last executing test programs: 2m52.847821448s ago: executing program 4 (id=1300): syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) listen(0xffffffffffffffff, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000010000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) creat(0x0, 0x1) 2m51.65599981s ago: executing program 4 (id=1301): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x10, 0x2, [@TCA_FLOW_EMATCHES={0xc, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xff}}]}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) 2m47.868111781s ago: executing program 4 (id=1306): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c4400000000000e0fe1709850000000e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmsg(r0, &(0x7f0000002400)={0x0, 0x0, &(0x7f0000002300)=[{0x0, 0x1100}, {&(0x7f0000001200)="c1", 0x1}], 0x2}, 0x24004000) 2m47.315722599s ago: executing program 4 (id=1309): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000100)='./file0/../file0\x00') 2m46.71954749s ago: executing program 4 (id=1311): setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000480)}, {0x0}, {&(0x7f0000000580)="caa7eba0c3d0f891682d4a47adf58890d6f0abb4276266061aa005ec83c3994b72836d2842cf1feeffec2b528eddc6c57283d303c4047a327144092748bdaf3c7fa0979c1da35ca0c4887a19b60f3f781a10b3d7288200c056b678daf242c9bb46146630a098cc2aab9bbb0623b5a0fc2f3a08032f36ccf339ce908b2d1e952653ab49cb990b7e9ad059cbdbbba44edda33fa01e115ac5b6612554bc08d7856c06f2928b4405f41bd131debc4c104b6e881227909ef3b3b279aabbf41ad5af7050ed569e3260100e7a", 0xc9}, {&(0x7f0000000680)="4d4961b893fb02bd42f687a04c04ae2abc12d09d91c66ed777ad7a37cee45c39ebc9a58c16c99b3c002efe9007394ce4ac564c691fba0cc939e82ae2e2e4e64c80", 0x41}, {&(0x7f0000000800)="593c6f25bee05c6b9507ae614cfb47004101b3860cda76497413595e9f43b428f7ab7742c515d7a23d92cd795f7786c655f84c87419be7f37599e8517506bc2b05ff431fabd3ee6be6333f70d9c94e36b136cb6207d108bbad68cf347da624aba5d74db5f84c4264b74a7c7d056c5cd1575cf8e62f04e975b97b6f53bd378ec679b5a85a46ce459c897cae30b16babf2148006350fe016910c01b207083beae3ec39cc1c0054c5a356abcf2609303ed1fc710e29e7f1bc0c6bb62adfeeb2f4d9049a811c6ab8862cd5b2cacc2110e520f980", 0xd2}], 0x5}, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f0000000380), 0x4) setsockopt$RDS_FREE_MR(r5, 0x114, 0x3, &(0x7f00000007c0), 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, 0x0, 0xc000) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockname(r7, 0x0, 0x0) 2m45.828295951s ago: executing program 4 (id=1316): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x10000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) ioctl$FE_SET_FRONTEND(0xffffffffffffffff, 0x40246f4c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001a400)=""/102384, 0x18ff0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@func_proto={0x0, 0x0, 0x0, 0x5}, @volatile={0x0, 0x0, 0x0, 0xa, 0x3}, @typedef={0x2, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0x30, 0x5f]}}, 0x0, 0x40}, 0x28) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20001000, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1c) r5 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3701) ioctl$USBDEVFS_GET_SPEED(r5, 0x551f) 2m44.041082624s ago: executing program 32 (id=1316): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x10000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) ioctl$FE_SET_FRONTEND(0xffffffffffffffff, 0x40246f4c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001a400)=""/102384, 0x18ff0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@func_proto={0x0, 0x0, 0x0, 0x5}, @volatile={0x0, 0x0, 0x0, 0xa, 0x3}, @typedef={0x2, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0x30, 0x5f]}}, 0x0, 0x40}, 0x28) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20001000, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1c) r5 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3701) ioctl$USBDEVFS_GET_SPEED(r5, 0x551f) 10.363384439s ago: executing program 3 (id=1852): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r1, 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x50, &(0x7f0000000000)={0x0, 0x0}, 0x10) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x8) unshare(0xc040480) unshare(0xc040480) 9.877121032s ago: executing program 3 (id=1853): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000001, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x8}, {0xcdbf0d3388237035, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xfff}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x400}]}}]}, 0x44}}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 7.590168404s ago: executing program 1 (id=1856): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x6) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x80, 0x0, 0x7ffc1ffb}]}) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$pokeuser(0x6, r4, 0x388, 0x41d9fda7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[]) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x9) mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) symlink(&(0x7f0000000040)='./bus\x00', &(0x7f00000008c0)='./file0\x00') ioctl$sock_bt_hci(r0, 0x800448d5, 0x0) 7.476255542s ago: executing program 3 (id=1860): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', 0x0, 0x0, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x44, r2, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x78}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) 6.276308982s ago: executing program 1 (id=1861): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84d, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x2, 0xb}, 0x5, 0x34, 0x91f}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_RATE64={0xc, 0x4, 0xdd31e353c9fd1eb}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xb}, {0xe, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x8, 0x2, 0xffff}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2400c061}, 0x4890) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x3, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) 5.874079629s ago: executing program 3 (id=1864): setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000480)}, {0x0}, {&(0x7f0000000580)="caa7eba0c3d0f891682d4a47adf58890d6f0abb4276266061aa005ec83c3994b72836d2842cf1feeffec2b528eddc6c57283d303c4047a327144092748bdaf3c7fa0979c1da35ca0c4887a19b60f3f781a10b3d7288200c056b678daf242c9bb46146630a098cc2aab9bbb0623b5a0fc2f3a08032f36ccf339ce908b2d1e952653ab49cb990b7e9ad059cbdbbba44edda33fa01e115ac5b6612554bc08d7856c06f2928b4405f41bd131debc4c104b6e881227909ef3b3b279aabbf41ad5af7050ed569e3260100e7a", 0xc9}, {&(0x7f0000000680)="4d4961b893fb02bd42f687a04c04ae2abc12d09d91c66ed777ad7a37cee45c39ebc9a58c16c99b3c002efe9007394ce4ac564c691fba0cc939e82ae2e2e4e64c80", 0x41}, {&(0x7f0000000800)="593c6f25bee05c6b9507ae614cfb47004101b3860cda76497413595e9f43b428f7ab7742c515d7a23d92cd795f7786c655f84c87419be7f37599e8517506bc2b05ff431fabd3ee6be6333f70d9c94e36b136cb6207d108bbad68cf347da624aba5d74db5f84c4264b74a7c7d056c5cd1575cf8e62f04e975b97b6f53bd378ec679b5a85a46ce459c897cae30b16babf2148006350fe016910c01b207083beae3ec39cc1c0054c5a356abcf2609303ed1fc710e29e7f1bc0c6bb62adfeeb2f4d9049a811c6ab8862cd5b2cacc2110e520f980", 0xd2}], 0x5}, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f0000000380), 0x4) setsockopt$RDS_FREE_MR(r5, 0x114, 0x3, &(0x7f00000007c0), 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, 0x0, 0xc000) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockname(r7, 0x0, 0x0) 4.996336117s ago: executing program 1 (id=1867): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000080)={0x44, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @mon_options]}, 0x44}}, 0x400c8a4) 4.990811028s ago: executing program 5 (id=1868): socket(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000003"], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket(0x40000000015, 0x5, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz1\x00', 0x200002, 0x0) syz_io_uring_setup(0x111, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x1, 0x80}, &(0x7f0000000180), &(0x7f0000000240), &(0x7f0000000000)) shutdown(0xffffffffffffffff, 0x1) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000140)={0x0, 0x8, 0x7, 0x8c1}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x30d003, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) openat$incfs(r2, &(0x7f0000000040)='.log\x00', 0x600100, 0x4) 4.713807176s ago: executing program 1 (id=1869): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, 0x15, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0xfffd}}, 0x14}, 0x1, 0x0, 0x0, 0x40884}, 0x0) recvmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}, 0x96a}], 0x1, 0x10000, 0x0) 4.408939796s ago: executing program 1 (id=1871): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x6) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x80, 0x0, 0x7ffc1ffb}]}) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$pokeuser(0x6, r4, 0x388, 0x41d9fda7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[]) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x9) mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) symlink(&(0x7f0000000040)='./bus\x00', &(0x7f00000008c0)='./file0\x00') ioctl$sock_bt_hci(r0, 0x800448d5, 0x0) 4.168384052s ago: executing program 2 (id=1873): ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40c0080) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$igmp(0x2, 0x3, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x2a, 0x0, 0x190) setsockopt$inet_group_source_req(r1, 0x0, 0x29, &(0x7f0000001080)={0x9, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x10}}}, {{0x2, 0x4e1f, @multicast1}}}, 0x108) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.522000465s ago: executing program 5 (id=1874): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x4}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x4}}}}}}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f2b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x49}], 0x2) syz_extract_tcp_res(&(0x7f0000000000)={0x41424344, 0x41424344}, 0x2, 0x8) write$tun(r1, &(0x7f0000000540)={@void, @void, @ipv6=@tcp={0x6, 0x6, "cfac17", 0x33e, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x18}, @mcast2, {[@srh={0x84, 0x6, 0x4, 0x3, 0x0, 0x30, 0x1, [@loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote]}, @routing={0x3c, 0x4, 0x1, 0x7, 0x0, [@dev={0xfe, 0x80, '\x00', 0x26}, @private2={0xfc, 0x2, '\x00', 0x1}]}, @hopopts={0xc84f72d796f8ad5d, 0x1d, '\x00', [@jumbo={0xc2, 0x4, 0x3}, @pad1, @calipso={0x7, 0x28, {0x1, 0x8, 0x7, 0x400, [0xc, 0x0, 0x6, 0x6a8f]}}, @calipso={0x7, 0x40, {0x2, 0xe, 0x0, 0x101, [0x3, 0x100000001, 0x110000000, 0x3, 0x4, 0x800, 0xffffffffffffffff]}}, @hao={0xc9, 0x10, @loopback}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x1c}}, @calipso={0x7, 0x40, {0x3, 0xe, 0x6, 0x8, [0xfff, 0xfffffffffffffc00, 0x1, 0xff, 0x200, 0x2, 0x5]}}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, @dstopts={0x8, 0x18, '\x00', [@generic={0xd, 0x63, "1b9731bdebac38cd93a5d69ca8d237024e928a39863def0b1cbd629b835a1d4b6af9e01f7af4a1161827e1957f0e1f186c7d6f702c289e14f6b61b52bf2ec199ea84580f9d024580c84e4c9269a1d57f299d300cb277738376ac665a1bd0260a4bd2a6"}, @ra={0x5, 0x2, 0x5}, @enc_lim={0x4, 0x1, 0x7}, @calipso={0x7, 0x48, {0x0, 0x10, 0xf0, 0x90af, [0x8, 0x6, 0x1, 0x2, 0xf, 0x200, 0x1, 0x401]}}, @jumbo={0xc2, 0x4, 0xa}, @padn, @padn={0x1, 0x1, [0x0]}]}, @fragment={0x2f, 0x0, 0x4, 0x1, 0x0, 0x6, 0x66}, @fragment={0x3b, 0x0, 0x7, 0x1, 0x0, 0x1f, 0x67}], {{0x4e21, 0x4e22, 0x41424344, r2, 0x1, 0x0, 0x1d, 0x1, 0x4, 0x0, 0x18, {[@md5sig={0x13, 0x12, "b94fbd20b4fcd02cd51f8a327322d082"}, @fastopen={0x22, 0x11, "ef260b2f1fcb9d3f0a0ee0137cd0fd"}, @sack={0x5, 0x26, [0x6, 0x6, 0xef, 0x1, 0x5, 0x2, 0x81, 0xffffffff, 0xfffffff7]}, @fastopen={0x22, 0x4, "0bdf"}, @mss={0x2, 0x4, 0x4}, @nop, @timestamp={0x8, 0xa, 0x2, 0x3}, @nop, @window={0x3, 0x3, 0x3}]}}, {"ca683a292225dad82d7e99625d021bd7b3b63bfcaac84e57db76e74e370da1ea3d21df87b737f8052ba588b47b08a6adc75e793cf21db7e5f6ad269f347af610ee70f2a80b6e195b566fbdec934a26baac64893e557f27743eb734a371a30d3a288aa107e7558d8b496d82177bb1900064338c5e6985bcba7e6c643de57ead1cdfc873adbc9c393f3c57ea1405ea0b1c6b1e"}}}}}, 0x366) syz_emit_ethernet(0x7e, &(0x7f0000001a40)={@random="0f539af21094", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1200b0", 0x48, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x4, 0x3, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x2c, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [@hopopts={0x2f, 0x1, '\x00', [@calipso={0x7, 0x8, {0x22ebffff, 0x0, 0xfc}}]}]}}}}}}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x40) 3.31376987s ago: executing program 1 (id=1875): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r1 = getpid() sendmsg$AUDIT_TRIM(r0, 0x0, 0x4) sched_setscheduler(r1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r4, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001640)=[{0x0}], 0x1, 0x0, 0x0, 0x1f000801}, 0x4040844) 2.769347356s ago: executing program 2 (id=1876): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xba0c29e690d41d4b, 0x20000000ec071, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xfffffffffffffffe, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5}, {0x0, 0x8000, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0xfffffffc, 0x3c}, 0xa, @in=@local, 0x6, 0x4, 0x3, 0x0, 0x401, 0x0, 0x80}]}]}, 0xfc}}, 0xc004004) r1 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0xa, 0x2f, 0x4, @mcast2}, 0x1c, 0x0}, 0x922bac8556bdad8e) 2.276125709s ago: executing program 5 (id=1877): r0 = socket(0x10, 0x3, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x56, 0x201}, 0x18}}, 0x0) 2.014355776s ago: executing program 2 (id=1879): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000080)={0x44, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @mon_options]}, 0x44}}, 0x400c8a4) 1.944691911s ago: executing program 5 (id=1880): r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) read(r0, &(0x7f0000000400)=""/223, 0xdf) 1.896412174s ago: executing program 0 (id=1881): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0xfe, @remote}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0xffff, 0x0, @mcast1={0xff, 0x7}, 0x10000}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) close(r0) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0xfe, @remote}}}, 0x108) 1.757066933s ago: executing program 2 (id=1882): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000001, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x8}, {0xcdbf0d3388237035, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xfff}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x400}]}}]}, 0x44}}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.743284624s ago: executing program 0 (id=1883): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010102}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x34040017}, 0x80) 1.673230159s ago: executing program 5 (id=1884): socket(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000003"], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket(0x40000000015, 0x5, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz1\x00', 0x200002, 0x0) syz_io_uring_setup(0x111, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x1, 0x80}, &(0x7f0000000180), &(0x7f0000000240), &(0x7f0000000000)) shutdown(0xffffffffffffffff, 0x1) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000140)={0x0, 0x8, 0x7, 0x8c1}, &(0x7f0000000180)=0x10) r2 = openat(0xffffffffffffff9c, 0x0, 0x30d003, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) openat$incfs(r2, &(0x7f0000000040)='.log\x00', 0x600100, 0x4) 1.50445188s ago: executing program 0 (id=1885): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @remote, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10002, 0xfffffffe, 0xfffffffc}}}}}, 0x0) 1.493326151s ago: executing program 2 (id=1886): socket$inet_tcp(0x2, 0x1, 0x0) socket(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000380)={"b8e50a31a002b94fcd8fc4db3056309d", 0x0, 0x0, {0x7, 0xfe}, {0x0, 0x5}, 0x51, [0x7, 0x3, 0xe, 0x2, 0x9, 0x1, 0xd8e, 0x7fc0000, 0x5, 0x100000000000000, 0x6, 0x3, 0x5, 0x49, 0xfffffffffffffffe, 0xc]}) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x34, r4, 0x601, 0x0, 0x0, {0x26}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8d}}, 0x4040) 1.343274251s ago: executing program 3 (id=1887): r0 = socket(0x2000000000000021, 0x2, 0x2) shutdown(r0, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20802, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) setsockopt(0xffffffffffffffff, 0xc, 0x7f, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000007c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) connect$rose(r3, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) connect$rose(r3, &(0x7f00000000c0)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x3, [@bcast, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x40) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wrr\x00', 0x15, 0xff, 0xf}, 0x2c) 1.337265011s ago: executing program 0 (id=1888): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="6c0100001000130700000000fcdbdf252001000000000000000000000000000120010000000000000000000000000001000000004e2100020a0000006c000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000000fe3200000000000000000000000000ffffac1414bb000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000050000000000000043050000000000000700000000000000ffffffffffffff7f000000000000000000000000000000000000000000000000000000002cbd70000035000002000400500000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000007000000000000000000000000000000a000000060000000210466d38547aa140db9a2000000000238c7cb7a1c0004"], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) 635.567018ms ago: executing program 5 (id=1889): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8800}, 0x40) 173.490639ms ago: executing program 2 (id=1890): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') r0 = socket(0x8, 0x3, 0x3) socket$pptp(0x18, 0x1, 0x2) socket$nl_route(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x400000, 