last executing test programs: 12m37.294747223s ago: executing program 0 (id=708): r0 = syz_open_dev$loop(&(0x7f0000000680), 0x7f, 0x8000) ioctl$BLKFINISHZONE(r0, 0x40101288, &(0x7f00000006c0)={0x2, 0xab}) 12m37.157904414s ago: executing program 0 (id=709): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = inotify_init() r4 = inotify_add_watch(r3, &(0x7f0000000400)='.\x00', 0x102) inotify_rm_watch(r3, r4) 12m32.740544823s ago: executing program 0 (id=717): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000340)=ANY=[], 0xff2e) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$TCXONC(r0, 0x540a, 0x3) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 12m31.567097191s ago: executing program 0 (id=720): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(0xffffffffffffffff, &(0x7f00000007c0)=[{{&(0x7f0000000600)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @remote}, 0x0, 0x0, 0x1, 0x2}}, 0x80, &(0x7f0000000780)=[{&(0x7f00000006c0)="9b468da99267a99aed5f6b48ad03b7c825ecb32adffc80ff47af98a3741169ea2fcaa8de0120079173a79cbc6b3e4ef87d968b9bfd711da55a06467ae7196c92aeb550695c643a2eb3d0ce6ec6c56ba80e0fd32e8d2c4151045ca0c0e4ae46503bcef27a4a62957c4b4f633201531d45c0cca9b2f56ca07363743dbc323021a0c2a659b941e96290725f3c874b2081955f0cdf6d99782e5c", 0x98}], 0x1, 0x0, 0x638}}], 0x1, 0x24042050) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000280)={0x2, 0x6, 0x2, 0xb, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xe) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000e00)={0x28, 0x4, 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7b}) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x40800) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000058000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004800600030076657468315f6d61637674617000000008000140000000050b00070066696c7465"], 0xf4}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[], 0x6f4}}, 0x0) 12m31.434325502s ago: executing program 0 (id=721): syz_emit_vhci(&(0x7f0000000680)=ANY=[@ANYBLOB="04220cd001"], 0x20) 12m31.397871862s ago: executing program 0 (id=722): r0 = socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file3\x00', 0x105042, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0xf, "c51fca0a5550cf9652a3f0b942747b193fd10d95793a0c159f6dca495afb8114"}) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0xfffffffd, 0x15f}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) socket$netlink(0x10, 0x3, 0x8000000004) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) userfaultfd(0x80801) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r6 = syz_open_dev$video(0x0, 0x7, 0x0) ioctl$VIDIOC_S_PARM(r6, 0xc0cc5616, &(0x7f0000004a80)={0xd, @output={0x0, 0x1, {0x0, 0x2}, 0x101, 0x3}}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0xfdff) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002300)=ANY=[@ANYBLOB="e80200001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00400000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="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"], 0x2e8}}, 0x40000) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r9}, 0x38) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000340)='./file3\x00', &(0x7f0000000200)='ocfs2\x00', 0x0, &(0x7f0000000380)='acl') sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="700000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0580040000000000500012800b00010067656e657665000040000280050008000000000005000d000100000005000d000200000008000b4000001e82060005004e210000140007"], 0x70}}, 0x0) 12m16.286514781s ago: executing program 32 (id=722): r0 = socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file3\x00', 0x105042, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0xf, "c51fca0a5550cf9652a3f0b942747b193fd10d95793a0c159f6dca495afb8114"}) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0xfffffffd, 0x15f}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) socket$netlink(0x10, 0x3, 0x8000000004) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) userfaultfd(0x80801) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r6 = syz_open_dev$video(0x0, 0x7, 0x0) ioctl$VIDIOC_S_PARM(r6, 0xc0cc5616, &(0x7f0000004a80)={0xd, @output={0x0, 0x1, {0x0, 0x2}, 0x101, 0x3}}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0xfdff) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002300)=ANY=[@ANYBLOB="e80200001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00400000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="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"], 0x2e8}}, 0x40000) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r9}, 0x38) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000340)='./file3\x00', &(0x7f0000000200)='ocfs2\x00', 0x0, &(0x7f0000000380)='acl') sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="700000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0580040000000000500012800b00010067656e657665000040000280050008000000000005000d000100000005000d000200000008000b4000001e82060005004e210000140007"], 0x70}}, 0x0) 10m57.852387979s ago: executing program 4 (id=931): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x10, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x10}}], 0x30, 0x20000000}, 0x0) 10m57.620482751s ago: executing program 4 (id=932): socket$packet(0x11, 0x3, 0x300) socket$igmp(0x2, 0x3, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='napi_poll\x00', r0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000000100000022"], 0x48) inotify_init() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) pipe2(&(0x7f0000000040), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2$9p(&(0x7f0000000180), 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYRES8=r1], 0x3c}}, 0x10) 10m57.376885592s ago: executing program 4 (id=933): socket$packet(0x11, 0x3, 0x300) socket$igmp(0x2, 0x3, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='napi_poll\x00', r0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000000100000022"], 0x48) inotify_init() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) pipe2(&(0x7f0000000040), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2$9p(&(0x7f0000000180), 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000"], 0x3c}}, 0x10) 10m57.121299134s ago: executing program 4 (id=936): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x3ab1019, 0x0) unshare(0x22020400) umount2(0x0, 0x8) 10m56.952731045s ago: executing program 4 (id=938): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) pread64(0xffffffffffffffff, &(0x7f0000000c00)=""/59, 0x3b, 0x545) r6 = socket$inet6(0xa, 0x2, 0x0) getrandom(0x0, 0x0, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0xffffffff}, 0x1c) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000050000000800000008"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r7, &(0x7f0000000240), &(0x7f00000000c0)=@udp6=r6}, 0x20) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) read$eventfd(r6, &(0x7f0000000040), 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x30, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 10m56.478288198s ago: executing program 4 (id=940): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5, 0x8000000000000003, {}, 0xfd}, 0x18) close(r4) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 10m55.395413355s ago: executing program 33 (id=940): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5, 0x8000000000000003, {}, 0xfd}, 0x18) close(r4) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 10.014796859s ago: executing program 2 (id=3341): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x86020086}) 7.861397112s ago: executing program 2 (id=3346): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62071e7ec69f658d5a52d7eb7ea31db43f8cf570f335a80860ac4cc240dc149d8468493db8aad089f590d62e0bcb9d1dcee636ee31", 0x42}], 0x1}}], 0x1, 0x4000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f00000003c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0xa, 0x90, &(0x7f0000000100)=""/144}, 0x94) open(&(0x7f0000000080)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 7.664538483s ago: executing program 2 (id=3349): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000320081184e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600040001", 0x37}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000090401a80016000a", 0x35}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{}], 0x1}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 6.636638019s ago: executing program 2 (id=3351): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_icmp(0xa, 0x2, 0x3a) dup(r0) socket$netlink(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f00000003c0)=ANY=[@ANYRES32], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) socket$inet6_sctp(0xa, 0x1, 0x84) landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f00000001c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r1], 0xc4}}, 0x0) 6.586905079s ago: executing program 1 (id=3352): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000000c0), 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r0, r2, 0x0, 0x1, &(0x7f0000000100)='\x00'}, 0x30) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)={0x24, r4, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x24}}, 0x18) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x40000, 0x0, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x3fa1dc947ffe4b82}) r6 = mq_open(&(0x7f0000000180)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x1294, 0x2, 0x5}) mq_timedreceive(r6, 0x0, 0x0, 0x0, 0x0) lseek(r6, 0x50, 0x4) socket(0x1, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x37}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) 6.166586532s ago: executing program 1 (id=3355): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b\x00\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) 4.563833392s ago: executing program 3 (id=3359): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x204000, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socket$inet_smc(0x2b, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x2710, &(0x7f000001eec0)=""/102389, &(0x7f0000000000)=0xc74) 4.202012214s ago: executing program 1 (id=3360): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x5c}}, 0x0) mkdir(0x0, 0x3) capset(&(0x7f0000000080)={0x20071026}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000c7f000)='./file0\x00', &(0x7f0000df9000)='nfs4\x00', 0x0, &(0x7f0000590ffe)='v4') sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000012000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa00344cbaf5", @ANYRES64=r5], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x24, 0x67, 0x6e, 0x20, 0xab4, 0x11, 0x6016, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x2d, 0x0, 0x1, 0xc4, 0x9b, 0x5f, 0xfc, [], [{{0x9, 0x5, 0x2, 0x4, 0x400, 0xd, 0x7f, 0xb}}]}}]}}]}}, 0x0) 4.201681944s ago: executing program 5 (id=3314): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c"], 0x7c}, 0x1, 0x0, 0x0, 0x4005000}, 0x0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x20000800) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r0, &(0x7f0000000ec0)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, &(0x7f0000000c80)=[{&(0x7f00000006c0)="cc5c84001214dbd9e5943aa8a315357330c56529d6b619a78687eea13ea02981afbb0fab70e8c3ab037cd82bd48f4947702a177974e7ef", 0x37}, {&(0x7f00000007c0)="a960e57530b65741465209e7c6235055450b1ed3da8592b928d8e20971659d8e3ca392643af5fa7ae0e345", 0x2b}], 0x2}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000a40)}], 0x2}}], 0x2, 0x11) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b0000000800", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 3.420644319s ago: executing program 3 (id=3361): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x86020086, r0}) 2.937298512s ago: executing program 5 (id=3362): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0xc048aec8, &(0x7f0000000940)={0x2, 0x0, @pic={0x4, 0x5, 0x4, 0x8, 0x1, 0x9, 0x42, 0x4, 0x3, 0x8, 0x5, 0x9, 0xb0, 0x0, 0x5, 0x4b}}) 2.874261583s ago: executing program 2 (id=3363): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000000c0), 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r0, r2, 0x0, 0x1, &(0x7f0000000100)='\x00'}, 0x30) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)={0x24, r4, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x24}}, 0x18) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x40000, 0x0, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x3fa1dc947ffe4b82}) r6 = mq_open(&(0x7f0000000180)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x1294, 0x2, 0x5}) mq_timedreceive(r6, 0x0, 0x0, 0x0, 0x0) lseek(r6, 0x50, 0x4) socket(0x1, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x37}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) 2.626694554s ago: executing program 3 (id=3364): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) r1 = io_uring_setup(0xf05, &(0x7f00000003c0)={0x0, 0x6879, 0x0, 0x1, 0x200274}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) io_uring_register$IORING_UNREGISTER_RING_FDS(r1, 0x15, &(0x7f00000013c0)=[{0xf00, 0x0, 0x0, 0x0, 0x0}], 0x1) 2.406704185s ago: executing program 3 (id=3365): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r3 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r3, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) 2.142347657s ago: executing program 2 (id=3366): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20a0, 0x4287, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x20, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x3, 0x6, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x2}}}}}]}}]}}, 0x0) socket(0x400000000010, 0x3, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) 2.142053897s ago: executing program 5 (id=3367): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000320081184e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600040001", 0x37}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000090401a80016000a", 0x35}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000", 0x3}], 0x1}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 1.980714238s ago: executing program 5 (id=3368): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x8001}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x3, 0x7ffc0002}]}) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000080)={{0x2, 0x1, 0x0, 0x0, 'syz0\x00', 0xfffffffc}, 0x5, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 'syz0\x00', 0x0}) syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2}, 0x7a) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) r2 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, 0x0, 0x0) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000540)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x6, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 1.917084168s ago: executing program 3 (id=3369): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x204000, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socket$inet_smc(0x2b, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x2710, &(0x7f000001eec0)=""/102389, &(0x7f0000000000)=0xc74) 1.730108419s ago: executing program 5 (id=3370): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c"], 0x7c}, 0x1, 0x0, 0x0, 0x4005000}, 0x0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x20000800) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r0, &(0x7f0000000ec0)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, &(0x7f0000000c80)=[{&(0x7f00000006c0)="cc5c84001214dbd9e5943aa8a315357330c56529d6b619a78687eea13ea02981afbb0fab70e8c3ab037cd82bd48f4947702a177974e7ef", 0x37}, {&(0x7f00000007c0)="a960e57530b65741465209e7c6235055450b1ed3da8592b928d8e20971659d8e3ca392643af5fa7ae0e345", 0x2b}], 0x2}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000a40)}], 0x2}}], 0x2, 0x11) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b000000080003", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.505723381s ago: executing program 5 (id=3371): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x77, 0x0, 0x7a}}, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffead, 0x10, &(0x7f00000004c0)={0x4}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, 0xfffffff8}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x10, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9, 0x1, "91f66a3202"}]}, @NFTA_CMP_OP={0x8}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xd0}}, 0x0) 660.862536ms ago: executing program 3 (id=3372): sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00', @ANYRES16], 0x38}}, 0x0) r0 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000040)="a9e3ec33", 0x4}, {0x0}, {0x0}], 0x3}, 0x4000) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000640)=""/232, 0xe8}], 0x1, &(0x7f0000000080)=""/19, 0x13}, 0x40012022) 613.297106ms ago: executing program 1 (id=3373): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) r1 = io_uring_setup(0xf05, &(0x7f00000003c0)={0x0, 0x6879, 0x0, 0x1, 0x200274}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) io_uring_register$IORING_UNREGISTER_RING_FDS(r1, 0x15, &(0x7f00000013c0)=[{0xf00, 0x0, 0x0, 0x0, 0x0}], 0x1) 531.106107ms ago: executing program 1 (id=3374): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000000c0), 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r0, r4, 0x0, 0x1, &(0x7f0000000100)='\x00'}, 0x30) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)={0x24, r6, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x24}}, 0x18) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x40000, 0x0, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x3fa1dc947ffe4b82}) r8 = mq_open(&(0x7f0000000180)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x1294, 0x2, 0x5}) mq_timedreceive(r8, 0x0, 0x0, 0x0, 0x0) lseek(r8, 0x50, 0x4) socket(0x1, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x37}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 1 (id=3375): socket(0x1d, 0x2, 0x6) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mkdir(0x0, 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) openat$audio(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r4, r4, r4}, &(0x7f00000001c0)=""/201, 0xc9, 0x0) kernel console output (not intermixed with test programs): es=4294967295 subj=unconfined pid=10345 comm="syz.3.