last executing test programs: 7m42.462221342s ago: executing program 4 (id=216): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'ip6gre0\x00'}}, 0x1e) sendmmsg(r3, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 7m40.334619583s ago: executing program 4 (id=220): r0 = landlock_create_ruleset(&(0x7f0000000080)={0x8601, 0x2}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = syz_io_uring_setup(0x236, &(0x7f0000000380)={0x0, 0x80fd, 0x8, 0x4, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r1, 0x80, &(0x7f0000000080)=@l2tp={0x2, 0x0, @local, 0x3}}) io_uring_enter(r2, 0x1864, 0x6429, 0x1, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) dup2(r5, r1) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, 0x0) 7m37.563204057s ago: executing program 4 (id=226): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/sockstat\x00') mount$9p_fd(0x0, &(0x7f0000000380)='.\x00', &(0x7f0000000040), 0x800048, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000009, 0x2010, r0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x18, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x94}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc532, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002207000000095a80"], 0x0}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000000c0)={0x4, 0x0, 0x6, 0x4, '\x00', 0x8}) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) 7m32.948670114s ago: executing program 4 (id=236): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) creat(&(0x7f0000000100)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x389380a, 0x0) umount2(&(0x7f00000000c0)='./file0/file0\x00', 0x1) 7m31.726366138s ago: executing program 4 (id=240): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) r2 = syz_io_uring_setup(0xa1, &(0x7f0000000640)={0x0, 0xe8ce, 0x0, 0x20, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000020c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6007, @fd_index=0x4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001800)=""/211, 0xd3}], 0x1}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000002800)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000000)="1eb3bf65654102f4af4d221c8bd458d1e7cbdaf3657d0f34e790c85bdba7931791f6d15c3e681411f7a496c0dace6a3c242f5b016f64b4ef8a9cedaf6bec340dee49474360b24cb8", 0x0, 0x48) syz_memcpy_off$KVM_EXIT_MMIO(r0, 0x20, &(0x7f0000002380)="fcf0211c43cfbe136ce4b6ba0e3a969583ef8d585e3732f6", 0x0, 0x18) 7m29.216336773s ago: executing program 4 (id=245): openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x200100, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140), 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[], 0x454}}, 0x0) shutdown(r3, 0x1) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x0, 0x0, 0x0) 7m28.454112943s ago: executing program 32 (id=245): openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x200100, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140), 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[], 0x454}}, 0x0) shutdown(r3, 0x1) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x0, 0x0, 0x0) 2m36.69423493s ago: executing program 0 (id=1018): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0xfc, 0x0}, 0x800, 0x0, 0x3, 0x1, 0x0, 0x4}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x380000, @rand_addr=' \x01\x00'}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000300)={@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4}, &(0x7f00000004c0)=0x37) 2m35.157382501s ago: executing program 0 (id=1022): syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000200)={0x0, 0x9e74, 0x0, 0x4}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r5, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080), 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x0, 0x4007, @fd_index=0x7fffffd, 0x2, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x3f70, 0x0, 0x0, 0x0, 0x0) 2m34.094413419s ago: executing program 0 (id=1025): setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000003c0)=@nat={'nat\x00', 0x1b, 0x5, 0x1418, 0x1258, 0x11a0, 0xffffffff, 0x1258, 0x1258, 0x1380, 0x1380, 0xffffffff, 0x1380, 0x1380, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x4, @broadcast, @empty, @gre_key=0x8, @port=0x4e21}}}}, {{@uncond, 0x0, 0x10c0, 0x10f8, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x1, 0x1, 0x0, './cgroup.net/syz0\x00', 0x1, {0xeb18}}}, @common=@socket0={{0x20}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0xb, @rand_addr=0x64010101, @rand_addr=0x64010102, @gre_key=0xff, @gre_key=0x1}}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x2c}, @local, 0xff, 0x0, 'geneve1\x00', 'veth0_macvtap\x00', {}, {}, 0x32, 0x0, 0x8}, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x2, @ipv4=@private=0xa010101, @ipv4=@local, @gre_key=0x1, @port=0x4e23}}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x4, [0x3, 0x2, 0x2, 0xa, 0x2, 0x5], 0x1, 0x7}}}, @common=@set={{0x40}, {{0x0, [0x3, 0x3, 0x1, 0x4, 0x1, 0x2], 0x1}}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x14, @loopback, @rand_addr=0x64010102, @icmp_id=0x65, @icmp_id=0x67}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1478) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="02"], 0x10) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r3, 0x2, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1, 0x0, &(0x7f00000014c0), 0x0, 0x0}, 0x40) 2m33.277813788s ago: executing program 0 (id=1027): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0xcd2, 0x0, 0xfffffffd, 0x1, 0x0, 0x0, 0x2000000003, 0x0, 0x82c, 0x0, 0x81, 0x4}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x0, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x20000000007, 0x80, 0x2, 0x1, 0x8, 0x7, 0x47d, 0x0, 0xfffffffffffffffe, 0x40001, 0x5, 0x7f, 0x9, 0x1000000000400001, 0x10000000020001, 0x1], 0x3000, 0xc4b06}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@arm64={0x5, 0x8, 0x1, '\x00', 0x9}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40186f40, &(0x7f0000000440)=0x1f) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000000c0)=0x78) 2m31.483931073s ago: executing program 0 (id=1033): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x5000002}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040804}, 0x20000000) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m31.057093206s ago: executing program 0 (id=1033): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x5000002}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040804}, 0x20000000) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m5.870940114s ago: executing program 1 (id=1213): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, 0x0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa0800060001"], 0x30}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m4.383474296s ago: executing program 1 (id=1217): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) r0 = inotify_init() r1 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r2 = inotify_add_watch(r0, &(0x7f0000000240)='./file0\x00', 0x8c7) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES64=r2], 0x69) close(r1) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 1m1.460794063s ago: executing program 1 (id=1221): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(&(0x7f0000000000)=@filename='./file0\x00', &(0x7f0000000040)='.\x00', &(0x7f0000000140)='f2fs\x00', 0x0, 0x0) 1m0.027332463s ago: executing program 1 (id=1224): syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101000000008903ce0702"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="40000000100003040000000000000000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000001800128008000100767469000c000280080004000a01010108000d001908"], 0x40}}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100)='0.::/', 0x0) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc5d", 0x2, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 56.646133096s ago: executing program 1 (id=1228): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) 53.830713084s ago: executing program 1 (id=1233): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x6, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f086dd", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x36) 38.319506562s ago: executing program 33 (id=1233): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x6, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f086dd", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x36) 13.084367677s ago: executing program 5 (id=1311): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000019000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003900000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000480), 0x2, 0x80042) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000056c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) getsockopt(0xffffffffffffffff, 0x114, 0x271c, 0x0, &(0x7f00000000c0)) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r5, 0x0) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000d00)={0x14, 0x14, 0x1, 0x70bd2b, 0x0, "", [@generic='\t']}, 0x14}], 0x1}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) 12.276133551s ago: executing program 2 (id=1312): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[], 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x28, r5, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}]}, 0x28}}, 0x0) 12.219282172s ago: executing program 5 (id=1313): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0x10, 0x803, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x702}]}, 0x34}}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_ADDRESS={0x14, 0x1, @remote}]}, 0x40}}, 0x0) 11.161346308s ago: executing program 2 (id=1315): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_open_dev$vim2m(0x0, 0x800, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x20}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 9.857868047s ago: executing program 2 (id=1316): socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000080), &(0x7f0000000340)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x5, 0xe, 0x0, &(0x7f0000000000)="6121eed4cd50bb2b01e841acde1a", 0x0, 0x29d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) syz_usb_connect(0x0, 0x36, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 9.73554707s ago: executing program 5 (id=1317): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x0) bind$can_j1939(r2, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x18d1, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xfd, 0x1, {0x22, 0x4}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x1}}}}}]}}]}}, 0x0) syz_usb_connect$uac1(0x5, 0xe3, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd1, 0x3, 0x1, 0xc5, 0x20, 0xa5, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xf, 0x6}, [@feature_unit={0xd, 0x24, 0x6, 0x6, 0x5, 0x3, [0xa, 0x6, 0xa], 0x4}, @feature_unit={0xf, 0x24, 0x6, 0x1, 0x2, 0x4, [0x6, 0x6, 0x6, 0x5], 0x5}, @mixer_unit={0x5, 0x24, 0x4, 0x4, 0x1}, @extension_unit={0x7, 0x24, 0x8, 0x3, 0xaede, 0x7}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x100, 0x4, 0xd8, 0x9, 0x8, 0xc0}, @extension_unit={0xc, 0x24, 0x8, 0x6, 0x400, 0x1e, "19c1df86d6"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xc7, 0x3, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x3c7, 0x81, 0xfd, 0x10, {0x7, 0x25, 0x1, 0x2, 0xc, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x2, 0x100, 0x2, "59ecb08b2131"}, @as_header={0x7, 0x24, 0x1, 0x6, 0x3}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x2, 0x5, 0xd, "fd4c"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0xa, 0x2, 0x1, 0x63, "1ab4"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x8, 0x40, 0x57, {0x7, 0x25, 0x1, 0x0, 0xda, 0x5b}}}}}}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0x8, 0xff, 0x9, 0x10, 0x4}, 0x0, 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x4020aeb2, &(0x7f0000000300)={0x0, 0x12c, @ioapic={0xffff1000, 0x8000, 0x2, 0x80000001, 0x0, [{0x1, 0x85, 0x1, '\x00', 0x4}, {0x5, 0x3, 0x0, '\x00', 0x6}, {0x7, 0x3, 0xe, '\x00', 0x3b}, {0x4e, 0xe, 0xd6, '\x00', 0x86}, {0xc, 0xb, 0x6, '\x00', 0x4}, {0xf, 0x8, 0xf5, '\x00', 0x3}, {0x2, 0xa, 0x50, '\x00', 0x6}, {0x88, 0x3, 0x2a, '\x00', 0x80}, {0x4, 0x0, 0xa, '\x00', 0x1}, {0x8, 0x9, 0x3, '\x00', 0x8}, {0x3, 0x6, 0x3, '\x00', 0x6}, {0x2, 0x9, 0x0, '\x00', 0x7f}, {0x14, 0x51, 0xa, '\x00', 0xfc}, {0xe, 0xfc, 0x5, '\x00', 0x1}, {0x9, 0x2, 0x6, '\x00', 0x9}, {0x1, 0x3, 0xfe, '\x00', 0x3}, {0x2, 0xb, 0xd6, '\x00', 0x7f}, {0x7, 0x15, 0xca, '\x00', 0x6}, {0x0, 0x1, 0x4, '\x00', 0x13}, {0x4, 0x0, 0x40, '\x00', 0xda}, {0x3, 0x3, 0x6, '\x00', 0x9}, {0x9, 0x3, 0x1, '\x00', 0x2}, {0xf9, 0x1, 0x4, '\x00', 0x8}, {0x8, 0xc, 0x0, '\x00', 0x6}]}}) ioctl$KVM_SET_CPUID(r5, 0x4008ae8a, &(0x7f0000000040)) rename(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)='./file0\x00') ioctl$KVM_RUN(r5, 0xae80, 0x0) 8.396098935s ago: executing program 2 (id=1319): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x1, [0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={r6, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r7}) close_range(r0, 0xffffffffffffffff, 0x0) 7.009951049s ago: executing program 3 (id=1320): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timer_delete(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000003c0)={0x44, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffff6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffbff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xd841}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x88}]}]}, 0x44}}, 0x0) 5.335097539s ago: executing program 3 (id=1321): socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') read$FUSE(r3, &(0x7f00000001c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e20, @empty}}}, 0x0) ioprio_get$uid(0x3, r4) 5.317988316s ago: executing program 2 (id=1322): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9c1500005dc038a9216cf6c50a6e0c873dec50c7601afb", @ANYRES16=0x0, @ANYBLOB="040028bd7000fddbdf253900000088005a80840000800500040002000000050004000100000014000300018000000300a10805000800040014001400030000046d5cfbfff9ff080000020a00a5041100020018574712551c22451c514656010000001400030002000d000c00c0d20100802bf8ff5811050007000100000015000100000c060102246c0301091601033647240b000000"], 0x9c}, 0x1, 0x0, 0x0, 0x4004001}, 0x20004000) recvmsg(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000005c0)=""/15, 0xf}, {&(0x7f0000000ac0)=""/138, 0x8a}], 0x2}, 0x0) 4.208387104s ago: executing program 3 (id=1323): fsopen(0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'syztnl0\x00', 0x0}) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x630df6e0b32945da, 0x9, 0x9, 0x7fff, 0x18002, 0xffffffffffffffff, 0x710, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x5, 0x0, @value=r0, @void, @value}, 0x50) syz_emit_vhci(0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000700)=0xb88, 0x4) syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[], &(0x7f0000000040)=""/247, 0x26, 0xf7, 0x1, 0x0, 0x0, @void, @value}, 0x28) 4.120272036s ago: executing program 3 (id=1324): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000004000000060000008000"], 0x48) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000340), 0x619, r4}, 0x38) 3.183387061s ago: executing program 2 (id=1325): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x8880) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) open(0x0, 0x0, 0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV(r4, 0x5000940b, &(0x7f0000000a80)={{r2}, "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"}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.530661115s ago: executing program 3 (id=1326): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) socket$alg(0x26, 0x5, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f00000003c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="e1", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x2, 0x0) 2.452058991s ago: executing program 5 (id=1327): bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0x8, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, 0x0, 0x0) 1.127157281s ago: executing program 5 (id=1328): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0xfffffffc, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001300)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) 1.081135346s ago: executing program 3 (id=1329): r0 = io_uring_setup(0x2e34, &(0x7f0000000180)) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r6 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$UHID_INPUT(r6, &(0x7f0000000540)={0x8, {"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", 0x1000}}, 0x1006) umount2(&(0x7f0000000540)='.