0x0, 0xffffffffffffff1b, 0x7b}, 0x0, &(0x7f0000000280)={0x3fc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x6180, 0x0) sendmmsg$alg(r0, &(0x7f00000002c0)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="1bf1b44bbfa5f7b2", 0x8}], 0x1, 0x0, 0x0, 0x2006c040}], 0x1, 0x800) 106.007933ms ago: executing program 0 (id=1891): bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20040040) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000080)) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000340)='nv', 0x2) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) 241.17µs ago: executing program 3 (id=1892): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x87c, 0x2c, 0xd27, 0x30bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xfff5, 0x10}, {}, {0x8, 0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x3c85127f, 0x4, 0xea9, 0x0, 0x7f130b6d, {0xa, 0x0, 0xfffd, 0x1, 0x3, 0x2}, {0xd, 0x2, 0x1, 0x7, 0x8001, 0x75a}, 0x5, 0x3, 0x5}}, @TCA_POLICE_RATE={0x404, 0x2, [0xe49a, 0x0, 0x9d5, 0xdde, 0x0, 0x9, 0x6d77, 0x400, 0xff, 0xb, 0x5, 0x80, 0x38a7, 0xbdc9, 0x4, 0x90, 0x8, 0x8, 0x60, 0x7, 0x480000, 0x80000001, 0x1ff, 0x7ff, 0x1b, 0x7, 0x7, 0x2, 0xfffffff9, 0x8, 0x2, 0xb17, 0x3, 0x800, 0x3, 0xffff, 0xe, 0xe, 0x6, 0x2, 0x9, 0x200, 0xfffff943, 0x1ff, 0x7, 0x2, 0x2, 0x1000, 0x3, 0x1, 0x1, 0x7f, 0x1, 0xb, 0x7fffffff, 0x9, 0x0, 0x10, 0x400, 0x0, 0x7, 0x1, 0x7, 0x3, 0x44, 0x7ff, 0x1, 0x43, 0x986, 0x7, 0xffffac79, 0xfff, 0x1, 0x7fffffff, 0x200, 0x2, 0x5, 0x7, 0x0, 0x1ff, 0x6, 0x0, 0x9, 0x2, 0xd, 0x3, 0x6, 0x40000, 0x8, 0x8001, 0x5, 0xab, 0x400, 0x1000, 0x1, 0x1, 0x9, 0xa373, 0x1b5, 0x6, 0x40, 0x8, 0x5, 0xb, 0x5, 0x6, 0x100, 0x100, 0x7, 0x35, 0x356, 0x2, 0xffffffff, 0x9, 0x8000, 0x7, 0xf37a, 0x6, 0x0, 0x9, 0x7, 0x0, 0x6, 0x9, 0x80, 0x71f1, 0x7, 0xffffffff, 0x100, 0x8, 0x89, 0xe, 0x0, 0x9, 0x7, 0x7, 0xb, 0x8, 0xffff, 0xb, 0x8, 0xfff, 0xfd1d, 0x5, 0x4, 0x6, 0x81, 0x0, 0x80, 0xf, 0x5, 0x4, 0x80000001, 0x1, 0x6, 0x6, 0xc35, 0x6, 0x6, 0xb68, 0x7fffffff, 0x4, 0x1a, 0x7fffffff, 0x6, 0x9, 0x385d, 0x6, 0xcce, 0x4, 0x6, 0x80, 0x1000, 0x7, 0xfffffe01, 0x2, 0x7, 0x0, 0x8, 0x3, 0x8000, 0x6, 0x9, 0x2, 0x5, 0x7, 0x6, 0xf, 0x2, 0xfffffffb, 0x9, 0x0, 0x1, 0x4, 0x0, 0x7, 0x0, 0x800, 0x80000000, 0x5, 0xa5, 0x7, 0x3ff, 0x5, 0x9, 0x5203, 0x8, 0xb, 0xe, 0x27, 0x6, 0x3, 0x4, 0x6, 0x7, 0xb04, 0x2, 0x1, 0x6, 0x7fff, 0x3, 0x0, 0x5, 0x4, 0x4be2, 0x7fff, 0x3, 0x8001, 0x2, 0x7, 0xfffffffd, 0x6, 0x8, 0x5, 0x7, 0x6, 0xead, 0x8, 0xa3, 0x5000000, 0x3, 0x96, 0x2, 0x9, 0x31ca, 0x1, 0xa17f, 0x41cd, 0x7ff, 0x4, 0x4, 0x9ac3, 0x96, 0x0, 0x7d494b8f, 0x4]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xb, 0x3, 0x10001, 0x7, 0x3, 0x7, 0x8001, 0x10001, 0x6, 0x7ff, 0x8000, 0x40, 0x9, 0x5, 0x0, 0xffffffd5, 0x4, 0x80000000, 0x3, 0x1, 0xe, 0xad76, 0x100, 0x0, 0x38b, 0x0, 0x0, 0x26, 0x400, 0x8, 0x6, 0x5c07, 0xb08, 0x800, 0x4, 0x5, 0xcca1, 0x5f, 0x81, 0x70000, 0xcce, 0x3, 0x5, 0x9, 0x1, 0x5, 0x0, 0x5, 0x2, 0xfffffff9, 0x2, 0x7fff, 0x1dd, 0xfff, 0x1, 0x891, 0x4b56, 0x10000, 0x4, 0x0, 0x5, 0x5, 0x4, 0x5, 0xb6, 0x1000, 0x101, 0x8, 0x3, 0xb, 0x60, 0xf, 0x166, 0x3, 0x80000000, 0xc, 0x3, 0x4, 0x0, 0x10000, 0x4, 0xa88, 0x4, 0x10, 0x8, 0x7, 0xe, 0x3, 0x6, 0x5, 0x5c, 0x6, 0x4, 0x5, 0xce15, 0x8, 0x9, 0x15e, 0x4, 0x8, 0x74, 0x3, 0x5, 0x2, 0x887, 0x8, 0x200, 0x1, 0x7, 0x964, 0x1, 0x0, 0xc010, 0x0, 0x10000, 0x7, 0xffff, 0x4, 0x1, 0x79367550, 0x0, 0x7, 0x1, 0x7, 0x5f8, 0x5, 0xfff, 0x5, 0x9, 0x565, 0x8, 0x0, 0x8, 0x7, 0x0, 0x8, 0x323, 0x74d5, 0x3, 0x8001, 0xa1ce, 0xfffffffd, 0x8, 0x9, 0x100, 0x1, 0x2b6a, 0xd4c, 0x7, 0xed3c, 0xb, 0xfb85, 0xfffffffb, 0x5, 0x6, 0x7, 0x90b, 0x3, 0x5, 0xdbe, 0x7, 0x9, 0x7, 0x7, 0x6, 0x8, 0x6, 0x10001, 0xc77f4f7c, 0x1, 0x52, 0x10, 0x9, 0x5, 0x6, 0x0, 0x9, 0xdab, 0x2, 0x0, 0x0, 0x8, 0x2, 0xfffffff9, 0x2, 0xd, 0xcc, 0x4, 0xb8, 0x9, 0xfffffff2, 0x200, 0x7, 0x9, 0x8001, 0x8, 0x7, 0x6, 0xe, 0x6, 0x7fffffff, 0xffff, 0x80000000, 0x5, 0x3, 0x2, 0x6, 0x3, 0x8, 0x8, 0xfffffff8, 0x37e860e9, 0x4, 0x3, 0x3, 0x4, 0x800, 0x1, 0x4, 0x8e04, 0x7, 0x27d7, 0xffffff0c, 0x0, 0x4, 0x2, 0x3, 0x0, 0x6, 0x7, 0x5, 0x1, 0xa360, 0xc448, 0xfffffffa, 0x2, 0xb, 0x1, 0x2, 0x3, 0x0, 0xaf8, 0x84, 0xffff, 0x1, 0x1ec, 0x690, 0x1, 0x3, 0x89, 0x8, 0x4, 0x4, 0x80000001, 0x4, 0x101]}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) close(r4) socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r3, 0xe}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff3cd4b8bf", 0xfff2}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 0s ago: executing program 0 (id=1893): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000080)={0x44, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @mon_options]}, 0x44}}, 0x400c8a4) kernel console output (not intermixed with test programs): pwc: Askey VC010 type 2 USB webcam detected. [ 369.324811][ T4370] pwc: recv_control_msg error -32 req 02 val 2b00 [ 369.335895][ T4370] pwc: recv_control_msg error -32 req 02 val 2700 [ 369.353810][ T4370] pwc: recv_control_msg error -32 req 02 val 2c00 [ 369.371464][ T4370] pwc: recv_control_msg error -32 req 04 val 1000 [ 369.389097][ T4370] pwc: recv_control_msg error -32 req 04 val 1300 [ 369.406640][ T4370] pwc: recv_control_msg error -32 req 04 val 1400 [ 369.424372][ T4370] pwc: recv_control_msg error -32 req 02 val 2000 [ 369.441992][ T4370] pwc: recv_control_msg error -32 req 02 val 2100 [ 369.616713][ T7503] autofs4:pid:7503:autofs_fill_super: called with bogus options [ 370.682575][ T4370] pwc: recv_control_msg error -71 req 02 val 2500 [ 371.055126][ T4370] pwc: recv_control_msg error -71 req 02 val 2400 [ 371.063723][ T4370] pwc: recv_control_msg error -71 req 02 val 2600 [ 371.518000][ T4370] pwc: recv_control_msg error -71 req 02 val 2900 [ 371.524946][ T4370] pwc: recv_control_msg error -71 req 02 val 2800 [ 371.567652][ T4370] pwc: recv_control_msg error -71 req 04 val 1100 [ 371.580878][ T4370] pwc: recv_control_msg error -71 req 04 val 1200 [ 371.591670][ T4370] pwc: Registered as video103. [ 371.602582][ T4370] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input10 [ 371.616510][ T4370] usb 3-1: USB disconnect, device number 12 [ 371.753230][ T7518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.997'. [ 371.777717][ T7518] netlink: 4 bytes leftover after parsing attributes in process `syz.2.997'. [ 371.807785][ T7518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.997'. [ 371.847470][ T7518] netlink: 4 bytes leftover after parsing attributes in process `syz.2.997'. [ 372.700588][ T7531] tipc: Failed to remove unknown binding: 66,0,0/0:2352009156/2352009157 [ 372.714707][ T7531] tipc: Failed to remove unknown binding: 66,0,0/0:2352009156/2352009157 [ 372.729117][ T7529] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1001'. [ 372.747494][ T126] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 372.787558][ T48] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 372.796340][ T48] Bluetooth: hci2: Injecting HCI hardware error event [ 372.804818][ T48] Bluetooth: hci2: hardware error 0x00 [ 372.941585][ T126] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 372.987277][ T126] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.076017][ T126] usb 2-1: Product: syz [ 373.097425][ T126] usb 2-1: Manufacturer: syz [ 373.102150][ T126] usb 2-1: SerialNumber: syz [ 373.123557][ T126] usb 2-1: config 0 descriptor?? [ 373.181300][ T126] hub 2-1:0.0: bad descriptor, ignoring hub [ 373.218661][ T126] hub: probe of 2-1:0.0 failed with error -5 [ 374.518306][ T7] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 374.720280][ T7] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 374.744018][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.833804][ T7] usb 3-1: config 0 descriptor?? [ 374.851352][ T7] cp210x 3-1:0.0: cp210x converter detected [ 374.857700][ T48] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 375.108974][ T7] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 375.141995][ T7] cp210x 3-1:0.0: querying part number failed [ 376.218926][ T7] usb 3-1: cp210x converter now attached to ttyUSB0 [ 376.237454][ T126] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 376.319319][ T126] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 376.335647][ T7] usb 3-1: USB disconnect, device number 13 [ 376.363931][ T126] dib0700: firmware download failed at 7 with -22 [ 376.374796][ T7] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 376.438087][ T7] cp210x 3-1:0.0: device disconnected [ 376.468104][ T126] usb 2-1: USB disconnect, device number 11 [ 377.593625][ T7571] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1016'. [ 378.210317][ T7583] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 378.220539][ T7583] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 378.228172][ T7583] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 378.553193][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.561924][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.043259][ T7586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1012'. [ 379.093054][ T7586] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1012'. [ 379.166032][ T7586] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.174908][ T7586] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.184112][ T7586] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.193025][ T7586] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 380.839055][ T7586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1012'. [ 380.861688][ T7586] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1012'. [ 381.069560][ T7] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 382.051799][ T7] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 382.077456][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.131158][ T7] usb 2-1: Product: syz [ 382.135418][ T7] usb 2-1: Manufacturer: syz [ 382.179467][ T7] usb 2-1: SerialNumber: syz [ 382.194021][ T7] usb 2-1: config 0 descriptor?? [ 382.222331][ T7] hub 2-1:0.0: bad descriptor, ignoring hub [ 382.236095][ T7] hub: probe of 2-1:0.0 failed with error -5 [ 382.410402][ T7607] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 382.474740][ T7607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.606400][ T7612] netlink: 'syz.1.1023': attribute type 10 has an invalid length. [ 383.167605][ T7612] bridge0: port 3(syz_tun) entered disabled state [ 383.174317][ T7612] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.181644][ T7612] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.527060][ T7619] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1031'. [ 385.469875][ T7] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 385.531012][ T7] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 385.575002][ T7] dib0700: firmware download failed at 7 with -22 [ 385.779933][ T7] usb 2-1: USB disconnect, device number 12 [ 387.774798][ T7650] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 388.063223][ T3653] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.578540][ T7668] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1047'. [ 388.587648][ T7668] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1047'. [ 391.347775][ T7700] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1061'. [ 391.481994][ T7703] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 391.983885][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.367694][ T7735] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1073'. [ 395.655127][ T7743] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 396.499834][ T4317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.152019][ T7766] autofs4:pid:7766:autofs_fill_super: called with bogus options [ 398.846613][ T4370] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 398.860902][ T4370] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 399.356129][ T4320] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 399.799670][ T4320] usb 5-1: config 0 has no interfaces? [ 399.816312][ T4320] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 400.202506][ T4320] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 400.494257][ T4320] usb 5-1: SerialNumber: syz [ 400.584751][ T4320] usb 5-1: config 0 descriptor?? [ 400.625946][ T7782] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1088'. [ 400.902930][ T7788] 9pnet_fd: Insufficient options for proto=fd [ 400.919651][ T7795] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 400.937969][ T4332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.175820][ T7805] autofs4:pid:7805:autofs_fill_super: called with bogus options [ 402.145364][ T4370] usb 5-1: USB disconnect, device number 11 [ 404.177423][ T4370] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 404.351043][ T7837] 9pnet_fd: Insufficient options for proto=fd [ 404.372118][ T4370] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 404.390577][ T4370] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.402497][ T4370] usb 5-1: Product: syz [ 404.406813][ T4370] usb 5-1: Manufacturer: syz [ 404.412094][ T4370] usb 5-1: SerialNumber: syz [ 404.430206][ T4370] usb 5-1: config 0 descriptor?? [ 404.459412][ T4370] hub 5-1:0.0: bad descriptor, ignoring hub [ 404.465543][ T4370] hub: probe of 5-1:0.0 failed with error -5 [ 404.529646][ T4320] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 404.546763][ T4320] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 404.778462][ T7846] bridge0: port 3(syz_tun) entered blocking state [ 404.785072][ T7846] bridge0: port 3(syz_tun) entered disabled state [ 404.796216][ T7846] device syz_tun entered promiscuous mode [ 404.803105][ T7846] bridge0: port 3(syz_tun) entered blocking state [ 404.809699][ T7846] bridge0: port 3(syz_tun) entered forwarding state [ 404.819289][ T7846] netlink: 'syz.4.1104': attribute type 10 has an invalid length. [ 404.828964][ T3653] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 404.840583][ T7846] bridge0: port 3(syz_tun) entered disabled state [ 404.847258][ T7846] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.854868][ T7846] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.877379][ T7846] bridge0: port 3(syz_tun) entered blocking state [ 404.884007][ T7846] bridge0: port 3(syz_tun) entered forwarding state [ 404.890911][ T7846] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.898115][ T7846] bridge0: port 2(bridge_slave_1) entered forwarding state [ 404.905601][ T7846] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.912818][ T7846] bridge0: port 1(bridge_slave_0) entered forwarding state [ 404.923561][ T7846] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 405.258502][ T3653] usb 2-1: config 0 has no interfaces? [ 405.281076][ T3653] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 405.440601][ T3653] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 405.582044][ T3653] usb 2-1: SerialNumber: syz [ 405.731901][ T3653] usb 2-1: config 0 descriptor?? [ 408.092892][ T4321] usb 2-1: USB disconnect, device number 13 [ 408.167507][ T4370] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 408.179181][ T4370] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 408.187266][ T4370] dib0700: firmware download failed at 7 with -22 [ 408.218320][ T4370] usb 5-1: USB disconnect, device number 12 [ 408.533056][ T7880] 9pnet_fd: Insufficient options for proto=fd [ 409.390037][ T7892] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1129'. [ 409.404614][ T7892] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1129'. [ 411.587569][ T4370] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 411.690228][ T7912] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1138'. [ 411.787508][ T4370] usb 4-1: Using ep0 maxpacket: 16 [ 411.826882][ T4370] usb 4-1: config 0 has no interfaces? [ 411.856296][ T4370] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 411.886451][ T4370] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.896755][ T4370] usb 4-1: Product: syz [ 411.901420][ T4370] usb 4-1: Manufacturer: syz [ 411.906074][ T4370] usb 4-1: SerialNumber: syz [ 412.541947][ T4370] usb 4-1: config 0 descriptor?? [ 412.802721][ T7918] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1140'. [ 412.840085][ T7919] 9pnet_fd: Insufficient options for proto=fd [ 412.858087][ T7918] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1140'. [ 413.027657][ T4370] usb 4-1: USB disconnect, device number 6 [ 415.980942][ T7937] tipc: Failed to remove unknown binding: 66,0,0/0:1284300576/1284300578 [ 416.018416][ T7937] tipc: Failed to remove unknown binding: 66,0,0/0:1284300576/1284300577 [ 416.058002][ T7940] tipc: Failed to remove unknown binding: 66,0,0/0:1284300576/1284300578 [ 416.084155][ T7940] tipc: Failed to remove unknown binding: 66,0,0/0:1284300576/1284300577 [ 416.132319][ T7946] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1149'. [ 416.151978][ T7946] 9pnet_fd: Insufficient options for proto=fd [ 417.171608][ T7962] 9pnet_fd: Insufficient options for proto=fd [ 420.694113][ T7983] tipc: Failed to remove unknown binding: 66,0,0/0:4030859175/4030859177 [ 420.722904][ T7983] tipc: Failed to remove unknown binding: 66,0,0/0:4030859175/4030859176 [ 420.738380][ T7983] tipc: Failed to remove unknown binding: 66,0,0/0:4030859175/4030859177 [ 420.753429][ T7985] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1162'. [ 420.776797][ T7983] tipc: Failed to remove unknown binding: 66,0,0/0:4030859175/4030859176 [ 420.788051][ T7985] 9pnet_fd: Insufficient options for proto=fd [ 421.048910][ T7993] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1166'. [ 421.079989][ T7993] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1166'. [ 421.123855][ T7993] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1166'. [ 421.196885][ T7993] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1166'. [ 421.613757][ T8000] 9pnet_fd: Insufficient options for proto=fd [ 424.588366][ T8026] tipc: Failed to remove unknown binding: 66,0,0/0:2097552793/2097552795 [ 424.599471][ T8026] tipc: Failed to remove unknown binding: 66,0,0/0:2097552793/2097552794 [ 424.613760][ T8026] tipc: Failed to remove unknown binding: 