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809a18efc9 code=0x7ffc0000 [ 542.715131][T10362] fuse: Bad value for 'fd' [ 549.160191][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 549.160208][ T28] audit: type=1326 audit(1761892922.983:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10394 comm="syz.2.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5cad8efc9 code=0x7ffc0000 [ 549.229769][ T28] audit: type=1326 audit(1761892922.983:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10394 comm="syz.2.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5cad8efc9 code=0x7ffc0000 [ 549.254105][ T28] audit: type=1326 audit(1761892922.983:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10394 comm="syz.2.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa5cad8efc9 code=0x7ffc0000 [ 549.638019][ T28] audit: type=1326 audit(1761892922.983:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10394 comm="syz.2.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5cad8efc9 code=0x7ffc0000 [ 549.974276][ T28] audit: type=1326 audit(1761892922.983:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10394 comm="syz.2.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa5cad8efc9 code=0x7ffc0000 [ 549.996883][ T28] audit: type=1326 audit(1761892922.983:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10394 comm="syz.2.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5cad8efc9 code=0x7ffc0000 [ 550.024656][ T28] audit: type=1326 audit(1761892922.983:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10394 comm="syz.2.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5cad8efc9 code=0x7ffc0000 [ 550.090134][ T28] audit: type=1326 audit(1761892922.993:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10394 comm="syz.2.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa5cad8efc9 code=0x7ffc0000 [ 550.143153][ T28] audit: type=1326 audit(1761892922.993:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10394 comm="syz.2.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5cad8efc9 code=0x7ffc0000 [ 550.219972][ T28] audit: type=1326 audit(1761892923.033:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10394 comm="syz.2.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa5cad8efc9 code=0x7ffc0000 [ 552.097018][T10429] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1424'. [ 552.667768][T10438] overlayfs: failed to clone lowerpath [ 557.103941][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 557.103959][ T28] audit: type=1326 audit(1761892930.933:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10462 comm="syz.3.1436" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f809a18efc9 code=0x0 [ 557.525849][T10470] syz.2.1435 (10470): drop_caches: 2 [ 557.572591][T10470] syz.2.1435 (10470): drop_caches: 2 [ 563.422672][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.438839][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.247366][T10543] syz.5.1452 (10543): drop_caches: 2 [ 565.257463][T10543] syz.5.1452 (10543): drop_caches: 2 [ 572.017137][T10604] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1472'. [ 572.186535][T10610] vlan0: entered promiscuous mode [ 572.629521][T10618] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1478'. [ 572.647397][T10618] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1478'. [ 572.668426][T10618] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1478'. [ 573.037568][T10625] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1481'. [ 576.486218][T10668] fuse: Bad value for 'fd' [ 578.512874][T10697] fuse: Bad value for 'fd' [ 581.223871][T10727] fuse: Bad value for 'fd' [ 587.711002][T10818] ptrace attach of "./syz-executor exec"[5785] was attempted by ""[10818] [ 590.268521][T10852] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1563'. [ 591.367196][T10862] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1567'. [ 592.632031][T10872] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1571'. [ 592.716814][T10872] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 592.783519][T10872] macvlan2: entered promiscuous mode [ 592.800215][T10872] macvlan2: entered allmulticast mode [ 592.818991][T10872] bond1: entered promiscuous mode [ 592.828419][T10872] bridge1: entered promiscuous mode [ 592.841750][T10872] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 592.875511][T10872] bond1: left promiscuous mode [ 592.881896][T10872] bridge1: left promiscuous mode [ 595.548835][T10935] netlink: 'syz.5.1594': attribute type 3 has an invalid length. [ 595.557321][T10935] netlink: 666 bytes leftover after parsing attributes in process `syz.5.1594'. [ 599.892613][T10990] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1610'. [ 600.618965][ T28] audit: type=1326 audit(1761892974.453:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10992 comm="syz.2.1615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5cad8efc9 code=0x7ffc0000 [ 600.715947][ T28] audit: type=1326 audit(1761892974.493:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10992 comm="syz.2.1615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5cad8efc9 code=0x7ffc0000 [ 600.799422][ T28] audit: type=1326 audit(1761892974.513:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10992 comm="syz.2.1615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa5cad8efc9 code=0x7ffc0000 [ 600.879076][ T28] audit: type=1326 audit(1761892974.513:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10992 comm="syz.2.1615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5cad8efc9 code=0x7ffc0000 [ 600.966236][ T28] audit: type=1326 audit(1761892974.513:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10992 comm="syz.2.1615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5cad8efc9 code=0x7ffc0000 [ 601.037216][ T28] audit: type=1326 audit(1761892974.513:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10992 comm="syz.2.1615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa5cad8efc9 code=0x7ffc0000 [ 601.285702][ T28] audit: type=1326 audit(1761892974.513:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10992 comm="syz.2.1615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5cad8efc9 code=0x7ffc0000 [ 601.309974][ T28] audit: type=1326 audit(1761892974.523:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10992 comm="syz.2.1615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fa5cad8efc9 code=0x7ffc0000 [ 601.364378][ T28] audit: type=1326 audit(1761892974.523:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10992 comm="syz.2.1615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5cad8efc9 code=0x7ffc0000 [ 601.438300][ T28] audit: type=1326 audit(1761892974.523:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10992 comm="syz.2.1615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5cad8efc9 code=0x7ffc0000 [ 602.491906][ T51] Bluetooth: hci3: unexpected event for opcode 0x080b [ 605.811178][T11058] netlink: 'syz.3.1637': attribute type 3 has an invalid length. [ 605.818972][T11058] netlink: 666 bytes leftover after parsing attributes in process `syz.3.1637'. [ 608.740131][T11097] netlink: 'syz.3.1649': attribute type 3 has an invalid length. [ 608.747930][T11097] netlink: 666 bytes leftover after parsing attributes in process `syz.3.1649'. [ 609.181781][T11098] netlink: 348 bytes leftover after parsing attributes in process `syz.5.1651'. [ 609.196795][T11098] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1651'. [ 615.197116][T11186] warning: `syz.2.1682' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 616.424310][T11206] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1687'. [ 619.764110][T11260] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1708'. [ 620.358976][ T51] Bluetooth: hci3: unexpected event for opcode 0x080b [ 624.229907][ T28] audit: type=1326 audit(1761892998.063:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11336 comm="syz.3.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809a18efc9 code=0x7ffc0000 [ 624.289813][ T28] audit: type=1326 audit(1761892998.063:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11336 comm="syz.3.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809a18efc9 code=0x7ffc0000 [ 624.356691][ T28] audit: type=1326 audit(1761892998.063:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11336 comm="syz.3.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809a18efc9 code=0x7ffc0000 [ 624.408415][ T28] audit: type=1326 audit(1761892998.073:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11336 comm="syz.3.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809a18efc9 code=0x7ffc0000 [ 624.438571][ T28] audit: type=1326 audit(1761892998.073:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11336 comm="syz.3.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f809a18efc9 code=0x7ffc0000 [ 624.472858][ T28] audit: type=1326 audit(1761892998.073:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11336 comm="syz.3.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809a18efc9 code=0x7ffc0000 [ 624.518965][ T28] audit: type=1326 audit(1761892998.073:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11336 comm="syz.3.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809a18efc9 code=0x7ffc0000 [ 624.554519][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.562636][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.581456][ T28] audit: type=1326 audit(1761892998.083:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11336 comm="syz.3.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809a18efc9 code=0x7ffc0000 [ 624.616523][ T28] audit: type=1326 audit(1761892998.093:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11336 comm="syz.3.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7f809a18efc9 code=0x7ffc0000 [ 624.648132][ T28] audit: type=1326 audit(1761892998.093:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11336 comm="syz.3.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809a18efc9 code=0x7ffc0000 [ 625.792078][T11358] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1745'. [ 628.383746][T11390] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1758'. [ 629.421863][T11402] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1759'. [ 636.230434][T11482] netlink: 'syz.2.1790': attribute type 4 has an invalid length. [ 636.527436][T11485] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1791'. [ 637.708548][T11490] macvlan2: entered promiscuous mode [ 637.731852][T11490] macvlan2: entered allmulticast mode [ 637.751286][T11490] bond1: entered promiscuous mode [ 637.765716][T11490] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 637.830140][T11490] bond1: left promiscuous mode [ 639.032487][T11520] fuse: Bad value for 'fd' [ 639.436415][T11529] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1808'. [ 639.666968][T11531] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1807'. [ 640.346881][T11533] macvlan2: entered promiscuous mode [ 640.375744][T11533] macvlan2: entered allmulticast mode [ 640.398197][T11533] bond2: entered promiscuous mode [ 640.410456][T11533] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 640.443451][T11533] bond2: left promiscuous mode [ 642.005754][T11559] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1817'. [ 642.564621][T11561] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1820'. [ 642.906655][T11570] fuse: Bad value for 'fd' [ 643.489000][T11582] netlink: 348 bytes leftover after parsing attributes in process `syz.1.1827'. [ 643.498343][T11582] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1827'. [ 644.510493][T11594] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1830'. [ 645.194268][T11600] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1832'. [ 645.901992][T11610] fuse: Bad value for 'fd' [ 646.077868][T11616] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1839'. [ 646.432318][T11625] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1842'. [ 646.670404][T11630] macvlan2: entered promiscuous mode [ 646.706514][T11630] macvlan2: entered allmulticast mode [ 646.723982][T11630] bond3: entered promiscuous mode [ 646.740873][T11630] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 646.765153][T11630] bond3: left promiscuous mode [ 647.097184][T11638] fuse: Bad value for 'fd' [ 647.270100][T11641] netlink: 'syz.2.1848': attribute type 4 has an invalid length. [ 648.925113][T11672] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1861'. [ 648.973659][T11672] pimreg: entered allmulticast mode [ 648.998236][T11672] pimreg: left allmulticast mode [ 651.759959][T11715] netlink: 88 bytes leftover after parsing attributes in process `syz.5.1875'. [ 653.294367][T11730] netlink: 'syz.1.1883': attribute type 4 has an invalid length. [ 654.423378][T11755] netlink: 'syz.5.1894': attribute type 4 has an invalid length. [ 654.450684][T11753] syz.3.1893: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 654.493235][T11753] CPU: 0 PID: 11753 Comm: syz.3.1893 Not tainted syzkaller #0 [ 654.500768][T11753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 654.510845][T11753] Call Trace: [ 654.514129][T11753] [ 654.517074][T11753] dump_stack_lvl+0x16c/0x230 [ 654.521787][T11753] ? show_regs_print_info+0x20/0x20 [ 654.527000][T11753] ? load_image+0x3b0/0x3b0 [ 654.531514][T11753] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 654.537936][T11753] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 654.544443][T11753] warn_alloc+0x210/0x300 [ 654.548783][T11753] ? stack_trace_save+0x9c/0xe0 [ 654.553662][T11753] ? zone_watermark_ok_safe+0x230/0x230 [ 654.559296][T11753] ? kasan_set_track+0x5f/0x70 [ 654.564083][T11753] ? kasan_set_track+0x4e/0x70 [ 654.568851][T11753] ? __kasan_kmalloc+0x8f/0xa0 [ 654.573623][T11753] ? xsk_init_queue+0xb0/0x110 [ 654.578397][T11753] ? xsk_setsockopt+0x4db/0x6f0 [ 654.583267][T11753] ? do_sock_setsockopt+0x175/0x1a0 [ 654.588498][T11753] ? __x64_sys_setsockopt+0x184/0x200 [ 654.593889][T11753] __vmalloc_node_range+0x126/0x1320 [ 654.599220][T11753] ? free_vm_area+0x50/0x50 [ 654.603765][T11753] vmalloc_user+0x74/0x80 [ 654.608145][T11753] ? xskq_create+0xbf/0x170 [ 654.612670][T11753] xskq_create+0xbf/0x170 [ 654.617022][T11753] xsk_init_queue+0xb0/0x110 [ 654.621628][T11753] xsk_setsockopt+0x4db/0x6f0 [ 654.626322][T11753] ? xsk_poll+0x670/0x670 [ 654.630672][T11753] ? __fget_files+0x28/0x4d0 [ 654.635272][T11753] ? aa_sock_opt_perm+0x74/0x100 [ 654.640220][T11753] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 654.645771][T11753] ? security_socket_setsockopt+0x7e/0xa0 [ 654.651516][T11753] ? xsk_poll+0x670/0x670 [ 654.655907][T11753] do_sock_setsockopt+0x175/0x1a0 [ 654.660995][T11753] ? __fdget+0x180/0x210 [ 654.665254][T11753] __x64_sys_setsockopt+0x184/0x200 [ 654.670501][T11753] do_syscall_64+0x55/0xb0 [ 654.674936][T11753] ? clear_bhb_loop+0x40/0x90 [ 654.679632][T11753] ? clear_bhb_loop+0x40/0x90 [ 654.684322][T11753] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 654.690262][T11753] RIP: 0033:0x7f809a18efc9 [ 654.694751][T11753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 654.714375][T11753] RSP: 002b:00007f809b02b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 654.722890][T11753] RAX: ffffffffffffffda RBX: 00007f809a3e5fa0 RCX: 00007f809a18efc9 [ 654.730875][T11753] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000005 [ 654.738896][T11753] RBP: 00007f809a211f91 R08: 0000000000000004 R09: 0000000000000000 [ 654.746882][T11753] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 654.754869][T11753] R13: 00007f809a3e6038 R14: 00007f809a3e5fa0 R15: 00007ffe41f7b5f8 [ 654.762880][T11753] [ 654.880146][T11753] Mem-Info: [ 654.883444][T11753] active_anon:137997 inactive_anon:0 isolated_anon:0 [ 654.883444][T11753] active_file:16661 inactive_file:40127 isolated_file:0 [ 