\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 5 (id=1330): ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8001}}, './file0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r3, 0x3f70, 0x0, 0x0, 0x0, 0x0) mount$afs(&(0x7f0000000540)=ANY=[@ANYBLOB='#syz1:'], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) kernel console output (not intermixed with test programs): active [ 78.966596][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.973771][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.999724][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.116675][ T5820] hsr_slave_0: entered promiscuous mode [ 79.124163][ T5820] hsr_slave_1: entered promiscuous mode [ 79.130244][ T5820] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.138603][ T5820] Cannot create hsr debugfs directory [ 79.208398][ T5831] hsr_slave_0: entered promiscuous mode [ 79.214767][ T5831] hsr_slave_1: entered promiscuous mode [ 79.220732][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.229411][ T5831] Cannot create hsr debugfs directory [ 79.239955][ T5819] hsr_slave_0: entered promiscuous mode [ 79.247315][ T5819] hsr_slave_1: entered promiscuous mode [ 79.253586][ T5819] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.261137][ T5819] Cannot create hsr debugfs directory [ 79.438765][ T5815] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.472017][ T5815] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.511063][ T5815] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.554177][ T5815] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.784524][ T5828] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 79.797786][ T5828] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 79.810247][ T5828] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 79.821191][ T5828] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.946812][ T5820] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.965606][ T5820] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.979114][ T5820] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.989380][ T5820] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.042257][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.082498][ T5819] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.105668][ T5819] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.118090][ T5819] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.132763][ T5815] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.175540][ T5819] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.199417][ T3025] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.206718][ T3025] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.250283][ T3563] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.257473][ T3563] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.282530][ T5831] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.309150][ T5831] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.313510][ T5822] Bluetooth: hci0: command tx timeout [ 80.325621][ T5831] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.368959][ T5831] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.387783][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.393756][ T5822] Bluetooth: hci1: command tx timeout [ 80.462108][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.473111][ T5824] Bluetooth: hci4: command tx timeout [ 80.477689][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.478551][ T5129] Bluetooth: hci3: command tx timeout [ 80.491033][ T5822] Bluetooth: hci2: command tx timeout [ 80.546934][ T3563] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.554107][ T3563] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.571501][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.601241][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.642220][ T3563] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.649471][ T3563] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.660706][ T3563] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.668153][ T3563] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.697849][ T3563] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.705410][ T3563] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.757254][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.780048][ T5828] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 80.791468][ T5828] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.907102][ T2989] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.914322][ T2989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.976336][ T2989] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.983467][ T2989] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.064582][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.156360][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.232601][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.275228][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.282401][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.321416][ T5815] veth0_vlan: entered promiscuous mode [ 81.342511][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.375857][ T5815] veth1_vlan: entered promiscuous mode [ 81.409036][ T3025] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.416220][ T3025] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.600363][ T5815] veth0_macvtap: entered promiscuous mode [ 81.637244][ T5831] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.684541][ T5815] veth1_macvtap: entered promiscuous mode [ 81.791689][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.820603][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.844776][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.879764][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.918271][ T5815] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.936424][ T5815] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.953333][ T5815] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.962069][ T5815] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.286311][ T5820] veth0_vlan: entered promiscuous mode [ 82.293468][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.307834][ T5819] veth0_vlan: entered promiscuous mode [ 82.313118][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.321861][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.358978][ T5820] veth1_vlan: entered promiscuous mode [ 82.394115][ T5129] Bluetooth: hci0: command tx timeout [ 82.409326][ T5828] veth0_vlan: entered promiscuous mode [ 82.426736][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.434945][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.444277][ T5819] veth1_vlan: entered promiscuous mode [ 82.464408][ T5828] veth1_vlan: entered promiscuous mode [ 82.477145][ T5129] Bluetooth: hci1: command tx timeout [ 82.534913][ T5815] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 82.553484][ T5129] Bluetooth: hci3: command tx timeout [ 82.558920][ T5129] Bluetooth: hci2: command tx timeout [ 82.565074][ T5822] Bluetooth: hci4: command tx timeout [ 82.570307][ T5820] veth0_macvtap: entered promiscuous mode [ 82.592614][ T5831] veth0_vlan: entered promiscuous mode [ 82.602599][ T5820] veth1_macvtap: entered promiscuous mode [ 82.624001][ T5819] veth0_macvtap: entered promiscuous mode [ 82.638904][ T5831] veth1_vlan: entered promiscuous mode [ 82.663800][ T5819] veth1_macvtap: entered promiscuous mode [ 82.702127][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.717230][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.748135][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.761980][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.780481][ T5819] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.790200][ T5819] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.799734][ T5819] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.810194][ T5819] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.033770][ T5828] veth0_macvtap: entered promiscuous mode [ 83.083381][ T5820] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.098952][ T5820] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.108108][ T5820] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.117295][ T5820] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.220690][ T5831] veth0_macvtap: entered promiscuous mode [ 83.301764][ T5828] veth1_macvtap: entered promiscuous mode [ 83.345385][ T5831] veth1_macvtap: entered promiscuous mode [ 83.374746][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.400513][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.443998][ T5828] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.452725][ T5828] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.467151][ T5828] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.476461][ T5828] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.495085][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.521718][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.591562][ T5831] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.612929][ T5831] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.621678][ T5831] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.639309][ T5831] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.724017][ T3563] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.749865][ T3563] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.768721][ T2989] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.813059][ T2989] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.852600][ T2989] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.860560][ T2989] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.389182][ T2989] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.442734][ T2989] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.483716][ T5824] Bluetooth: hci0: command tx timeout [ 84.553362][ T5824] Bluetooth: hci1: command tx timeout [ 84.633951][ T5824] Bluetooth: hci2: command tx timeout [ 84.633968][ T5129] Bluetooth: hci4: command tx timeout [ 84.639401][ T5824] Bluetooth: hci3: command tx timeout [ 84.736985][ T5917] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7'. [ 84.748951][ T3563] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.764938][ T3563] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.863443][ T5921] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7'. [ 84.869016][ T5917] vti0: entered allmulticast mode [ 84.981418][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.005385][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.066870][ T2962] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.086873][ T2962] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.168509][ T2962] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.187381][ T2962] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.660237][ T5936] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 86.734992][ T10] cfg80211: failed to load regulatory.db [ 88.061411][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 88.473306][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 88.778278][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 88.880696][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 89.085535][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 89.636510][ T5978] syz.3.22 uses obsolete (PF_INET,SOCK_PACKET) [ 89.729732][ T5980] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 90.023514][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.025548][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.621477][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 90.923234][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.664548][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.534207][ T5903] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 93.271152][ T6021] netlink: 36 bytes leftover after parsing attributes in process `syz.0.37'. [ 93.305372][ T6023] netlink: 4 bytes leftover after parsing attributes in process `syz.2.38'. [ 93.423644][ T5903] usb 4-1: too many configurations: 253, using maximum allowed: 8 [ 95.155701][ T5903] usb 4-1: string descriptor 0 read error: -71 [ 95.162149][ T5903] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 95.188614][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.249128][ T5903] usb 4-1: can't set config #1, error -71 [ 95.306298][ T5903] usb 4-1: USB disconnect, device number 2 [ 95.753483][ T5869] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 95.949231][ T5869] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 95.977388][ T5869] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 95.994666][ T5869] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 96.011984][ T5869] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 96.027021][ T5869] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 96.056637][ T5869] usb 1-1: config 0 interface 0 has no altsetting 0 [ 96.078909][ T5869] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 96.090221][ T5869] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 96.101454][ T5869] usb 1-1: Product: syz [ 96.108347][ T5869] usb 1-1: Manufacturer: syz [ 96.115801][ T5869] usb 1-1: SerialNumber: syz [ 96.132700][ T5869] usb 1-1: config 0 descriptor?? [ 96.145057][ T6051] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 96.164932][ T5869] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 96.406969][ T5869] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 97.292273][ T10] usb 1-1: USB disconnect, device number 2 [ 97.326268][ T10] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 97.863125][ T6078] sctp: [Deprecated]: syz.3.54 (pid 6078) Use of int in maxseg socket option. [ 97.863125][ T6078] Use struct sctp_assoc_value instead [ 98.164590][ T6084] Bluetooth: MGMT ver 1.23 [ 100.031336][ T6102] process 'syz.2.61' launched './file0' with NULL argv: empty string added [ 100.242034][ T5824] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 100.313126][ T5824] Bluetooth: hci0: command 0x0c1a tx timeout [ 100.660623][ T5903] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 101.481296][ T5903] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.509844][ T5903] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 101.526641][ T5903] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 101.541986][ T5903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 101.561053][ T5903] usb 5-1: SerialNumber: syz [ 101.766038][ T6118] netlink: 4 bytes leftover after parsing attributes in process `syz.3.65'. [ 102.595979][ T5903] usb 5-1: 0:2 : does not exist [ 102.762448][ T5903] usb 5-1: USB disconnect, device number 2 [ 103.079970][ T6130] netlink: 12 bytes leftover after parsing attributes in process `syz.1.67'. [ 103.249221][ T6130] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.258149][ T6130] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.267547][ T6130] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.276405][ T6130] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.288588][ T6130] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 103.297584][ T6130] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 103.306622][ T6130] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 103.315557][ T6130] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 103.359905][ T5835] udevd[5835]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 103.653113][ T5869] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 104.594923][ T5869] usb 1-1: Using ep0 maxpacket: 16 [ 104.773194][ T5869] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 104.902229][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.142983][ T5869] usb 1-1: Product: syz [ 105.147200][ T5869] usb 1-1: Manufacturer: syz [ 105.151806][ T5869] usb 1-1: SerialNumber: syz [ 105.192561][ T5869] usb 1-1: config 0 descriptor?? [ 105.935681][ T5869] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 105.979017][ T5869] usb 1-1: Detected FT-X [ 106.167964][ T5869] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 106.626932][ T5869] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 106.841752][ T6173] netlink: 4 bytes leftover after parsing attributes in process `syz.2.81'. [ 106.863269][ T10] usb 1-1: USB disconnect, device number 3 [ 106.884320][ T5903] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 106.895145][ T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 