66,0,0/0:2097552793/2097552795 [ 424.646138][ T8026] tipc: Failed to remove unknown binding: 66,0,0/0:2097552793/2097552794 [ 425.805351][ T8039] autofs4:pid:8039:autofs_fill_super: called with bogus options [ 428.686579][ T8053] 9pnet_fd: Insufficient options for proto=fd [ 430.408029][ T4370] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 430.647600][ T4370] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 430.679280][ T4370] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.748084][ T4370] usb 3-1: Product: syz [ 430.784960][ T4370] usb 3-1: Manufacturer: syz [ 430.818461][ T4370] usb 3-1: SerialNumber: syz [ 431.074151][ T4370] usb 3-1: config 0 descriptor?? [ 431.196947][ T4370] hub 3-1:0.0: bad descriptor, ignoring hub [ 431.251999][ T4370] hub: probe of 3-1:0.0 failed with error -5 [ 431.620368][ T8070] bridge0: port 3(syz_tun) entered blocking state [ 431.627387][ T8070] bridge0: port 3(syz_tun) entered disabled state [ 431.639938][ T8070] device syz_tun entered promiscuous mode [ 431.647301][ T8070] bridge0: port 3(syz_tun) entered blocking state [ 431.653880][ T8070] bridge0: port 3(syz_tun) entered forwarding state [ 431.665435][ T8070] netlink: 'syz.2.1186': attribute type 10 has an invalid length. [ 431.687392][ T8070] bridge0: port 3(syz_tun) entered disabled state [ 431.694238][ T8070] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.701561][ T8070] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.876536][ T8080] autofs4:pid:8080:autofs_fill_super: called with bogus options [ 434.685468][ T4370] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 434.715154][ T4370] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 434.723525][ T4370] dib0700: firmware download failed at 7 with -22 [ 434.736951][ T8094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1194'. [ 435.192793][ T4370] usb 3-1: USB disconnect, device number 14 [ 436.990420][ T4370] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 437.012720][ T4370] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz1] on syz0 [ 437.030672][ T8108] netlink: 'syz.0.1199': attribute type 10 has an invalid length. [ 437.136455][ T8108] team0: Port device dummy0 added [ 437.146382][ T8112] netlink: 'syz.0.1199': attribute type 10 has an invalid length. [ 437.215982][ T8112] team0: Port device dummy0 removed [ 437.226335][ T8112] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 437.238663][ T8111] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1201'. [ 437.302314][ T4370] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 437.631387][ T4370] usb 3-1: config 0 has no interfaces? [ 437.638281][ T4370] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 437.647626][ T4370] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 438.036687][ T4370] usb 3-1: SerialNumber: syz [ 438.045734][ T4370] usb 3-1: config 0 descriptor?? [ 439.602930][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 442.546615][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.637019][ T7] usb 3-1: USB disconnect, device number 15 [ 443.136855][ T8160] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1214'. [ 450.047649][ T8190] syz.0.1222 (8190) used greatest stack depth: 20248 bytes left [ 450.172225][ T4321] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 450.220796][ T4321] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 450.594915][ T4317] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 450.851818][ T4320] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 451.314394][ T4317] usb 2-1: config 0 has no interfaces? [ 451.321254][ T4317] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 451.342490][ T4317] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 451.350586][ T4317] usb 2-1: SerialNumber: syz [ 451.381281][ T4317] usb 2-1: config 0 descriptor?? [ 451.391663][ T4320] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 451.432269][ T4320] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.440369][ T4320] usb 3-1: Product: syz [ 451.444968][ T4320] usb 3-1: Manufacturer: syz [ 451.449623][ T4320] usb 3-1: SerialNumber: syz [ 451.463116][ T4320] usb 3-1: config 0 descriptor?? [ 452.400053][ T8223] netlink: 'syz.2.1226': attribute type 10 has an invalid length. [ 452.517120][ T4320] hub 3-1:0.0: bad descriptor, ignoring hub [ 452.615979][ T4320] hub: probe of 3-1:0.0 failed with error -5 [ 454.227245][ T4317] usb 2-1: USB disconnect, device number 14 [ 454.358483][ T4320] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 454.385906][ T4320] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 454.395457][ T8239] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1237'. [ 454.405608][ T4320] dib0700: firmware download failed at 7 with -22 [ 454.442361][ T8239] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1237'. [ 454.475006][ T4320] usb 3-1: USB disconnect, device number 16 [ 454.575879][ T8245] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1236'. [ 454.585502][ T8245] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1236'. [ 456.268162][ T8268] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 456.327298][ T8269] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1244'. [ 456.436873][ T8273] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:0 [ 457.467497][ T8281] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1250'. [ 457.585796][ T8281] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1250'. [ 457.617399][ T4317] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 457.652427][ T4317] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz1] on syz0 [ 457.816674][ T4370] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 458.719075][ T8297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1251'. [ 458.728088][ T8297] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1251'. [ 458.738006][ T4320] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 459.135768][ T4320] usb 3-1: config 0 has no interfaces? [ 459.142917][ T4320] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 459.203800][ T4320] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 459.232450][ T4320] usb 3-1: SerialNumber: syz [ 459.287536][ T4370] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 459.296820][ T4320] usb 3-1: config 0 descriptor?? [ 459.314535][ T4370] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.322615][ T4370] usb 5-1: Product: syz [ 459.326903][ T4370] usb 5-1: Manufacturer: syz [ 459.331648][ T4370] usb 5-1: SerialNumber: syz [ 459.358275][ T4370] usb 5-1: config 0 descriptor?? [ 459.384856][ T4370] hub 5-1:0.0: bad descriptor, ignoring hub [ 459.390861][ T4370] hub: probe of 5-1:0.0 failed with error -5 [ 460.115389][ T8308] netlink: 'syz.4.1248': attribute type 10 has an invalid length. [ 460.767425][ T8308] bridge0: port 3(syz_tun) entered disabled state [ 460.774165][ T8308] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.781561][ T8308] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.634551][ T8324] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1257'. [ 461.646538][ T8324] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1257'. [ 462.636166][ T4317] usb 3-1: USB disconnect, device number 17 [ 462.740140][ T4370] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 462.763433][ T4370] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 462.782160][ T4370] dib0700: firmware download failed at 7 with -22 [ 462.848657][ T4370] usb 5-1: USB disconnect, device number 13 [ 462.953051][ T8335] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1262'. [ 463.003931][ T8335] netlink: 'syz.0.1262': attribute type 22 has an invalid length. [ 463.122154][ T8335] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1262'. [ 463.431550][ T8340] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1261'. [ 463.474289][ T8340] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1261'. [ 463.525321][ T8335] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1262'. [ 463.585453][ T8335] netlink: 'syz.0.1262': attribute type 22 has an invalid length. [ 463.606210][ T8335] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1262'. [ 464.034856][ T14] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 464.077036][ T14] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 465.205592][ T14] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 465.326104][ T8374] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1275'. [ 465.337233][ T8374] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1275'. [ 465.412270][ T14] usb 3-1: config 0 has no interfaces? [ 465.424803][ T14] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 465.464635][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 465.475681][ T7] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 465.529330][ T14] usb 3-1: SerialNumber: syz [ 465.578001][ T14] usb 3-1: config 0 descriptor?? [ 465.702141][ T7] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 465.718831][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.756700][ T7] usb 4-1: Product: syz [ 465.761054][ T7] usb 4-1: Manufacturer: syz [ 465.767351][ T7] usb 4-1: SerialNumber: syz [ 467.296683][ T7] usb 4-1: config 0 descriptor?? [ 467.307724][ T7] hub 4-1:0.0: bad descriptor, ignoring hub [ 467.317859][ T7] hub: probe of 4-1:0.0 failed with error -5 [ 467.463206][ T14] usb 3-1: USB disconnect, device number 18 [ 467.640471][ T8383] netlink: 'syz.3.1276': attribute type 10 has an invalid length. [ 467.653880][ T8383] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.661358][ T8383] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.679807][ T8383] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.687111][ T8383] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.694654][ T8383] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.701871][ T8383] bridge0: port 1(bridge_slave_0) entered forwarding state [ 467.717430][ T8383] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 469.664513][ T7] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 469.720246][ T7] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 469.728373][ T7] dib0700: firmware download failed at 7 with -22 [ 469.846291][ T7] usb 4-1: USB disconnect, device number 7 [ 470.054957][ T8385] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1281'. [ 470.122232][ T8385] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1281'. [ 471.997384][ T8428] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1291'. [ 473.146332][ T7] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 474.010549][ T7] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 474.026940][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.035129][ T7] usb 4-1: Product: syz [ 474.056766][ T7] usb 4-1: Manufacturer: syz [ 474.061477][ T7] usb 4-1: SerialNumber: syz [ 474.094318][ T7] usb 4-1: config 0 descriptor?? [ 474.117925][ T7] hub 4-1:0.0: bad descriptor, ignoring hub [ 474.123941][ T7] hub: probe of 4-1:0.0 failed with error -5 [ 474.451765][ T8452] netlink: 'syz.3.1295': attribute type 10 has an invalid length. [ 476.005722][ T8452] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.013034][ T8452] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.097961][ T7] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 477.394657][ T7] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 477.402857][ T7] dib0700: firmware download failed at 7 with -22 [ 478.840842][ T7] usb 4-1: USB disconnect, device number 8 [ 480.519675][ T4269] device syz_tun left promiscuous mode [ 480.550796][ T4269] bridge0: port 3(syz_tun) entered disabled state [ 480.718036][ T7] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 482.063853][ T8502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1305'. [ 482.072956][ T8502] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1305'. [ 482.575238][ T7] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 482.588057][ T8508] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1317'. [ 482.597242][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.597301][ T7] usb 3-1: Product: syz [ 482.597319][ T7] usb 3-1: Manufacturer: syz [ 482.597336][ T7] usb 3-1: SerialNumber: syz [ 482.619616][ T7] usb 3-1: config 0 descriptor?? [ 482.627426][ T7] hub 3-1:0.0: bad descriptor, ignoring hub [ 482.643408][ T7] hub: probe of 3-1:0.0 failed with error -5 [ 482.722930][ T8508] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1317'. [ 482.959031][ T8516] netlink: 'syz.2.1313': attribute type 10 has an invalid length. [ 484.482592][ T7] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 484.571960][ T7] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 484.620720][ T7] dib0700: firmware download failed at 7 with -22 [ 484.707820][ T7] usb 3-1: USB disconnect, device number 19 [ 485.689356][ T8537] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 485.710798][ T8537] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 485.801064][ T8537] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 485.811447][ T4272] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 485.820225][ T4272] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 485.827887][ T8537] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 487.292317][ T8533] chnl_net:caif_netlink_parms(): no params data found [ 487.554216][ T8565] netlink: 'syz.0.1334': attribute type 10 has an invalid length. [ 487.563480][ T8565] bridge0: port 3(syz_tun) entered disabled state [ 487.570211][ T8565] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.577523][ T8565] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.227359][ T8537] Bluetooth: hci5: command 0x0409 tx timeout [ 489.855541][ T8533] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.896625][ T8533] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.946527][ T8533] device bridge_slave_0 entered promiscuous mode [ 489.997365][ T8533] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.004946][ T8533] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.358966][ T8537] Bluetooth: hci5: command 0x041b tx timeout [ 490.396105][ T8533] device bridge_slave_1 entered promiscuous mode [ 490.555613][ T8533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 490.625762][ T8533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 490.778247][ T8533] team0: Port device team_slave_0 added [ 490.825474][ T8533] team0: Port device team_slave_1 added [ 490.868621][ T8533] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 490.909234][ T8533] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 490.979141][ T8533] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 491.003166][ T8533] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 491.029125][ T8533] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 491.136730][ T8533] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 491.848204][ T8533] device hsr_slave_0 entered promiscuous mode [ 491.877025][ T8533] device hsr_slave_1 entered promiscuous mode [ 491.919174][ T8533] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 491.947798][ T8533] Cannot create hsr debugfs directory [ 492.289169][ T8596] syz.2.1344 uses obsolete (PF_INET,SOCK_PACKET) [ 492.369020][ T48] Bluetooth: hci5: command 0x040f tx timeout [ 492.599464][ T8533] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 492.614751][ T8533] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 492.625332][ T8533] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 492.637481][ T8533] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 492.685247][ T8606] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1345'. [ 492.694317][ T8606] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1345'. [ 492.868987][ T8533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 492.925816][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 492.948040][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 493.712325][ T8533] 8021q: adding VLAN 0 to HW filter on device team0 [ 493.809724][ T8517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 493.830035][ T8517] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 493.855853][ T8517] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.863109][ T8517] bridge0: port 1(bridge_slave_0) entered forwarding state [ 493.936349][ T8517] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 494.029101][ T8617] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1350'. [ 494.081685][ T8517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 494.092036][ T8517] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 494.406282][ T8517] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.413821][ T8517] bridge0: port 2(bridge_slave_1) entered forwarding state [ 494.704945][ T48] Bluetooth: hci5: command 0x0419 tx timeout [ 494.979509][ T8517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 495.300686][ T8517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 495.349516][ T8517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 495.389662][ T8517] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 495.426240][ T8517] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 495.450828][ T8517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 495.460456][ T8517] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 495.479632][ T8517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 495.496829][ T8517] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 495.582594][ T8639] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1359'. [ 495.780132][ T8533] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 495.794548][ T8533] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 495.805216][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 495.814991][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 496.144104][ T8643] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1358'. [ 496.153270][ T8643] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1358'. [ 498.495733][ T8673] netlink: 'syz.0.1367': attribute type 13 has an invalid length. [ 499.097439][ T8673] gretap0: refused to change device tx_queue_len [ 