306 comm="syz.4.2126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7f9e0df4c799 code=0x7ffc0000 [ 610.168101][ T36] audit: type=1326 audit(1772389339.299:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12306 comm="syz.4.2126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9e0deedb19 code=0x7ffc0000 [ 610.168814][ T36] audit: type=1326 audit(1772389339.299:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12306 comm="syz.4.2126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e0df4c799 code=0x7ffc0000 [ 610.168858][ T36] audit: type=1326 audit(1772389339.299:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12306 comm="syz.4.2126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e0df4c799 code=0x7ffc0000 [ 613.027193][ T36] audit: type=1326 audit(1772389342.129:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12343 comm="syz.1.2137" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f92597bc799 code=0x0 [ 613.394964][ T36] audit: type=1326 audit(1772389342.519:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12352 comm="syz.3.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96a8e5c799 code=0x7ffc0000 [ 613.395298][ T36] audit: type=1326 audit(1772389342.519:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12352 comm="syz.3.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7f96a8e5c799 code=0x7ffc0000 [ 613.556170][ T36] audit: type=1326 audit(1772389342.679:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12352 comm="syz.3.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f96a8dfdb19 code=0x7ffc0000 [ 614.962439][ T60] Bluetooth: hci2: unexpected event for opcode 0x2027 [ 616.259337][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 616.259355][ T36] audit: type=1326 audit(1772389345.389:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12398 comm="syz.4.2154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e0df4c799 code=0x7ffc0000 [ 616.260115][ T36] audit: type=1326 audit(1772389345.389:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12398 comm="syz.4.2154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7f9e0df4c799 code=0x7ffc0000 [ 618.116694][ T60] Bluetooth: hci4: unexpected event for opcode 0x2027 [ 619.725333][T12428] netlink: 'syz.4.2166': attribute type 13 has an invalid length. [ 624.364343][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.364773][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.261355][T12532] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2192'. [ 640.152758][T12652] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2233'. [ 640.153449][T12652] 9pnet_fd: Insufficient options for proto=fd [ 644.891643][T12719] tipc: Enabled bearer , priority 10 [ 645.997072][ T5863] tipc: Node number set to 56557568 [ 647.878891][T12728] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 647.878918][T12728] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 647.878934][T12728] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 647.942814][ T36] audit: type=1800 audit(1772389376.999:34): pid=12728 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.2258" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 649.100781][T12756] netlink: 'syz.1.2268': attribute type 10 has an invalid length. [ 649.169728][T12756] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 649.203144][T12756] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 649.236530][T12756] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2268'. [ 651.532946][T12775] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2263'. [ 651.546369][T12775] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2263'. [ 653.992094][T12813] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2289'. [ 653.997337][T12813] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2289'. [ 657.487674][T12849] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2300'. [ 657.497850][T12849] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2300'. [ 657.833569][T12855] netlink: 'syz.1.2302': attribute type 1 has an invalid length. [ 657.872100][T12855] 8021q: adding VLAN 0 to HW filter on device bond1 [ 658.117925][T12862] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2292'. [ 658.121152][T12855] bond1: (slave ip6erspan0): making interface the new active one [ 658.966952][T12855] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 668.862820][T13004] fuse: Bad value for 'fd' [ 672.942083][T13047] fuse: Bad value for 'fd' [ 676.016091][ T60] Bluetooth: hci4: unexpected event for opcode 0x8e0b [ 676.696236][ T36] audit: type=1326 audit(1772389405.819:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13038 comm="syz.0.2362" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f255095c799 code=0x0 [ 676.999519][T13084] fuse: Bad value for 'fd' [ 686.066177][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.066247][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 690.709144][T13215] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 694.147690][T13250] No control pipe specified [ 694.639416][T13259] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 696.348336][ T36] audit: type=1326 audit(1772389425.479:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13242 comm="syz.1.2423" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f92597bc799 code=0x0 [ 697.707683][T13288] No control pipe specified [ 697.972870][T13296] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 699.933591][T13320] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2445'. [ 699.933684][T13320] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2445'. [ 700.674262][T13325] No control pipe specified [ 703.526574][ T36] audit: type=1326 audit(1772389432.649:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13329 comm="syz.0.2449" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f255095c799 code=0x0 [ 712.720947][T13432] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2478'. [ 717.017721][ T36] audit: type=1326 audit(1772389446.139:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13448 comm="syz.3.2485" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f96a8e5c799 code=0x0 [ 718.373249][T13484] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2493'. [ 722.729909][T13524] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2506'. [ 723.005320][T13529] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 724.251204][T13550] tipc: Enabling of bearer rejected, failed to enable media [ 727.808508][T13597] tipc: Enabling of bearer rejected, failed to enable media [ 728.505605][T13606] pim6reg: entered allmulticast mode [ 730.688430][T13641] tipc: Enabling of bearer rejected, failed to enable media [ 732.484121][T13658] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2547'. [ 736.870615][T13694] tipc: Enabling of bearer rejected, failed to enable media [ 744.107773][T13747] netlink: 'syz.4.2573': attribute type 1 has an invalid length. [ 744.179662][T13747] 8021q: adding VLAN 0 to HW filter on device bond1 [ 744.230670][T13750] bond1: (slave ip6erspan0): making interface the new active one [ 744.232358][T13750] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 745.803655][T13761] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2575'. [ 749.477729][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 749.477799][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 754.693484][T13816] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2590'. [ 757.640707][T13834] capability: warning: `syz.1.2589' uses deprecated v2 capabilities in a way that may be insecure [ 761.065487][T13863] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 761.964523][T13863] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 761.965865][T13863] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 761.987225][T13863] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 762.017283][T13863] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 762.017581][T13868] tipc: Enabling of bearer rejected, failed to enable media [ 764.153377][T13863] Bluetooth: hci5: command tx timeout [ 766.279402][T13863] Bluetooth: hci5: command tx timeout [ 766.996920][T13903] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 767.013908][T13903] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 769.081794][T13863] Bluetooth: hci5: command tx timeout [ 771.264231][T13863] Bluetooth: hci5: command tx timeout [ 771.756755][T13857] chnl_net:caif_netlink_parms(): no params data found [ 772.455940][T13857] bridge0: port 1(bridge_slave_0) entered blocking state [ 772.487238][T13857] bridge0: port 1(bridge_slave_0) entered disabled state [ 772.487541][T13857] bridge_slave_0: entered allmulticast mode [ 772.492402][T13857] bridge_slave_0: entered promiscuous mode [ 772.548710][T13857] bridge0: port 2(bridge_slave_1) entered blocking state [ 772.548777][T13857] bridge0: port 2(bridge_slave_1) entered disabled state [ 772.548912][T13857] bridge_slave_1: entered allmulticast mode [ 772.550281][T13857] bridge_slave_1: entered promiscuous mode [ 773.599059][T13857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 773.603391][T13857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 773.647844][T13857] team0: Port device team_slave_0 added [ 773.652211][T13857] team0: Port device team_slave_1 added [ 773.909174][T13857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 773.909185][T13857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 773.909198][T13857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 773.914771][T13857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 773.914782][T13857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 773.914795][T13857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 774.215033][T13857] hsr_slave_0: entered promiscuous mode [ 774.218347][T13857] hsr_slave_1: entered promiscuous mode [ 774.225712][T13857] debugfs: 'hsr0' already exists in 'hsr' [ 774.225836][T13857] Cannot create hsr debugfs directory [ 774.760026][T13857] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 775.923391][T13857] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 776.089434][T13857] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 777.029027][T13857] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 778.533679][T13857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 778.576181][T13857] 8021q: adding VLAN 0 to HW filter on device team0 [ 778.602342][ T992] bridge0: port 1(bridge_slave_0) entered blocking state [ 778.603124][ T992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 778.624177][ T992] bridge0: port 2(bridge_slave_1) entered blocking state [ 778.624316][ T992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 781.333096][T13857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 784.848061][T13857] veth0_vlan: entered promiscuous mode [ 784.892754][T13857] veth1_vlan: entered promiscuous mode [ 785.047613][T13857] veth0_macvtap: entered promiscuous mode [ 785.053047][T13857] veth1_macvtap: entered promiscuous mode [ 785.143349][T13857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 785.169525][T13857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 785.221078][ T992] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.221152][ T992] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.221200][ T992] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.221231][ T992] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 786.345538][ T1041] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 786.345558][ T1041] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 787.868139][ T992] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 787.868159][ T992] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 792.334871][T14096] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2656'. [ 792.463531][T14099] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 797.711033][T14136] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 798.341774][T14151] binder: 14144:14151 ioctl c0306201 2000000003c0 returned -14 [ 802.456363][T14177] syz.5.2680 (14177): drop_caches: 2 [ 803.949437][T14192] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 804.011367][T14196] netlink: 'syz.1.2687': attribute type 1 has an invalid length. [ 807.636593][T14229] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 807.681139][T14231] netlink: 'syz.1.2699': attribute type 1 has an invalid length. [ 811.094131][ T60] Bluetooth: hci0: command 0x0c1a tx timeout [ 811.094326][T13863] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 814.762440][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 814.762509][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.838888][T14280] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 821.673993][T14337] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 827.365702][T14396] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2742'. [ 827.365775][T14396] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2742'. [ 869.716921][ C1] hrtimer: interrupt took 43074 ns [ 873.256762][T14742] tipc: Started in network mode [ 873.256792][T14742] tipc: Node identity a63c75a1f572, cluster identity 