654.883444][T11753] unevictable:768 dirty:47 writeback:0 [ 654.883444][T11753] slab_reclaimable:6958 slab_unreclaimable:95404 [ 654.883444][T11753] mapped:28299 shmem:132388 pagetables:1467 [ 654.883444][T11753] sec_pagetables:0 bounce:0 [ 654.883444][T11753] kernel_misc_reclaimable:0 [ 654.883444][T11753] free:1212423 free_pcp:10052 free_cma:0 [ 654.944260][T11753] Node 0 active_anon:551788kB inactive_anon:0kB active_file:66644kB inactive_file:160304kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:113196kB dirty:184kB writeback:0kB shmem:528016kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12864kB pagetables:5768kB sec_pagetables:0kB all_unreclaimable? no [ 655.024817][T11753] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 655.621049][T11753] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 655.651370][T11753] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 655.660138][T11753] Node 0 DMA32 free:935000kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:575036kB inactive_anon:0kB active_file:66644kB inactive_file:158908kB unevictable:1536kB writepending:208kB present:3129332kB managed:2589600kB mlocked:0kB bounce:0kB free_pcp:4048kB local_pcp:2548kB free_cma:0kB [ 655.710054][T11753] lowmem_reserve[]: 0 0 1 1 1 [ 655.718603][T11753] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1336kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 655.783738][T11753] lowmem_reserve[]: 0 0 0 0 0 [ 655.792666][T11753] Node 1 Normal free:3894908kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:16256kB local_pcp:13120kB free_cma:0kB [ 655.828270][T11753] lowmem_reserve[]: 0 0 0 0 0 [ 655.834022][T11753] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 655.849758][T11753] Node 0 DMA32: 8*4kB (ME) 95*8kB (UE) 96*16kB (ME) 206*32kB (UME) 86*64kB (UME) 90*128kB (UME) 53*256kB (UME) 15*512kB (UME) 7*1024kB (M) 8*2048kB (ME) 211*4096kB (UM) = 935000kB [ 655.971661][T11753] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 656.021116][T11753] Node 1 Normal: 297*4kB (UME) 71*8kB (UME) 40*16kB (UME) 177*32kB (UME) 46*64kB (UE) 5*128kB (UME) 1*256kB (E) 2*512kB (ME) 1*1024kB (U) 1*2048kB (E) 947*4096kB (M) = 3894908kB [ 656.048531][T11753] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 656.059275][T11753] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 656.084580][T11753] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 656.107863][T11753] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 656.125778][T11753] 192018 total pagecache pages [ 656.136650][T11753] 0 pages in swap cache [ 656.170441][T11753] Free swap = 124680kB [ 656.176473][T11753] Total swap = 124996kB [ 656.187233][T11753] 2097051 pages RAM [ 656.200348][T11753] 0 pages HighMem/MovableOnly [ 656.205077][T11753] 416137 pages reserved [ 656.226977][T11753] 0 pages cma reserved [ 657.126437][T11788] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1907'. [ 657.826287][T11794] macvlan2: entered promiscuous mode [ 657.832500][T11794] macvlan2: entered allmulticast mode [ 657.841360][T11794] bond1: entered promiscuous mode [ 657.848285][T11794] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 657.872433][T11794] bond1: left promiscuous mode [ 665.264813][T11893] netlink: 'syz.3.1945': attribute type 28 has an invalid length. [ 665.273444][T11893] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1945'. [ 669.854334][T11961] syz.1.1970 uses obsolete (PF_INET,SOCK_PACKET) [ 686.024580][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.087678][T12133] netlink: 'syz.2.2027': attribute type 3 has an invalid length. [ 686.095720][T12133] netlink: 558 bytes leftover after parsing attributes in process `syz.2.2027'. [ 686.116258][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.037235][T12146] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2033'. [ 687.430048][T12151] netlink: 348 bytes leftover after parsing attributes in process `syz.1.2032'. [ 687.439220][T12151] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2032'. [ 691.132410][T12181] netlink: 'syz.2.2039': attribute type 3 has an invalid length. [ 691.140573][T12181] netlink: 558 bytes leftover after parsing attributes in process `syz.2.2039'. [ 691.161893][T12185] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2045'. [ 694.112605][T12216] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2056'. [ 696.035616][T12241] fuse: Bad value for 'fd' [ 700.246365][T12306] netlink: 'syz.5.2088': attribute type 4 has an invalid length. [ 700.786371][T12315] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2089'. [ 703.129159][T12331] netlink: 348 bytes leftover after parsing attributes in process `syz.5.2096'. [ 703.138430][T12331] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2096'. [ 703.512182][T12336] netlink: 'syz.5.2098': attribute type 4 has an invalid length. [ 705.431021][T12358] netlink: 'syz.2.2107': attribute type 4 has an invalid length. [ 706.115694][T12383] netlink: 'syz.3.2116': attribute type 4 has an invalid length. [ 706.779114][T12390] netlink: 'syz.2.2117': attribute type 10 has an invalid length. [ 706.787370][T12390] bridge_slave_1: left allmulticast mode [ 706.793229][T12390] bridge_slave_1: left promiscuous mode [ 706.799175][T12390] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.523574][T12390] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 708.156385][T12404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2119'. [ 710.276474][T12420] netlink: 'syz.1.2126': attribute type 4 has an invalid length. [ 711.359694][T12439] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2133'. [ 712.306575][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 712.306590][ T28] audit: type=1326 audit(1761893086.143:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12453 comm="syz.5.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d2038efc9 code=0x7ffc0000 [ 712.371198][ T51] Bluetooth: hci0: unexpected event for opcode 0x2016 [ 712.487776][ T28] audit: type=1326 audit(1761893086.173:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12453 comm="syz.5.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d2038efc9 code=0x7ffc0000 [ 712.512410][ T28] audit: type=1326 audit(1761893086.203:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12453 comm="syz.5.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f1d2038efc9 code=0x7ffc0000 [ 712.535658][ T28] audit: type=1326 audit(1761893086.203:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12453 comm="syz.5.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d2038efc9 code=0x7ffc0000 [ 712.581437][ T28] audit: type=1326 audit(1761893086.203:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12453 comm="syz.5.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d2038efc9 code=0x7ffc0000 [ 712.617627][ T28] audit: type=1326 audit(1761893086.203:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12453 comm="syz.5.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f1d2038efc9 code=0x7ffc0000 [ 712.649517][ T28] audit: type=1326 audit(1761893086.203:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12453 comm="syz.5.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d2038efc9 code=0x7ffc0000 [ 712.678595][ T28] audit: type=1326 audit(1761893086.213:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12453 comm="syz.5.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f1d2038efc9 code=0x7ffc0000 [ 712.703182][ T28] audit: type=1326 audit(1761893086.213:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12453 comm="syz.5.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d2038efc9 code=0x7ffc0000 [ 712.737136][ T28] audit: type=1326 audit(1761893086.233:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12453 comm="syz.5.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d2038efc9 code=0x7ffc0000 [ 717.957328][T12542] netlink: 348 bytes leftover after parsing attributes in process `syz.1.2167'. [ 717.971689][T12542] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2167'. [ 718.941717][T12559] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2178'. [ 722.090965][T12593] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 722.120216][T12593] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 722.132469][T12593] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 722.152690][T12593] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 722.162989][T12593] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 722.172298][T12593] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 723.435572][T12591] chnl_net:caif_netlink_parms(): no params data found [ 723.837434][T12591] bridge0: port 1(bridge_slave_0) entered blocking state [ 723.953420][T12618] Invalid ELF header type: 3 != 1 [ 724.222630][ T51] Bluetooth: hci4: command tx timeout [ 724.528629][T12591] bridge0: port 1(bridge_slave_0) entered disabled state [ 724.606688][T12591] bridge_slave_0: entered allmulticast mode [ 724.642190][T12591] bridge_slave_0: entered promiscuous mode [ 724.681047][T12591] bridge0: port 2(bridge_slave_1) entered blocking state [ 724.688201][T12591] bridge0: port 2(bridge_slave_1) entered disabled state [ 724.695557][T12591] bridge_slave_1: entered allmulticast mode [ 724.703114][T12591] bridge_slave_1: entered promiscuous mode [ 724.913779][T12591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 724.956527][T12591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 725.876391][T12591] team0: Port device team_slave_0 added [ 726.023981][T12591] team0: Port device team_slave_1 added [ 726.037049][T12634] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 726.076076][T12633] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 726.133869][T12591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 726.154740][T12591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 726.201703][T12591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 726.216277][T12591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 726.224516][T12591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 726.453839][T12641] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2196'. [ 726.481229][ T51] Bluetooth: hci4: command tx timeout [ 726.858572][T12591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 727.227227][T12591] hsr_slave_0: entered promiscuous mode [ 727.253775][T12591] hsr_slave_1: entered promiscuous mode [ 727.278151][T12591] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 727.290009][T12591] Cannot create hsr debugfs directory [ 727.416172][ T28] kauditd_printk_skb: 87 callbacks suppressed [ 727.416188][ T28] audit: type=1326 audit(1761893101.253:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12651 comm="syz.2.2204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5cad8efc9 code=0x7ffc0000 [ 727.486377][ T28] audit: type=1326 audit(1761893101.253:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12651 comm="syz.2.2204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5cad8efc9 code=0x7ffc0000 [ 727.529183][ T28] audit: type=1326 audit(1761893101.253:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12651 comm="syz.2.2204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5cad8efc9 code=0x7ffc0000 [ 727.562194][ T28] audit: type=1326 audit(1761893101.253:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12651 comm="syz.2.2204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5cad8efc9 code=0x7ffc0000 [ 727.593935][ T28] audit: type=1326 audit(1761893101.253:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12651 comm="syz.2.2204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa5cad8efc9 code=0x7ffc0000 [ 727.619263][ T28] audit: type=1326 audit(1761893101.253:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12651 comm="syz.2.2204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5cad8efc9 code=0x7ffc0000 [ 727.652718][ T28] audit: type=1326 audit(1761893101.253:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12651 comm="syz.2.2204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5cad8efc9 code=0x7ffc0000 [ 727.719701][ T28] audit: type=1326 audit(1761893101.253:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12651 comm="syz.2.2204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5cad8efc9 code=0x7ffc0000 [ 727.753983][ T28] audit: type=1326 audit(1761893101.253:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12651 comm="syz.2.2204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5cad8efc9 code=0x7ffc0000 [ 727.786183][ T28] audit: type=1326 audit(1761893101.253:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12651 comm="syz.2.2204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5cad8efc9 code=0x7ffc0000 [ 728.445877][T12591] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 728.462109][T12591] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 728.489044][T12591] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 728.524150][T12591] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 728.550132][T12593] Bluetooth: hci4: command tx timeout [ 728.742554][T12591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 728.794481][T12591] 8021q: adding VLAN 0 to HW filter on device team0 [ 728.844694][ T9737] bridge0: port 1(bridge_slave_0) entered blocking state [ 728.851922][ T9737] bridge0: port 1(bridge_slave_0) entered forwarding state [ 728.928766][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 728.936071][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 729.582285][T12591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 730.357486][T12591] veth0_vlan: entered promiscuous mode [ 730.394760][T12591] veth1_vlan: entered promiscuous mode [ 730.478877][T12591] veth0_macvtap: entered promiscuous mode [ 730.507460][T12591] veth1_macvtap: entered promiscuous mode [ 730.565159][T12591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 730.583015][T12591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 730.599921][T12591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 730.619944][T12591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 730.620080][T12593] Bluetooth: hci4: command tx timeout [ 730.638610][T12591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 730.687592][T12591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 730.728283][T12591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 730.747235][T12591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 730.767365][T12591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 730.806128][T12591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 730.830634][T12591] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.851970][T12591] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.872293][T12591] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.890203][T12591] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.279839][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 731.330784][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 731.530741][ T6071] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 731.670865][ T6071] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 732.185442][T12754] netlink: 348 bytes leftover after parsing attributes in process `syz.3.2239'. [ 732.201199][T12754] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2239'. [ 735.100065][T12784] netlink: 348 bytes leftover after parsing attributes in process `syz.3.2248'. [ 735.114173][T12784] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2248'. [ 736.150548][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 736.150563][ T28] audit: type=1326 audit(1761893109.993:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12793 comm="syz.2.2253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5cad8efc9 code=0x7ffc0000 [ 736.805953][T12804] overlayfs: missing 'lowerdir' [ 737.531471][ T28] audit: type=1326 audit(1761893111.363:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12793 comm="syz.2.2253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5cad8efc9 code=0x7ffc0000 [ 737.589433][ T28] audit: type=1326 audit(1761893111.363:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12793 comm="syz.2.2253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5cad8efc9 code=0x7ffc0000 [ 737.638242][ T28] audit: type=1326 audit(1761893111.363:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12793 comm="syz.2.2253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5cad8efc9 code=0x7ffc0000 [ 737.675316][ T28] audit: type=1326 audit(1761893111.363:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12793 comm="syz.2.2253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa5cad8efc9 code=0x7ffc0000 [ 737.779767][ T28] audit: type=1326 audit(1761893111.363:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12793 comm="syz.2.2253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5cad8efc9 code=0x7ffc0000 [ 737.861881][ T28] audit: type=1326 audit(1761893111.373:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12793 comm="syz.2.2253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5cad8efc9 code=0x7ffc0000 [ 737.939882][ T28] audit: type=1326 audit(1761893111.373:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12793 comm="syz.2.2253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5cad8efc9 code=0x7ffc0000 [ 738.234159][ T28] audit: type=1326 audit(1761893111.373:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12793 comm="syz.2.2253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fa5cad8efc9 code=0x7ffc0000 [ 738.746345][T12826] netlink: 348 bytes leftover after parsing attributes in process `syz.1.2259'. [ 738.755676][T12826] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2259'. [ 739.215467][ T28] audit: type=1326 audit(1761893111.373:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12793 comm="syz.2.2253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5cad8efc9 code=0x7ffc0000 [ 739.531434][T12839] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2265'. [ 741.346291][T12859] netlink: 348 bytes leftover after parsing attributes in process `syz.1.2272'. [ 741.355656][T12859] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2272'. [ 741.889434][T12864] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2274'. [ 742.179899][ T28] kauditd_printk_skb: 109 callbacks suppressed [ 742.179915][ T28] audit: type=1326 audit(1761893116.023:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12875 comm="syz.5.2280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d2038efc9 code=0x7ffc0000 [ 742.263097][ T28] audit: type=1326 audit(1761893116.023:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12875 comm="syz.5.2280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d2038efc9 code=0x7ffc0000 [ 742.303624][ T28] audit: type=1326 audit(1761893116.063:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12875 comm="syz.5.2280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d2038efc9 code=0x7ffc0000 [ 742.580883][ T28] audit: type=1326 audit(1761893116.063:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12875 comm="syz.5.2280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d2038efc9 code=0x7ffc0000 [ 742.604302][ T28] audit: type=1326 audit(1761893116.063:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12875 comm="syz.5.2280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1d2038efc9 code=0x7ffc0000 [ 742.766108][ T28] audit: type=1326 audit(1761893116.063:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12875 comm="syz.5.2280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d2038efc9 code=0x7ffc0000 [ 742.925336][ T28] audit: type=1326 audit(1761893116.063:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12875 comm="syz.5.2280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d2038efc9 code=0x7ffc0000 [ 743.003839][ T28] audit: type=1326 audit(1761893116.073:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12875 comm="syz.5.2280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d2038efc9 code=0x7ffc0000 [ 743.030068][ T28] audit: type=1326 audit(1761893116.073:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12875 comm="syz.5.2280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d2038efc9 code=0x7ffc0000 [ 743.053460][ T28] audit: type=1326 audit(1761893116.073:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12875 comm="syz.5.2280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f1d2038efc9 code=0x7ffc0000 [ 743.528975][T12892] netlink: 348 bytes leftover after parsing attributes in process `syz.1.2283'. [ 743.538256][T12892] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2283'. [ 744.250343][T12895] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2285'. [ 744.492838][T12902] overlayfs: failed to clone upperpath [ 747.447089][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.453627][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.901009][T12922] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2296'. [ 750.168446][T12950] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2307'. [ 750.836810][T12974] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2317'. [ 751.410039][ T5852] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 751.632521][ T5852] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 751.659730][ T5852] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 751.689959][ T5852] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 751.709688][ T5852] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.729481][ T5852] usb 2-1: config 0 descriptor?? [ 751.947395][T12992] netlink: 'syz.5.2323': attribute type 17 has an invalid length. [ 751.959441][T12992] netlink: 148 bytes leftover after parsing attributes in process `syz.5.2323'. [ 752.185852][ T5852] isku 0003:1E7D:319C.0003: unknown main item tag 0x0 [ 752.221312][ T5852] isku 0003:1E7D:319C.0003: unknown main item tag 0x0 [ 752.254422][ T5852] isku 0003:1E7D:319C.0003: unknown main item tag 0x0 [ 752.279407][ T5852] isku 0003:1E7D:319C.0003: unknown main item tag 0x0 [ 752.308247][T12997] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2326'. [ 752.318118][ T5852] isku 0003:1E7D:319C.0003: unknown main item tag 0x0 [ 752.339050][ T5852] isku 0003:1E7D:319C.0003: unknown main item tag 0x0 [ 752.367246][ T5852] isku 0003:1E7D:319C.0003: unknown main item tag 0x0 [ 752.423704][ T5852] isku 0003:1E7D:319C.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.1-1/input0 [ 752.453133][ T5852] isku 0003:1E7D:319C.0003: couldn't init struct isku_device [ 752.471521][T13003] ptrace attach of "./syz-executor exec"[5789] was attempted by "./syz-executor exec"[13003] [ 752.482728][ T5852] isku 0003:1E7D:319C.0003: couldn't install keyboard [ 752.515121][ T5852] isku: probe of 0003:1E7D:319C.0003 failed with error -71 [ 752.540964][ T5852] usb 2-1: USB disconnect, device number 21 [ 752.627798][T13002] fido_id[13002]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 753.021999][T12593] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 753.032955][T12593] Bluetooth: hci4: Injecting HCI hardware error event [ 753.049469][T12593] Bluetooth: hci4: hardware error 0x00 [ 754.997266][T13026] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2336'. [ 755.160436][ T51] Bluetooth: hci3: unexpected event for opcode 0x0c0d [ 755.500225][T12593] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 755.960929][T13044] ptrace attach of "./syz-executor exec"[5786] was attempted by "./syz-executor exec"[13044] [ 756.406086][T13054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2347'. [ 759.242645][T13084] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2357'. [ 771.339488][T13219] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2396'. [ 782.420135][ T28] kauditd_printk_skb: 53 callbacks suppressed [ 782.420151][ T28] audit: type=1326 audit(1761893156.253:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13357 comm="syz.5.2440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d2038efc9 code=0x7ffc0000 [ 782.487006][ T28] audit: type=1326 audit(1761893156.253:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13357 comm="syz.5.2440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d2038efc9 code=0x7ffc0000 [ 782.535263][ T28] audit: type=1326 audit(1761893156.253:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13357 comm="syz.5.2440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d2038efc9 code=0x7ffc0000 [ 782.639383][ T28] audit: type=1326 audit(1761893156.253:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13357 comm="syz.5.2440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d2038efc9 code=0x7ffc0000 [ 782.705292][ T28] audit: type=1326 audit(1761893156.293:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13357 comm="syz.5.2440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1d2038efc9 code=0x7ffc0000 [ 782.765167][ T28] audit: type=1326 audit(1761893156.293:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13357 comm="syz.5.2440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d2038efc9 code=0x7ffc0000 [ 782.840573][ T28] audit: type=1326 audit(1761893156.293:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13357 comm="syz.5.2440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d2038efc9 code=0x7ffc0000 [ 782.943065][ T28] audit: type=1326 audit(1761893156.293:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13357 comm="syz.5.2440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d2038efc9 code=0x7ffc0000 [ 783.063926][ T28] audit: type=1326 audit(1761893156.293:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13357 comm="syz.5.2440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d2038efc9 code=0x7ffc0000 [ 783.135797][ T28] audit: type=1326 audit(1761893156.293:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13357 comm="syz.5.2440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f1d2038efc9 code=0x7ffc0000 [ 784.549721][ T8] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 784.782826][ T8] usb 2-1: config 0 has an invalid interface number: 45 but max is 0 [ 784.812123][ T8] usb 2-1: config 0 has no interface number 0 [ 784.818292][ T8] usb 2-1: config 0 interface 45 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 784.854800][ T8] usb 2-1: New USB device found, idVendor=0ab4, idProduct=0011, bcdDevice=60.16 [ 784.884090][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.909658][ T8] usb 2-1: Product: syz [ 784.919469][ T8] usb 2-1: Manufacturer: syz [ 784.934909][ T8] usb 2-1: SerialNumber: syz [ 784.960782][ T8] usb 2-1: config 0 descriptor?? [ 786.014208][T13400] ptrace attach of "./syz-executor exec"[5786] was attempted by "./syz-executor exec"[13400] [ 786.714594][ T8] esd_usb 2-1:0.45: sending version message failed [ 786.760617][ T8] esd_usb: probe of 2-1:0.45 failed with error -8 [ 786.836974][ T8] usb 2-1: USB disconnect, device number 22 [ 787.980215][ T5157] udevd[5157]: worker [13344] terminated by signal 33 (Unknown signal 33) [ 788.004683][ T5157] udevd[5157]: worker [13344] failed while handling '/devices/virtual/block/loop1' [ 788.790334][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 788.816619][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 788.826215][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 788.839985][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 788.849240][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 788.858162][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 790.914071][T13427] chnl_net:caif_netlink_parms(): no params data found [ 790.940739][T12593] Bluetooth: hci0: command tx timeout [ 791.119284][ T28] kauditd_printk_skb: 37 callbacks suppressed [ 791.119300][ T28] audit: type=1326 audit(1761893164.953:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13449 comm="syz.1.2460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a8858efc9 code=0x7ffc0000 [ 791.154392][ T28] audit: type=1326 audit(1761893164.993:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13449 comm="syz.1.2460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a8858efc9 code=0x7ffc0000 [ 791.190585][ T28] audit: type=1326 audit(1761893164.993:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13449 comm="syz.1.2460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a8858efc9 code=0x7ffc0000 [ 791.267617][T13427] bridge0: port 1(bridge_slave_0) entered blocking state [ 791.273480][ T28] audit: type=1326 audit(1761893164.993:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13449 comm="syz.1.2460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a8858efc9 code=0x7ffc0000 [ 791.279742][T13427] bridge0: port 1(bridge_slave_0) entered disabled state [ 791.304686][T13427] bridge_slave_0: entered allmulticast mode [ 791.312616][T13427] bridge_slave_0: entered promiscuous mode [ 791.358619][ T28] audit: type=1326 audit(1761893164.993:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13449 comm="syz.1.2460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a8858efc9 code=0x7ffc0000 [ 791.390624][ T28] audit: type=1326 audit(1761893164.993:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13449 comm="syz.1.2460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3a8858efc9 code=0x7ffc0000 [ 791.414563][T13427] bridge0: port 2(bridge_slave_1) entered blocking state [ 791.424310][T13427] bridge0: port 2(bridge_slave_1) entered disabled state [ 791.443421][ T28] audit: type=1326 audit(1761893164.993:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13449 comm="syz.1.2460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a8858efc9 code=0x7ffc0000 [ 791.480335][T13427] bridge_slave_1: entered allmulticast mode [ 791.487854][T13427] bridge_slave_1: entered promiscuous mode [ 791.509376][ T28] audit: type=1326 audit(1761893164.993:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13449 comm="syz.1.2460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a8858efc9 code=0x7ffc0000 [ 791.582832][ T28] audit: type=1326 audit(1761893164.993:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13449 comm="syz.1.2460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a8858efc9 code=0x7ffc0000 [ 791.606946][ T28] audit: type=1326 audit(1761893164.993:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13449 comm="syz.1.2460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a8858efc9 code=0x7ffc0000 [ 791.743470][T13427] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 791.782307][T13427] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 792.342835][T13427] team0: Port device team_slave_0 added [ 792.447223][T13427] team0: Port device team_slave_1 added [ 793.020319][T12593] Bluetooth: hci0: command tx timeout [ 793.364955][T13427] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 793.412181][T13427] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 793.678673][T13427] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 794.222882][T13427] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 794.295506][T13427] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 794.339253][T13427] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 794.782055][T13500] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2472'. [ 795.100792][T12593] Bluetooth: hci0: command tx timeout [ 795.124813][T13427] hsr_slave_0: entered promiscuous mode [ 795.138092][T13427] hsr_slave_1: entered promiscuous mode [ 795.145258][T13427] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 795.153321][T13427] Cannot create hsr debugfs directory [ 796.376154][ T5888] hsr_slave_0: left promiscuous mode [ 796.393359][ T5888] hsr_slave_1: left promiscuous mode [ 796.403047][ T5888] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 796.413970][ T5888] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 796.601920][ T5888] bridge_slave_1: left allmulticast mode [ 796.607744][ T5888] bridge_slave_1: left promiscuous mode [ 796.614005][ T5888] bridge0: port 2(bridge_slave_1) entered disabled state [ 796.623169][ T5888] bridge_slave_0: left allmulticast mode [ 796.628871][ T5888] bridge_slave_0: left promiscuous mode [ 796.634665][ T5888] bridge0: port 1(bridge_slave_0) entered disabled state [ 797.179270][ T5888] team0 (unregistering): Port device team_slave_1 removed [ 797.219067][T12593] Bluetooth: hci0: command tx timeout [ 797.590864][ T5888] team0 (unregistering): Port device team_slave_0 removed [ 797.653977][ T5888] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 798.471168][ T5888] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 800.098472][ T5888] bond0 (unregistering): Released all slaves [ 800.257491][T13527] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2481'. [ 800.271041][T13530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2482'. [ 800.280366][T13527] netlink: 6 bytes leftover after parsing attributes in process `syz.5.2481'. [ 801.809673][ T5852] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 802.033567][ T5852] usb 2-1: config 0 has an invalid interface number: 45 but max is 0 [ 802.066329][ T5852] usb 2-1: config 0 has no interface number 0 [ 802.111380][ T5852] usb 2-1: config 0 interface 45 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 802.145659][ T5852] usb 2-1: New USB device found, idVendor=0ab4, idProduct=0011, bcdDevice=60.16 [ 802.158391][ T5852] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.179835][ T5852] usb 2-1: Product: syz [ 802.188818][ T5852] usb 2-1: Manufacturer: syz [ 802.202901][ T5852] usb 2-1: SerialNumber: syz [ 802.215141][ T5852] usb 2-1: config 0 descriptor?? [ 802.840574][T13427] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 802.858864][T13427] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 802.878719][T13427] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 802.902863][T13427] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 803.802839][ T5852] esd_usb 2-1:0.45: sending version message failed [ 803.831422][ T5852] esd_usb: probe of 2-1:0.45 failed with error -8 [ 803.880164][ T5852] usb 2-1: USB disconnect, device number 23 [ 804.151599][T13427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 805.046620][T13588] veth0_to_team: entered promiscuous mode [ 