last executing test programs: 5m0.425745139s ago: executing program 1 (id=893): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r0, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x8}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000280)=0x9, 0x4) 4m59.958495013s ago: executing program 1 (id=899): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4102a}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048050}, 0x4000) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, 0xffffffffffffffff, 0x1000) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}, "040086dd0000ffff"}}}}}, 0x0) 4m59.958173077s ago: executing program 0 (id=900): r0 = socket(0x10, 0x80002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYBLOB="0300000000000000280012800a0001"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 4m59.174225295s ago: executing program 0 (id=909): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000100)=0xd5, 0x4) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f00000000c0)=0x4d, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000001500)=""/4, &(0x7f0000000240)=0x4) 4m59.053373117s ago: executing program 1 (id=912): setresuid(0x0, 0xee00, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x7000000) 4m58.993532688s ago: executing program 0 (id=913): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000010000000f000000080034000800030008000300", @ANYRES32=r2, @ANYBLOB="050033"], 0x2c}, 0x1, 0x0, 0x0, 0x24004040}, 0x80) 4m58.915137658s ago: executing program 0 (id=916): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000f2ffff03000040"]) 4m58.842554676s ago: executing program 1 (id=917): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) 4m58.716379926s ago: executing program 1 (id=919): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r1, 0x40046104, &(0x7f00000002c0)) 4m58.630515719s ago: executing program 0 (id=920): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a}, 0x94) r1 = socket$inet6(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r0, 0x0, 0x1000}, 0x18) sendto$inet6(r1, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 4m58.321238522s ago: executing program 1 (id=922): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0xb) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x31) 4m57.799900283s ago: executing program 32 (id=921): r0 = io_uring_setup(0x424c, &(0x7f00000004c0)={0x0, 0xad41, 0x2, 0x3, 0x161}) r1 = eventfd2(0x28ea, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000540)=r1, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) 4m57.758380996s ago: executing program 0 (id=924): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 4m57.623417161s ago: executing program 33 (id=924): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 4m57.617412939s ago: executing program 34 (id=922): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0xb) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x31) 4m34.269036474s ago: executing program 3 (id=1225): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), r0) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000900)={0x28, r2, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x28}, 0x1, 0x0, 0x0, 0x51}, 0x0) 4m34.132426231s ago: executing program 3 (id=1229): r0 = socket(0x2, 0x3, 0xff) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0xfff9, @multicast1}, 0x10) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x14}, 0x20, 0x0, 0x0, 0x8015}, 0x48844) 4m33.93174492s ago: executing program 3 (id=1232): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x28, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}}, 0x0) 4m33.78676623s ago: executing program 3 (id=1236): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 4m33.634817409s ago: executing program 3 (id=1239): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="050000000b0000000a00000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001380)="96be8a7feca9b1a8fbee7536d4baf4c914ed9a500f9eaa461123f0b53e5977cd4707a9e105a24f15f5f127f54d3977c937eeedf980b68234", &(0x7f0000001680), 0x8000, r0}, 0x38) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$MAP_UPDATE_BATCH(0x19, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x38) 4m33.250482244s ago: executing program 3 (id=1249): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x4f0, 0x1b0, 0xd0, 0xd0, 0x3e0, 0x310, 0x500, 0x500, 0x500, 0x500, 0x500, 0x6, 0x0, {[{{@ipv6={@mcast2, @private1, [], [0x0, 0xff], 'macvlan1\x00', 'veth1_to_bridge\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, [], [], 'syzkaller0\x00', 'team_slave_1\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0xfd}, {0xffffffffffffffff}, {}, 0xf3d9, 0x2}}}, {{@ipv6={@mcast1, @remote, [], [0xff, 0x0, 0x0, 0xff], '\x00', 'dummy0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1000, 0x6, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x550) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r0, 0x8b22, &(0x7f0000000040)) 4m33.010192363s ago: executing program 35 (id=1249): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x4f0, 0x1b0, 0xd0, 0xd0, 0x3e0, 0x310, 0x500, 0x500, 0x500, 0x500, 0x500, 0x6, 0x0, {[{{@ipv6={@mcast2, @private1, [], [0x0, 0xff], 'macvlan1\x00', 'veth1_to_bridge\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, [], [], 'syzkaller0\x00', 'team_slave_1\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0xfd}, {0xffffffffffffffff}, {}, 0xf3d9, 0x2}}}, {{@ipv6={@mcast1, @remote, [], [0xff, 0x0, 0x0, 0xff], '\x00', 'dummy0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1000, 