4711 [ 873.260478][T14742] tipc: Enabled bearer , priority 0 [ 873.261608][T14742] syzkaller0: entered promiscuous mode [ 873.261630][T14742] syzkaller0: entered allmulticast mode [ 874.530729][T14741] tipc: Resetting bearer [ 875.712768][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.712872][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 877.010699][T14741] tipc: Disabling bearer [ 877.298340][ T10] tipc: Node number set to 1397650849 [ 880.190851][T13863] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 880.207569][T13863] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 880.209128][T13863] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 880.211118][T13863] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 880.213509][T13863] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 882.315295][T13863] Bluetooth: hci3: command tx timeout [ 882.737271][ T5976] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 882.897335][ T5976] usb 6-1: Using ep0 maxpacket: 8 [ 882.899987][ T5976] usb 6-1: unable to get BOS descriptor or descriptor too short [ 882.901243][ T5976] usb 6-1: config 4 interface 0 has no altsetting 0 [ 882.905023][ T5976] usb 6-1: string descriptor 0 read error: -22 [ 882.905153][ T5976] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 882.905167][ T5976] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 882.964492][ T5976] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 882.978254][ T5976] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 882.978587][ T5976] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 882.978666][ T5976] usb 6-1: media controller created [ 883.063644][ T5976] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 884.430390][T13863] Bluetooth: hci3: command tx timeout [ 884.435240][ T5976] zl10353_read_register: readreg error (reg=127, ret==0) [ 886.473016][ T5801] Bluetooth: hci3: command tx timeout [ 887.319946][ T5976] usb 6-1: USB disconnect, device number 2 [ 887.594794][ T5801] Bluetooth: hci5: command 0x0406 tx timeout [ 889.107598][ T5801] Bluetooth: hci3: command tx timeout [ 889.191747][T10655] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.543403][T10655] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.671602][T14805] chnl_net:caif_netlink_parms(): no params data found [ 892.186595][T10655] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.612802][T10655] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.893044][T14805] bridge0: port 1(bridge_slave_0) entered blocking state [ 892.893230][T14805] bridge0: port 1(bridge_slave_0) entered disabled state [ 892.893500][T14805] bridge_slave_0: entered allmulticast mode [ 892.929036][T14805] bridge_slave_0: entered promiscuous mode [ 892.944441][T14805] bridge0: port 2(bridge_slave_1) entered blocking state [ 892.957036][T14805] bridge0: port 2(bridge_slave_1) entered disabled state [ 892.957329][T14805] bridge_slave_1: entered allmulticast mode [ 892.963477][T14805] bridge_slave_1: entered promiscuous mode [ 893.090279][T14805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 893.094548][T14805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 893.291321][T14805] team0: Port device team_slave_0 added [ 893.294154][T14805] team0: Port device team_slave_1 added [ 893.848396][T14805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 893.848414][T14805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 893.848439][T14805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 894.056240][T14805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 894.056258][T14805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 894.056282][T14805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 894.285905][T10655] bridge_slave_1: left allmulticast mode [ 894.286083][T10655] bridge_slave_1: left promiscuous mode [ 894.326098][T10655] bridge0: port 2(bridge_slave_1) entered disabled state [ 895.236521][T10655] bridge_slave_0: left allmulticast mode [ 895.236550][T10655] bridge_slave_0: left promiscuous mode [ 895.288440][T14930] netlink: 92 bytes leftover after parsing attributes in process `syz.5.2887'. [ 895.288508][T14930] netlink: 92 bytes leftover after parsing attributes in process `syz.5.2887'. [ 895.990488][T10655] bridge0: port 1(bridge_slave_0) entered disabled state [ 898.917787][T10655] bond1 (unregistering): (slave ip6erspan0): Releasing active interface [ 901.013547][T10655] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 901.138798][T10655] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 901.558598][T10655] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 902.420102][T10655] bond0 (unregistering): Released all slaves [ 902.442862][T10655] bond1 (unregistering): Released all slaves [ 902.576449][T14805] hsr_slave_0: entered promiscuous mode [ 902.589536][T14805] hsr_slave_1: entered promiscuous mode [ 902.590948][T14805] debugfs: 'hsr0' already exists in 'hsr' [ 902.590972][T14805] Cannot create hsr debugfs directory [ 903.858270][T10655] IPVS: stopping backup sync thread 11729 ... [ 919.976819][T10655] hsr_slave_0: left promiscuous mode [ 920.120574][T10655] hsr_slave_1: left promiscuous mode [ 920.149986][T10655] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 920.150079][T10655] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 920.205706][T10655] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 920.205733][T10655] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 920.314488][T10655] veth1_macvtap: left promiscuous mode [ 920.314655][T10655] veth0_macvtap: left promiscuous mode [ 920.318947][T10655] veth1_vlan: left promiscuous mode [ 920.319228][T10655] veth0_vlan: left promiscuous mode [ 920.668989][T10655] pim6reg (unregistering): left allmulticast mode [ 922.453843][T15146] syz.5.2952 (15146): drop_caches: 2 [ 923.898468][T10655] team0 (unregistering): Port device team_slave_1 removed [ 924.226216][T10655] team0 (unregistering): Port device team_slave_0 removed [ 928.622472][T14805] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 929.613353][T15184] syz.5.2961 (15184): drop_caches: 2 [ 930.240207][T15196] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 930.240235][T15196] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 930.242461][T15196] vhci_hcd vhci_hcd.0: Device attached [ 930.309428][T14805] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 930.497083][ T993] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 930.516985][ T10] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 933.033199][T14805] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 933.997114][T15199] usbip_core: unknown command [ 933.997187][T15199] vhci_hcd: unknown pdu 0 [ 933.997228][T15199] usbip_core: unknown command [ 934.037553][T14365] vhci_hcd vhci_hcd.5: stop threads [ 934.037572][T14365] vhci_hcd vhci_hcd.5: release socket [ 934.038021][T14365] vhci_hcd vhci_hcd.5: disconnect device [ 934.060737][ T993] usb 6-1: device descriptor read/all, error -61 [ 934.071687][ T10] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 934.208435][ T993] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 934.366999][ T993] usb 6-1: device descriptor read/64, error -71 [ 934.406731][T14805] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 934.477279][ T993] usb usb6-port1: attempt power cycle [ 935.012817][ T993] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 935.536570][T15244] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 935.548286][T15245] 8021q: adding VLAN 0 to HW filter on device macvlan6 [ 935.548740][ T993] usb 6-1: device descriptor read/8, error -71 [ 936.115003][T14805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 936.178784][T14805] 8021q: adding VLAN 0 to HW filter on device team0 [ 936.195231][ T1531] bridge0: port 1(bridge_slave_0) entered blocking state [ 936.195368][ T1531] bridge0: port 1(bridge_slave_0) entered forwarding state [ 936.239110][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 936.239363][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 937.386108][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 937.386183][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 937.419973][T15260] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 937.811588][T10655] IPVS: stop unused estimator thread 0... [ 939.783711][T15272] syz.5.2978 (15272): drop_caches: 2 [ 941.159795][ T60] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 941.176036][ T60] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 941.186008][ T60] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 941.196125][ T60] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 941.198665][ T60] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 943.277242][T13863] Bluetooth: hci4: command tx timeout [ 944.619123][T15285] chnl_net:caif_netlink_parms(): no params data found [ 945.717049][T13863] Bluetooth: hci4: command tx timeout [ 946.083432][T15285] bridge0: port 1(bridge_slave_0) entered blocking state [ 946.083640][T15285] bridge0: port 1(bridge_slave_0) entered disabled state [ 946.083871][T15285] bridge_slave_0: entered allmulticast mode [ 947.039418][T15285] bridge_slave_0: entered promiscuous mode [ 947.578120][T15285] bridge0: port 2(bridge_slave_1) entered blocking state [ 947.578242][T15285] bridge0: port 2(bridge_slave_1) entered disabled state [ 947.578483][T15285] bridge_slave_1: entered allmulticast mode [ 947.616546][T15285] bridge_slave_1: entered promiscuous mode [ 947.747037][T13863] Bluetooth: hci4: command tx timeout [ 948.922617][T15285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 948.926687][T15285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 949.051476][T15285] team0: Port device team_slave_0 added [ 949.059376][T15285] team0: Port device team_slave_1 added [ 950.383458][T13863] Bluetooth: hci4: command tx timeout [ 950.545804][T15285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 950.545819][T15285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 950.545843][T15285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 950.945578][T15391] 8021q: adding VLAN 0 to HW filter on device macvlan7 [ 950.955532][T15393] 8021q: adding VLAN 0 to HW filter on device macvlan8 [ 950.980270][T15285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 950.980284][T15285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 950.980310][T15285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 953.070337][T15285] hsr_slave_0: entered promiscuous mode [ 953.072943][T15285] hsr_slave_1: entered promiscuous mode [ 953.075578][T15285] debugfs: 'hsr0' already exists in 'hsr' [ 953.075601][T15285] Cannot create hsr debugfs directory [ 958.744889][ T1531] bridge_slave_1: left allmulticast mode [ 958.744919][ T1531] bridge_slave_1: left promiscuous mode [ 958.745186][ T1531] bridge0: port 2(bridge_slave_1) entered disabled state [ 958.872240][ T1531] bridge_slave_0: left allmulticast mode [ 958.872268][ T1531] bridge_slave_0: left promiscuous mode [ 958.872549][ T1531] bridge0: port 1(bridge_slave_0) entered disabled state [ 964.198506][ T1531] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 964.277848][ T1531] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 964.301586][ T1531] bond0 (unregistering): Released all slaves [ 966.017092][ T1531] hsr_slave_0: left promiscuous mode [ 966.184819][ T1531] hsr_slave_1: left promiscuous mode [ 966.185864][ T1531] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 966.216049][ T1531] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 968.807298][ T1531] team0 (unregistering): Port device team_slave_1 removed [ 968.858974][ T1531] team0 (unregistering): Port device team_slave_0 removed [ 969.198353][T15521] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 972.789349][T15588] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 976.278715][T15632] hub 8-0:1.0: USB hub found [ 976.280311][T15632] hub 8-0:1.0: 1 port detected [ 976.452231][T15285] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 976.581656][T15638] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3075'. [ 976.628089][T15285] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 976.674714][T15285] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 976.924984][T15285] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 978.470214][T15659] syz.5.3080 (15659): drop_caches: 2 [ 979.365616][T15285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 979.631564][T15285] 8021q: adding VLAN 0 to HW filter on device team0 [ 980.402347][ T1531] bridge0: port 1(bridge_slave_0) entered blocking state [ 980.402484][ T1531] bridge0: port 1(bridge_slave_0) entered forwarding state [ 980.415880][ T1531] bridge0: port 2(bridge_slave_1) entered blocking state [ 980.428787][ T1531] bridge0: port 2(bridge_slave_1) entered forwarding state [ 981.363222][T15285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 985.576663][T15685] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 985.732343][T15685] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 985.732373][T15685] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 985.732393][T15685] usb 6-1: Product: syz [ 985.732406][T15685] usb 6-1: Manufacturer: syz [ 985.732420][T15685] usb 6-1: SerialNumber: syz [ 985.778956][T15685] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 985.891237][ T808] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 987.113294][ T808] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 987.158415][ T808] ath9k_htc: Failed to initialize the device [ 987.295643][ T808] usb 6-1: ath9k_htc: USB layer deinitialized [ 987.473286][ T993] usb 6-1: USB disconnect, device number 7 [ 988.062934][T14398] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.186566][T15804] sctp: [Deprecated]: syz.5.3108 (pid 15804) Use of struct sctp_assoc_value in delayed_ack socket option. [ 992.186566][T15804] Use struct sctp_sack_info instead [ 994.675723][T14398] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.894927][T15285] veth0_vlan: entered promiscuous mode [ 996.176009][T15285] veth1_vlan: entered promiscuous mode [ 998.884505][T14398] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.053892][T15847] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3120'. [ 999.147589][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 999.147656][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1003.776500][ T60] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1003.795506][ T60] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1003.804726][ T60] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1003.821280][ T60] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1003.822524][ T60] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1004.090176][T14398] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1004.255209][T15885] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3131'. [ 1005.909022][ T60] Bluetooth: hci3: command tx timeout [ 1007.529869][ T5905] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 1007.607471][T15874] chnl_net:caif_netlink_parms(): no params data found [ 1007.696932][ T5905] usb 6-1: Invalid ep0 maxpacket: 64 [ 1007.987820][ T60] Bluetooth: hci3: command tx timeout [ 1008.482595][ T5905] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 1008.646912][ T5905] usb 6-1: Invalid ep0 maxpacket: 64 [ 1008.647517][ T5905] usb usb6-port1: attempt power cycle [ 1009.910399][ T5905] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 1010.174639][ T5905] usb 6-1: device not accepting address 10, error -71 [ 1010.319041][ T60] Bluetooth: hci3: command tx timeout [ 1011.012019][T14398] bridge_slave_1: left allmulticast mode [ 1011.012044][T14398] bridge_slave_1: left promiscuous mode [ 1011.012251][T14398] bridge0: port 2(bridge_slave_1) entered disabled state [ 1012.260799][T14398] bridge_slave_0: left allmulticast mode [ 1012.260828][T14398] bridge_slave_0: left promiscuous mode [ 1012.261103][T14398] bridge0: port 1(bridge_slave_0) entered disabled state [ 1012.422810][ T60] Bluetooth: hci3: command tx timeout [ 1020.134798][T14398] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1021.185927][T14398] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1021.262865][T14398] bond0 (unregistering): (slave team0): Releasing backup interface [ 1021.303061][T14398] bond0 (unregistering): Released all slaves [ 1021.715520][T15968] team_slave_0: entered promiscuous mode [ 1021.725570][T15968] team_slave_1: entered promiscuous mode [ 1022.031884][T15968] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1022.157621][T15969] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1022.164883][ T5976] IPVS: starting estimator thread 0... [ 1022.267453][T16021] IPVS: using max 8 ests per chain, 19200 per kthread [ 1022.493615][T15874] bridge0: port 1(bridge_slave_0) entered blocking state [ 1022.493776][T15874] bridge0: port 1(bridge_slave_0) entered disabled state [ 1022.494010][T15874] bridge_slave_0: entered allmulticast mode [ 1022.496425][T15874] bridge_slave_0: entered promiscuous mode [ 1022.595761][T15874] bridge0: port 2(bridge_slave_1) entered blocking state [ 1022.596759][T15874] bridge0: port 2(bridge_slave_1) entered disabled state [ 1022.599341][T15874] bridge_slave_1: entered allmulticast mode [ 1023.057704][T15874] bridge_slave_1: entered promiscuous mode [ 1023.330430][T15874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1023.375175][T15874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1024.860071][T15874] team0: Port device team_slave_0 added [ 1027.950976][T15874] team0: Port device team_slave_1 added [ 1029.042204][T15874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1029.042221][T15874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1029.042243][T15874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1029.118839][T15874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1029.118855][T15874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1029.118880][T15874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1030.163963][T14398] hsr_slave_0: left promiscuous mode [ 1030.417053][T14398] hsr_slave_1: left promiscuous mode [ 1030.418766][T14398] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1030.418800][T14398] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1030.470092][T14398] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1030.470119][T14398] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1031.599025][T14398] veth1_macvtap: left promiscuous mode [ 1031.599127][T14398] veth0_macvtap: left promiscuous mode [ 1031.599377][T14398] veth1_vlan: left promiscuous mode [ 1031.599545][T14398] veth0_vlan: left promiscuous mode [ 1034.000971][T16127] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1034.129078][T14398] pim6reg (unregistering): left allmulticast mode [ 1035.288535][T16137] fuse: Bad value for 'fd' [ 1036.837691][T14398] team0 (unregistering): Port device team_slave_1 removed [ 1036.913498][T14398] team0 (unregistering): Port device team_slave_0 removed [ 1036.920838][T16154] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1037.344999][T16092] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 1037.409451][T16097] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 1037.989596][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1038.624852][T15874] hsr_slave_0: entered promiscuous mode [ 1038.626125][T15874] hsr_slave_1: entered promiscuous mode [ 1038.660475][T15874] debugfs: 'hsr0' already exists in 'hsr' [ 1038.660506][T15874] Cannot create hsr debugfs directory [ 1038.731229][T16171] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1043.655765][T14398] IPVS: stop unused estimator thread 0... [ 1044.315357][T16227] team_slave_0: entered promiscuous mode [ 1044.315411][T16227] team_slave_1: entered promiscuous mode [ 1044.330992][T16227] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1044.354300][T16229] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1046.013568][T16257] syz.5.3223 (16257): drop_caches: 2 [ 1046.435490][T16262] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1046.634729][T14398] bridge_slave_1: left allmulticast mode [ 1046.634757][T14398] bridge_slave_1: left promiscuous mode [ 1046.634984][T14398] bridge0: port 2(bridge_slave_1) entered disabled state [ 1047.563021][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1047.629938][T14398] bridge_slave_0: left allmulticast mode [ 1047.629966][T14398] bridge_slave_0: left promiscuous mode [ 1047.630221][T14398] bridge0: port 1(bridge_slave_0) entered disabled state [ 1050.611861][ T36] audit: type=1326 audit(1772389779.729:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16303 comm="syz.2.3234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12662dc799 code=0x7ffc0000 [ 1050.611911][ T36] audit: type=1326 audit(1772389779.729:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16303 comm="syz.2.3234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12662dc799 code=0x7ffc0000 [ 1050.611950][ T36] audit: type=1326 audit(1772389779.729:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16303 comm="syz.2.3234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f12662dc799 code=0x7ffc0000 [ 1050.669725][ T36] audit: type=1326 audit(1772389779.799:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16303 comm="syz.2.3234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12662dc799 code=0x7ffc0000 [ 1050.669824][ T36] audit: type=1326 audit(1772389779.799:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16303 comm="syz.2.3234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12662dc799 code=0x7ffc0000 [ 1050.908162][T14398] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1050.988443][T14398] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1051.009189][T14398] bond0 (unregistering): Released all slaves [ 1051.070852][T16286] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1051.686569][T15874] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1053.835876][T14398] hsr_slave_0: left promiscuous mode [ 1053.967335][T14398] hsr_slave_1: left promiscuous mode [ 1053.968031][T14398] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1054.057922][T14398] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1055.202953][T14398] veth1_vlan: left promiscuous mode [ 1055.203106][T14398] veth0_vlan: left promiscuous mode [ 1056.231601][T16363] netlink: 'syz.5.3245': attribute type 4 has an invalid length. [ 1056.567784][T14398] team0 (unregistering): Port device team_slave_1 removed [ 1056.622958][T14398] team0 (unregistering): Port device team_slave_0 removed [ 1056.818786][T16366] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1056.820703][T15874] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1057.016957][T15874] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1057.062828][T15874] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1057.455528][ T36] audit: type=1326 audit(1772389786.569:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16385 comm="syz.2.3250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12662dc799 code=0x7ffc0000 [ 1057.455577][ T36] audit: type=1326 audit(1772389786.569:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16385 comm="syz.2.3250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f12662dc799 code=0x7ffc0000 [ 1057.455602][ T36] audit: type=1326 audit(1772389786.569:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16385 comm="syz.2.3250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12662dc799 code=0x7ffc0000 [ 1057.455626][ T36] audit: type=1326 audit(1772389786.569:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16385 comm="syz.2.3250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f12662dc799 code=0x7ffc0000 [ 1057.455649][ T36] audit: type=1326 audit(1772389786.569:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16385 comm="syz.2.3250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12662dc799 code=0x7ffc0000 [ 1057.455673][ T36] audit: type=1326 audit(1772389786.569:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16385 comm="syz.2.3250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f12662dc799 code=0x7ffc0000 [ 1057.507499][ T36] audit: type=1326 audit(1772389786.639:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16385 comm="syz.2.3250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12662dc799 code=0x7ffc0000 [ 1057.507548][ T36] audit: type=1326 audit(1772389786.639:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16385 comm="syz.2.3250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12662dc799 code=0x7ffc0000 [ 1057.669118][T16393] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3252'. [ 1057.900052][T15874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1058.034808][T15874] 8021q: adding VLAN 0 to HW filter on device team0 [ 1058.271169][T14365] bridge0: port 1(bridge_slave_0) entered blocking state [ 1058.271309][T14365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1058.314222][ T1531] bridge0: port 2(bridge_slave_1) entered blocking state [ 1058.314352][ T1531] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1058.637011][ T808] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1058.788092][ T808] usb 6-1: Using ep0 maxpacket: 8 [ 1058.819666][ T808] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1058.819701][ T808] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1058.819724][ T808] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1058.819747][ T808] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1058.819788][ T808] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1058.819810][ T808] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1059.170088][ T808] usb 6-1: GET_CAPABILITIES returned 0 [ 1059.170134][ T808] usbtmc 6-1:16.0: can't read capabilities [ 1059.424184][ T5976] usb 6-1: USB disconnect, device number 12 [ 1059.513015][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.513055][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1059.730881][T15874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1061.940214][T13863] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1061.944329][T13863] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1061.949907][T13863] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1062.169625][ T808] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1062.732852][T13863] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1062.736021][T13863] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1062.882936][ T808] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1062.882966][ T808] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1062.882984][ T808] usb 6-1: Product: syz [ 1062.882997][ T808] usb 6-1: Manufacturer: syz [ 1062.883010][ T808] usb 6-1: SerialNumber: syz [ 1062.971133][ T808] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1063.879009][ T5898] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1064.184446][ T5905] usb 6-1: USB disconnect, device number 13 [ 1064.789990][T13863] Bluetooth: hci4: command tx timeout [ 1065.136498][ T5898] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1065.136694][ T5898] ath9k_htc: Failed to initialize the device [ 1065.345912][ T5905] usb 6-1: ath9k_htc: USB layer deinitialized [ 1065.486570][T16439] chnl_net:caif_netlink_parms(): no params data found [ 1066.867005][T13863] Bluetooth: hci4: command tx timeout [ 1069.123909][T13863] Bluetooth: hci4: command tx timeout [ 1070.382320][T16524] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3284'. [ 1070.741007][T16439] bridge0: port 1(bridge_slave_0) entered blocking state [ 1070.741205][T16439] bridge0: port 1(bridge_slave_0) entered disabled state [ 1070.741393][T16439] bridge_slave_0: entered allmulticast mode [ 1070.743817][T16439] bridge_slave_0: entered promiscuous mode [ 1070.775612][T16439] bridge0: port 2(bridge_slave_1) entered blocking state [ 1070.775802][T16439] bridge0: port 2(bridge_slave_1) entered disabled state [ 1070.776055][T16439] bridge_slave_1: entered allmulticast mode [ 1070.800945][T16439] bridge_slave_1: entered promiscuous mode [ 1070.845712][T16439] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1070.859215][T16439] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1071.186969][T13863] Bluetooth: hci4: command tx timeout [ 1071.221960][ T36] audit: type=1326 audit(1772389800.339:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16527 comm="syz.2.3286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12662dc799 code=0x7ffc0000 [ 1071.222011][ T36] audit: type=1326 audit(1772389800.339:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16527 comm="syz.2.3286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12662dc799 code=0x7ffc0000 [ 1072.422579][T16439] team0: Port device team_slave_0 added [ 1072.519618][T16439] team0: Port device team_slave_1 added [ 1072.987836][T16439] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1072.989046][T16439] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1072.989067][T16439] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1076.365806][T16439] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1076.365824][T16439] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1076.365847][T16439] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1078.017442][T16439] hsr_slave_0: entered promiscuous mode [ 1078.018695][T16439] hsr_slave_1: entered promiscuous mode [ 1078.019566][T16439] debugfs: 'hsr0' already exists in 'hsr' [ 1078.019589][T16439] Cannot create hsr debugfs directory [ 1080.764307][ T1408] bridge_slave_1: left allmulticast mode [ 1080.764339][ T1408] bridge_slave_1: left promiscuous mode [ 1080.764539][ T1408] bridge0: port 2(bridge_slave_1) entered disabled state [ 1080.868498][ T1408] bridge_slave_0: left allmulticast mode [ 1080.868527][ T1408] bridge_slave_0: left promiscuous mode [ 1080.868781][ T1408] bridge0: port 1(bridge_slave_0) entered disabled state [ 1082.776997][ T5976] usb 6-1: new low-speed USB device number 14 using dummy_hcd [ 1082.917594][ T1408] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1082.946355][ T5976] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1082.955443][ T5976] usb 6-1: config 1 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1082.955475][ T5976] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1082.968357][ T5976] usb 6-1: string descriptor 0 read error: -22 [ 1082.968575][ T5976] usb 6-1: New USB device found, idVendor=05ac, idProduct=0272, bcdDevice= 0.40 [ 1082.968599][ T5976] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1083.029959][ T1408] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1083.035317][ T5976] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input9 [ 1083.176214][ T1408] bond0 (unregistering): Released all slaves [ 1083.252831][ T5976] usb 6-1: USB disconnect, device number 14 [ 1083.258608][ T5150] bcm5974 6-1:1.0: could not read from device [ 1083.308753][T16605] bcm5974 6-1:1.0: could not read from device [ 1085.827201][ T1408] hsr_slave_0: left promiscuous mode [ 1085.869346][ T1408] hsr_slave_1: left promiscuous mode [ 1085.870475][ T1408] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1085.927506][ T1408] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1086.664539][ T993] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1086.826901][ T993] usb 6-1: Using ep0 maxpacket: 32 [ 1086.830184][ T993] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1086.830223][ T993] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1086.836267][ T993] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1086.836294][ T993] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1086.836313][ T993] usb 6-1: Product: syz [ 1086.836327][ T993] usb 6-1: Manufacturer: syz [ 1086.878537][ T993] hub 6-1:4.0: USB hub found [ 1087.076408][ T993] hub 6-1:4.0: 2 ports detected [ 1088.496610][ T993] hub 6-1:4.0: activate --> -90 [ 1089.592817][ T1408] team0 (unregistering): Port device team_slave_1 removed [ 1089.998684][ T993] hub 6-1:4.0: hub_ext_port_status failed (err = -71) [ 1090.000029][ T993] usb 6-1-port2: cannot reset (err = -71) [ 1090.067616][ T993] usb 6-1-port2: cannot reset (err = -71) [ 1090.067665][ T993] usb 6-1-port2: Cannot enable. Maybe the USB cable is bad? [ 1090.071009][ T993] usb 6-1-port2: cannot disable (err = -71) [ 1090.506939][ T993] hub 6-1:4.0: hub_ext_port_status failed (err = -71) [ 1090.509724][ T5905] usb 6-1: USB disconnect, device number 15 [ 1090.513632][ T993] usb 6-1-port2: cannot reset (err = -71) [ 1090.514090][ T993] usb 6-1-port2: attempt power cycle [ 1090.607154][ T1408] team0 (unregistering): Port device team_slave_0 removed [ 1091.006079][ T36] audit: type=1326 audit(1772389820.129:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16709 comm="syz.1.3330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92597bc799 code=0x7ffc0000 [ 1091.006131][ T36] audit: type=1326 audit(1772389820.129:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16709 comm="syz.1.3330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f92597bc799 code=0x7ffc0000 [ 1091.227445][ T36] audit: type=1326 audit(1772389820.359:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16709 comm="syz.1.3330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92597bc799 code=0x7ffc0000 [ 1091.227491][ T36] audit: type=1326 audit(1772389820.359:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16709 comm="syz.1.3330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92597bc799 code=0x7ffc0000 [ 1093.645205][T16728] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 1096.600904][T16757] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3339'. [ 1097.317130][ T36] audit: type=1326 audit(1772389826.429:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16748 comm="syz.5.3340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4cc1c799 code=0x7ffc0000 [ 1097.317194][ T36] audit: type=1326 audit(1772389826.439:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16748 comm="syz.5.3340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4cc1c799 code=0x7ffc0000 [ 1097.317233][ T36] audit: type=1326 audit(1772389826.439:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16748 comm="syz.5.3340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f2a4cc1c799 code=0x7ffc0000 [ 1097.453287][ T36] audit: type=1326 audit(1772389826.579:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16748 comm="syz.5.3340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4cc1c799 code=0x7ffc0000 [ 1097.454118][ T36] audit: type=1326 audit(1772389826.579:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16748 comm="syz.5.3340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4cc1c799 code=0x7ffc0000 [ 1099.917049][T16439] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1100.964946][T16439] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1101.091009][T16439] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1101.559829][T16439] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1102.082219][T16439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1102.315269][T16439] 8021q: adding VLAN 0 to HW filter on device team0 [ 1103.123548][ T91] bridge0: port 1(bridge_slave_0) entered blocking state [ 1103.123686][ T91] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1103.198188][ T91] bridge0: port 2(bridge_slave_1) entered blocking state [ 1103.198264][ T91] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1106.183539][T16439] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1109.765743][T16872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3366'. [ 1109.792703][T16869] 8021q: adding VLAN 0 to HW filter on device macvlan6 [ 1109.816512][T16873] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3366'. [ 1110.173164][T16439] veth0_vlan: entered promiscuous mode [ 1110.236089][T16439] veth1_vlan: entered promiscuous mode [ 1110.537536][T16439] veth0_macvtap: entered promiscuous mode [ 1110.614829][T16881] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3369'. [ 1111.365255][T16439] veth1_macvtap: entered promiscuous mode [ 1111.547617][T16439] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1111.558430][T16439] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1111.571585][ T1408] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1111.571829][ T1408] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1111.571863][ T1408] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1111.571897][ T1408] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.546536][ T992] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1112.546559][ T992] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1112.675832][ T992] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1112.675847][ T992] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1113.285271][T16902] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3376'. [ 1113.313796][T16902] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3376'. [ 1115.088692][ T60] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1115.106704][ T60] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1115.118106][ T60] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1115.957239][ T60] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1115.963200][ T60] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1118.811925][ T60] Bluetooth: hci3: command tx timeout [ 1119.278369][ T5976] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1119.853264][ T5976] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1119.853297][ T5976] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1119.853344][ T5976] usb 6-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 1119.853366][ T5976] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1119.986385][ T5976] usb 6-1: config 0 descriptor?? [ 1120.434770][ T5976] playstation 0003:054C:0BA0.0003: unknown main item tag 0x0 [ 1120.443580][ T5976] playstation 0003:054C:0BA0.0003: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.5-1/input0 [ 1120.636187][ T5976] playstation 0003:054C:0BA0.0003: Failed to retrieve feature with reportID 18: -71 [ 1120.636250][ T5976] playstation 0003:054C:0BA0.0003: Failed to retrieve DualShock4 pairing info: -71 [ 1120.636300][ T5976] playstation 0003:054C:0BA0.0003: Failed to get MAC address from DualShock4 [ 1120.636341][ T5976] playstation 0003:054C:0BA0.0003: Failed to create dualshock4. [ 1120.690674][ T5976] playstation 0003:054C:0BA0.0003: probe with driver playstation failed with error -71 [ 1120.868321][ T60] Bluetooth: hci3: command tx timeout [ 1120.899910][ T5976] usb 6-1: USB disconnect, device number 20 [ 1121.606074][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1121.606117][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1121.721249][T16961] fido_id[16961]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1123.089266][ T60] Bluetooth: hci3: command tx timeout [ 1123.338242][T16978] syz.5.3397 (16978): drop_caches: 2 [ 1125.138727][T13863] Bluetooth: hci3: command tx timeout [ 1126.269865][T16919] chnl_net:caif_netlink_parms(): no params data found [ 1129.216677][T16919] bridge0: port 1(bridge_slave_0) entered blocking state [ 1129.217293][T16919] bridge0: port 1(bridge_slave_0) entered disabled state [ 1129.217477][T16919] bridge_slave_0: entered allmulticast mode [ 1129.219903][T16919] bridge_slave_0: entered promiscuous mode [ 1129.242597][T16919] bridge0: port 2(bridge_slave_1) entered blocking state [ 1129.242718][T16919] bridge0: port 2(bridge_slave_1) entered disabled state [ 1129.242937][T16919] bridge_slave_1: entered allmulticast mode [ 1129.245470][T16919] bridge_slave_1: entered promiscuous mode [ 1130.367122][T14398] bridge_slave_1: left allmulticast mode [ 1130.367151][T14398] bridge_slave_1: left promiscuous mode [ 1130.367414][T14398] bridge0: port 2(bridge_slave_1) entered disabled state [ 1131.419513][T14398] bridge_slave_0: left allmulticast mode [ 1131.419542][T14398] bridge_slave_0: left promiscuous mode [ 1131.419819][T14398] bridge0: port 1(bridge_slave_0) entered disabled state [ 1131.577224][ T10] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1131.742397][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 1131.759211][ T10] usb 6-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 0.02 [ 1131.759255][ T10] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=3 [ 1131.759274][ T10] usb 6-1: Manufacturer: syz [ 1131.759287][ T10] usb 6-1: SerialNumber: syz [ 1131.798992][ T10] usb 6-1: config 0 descriptor?? [ 1131.861676][ T10] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 1131.863746][ T10] usb 6-1: Detected SIO [ 1131.865934][ T10] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1132.094971][ T5976] usb 6-1: USB disconnect, device number 21 [ 1132.176487][ T5976] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1132.177312][ T5976] ftdi_sio 6-1:0.0: device disconnected [ 1132.527875][T14398] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1132.597821][T14398] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1132.628112][T14398] bond0 (unregistering): Released all slaves [ 1132.683449][T16919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1132.686267][T17051] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1132.753821][T16919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1132.913981][T14398] tipc: Disabling bearer [ 1132.914586][T14398] tipc: Left network mode [ 1132.929889][T16919] team0: Port device team_slave_0 added [ 1132.933389][T16919] team0: Port device team_slave_1 added [ 1133.050030][T16919] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1133.050047][T16919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1133.050073][T16919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1133.067040][T16919] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1133.067057][T16919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1133.067084][T16919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1135.553998][T16919] hsr_slave_0: entered promiscuous mode [ 1135.568272][T16919] hsr_slave_1: entered promiscuous mode [ 1135.569194][T16919] debugfs: 'hsr0' already exists in 'hsr' [ 1135.569216][T16919] Cannot create hsr debugfs directory [ 1137.442961][T14398] hsr_slave_0: left promiscuous mode [ 1137.476898][T14398] hsr_slave_1: left promiscuous mode [ 1137.477991][T14398] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1137.501587][T14398] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1138.316242][T17110] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3425'. [ 1138.817888][T14398] team0 (unregistering): Port device team_slave_1 removed [ 1138.876618][T14398] team0 (unregistering): Port device team_slave_0 removed [ 1139.297516][T17108] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1143.561285][ T808] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1143.749257][ T808] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1143.749292][ T808] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 58398, setting to 1024 [ 1143.749318][ T808] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1143.749354][ T808] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1143.749376][ T808] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1143.879583][T17155] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1143.903704][ T808] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1144.396869][ T808] usb 5-1: USB disconnect, device number 6 [ 1145.340428][T16919] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1145.735815][T16919] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1145.775803][T16919] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1145.844539][T16919] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1147.185481][T16919] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1147.311131][T16919] 8021q: adding VLAN 0 to HW filter on device team0 [ 1147.335119][T14398] bridge0: port 1(bridge_slave_0) entered blocking state [ 1147.338651][T14398] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1147.400236][ T1408] bridge0: port 2(bridge_slave_1) entered blocking state [ 1147.400382][ T1408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1149.470209][T17228] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3446'. [ 1149.813502][T16919] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1150.096310][T16919] veth0_vlan: entered promiscuous mode [ 1150.150822][T16919] veth1_vlan: entered promiscuous mode [ 1150.329786][T16919] veth0_macvtap: entered promiscuous mode [ 1150.381668][T16919] veth1_macvtap: entered promiscuous mode [ 1150.899597][T16919] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1150.924097][T16919] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1151.078280][ T1295] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.085398][ T1295] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.120892][ T1295] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.147070][ T1295] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.813020][T10655] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1151.813042][T10655] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1152.128880][T14365] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1152.128895][T14365] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1152.566927][ T993] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1152.770783][T17262] nfs4: Unknown parameter 'tc' [ 1153.477718][T17260] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3451'. [ 1153.489364][ T993] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1153.489398][ T993] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 58398, setting to 1024 [ 1153.489423][ T993] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1153.489460][ T993] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1153.489482][ T993] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1153.651526][T17254] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1153.673546][ T993] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1154.050222][ T993] usb 6-1: USB disconnect, device number 22 [ 1154.754450][ T60] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1154.787206][ T60] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1154.799653][ T60] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1154.842265][ T60] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1154.843050][ T60] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1155.137722][ T5976] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1155.294116][ T5976] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1155.294152][ T5976] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 58398, setting to 1024 [ 1155.294177][ T5976] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1155.294214][ T5976] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1155.294235][ T5976] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1155.344814][T17282] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1155.355902][ T5976] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1155.787684][ T5976] usb 6-1: USB disconnect, device number 23 [ 1156.809806][T17298] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 1157.057532][ T60] Bluetooth: hci2: command tx timeout [ 1157.089263][T17311] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3457'. [ 1159.107527][ T60] Bluetooth: hci2: command tx timeout [ 1159.729569][T14365] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1161.253817][ T60] Bluetooth: hci2: command tx timeout [ 1161.828784][T14365] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1162.047004][ T5856] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1162.231994][ T5856] usb 5-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 1162.232014][ T5856] usb 5-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 1162.232027][ T5856] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1162.234429][ T5856] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 1162.234445][ T5856] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1162.234455][ T5856] usb 5-1: Product: syz [ 1162.234462][ T5856] usb 5-1: Manufacturer: syz [ 1162.234469][ T5856] usb 5-1: SerialNumber: syz [ 1162.351101][T17341] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1162.351255][T17341] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1162.464998][T14365] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1162.643418][ T5856] rtl8150 5-1:1.0: couldn't reset the device [ 1162.643680][ T5856] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 1162.678652][ T5856] usb 5-1: USB disconnect, device number 7 [ 1162.908803][T14365] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1163.347331][ T60] Bluetooth: hci2: command tx timeout [ 1163.618810][T17278] chnl_net:caif_netlink_parms(): no params data found [ 1165.217952][ T5863] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1165.376869][ T5863] usb 5-1: Using ep0 maxpacket: 32 [ 1165.380249][ T5863] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1165.380280][ T5863] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1165.382007][ T5863] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1165.382105][ T5863] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1165.382124][ T5863] usb 5-1: Product: syz [ 1165.382132][ T5863] usb 5-1: Manufacturer: syz [ 1165.458895][T14365] bridge_slave_1: left allmulticast mode [ 1165.458923][T14365] bridge_slave_1: left promiscuous mode [ 1165.459098][T14365] bridge0: port 2(bridge_slave_1) entered disabled state [ 1165.493604][ T5863] hub 5-1:4.0: USB hub found [ 1165.548010][T14365] bridge_slave_0: left allmulticast mode [ 1165.548030][T14365] bridge_slave_0: left promiscuous mode [ 1165.548278][T14365] bridge0: port 1(bridge_slave_0) entered disabled state [ 1165.664625][ T5863] hub 5-1:4.0: 2 ports detected [ 1166.999166][T14365] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1167.070485][ T10] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1167.079539][T14365] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1167.125266][T14365] bond0 (unregistering): Released all slaves [ 1167.217109][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 1167.219694][ T10] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1167.219724][ T10] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1167.222135][ T10] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1167.222161][ T10] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1167.222228][ T10] usb 6-1: Product: syz [ 1167.222243][ T10] usb 6-1: Manufacturer: syz [ 1167.274314][ T5863] usb 5-1: USB disconnect, device number 8 [ 1167.305290][T17278] bridge0: port 1(bridge_slave_0) entered blocking state [ 1167.305455][T17278] bridge0: port 1(bridge_slave_0) entered disabled state [ 1167.305763][T17278] bridge_slave_0: entered allmulticast mode [ 1167.328795][ T10] hub 6-1:4.0: USB hub found [ 1167.377668][T17278] bridge_slave_0: entered promiscuous mode [ 1167.382341][T14365] tipc: Disabling bearer [ 1167.382591][T14365] tipc: Left network mode [ 1167.383102][T17278] bridge0: port 2(bridge_slave_1) entered blocking state [ 1167.383765][T17278] bridge0: port 2(bridge_slave_1) entered disabled state [ 1167.383970][T17278] bridge_slave_1: entered allmulticast mode [ 1167.462651][T17278] bridge_slave_1: entered promiscuous mode [ 1167.565876][T17278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1167.567021][ T10] hub 6-1:4.0: 2 ports detected [ 1167.595477][T17278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1167.938718][T17278] team0: Port device team_slave_0 added [ 1168.043487][T17278] team0: Port device team_slave_1 added [ 1169.323801][T17278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1169.323813][T17278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1169.323830][T17278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1169.554675][T17043] usb 6-1: USB disconnect, device number 24 [ 1169.807488][T17278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1169.807505][T17278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1169.807531][T17278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1170.175452][T17433] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 1171.518333][ T1531] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1171.654232][T17278] hsr_slave_0: entered promiscuous mode [ 1171.655457][T17278] hsr_slave_1: entered promiscuous mode [ 1171.656366][T17278] debugfs: 