499.104407][ T8673] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 500.255449][ T4294] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.445579][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 500.465270][ T8690] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1372'. [ 500.488751][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 500.506080][ T8690] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1372'. [ 500.521682][ T8533] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 500.722417][ T8694] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1373'. [ 500.752127][ T8695] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1371'. [ 500.761245][ T8695] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1371'. [ 500.929369][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.935756][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.624557][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 502.644186][ T8727] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1383'. [ 502.656581][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 502.701683][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 502.714197][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 502.724353][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 502.733509][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 502.747075][ T8533] device veth0_vlan entered promiscuous mode [ 502.765921][ T8533] device veth1_vlan entered promiscuous mode [ 502.798146][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 502.806823][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 502.815889][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 502.825485][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 502.838000][ T8533] device veth0_macvtap entered promiscuous mode [ 502.866648][ T8533] device veth1_macvtap entered promiscuous mode [ 502.904224][ T8734] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1385'. [ 502.919898][ T8734] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1385'. [ 503.194468][ T8533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 503.303686][ T8533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.470544][ T8533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 503.717137][ T8533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.762229][ T8533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 503.773649][ T8533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.796349][ T8533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 503.828830][ T8533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.857180][ T8533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 503.890160][ T8533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.918624][ T8533] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 503.926626][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 503.950821][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 503.983118][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 504.009925][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 504.195128][ T8533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 504.205892][ T8533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.216575][ T8533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 504.230720][ T8533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.240674][ T8533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 504.251257][ T8533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.261543][ T8533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 504.272438][ T8533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.283246][ T8533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 504.339523][ T8533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.675521][ T8533] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 504.897242][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 504.923624][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 505.031331][ T8533] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.065732][ T8533] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.087600][ T14] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 505.095560][ T8533] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.118144][ T8533] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.437604][ T14] usb 3-1: device not accepting address 20, error -71 [ 507.520209][ T4294] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 507.533319][ T4294] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 507.543673][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 507.616960][ T4294] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 507.631629][ T4294] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 507.641396][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 509.632522][ T8804] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1407'. [ 510.377456][ T8829] ======================================================= [ 510.377456][ T8829] WARNING: The mand mount option has been deprecated and [ 510.377456][ T8829] and is ignored by this kernel. Remove the mand [ 510.377456][ T8829] option from the mount to silence this warning. [ 510.377456][ T8829] ======================================================= [ 510.508851][ T8834] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1422'. [ 510.778526][ T7] kernel read not supported for file /dsp (pid: 7 comm: kworker/0:0) [ 512.615152][ T26] audit: type=1804 audit(1775818901.939:68): pid=8882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1441" name="/newroot/271/bus/bus" dev="overlay" ino=1421 res=1 errno=0 [ 512.636767][ C1] vkms_vblank_simulate: vblank timer overrun [ 514.653453][ T8895] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1447'. [ 514.662695][ T8895] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1447'. [ 519.446109][ T4317] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 519.640458][ T4317] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 519.676016][ T4317] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 519.752136][ T4317] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 519.824740][ T4317] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.883958][ T4317] usb 4-1: config 0 descriptor?? [ 520.328047][ T4317] hid-steam 0003:28DE:1142.001B: unknown main item tag 0x0 [ 520.362222][ T4317] hid-steam 0003:28DE:1142.001B: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 520.425861][ T4317] hid-steam 0003:28DE:1142.001C: unknown main item tag 0x0 [ 520.461777][ T4317] hid-steam 0003:28DE:1142.001C: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 520.556080][ T4317] hid-steam 0003:28DE:1142.001B: Steam wireless receiver connected [ 520.571794][ T4317] hid-steam 0003:28DE:1142.001B: No HID_FEATURE_REPORT submitted - nothing to read [ 520.616837][ T4317] usb 4-1: USB disconnect, device number 9 [ 520.685588][ T4317] hid-steam 0003:28DE:1142.001B: Steam wireless receiver disconnected [ 521.443049][ T9015] fido_id[9015]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 521.712338][ T9036] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1468'. [ 521.724331][ T9036] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1468'. [ 522.182486][ T26] audit: type=1326 audit(1775818911.509:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9045 comm="syz.1.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9b439c819 code=0x7ffc0000 [ 522.244075][ T26] audit: type=1326 audit(1775818911.509:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9045 comm="syz.1.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9b439c819 code=0x7ffc0000 [ 522.395431][ T9053] afs: Unknown parameter '' [ 522.762160][ T26] audit: type=1326 audit(1775818911.509:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9045 comm="syz.1.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7fc9b439c819 code=0x7ffc0000 [ 523.178562][ T26] audit: type=1326 audit(1775818911.509:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9045 comm="syz.1.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9b439c819 code=0x7ffc0000 [ 523.265945][ T26] audit: type=1326 audit(1775818911.509:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9045 comm="syz.1.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9b439c819 code=0x7ffc0000 [ 523.425943][ T26] audit: type=1326 audit(1775818911.509:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9045 comm="syz.1.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fc9b439c819 code=0x7ffc0000 [ 523.502363][ T26] audit: type=1326 audit(1775818911.509:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9045 comm="syz.1.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9b439c819 code=0x7ffc0000 [ 523.528570][ T9064] 9pnet_fd: Insufficient options for proto=fd [ 524.065674][ T26] audit: type=1326 audit(1775818911.509:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9045 comm="syz.1.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9b439c819 code=0x7ffc0000 [ 524.113539][ T9070] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 524.223031][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 524.233016][ T26] audit: type=1326 audit(1775818911.509:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9045 comm="syz.1.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fc9b439c819 code=0x7ffc0000 [ 524.270845][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 524.306895][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 524.326170][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 524.341724][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 524.360297][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 524.377254][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 524.403966][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 524.419687][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 524.437817][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 524.459476][ T26] audit: type=1326 audit(1775818913.789:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9078 comm="syz.0.1486" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f341159c819 code=0x0 [ 524.469271][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 524.499753][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 524.507838][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 524.515563][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 524.523749][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 524.531486][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 524.546750][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 524.562775][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 524.577195][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 524.591490][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 524.607176][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 524.608488][ T8967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.619964][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 524.652674][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 524.669694][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 524.683299][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 524.706758][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 524.729891][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 524.744411][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 524.761446][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 524.778717][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 524.811646][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 524.829616][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 524.855939][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 524.884647][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 524.895937][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 524.903423][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 524.945910][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 524.957119][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 525.152178][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 525.159746][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 525.168634][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 525.176290][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 525.183738][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 525.191240][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 525.199046][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 525.206747][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 525.214205][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 525.249587][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 525.272424][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 525.289807][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 525.324063][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 525.340252][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 525.356471][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 525.379961][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 525.400944][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 525.419328][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 525.438199][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 525.461562][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 525.491870][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 525.515516][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 525.539965][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 525.563591][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 525.603589][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 525.617338][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 525.624934][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 525.632691][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 525.642005][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 525.649924][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 525.669143][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 525.693276][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 525.720341][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 525.742814][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 525.771811][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 525.947184][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 525.970592][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 525.997307][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 526.017778][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 526.025271][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 526.033521][ T9088] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 526.063610][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 526.071944][ T9100] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 526.084171][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 526.124780][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 526.163785][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 526.205919][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 526.225381][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 526.253007][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 526.277662][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 526.295603][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 526.325424][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 526.351691][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 526.359639][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 526.388135][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 526.416020][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 526.423517][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 526.453809][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 526.658500][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 526.666933][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 526.674496][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 526.682661][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 526.691853][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 526.699731][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 526.725926][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 526.733419][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 526.796243][ T9113] 9pnet_fd: Insufficient options for proto=fd [ 527.477569][ T9117] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 527.485483][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 527.493219][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 527.500788][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 527.508343][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 527.515823][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 527.524131][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 527.531669][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 527.546405][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 527.553890][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 527.582636][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 527.597274][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 527.638833][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 527.656524][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 527.670346][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 527.680303][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 527.696816][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 527.720571][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 527.743871][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 527.758197][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 527.772471][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 527.786039][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 527.800497][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 527.993946][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 