0x6, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x550) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r0, 0x8b22, &(0x7f0000000040)) 1m49.000903s ago: executing program 5 (id=4029): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000100)=""/144, 0x90}], 0x1) write$proc_mixer(r0, &(0x7f0000000100)=ANY=[], 0xb0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x1a1100, 0x0) dup3(r1, r0, 0x0) 1m48.914481201s ago: executing program 5 (id=4030): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r0, 0x0, 0x5d) write$ppp(r0, &(0x7f0000000200)="bc72", 0x2) 1m48.73473867s ago: executing program 5 (id=4031): mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) 1m48.630479505s ago: executing program 5 (id=4032): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x20000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x89901) 1m48.569409463s ago: executing program 5 (id=4034): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000000)={&(0x7f0000000580)={0x1d, r2}, 0x10, &(0x7f0000000080)={&(0x7f00000005c0)=@canfd={{}, 0x19, 0x3, 0x0, 0x0, "0e7692fddc9d8ba5a0ac79669b2947a81f2e3c8973fc2af2a7fa10b9926ea28baed9b57d82ab23db557c307ae88da9c6c68d8ceae8e69b06707297b87f8c925a"}, 0x48}, 0x2, 0x0, 0x0, 0x4105}, 0x0) 1m48.17965333s ago: executing program 5 (id=4039): openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000040000000000000000000300000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000030900020073797a31000000000900010073797a3000000000080005400000002105000d40930000005c0000000c0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c0000800400018024000b80100001800c000100", @ANYBLOB="71b6846f1a786ada90e269e3c3a693fa66a3e6c421ffe56f92a3ae8169d326e1c4ded7b86c88ba7ff1ddcf0be9d343275c"], 0xe8}, 0x1, 0x0, 0x0, 0x20044094}, 0x4000) 1m47.227604028s ago: executing program 36 (id=4039): openat$smackfs_logging(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000040000000000000000000300000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000030900020073797a31000000000900010073797a3000000000080005400000002105000d40930000005c0000000c0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c0000800400018024000b80100001800c000100", @ANYBLOB="71b6846f1a786ada90e269e3c3a693fa66a3e6c421ffe56f92a3ae8169d326e1c4ded7b86c88ba7ff1ddcf0be9d343275c"], 0xe8}, 0x1, 0x0, 0x0, 0x20044094}, 0x4000) 42.796154371s ago: executing program 4 (id=4956): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x20, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 42.570227915s ago: executing program 4 (id=4959): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0xfff, 0x5}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) 42.52286925s ago: executing program 4 (id=4960): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0x82, &(0x7f0000000200)={0x7939, 0x5, 0x8000, 0x86, 0xe2, 0x0, 0xff, 0xb7}, &(0x7f0000000440)=0x20) 42.469537246s ago: executing program 4 (id=4961): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000340)=@abs={0x1, 0x0, 0x104e22}, 0x6e) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 42.413156096s ago: executing program 4 (id=4962): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x88, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4f, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @val={0x4, 0x6, {0xe0, 0x8, 0x8000, 0x91d0}}, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x40, 0x3, 0x4, 0x0, {0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x1, 0x7, 0x97}}, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_PBSS={0x4}]}, 0x88}}, 0x0) 42.254402935s ago: executing program 4 (id=4963): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000480)={{0x0, 0xefae, 0x0, 0x3}, 'syz1\x00', 0x4d}) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x2c0) ioctl$UI_DEV_CREATE(r0, 0x5501) 42.086493551s ago: executing program 37 (id=4963): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000480)={{0x0, 0xefae, 0x0, 0x3}, 'syz1\x00', 0x4d}) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x2c0) ioctl$UI_DEV_CREATE(r0, 0x5501) 24.6813056s ago: executing program 9 (id=5187): openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000140), 0x22882, 0x0) r0 = syz_io_uring_setup(0x24f0, &(0x7f0000000780)={0x0, 0x0, 0x10100, 0x0, 0x4}, &(0x7f0000000100)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r0, 0x567, 0x0, 0x0, 0x0, 0x0) 24.564297127s ago: executing program 9 (id=5191): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0200"], 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) 24.430490927s ago: executing program 9 (id=5193): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000680)={@val={0x0, 0x6003}, @void, @eth={@broadcast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0xe000, 0xfa, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x8100, 0x8}}}}}}, 0x2e) 24.202491207s ago: executing program 9 (id=5197): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r0, &(0x7f0000000200)="6f1f7462a1ca96b1a7", 0x9, 0x14000004, 0x0, 0x0) 16.527972713s ago: executing program 9 (id=5197): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r0, &(0x7f0000000200)="6f1f7462a1ca96b1a7", 0x9, 0x14000004, 0x0, 0x0) 8.321588954s ago: executing program 9 (id=5197): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r0, &(0x7f0000000200)="6f1f7462a1ca96b1a7", 0x9, 0x14000004, 0x0, 0x0) 6.213545555s ago: executing program 6 (id=5372): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000580)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0xe, 0x7}]}) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x3}]}) close(r0) 4.850131414s ago: executing program 6 (id=5379): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28bd, 0x933, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x5, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xffff, 0x3, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}}}}]}}]}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x0, 0x30, 0x5, {0x5, 0x15, "7062b6"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 3.311684226s ago: executing program 2 (id=5397): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fbdbdf251e00000008000300", @ANYRES32=r2, @ANYBLOB="50002f800c0002000203aaaaaaaaaaaa0c000380080001000200000034000380080001"], 0x6c}, 0x1, 0x0, 0x0, 0x20000041}, 0x4880) 3.035986981s ago: executing program 2 (id=5399): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r1) 2.970962116s ago: executing program 6 (id=5400): r0 = memfd_create(&(0x7f0000000100)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabh\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)r\xdc\x17\x99J\xaeE\xbdt\xe2L^2\xca\x8f\x1cZ\x84\xe3\xe6\x86iC\xcc\xa9\xbf\xeb\x92\r \xa86\x82\xc3\xa8\xf1\xb4\x0f\x9b\x88\x0f\xc8U\x99;\x9c\x17\xfc7\xdd\xd6\x8e%4\x17~\x9d\xe1\a\x00\x00\x00\xa5\x8fG\\\xd8\x80\x15\xcaw\x7f\xac\x063\xbaE\x11\xcc~Q\xcb/\x8bv\xf2B_\xc5\x8d\xb3\xdd\xbd\x1e\xde\x19\xb5\xc4\xcf%p\x89\xa2\xda\xc7', 0x2) r1 = fanotify_init(0x8, 0x1000) r2 = dup(r0) fanotify_mark(r1, 0x201, 0x48001038, r2, 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 2.821237334s ago: executing program 6 (id=5401): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0200"], 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r0, 0x2, 0x0, 0x7, &(0x7f0000002b00)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 2.680024559s ago: executing program 6 (id=5403): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f00000000c0)={0x2, 0x5, 0xd}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000008702"]) 2.402125154s ago: executing program 6 (id=5405): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000020000000200000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000080), &(0x7f0000000180)=r2}, 0x20) 1.89446562s ago: executing program 2 (id=5407): r0 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x200) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DISCONNECT(r0, 0xab08) 1.65508405s ago: executing program 2 (id=5409): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pim6reg0\x00', 0x2}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) unshare(0x2040400) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f00000001c0)=r1) 1.589443618s ago: executing program 7 (id=5410): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) futex(0x0, 0xa, 0x0, 0x0, 0x0, 0x0) 1.284106114s ago: executing program 2 (id=5412): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept4$unix(r0, 0x0, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000000), 0x8) 1.22207211s ago: executing program 7 (id=5413): creat(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@sg0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='ubifs\x00', 0x8000, 0x0) 1.077099384s ago: executing program 7 (id=5415): r0 = syz_open_dev$media(&(0x7f0000000040), 0x7ffffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x8000, 0xe661, 0x4, 0x7, 0x101, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x4000000, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x131, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x9], [0x7, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x80000003, 0xffffffff, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0x8, 0x0, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x40, 0x8, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0xf58, 0x3, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x8, 0x200a620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc5, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x0, 0x200, 0xffbf2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 831.144362ms ago: executing program 7 (id=5416): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0xf000, 0x7}, {0x0, 0x10}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x2}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010010000000ffdbdf2530000000", @ANYRES32=r2, @ANYBLOB="20000000000000001c0012800b0001006d616373656300000c00028005000f"], 0x3c}}, 0x0) 568.229331ms ago: executing program 8 (id=5418): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000540)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000240)={0x0, 0x0, r2, r3, 0x8, 0x0, 0x4, 0x8, {0x6, 0x0, 0xe, 0x30b4, 0x8000, 0x2025, 0xfffe, 0x3, 0x3e40, 0x7, 0x0, 0x9, 0x2, 0xfffffffc, "12d56163d7287bd287881d942450c7153a3243937ca9a58f1c702a4ccc476b15"}}) 491.088304ms ago: executing program 8 (id=5419): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) 380.726363ms ago: executing program 8 (id=5420): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c0800014000000002080001"], 0x122}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x2c, 0x3d, 0x9, 0xffffffff, 0x0, {0x1}, [@typed={0x4, 0x11f}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x22, 0x0, 0x0, @str='\x05G'}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x3}, {0x6}, {0x4, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040080}, 0x40004) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) 311.898437ms ago: executing program 8 (id=5421): syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x82002) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)={0x8000203d}) 310.420718ms ago: executing program 2 (id=5422): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000100)={r2}, &(0x7f0000000140)=0x8) 