'hsr0' already exists in 'hsr' [ 1171.656390][T17278] Cannot create hsr debugfs directory [ 1171.666934][ T1531] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1171.697180][T14398] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1171.719607][T14398] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1172.966980][T14365] hsr_slave_0: left promiscuous mode [ 1173.009014][T14365] hsr_slave_1: left promiscuous mode [ 1173.009996][T14365] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1173.010021][T14365] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1173.048869][T14365] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1173.048894][T14365] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1173.142772][ T36] audit: type=1326 audit(1772389902.269:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17473 comm="syz.2.3502" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feec298c799 code=0x0 [ 1173.183085][T14365] veth1_macvtap: left promiscuous mode [ 1173.183147][T14365] veth0_macvtap: left promiscuous mode [ 1173.183350][T14365] veth1_vlan: left promiscuous mode [ 1173.183493][T14365] veth0_vlan: left promiscuous mode [ 1173.263523][ T36] audit: type=1326 audit(1772389902.389:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17473 comm="syz.2.3502" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feec298c799 code=0x0 [ 1174.784246][ T36] audit: type=1326 audit(1772389903.909:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17482 comm="syz.2.3504" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feec298c799 code=0x0 [ 1174.881664][T14365] team0 (unregistering): Port device team_slave_1 removed [ 1174.892341][ T36] audit: type=1326 audit(1772389904.019:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17482 comm="syz.2.3504" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feec298c799 code=0x0 [ 1174.958301][T14365] team0 (unregistering): Port device team_slave_0 removed [ 1175.129399][T17464] 8021q: adding VLAN 0 to HW filter on device macvlan6 [ 1175.436915][ T808] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1175.606910][ T808] usb 5-1: Using ep0 maxpacket: 8 [ 1175.636111][ T808] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1175.637670][ T808] usb 5-1: config 4 interface 0 has no altsetting 0 [ 1175.644660][ T808] usb 5-1: string descriptor 0 read error: -22 [ 1175.644833][ T808] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1175.644856][ T808] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1175.921354][ T808] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1175.972503][ T808] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1175.972869][ T808] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1175.972938][ T808] usb 5-1: media controller created [ 1176.071893][ T808] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1177.368771][ T808] zl10353_read_register: readreg error (reg=127, ret==0) [ 1178.197493][T17528] sg_read: process 58 (syz.2.3513) changed security contexts after opening file descriptor, this is not allowed. [ 1178.667042][ T5856] usb 5-1: USB disconnect, device number 9 [ 1178.881825][T14365] IPVS: stop unused estimator thread 0... [ 1179.387407][T17043] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1179.691904][T17043] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1179.691941][T17043] usb 5-1: config 27 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 1179.691977][T17043] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1179.691998][T17043] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1180.006345][T17043] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1180.042297][T17043] usb 5-1: invalid MIDI out EP 0 [ 1180.556884][ T808] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1180.662921][T17043] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1180.682614][T17043] usb 5-1: USB disconnect, device number 10 [ 1180.720496][ T808] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1180.720527][ T808] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1180.736086][ T808] usb 6-1: config 0 descriptor?? [ 1180.773090][ T808] cp210x 6-1:0.0: cp210x converter detected [ 1180.955889][ T808] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 1180.955948][ T808] cp210x 6-1:0.0: querying part number failed [ 1180.988948][ T808] usb 6-1: cp210x converter now attached to ttyUSB0 [ 1181.482132][T17278] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1181.574843][T17278] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1181.669532][T17278] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1181.971837][T17278] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1182.067063][ T808] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1182.117754][T17560] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1182.239834][ T808] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 1182.239890][ T808] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1182.239916][ T808] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1182.239940][ T808] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1182.239965][ T808] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1182.239992][ T808] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1182.240003][ T808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1182.244301][ T808] usb 3-1: config 0 descriptor?? [ 1182.244919][T17557] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1182.392908][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1182.392962][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1182.669044][ T808] plantronics 0003:047F:FFFF.0004: reserved main item tag 0xd [ 1182.742356][ T808] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1182.856685][T17278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1182.980973][T17278] 8021q: adding VLAN 0 to HW filter on device team0 [ 1183.088708][T14365] bridge0: port 1(bridge_slave_0) entered blocking state [ 1183.088830][T14365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1183.122026][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 1183.122099][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1183.154675][ T808] usb 3-1: USB disconnect, device number 4 [ 1183.226962][ T5898] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1183.376893][ T5898] usb 5-1: Using ep0 maxpacket: 8 [ 1183.382100][ T5898] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1183.386106][ T5898] usb 5-1: config 4 interface 0 has no altsetting 0 [ 1183.421767][ T5898] usb 5-1: string descriptor 0 read error: -22 [ 1183.421867][ T5898] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1183.421889][ T5898] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1183.466255][ T5898] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1183.480279][ T5898] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1183.480510][ T5898] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1183.480537][ T5898] usb 5-1: media controller created [ 1183.526369][ T5898] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1184.653205][ T5898] zl10353_read_register: readreg error (reg=127, ret==0) [ 1184.866494][ T36] audit: type=1326 audit(1772389913.989:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17593 comm="syz.1.3525" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f92597bc799 code=0x0 [ 1184.971472][T17596] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1184.983626][ T36] audit: type=1326 audit(1772389914.109:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17593 comm="syz.1.3525" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f92597bc799 code=0x0 [ 1185.102872][T17043] usb 6-1: USB disconnect, device number 25 [ 1185.152123][T17043] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1185.163326][T17043] cp210x 6-1:0.0: device disconnected [ 1185.457167][T17278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1185.577685][T17278] veth0_vlan: entered promiscuous mode [ 1185.610529][T17278] veth1_vlan: entered promiscuous mode [ 1185.707507][T17278] veth0_macvtap: entered promiscuous mode [ 1185.731075][T17278] veth1_macvtap: entered promiscuous mode [ 1185.825710][T17278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1185.887353][T17278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1185.942494][ T42] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1185.957437][ T42] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1185.957502][ T42] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1185.957536][ T42] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1186.128396][ T808] usb 5-1: USB disconnect, device number 11 [ 1186.917041][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1186.917058][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1187.049076][T14398] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1187.049096][T14398] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1187.163038][ T5863] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1187.250166][T17654] fuse: Bad value for 'fd' [ 1187.308823][ T5863] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 1187.308879][ T5863] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1187.308905][ T5863] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1187.308930][ T5863] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1187.308956][ T5863] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1187.308995][ T5863] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1187.309017][ T5863] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1187.362907][ T5863] usb 6-1: config 0 descriptor?? [ 1187.363694][T17646] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1187.376992][T17043] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1187.537155][T17043] usb 5-1: Using ep0 maxpacket: 32 [ 1187.539998][T17043] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1187.540028][T17043] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1187.542899][T17043] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1187.542927][T17043] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1187.542994][T17043] usb 5-1: Product: syz [ 1187.543008][T17043] usb 5-1: Manufacturer: syz [ 1187.668030][T14398] ODEBUG: Out of memory. ODEBUG disabled [ 1187.695697][T17043] hub 5-1:4.0: USB hub found [ 1187.833909][ T5863] plantronics 0003:047F:FFFF.0005: reserved main item tag 0xd [ 1187.935623][T17043] hub 5-1:4.0: 2 ports detected [ 1188.067776][ T5863] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1188.185261][ T5863] usb 6-1: USB disconnect, device number 26 [ 1188.983860][T17667] fido_id[17667]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1189.079965][ T5801] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1189.084996][ T5801] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1189.086334][ T5801] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1189.120458][ T5801] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1189.121640][ T5801] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1189.586906][ T60] Bluetooth: hci4: command 0x0406 tx timeout [ 1189.706980][ T5898] usb 5-1: USB disconnect, device number 12 [ 1191.193493][T13863] Bluetooth: hci0: command tx timeout [ 1191.211211][T17672] chnl_net:caif_netlink_parms(): no params data found [ 1192.986039][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1193.243406][T17705] team_slave_0: entered promiscuous mode [ 1193.243459][T17705] team_slave_1: entered promiscuous mode [ 1193.269775][T13863] Bluetooth: hci0: command tx timeout [ 1193.288214][T17705] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1193.322790][T17043] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1193.343223][T17706] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1193.491484][T17043] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1193.491518][T17043] usb 5-1: config 27 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 1193.491555][T17043] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1193.491577][T17043] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1193.576022][T17043] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1193.576597][T17043] usb 5-1: invalid MIDI out EP 0 [ 1193.582507][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1193.673158][T17672] bridge0: port 1(bridge_slave_0) entered blocking state [ 1193.673344][T17672] bridge0: port 1(bridge_slave_0) entered disabled state [ 1193.673520][T17672] bridge_slave_0: entered allmulticast mode [ 1193.676153][T17672] bridge_slave_0: entered promiscuous mode [ 1193.715222][T17672] bridge0: port 2(bridge_slave_1) entered blocking state [ 1193.715415][T17672] bridge0: port 2(bridge_slave_1) entered disabled state [ 1193.715599][T17672] bridge_slave_1: entered allmulticast mode [ 1193.739142][T17672] bridge_slave_1: entered promiscuous mode [ 1193.796902][ T5863] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1193.958991][ T5863] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1193.959025][ T5863] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1193.959061][ T5863] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1193.959083][ T5863] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1194.021411][ T5863] usb 6-1: config 0 descriptor?? [ 1194.073212][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1194.238469][T17043] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1194.271280][T17672] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1194.278369][T17043] usb 5-1: USB disconnect, device number 13 [ 1194.319193][T17672] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1194.471656][ T5863] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x6 [ 1194.471694][ T5863] pyra 0003:1E7D:2CF6.0006: item fetching failed at offset 5/7 [ 1194.472321][ T5863] pyra 0003:1E7D:2CF6.0006: parse failed [ 1194.472387][ T5863] pyra 0003:1E7D:2CF6.0006: probe with driver pyra failed with error -22 [ 1194.514001][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1194.704562][ T5976] usb 6-1: USB disconnect, device number 27 [ 1195.814528][T13863] Bluetooth: hci0: command tx timeout [ 1195.850901][T17672] team0: Port device team_slave_0 added [ 1195.878905][T17672] team0: Port device team_slave_1 added [ 1195.969619][T17672] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1195.969634][T17672] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1195.969654][T17672] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1195.971504][T17672] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1195.971516][T17672] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1195.971535][T17672] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1196.325298][T17672] hsr_slave_0: entered promiscuous mode [ 1196.326650][T17672] hsr_slave_1: entered promiscuous mode [ 1196.341335][T17672] debugfs: 'hsr0' already exists in 'hsr' [ 1196.341361][T17672] Cannot create hsr debugfs directory [ 1196.450892][ T808] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1196.599115][ T808] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1196.599159][ T808] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1196.599185][ T808] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1196.599206][ T808] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1196.605912][ T808] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1196.605942][ T808] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1196.605961][ T808] usb 6-1: Manufacturer: syz [ 1196.680548][ T808] usb 6-1: config 0 descriptor?? [ 1197.040183][T17735] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3558'. [ 1197.091100][T17736] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3558'. [ 1197.123947][ T13] bridge_slave_1: left allmulticast mode [ 1197.123974][ T13] bridge_slave_1: left promiscuous mode [ 1197.124189][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1197.136439][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 1197.137278][ T808] usbhid 6-1:0.0: can't add hid device: -71 [ 1197.137350][ T808] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1197.140332][ T808] usb 6-1: USB disconnect, device number 28 [ 1197.196553][T17167] udevd[17167]: setting mode of /dev/bus/usb/006/028 to 020664 failed: No such file or directory [ 1197.196668][T17167] udevd[17167]: setting owner of /dev/bus/usb/006/028 to uid=0, gid=0 failed: No such file or directory [ 1197.237684][ T13] bridge_slave_0: left allmulticast mode [ 1197.237702][ T13] bridge_slave_0: left promiscuous mode [ 1197.237960][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1198.467100][T13863] Bluetooth: hci0: command tx timeout [ 1199.074372][ T13] bond1 (unregistering): (slave ip6erspan0): Releasing active interface [ 1199.527827][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1199.587730][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1199.647909][ T13] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1199.679906][ T13] bond0 (unregistering): Released all slaves [ 1199.685227][ T13] bond1 (unregistering): Released all slaves [ 1201.895756][T17768] 8021q: adding VLAN 0 to HW filter on device macvlan6 [ 1204.800730][T17800] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3572'. [ 1207.918087][ T13] hsr_slave_0: left promiscuous mode [ 1208.023199][ T13] hsr_slave_1: left promiscuous mode [ 1208.024162][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1208.024180][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1208.091396][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1208.091423][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1208.254634][ T13] team_slave_0: left promiscuous mode [ 1208.254671][ T13] team_slave_1: left promiscuous mode [ 1208.256178][ T13] veth1_macvtap: left promiscuous mode [ 1208.256233][ T13] veth0_macvtap: left promiscuous mode [ 1208.256362][ T13] veth1_vlan: left promiscuous mode [ 1208.256448][ T13] veth0_vlan: left promiscuous mode [ 1208.480006][T17827] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3578'. [ 1209.954755][T17841] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3580'. [ 1210.795533][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1210.877947][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1211.630800][T17846] bridge0: entered promiscuous mode [ 1211.630862][T17846] macvlan2: entered promiscuous mode [ 1213.261001][T17672] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1213.916395][T17850] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1213.917956][T17672] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1213.990571][T17672] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1214.269721][T17672] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1214.512529][T17043] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1215.357766][T17043] usb 3-1: Using ep0 maxpacket: 32 [ 1215.360159][T17043] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1215.360192][T17043] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1215.360237][T17043] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1215.362564][T17043] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1215.362590][T17043] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1215.362608][T17043] usb 3-1: Product: syz [ 1215.362622][T17043] usb 3-1: Manufacturer: syz [ 1215.362635][T17043] usb 3-1: SerialNumber: syz [ 1215.515906][T17043] cdc_ncm 3-1:1.0: skipping garbage [ 1215.515960][T17043] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 1215.516025][T17043] cdc_ncm 3-1:1.0: bind() failure [ 1215.587784][T17672] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1215.651136][T17672] 8021q: adding VLAN 0 to HW filter on device team0 [ 1215.670472][T14676] bridge0: port 1(bridge_slave_0) entered blocking state [ 1215.670687][T14676] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1215.721096][ T1531] bridge0: port 2(bridge_slave_1) entered blocking state [ 1215.721220][ T1531] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1215.753709][ T5856] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1215.765268][ T808] usb 3-1: USB disconnect, device number 5 [ 1215.909037][ T5856] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1215.909074][ T5856] usb 5-1: config 27 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 1215.909111][ T5856] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1215.909133][ T5856] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1215.996701][ T5856] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1216.015032][ T5856] usb 5-1: invalid MIDI out EP 0 [ 1216.146965][T15685] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1216.224700][ T13] IPVS: stop unused estimator thread 0... [ 1216.274667][T17672] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1216.327132][T15685] usb 6-1: Using ep0 maxpacket: 32 [ 1216.329389][T15685] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1216.329418][T15685] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1216.331025][T15685] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1216.331049][T15685] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1216.331068][T15685] usb 6-1: Product: syz [ 1216.331081][T15685] usb 6-1: Manufacturer: syz [ 1216.367039][ T5898] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1216.435893][T17672] veth0_vlan: entered promiscuous mode [ 1216.445206][T17672] veth1_vlan: entered promiscuous mode [ 1216.454826][T15685] hub 6-1:4.0: USB hub found [ 1216.506567][ T5856] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1216.540452][ T5898] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1216.540490][ T5898] usb 1-1: config 27 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 1216.540581][ T5898] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1216.540603][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1216.555560][ T5856] usb 5-1: USB disconnect, device number 14 [ 1217.049034][T17901] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1217.112797][T17672] veth0_macvtap: entered promiscuous mode [ 1217.219948][T17672] veth1_macvtap: entered promiscuous mode [ 1217.248264][T15685] hub 6-1:4.0: 2 ports detected [ 1217.737870][T17672] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1217.898732][T17672] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1218.203853][ T1531] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1218.219967][ T1531] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1218.230930][ T1531] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1218.230980][ T1531] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1219.310150][ T5898] usb 1-1: can't set config #27, error -71 [ 1219.321733][ T5898] usb 1-1: USB disconnect, device number 5 [ 1219.351771][T15685] hub 6-1:4.0: set hub depth failed [ 1219.393616][T15685] usb 6-1: USB disconnect, device number 29 [ 1219.993344][T14676] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1219.993366][T14676] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1220.472027][T15685] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1220.934616][T15685] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 1220.934678][T15685] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1220.934703][T15685] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1220.934727][T15685] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1220.934752][T15685] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1220.934792][T15685] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1220.934812][T15685] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1221.038826][T15685] usb 3-1: config 0 descriptor?? [ 1221.039821][T17915] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1221.088307][T10655] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1221.088327][T10655] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1221.503732][T15685] plantronics 0003:047F:FFFF.0007: reserved main item tag 0xd [ 1221.554359][T15685] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1223.227350][ T10] usb 3-1: USB disconnect, device number 6 [ 1223.691516][T17942] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1224.514635][ T5863] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1224.587926][T13520] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 1224.710681][ T5863] usb 6-1: Using ep0 maxpacket: 8 [ 1224.720754][ T5863] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1224.726190][ T5863] usb 6-1: config 4 interface 0 has no altsetting 0 [ 1224.732534][ T5863] usb 6-1: string descriptor 0 read error: -22 [ 1224.732634][ T5863] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1224.732657][ T5863] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1224.798267][T13520] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1224.798298][T13520] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1224.798317][T13520] usb 3-1: Product: syz [ 1224.798330][T13520] usb 3-1: Manufacturer: syz [ 1224.798343][T13520] usb 3-1: SerialNumber: syz [ 1224.843637][T13520] usb 3-1: config 0 descriptor?? [ 1224.845343][ T5863] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1224.863081][ T5863] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1224.863319][ T5863] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1224.863355][ T5863] usb 6-1: media controller created [ 1224.892714][T13520] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1224.965742][ T5863] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1225.862207][ T5863] usb 6-1: USB disconnect, device number 30 [ 1226.647632][T13520] gspca_stk1135: reg_w 0x200 err -71 [ 1226.648813][T13520] gspca_stk1135: serial bus timeout: status=0x00 [ 1226.648823][T13520] gspca_stk1135: Sensor write failed [ 1226.648837][T13520] gspca_stk1135: serial bus timeout: status=0x00 [ 1226.648842][T13520] gspca_stk1135: Sensor write failed [ 1226.648855][T13520] gspca_stk1135: serial bus timeout: status=0x00 [ 1226.648860][T13520] gspca_stk1135: Sensor read failed [ 1226.648873][T13520] gspca_stk1135: serial bus timeout: status=0x00 [ 1226.648878][T13520] gspca_stk1135: Sensor read failed [ 1226.648881][T13520] gspca_stk1135: Detected sensor type unknown (0x0) [ 1226.648916][T13520] gspca_stk1135: serial bus timeout: status=0x00 [ 1226.648922][T13520] gspca_stk1135: Sensor read failed [ 