528.002114][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 528.009824][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 528.017582][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 528.025318][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 528.032930][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 528.041411][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 528.049028][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 528.056509][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 528.064099][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 528.071696][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 528.079956][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 528.088185][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 528.095828][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 528.103310][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 528.115815][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 528.158429][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 528.267933][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 528.430825][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 528.568134][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 528.927845][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 528.935512][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 528.945247][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 528.953189][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 528.962406][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 528.970346][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 528.978226][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 528.985909][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 528.993489][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 529.001188][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 529.008788][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 529.016614][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 529.024152][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 529.042149][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 529.052310][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 529.072543][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 529.081766][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 529.100189][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 529.115814][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 529.126120][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 529.143842][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 529.170696][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 529.192684][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 529.205911][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 529.223731][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 529.233879][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 529.254202][ T3653] hid-generic 8000:0005:0009.001D: unknown main item tag 0x0 [ 529.284942][ T3653] hid-generic 8000:0005:0009.001D: hidraw0: HID v0.02 Device [syz1] on syz0 [ 529.625664][ T9131] fido_id[9131]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 529.661292][ T9140] netlink: 332 bytes leftover after parsing attributes in process `syz.0.1504'. [ 529.805942][ T3653] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 530.038309][ T3653] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 530.062146][ T3653] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 530.142556][ T3653] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 530.256595][ T3653] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.576557][ T3653] usb 4-1: config 0 descriptor?? [ 530.878590][ T3653] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 530.946186][ T3653] dvb-usb: bulk message failed: -22 (3/0) [ 530.968772][ T3653] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 531.026315][ T3653] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 531.054802][ T3653] usb 4-1: media controller created [ 531.082175][ T3653] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 531.229844][ T3653] dvb-usb: bulk message failed: -22 (6/0) [ 531.245007][ T3653] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 531.308556][ T9157] 9pnet_fd: Insufficient options for proto=fd [ 531.337934][ T3653] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input11 [ 531.641692][ T3653] dvb-usb: schedule remote query interval to 150 msecs. [ 531.843285][ T3653] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 531.914625][ T3653] usb 4-1: USB disconnect, device number 10 [ 532.028548][ T4317] dvb-usb: bulk message failed: -22 (1/0) [ 532.034729][ T4317] dvb-usb: error while querying for an remote control event. [ 532.114701][ T3653] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 532.149676][ T4370] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 532.187199][ T4370] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 532.340681][ T9168] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 533.172379][ T7] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 533.367555][ T7] usb 3-1: config 0 has no interfaces? [ 533.374383][ T7] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 533.421795][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 533.435967][ T7] usb 3-1: SerialNumber: syz [ 533.456824][ T9177] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1518'. [ 533.497990][ T7] usb 3-1: config 0 descriptor?? [ 533.523969][ T9177] 8021q: VLANs not supported on sit0 [ 533.771174][ T9187] device vxcan3 entered promiscuous mode [ 533.865876][ T7] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 534.060243][ T7] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 534.071661][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.086960][ T7] usb 4-1: Product: syz [ 534.091863][ T7] usb 4-1: Manufacturer: syz [ 534.096861][ T7] usb 4-1: SerialNumber: syz [ 534.112639][ T7] usb 4-1: config 0 descriptor?? [ 534.167672][ T7] hub 4-1:0.0: bad descriptor, ignoring hub [ 534.182849][ T7] hub: probe of 4-1:0.0 failed with error -5 [ 534.617112][ T9203] bridge0: port 3(syz_tun) entered blocking state [ 534.624125][ T9203] bridge0: port 3(syz_tun) entered disabled state [ 534.635718][ T9203] device syz_tun entered promiscuous mode [ 535.383001][ T8967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.019008][ T4370] usb 3-1: USB disconnect, device number 22 [ 536.107376][ T9212] block nbd5: NBD_DISCONNECT [ 536.148563][ T9208] block nbd5: Disconnected due to user request. [ 536.182375][ T9208] block nbd5: shutting down sockets [ 536.676353][ T3653] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 536.920600][ T3653] usb 6-1: device descriptor read/64, error -71 [ 537.223673][ T3653] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 537.233094][ T7] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 537.253343][ T7] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 537.275727][ T7] dib0700: firmware download failed at 7 with -22 [ 537.306487][ T7] usb 4-1: USB disconnect, device number 11 [ 537.361569][ T9228] overlayfs: './file0' not a directory [ 537.405503][ T9228] capability: warning: `syz.1.1533' uses 32-bit capabilities (legacy support in use) [ 537.442483][ T3653] usb 6-1: device descriptor read/64, error -71 [ 537.683980][ T3653] usb usb6-port1: attempt power cycle [ 537.825421][ T7] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 537.836590][ T7] hid-generic 0000:0000:0000.001F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 538.095824][ T3653] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 538.137187][ T3653] usb 6-1: device descriptor read/8, error -71 [ 538.409318][ T3653] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 538.476702][ T3653] usb 6-1: device descriptor read/8, error -71 [ 538.511157][ T4370] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 538.605836][ T3653] usb usb6-port1: unable to enumerate USB device [ 538.710278][ T4370] usb 2-1: config 0 has no interfaces? [ 538.717575][ T4370] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 538.922010][ T9259] netlink: 'syz.0.1544': attribute type 10 has an invalid length. [ 538.992478][ T4370] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 539.001112][ T4370] usb 2-1: SerialNumber: syz [ 540.622751][ T4370] usb 2-1: config 0 descriptor?? [ 540.763783][ T9267] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 540.881889][ T3653] usb 2-1: USB disconnect, device number 15 [ 541.120578][ T9278] tipc: Failed to remove unknown binding: 66,0,0/0:2919963281/2919963283 [ 541.129432][ T9278] tipc: Failed to remove unknown binding: 66,0,0/0:2919963281/2919963282 [ 541.144094][ T9278] tipc: Failed to remove unknown binding: 66,0,0/0:2919963281/2919963283 [ 541.153176][ T9278] tipc: Failed to remove unknown binding: 66,0,0/0:2919963281/2919963282 [ 543.077567][ T4370] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 543.117155][ T4370] hid-generic 0000:0000:0000.0020: hidraw0: HID v0.00 Device [syz1] on syz0 [ 543.166217][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.314944][ T9308] tipc: Failed to remove unknown binding: 66,0,0/0:4150084598/4150084600 [ 543.328723][ T9308] tipc: Failed to remove unknown binding: 66,0,0/0:4150084598/4150084599 [ 543.342515][ T9308] tipc: Failed to remove unknown binding: 66,0,0/0:4150084598/4150084600 [ 543.357881][ T9308] tipc: Failed to remove unknown binding: 66,0,0/0:4150084598/4150084599 [ 543.419328][ T4370] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 543.662238][ T4370] usb 2-1: config 0 has no interfaces? [ 543.722285][ T4370] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 543.957132][ T4370] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 544.125793][ T4370] usb 2-1: SerialNumber: syz [ 544.313204][ T4370] usb 2-1: config 0 descriptor?? [ 544.672893][ T9328] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1568'. [ 544.682124][ T9328] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1568'. [ 544.811417][ T9334] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1573'. [ 544.821683][ T9334] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 544.943795][ T9339] autofs4:pid:9339:autofs_fill_super: called with bogus options [ 546.019529][ T9346] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1575'. [ 547.060746][ T9351] tipc: Failed to remove unknown binding: 66,0,0/0:1370430603/1370430605 [ 547.070325][ T9351] tipc: Failed to remove unknown binding: 66,0,0/0:1370430603/1370430604 [ 547.079919][ T9351] tipc: Failed to remove unknown binding: 66,0,0/0:1370430603/1370430605 [ 547.117421][ T4370] usb 2-1: USB disconnect, device number 16 [ 547.420218][ T9351] tipc: Failed to remove unknown binding: 66,0,0/0:1370430603/1370430604 [ 549.925083][ T9381] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1585'. [ 549.934116][ T9381] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1585'. [ 550.419619][ T7] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 550.460482][ T7] hid-generic 0000:0000:0000.0021: hidraw0: HID v0.00 Device [syz1] on syz0 [ 550.494269][ T9398] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1593'. [ 550.531765][ T9398] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1593'. [ 550.795604][ T7] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 551.498850][ T7] usb 2-1: config 0 has no interfaces? [ 551.500716][ T9417] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1599'. [ 551.500742][ T9417] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1599'. [ 551.796429][ T7] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 551.805626][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 551.813674][ T7] usb 2-1: SerialNumber: syz [ 551.820937][ T7] usb 2-1: config 0 descriptor?? [ 552.355714][ T3653] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 552.588396][ T3653] usb 6-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 552.674835][ T3653] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.831209][ T3653] usb 6-1: Product: syz [ 553.058662][ T3653] usb 6-1: Manufacturer: syz [ 553.063360][ T3653] usb 6-1: SerialNumber: syz [ 553.182521][ T3653] usb 6-1: config 0 descriptor?? [ 553.190424][ T3653] hub 6-1:0.0: bad descriptor, ignoring hub [ 553.196924][ T3653] hub: probe of 6-1:0.0 failed with error -5 [ 553.267149][ T9437] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1607'. [ 553.290821][ T9437] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1607'. [ 553.531674][ T9445] bridge0: port 3(syz_tun) entered blocking state [ 553.538596][ T9445] bridge0: port 3(syz_tun) entered disabled state [ 553.550539][ T9445] device syz_tun entered promiscuous mode [ 553.557925][ T9445] bridge0: port 3(syz_tun) entered blocking state [ 553.564494][ T9445] bridge0: port 3(syz_tun) entered forwarding state [ 553.575819][ T9445] netlink: 'syz.5.1601': attribute type 10 has an invalid length. [ 553.678094][ T4320] usb 2-1: USB disconnect, device number 17 [ 553.807302][ T9445] bridge0: port 3(syz_tun) entered disabled state [ 553.814013][ T9445] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.821814][ T9445] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.898918][ T9445] bridge0: port 3(syz_tun) entered blocking state [ 553.905633][ T9445] bridge0: port 3(syz_tun) entered forwarding state [ 553.912496][ T9445] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.919730][ T9445] bridge0: port 2(bridge_slave_1) entered forwarding state [ 553.927226][ T9445] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.934398][ T9445] bridge0: port 1(bridge_slave_0) entered forwarding state [ 553.953173][ T9445] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 554.874554][ T9463] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1615'. [ 554.884024][ T9463] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1615'. [ 555.419587][ T3653] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 555.453109][ T3653] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 555.479276][ T3653] dib0700: firmware download failed at 7 with -22 [ 555.562823][ T3653] usb 6-1: USB disconnect, device number 6 [ 555.656796][ T4320] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 555.687013][ T4320] hid-generic 0000:0000:0000.0022: hidraw0: HID v0.00 Device [syz1] on syz0 [ 556.695508][ T3653] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 557.098532][ T3653] usb 6-1: config 0 has no interfaces? [ 557.109223][ T3653] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 557.163195][ T3653] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 557.187038][ T3653] usb 6-1: SerialNumber: syz [ 557.245342][ T3653] usb 6-1: config 0 descriptor?? [ 557.567021][ T9507] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 557.725143][ T9509] sg_write: data in/out 1713772022/1634 bytes for SCSI command 0x49-- guessing data in; [ 557.725143][ T9509] program syz.3.1631 not setting count and/or reply_len properly [ 558.237128][ T9503] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 558.727344][ T4370] usb 6-1: USB disconnect, device number 7 [ 558.945649][ T3653] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 559.050071][ T9519] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1634'. [ 559.059388][ T9519] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1634'. [ 559.200245][ T3653] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 559.397320][ T3653] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.566564][ T3653] usb 3-1: Product: syz [ 559.570816][ T3653] usb 3-1: Manufacturer: syz [ 559.623769][ T3653] usb 3-1: SerialNumber: syz [ 559.821697][ T3653] usb 3-1: config 0 descriptor?? [ 559.829140][ T3653] hub 3-1:0.0: bad descriptor, ignoring hub [ 559.835315][ T3653] hub: probe of 3-1:0.0 failed with error -5 [ 560.105816][ T4370] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 560.451096][ T9526] 9pnet: Could not find request transport: fd0xffffffffffffffff0xffffffffffffffff [ 560.655054][ T9531] netlink: 'syz.2.1632': attribute type 10 has an invalid length. [ 561.470076][ T4370] usb 6-1: Using ep0 maxpacket: 32 [ 561.510396][ T4370] usb 6-1: unable to get BOS descriptor or descriptor too short [ 561.536653][ T4370] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 561.585503][ T4370] usb 6-1: too many endpoints for config 1 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 561.631639][ T4370] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 129 [ 561.677945][ T4370] usb 6-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 561.715477][ T4370] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.735472][ T4370] usb 6-1: Product: syz [ 561.739710][ T4370] usb 6-1: Manufacturer: syz [ 561.744354][ T4370] usb 6-1: SerialNumber: syz [ 562.396707][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.408871][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.741101][ T4370] usb 6-1: USB disconnect, device number 8 [ 562.899225][ T3653] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 563.110929][ T3653] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 563.119894][ T3653] dib0700: firmware download failed at 7 with -22 [ 563.165031][ T41] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 563.173316][ T3653] usb 3-1: USB disconnect, device number 23 [ 563.452978][ T41] hid-generic 0000:0000:0000.0023: hidraw0: HID v0.00 Device [syz1] on syz0 [ 563.965851][ T3653] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 564.227239][ T3653] usb 3-1: config 0 has no interfaces? [ 564.234263][ T3653] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 564.244280][ T3653] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 564.254122][ T3653] usb 3-1: SerialNumber: syz [ 564.261070][ T3653] usb 3-1: config 0 descriptor?? [ 565.170550][ T9577] 9pnet: Could not find request transport: fd0xffffffffffffffff0xffffffffffffffff [ 566.047402][ T9579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1647'. [ 566.056578][ T9579] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1647'. [ 