106.919711][ T10] ftdi_sio 1-1:0.0: device disconnected [ 107.055009][ T5903] usb 2-1: Using ep0 maxpacket: 32 [ 107.090849][ T5903] usb 2-1: config 0 has no interfaces? [ 107.115270][ T5903] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 107.143342][ T5903] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.168014][ T5903] usb 2-1: config 0 descriptor?? [ 107.254134][ T6181] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 107.445092][ T6169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.533430][ T6169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.576782][ T6176] cgroup: fork rejected by pids controller in /syz4 [ 108.187133][ T5870] usb 2-1: USB disconnect, device number 2 [ 109.163181][ T10] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 109.764415][ T10] usb 1-1: config 4 has an invalid interface number: 231 but max is 0 [ 109.834766][ T10] usb 1-1: config 4 has no interface number 0 [ 111.004076][ T10] usb 1-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 111.013693][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.065552][ T10] usb 1-1: Product: syz [ 111.160315][ T10] usb 1-1: Manufacturer: syz [ 111.190798][ T10] usb 1-1: SerialNumber: syz [ 113.105954][ T10] usb 1-1: can't set config #4, error -71 [ 113.112985][ T10] usb 1-1: USB disconnect, device number 4 [ 113.144095][ T6252] netlink: 12 bytes leftover after parsing attributes in process `syz.1.96'. [ 113.225603][ T6252] netlink: 8 bytes leftover after parsing attributes in process `syz.1.96'. [ 114.437184][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 114.919575][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 114.974809][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 115.001868][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 116.213128][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 116.238793][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 116.869571][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 116.889562][ T10] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 116.901400][ T10] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 116.922930][ T10] usb 1-1: Manufacturer: syz [ 116.931240][ T10] usb 1-1: config 0 descriptor?? [ 118.248755][ T6323] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 118.393076][ T10] rc_core: IR keymap rc-hauppauge not found [ 118.399028][ T10] Registered IR keymap rc-empty [ 118.431511][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 118.483005][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 118.534987][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 118.762255][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input5 [ 119.772777][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 120.181938][ T30] audit: type=1326 audit(1747421960.758:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6345 comm="syz.3.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f228598e969 code=0x7ffc0000 [ 120.205585][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 120.253375][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 120.283076][ T30] audit: type=1326 audit(1747421960.788:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6345 comm="syz.3.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f228598e969 code=0x7ffc0000 [ 120.323614][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 120.363487][ T30] audit: type=1326 audit(1747421960.788:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6345 comm="syz.3.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f228598e969 code=0x7ffc0000 [ 120.384927][ T30] audit: type=1326 audit(1747421960.788:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6345 comm="syz.3.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f228598e969 code=0x7ffc0000 [ 120.407619][ T6350] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 120.413026][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 120.423172][ T30] audit: type=1326 audit(1747421960.788:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6345 comm="syz.3.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7f228598e969 code=0x7ffc0000 [ 120.672417][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 120.679698][ T30] audit: type=1326 audit(1747421960.788:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6345 comm="syz.3.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f228598e969 code=0x7ffc0000 [ 120.701148][ T30] audit: type=1326 audit(1747421960.788:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6345 comm="syz.3.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f228598e969 code=0x7ffc0000 [ 120.728743][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 120.773068][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 121.763577][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 121.783627][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 121.856676][ T10] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 121.895070][ T10] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 121.963269][ T10] usb 1-1: USB disconnect, device number 5 [ 123.293770][ T6385] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3781544950 (3781544950 ns) > initial count (699260337 ns). Using initial count to start timer. [ 123.773095][ T47] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 123.856142][ T6392] netlink: 'syz.4.136': attribute type 4 has an invalid length. [ 123.907909][ T6392] netlink: 'syz.4.136': attribute type 4 has an invalid length. [ 123.910859][ T6394] binder: BINDER_SET_CONTEXT_MGR already set [ 123.933001][ T6394] binder: 6393:6394 ioctl 4018620d 200000000040 returned -16 [ 123.987786][ T6394] binder: 6393:6394 ioctl c0306201 200000001a80 returned -11 [ 124.029831][ T47] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.050744][ T47] usb 3-1: config 0 has no interfaces? [ 124.064882][ T47] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 124.098997][ T47] usb 3-1: New USB device strings: Mfr=223, Product=2, SerialNumber=3 [ 124.128430][ T47] usb 3-1: Product: syz [ 124.132658][ T47] usb 3-1: Manufacturer: syz [ 124.171335][ T47] usb 3-1: SerialNumber: syz [ 124.197982][ T47] usb 3-1: config 0 descriptor?? [ 126.396708][ T5868] usb 3-1: USB disconnect, device number 2 [ 129.323469][ T6460] netlink: 76 bytes leftover after parsing attributes in process `syz.3.155'. [ 131.908331][ T6493] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 131.931418][ T6493] UDF-fs: Scanning with blocksize 512 failed [ 131.938961][ T6493] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 131.947892][ T6493] UDF-fs: Scanning with blocksize 1024 failed [ 131.955802][ T6493] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 131.976832][ T6493] UDF-fs: Scanning with blocksize 2048 failed [ 132.199934][ T6493] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 132.217921][ T6493] UDF-fs: Scanning with blocksize 4096 failed [ 132.817108][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.863612][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.373027][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 135.564191][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 135.595801][ T10] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 135.635893][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.830561][ T10] usb 1-1: Product: syz [ 135.834995][ T10] usb 1-1: Manufacturer: syz [ 135.839625][ T10] usb 1-1: SerialNumber: syz [ 135.853828][ T10] usb 1-1: config 0 descriptor?? [ 135.863159][ T10] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 135.900479][ T6549] warning: `syz.1.183' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 135.916337][ T6550] tipc: Started in network mode [ 135.921715][ T6550] tipc: Node identity 3a28edaeb125, cluster identity 4711 [ 135.932013][ T6550] tipc: Enabled bearer , priority 0 [ 136.007324][ T6550] syzkaller0: entered promiscuous mode [ 136.052334][ T6550] syzkaller0: entered allmulticast mode [ 136.526411][ T6550] tipc: Resetting bearer [ 136.574507][ T6547] tipc: Resetting bearer [ 136.680451][ T6547] tipc: Disabling bearer [ 137.024155][ T5869] tipc: Node number set to 2332945838 [ 138.293198][ T5868] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 138.554318][ T5868] usb 3-1: Using ep0 maxpacket: 8 [ 138.599191][ T5868] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 138.782087][ T5868] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 138.792639][ T5868] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 138.803391][ T5868] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 138.814327][ T5868] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 138.829313][ T5868] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 138.838811][ T5868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.986987][ T10] gspca_sonixj: reg_w1 err -71 [ 139.023115][ T10] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 139.104984][ T5868] usb 3-1: usb_control_msg returned -32 [ 139.113260][ T10] usb 1-1: USB disconnect, device number 6 [ 139.126121][ T5868] usbtmc 3-1:16.0: can't read capabilities [ 140.862620][ T6591] netlink: 192 bytes leftover after parsing attributes in process `syz.0.195'. [ 141.032924][ T5868] usb 3-1: USB disconnect, device number 3 [ 143.249285][ T6615] netlink: 4 bytes leftover after parsing attributes in process `syz.2.199'. [ 143.754091][ T6632] bridge0: entered promiscuous mode [ 143.772611][ T6632] vlan2: entered promiscuous mode [ 147.932406][ T30] audit: type=1800 audit(1747421988.508:9): pid=6686 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.219" name="/" dev="9p" ino=2 res=0 errno=0 [ 148.028969][ T6686] syz.3.219 (6686) used greatest stack depth: 19496 bytes left [ 148.403021][ T6695] xt_socket: unknown flags 0x40 [ 151.418180][ T6708] ======================================================= [ 151.418180][ T6708] WARNING: The mand mount option has been deprecated and [ 151.418180][ T6708] and is ignored by this kernel. Remove the mand [ 151.418180][ T6708] option from the mount to silence this warning. [ 151.418180][ T6708] ======================================================= [ 151.453101][ C0] vkms_vblank_simulate: vblank timer overrun [ 151.465641][ T47] kernel write not supported for file /203/net/sockstat (pid: 47 comm: kworker/1:1) [ 151.514521][ T6710] binder_alloc: 6709: binder_alloc_buf, no vma [ 151.902998][ T47] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 152.766632][ T47] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.811840][ T47] usb 5-1: config 0 interface 0 has no altsetting 0 [ 152.851087][ T47] usb 5-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00 [ 152.906914][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.940034][ T47] usb 5-1: config 0 descriptor?? [ 153.724815][ T47] logitech-djreceiver 0003:046D:C532.0001: unknown main item tag 0x0 [ 153.913889][ T47] logitech-djreceiver 0003:046D:C532.0001: unknown main item tag 0x0 [ 153.949081][ T47] logitech-djreceiver 0003:046D:C532.0001: unknown main item tag 0x0 [ 153.967165][ T47] logitech-djreceiver 0003:046D:C532.0001: unknown main item tag 0x0 [ 154.033249][ T47] usb 5-1: USB disconnect, device number 3 [ 158.902997][ T6774] netlink: 'syz.2.243': attribute type 21 has an invalid length. [ 159.122639][ T6774] netlink: 156 bytes leftover after parsing attributes in process `syz.2.243'. [ 159.317423][ T2962] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.532460][ T2962] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.697520][ T2962] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.861477][ T2962] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.929319][ T6782] batman_adv: batadv0: Adding interface: dummy0 [ 159.958458][ T6782] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.000194][ T6782] batman_adv: batadv0: Interface activated: dummy0 [ 160.085310][ T6786] batadv0: mtu less than device minimum [ 160.103199][ T6786] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 160.115439][ T6786] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 160.127406][ T6786] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 160.139373][ T6786] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 160.151279][ T6786] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 160.163250][ T6786] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 160.175182][ T6786] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 160.187067][ T6786] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 160.199009][ T6786] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 160.533252][ T2962] bridge_slave_1: left allmulticast mode [ 160.539192][ T2962] bridge_slave_1: left promiscuous mode [ 160.572723][ T2962] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.666842][ T6798] atomic_op ffff888059952198 conn xmit_atomic 0000000000000000 [ 161.102051][ T5129] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 161.119822][ T5129] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 161.130917][ T5129] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 161.140163][ T5129] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 161.148905][ T2962] bridge_slave_0: left allmulticast mode [ 161.195631][ T2962] bridge_slave_0: left promiscuous mode [ 161.201636][ T2962] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.266466][ T5129] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 163.183062][ T2962] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 163.208315][ T2962] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 163.240337][ T2962] bond0 (unregistering): Released all slaves [ 163.280923][ T6824] sch_tbf: burst 1885 is lower than device lo mtu (65550) ! [ 163.353222][ T5129] Bluetooth: hci3: command tx timeout [ 163.392933][ T6829] netlink: 12 bytes leftover after parsing attributes in process `syz.1.259'. [ 163.655952][ T6847] netlink: 'syz.1.262': attribute type 21 has an invalid length. [ 163.724672][ T6849] netlink: 'syz.1.262': attribute type 21 has an invalid length. [ 164.354849][ T6847] netlink: 'syz.1.262': attribute type 6 has an invalid length. [ 164.370089][ T6847] netlink: 132 bytes leftover after parsing attributes in process `syz.1.262'. [ 164.400968][ T6849] netlink: 'syz.1.262': attribute type 6 has an invalid length. [ 164.572058][ T6849] netlink: 132 bytes leftover after parsing attributes in process `syz.1.262'. [ 164.614818][ T6849] Zero length message leads to an empty skb [ 165.443065][ T5129] Bluetooth: hci3: command tx timeout [ 165.513218][ T5129] Bluetooth: hci1: command tx timeout [ 167.205613][ T6882] netlink: 4 bytes leftover after parsing attributes in process `syz.3.269'. [ 167.515687][ T5129] Bluetooth: hci3: command tx timeout [ 168.314134][ T2962] hsr_slave_0: left promiscuous mode [ 168.320467][ T2962] hsr_slave_1: left promiscuous mode [ 168.326670][ T2962] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.343730][ T2962] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.375031][ T2962] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.382479][ T2962] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.437080][ T6901] netlink: 8 bytes leftover after parsing attributes in process `syz.0.273'. [ 168.462052][ T2962] veth1_macvtap: left promiscuous mode [ 168.469082][ T2962] veth0_macvtap: left promiscuous mode [ 168.482957][ T2962] veth1_vlan: left promiscuous mode [ 168.491331][ T2962] veth0_vlan: left promiscuous mode [ 169.077975][ T2962] team0 (unregistering): Port device team_slave_1 removed [ 169.128878][ T2962] team0 (unregistering): Port device team_slave_0 removed [ 169.633057][ T5129] Bluetooth: hci3: command tx timeout [ 170.302706][ T6882] team0: Port device team_slave_0 removed [ 170.494255][ T5129] Bluetooth: hci0: command 0x0c1a tx timeout [ 170.895982][ T6901] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.905082][ T6901] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.318125][ T5129] Bluetooth: Wrong link type (-71) [ 171.763322][ T5870] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 171.860641][ T6797] chnl_net:caif_netlink_parms(): no params data found [ 171.938051][ T5870] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 171.998765][ T5870] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 172.048151][ T5870] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 172.059485][ T6933] netlink: 12 bytes leftover after parsing attributes in process `syz.3.282'. [ 172.073028][ T5870] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.093477][ T6927] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 