805.054453][T13588] veth0_to_team: entered allmulticast mode [ 805.207528][T13427] 8021q: adding VLAN 0 to HW filter on device team0 [ 805.292747][ T9782] bridge0: port 1(bridge_slave_0) entered blocking state [ 805.299993][ T9782] bridge0: port 1(bridge_slave_0) entered forwarding state [ 805.374009][ T9782] bridge0: port 2(bridge_slave_1) entered blocking state [ 805.381285][ T9782] bridge0: port 2(bridge_slave_1) entered forwarding state [ 805.545566][T13594] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2491'. [ 805.582341][T13594] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2491'. [ 806.876608][T13607] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2493'. [ 807.552184][T13427] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 807.663361][ T6939] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 807.789372][T13427] veth0_vlan: entered promiscuous mode [ 807.873333][T13427] veth1_vlan: entered promiscuous mode [ 807.926581][ T6939] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 808.809672][T13427] veth0_macvtap: entered promiscuous mode [ 808.841703][T13427] veth1_macvtap: entered promiscuous mode [ 808.880210][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.886574][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.914837][T13427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 808.932724][T13427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 808.947323][T13427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 808.970212][T13427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 808.987120][T13427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 808.999219][T13427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.023569][T13427] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 809.061321][T13427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 809.084870][T13427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.105810][T13427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 809.140061][T13427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.160083][T13427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 809.179769][T13427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.195375][T13427] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 809.235742][T13427] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.254962][T13427] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.272329][T13427] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.298394][T13427] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.512749][ T6473] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 809.558002][ T6473] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 809.646273][ T5888] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 809.657755][ T5888] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 809.810529][T13653] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 809.817622][T13653] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 810.179738][ T6939] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 810.584172][ T6939] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 810.609111][ T6939] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 810.621886][T13672] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2504'. [ 810.624168][ T6939] usb 2-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 810.653297][ T6939] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.682131][ T6939] usb 2-1: config 0 descriptor?? [ 811.281178][ T6939] usbhid 2-1:0.0: can't add hid device: -71 [ 811.300008][ T6939] usbhid: probe of 2-1:0.0 failed with error -71 [ 811.322155][ T6939] usb 2-1: USB disconnect, device number 24 [ 812.734027][ T6939] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 812.816291][ T6939] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 812.835634][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 812.846943][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 812.855523][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 812.864628][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 812.873114][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 812.880804][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 815.057670][T12593] Bluetooth: hci1: command tx timeout [ 815.541344][T13691] chnl_net:caif_netlink_parms(): no params data found [ 815.777308][T13537] udevd[13537]: failed to send result of seq 15184 to main daemon: Connection refused [ 816.907097][T13691] bridge0: port 1(bridge_slave_0) entered blocking state [ 816.935616][T13691] bridge0: port 1(bridge_slave_0) entered disabled state [ 816.950954][T13691] bridge_slave_0: entered allmulticast mode [ 816.959842][ T8] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 816.991531][T13691] bridge_slave_0: entered promiscuous mode [ 817.038664][T13691] bridge0: port 2(bridge_slave_1) entered blocking state [ 817.050543][T13691] bridge0: port 2(bridge_slave_1) entered disabled state [ 817.057808][T13691] bridge_slave_1: entered allmulticast mode [ 817.081512][T13691] bridge_slave_1: entered promiscuous mode [ 817.099749][T12593] Bluetooth: hci1: command tx timeout [ 817.171994][ T8] usb 2-1: config 0 interface 0 altsetting 12 endpoint 0x85 has invalid maxpacket 30768, setting to 1024 [ 817.199576][ T8] usb 2-1: config 0 interface 0 altsetting 12 bulk endpoint 0x85 has invalid maxpacket 1024 [ 817.244341][T13691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 817.253790][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 817.292028][ T8] usb 2-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 817.309619][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.338273][ T8] usb 2-1: Product: syz [ 817.355977][ T8] usb 2-1: Manufacturer: syz [ 817.372348][ T8] usb 2-1: SerialNumber: syz [ 817.395960][ T8] usb 2-1: config 0 descriptor?? [ 817.423248][T13743] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 817.462953][ T8] keyspan 2-1:0.0: Keyspan 2 port adapter converter detected [ 817.492937][ T8] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 87 [ 817.501410][ T8] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 7 [ 817.519825][ T8] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 817.523017][T13691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 817.528488][ T8] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 817.568721][ T8] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 817.615092][ T8] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 5 [ 817.948378][ T8] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 818.104789][ T8] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 83 [ 818.144520][ T8] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 3 [ 818.177354][ T8] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 4 [ 818.213600][ T8] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 86 [ 818.259715][ T8] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 6 [ 818.319169][ T8] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 818.352188][T13691] team0: Port device team_slave_0 added [ 818.358785][ T8] usb 2-1: USB disconnect, device number 25 [ 818.385746][T13691] team0: Port device team_slave_1 added [ 818.400525][ T8] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 818.459021][ T8] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 818.571812][ T8] keyspan 2-1:0.0: device disconnected [ 818.639251][T13691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 818.651662][T13691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 819.069884][T13764] syz.3.2523 (13764): drop_caches: 2 [ 819.080247][T13764] syz.3.2523 (13764): drop_caches: 2 [ 819.175092][T13691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 819.185921][T12593] Bluetooth: hci1: command tx timeout [ 819.194039][T13691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 819.309594][T13691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 819.335521][ C0] vkms_vblank_simulate: vblank timer overrun [ 819.409783][T13691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 819.607150][T13769] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2525'. [ 819.688139][T13691] hsr_slave_0: entered promiscuous mode [ 819.700554][T13691] hsr_slave_1: entered promiscuous mode [ 819.715789][T13691] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 819.740796][T13691] Cannot create hsr debugfs directory [ 819.939641][T13097] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 820.170656][T13097] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 820.202326][T13097] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 820.249796][T13097] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.273370][T13097] usb 4-1: config 0 descriptor?? [ 820.283559][T13097] pwc: Askey VC010 type 2 USB webcam detected. [ 821.130873][T13097] pwc: recv_control_msg error -32 req 02 val 2700 [ 821.155129][T13097] pwc: recv_control_msg error -32 req 02 val 2c00 [ 821.174805][T13097] pwc: recv_control_msg error -32 req 04 val 1000 [ 821.195088][T13097] pwc: recv_control_msg error -32 req 04 val 1300 [ 821.227756][T13097] pwc: recv_control_msg error -32 req 04 val 1400 [ 821.259850][T12593] Bluetooth: hci1: command tx timeout [ 821.266459][T13097] pwc: recv_control_msg error -32 req 02 val 2000 [ 821.284743][T13097] pwc: recv_control_msg error -32 req 02 val 2100 [ 821.391260][T13784] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2526'. [ 821.556543][T13097] pwc: recv_control_msg error -32 req 04 val 1500 [ 821.573970][T13097] pwc: recv_control_msg error -32 req 02 val 2500 [ 821.592266][T13097] pwc: recv_control_msg error -32 req 02 val 2400 [ 821.600390][T13097] pwc: recv_control_msg error -32 req 02 val 2600 [ 821.946670][T13691] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 822.007325][T13691] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 822.044531][T13691] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 822.146865][T13691] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 822.620204][ T9782] hsr_slave_0: left promiscuous mode [ 822.771280][ T9782] hsr_slave_1: left promiscuous mode [ 822.795679][ T9782] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 822.826892][ T9782] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 822.848038][T13097] pwc: recv_control_msg error -71 req 02 val 2900 [ 822.856986][T13097] pwc: recv_control_msg error -71 req 02 val 2800 [ 822.869646][T13097] pwc: recv_control_msg error -71 req 04 val 1100 [ 822.877209][ T9782] bridge_slave_0: left allmulticast mode [ 822.883097][T13097] pwc: recv_control_msg error -71 req 04 val 1200 [ 822.889655][ T9782] bridge_slave_0: left promiscuous mode [ 822.895431][ T9782] bridge0: port 1(bridge_slave_0) entered disabled state [ 822.904360][T13097] pwc: Registered as video103. [ 822.911216][T13097] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input17 [ 823.572071][T13097] usb 4-1: USB disconnect, device number 43 [ 823.624237][ T9782] bond3 (unregistering): Released all slaves [ 823.724734][ T9782] bond2 (unregistering): Released all slaves [ 823.761215][ T9782] bond1 (unregistering): Released all slaves [ 825.249302][ T9782] team0 (unregistering): Port device team_slave_1 removed [ 825.298000][ T9782] team0 (unregistering): Port device team_slave_0 removed [ 825.377802][ T9782] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 825.459099][ T9782] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 825.533458][ T9782] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 826.230014][ T9782] bond0 (unregistering): Released all slaves [ 826.397790][T13691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 826.458539][T13691] 8021q: adding VLAN 0 to HW filter on device team0 [ 826.774391][T13815] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2534'. [ 827.115831][ T9737] bridge0: port 1(bridge_slave_0) entered blocking state [ 827.123086][ T9737] bridge0: port 1(bridge_slave_0) entered forwarding state [ 827.256130][ T9737] bridge0: port 2(bridge_slave_1) entered blocking state [ 827.263362][ T9737] bridge0: port 2(bridge_slave_1) entered forwarding state [ 827.330380][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 827.330396][ T28] audit: type=1326 audit(1761893201.153:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13830 comm="syz.5.2538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1d20385e67 code=0x7ffc0000 [ 827.442447][ T28] audit: type=1326 audit(1761893201.203:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13830 comm="syz.5.2538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1d2032b099 code=0x7ffc0000 [ 827.529834][ T28] audit: type=1326 audit(1761893201.203:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13830 comm="syz.5.2538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1d20385e67 code=0x7ffc0000 [ 827.563923][ T28] audit: type=1326 audit(1761893201.203:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13830 comm="syz.5.2538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1d2032b099 code=0x7ffc0000 [ 827.597957][T13843] loop5: detected capacity change from 0 to 7 [ 827.629783][T13843] Dev loop5: unable to read RDB block 7 [ 827.635434][T13843] loop5: unable to read partition table [ 827.645286][ T28] audit: type=1326 audit(1761893201.203:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13830 comm="syz.5.2538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1d20385e67 code=0x7ffc0000 [ 827.652006][T13843] loop5: partition table beyond EOD, [ 827.667582][ C0] vkms_vblank_simulate: vblank timer overrun [ 827.680515][ T28] audit: type=1326 audit(1761893201.203:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13830 comm="syz.5.2538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1d2032b099 code=0x7ffc0000 [ 827.702767][ C0] vkms_vblank_simulate: vblank timer overrun [ 827.711755][T13843] truncated [ 827.714912][T13843] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 827.739572][ T28] audit: type=1326 audit(1761893201.203:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13830 comm="syz.5.2538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1d20385e67 code=0x7ffc0000 [ 827.786529][ T28] audit: type=1326 audit(1761893201.203:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13830 comm="syz.5.2538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1d2032b099 code=0x7ffc0000 [ 827.822612][ T28] audit: type=1326 audit(1761893201.203:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13830 comm="syz.5.2538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1d20385e67 code=0x7ffc0000 [ 827.909589][ T28] audit: type=1326 audit(1761893201.203:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13830 comm="syz.5.2538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1d2032b099 code=0x7ffc0000 [ 828.050316][T13856] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 828.056778][T13856] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 828.093163][T13691] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 830.045438][T13691] veth0_vlan: entered promiscuous mode [ 830.109365][T13691] veth1_vlan: entered promiscuous mode [ 830.902892][T13691] veth0_macvtap: entered promiscuous mode [ 831.141086][T13691] veth1_macvtap: entered promiscuous mode [ 831.519162][T13691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 831.668170][T13691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 831.771486][T13691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 831.782016][T13691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 831.869749][T13691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 831.894549][T13691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 831.905237][T13691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 831.915757][T13691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 831.927490][T13691] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 831.937934][T13691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 831.948710][T13691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 831.958753][T13691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 831.975066][T13691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 831.987160][T13691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 832.005592][T13691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 832.016233][T13691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 832.027034][T13691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 832.049643][T13691] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 832.129057][T13691] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.156891][T13691] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.201594][ T6951] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 832.210496][T13691] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.219234][T13691] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.254918][ T6951] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 833.292716][T13780] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 833.348022][T13780] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 