566.407540][ T4370] usb 3-1: USB disconnect, device number 24 [ 566.490830][ T9583] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 566.490830][ T9583] The task syz.3.1649 (9583) triggered the difference, watch for misbehavior. [ 569.865590][ T4318] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 570.258087][ T9615] 9pnet_fd: Insufficient options for proto=fd [ 570.945535][ T4318] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 571.327629][ T4318] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.335836][ T4318] usb 3-1: Product: syz [ 571.348340][ T4318] usb 3-1: Manufacturer: syz [ 571.353668][ T4318] usb 3-1: SerialNumber: syz [ 571.379439][ T4318] usb 3-1: config 0 descriptor?? [ 571.418533][ T4318] hub 3-1:0.0: bad descriptor, ignoring hub [ 571.444109][ T4318] hub: probe of 3-1:0.0 failed with error -5 [ 571.747883][ T9623] netlink: 'syz.2.1655': attribute type 10 has an invalid length. [ 572.352473][ T9626] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1661'. [ 572.365493][ T9626] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1661'. [ 573.348214][ T4318] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 573.404729][ T9629] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1662'. [ 573.423547][ T4318] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 573.475512][ T4318] dib0700: firmware download failed at 7 with -22 [ 573.540524][ T4318] usb 3-1: USB disconnect, device number 25 [ 573.825628][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 573.825645][ T26] audit: type=1326 audit(1775818963.149:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9636 comm="syz.1.1665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9b439c819 code=0x7ffc0000 [ 574.231352][ T26] audit: type=1326 audit(1775818963.149:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9636 comm="syz.1.1665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9b439c819 code=0x7ffc0000 [ 574.736054][ T26] audit: type=1326 audit(1775818963.159:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9636 comm="syz.1.1665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7fc9b439c819 code=0x7ffc0000 [ 574.943256][ T26] audit: type=1326 audit(1775818963.159:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9636 comm="syz.1.1665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9b439c819 code=0x7ffc0000 [ 575.129126][ T26] audit: type=1326 audit(1775818963.159:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9636 comm="syz.1.1665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9b439c819 code=0x7ffc0000 [ 575.152216][ T26] audit: type=1326 audit(1775818963.179:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9636 comm="syz.1.1665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fc9b439c819 code=0x7ffc0000 [ 575.361211][ T9656] 9pnet_fd: Insufficient options for proto=fd [ 575.858177][ T26] audit: type=1326 audit(1775818963.179:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9636 comm="syz.1.1665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9b439c819 code=0x7ffc0000 [ 576.127470][ T26] audit: type=1326 audit(1775818963.179:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9636 comm="syz.1.1665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9b439c819 code=0x7ffc0000 [ 576.182993][ T26] audit: type=1326 audit(1775818963.179:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9636 comm="syz.1.1665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fc9b439c819 code=0x7ffc0000 [ 578.798217][ T4318] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 578.835296][ T4318] hid-generic 0000:0000:0000.0024: hidraw0: HID v0.00 Device [syz1] on syz0 [ 579.095603][ T8763] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 579.287414][ T8763] usb 3-1: config 0 has no interfaces? [ 579.295304][ T8763] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 579.347855][ T8763] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 579.387796][ T8763] usb 3-1: SerialNumber: syz [ 579.423110][ T8763] usb 3-1: config 0 descriptor?? [ 579.719960][ T9700] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1682'. [ 579.731541][ T9700] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1682'. [ 580.976839][ T9708] 9pnet_fd: Insufficient options for proto=fd [ 581.848237][ T7] usb 3-1: USB disconnect, device number 26 [ 583.043391][ T26] audit: type=1326 audit(1775818972.369:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9722 comm="syz.3.1690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b6339c819 code=0x7ffc0000 [ 586.293759][ T26] audit: type=1326 audit(1775818972.369:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9722 comm="syz.3.1690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b6339c819 code=0x7ffc0000 [ 586.545818][ T26] audit: type=1326 audit(1775818972.369:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9722 comm="syz.3.1690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f1b6339c819 code=0x7ffc0000 [ 586.608378][ T26] audit: type=1326 audit(1775818972.369:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9722 comm="syz.3.1690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b6339c819 code=0x7ffc0000 [ 586.687600][ T9742] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1693'. [ 586.699020][ T9742] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1693'. [ 587.587466][ T26] audit: type=1326 audit(1775818972.369:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9722 comm="syz.3.1690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b6339c819 code=0x7ffc0000 [ 587.642784][ T26] audit: type=1326 audit(1775818972.399:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9722 comm="syz.3.1690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f1b6339c819 code=0x7ffc0000 [ 587.686690][ T26] audit: type=1326 audit(1775818972.399:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9722 comm="syz.3.1690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b6339c819 code=0x7ffc0000 [ 587.913692][ T9751] 9pnet_fd: Insufficient options for proto=fd [ 588.036623][ T26] audit: type=1326 audit(1775818972.399:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9722 comm="syz.3.1690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b6339c819 code=0x7ffc0000 [ 588.752328][ T26] audit: type=1326 audit(1775818972.399:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9722 comm="syz.3.1690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f1b6339c819 code=0x7ffc0000 [ 589.321396][ T26] audit: type=1326 audit(1775818978.649:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9769 comm="syz.0.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f341159c819 code=0x7ffc0000 [ 589.390199][ T26] audit: type=1326 audit(1775818978.649:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9769 comm="syz.0.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f341159c819 code=0x7ffc0000 [ 589.627062][ T26] audit: type=1326 audit(1775818978.679:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9769 comm="syz.0.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f341159c819 code=0x7ffc0000 [ 589.997082][ T26] audit: type=1326 audit(1775818978.679:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9769 comm="syz.0.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f341159c819 code=0x7ffc0000 [ 590.075973][ T26] audit: type=1326 audit(1775818978.679:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9769 comm="syz.0.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f341159c819 code=0x7ffc0000 [ 590.313954][ T26] audit: type=1326 audit(1775818978.679:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9769 comm="syz.0.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f341159c819 code=0x7ffc0000 [ 590.420575][ T26] audit: type=1326 audit(1775818978.679:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9769 comm="syz.0.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f341159c819 code=0x7ffc0000 [ 590.471955][ T26] audit: type=1326 audit(1775818978.679:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9769 comm="syz.0.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f341159c819 code=0x7ffc0000 [ 590.666649][ T9784] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1706'. [ 590.700122][ T9784] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1706'. [ 591.545926][ T9787] 9pnet_fd: Insufficient options for proto=fd [ 591.688248][ T26] audit: type=1326 audit(1775818978.679:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9769 comm="syz.0.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f341159c819 code=0x7ffc0000 [ 592.445821][ T4370] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 592.739945][ T4370] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 592.923622][ T4370] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.935630][ T4370] usb 6-1: Product: syz [ 592.939908][ T4370] usb 6-1: Manufacturer: syz [ 592.944700][ T4370] usb 6-1: SerialNumber: syz [ 592.952377][ T4370] usb 6-1: config 0 descriptor?? [ 593.777236][ T4370] usb 6-1: Firmware version (0.0) predates our first public release. [ 594.308910][ T4370] usb 6-1: Please update to version 0.2 or newer [ 594.668641][ T4370] usb 6-1: USB disconnect, device number 9 [ 594.939432][ T9824] 9pnet_fd: Insufficient options for proto=fd [ 595.005766][ T48] Bluetooth: hci3: command 0x2016 tx timeout [ 595.289947][ T9829] KVM: debugfs: duplicate directory 9829-5 [ 600.294296][ T26] audit: type=1326 audit(1775818989.619:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9895 comm="syz.3.1741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b6339c819 code=0x7ffc0000 [ 600.364909][ T26] audit: type=1326 audit(1775818989.619:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9895 comm="syz.3.1741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b6339c819 code=0x7ffc0000 [ 600.500876][ T26] audit: type=1326 audit(1775818989.649:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9895 comm="syz.3.1741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f1b6339c819 code=0x7ffc0000 [ 600.581174][ T26] audit: type=1326 audit(1775818989.649:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9895 comm="syz.3.1741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b6339c819 code=0x7ffc0000 [ 601.215818][ T26] audit: type=1326 audit(1775818989.649:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9895 comm="syz.3.1741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b6339c819 code=0x7ffc0000 [ 601.293737][ T26] audit: type=1326 audit(1775818989.649:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9895 comm="syz.3.1741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f1b6339c819 code=0x7ffc0000 [ 601.326623][ T26] audit: type=1326 audit(1775818989.649:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9895 comm="syz.3.1741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b6339c819 code=0x7ffc0000 [ 601.420399][ T26] audit: type=1326 audit(1775818989.649:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9895 comm="syz.3.1741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b6339c819 code=0x7ffc0000 [ 601.975576][ T4370] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 601.986523][ T26] audit: type=1326 audit(1775818989.649:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9895 comm="syz.3.1741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f1b6339c819 code=0x7ffc0000 [ 602.279830][ T4370] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 602.321170][ T4370] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.366254][ T4370] usb 3-1: Product: syz [ 602.401702][ T4370] usb 3-1: Manufacturer: syz [ 602.435540][ T4370] usb 3-1: SerialNumber: syz [ 602.469773][ T4370] usb 3-1: config 0 descriptor?? [ 602.495551][ T4370] hub 3-1:0.0: bad descriptor, ignoring hub [ 602.505784][ T4370] hub: probe of 3-1:0.0 failed with error -5 [ 602.705571][ T4318] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 602.735773][ T4320] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 602.820966][ T9932] netlink: 'syz.2.1745': attribute type 10 has an invalid length. [ 602.941184][ T4320] usb 4-1: config 17 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 603.007532][ T4320] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 603.051686][ T4320] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.214834][ T4320] aiptek 4-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 603.757547][ T4318] usb 6-1: unable to get BOS descriptor or descriptor too short [ 603.771195][ T4318] usb 6-1: config 0 has no interfaces? [ 603.789082][ T4318] usb 6-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 603.804587][ T4318] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.814639][ T4318] usb 6-1: Product: syz [ 603.819250][ T4318] usb 6-1: Manufacturer: syz [ 603.824030][ T4318] usb 6-1: SerialNumber: syz [ 603.832538][ T4318] usb 6-1: config 0 descriptor?? [ 604.046306][ T4318] usb 6-1: USB disconnect, device number 10 [ 604.049877][ T3653] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 604.253275][ T3653] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 604.265997][ T3653] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 604.279607][ T3653] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 604.289545][ T3653] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.298166][ T3653] usb 2-1: Product: syz [ 604.302589][ T3653] usb 2-1: Manufacturer: syz [ 604.309962][ T3653] usb 2-1: SerialNumber: syz [ 604.330519][ T3653] cdc_mbim 2-1:1.0: skipping garbage [ 604.466997][ T26] audit: type=1326 audit(1775818993.799:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9938 comm="syz.0.1756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f341159c819 code=0x7ffc0000 [ 604.533157][ T9935] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 605.184819][ T9935] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 605.217161][ T3653] cdc_mbim 2-1:1.0: setting rx_max = 16384 [ 605.331785][ T4318] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 605.376584][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 605.376602][ T26] audit: type=1326 audit(1775818994.659:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9938 comm="syz.0.1756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f341159c819 code=0x7ffc0000 [ 605.426256][ T3653] cdc_mbim 2-1:1.0: setting tx_max = 184 [ 605.438604][ T3653] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device [ 605.457608][ T4370] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 605.495828][ T4370] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 605.524157][ T4370] dib0700: firmware download failed at 7 with -22 [ 605.531578][ T3653] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, 22:6e:2d:78:b1:c7 [ 605.564697][ T26] audit: type=1326 audit(1775818994.659:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9938 comm="syz.0.1756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f341159c819 code=0x7ffc0000 [ 605.594431][ T7] usb 4-1: USB disconnect, device number 12 [ 605.605833][ T4318] usb 6-1: Using ep0 maxpacket: 32 [ 605.617015][ T4370] usb 3-1: USB disconnect, device number 27 [ 605.636061][ T4318] usb 6-1: device descriptor read/all, error -71 [ 607.088660][ T9954] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 607.175918][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.432353][ T4370] usb 2-1: USB disconnect, device number 18 [ 607.444980][ T4370] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 607.925575][ T26] audit: type=1326 audit(1775818997.249:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9977 comm="syz.1.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9b439c819 code=0x7ffc0000 [ 607.955538][ T3653] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 607.968661][ T26] audit: type=1326 audit(1775818997.249:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9977 comm="syz.1.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9b439c819 code=0x7ffc0000 [ 607.998495][ T26] audit: type=1326 audit(1775818997.289:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9977 comm="syz.1.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7fc9b439c819 code=0x7ffc0000 [ 608.305766][ T3653] usb 3-1: Using ep0 maxpacket: 16 [ 608.509356][ T3653] usb 3-1: config 5 has an invalid interface number: 213 but max is 0 [ 608.701889][ T3653] usb 3-1: config 5 has no interface number 0 [ 608.857698][ T26] audit: type=1326 audit(1775818997.289:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9977 comm="syz.1.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9b439c819 code=0x7ffc0000 [ 608.889087][ T3653] usb 3-1: config 5 interface 213 altsetting 60 endpoint 0x4 has invalid maxpacket 568, setting to 64 [ 608.939065][ T3653] usb 3-1: config 5 interface 213 has no altsetting 0 [ 608.954619][ T26] audit: type=1326 audit(1775818997.289:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9977 comm="syz.1.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9b439c819 code=0x7ffc0000 [ 608.978633][ T26] audit: type=1326 audit(1775818997.289:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9977 comm="syz.1.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fc9b439c819 code=0x7ffc0000 [ 608.997859][ T3653] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=ce.ff [ 609.001395][ T26] audit: type=1326 audit(1775818997.289:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9977 comm="syz.1.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9b439c819 code=0x7ffc0000 [ 609.020482][ T3653] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.051707][ T3653] usb 3-1: Product: syz [ 609.060877][ T3653] usb 3-1: Manufacturer: syz [ 609.071599][ T3653] usb 3-1: SerialNumber: syz [ 609.140882][ T26] audit: type=1326 audit(1775818997.289:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9977 comm="syz.1.