172.104982][ T5870] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 172.145062][ T6939] netlink: 16 bytes leftover after parsing attributes in process `syz.3.282'. [ 172.442975][ T6927] af_packet: tpacket_rcv: packet too big, clamped from 18 to 4294967272. macoff=96 [ 172.514977][ T6946] netlink: 'syz.2.283': attribute type 27 has an invalid length. [ 173.022211][ T6942] net_ratelimit: 10 callbacks suppressed [ 173.022232][ T6942] A link change request failed with some changes committed already. Interface nlmon0 may have been left with an inconsistent configuration, please check. [ 173.547895][ T5869] usb 1-1: USB disconnect, device number 7 [ 173.732581][ T6933] 8021q: adding VLAN 0 to HW filter on device bond1 [ 173.754454][ T6797] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.774525][ T6797] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.792547][ T6797] bridge_slave_0: entered allmulticast mode [ 173.920911][ T6797] bridge_slave_0: entered promiscuous mode [ 173.934170][ T6797] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.948213][ T6797] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.210343][ T6797] bridge_slave_1: entered allmulticast mode [ 174.230903][ T6797] bridge_slave_1: entered promiscuous mode [ 177.875910][ T6797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.957373][ T6797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.050903][ T6797] team0: Port device team_slave_0 added [ 179.249187][ T6797] team0: Port device team_slave_1 added [ 180.380100][ T6797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 180.450238][ T6797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.551483][ T6797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 180.608837][ T6797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 180.655941][ T6797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.767087][ T6797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 182.959767][ T6797] hsr_slave_0: entered promiscuous mode [ 183.085771][ T6797] hsr_slave_1: entered promiscuous mode [ 183.120854][ T6797] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 183.200906][ T6797] Cannot create hsr debugfs directory [ 183.451557][ T7024] netlink: 108 bytes leftover after parsing attributes in process `syz.3.300'. [ 183.460610][ T7024] netlink: 108 bytes leftover after parsing attributes in process `syz.3.300'. [ 183.469601][ T7024] netlink: 108 bytes leftover after parsing attributes in process `syz.3.300'. [ 185.534107][ T7051] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 186.703082][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 186.768198][ T7056] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.780265][ T7056] batadv_slave_0: entered promiscuous mode [ 186.856433][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 186.888827][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 186.915563][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 186.944562][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 186.980764][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.997658][ T10] usb 2-1: Product: syz [ 187.156591][ T10] usb 2-1: Manufacturer: syz [ 187.167350][ T10] usb 2-1: SerialNumber: syz [ 187.239420][ T7067] mmap: syz.3.307 (7067) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 187.982462][ T6797] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 187.991033][ T10] usb 2-1: 0:2 : does not exist [ 188.049050][ T6797] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 188.063759][ T10] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 188.090721][ T5129] Bluetooth: hci0: unexpected event for opcode 0x080b [ 188.157023][ T6797] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 188.209457][ T6797] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 188.222993][ T10] usb 2-1: USB disconnect, device number 3 [ 188.294646][ T5870] libceph: connect (1)[c::]:6789 error -101 [ 188.306042][ T5870] libceph: mon0 (1)[c::]:6789 connect error [ 188.316892][ T5870] libceph: connect (1)[c::]:6789 error -101 [ 188.323142][ T5870] libceph: mon0 (1)[c::]:6789 connect error [ 188.408404][ T7071] udevd[7071]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 188.656665][ T10] libceph: connect (1)[c::]:6789 error -101 [ 188.662777][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 189.173370][ T7076] ceph: No mds server is up or the cluster is laggy [ 189.423300][ T5870] libceph: connect (1)[c::]:6789 error -101 [ 189.429322][ T5870] libceph: mon0 (1)[c::]:6789 connect error [ 189.711412][ T6797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.890673][ T6797] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.937192][ T6420] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.944399][ T6420] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.033683][ T3563] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.040919][ T3563] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.085306][ T7099] Illegal XDP return value 7099 on prog (id 72) dev N/A, expect packet loss! [ 190.366266][ T6797] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 192.154479][ T5129] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 192.189400][ T5129] Bluetooth: hci0: Injecting HCI hardware error event [ 192.197851][ T5129] Bluetooth: hci0: hardware error 0x00 [ 193.589154][ T6797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.649155][ T7140] netem: change failed [ 194.273908][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.300717][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.634953][ T30] audit: type=1326 audit(1747422036.218:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7161 comm="syz.3.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f228598e969 code=0x7ffc0000 [ 195.659655][ T30] audit: type=1326 audit(1747422036.238:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7161 comm="syz.3.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f228598e969 code=0x7ffc0000 [ 195.681847][ T30] audit: type=1326 audit(1747422036.238:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7161 comm="syz.3.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f228598e969 code=0x7ffc0000 [ 195.773948][ T30] audit: type=1326 audit(1747422036.238:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7161 comm="syz.3.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f228598e969 code=0x7ffc0000 [ 195.820509][ T6797] veth0_vlan: entered promiscuous mode [ 195.896832][ T6797] veth1_vlan: entered promiscuous mode [ 195.913564][ T30] audit: type=1326 audit(1747422036.238:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7161 comm="syz.3.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f228598e969 code=0x7ffc0000 [ 195.918270][ T5129] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 195.993547][ T30] audit: type=1326 audit(1747422036.238:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7161 comm="syz.3.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f228598e969 code=0x7ffc0000 [ 196.016739][ T30] audit: type=1326 audit(1747422036.238:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7161 comm="syz.3.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f228598e969 code=0x7ffc0000 [ 196.220613][ T6797] veth0_macvtap: entered promiscuous mode [ 196.228059][ T30] audit: type=1326 audit(1747422036.238:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7161 comm="syz.3.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f228598e969 code=0x7ffc0000 [ 196.251701][ T30] audit: type=1326 audit(1747422036.238:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7161 comm="syz.3.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f228598e969 code=0x7ffc0000 [ 196.301606][ T30] audit: type=1326 audit(1747422036.238:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7161 comm="syz.3.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f228598e969 code=0x7ffc0000 [ 196.995745][ T6797] veth1_macvtap: entered promiscuous mode [ 197.312816][ T6797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.326236][ T6797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.337081][ T6797] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.345972][ T6797] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.354905][ T6797] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.364109][ T6797] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.843134][ T3563] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.851005][ T3563] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.745290][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.841986][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.843286][ T5832] IPVS: starting estimator thread 0... [ 199.323275][ T7207] IPVS: using max 27 ests per chain, 64800 per kthread [ 199.422690][ T7209] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 199.548011][ T7209] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98 [ 200.969248][ T7233] tipc: Started in network mode [ 200.983315][ T7233] tipc: Node identity 6, cluster identity 4711 [ 201.001831][ T7233] tipc: Node number set to 6 [ 201.445440][ T5818] Bluetooth: hci1: command 0x0406 tx timeout [ 201.452002][ T5829] Bluetooth: hci2: command 0x0406 tx timeout [ 201.452020][ T5825] Bluetooth: hci4: command 0x0406 tx timeout [ 201.502054][ T7246] bond_slave_0: entered promiscuous mode [ 201.507954][ T7246] bond_slave_1: entered promiscuous mode [ 201.551536][ T7246] macsec1: entered promiscuous mode [ 201.583144][ T7246] bond0: entered promiscuous mode [ 201.644104][ T7246] bond0: left promiscuous mode [ 201.667522][ T7246] bond_slave_0: left promiscuous mode [ 201.673064][ T7246] bond_slave_1: left promiscuous mode [ 201.951189][ T7259] capability: warning: `syz.3.349' uses deprecated v2 capabilities in a way that may be insecure [ 206.381213][ T7312] fuseblk: Unknown parameter 'g roaÚzÑup00000000000000000000' [ 207.957623][ T5824] Bluetooth: hci4: unexpected Set CIG Parameters response data [ 207.966546][ T5824] Bluetooth: hci4: unexpected event for opcode 0x2062 [ 209.461983][ T7351] overlayfs: failed to clone upperpath [ 209.722971][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 209.722988][ T30] audit: type=1800 audit(1747422050.298:25): pid=7357 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.373" name="/" dev="9p" ino=2 res=0 errno=0 [ 210.012052][ T5824] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 211.771332][ T7391] netlink: 'syz.0.382': attribute type 4 has an invalid length. [ 211.881348][ T7393] netlink: 'syz.0.382': attribute type 4 has an invalid length. [ 212.032399][ T5824] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 212.053232][ T5824] Bluetooth: hci4: Injecting HCI hardware error event [ 212.319515][ T5824] Bluetooth: hci4: hardware error 0x00 [ 212.718193][ T30] audit: type=1326 audit(1747422053.298:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7384 comm="syz.0.382" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f89d338e969 code=0x0 [ 212.806975][ T7406] overlayfs: failed to clone upperpath [ 213.078598][ T7411] fuse: Bad value for 'fd' [ 214.906168][ T5824] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 215.497777][ T7437] tipc: Started in network mode [ 215.506320][ T7437] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 215.526260][ T7437] tipc: Enabled bearer , priority 10 [ 215.624167][ T7437] tipc: Resetting bearer [ 215.716940][ T7437] tipc: Disabling bearer [ 219.154143][ T7488] netlink: 48 bytes leftover after parsing attributes in process `syz.1.405'. [ 221.128440][ T5867] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 222.019808][ T5867] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 222.060852][ T5867] usb 6-1: config 0 has no interfaces? [ 222.077415][ T7517] netlink: 12 bytes leftover after parsing attributes in process `syz.3.410'. [ 222.147002][ T5867] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 222.219824][ T5867] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.298871][ T5867] usb 6-1: Product: syz [ 222.355358][ T5867] usb 6-1: Manufacturer: syz [ 222.360008][ T5867] usb 6-1: SerialNumber: syz [ 222.408268][ T5867] usb 6-1: config 0 descriptor?? [ 222.706481][ T5870] usb 6-1: USB disconnect, device number 2 [ 224.652457][ T7569] bridge1: entered allmulticast mode [ 224.842060][ T7569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.424'. [ 225.933485][ T7588] netlink: 40 bytes leftover after parsing attributes in process `syz.0.428'. [ 226.718431][ T7604] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 226.726650][ T7604] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 226.735575][ T7604] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 226.743557][ T7604] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 228.804631][ T7625] binder: 7624:7625 ioctl c0306201 200000001d40 returned -14 [ 230.793103][ T5870] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 231.498484][ T5870] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 231.532933][ T5870] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 231.545706][ T7656] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 231.553358][ T7656] IPv6: NLM_F_CREATE should be set when creating new route [ 231.560644][ T7656] IPv6: NLM_F_CREATE should be set when creating new route [ 231.593473][ T5870] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 231.608492][ T5870] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 231.629687][ T5870] usb 6-1: SerialNumber: syz [ 232.723712][ T5870] usb 6-1: 0:2 : does not exist [ 232.794266][ T5870] usb 6-1: USB disconnect, device number 3 [ 234.242270][ T7698] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 234.369387][ T7703] netlink: 8 bytes leftover after parsing attributes in process `syz.2.456'. [ 234.473962][ T7703] vlan3: entered promiscuous mode [ 234.483283][ T7703] vlan3: entered allmulticast mode [ 234.488662][ T7703] bridge0: entered allmulticast mode [ 238.364924][ T7733] netfs: Couldn't get user pages (rc=-14) [ 238.370860][ T7733] netfs: Zero-sized read [R=7] [ 241.179706][ T5867] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 241.333301][ T5867] usb 3-1: Using ep0 maxpacket: 16 [ 241.570732][ T5867] usb 3-1: config 0 has an invalid interface number: 126 but max is 0 [ 241.729940][ T5867] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.744889][ T5869] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 241.943459][ T5867] usb 3-1: config 0 has no interface number 0 [ 241.950896][ T5867] usb 3-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 242.535815][ T5867] usb 3-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 242.659591][ T5869] usb 2-1: Using ep0 maxpacket: 8 [ 242.669416][ T5867] usb 3-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 242.680936][ T5867] usb 3-1: config 0 interface 126 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 147 [ 242.702750][ T5869] usb 2-1: unable to get BOS descriptor or descriptor too short [ 242.724534][ T5867] usb 3-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 242.738593][ T5869] usb 2-1: config 7 has an invalid interface number: 87 but max is 0 [ 242.747137][ T5869] usb 2-1: config 7 has no interface number 0 [ 242.761618][ T5869] usb 2-1: config 7 interface 87 has no altsetting 0 [ 242.768704][ T5867] usb 3-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 242.822202][ T5869] usb 2-1: New USB device found, idVendor=12d1, idProduct=796e, bcdDevice=25.c0 [ 242.833187][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.841364][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.869023][ T5869] usb 2-1: Product: syz [ 242.874875][ T5867] usb 3-1: config 0 descriptor?? [ 242.892100][ T5869] usb 2-1: Manufacturer: syz [ 242.906439][ T5867] usb 3-1: can't set config #0, error -71 [ 242.914147][ T5869] usb 2-1: SerialNumber: syz [ 242.934819][ T5867] usb 3-1: USB disconnect, device number 4 [ 243.047392][ T7791] evm: overlay not supported [ 243.068077][ T5869] hub 2-1:7.87: bad descriptor, ignoring hub [ 243.096021][ T5869] hub 2-1:7.87: probe with driver hub failed with error -5 [ 243.124641][ T5869] option 2-1:7.87: GSM modem (1-port) converter detected [ 243.245703][ T5869] usb 2-1: USB disconnect, device number 4 [ 243.279169][ T5869] option 2-1:7.87: device disconnected [ 244.615765][ T7805] 9pnet_fd: Insufficient options for proto=fd [ 244.702629][ T7814] overlayfs: missing 'workdir' [ 245.386631][ T5824] Bluetooth: hci1: unexpected event for opcode 0x2003 [ 247.873232][ T5854] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 