1226.648936][T13520] gspca_stk1135: serial bus timeout: status=0x00 [ 1226.648940][T13520] gspca_stk1135: Sensor read failed [ 1226.648953][T13520] gspca_stk1135: serial bus timeout: status=0x00 [ 1226.648957][T13520] gspca_stk1135: Sensor write failed [ 1226.648971][T13520] gspca_stk1135: serial bus timeout: status=0x00 [ 1226.648975][T13520] gspca_stk1135: Sensor write failed [ 1226.649036][T13520] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 1226.653666][T13520] usb 3-1: USB disconnect, device number 7 [ 1227.096897][ T808] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1227.251115][ T808] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1227.265120][ T808] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1227.265145][ T808] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1227.296001][ T808] usb 2-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 1227.296033][ T808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1227.296051][ T808] usb 2-1: Product: syz [ 1227.296065][ T808] usb 2-1: Manufacturer: syz [ 1227.296078][ T808] usb 2-1: SerialNumber: syz [ 1227.336939][T17043] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1227.521771][T17993] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1227.763042][T17043] usb 6-1: Using ep0 maxpacket: 32 [ 1227.993527][T17043] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1227.993561][T17043] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1227.993585][T17043] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1227.993606][T17043] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1227.993630][T17043] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1228.047533][ T5898] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1228.124902][ T808] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1228.167887][T17043] usb 6-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1228.167917][T17043] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1228.167936][T17043] usb 6-1: Product: syz [ 1228.167950][T17043] usb 6-1: Manufacturer: syz [ 1228.167963][T17043] usb 6-1: SerialNumber: syz [ 1228.241414][ T5898] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1228.241479][ T5898] usb 1-1: config 27 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 1228.241533][ T5898] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1228.241709][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1228.379757][T17043] usb 6-1: config 0 descriptor?? [ 1228.541036][ T36] audit: type=1326 audit(1772389957.669:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18001 comm="syz.2.3633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feec298c799 code=0x7ffc0000 [ 1228.541087][ T36] audit: type=1326 audit(1772389957.669:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18001 comm="syz.2.3633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feec298c799 code=0x7ffc0000 [ 1228.577523][ T5898] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1228.578470][ T5898] usb 1-1: invalid MIDI out EP 0 [ 1228.585421][ T808] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 1228.603475][ T808] usb 2-1: USB disconnect, device number 13 [ 1228.638891][T17043] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1228.639339][T17043] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1228.641902][T17043] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1228.642342][T17043] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1228.643067][T17043] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1228.643427][T17043] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1228.643819][T17043] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1228.644226][T17043] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1228.713518][T17043] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1228.713988][T17043] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1228.714432][T17043] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1228.714852][T17043] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1228.742788][T18004] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3632'. [ 1228.759857][T17043] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1228.763136][T17043] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1228.763576][T17043] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1228.764135][T17043] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1228.764582][T17043] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1228.765108][T17043] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1228.765553][T17043] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1228.765994][T17043] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1228.766121][T17043] input input14: Timeout waiting for response from device. [ 1228.880823][T17043] usb 6-1: USB disconnect, device number 31 [ 1228.983343][T17167] udevd[17167]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1229.121091][T18015] netlink: 'syz.2.3637': attribute type 1 has an invalid length. [ 1229.211914][T18017] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3637'. [ 1229.366882][ T808] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1229.376342][T18015] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1229.546952][ T808] usb 2-1: Using ep0 maxpacket: 16 [ 1229.557511][ T808] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1229.557537][ T808] usb 2-1: config 0 has no interface number 0 [ 1229.561374][ T5898] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1229.579973][ T808] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1229.580003][ T808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1229.580022][ T808] usb 2-1: Product: syz [ 1229.580035][ T808] usb 2-1: Manufacturer: syz [ 1229.580049][ T808] usb 2-1: SerialNumber: syz [ 1229.678212][ T808] usb 2-1: config 0 descriptor?? [ 1229.679902][ T5898] usb 1-1: USB disconnect, device number 6 [ 1229.699088][ T808] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1230.050078][T18031] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1230.942133][ T808] gspca_spca1528: reg_w err -110 [ 1230.957019][ T808] spca1528 2-1:0.1: probe with driver spca1528 failed with error -110 [ 1231.097619][T17043] usb 2-1: USB disconnect, device number 14 [ 1231.246952][ T5898] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1231.403589][ T5898] usb 6-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 1231.403621][ T5898] usb 6-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 1231.403644][ T5898] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1231.439027][ T5898] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 1231.439055][ T5898] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1231.439071][ T5898] usb 6-1: Product: syz [ 1231.439079][ T5898] usb 6-1: Manufacturer: syz [ 1231.439092][ T5898] usb 6-1: SerialNumber: syz [ 1231.444810][T18035] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1231.444927][T18035] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1231.638919][T18047] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3648'. [ 1231.983631][T18054] netlink: 'syz.2.3650': attribute type 1 has an invalid length. [ 1232.037830][ T5898] rtl8150 6-1:1.0: couldn't reset the device [ 1232.038169][ T5898] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 1232.077158][T18058] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3650'. [ 1232.086886][ T5898] usb 6-1: USB disconnect, device number 32 [ 1232.371313][T18054] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1232.443359][T18064] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3653'. [ 1233.747529][ T5898] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1233.882300][T18073] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1234.003608][ T5898] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1234.003638][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1234.047563][ T5898] usb 1-1: config 0 descriptor?? [ 1234.083459][ T5898] cp210x 1-1:0.0: cp210x converter detected [ 1234.503474][ T5898] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1234.719056][ T5898] cp210x 1-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 1234.719086][ T5898] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 1234.769651][ T5898] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1234.772727][ T5898] usb 1-1: USB disconnect, device number 7 [ 1234.779620][ T5898] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1234.780021][ T5898] cp210x 1-1:0.0: device disconnected [ 1236.156914][T15685] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1236.336867][T15685] usb 1-1: Using ep0 maxpacket: 8 [ 1236.365445][T15685] usb 1-1: config 255 has an invalid interface number: 252 but max is 0 [ 1236.365473][T15685] usb 1-1: config 255 has no interface number 0 [ 1236.365504][T15685] usb 1-1: config 255 interface 252 has no altsetting 0 [ 1236.400875][T15685] usb 1-1: New USB device found, idVendor=1199, idProduct=6839, bcdDevice= 7.4e [ 1236.400899][T15685] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1236.400913][T15685] usb 1-1: Product: syz [ 1236.400922][T15685] usb 1-1: Manufacturer: syz [ 1236.400932][T15685] usb 1-1: SerialNumber: syz [ 1236.439027][T10655] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1237.341050][T18117] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3665'. [ 1238.158697][T10655] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1238.205680][ T60] BUG: unable to handle page fault for address: ffffc90011589010 [ 1238.205700][ T60] #PF: supervisor read access in kernel mode [ 1238.205711][ T60] #PF: error_code(0x0000) - not-present page [ 1238.205722][ T60] PGD 13fe68067 P4D 13fe68067 PUD 1aac2067 PMD 32d03067 PTE 0 [ 1238.205765][ T60] Oops: Oops: 0000 [#1] SMP KASAN PTI [ 1238.205926][ T60] CPU: 0 UID: 0 PID: 60 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1238.205953][ T60] Tainted: [L]=SOFTLOCKUP [ 1238.205959][ T60] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1238.205971][ T60] Workqueue: hci0 hci_rx_work [ 1238.206105][ T60] RIP: 0010:kcov_remote_start+0x2a1/0x710 [ 1238.206169][ T60] Code: 7f 8d 4c 8b b8 18 94 4e 92 bd 00 00 04 00 eb 4f 41 8b ae a4 00 00 00 49 c7 c7 00 9a e2 8d 4d 8b 3f 49 81 ff 00 9a e2 8d 74 4c <41> 39 6f 10 75 ee 4c 89 ff e8 d1 fe e2 02 84 c0 74 0e 49 8b 07 49 [ 1238.206185][ T60] RSP: 0018:ffffc9000126fa30 EFLAGS: 00010287 [ 1238.206199][ T60] RAX: 0000000000000000 RBX: ffff88801b32dac0 RCX: 0000000000000000 [ 1238.206211][ T60] RDX: 00000000e62d2a00 RSI: 0000000000000001 RDI: ffffffff8ba647a0 [ 1238.206222][ T60] RBP: 0000000000100000 R08: ffffffff8b245250 R09: ffffffff8ddcd780 [ 1238.206235][ T60] R10: dffffc0000000000 R11: fffffbfff1ed4657 R12: 0000000000000002 [ 1238.206245][ T60] R13: 0000000000000001 R14: ffff8880243f5200 R15: ffffc90011589000 [ 1238.206258][ T60] FS: 0000000000000000(0000) GS:ffff888126340000(0000) knlGS:0000000000000000 [ 1238.206274][ T60] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1238.206286][ T60] CR2: ffffc90011589010 CR3: 0000000034a10000 CR4: 00000000003526f0 [ 1238.206302][ T60] Call Trace: [ 1238.206314][ T60] [ 1238.206323][ T60] hci_rx_work+0x10f/0x1030 [ 1238.206350][ T60] ? process_scheduled_works+0xa25/0x1830 [ 1238.206391][ T60] process_scheduled_works+0xb02/0x1830 [ 1238.206424][ T60] ? __pfx_process_scheduled_works+0x10/0x10 [ 1238.206451][ T60] ? assign_work+0x3d5/0x5e0 [ 1238.206484][ T60] worker_thread+0xa50/0xfc0 [ 1238.206519][ T60] kthread+0x388/0x470 [ 1238.206538][ T60] ? __pfx_worker_thread+0x10/0x10 [ 1238.206561][ T60] ? __pfx_kthread+0x10/0x10 [ 1238.206579][ T60] ret_from_fork+0x51e/0xb90 [ 1238.206621][ T60] ? __pfx_ret_from_fork+0x10/0x10 [ 1238.206651][ T60] ? __switch_to+0xc7d/0x1450 [ 1238.206692][ T60] ? __pfx_kthread+0x10/0x10 [ 1238.206709][ T60] ret_from_fork_asm+0x1a/0x30 [ 1238.206742][ T60] [ 1238.206751][ T60] Modules linked in: [ 1238.206769][ T60] CR2: ffffc90011589010 [ 1238.206787][ T60] ---[ end trace 0000000000000000 ]--- [ 1238.206796][ T60] RIP: 0010:kcov_remote_start+0x2a1/0x710 [ 1238.206818][ T60] Code: 7f 8d 4c 8b b8 18 94 4e 92 bd 00 00 04 00 eb 4f 41 8b ae a4 00 00 00 49 c7 c7 00 9a e2 8d 4d 8b 3f 49 81 ff 00 9a e2 8d 74 4c <41> 39 6f 10 75 ee 4c 89 ff e8 d1 fe e2 02 84 c0 74 0e 49 8b 07 49 [ 1238.206834][ T60] RSP: 0018:ffffc9000126fa30 EFLAGS: 00010287 [ 1238.206849][ T60] RAX: 0000000000000000 RBX: ffff88801b32dac0 RCX: 0000000000000000 [ 1238.206861][ T60] RDX: 00000000e62d2a00 RSI: 0000000000000001 RDI: ffffffff8ba647a0 [ 1238.206873][ T60] RBP: 0000000000100000 R08: ffffffff8b245250 R09: ffffffff8ddcd780 [ 1238.206886][ T60] R10: dffffc0000000000 R11: fffffbfff1ed4657 R12: 0000000000000002 [ 1238.206899][ T60] R13: 0000000000000001 R14: ffff8880243f5200 R15: ffffc90011589000 [ 1238.206912][ T60] FS: 0000000000000000(0000) GS:ffff888126340000(0000) knlGS:0000000000000000 [ 1238.206927][ T60] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1238.206940][ T60] CR2: ffffc90011589010 CR3: 0000000034a10000 CR4: 00000000003526f0 [ 1238.206964][ T60] Kernel panic - not syncing: Fatal exception [ 1238.207210][ T60] Kernel Offset: disabled