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9b439c819 code=0x7ffc0000 [ 609.259671][ T4320] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 609.267421][ T41] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 609.303699][ T3653] usb 3-1: Found UVC 0.00 device syz (05ac:8501) [ 609.310919][ T3653] usb 3-1: No valid video chain found. [ 609.332773][ T3653] usb 3-1: USB disconnect, device number 28 [ 609.395651][ T4318] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 609.490668][ T4320] usb 6-1: unable to get BOS descriptor or descriptor too short [ 609.505244][ T41] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 609.525603][ T41] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.533991][ T41] usb 4-1: Product: syz [ 609.542919][ T4320] usb 6-1: not running at top speed; connect to a high speed hub [ 609.561846][ T4320] usb 6-1: config 6 has an invalid interface number: 217 but max is 0 [ 609.570579][ T41] usb 4-1: Manufacturer: syz [ 609.585684][ T41] usb 4-1: SerialNumber: syz [ 609.591463][ T4320] usb 6-1: config 6 has no interface number 0 [ 609.605501][ T4318] usb 2-1: Using ep0 maxpacket: 16 [ 609.616728][ T41] usb 4-1: config 0 descriptor?? [ 609.622006][ T4320] usb 6-1: config 6 interface 217 has no altsetting 0 [ 609.625162][ T4318] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 609.636025][ T41] hub 4-1:0.0: bad descriptor, ignoring hub [ 609.649053][ T41] hub: probe of 4-1:0.0 failed with error -5 [ 609.658002][ T4320] usb 6-1: string descriptor 0 read error: -22 [ 609.664464][ T4320] usb 6-1: New USB device found, idVendor=06cd, idProduct=010b, bcdDevice=7e.2f [ 609.677845][ T4320] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.713828][ T4318] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 609.744919][ T4320] hub 6-1:6.217: bad descriptor, ignoring hub [ 609.760482][ T4320] hub: probe of 6-1:6.217 failed with error -5 [ 609.769585][ T4320] keyspan 6-1:6.217: Keyspan - (without firmware) converter detected [ 609.782084][ T4318] usb 2-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 610.805517][ T9999] netlink: 'syz.3.1769': attribute type 10 has an invalid length. [ 611.005653][ T48] Bluetooth: hci5: command 0x0406 tx timeout [ 611.457901][ T3653] usb 6-1: USB disconnect, device number 13 [ 611.530677][ T3653] keyspan 6-1:6.217: device disconnected [ 611.686333][ T4318] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.784045][ T4318] usb 2-1: config 0 descriptor?? [ 612.342008][ T4318] hid-generic 0003:057E:2019.0025: hidraw0: USB HID v0.05 Device [HID 057e:2019] on usb-dummy_hcd.1-1/input0 [ 612.365455][ T7] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 612.555508][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 612.562684][ T7] usb 3-1: config 182 has an invalid interface number: 81 but max is 0 [ 612.575939][ T7] usb 3-1: config 182 has no interface number 0 [ 612.583083][ T7] usb 3-1: config 182 interface 81 has no altsetting 0 [ 612.594071][ T7] usb 3-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=99.33 [ 612.612937][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.647239][ T7] usb 3-1: Product: syz [ 612.661011][ T7] usb 3-1: Manufacturer: syz [ 612.673367][ T7] usb 3-1: SerialNumber: syz [ 612.686558][ T4317] usb 2-1: USB disconnect, device number 19 [ 612.831478][ T41] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 612.855628][ T4318] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 612.874064][ T41] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 612.887476][T10010] fido_id[10010]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 612.911779][ T41] dib0700: firmware download failed at 7 with -22 [ 612.957177][ T7] usb 3-1: USB disconnect, device number 29 [ 612.966500][ T41] usb 4-1: USB disconnect, device number 13 [ 613.055450][ T4318] usb 6-1: Using ep0 maxpacket: 32 [ 613.062708][ T4318] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 613.076814][T10015] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 613.095932][ T4318] usb 6-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 613.117162][ T4318] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 613.146897][ T4318] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 613.165429][ T4318] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.183734][ T4318] usb 6-1: Product: syz [ 613.193855][ T4318] usb 6-1: Manufacturer: syz [ 613.203979][ T4318] usb 6-1: SerialNumber: syz [ 613.228148][ T4318] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 613.260438][ T4318] imon 6-1:155.0: unable to initialize intf0, err -19 [ 613.285414][ T4318] imon:imon_probe: failed to initialize context! [ 613.302039][ T4318] imon 6-1:155.0: unable to register, err -19 [ 613.575976][ T8958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.133089][ T4318] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 614.200373][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 614.200390][ T26] audit: type=1326 audit(1775819003.529:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10038 comm="syz.3.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b6339c819 code=0x7ffc0000 [ 614.263268][ T26] audit: type=1326 audit(1775819003.529:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10038 comm="syz.3.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b6339c819 code=0x7ffc0000 [ 614.352333][ T4318] usb 3-1: Using ep0 maxpacket: 8 [ 614.388060][T10037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 614.468690][ T4318] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 614.519829][T10037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 614.574891][ T26] audit: type=1326 audit(1775819003.569:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10038 comm="syz.3.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f1b6339c819 code=0x7ffc0000 [ 614.631018][ T4318] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 614.632776][T10037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 614.651997][ T4318] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 614.742684][T10037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 615.121612][T10037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 615.166940][T10037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 615.195240][ T26] audit: type=1326 audit(1775819003.569:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10038 comm="syz.3.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b6339c819 code=0x7ffc0000 [ 615.242413][T10037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 615.285771][ T26] audit: type=1326 audit(1775819003.569:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10038 comm="syz.3.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b6339c819 code=0x7ffc0000 [ 615.316796][ T26] audit: type=1326 audit(1775819003.569:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10038 comm="syz.3.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f1b6339c819 code=0x7ffc0000 [ 615.322015][T10037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 615.342182][ T4318] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 615.466642][ T4318] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 615.474969][ T4318] usb 3-1: Product: syz [ 615.479395][ T4318] usb 3-1: Manufacturer: syz [ 615.484633][ T4318] usb 3-1: SerialNumber: syz [ 615.489651][ T26] audit: type=1326 audit(1775819003.569:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10038 comm="syz.3.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b6339c819 code=0x7ffc0000 [ 615.556134][ T26] audit: type=1326 audit(1775819003.569:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10038 comm="syz.3.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b6339c819 code=0x7ffc0000 [ 615.675184][ T26] audit: type=1326 audit(1775819003.569:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10038 comm="syz.3.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f1b6339c819 code=0x7ffc0000 [ 615.968417][ T4318] usb 3-1: config 0 descriptor?? [ 616.282035][ T4318] radio-si470x 3-1:0.0: could not find interrupt in endpoint [ 616.290037][ T4318] radio-si470x: probe of 3-1:0.0 failed with error -5 [ 616.297929][ T4318] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 616.663365][ T4317] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 618.356136][ T14] usb 6-1: USB disconnect, device number 14 [ 618.487546][ T4317] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 618.572695][ T4317] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 618.606500][ T4317] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 618.618463][ T4317] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.637329][ T4317] usb 4-1: config 0 descriptor?? [ 618.643252][T10053] raw-gadget.6 gadget.3: fail, usb_ep_enable returned -22 [ 618.897686][ T41] usb 3-1: USB disconnect, device number 30 [ 619.290326][ T4317] usbhid 4-1:0.0: can't add hid device: -71 [ 619.387247][ T4317] usbhid: probe of 4-1:0.0 failed with error -71 [ 619.555563][ T4370] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 619.571696][ T4317] usb 4-1: USB disconnect, device number 14 [ 619.758741][ T14] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 619.771031][T10111] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 619.797638][ T4370] usb 6-1: config 0 has no interfaces? [ 619.803209][ T4370] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 619.825534][ T4370] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.847019][ T4370] usb 6-1: config 0 descriptor?? [ 619.975513][ T14] usb 3-1: Using ep0 maxpacket: 8 [ 619.983785][ T14] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 620.020767][ T14] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF9, skipping [ 620.047078][ T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 620.074262][ T14] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 620.097803][ T4370] usb 6-1: USB disconnect, device number 15 [ 620.108589][ T14] usb 3-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 620.126307][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.134503][ T14] usb 3-1: Product: syz [ 620.139201][ T14] usb 3-1: Manufacturer: syz [ 620.143853][ T14] usb 3-1: SerialNumber: syz [ 620.159546][ T14] usb 3-1: config 0 descriptor?? [ 620.167248][T10108] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 620.192179][ T14] ati_remote 3-1:0.0: ati_remote_probe: Unexpected desc.bNumEndpoints [ 620.400314][T10108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 620.437603][T10108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 620.612262][ T8975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.645418][ T4370] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 620.732859][T10108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 620.762042][T10108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 620.793078][T10108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 620.825081][T10108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 620.884985][ T26] audit: type=1326 audit(1775819010.209:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10125 comm="syz.0.1792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f341159c819 code=0x7ffc0000 [ 620.908711][ T26] audit: type=1326 audit(1775819010.209:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10125 comm="syz.0.1792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f341159c819 code=0x7ffc0000 [ 620.935281][ T26] audit: type=1326 audit(1775819010.209:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10125 comm="syz.0.1792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f341159c819 code=0x7ffc0000 [ 620.973158][ T26] audit: type=1326 audit(1775819010.209:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10125 comm="syz.0.1792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f341159c819 code=0x7ffc0000 [ 621.108958][ T26] audit: type=1326 audit(1775819010.219:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10125 comm="syz.0.1792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f341159c819 code=0x7ffc0000 [ 621.142608][ T4370] usb 6-1: config 0 has no interfaces? [ 621.150435][ T14] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 621.162529][ T4370] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 621.196990][ T26] audit: type=1326 audit(1775819010.239:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10125 comm="syz.0.1792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f341159c819 code=0x7ffc0000 [ 621.240750][ T4370] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.297795][T10108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 621.356224][T10108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 621.382143][ T26] audit: type=1326 audit(1775819010.239:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10125 comm="syz.0.1792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f341159c819 code=0x7ffc0000 [ 621.670799][ T26] audit: type=1326 audit(1775819010.239:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10125 comm="syz.0.1792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f341159c819 code=0x7ffc0000 [ 621.856432][ T26] audit: type=1326 audit(1775819010.239:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10125 comm="syz.0.1792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f341159c819 code=0x7ffc0000 [ 621.947520][ T4370] usb 6-1: config 0 descriptor?? [ 622.001558][ T14] usb 2-1: Using ep0 maxpacket: 8 [ 622.067287][ T14] usb 2-1: config 6 has an invalid interface number: 55 but max is 0 [ 622.076326][ T14] usb 2-1: config 6 has no interface number 0 [ 622.083433][ T14] usb 2-1: config 6 interface 55 has no altsetting 0 [ 622.866834][ T4370] usb 3-1: USB disconnect, device number 31 [ 622.901010][ T4318] usb 6-1: USB disconnect, device number 16 [ 622.936059][ T14] usb 2-1: New USB device found, idVendor=0572, idProduct=d811, bcdDevice=47.2e [ 622.995429][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.067830][ T14] usb 2-1: Product: syz [ 623.072083][ T14] usb 2-1: Manufacturer: syz [ 623.148261][ T14] usb 2-1: SerialNumber: syz [ 623.237396][T10142] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1797'. [ 623.622222][ T14] dvb-usb: found a 'Mygica D689 DMB-TH' in warm state. [ 623.653740][ T14] usb 2-1: setting power ON [ 623.664647][ T14] dvb-usb: bulk message failed: -22 (2/0) [ 623.818543][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.824929][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 623.832244][ T14] dvb-usb: bulk message failed: -22 (1/0) [ 624.125842][ T14] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 624.135995][ T14] dvbdev: DVB: registering new adapter (Mygica D689 DMB-TH) [ 624.143402][ T14] usb 2-1: media controller created [ 624.169902][ T14] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 624.182185][ T26] audit: type=1326 audit(1775819013.509:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10158 comm="syz.3.1804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b6339c819 code=0x7ffc0000 [ 624.232085][ T14] cxusb: set interface failed [ 624.251690][ T14] dvb-usb: bulk message failed: -22 (3/0) [ 624.545808][ T14] cxusb: clear tuner gpio failed [ 625.291176][ T14] dvb-usb: no frontend was attached by 'Mygica D689 DMB-TH' [ 626.495515][ T14] rc_core: IR keymap rc-d680-dmb not found [ 626.501420][ T14] Registered IR keymap rc-empty [ 626.507409][ T14] rc rc0: Mygica D689 DMB-TH as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 626.517763][ T14] input: Mygica D689 DMB-TH as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input14 [ 626.530380][ T14] dvb-usb: schedule remote query interval to 100 msecs. [ 626.537799][ T14] usb 2-1: setting power OFF [ 626.543851][ T14] dvb-usb: bulk message failed: -22 (2/0) [ 626.569380][ T14] dvb-usb: Mygica D689 DMB-TH successfully initialized and connected. [ 626.611046][ T14] usb 2-1: USB disconnect, device number 20 [ 626.910119][T10186] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1811'. [ 627.335593][ T14] dvb-usb: Mygica D689 DMB-TH successfully deinitialized and disconnected. [ 627.745056][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 627.745072][ T26] audit: type=1326 audit(1775819017.069:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10207 comm="syz.3.1818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b6339c819 code=0x7ffc0000 [ 628.635969][ T26] audit: type=1326 audit(1775819017.069:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10207 comm="syz.3.1818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b6339c819 code=0x7ffc0000 [ 628.804750][ T26] audit: type=1326 audit(1775819017.109:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10207 comm="syz.3.1818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f1b6339c819 code=0x7ffc0000 [ 629.215291][ T26] audit: type=1326 audit(1775819017.109:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10207 comm="syz.3.1818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b6339c819 code=0x7ffc0000 [ 629.785669][ T26] audit: type=1326 audit(1775819017.109:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10207 comm="syz.3.1818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b6339c819 code=0x7ffc0000 [ 630.223271][ T26] audit: type=1326 audit(1775819017.109:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10207 comm="syz.3.1818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f1b6339c819 code=0x7ffc0000 [ 630.776985][ T26] audit: type=1326 audit(1775819017.109:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10207 comm="syz.3.1818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b6339c819 code=0x7ffc0000 [ 630.799535][ T26] audit: type=1326 audit(1775819017.109:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10207 comm="syz.3.1818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b6339c819 code=0x7ffc0000 [ 630.822152][ T26] audit: type=1326 audit(1775819017.109:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10207 comm="syz.3.1818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f1b6339c819 code=0x7ffc0000 [ 632.121851][T10255] netlink: 'syz.5.1831': attribute type 16 has an invalid length. [ 632.135064][ T26] audit: type=1326 audit(1775819021.469:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10256 comm="syz.1.