248.093104][ T5854] usb 6-1: Using ep0 maxpacket: 16 [ 248.136121][ T5854] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 248.604691][ T5854] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 248.643139][ T5854] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 248.674187][ T5854] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 248.699592][ T5854] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 248.764518][ T5854] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 248.813439][ T5854] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 248.821956][ T5854] usb 6-1: Manufacturer: syz [ 248.947684][ T5854] usb 6-1: config 0 descriptor?? [ 249.482955][ T5854] rc_core: IR keymap rc-hauppauge not found [ 249.683055][ T5854] Registered IR keymap rc-empty [ 249.688102][ T5854] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 249.773279][ T5854] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 249.813598][ T5854] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 250.338733][ T5854] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input6 [ 250.442712][ T5854] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 250.536414][ T5854] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 251.318156][ T5854] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 251.373721][ T5854] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 251.403055][ T5854] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 251.435831][ T5854] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 251.473045][ T5854] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 251.523237][ T5854] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 251.573053][ T5854] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 251.618482][ T5854] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 251.712512][ T5854] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 252.519713][ T5854] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 252.574438][ T5854] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 252.606230][ T7916] kvm: kvm [7915]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x5500000800 [ 252.664556][ T7916] kvm: kvm [7915]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x7100000800 [ 252.687938][ T5854] usb 6-1: USB disconnect, device number 4 [ 252.708871][ T7916] kvm: kvm [7915]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xa600000000 [ 252.729478][ T7930] sctp: [Deprecated]: syz.3.506 (pid 7930) Use of struct sctp_assoc_value in delayed_ack socket option. [ 252.729478][ T7930] Use struct sctp_sack_info instead [ 252.752614][ T7916] kvm: kvm [7915]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xb200000000 [ 253.044916][ T7945] Unknown options in mask 5 [ 253.450655][ T7957] overlayfs: failed to clone upperpath [ 253.624885][ T7959] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294967295 (34359738360 ns) > initial count (3800 ns). Using initial count to start timer. [ 254.474717][ T30] audit: type=1326 audit(1747422095.058:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7964 comm="syz.2.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df398e969 code=0x7ffc0000 [ 255.242217][ T5824] Bluetooth: hci3: link tx timeout [ 255.248863][ T5824] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 255.293046][ T30] audit: type=1326 audit(1747422095.058:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7964 comm="syz.2.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df398e969 code=0x7ffc0000 [ 255.677928][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.816403][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.229923][ T30] audit: type=1326 audit(1747422095.058:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7964 comm="syz.2.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f5df398e969 code=0x7ffc0000 [ 256.254127][ T30] audit: type=1326 audit(1747422095.058:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7964 comm="syz.2.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df398e969 code=0x7ffc0000 [ 256.275711][ T30] audit: type=1326 audit(1747422095.058:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7964 comm="syz.2.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df398e969 code=0x7ffc0000 [ 256.329230][ T30] audit: type=1326 audit(1747422095.088:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7964 comm="syz.2.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f5df398e969 code=0x7ffc0000 [ 256.400960][ T30] audit: type=1326 audit(1747422095.088:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7964 comm="syz.2.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df398e969 code=0x7ffc0000 [ 256.432945][ T30] audit: type=1326 audit(1747422095.088:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7964 comm="syz.2.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df398e969 code=0x7ffc0000 [ 256.462971][ T30] audit: type=1326 audit(1747422095.088:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7964 comm="syz.2.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7f5df398e969 code=0x7ffc0000 [ 256.486097][ T7990] netlink: 4 bytes leftover after parsing attributes in process `syz.2.521'. [ 256.495259][ T30] audit: type=1326 audit(1747422095.088:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7964 comm="syz.2.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df398e969 code=0x7ffc0000 [ 257.273014][ T5129] Bluetooth: hci3: command 0x0406 tx timeout [ 257.727418][ T8002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.523'. [ 257.804135][ T7990] team0 (unregistering): Port device team_slave_0 removed [ 257.848661][ T7990] team0 (unregistering): Port device team_slave_1 removed [ 258.193733][ T8002] team_slave_0: entered promiscuous mode [ 258.199716][ T8002] team_slave_1: entered promiscuous mode [ 258.235879][ T8002] macsec1: entered allmulticast mode [ 258.241933][ T8002] team0: entered allmulticast mode [ 258.247635][ T8002] team_slave_0: entered allmulticast mode [ 258.263503][ T8002] team_slave_1: entered allmulticast mode [ 258.328200][ T8002] team0: left allmulticast mode [ 258.349306][ T8002] team_slave_0: left allmulticast mode [ 258.367310][ T8002] team_slave_1: left allmulticast mode [ 258.381300][ T8002] team_slave_0: left promiscuous mode [ 258.386861][ T8002] team_slave_1: left promiscuous mode [ 262.886170][ T8067] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 263.516618][ T8067] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 264.954097][ T8086] vivid-000: disconnect [ 265.882459][ T8084] vivid-000: reconnect [ 265.955494][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 265.955506][ T30] audit: type=1326 audit(1747422106.538:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8089 comm="syz.0.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89d338e969 code=0x7ffc0000 [ 266.026349][ T30] audit: type=1326 audit(1747422106.608:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8089 comm="syz.0.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89d338e969 code=0x7ffc0000 [ 266.078000][ T30] audit: type=1326 audit(1747422106.608:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8089 comm="syz.0.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f89d338e969 code=0x7ffc0000 [ 266.149275][ T30] audit: type=1326 audit(1747422106.608:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8089 comm="syz.0.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89d338e969 code=0x7ffc0000 [ 266.289492][ T30] audit: type=1326 audit(1747422106.608:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8089 comm="syz.0.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f89d338e969 code=0x7ffc0000 [ 266.395754][ T8096] afs: Unknown parameter 'measure' [ 266.457537][ T30] audit: type=1326 audit(1747422106.608:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8089 comm="syz.0.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89d338e969 code=0x7ffc0000 [ 266.474396][ T8099] wlan0 speed is unknown, defaulting to 1000 [ 266.483536][ T30] audit: type=1326 audit(1747422106.628:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8089 comm="syz.0.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f89d338e969 code=0x7ffc0000 [ 266.516503][ T8099] wlan0 speed is unknown, defaulting to 1000 [ 266.599160][ T30] audit: type=1326 audit(1747422106.658:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8089 comm="syz.0.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89d338e969 code=0x7ffc0000 [ 266.614603][ T8099] wlan0 speed is unknown, defaulting to 1000 [ 266.711482][ T5824] Bluetooth: hci3: Unable to find connection for big 0x14 [ 266.842716][ T30] audit: type=1326 audit(1747422106.678:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8089 comm="syz.0.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f89d338e969 code=0x7ffc0000 [ 266.954843][ T30] audit: type=1326 audit(1747422106.678:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8089 comm="syz.0.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89d338e969 code=0x7ffc0000 [ 266.994579][ T8099] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 267.608318][ T8109] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 267.833635][ T8099] wlan0 speed is unknown, defaulting to 1000 [ 267.841856][ T8099] wlan0 speed is unknown, defaulting to 1000 [ 267.885175][ T8099] wlan0 speed is unknown, defaulting to 1000 [ 267.901519][ T8099] wlan0 speed is unknown, defaulting to 1000 [ 267.936280][ T8099] wlan0 speed is unknown, defaulting to 1000 [ 268.194450][ T8116] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 268.258382][ T8119] netlink: 'syz.1.551': attribute type 4 has an invalid length. [ 268.344367][ T8121] overlayfs: failed to clone upperpath [ 268.545689][ T8127] netlink: 4 bytes leftover after parsing attributes in process `syz.1.554'. [ 270.724272][ T5824] Bluetooth: hci3: unexpected event for opcode 0x2016 [ 270.754890][ T8143] xt_ecn: cannot match TCP bits for non-tcp packets [ 272.447897][ T8174] ip6t_REJECT: ECHOREPLY is not supported [ 273.682561][ T8182] overlayfs: failed to resolve './file1': -2 [ 275.068848][ T5824] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 275.078444][ T5824] Bluetooth: hci3: Injecting HCI hardware error event [ 275.088754][ T5824] Bluetooth: hci3: hardware error 0x00 [ 276.903447][ T8208] netlink: 8 bytes leftover after parsing attributes in process `syz.5.575'. [ 277.980352][ T5824] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 278.078865][ T5892] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 278.161439][ T8220] netlink: 24 bytes leftover after parsing attributes in process `syz.1.582'. [ 278.412915][ T5892] usb 6-1: Using ep0 maxpacket: 16 [ 278.458004][ T5892] usb 6-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 278.475149][ T8216] syz.2.578 (8216): drop_caches: 2 [ 278.493102][ T5892] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 278.515384][ T8232] siw: device registration error -23 [ 278.527457][ T5824] Bluetooth: hci2: Unable to find connection for big 0x14 [ 278.539623][ T5892] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 278.548913][ T5892] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.557009][ T5892] usb 6-1: Product: syz [ 278.561369][ T5892] usb 6-1: Manufacturer: syz [ 278.566091][ T5892] usb 6-1: SerialNumber: syz [ 278.787718][ T5892] usb 6-1: 0:2 : does not exist [ 278.817773][ T5892] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 279.108681][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 279.108724][ T30] audit: type=1326 audit(1747422119.678:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8240 comm="syz.3.588" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f228598e969 code=0x0 [ 280.758576][ T5892] usb 6-1: USB disconnect, device number 5 [ 280.907141][ T7071] udevd[7071]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 283.538627][ T8263] netlink: 24 bytes leftover after parsing attributes in process `syz.0.595'. [ 284.193911][ T5870] hid-generic 002F:0004:0007.0002: unknown main item tag 0x0 [ 284.213882][ T5870] hid-generic 002F:0004:0007.0002: unknown main item tag 0x0 [ 284.221435][ T5870] hid-generic 002F:0004:0007.0002: unknown main item tag 0x0 [ 284.523160][ T5870] hid-generic 002F:0004:0007.0002: unknown main item tag 0x0 [ 284.672928][ T5870] hid-generic 002F:0004:0007.0002: unknown main item tag 0x0 [ 284.721349][ T5870] hid-generic 002F:0004:0007.0002: unknown main item tag 0x0 [ 284.749971][ T5870] hid-generic 002F:0004:0007.0002: unknown main item tag 0x0 [ 284.803192][ T5870] hid-generic 002F:0004:0007.0002: unknown main item tag 0x0 [ 284.828873][ T5870] hid-generic 002F:0004:0007.0002: unknown main item tag 0x0 [ 284.852921][ T5870] hid-generic 002F:0004:0007.0002: unknown main item tag 0x0 [ 284.860368][ T5870] hid-generic 002F:0004:0007.0002: unknown main item tag 0x0 [ 284.911170][ T5870] hid-generic 002F:0004:0007.0002: unknown main item tag 0x0 [ 284.946021][ T5870] hid-generic 002F:0004:0007.0002: unknown main item tag 0x0 [ 284.969112][ T5870] hid-generic 002F:0004:0007.0002: unknown main item tag 0x0 [ 285.008658][ T5870] hid-generic 002F:0004:0007.0002: unknown main item tag 0x0 [ 285.255037][ T5870] hid-generic 002F:0004:0007.0002: hidraw0: HID v0.05 Device [syz1] on syz1 [ 285.458504][ T8278] vlan0: entered allmulticast mode [ 285.620010][ T8278] bond0: entered allmulticast mode [ 285.647975][ T8278] bond_slave_0: entered allmulticast mode [ 285.683346][ T8278] bond_slave_1: entered allmulticast mode [ 285.691290][ T8278] bridge0: port 3(vlan0) entered blocking state [ 285.701343][ T8278] bridge0: port 3(vlan0) entered disabled state [ 285.710843][ T8278] vlan0: entered promiscuous mode [ 285.846823][ T8278] bond0: entered promiscuous mode [ 285.864409][ T8282] fido_id[8282]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 285.903845][ T8278] bond_slave_0: entered promiscuous mode [ 285.909767][ T8278] bond_slave_1: entered promiscuous mode [ 285.960984][ T30] audit: type=1326 audit(1747422126.538:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8287 comm="syz.3.603" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f228598e969 code=0x0 [ 292.593716][ T8349] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 292.625078][ T8349] overlayfs: missing 'lowerdir' [ 294.946648][ T8374] netlink: 'syz.0.630': attribute type 4 has an invalid length. [ 295.963935][ T8387] netlink: 24 bytes leftover after parsing attributes in process `syz.2.634'. [ 296.353095][ T5868] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 297.378756][ T8400] xt_hashlimit: size too large, truncated to 1048576 [ 298.000567][ T5868] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.022915][ T5868] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.032721][ T5868] usb 1-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 298.096087][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.548011][ T5868] usb 1-1: config 0 descriptor?? [ 298.897573][ T8407] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 298.907329][ T8407] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 298.917049][ T8407] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 298.925838][ T8407] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 299.314715][ T8407] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 301.090718][ T5868] usbhid 1-1:0.0: can't add hid device: -71 [ 302.071778][ T5868] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 302.328471][ T5868] usb 1-1: USB disconnect, device number 8 [ 307.130527][ T8482] loop5: detected capacity change from 0 to 1 [ 308.667658][ T5892] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 309.198640][ T5892] usb 2-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.290431][ T5892] usb 2-1: config 0 interface 0 has no altsetting 0 [ 309.362989][ T5892] usb 2-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 309.407316][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.448929][ T5892] usb 2-1: config 0 descriptor?? [ 310.413289][ T8510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.453482][ T8510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.545325][ T8513] netlink: 'syz.3.667': attribute type 4 has an invalid length. [ 310.566348][ T8513] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.667'. [ 311.941497][ T5892] usbhid 2-1:0.0: can't add hid device: -71 [ 311.979093][ T8529] fuse: Invalid rootmode [ 312.148476][ T5892] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 312.160351][ T5892] usb 2-1: USB disconnect, device number 5 [ 314.681682][ T8560] netlink: 16 bytes leftover after parsing attributes in process `syz.3.680'. [ 317.142955][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.149307][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.425023][ T8582] xt_limit: Overflow, try lower: 687865856/40 [ 318.560146][ T8591] input: syz1 as /devices/virtual/input/input7 [ 321.194436][ T8626] netlink: 'syz.2.701': attribute type 12 has an invalid length. [ 322.638154][ T8639] wlan0 speed is unknown, defaulting to 1000 [ 324.360383][ T8660] netlink: 'syz.1.711': attribute type 10 has an invalid length. [ 324.452113][ T8660] team0: Device hsr_slave_0 failed to register rx_handler [ 326.842386][ T8692] netlink: 4 bytes leftover after parsing attributes in process `syz.5.723'. [ 326.898221][ T8691] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.907359][ T8691] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.916275][ T8691] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.925079][ T8691] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.937393][ T8691] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 326.950023][ T8692] bridge_slave_1: left allmulticast mode [ 326.957325][ T8692] bridge_slave_1: left promiscuous mode [ 326.966243][ T8692] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.981033][ T8692] bridge_slave_0: left allmulticast mode [ 326.989119][ T8692] bridge_slave_0: left promiscuous mode [ 326.995726][ T8692] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.003004][ T47] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 327.852801][ T47] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 327.872598][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.904021][ T47] usb 1-1: Product: syz [ 327.917938][ T47] usb 1-1: Manufacturer: syz [ 328.113021][ T47] usb 1-1: SerialNumber: syz [ 328.978585][ T47] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 330.050828][ T5868] usb 1-1: USB disconnect, device number 9 [ 331.057709][ T5868] usblp0: removed [ 331.275914][ T8722] syz.0.732 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 331.328265][ T8724] xt_CT: You must specify a L4 protocol and not use inversions on it [ 333.582064][ T8739] fuse: Unknown parameter 'QO V¢òÿ' [ 335.069160][ T8755] netlink: 28 bytes leftover after parsing attributes in process `syz.3.740'. [ 335.143087][ T8755] netlink: 28 bytes leftover after parsing attributes in process `syz.3.740'. [ 335.175059][ T8741] wlan0 speed is unknown, defaulting to 1000 [ 335.244012][ T8759] capability: warning: `syz.1.742' uses 32-bit capabilities (legacy support in use) [ 336.428648][ T8755] bond0: entered promiscuous mode [ 336.463251][ T8755] bond_slave_0: entered promiscuous mode [ 336.469191][ T8755] bond_slave_1: entered promiscuous mode [ 336.525214][ T8755] bond0: left promiscuous mode [ 336.604508][ T8755] bond_slave_0: left promiscuous mode [ 336.610251][ T8755] bond_slave_1: left promiscuous mode [ 337.222123][ T5868] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 337.413132][ T5868] usb 2-1: config 0 has an invalid interface number: 109 but max is 0 [ 337.441082][ T5868] usb 2-1: config 0 has no interface number 0 [ 337.457566][ T5868] usb 2-1: config 0 interface 109 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 337.642950][ T5868] usb 2-1: New USB device found, idVendor=100d, idProduct=cb01, bcdDevice=84.d1 [ 337.653691][ T5868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.851762][ T5868] usb 2-1: config 0 descriptor?? [ 340.849003][ T5868] usb 2-1: can't set config #0, error -71 [ 340.888653][ T5868] usb 2-1: USB disconnect, device number 6 [ 343.805757][ T8812] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 345.295775][ T30] audit: type=1326 audit(1747422185.848:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8828 comm="syz.3.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f228598e969 code=0x7fc00000 [ 346.944132][ T5854] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 347.298158][ T5854] usb 1-1: Using ep0 maxpacket: 16 [ 347.443273][ T5854] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 347.473001][ T5854] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 347.483581][ T5854] usb 1-1: config 0 has no interface number 0 [ 347.496790][ T5854] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 347.506556][ T5854] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.515194][ T5854] usb 1-1: Product: syz [ 347.522972][ T5854] usb 1-1: Manufacturer: syz [ 347.532939][ T5854] usb 1-1: SerialNumber: syz [ 347.544826][ T5854] usb 1-1: config 0 descriptor?? [ 347.571823][ T5854] asix 1-1:0.251: probe with driver asix failed with error -22 [ 348.605201][ T5854] usb 1-1: USB disconnect, device number 10 [ 352.144364][ T8887] netlink: 'syz.1.778': attribute type 4 has an invalid length. [ 353.453101][ T47] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 353.885937][ T8916] wlan0 speed is unknown, defaulting to 1000 [ 354.319314][ T47] usb 2-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b [ 354.333015][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.361112][ T47] usb 2-1: Product: syz [ 354.373038][ T47] usb 2-1: Manufacturer: syz [ 354.379787][ T47] usb 2-1: SerialNumber: syz [ 355.012021][ T47] gspca_main: pac207-2.14.0 probing 093a:2476 [ 355.092419][ T47] gspca_pac207: Failed to read a register (index 0x0000, error -71) [ 355.154902][ T47] usb 2-1: Found UVC 0.00 device syz (093a:2476) [ 355.162762][ T47] usb 2-1: No valid video chain found. [ 355.266417][ T47] usb 2-1: USB disconnect, device number 7 [ 356.740689][ T8947] netlink: 8 bytes leftover after parsing attributes in process `syz.1.795'. [ 356.806678][ T8950] xt_limit: Overflow, try lower: 687865856/40 [ 362.319177][ T5854] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 362.433385][ T5892] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 363.256985][ T5892] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 363.327417][ T5892] usb 1-1: can't read configurations, error -71 [ 365.908424][ T5854] usb 2-1: unable to get BOS descriptor or descriptor too short [ 365.935384][ T5854] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 366.047215][ T5854] usb 2-1: can't read configurations, error -71 [ 368.822461][ T30] audit: type=1326 audit(1747422209.398:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9049 comm="syz.5.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a8d8e969 code=0x7ffc0000 [ 368.869277][ T30] audit: type=1326 audit(1747422209.398:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9049 comm="syz.5.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f25a8d8e969 code=0x7ffc0000 [ 368.914749][ T30] audit: type=1326 audit(1747422209.408:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9049 comm="syz.5.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a8d8e969 code=0x7ffc0000 [ 368.941094][ T30] audit: type=1326 audit(1747422209.408:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9049 comm="syz.5.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a8d8e969 code=0x7ffc0000 [ 369.038918][ T30] audit: type=1326 audit(1747422209.408:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9049 comm="syz.5.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f25a8d8e969 code=0x7ffc0000 [ 369.076887][ T30] audit: type=1326 audit(1747422209.408:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9049 comm="syz.5.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a8d8e969 code=0x7ffc0000 [ 369.122943][ T30] audit: type=1326 audit(1747422209.408:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9049 comm="syz.5.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a8d8e969 code=0x7ffc0000 [ 369.492952][ T30] audit: type=1326 audit(1747422209.408:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9049 comm="syz.5.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f25a8d8e969 code=0x7ffc0000 [ 370.369922][ T30] audit: type=1326 audit(1747422209.408:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9049 comm="syz.5.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a8d8e969 code=0x7ffc0000 [ 370.466669][ T30] audit: type=1326 audit(1747422209.408:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9049 comm="syz.5.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a8d8e969 code=0x7ffc0000 [ 371.026842][ T9066] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 371.254806][ T9078] smc: net device bond0 applied user defined pnetid SYZ2 [ 374.383369][ T9104] No such timeout policy "syz1" [ 375.246648][ C1] Unknown status report in ack skb [ 376.224372][ T9123] netlink: 'syz.1.839': attribute type 83 has an invalid length. [ 376.594708][ T9125] syz.0.835 (9125): drop_caches: 2 [ 378.661100][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.667494][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.403282][ T5867] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 381.353106][ T47] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 382.084202][ T5867] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 382.094979][ T5867] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 382.104791][ T5867] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 382.121368][ T5867] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.134021][ T5867] usb 6-1: config 0 descriptor?? [ 382.259147][ T5867] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 382.324507][ T5867] dvb-usb: bulk message failed: -22 (3/0) [ 382.342968][ T47] usb 2-1: Using ep0 maxpacket: 32 [ 382.381005][ T47] usb 2-1: unable to get BOS descriptor or descriptor too short [ 382.413285][ T5867] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 382.429080][ T47] usb 2-1: config 56 has an invalid interface number: 121 but max is 0 [ 382.440159][ T5867] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 382.448166][ T47] usb 2-1: config 56 has an invalid descriptor of length 0, skipping remainder of the config [ 382.459249][ T5867] usb 6-1: media controller created [ 382.466807][ T47] usb 2-1: config 56 has no interface number 0 [ 382.478029][ T5867] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 382.492924][ T47] usb 2-1: config 56 interface 121 altsetting 224 has an endpoint descriptor with address 0xAE, changing to 0x8E [ 382.518946][ T47] usb 2-1: config 56 interface 121 altsetting 224 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 382.538810][ T9169] IPVS: set_ctl: invalid protocol: 94 224.0.0.1:20000 [ 382.547944][ T5867] dvb-usb: bulk message failed: -22 (6/0) [ 382.563798][ T47] usb 2-1: config 56 interface 121 has no altsetting 0 [ 382.572373][ T5867] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 382.572610][ T9169] dvb-usb: bulk message failed: -22 (4/0) [ 382.593144][ T5867] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input8 [ 382.623172][ T47] usb 2-1: New USB device found, idVendor=12d1, idProduct=f0ae, bcdDevice=53.1b [ 382.643599][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.653843][ T9188] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 382.661091][ T9188] IPv6: NLM_F_CREATE should be set when creating new route [ 383.206141][ T9197] netlink: 12 bytes leftover after parsing attributes in process `syz.2.858'. [ 383.408098][ T47] usb 2-1: Product: syz [ 383.547500][ T47] usb 2-1: Manufacturer: syz [ 383.666761][ T5867] dvb-usb: schedule remote query interval to 150 msecs. [ 383.686311][ T47] usb 2-1: SerialNumber: syz [ 383.702242][ T5867] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 383.756343][ T5867] usb 6-1: USB disconnect, device number 6 [ 384.063950][ T47] option 2-1:56.121: GSM modem (1-port) converter detected [ 384.136820][ T5867] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 384.205035][ T47] usb 2-1: USB disconnect, device number 10 [ 384.258783][ T47] option 2-1:56.121: device disconnected [ 385.500519][ T9246] vxfs: WRONG superblock magic 00000000 at 1 [ 385.562352][ T9246] vxfs: WRONG superblock magic 00000000 at 8 [ 385.590755][ T9246] vxfs: can't find superblock. [ 385.773469][ T9254] random: crng reseeded on system resumption [ 388.429222][ T9275] netlink: 4 bytes leftover after parsing attributes in process `syz.2.871'. [ 393.884119][ T9308] ptrace attach of "./syz-executor exec"[6797] was attempted by "./syz-executor exec"[9308] [ 397.744026][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 397.744043][ T30] audit: type=1326 audit(1747422238.318:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9326 comm="syz.1.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93e298e969 code=0x7ffc0000 [ 397.813470][ T30] audit: type=1326 audit(1747422238.318:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9326 comm="syz.1.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93e298e969 code=0x7ffc0000 [ 398.320310][ T30] audit: type=1326 audit(1747422238.328:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9326 comm="syz.1.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=445 compat=0 ip=0x7f93e298e969 code=0x7ffc0000 [ 398.342638][ T30] audit: type=1326 audit(1747422238.328:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9326 comm="syz.1.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93e298e969 code=0x7ffc0000 [ 398.467784][ T30] audit: type=1326 audit(1747422238.328:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9326 comm="syz.1.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93e298e969 code=0x7ffc0000 [ 400.741549][ T9360] netlink: 'syz.1.894': attribute type 10 has an invalid length. [ 400.911923][ T9360] syz_tun: entered promiscuous mode [ 401.597894][ T9360] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 402.124807][ T5867] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 403.283110][ T5867] usb 6-1: config 0 interface 0 has no altsetting 0 [ 403.289800][ T5867] usb 6-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 403.337617][ T5867] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.396962][ T5867] usb 6-1: config 0 descriptor?? [ 404.365637][ T5867] (null): keene_cmd_main failed (-110) [ 404.957496][ T5867] video4linux radio48: keene_cmd_main failed (-32) [ 404.966564][ T5867] radio-keene 6-1:0.0: V4L2 device registered as radio48 [ 405.184686][ T5867] usb 6-1: USB disconnect, device number 7 [ 405.950141][ T9394] syz.3.904 (9394) used greatest stack depth: 19400 bytes left [ 407.769584][ T9417] ptrace attach of "./syz-executor exec"[5819] was attempted by "./syz-executor exec"[9417] [ 408.959559][ T9429] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 410.331617][ T9421] kvm: kvm [9420]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x3638 [ 410.343390][ T9421] kvm: kvm [9420]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x93fa [ 410.432585][ T9421] kvm: kvm [9420]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x290 [ 410.583883][ T9438] kvm: kvm [9437]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x8900000800 [ 410.626351][ T9438] kvm: kvm [9437]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x9100000800 [ 410.674174][ T9438] kvm: kvm [9437]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xa900000800 [ 413.187576][ T9473] pimreg: entered allmulticast mode [ 421.199535][ T9542] sch_fq: defrate 2048 ignored. [ 424.143691][ T9569] netlink: 4 bytes leftover after parsing attributes in process `syz.5.950'. [ 424.876214][ T9575] overlayfs: failed to resolve './file0': -2 [ 424.888516][ T9575] Bluetooth: MGMT ver 1.23 [ 426.496324][ T30] audit: type=1326 audit(1747422267.048:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9593 comm="syz.2.959" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5df398e969 code=0x0 [ 427.734165][ T9606] netlink: 20 bytes leftover after parsing attributes in process `syz.5.961'. [ 427.993949][ T5824] Bluetooth: hci2: command 0x0406 tx timeout [ 430.429299][ T9620] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 430.595401][ T9620] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 431.255561][ T9625] tipc: Enabling of bearer rejected, failed to enable media [ 431.971914][ T9632] syzkaller0: entered promiscuous mode [ 431.978564][ T9632] syzkaller0: entered allmulticast mode [ 433.418647][ T9639] syz.1.970 (9639): drop_caches: 2 [ 435.502801][ T9656] netlink: 4 bytes leftover after parsing attributes in process `syz.2.976'. [ 436.713795][ T9671] netlink: 4 bytes leftover after parsing attributes in process `syz.3.979'. [ 436.850372][ T9673] syz.2.980: attempt to access beyond end of device [ 436.850372][ T9673] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 436.864107][ T9673] efs: cannot read volume header [ 