833.489062][T13780] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 833.536418][T13780] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 835.629246][T13941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2573'. [ 835.651294][T13941] dummy0: entered promiscuous mode [ 835.659021][T13941] dummy0: left promiscuous mode [ 835.732961][T13945] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2571'. [ 836.399706][ T23] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 836.602974][ T23] usb 3-1: config 0 has an invalid interface number: 45 but max is 0 [ 836.704824][ T23] usb 3-1: config 0 has no interface number 0 [ 836.729818][ T23] usb 3-1: config 0 interface 45 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 836.763723][ T23] usb 3-1: New USB device found, idVendor=0ab4, idProduct=0011, bcdDevice=60.16 [ 836.779635][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.798061][ T23] usb 3-1: Product: syz [ 836.802514][ T23] usb 3-1: Manufacturer: syz [ 836.807143][ T23] usb 3-1: SerialNumber: syz [ 836.836109][ T23] usb 3-1: config 0 descriptor?? [ 837.957872][T13978] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2585'. [ 838.231489][T13980] ptrace attach of "./syz-executor exec"[13427] was attempted by "./syz-executor exec"[13980] [ 838.244577][T13980] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2586'. [ 838.560970][ T23] esd_usb 3-1:0.45: sending version message failed [ 838.572637][ T23] esd_usb: probe of 3-1:0.45 failed with error -8 [ 838.629905][ T23] usb 3-1: USB disconnect, device number 33 [ 840.450830][T14007] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2595'. [ 842.230666][T14025] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 843.330842][ T28] kauditd_printk_skb: 48 callbacks suppressed [ 843.330859][ T28] audit: type=1326 audit(1761893217.123:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14040 comm="syz.3.2607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc1178efc9 code=0x7ffc0000 [ 843.478024][ T28] audit: type=1326 audit(1761893217.123:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14040 comm="syz.3.2607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7fcc1178efc9 code=0x7ffc0000 [ 843.501116][ T28] audit: type=1326 audit(1761893217.123:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14040 comm="syz.3.2607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc1178efc9 code=0x7ffc0000 [ 843.567212][ T28] audit: type=1326 audit(1761893217.133:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14040 comm="syz.3.2607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fcc1178da7f code=0x7ffc0000 [ 843.615414][ T28] audit: type=1326 audit(1761893217.133:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14040 comm="syz.3.2607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc1178efc9 code=0x7ffc0000 [ 843.638713][ T28] audit: type=1326 audit(1761893217.133:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14040 comm="syz.3.2607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc1178efc9 code=0x7ffc0000 [ 846.311822][T14096] netlink: 'syz.2.2630': attribute type 33 has an invalid length. [ 846.320000][T14096] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2630'. [ 847.730052][T12593] Bluetooth: hci0: Malformed Event: 0x02 [ 848.113630][T14129] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2641'. [ 848.778611][T14133] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 848.963976][T14139] netlink: 'syz.5.2648': attribute type 10 has an invalid length. [ 851.698614][T14164] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2654'. [ 852.574286][T14174] netlink: 348 bytes leftover after parsing attributes in process `syz.3.2652'. [ 852.770649][T14174] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2652'. [ 853.008078][T14179] veth0_to_team: entered promiscuous mode [ 853.014062][T14179] veth0_to_team: entered allmulticast mode [ 855.538068][T14199] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2666'. [ 855.818049][T14203] netlink: 'syz.5.2667': attribute type 33 has an invalid length. [ 855.857675][T14203] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2667'. [ 857.860256][T14220] veth0_to_team: entered promiscuous mode [ 857.866134][T14220] veth0_to_team: entered allmulticast mode [ 859.836637][T14248] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2679'. [ 860.569608][ T8] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 861.972078][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 862.230151][ T8] usb 2-1: config 0 has no interfaces? [ 862.245985][ T8] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 862.271960][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.329160][ T8] usb 2-1: config 0 descriptor?? [ 862.549998][ T8] usb 2-1: can't set config #0, error -71 [ 862.578710][ T8] usb 2-1: USB disconnect, device number 26 [ 862.853175][T14273] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2691'. [ 863.522618][T14283] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2693'. [ 863.542854][T12593] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 863.552383][T12593] Bluetooth: hci0: Injecting HCI hardware error event [ 864.091896][ T51] Bluetooth: hci0: hardware error 0x00 [ 866.630592][ T51] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 866.647314][T14306] veth0_to_team: entered promiscuous mode [ 866.653196][T14306] veth0_to_team: entered allmulticast mode [ 866.889629][T14312] netlink: 348 bytes leftover after parsing attributes in process `syz.2.2701'. [ 866.899553][T14312] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2701'. [ 867.839207][T14322] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2703'. [ 870.307141][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.315935][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 872.935287][T13643] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 873.936796][T13643] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 874.132646][T13643] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 874.298982][T13643] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 874.632718][T13643] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 874.641895][T13643] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 874.652286][T13643] usb 4-1: config 0 descriptor?? [ 876.333498][T13643] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 876.349125][T13643] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 876.846663][T14445] netlink: 348 bytes leftover after parsing attributes in process `syz.2.2741'. [ 876.856022][T14445] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2741'. [ 877.624245][T13643] usb 4-1: USB disconnect, device number 44 [ 877.742795][T14448] netlink: 'syz.2.2744': attribute type 33 has an invalid length. [ 877.765940][T14448] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2744'. [ 877.864772][ T6952] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 878.059662][ T6952] usb 2-1: Using ep0 maxpacket: 16 [ 878.099598][ T6952] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 878.108418][ T6952] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 878.330155][ T6952] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 878.342858][ T6952] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 878.353528][ T6952] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.788659][T14470] netlink: 348 bytes leftover after parsing attributes in process `syz.5.2753'. [ 878.798133][T14470] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2753'. [ 878.813170][ T6952] usb 2-1: Product: syz [ 878.835682][ T6952] usb 2-1: Manufacturer: syz [ 878.853771][ T6952] usb 2-1: SerialNumber: syz [ 879.273115][T14478] netlink: 'syz.2.2756': attribute type 33 has an invalid length. [ 879.288359][T14478] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2756'. [ 879.324204][ T6952] usb 2-1: 0:2 : does not exist [ 880.686488][ T6952] usb 2-1: USB disconnect, device number 27 [ 881.276609][T14516] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2773'. [ 882.725722][T14537] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2782'. [ 885.199888][T13643] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 885.564530][T13643] usb 4-1: config 0 has an invalid interface number: 45 but max is 0 [ 885.597671][T13643] usb 4-1: config 0 has no interface number 0 [ 885.630683][T13643] usb 4-1: config 0 interface 45 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 885.662594][T13643] usb 4-1: New USB device found, idVendor=0ab4, idProduct=0011, bcdDevice=60.16 [ 885.677504][T13643] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.885464][T13643] usb 4-1: Product: syz [ 885.889840][T13643] usb 4-1: Manufacturer: syz [ 885.894820][T13643] usb 4-1: SerialNumber: syz [ 885.902741][T13643] usb 4-1: config 0 descriptor?? [ 887.617443][T13643] esd_usb 4-1:0.45: sending version message failed [ 887.637215][T13643] esd_usb: probe of 4-1:0.45 failed with error -8 [ 888.634376][T13643] usb 4-1: USB disconnect, device number 45 [ 888.778905][T14622] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2807'. [ 889.195488][T14630] netlink: 'syz.5.2814': attribute type 33 has an invalid length. [ 889.203802][T14630] netlink: 160 bytes leftover after parsing attributes in process `syz.5.2814'. [ 893.832996][ T967] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 894.030308][ T967] usb 2-1: Using ep0 maxpacket: 32 [ 894.039730][ T967] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 894.051226][ T967] usb 2-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 894.060569][ T967] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 894.674005][ T967] usb 2-1: config 0 descriptor?? [ 895.175355][ T967] elo 0003:04E7:0009.0008: hidraw0: USB HID v0.00 Device [HID 04e7:0009] on usb-dummy_hcd.1-1/input0 [ 895.866087][ T8] usb 2-1: USB disconnect, device number 28 [ 897.509613][ T23] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 897.770371][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 897.831426][T14734] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2851'. [ 898.616512][ T23] usb 3-1: config 0 has an invalid interface number: 29 but max is 0 [ 898.648969][ T23] usb 3-1: config 0 has no interface number 0 [ 898.672614][ T23] usb 3-1: config 0 interface 29 has no altsetting 0 [ 898.924663][ T23] usb 3-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 898.935570][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.943912][ T23] usb 3-1: Product: syz [ 898.948681][ T23] usb 3-1: Manufacturer: syz [ 898.953934][ T23] usb 3-1: SerialNumber: syz [ 899.034500][ T23] usb 3-1: config 0 descriptor?? [ 899.974063][ T23] peak_usb 3-1:0.29 can0: unable to request usb[type=0 value=1] err=-71 [ 900.674882][ T23] peak_usb 3-1:0.29: unable to read PCAN-USB X6 firmware info (err -71) [ 901.861005][ T23] peak_usb: probe of 3-1:0.29 failed with error -71 [ 901.898766][ T23] usb 3-1: USB disconnect, device number 34 [ 905.980384][T14801] netlink: 348 bytes leftover after parsing attributes in process `syz.5.2868'. [ 906.267590][T14801] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2868'. [ 909.286928][T14829] syz.5.2880 (14829) used greatest stack depth: 15720 bytes left [ 910.989753][T14854] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2888'. [ 911.112255][T13643] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 911.609735][T13643] usb 2-1: Using ep0 maxpacket: 32 [ 911.637659][T13643] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 911.680410][T13643] usb 2-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 911.699760][T13643] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 911.724318][T13643] usb 2-1: config 0 descriptor?? [ 912.232649][T13643] usbhid 2-1:0.0: can't add hid device: -71 [ 912.238831][T13643] usbhid: probe of 2-1:0.0 failed with error -71 [ 912.254735][T13643] usb 2-1: USB disconnect, device number 29 [ 913.335854][T14883] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2898'. [ 914.099685][ T6946] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 914.300315][ T6946] usb 4-1: Using ep0 maxpacket: 16 [ 914.324672][ T6946] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 914.352284][ T6946] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 914.378531][ T6946] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 914.404969][ T6946] usb 4-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 914.437381][ T6946] usb 4-1: config 7 interface 0 has no altsetting 0 [ 914.457357][ T6946] usb 4-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 914.474243][ T6946] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 915.060356][ T6946] input: HID 0458:5010 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:7.0/0003:0458:5010.0009/input/input18 [ 915.157156][ T6946] kye 0003:0458:5010.0009: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.3-1/input0 [ 917.224740][T13097] usb 4-1: USB disconnect, device number 46 [ 919.259671][ T8] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 919.812618][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 919.820343][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 919.833258][ T8] usb 2-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 919.842424][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 919.857464][ T8] usb 2-1: config 0 descriptor?? [ 919.939207][T14964] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2928'. [ 920.980387][ T8] usbhid 2-1:0.0: can't add hid device: -71 [ 920.986445][ T8] usbhid: probe of 2-1:0.0 failed with error -71 [ 920.995874][ T8] usb 2-1: USB disconnect, device number 30 [ 921.709593][T13097] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 922.029776][T13097] usb 3-1: Using ep0 maxpacket: 8 [ 922.045236][T13097] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 922.059660][T13097] usb 3-1: config 0 has no interface number 0 [ 922.066875][T13097] usb 3-1: config 0 interface 186 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 922.096397][T13097] usb 3-1: New USB device found, idVendor=07c0, idProduct=1500, bcdDevice=b8.c5 [ 922.115105][T13097] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.133018][T13097] usb 3-1: Product: syz [ 922.148027][T13097] usb 3-1: Manufacturer: syz [ 922.166846][T13097] usb 3-1: SerialNumber: syz [ 922.190377][T13097] usb 3-1: config 0 descriptor?? [ 922.214619][T13097] iowarrior 3-1:0.186: no interrupt-in endpoint found [ 922.493524][T13097] usb 3-1: USB disconnect, device number 35 [ 923.420205][ T23] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 923.619557][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 923.626933][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 923.650943][ T23] usb 2-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 923.669632][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 923.681759][ T23] usb 2-1: config 0 descriptor?? [ 924.173991][ T23] usbhid 2-1:0.0: can't add hid device: -71 [ 924.189634][ T23] usbhid: probe of 2-1:0.0 failed with error -71 [ 924.200839][ T23] usb 2-1: USB disconnect, device number 31 [ 924.740715][T15033] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2955'. [ 926.239880][T13097] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 926.734224][T13097] usb 2-1: config 0 has an invalid interface number: 45 but max is 0 [ 926.745980][T13097] usb 2-1: config 0 has no interface number 0 [ 926.755310][T13097] usb 2-1: config 0 interface 45 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 926.771942][T13097] usb 2-1: New USB device found, idVendor=0ab4, idProduct=0011, bcdDevice=60.16 [ 926.791454][T13097] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 926.809608][T13097] usb 2-1: Product: syz [ 926.813812][T13097] usb 2-1: Manufacturer: syz [ 926.818423][T13097] usb 2-1: SerialNumber: syz [ 926.841933][T13097] usb 2-1: config 0 descriptor?? [ 926.999197][T15060] netlink: 348 bytes leftover after parsing attributes in process `syz.2.2966'. [ 927.008649][T15060] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2966'. [ 928.587336][T13097] esd_usb 2-1:0.45: sending version message failed [ 928.612524][T13097] esd_usb: probe of 2-1:0.45 failed with error -8 [ 929.474969][T13097] usb 2-1: USB disconnect, device number 32 [ 930.350601][ T49] tipc: Subscription rejected, illegal request [ 930.717337][T15119] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2987'. [ 930.752380][T15120] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.2991'. [ 931.388905][T15128] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2993'. [ 932.027875][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.034304][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.727858][T15145] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.3001'. [ 933.691532][T15169] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.3011'. [ 936.234861][T15202] netlink: 348 bytes leftover after parsing attributes in process `syz.3.3023'. [ 936.244923][T15202] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3023'. [ 936.979080][T15207] netlink: 'syz.3.3026': attribute