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9b439c819 code=0x7ffc0000 [ 632.169024][T10255] netlink: 'syz.5.1831': attribute type 17 has an invalid length. [ 633.116839][T10255] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 633.124447][T10255] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 633.160601][T10255] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 633.194355][T10255] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 633.233933][T10262] netlink: 'syz.0.1833': attribute type 4 has an invalid length. [ 633.322167][T10266] netlink: 'syz.0.1833': attribute type 4 has an invalid length. [ 633.417302][T10268] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1835'. [ 633.683443][T10274] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1838'. [ 633.704748][T10276] netlink: 'syz.5.1839': attribute type 1 has an invalid length. [ 633.715139][T10276] netlink: 'syz.5.1839': attribute type 2 has an invalid length. [ 633.852721][T10274] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1838'. [ 633.973840][T10282] syz.2.1841 sent an empty control message without MSG_MORE. [ 634.209883][ T4294] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.221283][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 634.221305][ T26] audit: type=1326 audit(1775819023.549:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10290 comm="syz.5.1845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bcc59c819 code=0x7ffc0000 [ 634.275564][ T26] audit: type=1326 audit(1775819023.549:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10290 comm="syz.5.1845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bcc59c819 code=0x7ffc0000 [ 634.561423][ T26] audit: type=1326 audit(1775819023.549:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10290 comm="syz.5.1845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f5bcc59c819 code=0x7ffc0000 [ 634.964523][ T26] audit: type=1326 audit(1775819023.549:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10290 comm="syz.5.1845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bcc59c819 code=0x7ffc0000 [ 635.173889][ T26] audit: type=1326 audit(1775819023.549:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10290 comm="syz.5.1845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bcc59c819 code=0x7ffc0000 [ 635.235464][ T26] audit: type=1326 audit(1775819023.579:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10290 comm="syz.5.1845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f5bcc59c819 code=0x7ffc0000 [ 635.338782][ T26] audit: type=1326 audit(1775819023.579:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10290 comm="syz.5.1845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bcc59c819 code=0x7ffc0000 [ 635.401575][ T26] audit: type=1326 audit(1775819023.579:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10290 comm="syz.5.1845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bcc59c819 code=0x7ffc0000 [ 635.426834][T10298] tipc: Started in network mode [ 635.452712][T10298] tipc: Node identity eaaac143986e, cluster identity 4711 [ 635.463051][T10298] tipc: Enabled bearer , priority 0 [ 635.642940][ T26] audit: type=1326 audit(1775819023.579:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10290 comm="syz.5.1845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f5bcc59c819 code=0x7ffc0000 [ 635.684128][T10301] device syzkaller0 entered promiscuous mode [ 635.711632][T10301] tipc: Resetting bearer [ 635.756318][T10297] tipc: Resetting bearer [ 639.078351][T10297] tipc: Disabling bearer [ 639.105940][ T41] tipc: Node number set to 1925497155 [ 639.114572][T10328] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1853'. [ 639.136424][T10328] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1853'. [ 639.416854][ T26] audit: type=1326 audit(1775819028.749:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10338 comm="syz.1.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9b439c819 code=0x7ffc0000 [ 639.489075][ T26] audit: type=1326 audit(1775819028.749:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10338 comm="syz.1.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9b439c819 code=0x7ffc0000 [ 639.815678][T10351] netlink: 'syz.0.1857': attribute type 13 has an invalid length. [ 640.605871][ T26] audit: type=1326 audit(1775819028.779:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10338 comm="syz.1.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7fc9b439c819 code=0x7ffc0000 [ 640.628732][T10351] gretap0: refused to change device tx_queue_len [ 640.635614][T10351] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 640.838963][ T26] audit: type=1326 audit(1775819028.779:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10338 comm="syz.1.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9b439c819 code=0x7ffc0000 [ 640.966701][ T26] audit: type=1326 audit(1775819028.779:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10338 comm="syz.1.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9b439c819 code=0x7ffc0000 [ 641.082035][ T26] audit: type=1326 audit(1775819028.779:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10338 comm="syz.1.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fc9b439c819 code=0x7ffc0000 [ 641.256055][ T26] audit: type=1326 audit(1775819028.779:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10338 comm="syz.1.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9b439c819 code=0x7ffc0000 [ 641.298382][ T26] audit: type=1326 audit(1775819028.779:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10338 comm="syz.1.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9b439c819 code=0x7ffc0000 [ 641.359338][ T26] audit: type=1326 audit(1775819028.779:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10338 comm="syz.1.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fc9b439c819 code=0x7ffc0000 [ 642.288353][T10394] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1869'. [ 642.428219][T10399] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1870'. [ 642.450310][T10399] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1870'. [ 642.564600][ T26] audit: type=1326 audit(1775819031.889:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10400 comm="syz.1.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9b439c819 code=0x7ffc0000 [ 643.871528][T10419] netlink: 'syz.0.1872': attribute type 13 has an invalid length. [ 644.193181][T10419] gretap0: refused to change device tx_queue_len [ 644.201408][T10419] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 645.177192][T10438] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1882'. [ 645.215761][T10438] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1882'. [ 646.983182][T10475] device syzkaller0 entered promiscuous mode [ 647.031788][T10473] ================================================================== [ 647.039941][T10473] BUG: KASAN: use-after-free in ieee80211_monitor_select_queue+0x23a/0x240 [ 647.048771][T10473] Read of size 2 at addr ffff888055faa5fb by task syz.3.1892/10473 [ 647.056728][T10473] [ 647.059130][T10473] CPU: 1 PID: 10473 Comm: syz.3.1892 Not tainted syzkaller #0 [ 647.066637][T10473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 647.076847][T10473] Call Trace: [ 647.080190][T10473] [ 647.083160][T10473] dump_stack_lvl+0x188/0x24e [ 647.087904][T10473] ? __lock_acquire+0x7d10/0x7d10 [ 647.092997][T10473] ? show_regs_print_info+0x12/0x12 [ 647.098260][T10473] ? load_image+0x400/0x400 [ 647.102823][T10473] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 647.108334][T10473] ? __virt_addr_valid+0x188/0x540 [ 647.113549][T10473] ? __virt_addr_valid+0x465/0x540 [ 647.118752][T10473] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 647.125058][T10473] print_report+0xa8/0x210 [ 647.129594][T10473] kasan_report+0x10b/0x140 [ 647.134178][T10473] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 647.140474][T10473] ieee80211_monitor_select_queue+0x23a/0x240 [ 647.146587][T10473] ? ieee80211_activate_links_work+0x60/0x60 [ 647.152600][T10473] netdev_core_pick_tx+0x118/0x340 [ 647.157749][T10473] __dev_queue_xmit+0xb19/0x37c0 [ 647.162726][T10473] ? __dev_queue_xmit+0x26b/0x37c0 [ 647.167872][T10473] ? netdev_core_pick_tx+0x340/0x340 [ 647.173215][T10473] ? virtio_net_hdr_to_skb+0xac2/0x1290 [ 647.178800][T10473] ? packet_extra_vlan_len_allowed+0x200/0x200 [ 647.184984][T10473] ? skb_copy_datagram_from_iter+0x5e0/0x690 [ 647.191015][T10473] packet_sendmsg+0x3bc3/0x4e60 [ 647.195912][T10473] ? __might_sleep+0xd0/0xd0 [ 647.200551][T10473] ? verify_lock_unused+0x140/0x140 [ 647.205884][T10473] ? aa_sk_perm+0x81f/0x950 [ 647.210514][T10473] ? packet_getsockopt+0x9a0/0x9a0 [ 647.215760][T10473] ? aa_sock_msg_perm+0x94/0x150 [ 647.220736][T10473] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 647.226196][T10473] ? security_socket_sendmsg+0x7c/0xa0 [ 647.231744][T10473] ? packet_getsockopt+0x9a0/0x9a0 [ 647.236984][T10473] ____sys_sendmsg+0x5be/0x970 [ 647.241805][T10473] ? __sys_sendmsg_sock+0x30/0x30 [ 647.246874][T10473] ? __import_iovec+0x315/0x500 [ 647.251778][T10473] ? import_iovec+0x6f/0xa0 [ 647.256333][T10473] ___sys_sendmsg+0x2a2/0x360 [ 647.261070][T10473] ? lock_chain_count+0x20/0x20 [ 647.266002][T10473] ? __sys_sendmsg+0x290/0x290 [ 647.270832][T10473] __se_sys_sendmsg+0x1bb/0x2a0 [ 647.275728][T10473] ? __x64_sys_sendmsg+0x80/0x80 [ 647.280727][T10473] ? lockdep_hardirqs_on+0x94/0x140 [ 647.285963][T10473] do_syscall_64+0x4c/0xa0 [ 647.290425][T10473] ? clear_bhb_loop+0x60/0xb0 [ 647.295270][T10473] ? clear_bhb_loop+0x60/0xb0 [ 647.300018][T10473] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 647.305967][T10473] RIP: 0033:0x7f1b6339c819 [ 647.310444][T10473] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 647.330112][T10473] RSP: 002b:00007f1b642f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 647.338576][T10473] RAX: ffffffffffffffda RBX: 00007f1b63615fa0 RCX: 00007f1b6339c819 [ 647.346582][T10473] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000007 [ 647.354587][T10473] RBP: 00007f1b63432c91 R08: 0000000000000000 R09: 0000000000000000 [ 647.362604][T10473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 647.370618][T10473] R13: 00007f1b63616038 R14: 00007f1b63615fa0 R15: 00007fff443e1bc8 [ 647.378645][T10473] [ 647.381691][T10473] [ 647.384043][T10473] Allocated by task 9908: [ 647.388406][T10473] kasan_set_track+0x4b/0x70 [ 647.393042][T10473] __kasan_kmalloc+0x8e/0xa0 [ 647.397667][T10473] __kmalloc_node_track_caller+0xae/0x230 [ 647.403440][T10473] __alloc_skb+0x22a/0x7e0 [ 647.407976][T10473] __netdev_alloc_skb+0x114/0x4f0 [ 647.413041][T10473] __ieee80211_beacon_get+0xe17/0x1600 [ 647.418536][T10473] ieee80211_beacon_get_tim+0x63/0x4e0 [ 647.424028][T10473] mac80211_hwsim_beacon_tx+0x21c/0xae0 [ 647.429611][T10473] __iterate_interfaces+0x243/0x500 [ 647.434848][T10473] ieee80211_iterate_active_interfaces_atomic+0xd7/0x170 [ 647.441910][T10473] mac80211_hwsim_beacon+0xb7/0x1b0 [ 647.447149][T10473] __hrtimer_run_queues+0x54a/0xd50 [ 647.452836][T10473] hrtimer_run_softirq+0x183/0x2a0 [ 647.458009][T10473] handle_softirqs+0x2a1/0x930 [ 647.462808][T10473] __irq_exit_rcu+0x13b/0x230 [ 647.467519][T10473] irq_exit_rcu+0x5/0x20 [ 647.471793][T10473] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 647.477454][T10473] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 647.483495][T10473] [ 647.485853][T10473] The buggy address belongs to the object at ffff888055faa400 [ 647.485853][T10473] which belongs to the cache kmalloc-512 of size 512 [ 647.500038][T10473] The buggy address is located 507 bytes inside of [ 647.500038][T10473] 512-byte region [ffff888055faa400, ffff888055faa600) [ 647.513460][T10473] [ 647.515814][T10473] The buggy address belongs to the physical page: [ 647.522256][T10473] page:ffffea000157ea00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888055faa800 pfn:0x55fa8 [ 647.533749][T10473] head:ffffea000157ea00 order:2 compound_mapcount:0 compound_pincount:0 [ 647.542099][T10473] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 647.550124][T10473] raw: 00fff00000010200 ffffea0001d8d708 ffffea0001ef6508 ffff888017441c80 [ 647.558828][T10473] raw: ffff888055faa800 0000000000100008 00000001ffffffff 0000000000000000 [ 647.567435][T10473] page dumped because: kasan: bad access detected [ 647.573876][T10473] page_owner tracks the page as allocated [ 647.579612][T10473] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4274, tgid 4274 (syz-executor), ts 81775923816, free_ts 25020578797 [ 647.601094][T10473] post_alloc_hook+0x173/0x1a0 [ 647.605988][T10473] get_page_from_freelist+0x1a1e/0x1ab0 [ 647.611576][T10473] __alloc_pages+0x1ec/0x4f0 [ 647.616215][T10473] alloc_slab_page+0x5d/0x160 [ 647.620955][T10473] new_slab+0x87/0x2c0 [ 647.625065][T10473] ___slab_alloc+0xbc6/0x1240 [ 647.629778][T10473] __kmem_cache_alloc_node+0x1a0/0x260 [ 647.635264][T10473] __kmalloc_node_track_caller+0x9e/0x230 [ 647.641019][T10473] __alloc_skb+0x22a/0x7e0 [ 647.645471][T10473] netlink_sendmsg+0x654/0xbd0 [ 647.650361][T10473] __sys_sendto+0x497/0x650 [ 647.654898][T10473] __x64_sys_sendto+0xda/0xf0 [ 647.659608][T10473] do_syscall_64+0x4c/0xa0 [ 647.664063][T10473] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 647.669990][T10473] page last free stack trace: [ 647.674860][T10473] free_unref_page_prepare+0x8b4/0x9a0 [ 647.680356][T10473] free_unref_page+0x2e/0x3f0 [ 647.685161][T10473] free_contig_range+0x9d/0x150 [ 647.690131][T10473] destroy_args+0xf0/0xa0a [ 647.694581][T10473] debug_vm_pgtable+0x33c/0x38e [ 647.699466][T10473] do_one_initcall+0x26a/0x840 [ 647.704265][T10473] do_initcall_level+0x137/0x1e4 [ 647.709232][T10473] do_initcalls+0x4b/0x8a [ 647.713595][T10473] kernel_init_freeable+0x415/0x5be [ 647.718827][T10473] kernel_init+0x19/0x1b0 [ 647.723194][T10473] ret_from_fork+0x1f/0x30 [ 647.727651][T10473] [ 647.729996][T10473] Memory state around the buggy address: [ 647.735657][T10473] ffff888055faa480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 647.743830][T10473] ffff888055faa500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 647.751934][T10473] >ffff888055faa580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 647.760027][T10473] ^ [ 647.768030][T10473] ffff888055faa600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 647.776116][T10473] ffff888055faa680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 647.784207][T10473] ================================================================== [ 647.792403][T10473] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 647.799646][T10473] CPU: 1 PID: 10473 Comm: syz.3.1892 Not tainted syzkaller #0 [ 647.807163][T10473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 647.817277][T10473] Call Trace: [ 647.820598][T10473] [ 647.823570][T10473] dump_stack_lvl+0x188/0x24e [ 647.828311][T10473] ? memcpy+0x3c/0x60 [ 647.832349][T10473] ? show_regs_print_info+0x12/0x12 [ 647.837616][T10473] ? load_image+0x400/0x400 [ 647.842198][T10473] panic+0x2e5/0x730 [ 647.846163][T10473] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 647.852514][T10473] ? bpf_jit_dump+0xd0/0xd0 [ 647.857088][T10473] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 647.863048][T10473] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 647.869008][T10473] ? _raw_spin_unlock+0x40/0x40 [ 647.873926][T10473] check_panic_on_warn+0x80/0xa0 [ 647.878927][T10473] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 647.885226][T10473] end_report+0x66/0x110 [ 647.889530][T10473] kasan_report+0x118/0x140 [ 647.894088][T10473] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 647.900393][T10473] ieee80211_monitor_select_queue+0x23a/0x240 [ 647.906534][T10473] ? ieee80211_activate_links_work+0x60/0x60 [ 647.912581][T10473] netdev_core_pick_tx+0x118/0x340 [ 647.917931][T10473] __dev_queue_xmit+0xb19/0x37c0 [ 647.922936][T10473] ? __dev_queue_xmit+0x26b/0x37c0 [ 647.928112][T10473] ? netdev_core_pick_tx+0x340/0x340 [ 647.933460][T10473] ? virtio_net_hdr_to_skb+0xac2/0x1290 [ 647.939149][T10473] ? packet_extra_vlan_len_allowed+0x200/0x200 [ 647.945359][T10473] ? skb_copy_datagram_from_iter+0x5e0/0x690 [ 647.951409][T10473] packet_sendmsg+0x3bc3/0x4e60 [ 647.956328][T10473] ? __might_sleep+0xd0/0xd0 [ 647.960964][T10473] ? verify_lock_unused+0x140/0x140 [ 647.966233][T10473] ? aa_sk_perm+0x81f/0x950 [ 647.970791][T10473] ? packet_getsockopt+0x9a0/0x9a0 [ 647.975952][T10473] ? aa_sock_msg_perm+0x94/0x150 [ 647.980944][T10473] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 647.986295][T10473] ? security_socket_sendmsg+0x7c/0xa0 [ 647.991839][T10473] ? packet_getsockopt+0x9a0/0x9a0 [ 647.997013][T10473] ____sys_sendmsg+0x5be/0x970 [ 648.001857][T10473] ? __sys_sendmsg_sock+0x30/0x30 [ 648.006952][T10473] ? __import_iovec+0x315/0x500 [ 648.011861][T10473] ? import_iovec+0x6f/0xa0 [ 648.016427][T10473] ___sys_sendmsg+0x2a2/0x360 [ 648.021167][T10473] ? lock_chain_count+0x20/0x20 [ 648.026169][T10473] ? __sys_sendmsg+0x290/0x290 [ 648.031118][T10473] __se_sys_sendmsg+0x1bb/0x2a0 [ 648.036139][T10473] ? __x64_sys_sendmsg+0x80/0x80 [ 648.041219][T10473] ? lockdep_hardirqs_on+0x94/0x140 [ 648.046490][T10473] do_syscall_64+0x4c/0xa0 [ 648.050971][T10473] ? clear_bhb_loop+0x60/0xb0 [ 648.055725][T10473] ? clear_bhb_loop+0x60/0xb0 [ 648.060465][T10473] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 648.066446][T10473] RIP: 0033:0x7f1b6339c819 [ 648.070924][T10473] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 648.090588][T10473] RSP: 002b:00007f1b642f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 648.099039][T10473] RAX: ffffffffffffffda RBX: 00007f1b63615fa0 RCX: 00007f1b6339c819 [ 648.107058][T10473] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000007 [ 648.115068][T10473] RBP: 00007f1b63432c91 R08: 0000000000000000 R09: 0000000000000000 [ 648.123154][T10473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 648.131174][T10473] R13: 00007f1b63616038 R14: 00007f1b63615fa0 R15: 00007fff443e1bc8 [ 648.139191][T10473] [ 648.142807][T10473] Kernel Offset: disabled [ 648.147175][T10473] Rebooting in 86400 seconds..