440.233922][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.240301][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.997602][ T9702] virtio-fs: tag not found [ 448.715008][ T9766] program syz.1.1010 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 448.804584][ T9767] syz.3.1007 (9767) used greatest stack depth: 18168 bytes left [ 451.360560][ T5854] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 451.492442][ T5824] Bluetooth: hci1: unexpected event for opcode 0x0c13 [ 451.622917][ T5854] usb 6-1: Using ep0 maxpacket: 32 [ 451.634494][ T5854] usb 6-1: New USB device found, idVendor=05ac, idProduct=022b, bcdDevice= 0.00 [ 451.656682][ T5854] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.708921][ T5854] usb 6-1: config 0 descriptor?? [ 453.135565][ T9787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.223649][ T9787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 453.896020][ T5854] usbhid 6-1:0.0: can't add hid device: -71 [ 453.934249][ T5854] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 454.001816][ T5854] usb 6-1: USB disconnect, device number 8 [ 455.266274][ T9830] overlayfs: conflicting lowerdir path [ 455.338078][ T9831] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 458.547638][ T9223] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.703433][ T9223] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.867430][ T9223] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.040429][ T9859] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1035'. [ 459.654374][ T9223] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.383612][ T9223] vlan0: left promiscuous mode [ 460.397227][ T9223] bond0: left promiscuous mode [ 460.409866][ T9223] bond_slave_0: left promiscuous mode [ 460.427141][ T9223] bond_slave_1: left promiscuous mode [ 460.472682][ T9223] bridge0: port 3(vlan0) entered disabled state [ 460.493710][ T5129] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 460.504393][ T5129] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 460.536548][ T5129] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 460.548154][ T5129] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 460.556994][ T5129] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 460.559654][ T9223] bridge_slave_1: left allmulticast mode [ 460.873554][ T9223] bridge_slave_1: left promiscuous mode [ 461.016735][ T9223] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.218993][ T9223] bridge_slave_0: left allmulticast mode [ 461.507987][ T9223] bridge_slave_0: left promiscuous mode [ 461.534304][ T9223] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.977635][ T5824] Bluetooth: hci0: command tx timeout [ 464.303247][ T9223] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 464.312779][ T9223] bond_slave_0: left allmulticast mode [ 464.348210][ T9223] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 464.379253][ T9223] bond_slave_1: left allmulticast mode [ 464.414144][ T9223] bond0 (unregistering): Released all slaves [ 464.469604][ T9880] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 464.795238][ T9869] wlan0 speed is unknown, defaulting to 1000 [ 465.064965][ T5824] Bluetooth: hci0: command tx timeout [ 466.705146][ T9938] xt_nat: multiple ranges no longer supported [ 467.286339][ T5824] Bluetooth: hci0: command tx timeout [ 467.351086][ T9223] tipc: Left network mode [ 469.403067][ T5824] Bluetooth: hci0: command tx timeout [ 470.084278][ T9223] hsr_slave_0: left promiscuous mode [ 470.109696][ T9223] hsr_slave_1: left promiscuous mode [ 470.715093][ T9223] batman_adv: batadv0: Interface deactivated: dummy0 [ 470.853069][ T9223] batman_adv: batadv0: Removing interface: dummy0 [ 470.943897][ T9223] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 470.951357][ T9223] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 470.984223][ T9223] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 470.992104][ T9223] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 471.019300][ T30] audit: type=1326 audit(1747422311.598:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9981 comm="syz.2.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df398e969 code=0x7ffc0000 [ 471.059970][ T30] audit: type=1326 audit(1747422311.598:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9981 comm="syz.2.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df398e969 code=0x7ffc0000 [ 471.093871][ T9985] overlay: ./file0 is not a directory [ 471.249627][ T9223] veth1_macvtap: left promiscuous mode [ 471.269024][ T9223] veth0_macvtap: left promiscuous mode [ 471.282738][ T30] audit: type=1326 audit(1747422311.598:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9981 comm="syz.2.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5df398e969 code=0x7ffc0000 [ 471.312983][ T30] audit: type=1326 audit(1747422311.598:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9981 comm="syz.2.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df398e969 code=0x7ffc0000 [ 471.361084][ T30] audit: type=1326 audit(1747422311.618:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9981 comm="syz.2.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f5df398e969 code=0x7ffc0000 [ 471.959459][ T9223] veth1_vlan: left promiscuous mode [ 471.972988][ T9223] veth0_vlan: left promiscuous mode [ 472.123257][ T30] audit: type=1326 audit(1747422311.618:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9981 comm="syz.2.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df398e969 code=0x7ffc0000 [ 472.144826][ T30] audit: type=1326 audit(1747422311.618:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9981 comm="syz.2.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df398e969 code=0x7ffc0000 [ 472.167003][ T30] audit: type=1326 audit(1747422311.618:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9981 comm="syz.2.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f5df398e969 code=0x7ffc0000 [ 472.188556][ T30] audit: type=1326 audit(1747422311.618:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9981 comm="syz.2.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df398e969 code=0x7ffc0000 [ 472.232402][ T30] audit: type=1326 audit(1747422311.618:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9981 comm="syz.2.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df398e969 code=0x7ffc0000 [ 474.345276][T10010] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1065'. [ 477.118767][ T9223] team0 (unregistering): Port device team_slave_1 removed [ 477.161461][ T9223] team0 (unregistering): Port device team_slave_0 removed [ 477.725847][T10010] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1065'. [ 477.821681][ T9869] chnl_net:caif_netlink_parms(): no params data found [ 477.886603][T10037] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1074'. [ 477.932454][T10039] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1073'. [ 481.687977][T10087] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 481.714572][T10087] CIFS: Unable to determine destination address [ 483.372405][ T9869] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.380511][ T9869] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.388156][ T9869] bridge_slave_0: entered allmulticast mode [ 483.397011][ T9869] bridge_slave_0: entered promiscuous mode [ 484.102351][ T9869] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.139145][ T9869] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.332234][ T9869] bridge_slave_1: entered allmulticast mode [ 484.881128][ T9869] bridge_slave_1: entered promiscuous mode [ 485.238089][ T9869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 485.382278][ T9869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 486.468694][T10147] pim6reg: entered allmulticast mode [ 486.483688][T10150] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1093'. [ 486.515231][T10152] pim6reg: left allmulticast mode [ 487.454324][ T9869] team0: Port device team_slave_0 added [ 487.493821][ T9869] team0: Port device team_slave_1 added [ 487.760117][T10150] syz_tun: entered promiscuous mode [ 487.769955][T10150] macvtap1: entered promiscuous mode [ 487.777335][T10150] macvtap1: entered allmulticast mode [ 487.786765][T10150] syz_tun: entered allmulticast mode [ 487.817425][T10158] syz_tun: left allmulticast mode [ 487.831442][T10158] syz_tun: left promiscuous mode [ 489.972254][ T9869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 490.028599][ T9869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 491.389498][ T9869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 491.466526][ T9869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 491.473789][ T9869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 491.499775][ T9869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 494.079002][T10204] siw: device registration error -23 [ 494.169232][ T9869] hsr_slave_0: entered promiscuous mode [ 494.254136][ T9869] hsr_slave_1: entered promiscuous mode [ 501.777673][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.778215][T10275] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1118'. [ 501.784120][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.701189][T10311] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 506.606563][T10327] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1131'. [ 506.802599][ T9869] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 506.859299][T10335] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1133'. [ 506.898093][ T9869] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 506.950989][T10336] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1133'. [ 508.128341][ T9869] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 508.201871][ T9869] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 509.525621][ T9869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 509.631964][ T9869] 8021q: adding VLAN 0 to HW filter on device team0 [ 509.699966][ T7519] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.707308][ T7519] bridge0: port 1(bridge_slave_0) entered forwarding state [ 509.840558][ T7519] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.847804][ T7519] bridge0: port 2(bridge_slave_1) entered forwarding state [ 509.893944][ T9869] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 509.904368][ T9869] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 510.115858][T10374] Bluetooth: MGMT ver 1.23 [ 512.628656][ T9869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 513.714323][ T9869] veth0_vlan: entered promiscuous mode [ 513.741485][ T9869] veth1_vlan: entered promiscuous mode [ 513.862670][ T9869] veth0_macvtap: entered promiscuous mode [ 513.918169][ T9869] veth1_macvtap: entered promiscuous mode [ 513.946029][ T9869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 513.989110][ T9869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 514.060735][ T9869] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.092965][ T9869] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.112072][ T9869] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.143596][ T9869] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.909560][ T10] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 515.197204][ T10] usb 2-1: config 1 interface 0 has no altsetting 0 [ 515.232177][ T9225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 515.242523][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 515.262964][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.270997][ T10] usb 2-1: Product: syz [ 515.278107][ T9225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 515.306867][ T10] usb 2-1: Manufacturer: syz [ 515.332939][ T10] usb 2-1: SerialNumber: syz [ 515.409114][ T9225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 515.441913][ T9225] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 515.914030][ T10] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 518.242408][ T9223] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.494319][ C0] usblp0: nonzero write bulk status received: -71 [ 518.502238][ T9995] usb 2-1: USB disconnect, device number 11 [ 518.524630][ T9995] usblp0: removed [ 519.804279][ T9223] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.000649][ T9223] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.104840][T10504] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 522.133169][T10504] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 522.164400][T10504] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 522.212128][T10504] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 522.223855][T10504] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 522.921374][ T9223] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.959785][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 522.959803][ T30] audit: type=1326 audit(1747422363.528:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10512 comm="syz.3.1168" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f228598e969 code=0x0 [ 523.581828][T10503] wlan0 speed is unknown, defaulting to 1000 [ 524.338510][T10504] Bluetooth: hci0: command tx timeout [ 524.896592][ T9223] bridge_slave_1: left allmulticast mode [ 524.904955][ T9223] bridge_slave_1: left promiscuous mode [ 524.910649][ T9223] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.068808][ T9223] bridge_slave_0: left allmulticast mode [ 525.092909][ T9223] bridge_slave_0: left promiscuous mode [ 525.108973][ T9223] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.394300][T10504] Bluetooth: hci0: command tx timeout [ 528.892561][T10596] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 528.933375][T10504] Bluetooth: hci0: command tx timeout [ 531.083466][T10504] Bluetooth: hci0: command tx timeout [ 532.723549][ T9223] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 532.768374][T10637] netlink: 'syz.1.1192': attribute type 1 has an invalid length. [ 532.779446][T10637] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1192'. [ 532.792641][ T9223] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 532.827553][ T9223] bond0 (unregistering): Released all slaves [ 535.084631][T10653] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1195'. [ 538.792090][ T9223] hsr_slave_0: left promiscuous mode [ 538.834400][ T9223] hsr_slave_1: left promiscuous mode [ 538.852536][ T9223] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 538.883142][ T9223] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 538.967350][ T9223] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 538.992963][ T9223] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 539.492510][ T9223] veth1_macvtap: left promiscuous mode [ 539.524810][ T9223] veth0_macvtap: left promiscuous mode [ 539.530513][ T9223] veth1_vlan: left promiscuous mode [ 539.556322][T10700] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1205'. [ 539.757122][ T9223] veth0_vlan: left promiscuous mode [ 547.365220][T10763] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 547.373096][T10763] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 547.382300][T10763] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 547.390146][T10763] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 548.385912][ T5868] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 549.351400][ T5868] usb 3-1: Using ep0 maxpacket: 32 [ 549.403732][ T5868] usb 3-1: New USB device found, idVendor=05ac, idProduct=022b, bcdDevice= 0.00 [ 549.413698][ T5868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.424937][ T5868] usb 3-1: config 0 descriptor?? [ 551.298986][T10759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.336899][T10759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 553.425277][ T5868] usbhid 3-1:0.0: can't add hid device: -71 [ 553.440157][ T5868] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 554.101926][ T5868] usb 3-1: USB disconnect, device number 5 [ 555.783165][T10815] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1235'. [ 556.360420][ T9223] team0 (unregistering): Port device team_slave_1 removed [ 556.775699][ T9223] team0 (unregistering): Port device team_slave_0 removed [ 557.982545][T10503] chnl_net:caif_netlink_parms(): no params data found [ 558.282331][T10812] syzkaller0: entered promiscuous mode [ 558.338965][T10812] syzkaller0: entered allmulticast mode [ 560.168325][T10852] xt_nat: multiple ranges no longer supported [ 562.867815][T10875] xt_connbytes: Forcing CT accounting to be enabled [ 562.879749][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.879809][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.894780][T10875] Cannot