type 33 has an invalid length. [ 937.013008][T15207] netlink: 160 bytes leftover after parsing attributes in process `syz.3.3026'. [ 938.939746][ T5790] Bluetooth: hci1: command 0x0406 tx timeout [ 939.084305][T15238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3036'. [ 939.820648][T15243] netlink: 'syz.1.3038': attribute type 33 has an invalid length. [ 939.828785][T15243] netlink: 160 bytes leftover after parsing attributes in process `syz.1.3038'. [ 943.855662][T15312] netlink: 348 bytes leftover after parsing attributes in process `syz.1.3065'. [ 943.865736][T15312] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3065'. [ 945.196384][T15334] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.3076'. [ 946.742697][T15362] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.3085'. [ 952.611052][T15450] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3116'. [ 955.026432][T15474] netlink: 'syz.5.3127': attribute type 33 has an invalid length. [ 955.035305][T15474] netlink: 160 bytes leftover after parsing attributes in process `syz.5.3127'. [ 955.299463][ T6071] tipc: Subscription rejected, illegal request [ 955.427889][T15483] netlink: 348 bytes leftover after parsing attributes in process `syz.2.3126'. [ 955.437801][T15483] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3126'. [ 958.229508][T15518] netlink: 348 bytes leftover after parsing attributes in process `syz.1.3140'. [ 958.239618][T15518] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3140'. [ 958.992808][T15524] netlink: 'syz.1.3143': attribute type 33 has an invalid length. [ 959.036368][T15524] netlink: 160 bytes leftover after parsing attributes in process `syz.1.3143'. [ 959.478523][T15532] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3144'. [ 960.790697][T15552] netlink: 'syz.1.3154': attribute type 33 has an invalid length. [ 960.800074][T15552] netlink: 160 bytes leftover after parsing attributes in process `syz.1.3154'. [ 962.575404][ T6951] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 962.967331][ T6951] usb 2-1: config 0 has an invalid interface number: 45 but max is 0 [ 962.990517][ T6951] usb 2-1: config 0 has no interface number 0 [ 962.996690][ T6951] usb 2-1: config 0 interface 45 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 963.032378][ T6951] usb 2-1: New USB device found, idVendor=0ab4, idProduct=0011, bcdDevice=60.16 [ 963.065583][ T6951] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 963.079282][ T6951] usb 2-1: Product: syz [ 963.087693][ T6951] usb 2-1: Manufacturer: syz [ 963.102274][ T6951] usb 2-1: SerialNumber: syz [ 963.118205][ T6951] usb 2-1: config 0 descriptor?? [ 964.800688][T15603] netlink: 348 bytes leftover after parsing attributes in process `syz.5.3171'. [ 964.810155][T15603] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3171'. [ 964.971312][ T6951] esd_usb 2-1:0.45: sending version message failed [ 964.977943][ T6951] esd_usb: probe of 2-1:0.45 failed with error -8 [ 965.071781][ T6951] usb 2-1: USB disconnect, device number 33 [ 966.950420][T15634] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20003 [ 967.174194][T15637] netlink: 'syz.2.3185': attribute type 33 has an invalid length. [ 967.204074][T15637] netlink: 160 bytes leftover after parsing attributes in process `syz.2.3185'. [ 969.210326][T15668] netlink: 'syz.2.3196': attribute type 33 has an invalid length. [ 969.237930][T15668] netlink: 160 bytes leftover after parsing attributes in process `syz.2.3196'. [ 969.481941][T15672] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3194'. [ 971.608155][T15700] netlink: 'syz.3.3207': attribute type 33 has an invalid length. [ 971.619256][T15700] netlink: 160 bytes leftover after parsing attributes in process `syz.3.3207'. [ 972.167293][T13643] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 972.302120][T15710] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3209'. [ 972.927625][T15713] netlink: 1624 bytes leftover after parsing attributes in process `syz.5.3211'. [ 973.019581][T13643] usb 3-1: Using ep0 maxpacket: 32 [ 973.034431][T13643] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 973.059560][T13643] usb 3-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 973.068777][T13643] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 973.099343][T13643] usb 3-1: config 0 descriptor?? [ 973.762645][T13643] usbhid 3-1:0.0: can't add hid device: -71 [ 973.768904][T13643] usbhid: probe of 3-1:0.0 failed with error -71 [ 973.785574][T13643] usb 3-1: USB disconnect, device number 36 [ 974.029875][T15735] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.3221'. [ 974.236914][T15736] netlink: 348 bytes leftover after parsing attributes in process `syz.3.3220'. [ 974.246205][T15736] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3220'. [ 974.548672][T15741] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3222'. [ 975.620386][T15761] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.3230'. [ 975.849771][T13643] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 976.209590][T13643] usb 4-1: Using ep0 maxpacket: 32 [ 976.216914][T13643] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 976.237594][T13643] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 976.274738][T13643] usb 4-1: config 0 descriptor?? [ 976.487951][T15769] netlink: 348 bytes leftover after parsing attributes in process `syz.1.3233'. [ 976.497531][T15769] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3233'. [ 976.516618][T13643] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 976.600645][T13643] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 976.631659][T13643] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 976.670479][T13643] usb 4-1: media controller created [ 976.715019][T13643] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 976.999626][ T23] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 977.201643][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 977.209913][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 977.235250][ T23] usb 2-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 977.263974][T13643] az6027: usb out operation failed. (-71) [ 977.274947][T13643] stb0899_attach: Driver disabled by Kconfig [ 977.281146][T13643] az6027: no front-end attached [ 977.281146][T13643] [ 977.289784][T13643] az6027: usb out operation failed. (-71) [ 977.295567][T13643] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 977.297910][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 977.305617][T13643] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input19 [ 977.324698][ T23] usb 2-1: config 0 descriptor?? [ 977.400910][T15780] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3235'. [ 978.029571][T13643] dvb-usb: schedule remote query interval to 400 msecs. [ 978.037715][T13643] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 978.051486][T13643] usb 4-1: USB disconnect, device number 47 [ 978.150447][T13643] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 978.330221][ T23] usbhid 2-1:0.0: can't add hid device: -71 [ 978.346725][ T23] usbhid: probe of 2-1:0.0 failed with error -71 [ 978.370700][ T23] usb 2-1: USB disconnect, device number 34 [ 980.060035][T13643] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 980.068294][T15814] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3250'. [ 980.078667][T15814] netlink: 6 bytes leftover after parsing attributes in process `syz.1.3250'. [ 980.420029][T13643] usb 4-1: Using ep0 maxpacket: 16 [ 980.433902][T13643] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 980.455311][T13643] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 980.479232][T13643] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 980.514598][T13643] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 980.537370][T13643] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.564877][T13643] usb 4-1: Product: syz [ 980.579485][T13643] usb 4-1: Manufacturer: syz [ 980.584433][T13643] usb 4-1: SerialNumber: syz [ 981.142022][ T6939] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 981.567421][T13643] usb 4-1: 0:2 : does not exist [ 981.611907][ T6939] usb 3-1: config 0 has an invalid interface number: 45 but max is 0 [ 981.627824][ T6939] usb 3-1: config 0 has no interface number 0 [ 982.369060][T15837] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3259'. [ 982.371752][ T6939] usb 3-1: config 0 interface 45 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 982.392394][T15837] netlink: 6 bytes leftover after parsing attributes in process `syz.1.3259'. [ 982.407509][ T6939] usb 3-1: New USB device found, idVendor=0ab4, idProduct=0011, bcdDevice=60.16 [ 982.429575][ T6939] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 982.437657][ T6939] usb 3-1: Product: syz [ 982.449787][ T6939] usb 3-1: Manufacturer: syz [ 982.454469][ T6939] usb 3-1: SerialNumber: syz [ 982.466751][ T6939] usb 3-1: config 0 descriptor?? [ 982.791917][T13643] usb 4-1: USB disconnect, device number 48 [ 983.824445][ T6939] esd_usb 3-1:0.45: sending version message failed [ 983.831603][ T6939] esd_usb: probe of 3-1:0.45 failed with error -8 [ 983.843844][ T6939] usb 3-1: USB disconnect, device number 37 [ 984.400396][ T6951] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 985.058190][ T6951] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 985.066454][ T6951] usb 3-1: config 0 has no interface number 0 [ 985.079536][ T6951] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 985.091718][ T6951] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 985.101567][ T6951] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 985.110692][ T6951] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.130494][ T6951] usb 3-1: config 0 descriptor?? [ 986.234155][ T6951] prodikeys 0003:041E:2801.000A: unknown main item tag 0x0 [ 986.243311][ T6951] prodikeys 0003:041E:2801.000A: unknown main item tag 0x0 [ 986.250765][ T6951] prodikeys 0003:041E:2801.000A: unknown main item tag 0x0 [ 986.258135][ T6951] prodikeys 0003:041E:2801.000A: unknown main item tag 0x0 [ 986.269580][ T6951] prodikeys 0003:041E:2801.000A: unknown main item tag 0x0 [ 986.276840][ T6951] prodikeys 0003:041E:2801.000A: unknown main item tag 0x0 [ 986.292390][ T6951] prodikeys 0003:041E:2801.000A: unknown main item tag 0x0 [ 986.306308][ T6951] prodikeys 0003:041E:2801.000A: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.2-1/input1 [ 986.330106][ T6951] hid_prodikeys: hid-prodikeys: failed to find output report [ 986.330106][ T6951] [ 986.537446][ T23] usb 3-1: USB disconnect, device number 38 [ 987.240023][ T6951] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 987.552751][ T6951] usb 4-1: config 0 has an invalid interface number: 45 but max is 0 [ 987.578986][ T6951] usb 4-1: config 0 has no interface number 0 [ 987.592512][ T6951] usb 4-1: config 0 interface 45 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 987.614385][ T6951] usb 4-1: New USB device found, idVendor=0ab4, idProduct=0011, bcdDevice=60.16 [ 987.656348][ T6951] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.664921][ T6951] usb 4-1: Product: syz [ 987.669121][ T6951] usb 4-1: Manufacturer: syz [ 987.682335][ T6951] usb 4-1: SerialNumber: syz [ 987.689265][ T6951] usb 4-1: config 0 descriptor?? [ 988.592103][T15903] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3283'. [ 988.606003][T15903] netlink: 6 bytes leftover after parsing attributes in process `syz.1.3283'. [ 988.660000][T15904] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.3282'. [ 989.545139][ T6951] esd_usb 4-1:0.45: sending version message failed [ 989.559179][ T6951] esd_usb: probe of 4-1:0.45 failed with error -8 [ 989.570360][ T6951] usb 4-1: USB disconnect, device number 49 [ 989.805574][T15924] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3292'. [ 989.835225][T15924] netlink: 6 bytes leftover after parsing attributes in process `syz.3.3292'. [ 990.085829][T15929] netlink: 'syz.3.3293': attribute type 72 has an invalid length. [ 990.762095][T15952] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3302'. [ 990.782539][T15952] netlink: 6 bytes leftover after parsing attributes in process `syz.5.3302'. [ 991.576404][T15962] netlink: 'syz.1.3305': attribute type 72 has an invalid length. [ 992.320091][T15977] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3312'. [ 992.360241][T15977] netlink: 6 bytes leftover after parsing attributes in process `syz.5.3312'. [ 992.448339][T15981] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3306'. [ 993.221095][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.227461][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.819045][T15991] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.3317'. [ 994.407033][ T5790] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 994.417231][ T5790] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 994.425526][ T5790] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 994.548928][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 994.563215][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 994.575192][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 994.793085][ T143] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 995.696067][ T143] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 995.965556][ T143] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 996.348512][ T143] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 996.567850][T15999] chnl_net:caif_netlink_parms(): no params data found [ 996.630068][T12593] Bluetooth: hci2: command tx timeout [ 997.232170][T15999] bridge0: port 1(bridge_slave_0) entered blocking state [ 997.275238][T15999] bridge0: port 1(bridge_slave_0) entered disabled state [ 997.374302][T15999] bridge_slave_0: entered allmulticast mode [ 997.401043][T15999] bridge_slave_0: entered promiscuous mode [ 997.599344][T15999] bridge0: port 2(bridge_slave_1) entered blocking state [ 997.613737][T15999] bridge0: port 2(bridge_slave_1) entered disabled state [ 997.624847][T15999] bridge_slave_1: entered allmulticast mode [ 997.638074][T15999] bridge_slave_1: entered promiscuous mode [ 997.992942][T14752] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 998.208472][T15999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 998.272577][T15999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 998.293676][T14752] usb 2-1: config 0 has an invalid interface number: 45 but max is 0 [ 998.325666][T14752] usb 2-1: config 0 has no interface number 0 [ 998.355728][T14752] usb 2-1: config 0 interface 45 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 998.440465][T14752] usb 2-1: New USB device found, idVendor=0ab4, idProduct=0011, bcdDevice=60.16 [ 998.461040][T14752] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 998.498421][T14752] usb 2-1: Product: syz [ 998.546685][T14752] usb 2-1: Manufacturer: syz [ 998.595804][T14752] usb 2-1: SerialNumber: syz [ 998.700291][T15999] team0: Port device team_slave_0 added [ 998.714608][T14752] usb 2-1: config 0 descriptor?? [ 998.729567][T12593] Bluetooth: hci2: command tx timeout [ 999.256599][T15999] team0: Port device team_slave_1 added [ 999.383870][T15999] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 999.409452][T15999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 999.455325][T15999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 999.523561][T15999] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 999.537496][T15999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 999.567074][T15999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 999.783996][T15999] hsr_slave_0: entered promiscuous mode [ 999.790998][T15999] hsr_slave_1: entered promiscuous mode [ 999.949176][T16053] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3335'. [ 999.958396][T16053] netlink: 6 bytes leftover after parsing attributes in process `syz.3.3335'. [ 1000.402105][T14752] esd_usb 2-1:0.45: sending version message failed [ 1000.413332][T14752] esd_usb: probe of 2-1:0.45 failed with error -8 [ 1000.424475][T14752] usb 2-1: USB disconnect, device number 35 [ 1000.621472][ T143] hsr_slave_0: left promiscuous mode [ 1000.634121][ T143] hsr_slave_1: left promiscuous mode [ 1000.667120][ T143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1000.707997][ T143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1000.739813][ T143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1000.758085][ T143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1000.769188][ T143] bridge_slave_1: left allmulticast mode [ 1000.779572][T12593] Bluetooth: hci2: command tx timeout [ 1000.791197][ T143] bridge_slave_1: left promiscuous mode [ 1000.797030][ T143] bridge0: port 2(bridge_slave_1) entered disabled state [ 1000.807938][ T143] bridge_slave_0: left allmulticast mode [ 1000.814186][ T143] bridge_slave_0: left promiscuous mode [ 1000.820226][ T143] bridge0: port 1(bridge_slave_0) entered disabled state [ 1000.862231][ T143] veth1_macvtap: left promiscuous mode [ 1000.867975][ T143] veth0_macvtap: left promiscuous mode [ 1000.873928][ T143] veth1_vlan: left promiscuous mode [ 1001.158411][ T143] bond2 (unregistering): Released all slaves [ 1001.223476][ T143] bond1 (unregistering): Released all slaves [ 1002.638094][ T143] team0 (unregistering): Port device team_slave_1 removed [ 1002.711064][ T143] team0 (unregistering): Port device team_slave_0 removed [ 1002.765107][ T143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1002.825438][ T143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1002.860034][T12593] Bluetooth: hci2: command tx timeout [ 1003.752533][ T143] bond0 (unregistering): Released all slaves [ 1005.207839][T16091] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3349'. [ 1005.357363][T16091] netlink: 6 bytes leftover after parsing attributes in process `syz.2.3349'. [ 1005.907330][T15999] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1005.924798][T15999] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1005.960223][T15999] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1005.974904][ T6951] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1006.004769][T15999] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1006.214746][T15999] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1006.258143][T15999] 8021q: adding VLAN 0 to HW filter on device team0 [ 1006.285797][T14375] bridge0: port 1(bridge_slave_0) entered blocking state [ 1006.291893][ T6951] usb 3-1: device descriptor read/64, error -71 [ 1006.293065][T14375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1006.321385][ T143] bridge0: port 2(bridge_slave_1) entered blocking state [ 1006.328585][ T143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1006.349711][T13643] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1006.549544][T13643] usb 2-1: Using ep0 maxpacket: 16 [ 1006.550212][T15999] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1006.560587][T13643] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1006.564415][ T6951] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1006.584342][T13643] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1006.591803][T13643] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1006.608286][T13643] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1006.619580][T13643] usb 2-1: config 0 descriptor?? [ 1006.729768][ T6951] usb 3-1: device descriptor read/64, error -71 [ 1006.856644][ T6951] usb usb3-port1: attempt power cycle [ 1006.912856][T15999] veth0_vlan: entered promiscuous mode [ 1006.975826][T15999] veth1_vlan: entered promiscuous mode [ 1007.062165][T13643] nzxt-smart2 0003:1E71:2009.000B: unknown main item tag 0x0 [ 1007.076461][T15999] veth0_macvtap: entered promiscuous mode [ 1007.093313][T13643] nzxt-smart2 0003:1E71:2009.000B: unknown main item tag 0x0 [ 1007.108911][T13643] nzxt-smart2 0003:1E71:2009.000B: unknown main item tag 0x0 [ 1007.118626][T13643] nzxt-smart2 0003:1E71:2009.000B: unknown main item tag 0x0 [ 1007.143719][T15999] veth1_macvtap: entered promiscuous mode [ 1007.160894][T13643] nzxt-smart2 0003:1E71:2009.000B: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 1007.203964][T15999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1007.226186][T15999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1007.242703][T15999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1007.258770][T15999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1007.276549][T15999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1007.302686][T15999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1007.312943][T15999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1007.323478][T15999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1007.335290][T15999] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1007.346548][T15999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1007.357314][T15999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1007.367316][T15999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1007.389214][ T6951] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1007.398178][T15999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1007.416767][T15999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1007.428295][T15999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1007.442578][T13643] usb 2-1: USB disconnect, device number 36 [ 1007.445210][T15999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1007.459956][ T6951] usb 3-1: device descriptor read/8, error -71 [ 1007.473726][T15999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1007.487856][T15999] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1007.511019][T16132] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3358'. [ 1007.524745][T16132] netlink: 6 bytes leftover after parsing attributes in process `syz.3.3358'. [ 1007.538247][T15999] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1007.547220][T15999] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1007.556724][T15999] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1007.565680][T15999] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1007.692199][T14375] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1007.708117][T14375] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1007.729706][ T6951] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1007.777997][T14375] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1007.787921][ T6951] usb 3-1: device descriptor read/8, error -71 [ 1007.805375][T14375] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1007.920571][ T6951] usb usb3-port1: unable to enumerate USB device [ 1009.139696][T13643] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 1009.351596][T13643] usb 2-1: config 0 has an invalid interface number: 45 but max is 0 [ 1009.519924][T13643] usb 2-1: config 0 has no interface number 0 [ 1009.545852][T13643] usb 2-1: config 0 interface 45 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 1009.581833][T13643] usb 2-1: New USB device found, idVendor=0ab4, idProduct=0011, bcdDevice=60.16 [ 1009.609709][T13643] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.630952][T13643] usb 2-1: Product: syz [ 1009.643355][T13643] usb 2-1: Manufacturer: syz [ 1009.669214][T13643] usb 2-1: SerialNumber: syz [ 1009.686738][T13643] usb 2-1: config 0 descriptor?? [ 1010.090680][T16163] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3367'. [ 1010.106183][T16163] netlink: 6 bytes leftover after parsing attributes in process `syz.5.3367'. [ 1010.236948][ T28] audit: type=1326 audit(1761893384.073:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16165 comm="syz.5.3368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67edb8efc9 code=0x7ffc0000 [ 1010.260878][ T28] audit: type=1326 audit(1761893384.073:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16165 comm="syz.5.3368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67edb8efc9 code=0x7ffc0000 [ 1010.299514][ T28] audit: type=1326 audit(1761893384.073:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16165 comm="syz.5.3368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f67edb8efc9 code=0x7ffc0000 [ 1010.327442][ T28] audit: type=1326 audit(1761893384.073:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16165 comm="syz.5.3368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67edb8efc9 code=0x7ffc0000 [ 1010.483114][ T28] audit: type=1326 audit(1761893384.073:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16165 comm="syz.5.3368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67edb8efc9 code=0x7ffc0000 [ 1010.510401][T16170] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.3370'. [ 1010.556767][ T6951] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1010.566503][ T28] audit: type=1326 audit(1761893384.083:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16165 comm="syz.5.3368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f67edb8efc9 code=0x7ffc0000 [ 1010.589895][ T28] audit: type=1326 audit(1761893384.083:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16165 comm="syz.5.3368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67edb8efc9 code=0x7ffc0000 [ 1010.612359][ T28] audit: type=1326 audit(1761893384.083:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16165 comm="syz.5.3368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f67edb8efc9 code=0x7ffc0000 [ 1010.635299][ T28] audit: type=1326 audit(1761893384.083:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16165 comm="syz.5.3368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67edb8efc9 code=0x7ffc0000 [ 1010.674400][ T28] audit: type=1326 audit(1761893384.083:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16165 comm="syz.5.3368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f67edb8efc9 code=0x7ffc0000 [ 1010.759694][ T6951] usb 3-1: Using ep0 maxpacket: 8 [ 1010.801945][ T6951] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1010.934563][ T6951] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1011.013148][ T6951] usb 3-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.00 [ 1011.084974][ T6951] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1011.161086][ T6951] usb 3-1: config 0 descriptor?? [ 1011.430155][T13643] esd_usb 2-1:0.45: sending version message failed [ 1011.436806][T13643] esd_usb: probe of 2-1:0.45 failed with error -8 [ 1011.448053][T13643] usb 2-1: USB disconnect, device number 37 [ 1011.790913][ T6951] hid-u2fzero 0003:20A0:4287.000C: unknown main item tag 0x0 [ 1011.804512][ T6951] hid-u2fzero 0003:20A0:4287.000C: unknown main item tag 0x0 [ 1011.816993][ T6951] hid-u2fzero 0003:20A0:4287.000C: unknown main item tag 0x0 [ 1011.837607][ T6951] hid-u2fzero 0003:20A0:4287.000C: unknown main item tag 0x0 [ 1011.865832][ T6951] hid-u2fzero 0003:20A0:4287.000C: unknown main item tag 0x0 [ 1011.990213][ T6951] hid-u2fzero 0003:20A0:4287.000C: hidraw0: USB HID v0.03 Device [HID 20a0:4287] on usb-dummy_hcd.2-1/input0 [ 1012.047458][ T6951] hid-u2fzero 0003:20A0:4287.000C: NitroKey U2F LED initialised [ 1012.150569][ T6951] general protection fault, probably for non-canonical address 0xdffffc0000000015: 0000 [#1] PREEMPT SMP KASAN [ 1012.162350][ T6951] KASAN: null-ptr-deref in range [0x00000000000000a8-0x00000000000000af] [ 1012.170789][ T6951] CPU: 1 PID: 6951 Comm: kworker/1:14 Not tainted syzkaller #0 [ 1012.178362][ T6951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1012.188449][ T6951] Workqueue: usb_hub_wq hub_event [ 1012.193512][ T6951] RIP: 0010:u2fzero_rng_read+0x241/0x630 [ 1012.199172][ T6951] Code: 24 18 80 3c 01 00 74 08 4c 89 ef e8 49 00 f9 f9 bb a8 00 00 00 49 03 5d 00 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 48 89 df e8 c1 00 f9 f9 48 8d 44 24 60 48 89 03 [ 1012.218791][ T6951] RSP: 0018:ffffc9000b6ee780 EFLAGS: 00010202 [ 1012.224866][ T6951] RAX: 0000000000000015 RBX: 00000000000000a8 RCX: dffffc0000000000 [ 1012.232846][ T6951] RDX: 0000000000000000 RSI: ffffc9000b6ee8a0 RDI: ffff88802e263968 [ 1012.240835][ T6951] RBP: ffffc9000b6ee998 R08: 0000000000000000 R09: 0000000000000000 [ 1012.248813][ T6951] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88807d4e2300 [ 1012.256813][ T6951] R13: ffff88807d4e2030 R14: 1ffff1100fa9c483 R15: 1ffff920016ddcf8 [ 1012.264793][ T6951] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1012.273741][ T6951] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1012.280331][ T6951] CR2: 00007f3a887b12f8 CR3: 000000006b4f4000 CR4: 00000000003506e0 [ 1012.288338][ T6951] Call Trace: [ 1012.291624][ T6951] [ 1012.294579][ T6951] ? u2fzero_brightness_set+0x2a0/0x2a0 [ 1012.300152][ T6951] ? add_early_randomness+0x1e/0x1a0 [ 1012.305448][ T6951] ? mutex_unlock+0x10/0x10 [ 1012.309983][ T6951] ? u2fzero_brightness_set+0x2a0/0x2a0 [ 1012.315642][ T6951] add_early_randomness+0x7a/0x1a0 [ 1012.320762][ T6951] hwrng_register+0x3db/0x4a0 [ 1012.325448][ T6951] devm_hwrng_register+0x47/0xb0 [ 1012.330400][ T6951] u2fzero_probe+0x348/0x460 [ 1012.335012][ T6951] hid_device_probe+0x293/0x5b0 [ 1012.339885][ T6951] ? hid_uevent+0x350/0x350 [ 1012.344427][ T6951] really_probe+0x25b/0xb40 [ 1012.348967][ T6951] ? pm_runtime_barrier+0x14b/0x1c0 [ 1012.354177][ T6951] __driver_probe_device+0x18c/0x330 [ 1012.359491][ T6951] driver_probe_device+0x4f/0x420 [ 1012.364535][ T6951] __device_attach_driver+0x2ca/0x520 [ 1012.369917][ T6951] bus_for_each_drv+0x24b/0x2d0 [ 1012.374772][ T6951] ? coredump_store+0x90/0x90 [ 1012.379474][ T6951] ? bus_find_device+0x320/0x320 [ 1012.384448][ T6951] __device_attach+0x2b5/0x400 [ 1012.389226][ T6951] ? device_attach+0x20/0x20 [ 1012.393912][ T6951] ? do_raw_spin_unlock+0x121/0x230 [ 1012.399127][ T6951] bus_probe_device+0x180/0x260 [ 1012.404010][ T6951] device_add+0x85b/0xc20 [ 1012.408447][ T6951] hid_add_device+0x38d/0x530 [ 1012.413143][ T6951] usbhid_probe+0xe02/0x1220 [ 1012.417759][ T6951] usb_probe_interface+0x5a4/0xb00 [ 1012.422882][ T6951] ? usb_register_driver+0x3d0/0x3d0 [ 1012.428169][ T6951] really_probe+0x25b/0xb40 [ 1012.432701][ T6951] ? pm_runtime_barrier+0x14b/0x1c0 [ 1012.437939][ T6951] __driver_probe_device+0x18c/0x330 [ 1012.443251][ T6951] driver_probe_device+0x4f/0x420 [ 1012.448287][ T6951] __device_attach_driver+0x2ca/0x520 [ 1012.453672][ T6951] bus_for_each_drv+0x24b/0x2d0 [ 1012.458533][ T6951] ? coredump_store+0x90/0x90 [ 1012.463269][ T6951] ? bus_find_device+0x320/0x320 [ 1012.468224][ T6951] __device_attach+0x2b5/0x400 [ 1012.473023][ T6951] ? device_attach+0x20/0x20 [ 1012.477631][ T6951] ? __kmem_cache_free+0xba/0x1f0 [ 1012.482674][ T6951] ? do_raw_spin_unlock+0x121/0x230 [ 1012.487888][ T6951] bus_probe_device+0x180/0x260 [ 1012.492762][ T6951] device_add+0x85b/0xc20 [ 1012.497120][ T6951] usb_set_configuration+0x1a79/0x20c0 [ 1012.502605][ T6951] usb_generic_driver_probe+0x8d/0x150 [ 1012.508079][ T6951] usb_probe_device+0x13d/0x280 [ 1012.512942][ T6951] ? usb_register_device_driver+0x230/0x230 [ 1012.518849][ T6951] really_probe+0x25b/0xb40 [ 1012.523453][ T6951] ? pm_runtime_barrier+0x14b/0x1c0 [ 1012.528658][ T6951] __driver_probe_device+0x18c/0x330 [ 1012.533949][ T6951] driver_probe_device+0x4f/0x420 [ 1012.538985][ T6951] __device_attach_driver+0x2ca/0x520 [ 1012.544534][ T6951] bus_for_each_drv+0x24b/0x2d0 [ 1012.549381][ T6951] ? coredump_store+0x90/0x90 [ 1012.554067][ T6951] ? bus_find_device+0x320/0x320 [ 1012.559014][ T6951] __device_attach+0x2b5/0x400 [ 1012.563786][ T6951] ? device_attach+0x20/0x20 [ 1012.568384][ T6951] ? __kmem_cache_free+0xba/0x1f0 [ 1012.573431][ T6951] ? do_raw_spin_unlock+0x121/0x230 [ 1012.578649][ T6951] bus_probe_device+0x180/0x260 [ 1012.583525][ T6951] device_add+0x85b/0xc20 [ 1012.587870][ T6951] usb_new_device+0xa31/0x1630 [ 1012.592646][ T6951] ? usb_disconnect+0x8a0/0x8a0 [ 1012.597510][ T6951] ? _raw_spin_unlock_irq+0x23/0x50 [ 1012.602714][ T6951] ? lockdep_hardirqs_on+0x98/0x150 [ 1012.607911][ T6951] hub_event+0x2962/0x49c0 [ 1012.612351][ T6951] ? hub_post_resume+0x120/0x120 [ 1012.617300][ T6951] ? read_lock_is_recursive+0x20/0x20 [ 1012.622700][ T6951] ? _raw_spin_unlock_irq+0x23/0x50 [ 1012.627904][ T6951] ? process_scheduled_works+0x957/0x15b0 [ 1012.633634][ T6951] ? process_scheduled_works+0x957/0x15b0 [ 1012.639366][ T6951] process_scheduled_works+0xa45/0x15b0 [ 1012.644928][ T6951] ? assign_work+0x400/0x400 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1012.649529][ T6951] ? assign_work+0x39e/0x400 [ 1012.654131][ T6951] worker_thread+0xa55/0xfc0 [ 1012.658743][ T6951] kthread+0x2fa/0x390 [ 1012.662810][ T6951] ? pr_cont_work+0x560/0x560 [ 1012.667488][ T6951] ? kthread_blkcg+0xd0/0xd0 [ 1012.672090][ T6951] ret_from_fork+0x48/0x80 [ 1012.676511][ T6951] ? kthread_blkcg+0xd0/0xd0 [ 1012.681103][ T6951] ret_from_fork_asm+0x11/0x20 [ 1012.685878][ T6951] [ 1012.688901][ T6951] Modules linked in: [ 1013.019268][ T6951] ---[ end trace 0000000000000000 ]--- [ 1013.569886][ T6951] RIP: 0010:u2fzero_rng_read+0x241/0x630 [ 1013.575627][ T6951] Code: 24 18 80 3c 01 00 74 08 4c 89 ef e8 49 00 f9 f9 bb a8 00 00 00 49 03 5d 00 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 48 89 df e8 c1 00 f9 f9 48 8d 44 24 60 48 89 03 [ 1013.596553][ T6951] RSP: 0018:ffffc9000b6ee780 EFLAGS: 00010202 [ 1013.602909][ T6951] RAX: 0000000000000015 RBX: 00000000000000a8 RCX: dffffc0000000000 [ 1013.611120][ T6951] RDX: 0000000000000000 RSI: ffffc9000b6ee8a0 RDI: ffff88802e263968 [ 1013.619150][ T6951] RBP: ffffc9000b6ee998 R08: 0000000000000000 R09: 0000000000000000 [ 1013.633194][ T6951] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88807d4e2300 [ 1013.642030][ T6951] R13: ffff88807d4e2030 R14: 1ffff1100fa9c483 R15: 1ffff920016ddcf8 [ 1013.652464][ T6951] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1013.662601][ T6951] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1013.669280][ T6951] CR2: 00007fcc12517d60 CR3: 000000000cb30000 CR4: 00000000003506e0 [ 1013.677848][ T6951] Kernel panic - not syncing: Fatal exception [ 1013.684242][ T6951] Kernel Offset: disabled [ 1013.688567][ T6951] Rebooting in 86400 seconds..