227.420514ms ago: executing program 7 (id=5423): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) 122.498829ms ago: executing program 8 (id=5424): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000200)="580000001400add4275a1bf00c45b45602067fffffff81005e22000d00ff0028925aa8002000eaa57b00090080000efffeffe809000000ff0000f03a0200f0ffffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 66.438013ms ago: executing program 7 (id=5425): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@arm64={0x67, 0x3, 0xf7}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f00000001c0)) 0s ago: executing program 8 (id=5426): r0 = timerfd_create(0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) clock_adjtime(0x0, &(0x7f0000000480)={0xd54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}) kernel console output (not intermixed with test programs): ig [ 331.338045][ T24] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 331.348549][ T24] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 331.366913][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 331.383028][ T24] usb 9-1: SerialNumber: syz [ 331.600399][ T24] usb 9-1: 0:2 : does not exist [ 331.626042][ T24] usb 9-1: USB disconnect, device number 19 [ 331.648021][ T979] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 331.665755][ T5895] usb 7-1: USB disconnect, device number 16 [ 331.831504][ T979] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.855683][ T979] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 331.865102][ T979] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.887764][ T979] usb 8-1: config 0 descriptor?? [ 332.025141][T14732] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3941'. [ 332.258909][T14740] sctp: [Deprecated]: syz.4.3944 (pid 14740) Use of struct sctp_assoc_value in delayed_ack socket option. [ 332.258909][T14740] Use struct sctp_sack_info instead [ 332.291080][T14742] bridge0: port 3(ip6gretap0) entered blocking state [ 332.325894][T14742] bridge0: port 3(ip6gretap0) entered disabled state [ 332.336979][ T979] keytouch 0003:0926:3333.0021: fixing up Keytouch IEC report descriptor [ 332.374456][T14742] ip6gretap0: entered allmulticast mode [ 332.389788][ T979] input: HID 0926:3333 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0926:3333.0021/input/input34 [ 332.421190][T14742] ip6gretap0: entered promiscuous mode [ 332.447483][T14742] bridge0: port 3(ip6gretap0) entered blocking state [ 332.454320][T14742] bridge0: port 3(ip6gretap0) entered forwarding state [ 332.481779][T14746] binder: 14745:14746 ioctl c0306201 200000000040 returned -14 [ 332.528411][ T979] keytouch 0003:0926:3333.0021: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.7-1/input0 [ 332.890552][ T979] usb 8-1: USB disconnect, device number 20 [ 333.476084][ T979] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 333.665537][ T979] usb 6-1: Using ep0 maxpacket: 16 [ 333.705562][ T979] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 333.714335][ T979] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 333.753060][T14786] gretap0: entered promiscuous mode [ 333.763402][T14786] batman_adv: batadv0: Adding interface: macvlan2 [ 333.783203][T14786] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.799428][ T979] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 333.820049][ T979] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 333.831725][ T979] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.839883][ T10] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 333.848492][T14786] batman_adv: batadv0: Interface activated: macvlan2 [ 333.855568][ T979] usb 6-1: Product: syz [ 333.863422][ T979] usb 6-1: Manufacturer: syz [ 333.875092][ T979] usb 6-1: SerialNumber: syz [ 334.018129][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.041918][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 334.066436][ T10] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 334.093726][ T10] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 334.124146][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.145349][ T10] usb 8-1: config 0 descriptor?? [ 334.205875][ T5910] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 334.240802][T14793] syzkaller1: entered promiscuous mode [ 334.255454][T14793] syzkaller1: entered allmulticast mode [ 334.317041][ T979] usb 6-1: 0:2 : does not exist [ 334.385791][ T5910] usb 7-1: Using ep0 maxpacket: 32 [ 334.396926][ T5910] usb 7-1: config index 0 descriptor too short (expected 35577, got 27) [ 334.410979][ T5910] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 334.419663][ T5910] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 334.449170][ T5910] usb 7-1: config 1 has no interface number 0 [ 334.465528][ T5910] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 334.487275][ T5910] usb 7-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 334.540018][ T5910] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 334.556800][ T5910] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.571558][ T10] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 334.584872][ T10] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 334.594996][ T10] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 334.607024][ T5910] snd_usb_pod 7-1:1.1: Line 6 Pocket POD found [ 334.613378][ T10] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 334.622003][ T10] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 334.629760][ T10] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 334.655856][ T43] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 334.675844][ T10] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 334.685573][ T10] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 334.703222][ T10] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 334.718945][ T10] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 334.726660][ T10] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 334.734162][ T10] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 334.741809][ T10] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 334.751562][ T10] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 334.759609][ T10] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 334.770315][ T10] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 334.777977][ T10] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 334.786364][T14799] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3972'. [ 334.796529][ T10] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 334.831071][ T5910] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now attached [ 334.837603][ T43] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 334.851858][ T10] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 334.870347][ T10] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 334.875957][ T43] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 334.901288][ T10] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 334.921596][ T10] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 334.932693][ T43] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 334.941957][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 334.950082][ T10] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 334.950111][ T10] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 334.950215][ T10] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 334.950241][ T10] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 334.950265][ T10] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 334.950314][ T10] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 334.950338][ T10] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 334.950367][ T10] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 334.950391][ T10] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 334.950414][ T10] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 334.950463][ T10] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 334.950487][ T10] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 334.950511][ T10] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 334.950534][ T10] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 334.950557][ T10] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 334.950608][ T10] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 335.014149][ T10] plantronics 0003:047F:FFFF.0022: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 335.114361][ T979] usb 6-1: USB disconnect, device number 22 [ 335.120395][ T43] usb 5-1: SerialNumber: syz [ 335.138308][ T43] cdc_ether 5-1:1.0: skipping garbage [ 335.144447][ T43] usb 5-1: bad CDC descriptors [ 335.173687][ T10] usb 8-1: USB disconnect, device number 21 [ 335.360627][ T43] usb 7-1: USB disconnect, device number 17 [ 335.376694][ T43] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now disconnected [ 335.726336][ T24] usb 8-1: new full-speed USB device number 22 using dummy_hcd [ 335.902822][ T24] usb 8-1: config 1 interface 0 has no altsetting 0 [ 335.926375][ T24] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 335.949487][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.965782][ T24] usb 8-1: Product: syz [ 335.974334][ T24] usb 8-1: Manufacturer: syz [ 335.979583][ T24] usb 8-1: SerialNumber: syz [ 336.085845][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 336.115900][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 336.124558][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 336.226296][ T43] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 336.241432][ T24] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 22 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 336.273307][ T24] usb 8-1: USB disconnect, device number 22 [ 336.290878][ T24] usblp0: removed [ 336.438501][ T43] usb 6-1: config 0 has an invalid interface number: 255 but max is 0 [ 336.461365][ T43] usb 6-1: config 0 has no interface number 0 [ 336.485552][ T43] usb 6-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 336.510942][ T43] usb 6-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 336.549255][ T43] usb 6-1: config 0 interface 255 has no altsetting 0 [ 336.559483][ T43] usb 6-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 336.569339][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.580359][ T43] usb 6-1: config 0 descriptor?? [ 336.588762][ T43] ums-realtek 6-1:0.255: USB Mass Storage device detected [ 336.825999][ T10] usb 6-1: USB disconnect, device number 23 [ 337.011550][T14856] use of bytesused == 0 is deprecated and will be removed in the future, [ 337.020784][T14856] use the actual size instead. [ 337.136764][T14859] netlink: 'syz.7.3996': attribute type 11 has an invalid length. [ 337.296094][ T43] usb 5-1: USB disconnect, device number 28 [ 337.422789][T14871] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 337.430463][T14871] IPv6: NLM_F_CREATE should be set when creating new route [ 338.026222][ T10] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 338.066239][ T5910] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 338.083157][T14904] syzkaller1: entered promiscuous mode [ 