find add_set index 0 as target [ 564.438703][T10907] siw: device registration error -23 [ 566.456835][ T5867] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 566.625566][ T5867] usb 3-1: Using ep0 maxpacket: 16 [ 566.645436][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 566.656730][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 566.666689][ T5867] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 566.680232][ T5867] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 566.689481][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.759846][ T5867] usb 3-1: config 0 descriptor?? [ 567.583142][ T5867] input: HID 0955:7214 Haptics as /devices/virtual/input/input9 [ 567.600648][T10919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.617226][T10919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.637306][T10919] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1262'. [ 567.721071][ T5867] shield 0003:0955:7214.0003: Registered Thunderstrike controller [ 567.731239][ T5867] shield 0003:0955:7214.0003: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 567.822933][ T5867] usb 3-1: USB disconnect, device number 6 [ 567.833690][ T47] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 567.845174][ T47] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 567.856745][ T47] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 567.869198][ T47] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 571.485580][ T5824] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 571.519495][ T5824] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 571.543027][ T5824] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 571.591123][ T5824] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 571.604570][ T5824] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 573.006466][ T5820] bond0: (slave syz_tun): Releasing backup interface [ 573.688200][T10504] Bluetooth: hci5: command tx timeout [ 574.016804][T10977] netlink: 'syz.3.1265': attribute type 39 has an invalid length. [ 574.271449][T10503] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.315477][T10503] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.394062][T10503] bridge_slave_0: entered allmulticast mode [ 574.470133][T10503] bridge_slave_0: entered promiscuous mode [ 574.815965][T10503] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.062973][T10503] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.070239][T10503] bridge_slave_1: entered allmulticast mode [ 575.084725][T10503] bridge_slave_1: entered promiscuous mode [ 575.805362][T10504] Bluetooth: hci5: command tx timeout [ 575.991439][T10950] wlan0 speed is unknown, defaulting to 1000 [ 576.087230][T10503] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 576.178510][T10503] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 576.831747][T10503] team0: Port device team_slave_0 added [ 576.870614][T10503] team0: Port device team_slave_1 added [ 577.843321][T10504] Bluetooth: hci5: command tx timeout [ 578.038378][T10503] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 578.060829][T10503] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 578.492129][T10503] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 578.846599][T10503] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 578.876753][T10503] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 579.041546][T10503] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 579.228001][ T30] audit: type=1326 audit(1747422419.808:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11038 comm="syz.2.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df398e969 code=0x7ffc0000 [ 579.953261][T10504] Bluetooth: hci5: command tx timeout [ 580.152912][ T30] audit: type=1326 audit(1747422419.808:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11038 comm="syz.2.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df398e969 code=0x7ffc0000 [ 580.247132][ T30] audit: type=1326 audit(1747422419.818:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11038 comm="syz.2.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f5df398e969 code=0x7ffc0000 [ 580.418666][ T30] audit: type=1326 audit(1747422419.818:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11038 comm="syz.2.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df398e969 code=0x7ffc0000 [ 580.620572][ T30] audit: type=1326 audit(1747422419.818:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11038 comm="syz.2.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df398e969 code=0x7ffc0000 [ 580.676522][T10950] chnl_net:caif_netlink_parms(): no params data found [ 580.747087][ T30] audit: type=1326 audit(1747422419.818:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11038 comm="syz.2.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f5df398e969 code=0x7ffc0000 [ 580.882992][ T30] audit: type=1326 audit(1747422419.818:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11038 comm="syz.2.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df398e969 code=0x7ffc0000 [ 580.904787][ T30] audit: type=1326 audit(1747422419.818:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11038 comm="syz.2.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f5df398e969 code=0x7ffc0000 [ 580.927064][ T30] audit: type=1326 audit(1747422419.818:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11038 comm="syz.2.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df398e969 code=0x7ffc0000 [ 580.952688][ T30] audit: type=1326 audit(1747422419.818:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11038 comm="syz.2.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f5df398e969 code=0x7ffc0000 [ 581.997987][ T5824] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 582.008014][ T5824] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 582.017831][ T5824] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 582.027396][ T5824] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 582.035488][ T5824] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 583.219481][T10950] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.253306][T10950] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.260571][T10950] bridge_slave_0: entered allmulticast mode [ 583.305337][T10950] bridge_slave_0: entered promiscuous mode [ 583.321041][T10950] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.342644][T10950] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.366532][T10950] bridge_slave_1: entered allmulticast mode [ 583.376583][T10950] bridge_slave_1: entered promiscuous mode [ 583.448441][T11063] wlan0 speed is unknown, defaulting to 1000 [ 583.460289][ T2989] bridge_slave_1: left allmulticast mode [ 583.473282][ T2989] bridge_slave_1: left promiscuous mode [ 583.590258][ T2989] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.625118][ T2989] bridge_slave_0: left allmulticast mode [ 583.635721][ T2989] bridge_slave_0: left promiscuous mode [ 583.651779][ T2989] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.100610][ T2989] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 584.154633][ T5824] Bluetooth: hci2: command tx timeout [ 584.326546][ T2989] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 584.457129][ T2989] bond0 (unregistering): Released all slaves [ 584.747730][T10950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 584.785734][T10950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 585.989738][ T2989] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 586.020964][ T2989] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 586.067411][T11120] kernel read not supported for file /eth0 (pid: 11120 comm: syz.2.1292) [ 586.090986][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 586.091003][ T30] audit: type=1800 audit(1747422426.668:185): pid=11120 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.1292" name="eth0" dev="mqueue" ino=28160 res=0 errno=0 [ 586.117588][ T2989] team0 (unregistering): Port device team_slave_1 removed [ 586.232942][ T5824] Bluetooth: hci2: command tx timeout [ 586.303463][ T2989] team0 (unregistering): Port device team_slave_0 removed [ 588.082797][T10950] team0: Port device team_slave_0 added [ 588.128871][T10950] team0: Port device team_slave_1 added [ 588.319866][ T5824] Bluetooth: hci2: command tx timeout [ 589.030713][T10950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 589.047730][T10950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 589.095080][T10950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 589.115420][T10950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 589.124548][T10950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 589.151471][T10950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 589.451930][T11155] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1300'. [ 590.405056][ T5824] Bluetooth: hci2: command tx timeout [ 590.999307][T10950] hsr_slave_0: entered promiscuous mode [ 591.018052][T10950] hsr_slave_1: entered promiscuous mode [ 591.399885][T11063] chnl_net:caif_netlink_parms(): no params data found [ 593.774161][T11063] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.884957][T11063] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.892254][T11063] bridge_slave_0: entered allmulticast mode [ 593.915050][T11063] bridge_slave_0: entered promiscuous mode [ 593.934261][T11063] bridge0: port 2(bridge_slave_1) entered blocking state [ 593.941422][T11063] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.951130][T11202] kvm: kvm [11201]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 594.047896][T11208] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1309'. [ 594.378499][T11063] bridge_slave_1: entered allmulticast mode [ 594.476234][T11063] bridge_slave_1: entered promiscuous mode [ 595.888416][T11063] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 596.018604][T11063] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 598.160039][T11063] team0: Port device team_slave_0 added [ 598.170173][T10950] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 598.229197][T10950] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 598.332196][T11063] team0: Port device team_slave_1 added [ 598.467947][T10950] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 598.517151][T10950] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 598.621147][T11063] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 599.042539][T11063] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 599.075200][T11063] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 599.089916][T11063] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 599.097274][T11063] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 599.138497][T11063] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 599.264328][ T5868] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 599.314083][T11063] hsr_slave_0: entered promiscuous mode [ 599.331574][T11063] hsr_slave_1: entered promiscuous mode [ 599.350698][T11063] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 599.370520][T11063] Cannot create hsr debugfs directory [ 599.430144][ T5868] usb 6-1: Using ep0 maxpacket: 32 [ 599.506264][ T5868] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 599.543920][ T5868] usb 6-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 599.587327][ T5868] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.640703][ T5868] usb 6-1: config 0 descriptor?? [ 601.764406][T11244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 601.956232][T11244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 604.904628][ T5868] usbhid 6-1:0.0: can't add hid device: -32 [ 604.924030][ T5868] usbhid 6-1:0.0: probe with driver usbhid failed with error -32 [ 605.671136][T10950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 605.680084][ T5869] usb 6-1: USB disconnect, device number 9 [ 605.872065][T10950] 8021q: adding VLAN 0 to HW filter on device team0 [ 607.382980][T11300] xt_hashlimit: size too large, truncated to 1048576 [ 608.208797][ T36] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000023: 0000 [#1] SMP KASAN PTI [ 608.219640][ T7519] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.220709][ T36] KASAN: null-ptr-deref in range [0x0000000000000118-0x000000000000011f] [ 608.227803][ T7519] bridge0: port 1(bridge_slave_0) entered forwarding state [ 608.236108][ T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 608.236130][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 608.236144][ T36] Workqueue: events_unbound netfs_write_collection_worker [ 608.272475][ T36] RIP: 0010:iov_iter_revert+0x2ec/0x5f0 [ 608.278036][ T36] Code: 74 08 4c 89 e7 e8 74 ab 6f fd 4d 8b 24 24 41 bd 1e 00 00 00 bd 1e 00 00 00 4c 01 e5 48 81 c5 00 01 00 00 48 89 e8 48 c1 e8 03 <42> 0f b6 04 30 84 c0 75 65 0f b6 6d 00 bf 40 00 00 00 89 ee e8 8b [ 608.297640][ T36] RSP: 0018:ffffc90000ad7730 EFLAGS: 00010203 [ 608.303700][ T36] RAX: 0000000000000023 RBX: ffffc90000ad78c0 RCX: ffff888140ef1e00 [ 608.311750][ T36] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 608.319717][ T36] RBP: 000000000000011e R08: ffff888140ef1e00 R09: 0000000000000004 [ 608.327678][ T36] R10: 0000000000000005 R11: 0000000000000000 R12: 0000000000000000 [ 608.335641][ T36] R13: 000000000000001e R14: dffffc0000000000 R15: ffffc90000ad78c0 [ 608.343605][ T36] FS: 0000000000000000(0000) GS:ffff8881261f9000(0000) knlGS:0000000000000000 [ 608.352703][ T36] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 608.359285][ T36] CR2: 00005586c4337950 CR3: 0000000032676000 CR4: 00000000003526f0 [ 608.367257][ T36] DR0: 0000000000000007 DR1: 000000000000000b DR2: 0000000000000002 [ 608.375307][ T36] DR3: 0000000000000009 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 608.383270][ T36] Call Trace: [ 608.386548][ T36] [ 608.389472][ T36] netfs_retry_writes+0x1645/0x1840 [ 608.394674][ T36] ? __pfx_netfs_retry_writes+0x10/0x10 [ 608.400207][ T36] ? __lock_acquire+0xaac/0xd20 [ 608.405055][ T36] ? do_raw_spin_lock+0x121/0x290 [ 608.410083][ T36] netfs_write_collection_worker+0x2007/0x2bd0 [ 608.416269][ T36] ? process_scheduled_works+0x9ec/0x17a0 [ 608.421992][ T36] process_scheduled_works+0xadb/0x17a0 [ 608.427557][ T36] ? __pfx_process_scheduled_works+0x10/0x10 [ 608.433553][ T36] worker_thread+0x8a0/0xda0 [ 608.438137][ T36] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 608.444459][ T36] ? __kthread_parkme+0x7b/0x200 [ 608.449389][ T36] kthread+0x70e/0x8a0 [ 608.453455][ T36] ? __pfx_worker_thread+0x10/0x10 [ 608.458554][ T36] ? __pfx_kthread+0x10/0x10 [ 608.463140][ T36] ? __pfx_kthread+0x10/0x10 [ 608.467722][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 608.472918][ T36] ? lockdep_hardirqs_on+0x9c/0x150 [ 608.478117][ T36] ? __pfx_kthread+0x10/0x10 [ 608.482704][ T36] ret_from_fork+0x4b/0x80 [ 608.487109][ T36] ? __pfx_kthread+0x10/0x10 [ 608.491693][ T36] ret_from_fork_asm+0x1a/0x30 [ 608.496460][ T36] [ 608.499477][ T36] Modules linked in: [ 608.503863][ T36] ---[ end trace 0000000000000000 ]--- [ 608.573757][ T7519] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.580841][ T7519] bridge0: port 2(bridge_slave_1) entered forwarding state [ 608.594986][ T36] RIP: 0010:iov_iter_revert+0x2ec/0x5f0 [ 608.600756][ T36] Code: 74 08 4c 89 e7 e8 74 ab 6f fd 4d 8b 24 24 41 bd 1e 00 00 00 bd 1e 00 00 00 4c 01 e5 48 81 c5 00 01 00 00 48 89 e8 48 c1 e8 03 <42> 0f b6 04 30 84 c0 75 65 0f b6 6d 00 bf 40 00 00 00 89 ee e8 8b [ 608.621150][ T36] RSP: 0018:ffffc90000ad7730 EFLAGS: 00010203 [ 608.627295][ T36] RAX: 0000000000000023 RBX: ffffc90000ad78c0 RCX: ffff888140ef1e00 [ 608.635505][ T36] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 608.643524][ T36] RBP: 000000000000011e R08: ffff888140ef1e00 R09: 0000000000000004 [ 608.651520][ T36] R10: 0000000000000005 R11: 0000000000000000 R12: 0000000000000000 [ 608.659559][ T36] R13: 000000000000001e R14: dffffc0000000000 R15: ffffc90000ad78c0 [ 608.667953][ T36] FS: 0000000000000000(0000) GS:ffff8881260f9000(0000) knlGS:0000000000000000 [ 609.287670][ T36] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 609.328428][ T36] CR2: 0000001b33a1eff8 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 609.352114][ T36] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 609.389551][ T36] DR3: 00000000fee0000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 609.419839][ T36] Kernel panic - not syncing: Fatal exception [ 609.426209][ T36] Kernel Offset: disabled [ 609.430533][ T36] Rebooting in 86400 seconds..