338.089445][T14904] syzkaller1: entered allmulticast mode [ 338.168430][T14908] tipc: Started in network mode [ 338.173401][T14908] tipc: Node identity 7f000001, cluster identity 4711 [ 338.192618][T14908] tipc: Enabled bearer , priority 10 [ 338.199243][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 338.211922][ T10] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 338.222658][ T10] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 338.232488][ T5910] usb 9-1: Using ep0 maxpacket: 32 [ 338.242926][ T5910] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 338.264951][ T5910] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 338.279506][ T5910] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 338.289637][ T5910] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 338.301879][ T5910] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 338.313808][ T10] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 338.323232][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.332716][ T10] usb 8-1: Product: syz [ 338.337316][ T10] usb 8-1: Manufacturer: syz [ 338.342153][ T10] usb 8-1: SerialNumber: syz [ 338.348957][ T5910] usb 9-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 338.358374][ T5910] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.368767][ T5910] usb 9-1: Product: syz [ 338.372969][ T5910] usb 9-1: Manufacturer: syz [ 338.377709][ T5910] usb 9-1: SerialNumber: syz [ 338.390484][ T5910] usb 9-1: config 0 descriptor?? [ 338.796543][ T10] usb 8-1: 0:2 : does not exist [ 338.813850][ T5910] iforce 9-1:0.0: usb_submit_urb failed: -32 [ 338.825768][ T5910] input input35: Device does not respond to id packet M [ 338.844447][ T5910] iforce 9-1:0.0: usb_submit_urb failed: -32 [ 338.851819][ T5910] input input35: Device does not respond to id packet P [ 338.862185][ T5910] input input35: Device does not respond to id packet B [ 339.063574][ T5910] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 339.081415][ T5910] input input35: Device does not respond to id packet N [ 339.089751][ T5910] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 339.100229][ T5910] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 339.107170][ T5910] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 339.113740][ T5910] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 339.131172][ T5910] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input35 [ 339.165472][ T5910] usb 9-1: USB disconnect, device number 20 [ 339.292630][T14941] ALSA: mixer_oss: invalid OSS volume '' [ 339.309655][ T10] tipc: Node number set to 2130706433 [ 339.402537][ T24] usb 8-1: USB disconnect, device number 23 [ 339.678421][T14950] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4033'. [ 339.700813][T14950] IPVS: Error joining to the multicast group [ 339.881827][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 339.881844][ T30] audit: type=1326 audit(2000000215.379:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14951 comm="syz.6.4035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc70bd2ab19 code=0x7ffc0000 [ 339.989878][ T30] audit: type=1326 audit(2000000215.379:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14951 comm="syz.6.4035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc70bd2ab19 code=0x7ffc0000 [ 340.054043][ T30] audit: type=1326 audit(2000000215.379:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14951 comm="syz.6.4035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc70bd2ab19 code=0x7ffc0000 [ 340.081068][ T30] audit: type=1326 audit(2000000215.379:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14951 comm="syz.6.4035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70bd8e929 code=0x7ffc0000 [ 340.106365][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 340.188222][ T30] audit: type=1326 audit(2000000215.379:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14951 comm="syz.6.4035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70bd8e929 code=0x7ffc0000 [ 340.268942][ T30] audit: type=1326 audit(2000000215.389:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14951 comm="syz.6.4035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc70bd2ab19 code=0x7ffc0000 [ 340.299927][ T30] audit: type=1326 audit(2000000215.389:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14951 comm="syz.6.4035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc70bd2ab19 code=0x7ffc0000 [ 340.445621][ T30] audit: type=1326 audit(2000000215.389:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14951 comm="syz.6.4035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc70bd2ab19 code=0x7ffc0000 [ 340.553067][ T30] audit: type=1326 audit(2000000215.389:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14951 comm="syz.6.4035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc70bd2ab19 code=0x7ffc0000 [ 340.682623][ T30] audit: type=1326 audit(2000000215.389:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14951 comm="syz.6.4035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc70bd2ab19 code=0x7ffc0000 [ 341.166312][T11500] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.354160][T11500] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.506263][ T5941] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 341.588172][T11500] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.686536][ T5941] usb 7-1: Using ep0 maxpacket: 32 [ 341.709319][ T5941] usb 7-1: config index 0 descriptor too short (expected 95, got 59) [ 341.728574][ T5941] usb 7-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 341.772206][ T5941] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 341.808320][ T5941] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 341.816443][T11500] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.844010][ T5941] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 341.870386][ T5941] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.870870][ T5828] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 341.888805][ T5828] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 341.906250][ T5828] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 341.915996][ T5828] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 341.924170][ T5828] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 341.926929][ T5941] usb 7-1: Product: syz [ 341.945686][ T5941] usb 7-1: Manufacturer: syz [ 341.985864][ T5941] usb 7-1: SerialNumber: syz [ 342.222923][T14968] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 342.234791][ T5941] usb 7-1: 0:2 : does not exist [ 342.272533][ T5941] usb 7-1: USB disconnect, device number 18 [ 342.358076][T11500] ip6gretap0: left allmulticast mode [ 342.366151][T11500] ip6gretap0: left promiscuous mode [ 342.372406][T11500] bridge0: port 3(ip6gretap0) entered disabled state [ 342.397998][T11500] bridge_slave_1: left allmulticast mode [ 342.403692][T11500] bridge_slave_1: left promiscuous mode [ 342.403896][T11500] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.445997][ T5910] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 342.475155][T11500] bridge_slave_0: left allmulticast mode [ 342.505305][T11500] bridge_slave_0: left promiscuous mode [ 342.514955][T11500] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.648930][ T5910] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.668996][ T5910] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 342.686243][ T5910] usb 9-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 342.695302][ T5910] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.727119][ T5910] usb 9-1: config 0 descriptor?? [ 343.158371][ T5910] cm6533_jd 0003:0D8C:0022.0023: unknown main item tag 0x0 [ 343.175723][ T5910] cm6533_jd 0003:0D8C:0022.0023: unknown main item tag 0x0 [ 343.188728][ T5910] cm6533_jd 0003:0D8C:0022.0023: unknown main item tag 0x0 [ 343.201542][ T5910] cm6533_jd 0003:0D8C:0022.0023: unknown main item tag 0x0 [ 343.213847][ T5910] cm6533_jd 0003:0D8C:0022.0023: unknown main item tag 0x0 [ 343.240792][ T5910] cm6533_jd 0003:0D8C:0022.0023: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.8-1/input0 [ 343.254831][T11500] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 343.276010][T11500] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 343.286995][T11500] bond0 (unregistering): Released all slaves [ 343.307723][T15017] netlink: 'syz.7.4064': attribute type 29 has an invalid length. [ 343.372864][T15017] netlink: 548 bytes leftover after parsing attributes in process `syz.7.4064'. [ 343.393930][T15019] netlink: 'syz.7.4064': attribute type 29 has an invalid length. [ 343.438439][ T10] usb 9-1: USB disconnect, device number 21 [ 343.438676][T15022] input input36: cannot allocate more than FF_MAX_EFFECTS effects [ 343.541058][T14986] chnl_net:caif_netlink_parms(): no params data found [ 343.705200][T11500] hsr_slave_0: left promiscuous mode [ 343.722991][T11500] hsr_slave_1: left promiscuous mode [ 343.740121][T11500] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 343.749206][T11500] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 343.762742][T11500] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 343.772469][T11500] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 343.821555][T11500] veth1_macvtap: left promiscuous mode [ 343.830270][T11500] veth0_macvtap: left promiscuous mode [ 343.839049][T11500] veth1_vlan: left promiscuous mode [ 343.844509][T11500] veth0_vlan: left promiscuous mode [ 343.965810][ T5828] Bluetooth: hci1: command tx timeout [ 344.638907][T11500] team0 (unregistering): Port device team_slave_1 removed [ 344.680640][T11500] team0 (unregistering): Port device team_slave_0 removed [ 345.074523][T15032] batadv_slave_1: entered promiscuous mode [ 345.091906][T15037] batadv_slave_1: left promiscuous mode [ 345.110518][T15042] bridge0: port 3(ip6gretap0) entered blocking state [ 345.125227][T15042] bridge0: port 3(ip6gretap0) entered disabled state [ 345.133886][T15042] ip6gretap0: entered allmulticast mode [ 345.141561][T15042] ip6gretap0: entered promiscuous mode [ 345.156618][T15042] bridge0: port 3(ip6gretap0) entered blocking state [ 345.163399][T15042] bridge0: port 3(ip6gretap0) entered forwarding state [ 345.377690][T14986] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.385086][T14986] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.401357][T14986] bridge_slave_0: entered allmulticast mode [ 345.424541][T14986] bridge_slave_0: entered promiscuous mode [ 345.457046][T14986] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.464197][T14986] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.481645][T14986] bridge_slave_1: entered allmulticast mode [ 345.497512][T14986] bridge_slave_1: entered promiscuous mode [ 345.713970][ T5910] IPVS: starting estimator thread 0... [ 345.726465][ C0] bridge0: port 1(ip6gretap0) entered learning state [ 345.754314][T14986] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.783771][T14986] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.805968][T15068] IPVS: using max 28 ests per chain, 67200 per kthread [ 345.879192][T14986] team0: Port device team_slave_0 added [ 345.896414][T14986] team0: Port device team_slave_1 added [ 345.974229][T14986] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.981684][T14986] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.012493][T14986] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.025379][T14986] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.034445][T14986] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.045704][ T5828] Bluetooth: hci1: command tx timeout [ 346.066113][T14986] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.142740][T14986] hsr_slave_0: entered promiscuous mode [ 346.159725][T14986] hsr_slave_1: entered promiscuous mode [ 346.172567][T14986] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 346.180733][T14986] Cannot create hsr debugfs directory [ 346.205802][ T5910] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 346.365680][ T5910] usb 9-1: Using ep0 maxpacket: 32 [ 346.372673][ T5910] usb 9-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 346.385780][ T5910] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.404967][ T5910] usb 9-1: config 0 descriptor?? [ 346.622929][T15075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.627674][T14986] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 346.636223][T15075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.658373][ T5910] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 346.660856][T14986] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 346.676964][ T5910] usb 9-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 346.698243][ T5910] usb 9-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 346.748956][T14986] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 346.789413][T14986] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 346.936869][T14986] 8021q: adding VLAN 0 to HW filter on device bond0 [ 346.958838][T14986] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.992755][T11527] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.999950][T11527] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.056213][T15100] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4096'. [ 347.070472][T11524] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.077670][T11524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.174833][T14986] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 347.574617][T15120] netlink: 212376 bytes leftover after parsing attributes in process `syz.7.4104'. [ 347.659541][T14986] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.098455][T15145] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 348.128746][ T5828] Bluetooth: hci1: command tx timeout [ 348.193175][T14986] veth0_vlan: entered promiscuous mode [ 348.214664][T14986] veth1_vlan: entered promiscuous mode [ 348.286493][ T5941] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 348.295253][T14986] veth0_macvtap: entered promiscuous mode [ 348.315825][T14986] veth1_macvtap: entered promiscuous mode [ 348.415846][T14986] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 348.452294][T14986] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 348.472853][T14986] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.482023][T14986] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.491604][T14986] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.502332][T14986] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.572236][T11500] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.596880][T11500] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.628213][ T5941] usb 8-1: Using ep0 maxpacket: 32 [ 348.650342][ T5941] usb 8-1: config 0 has an invalid interface number: 51 but max is 0 [ 348.662560][ T5941] usb 8-1: config 0 has no interface number 0 [ 348.676132][T11506] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.683973][T11506] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.684848][ T5941] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 348.709843][ T5941] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.718382][ T5941] usb 8-1: Product: syz [ 348.722667][ T5941] usb 8-1: Manufacturer: syz [ 348.746825][ T5941] usb 8-1: SerialNumber: syz [ 348.789156][ T5941] usb 8-1: config 0 descriptor?? [ 348.813509][ T5941] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 349.058844][ T5941] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 349.074753][ T5941] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 349.459957][T15176] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4121'. [ 349.489087][ C1] usb 8-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 349.497623][ T43] usb 8-1: USB disconnect, device number 24 [ 349.519228][ T43] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 349.549730][ T43] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 349.576554][ T43] quatech2 8-1:0.51: device disconnected [ 349.905592][ T24] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 349.932333][T15192] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4129'. [ 350.069097][ T24] usb 7-1: config 0 has no interfaces? [ 350.076505][ T24] usb 7-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 350.086148][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.105156][ T24] usb 7-1: config 0 descriptor?? [ 350.206622][ T5828] Bluetooth: hci1: command tx timeout [ 350.281318][T15202] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4133'. [ 350.334319][ T5828] Bluetooth: hci4: unexpected event for opcode 0x0c12 [ 350.362105][ T10] usb 7-1: USB disconnect, device number 19 [ 350.620351][T15217] syzkaller1: entered promiscuous mode [ 350.628158][T15217] syzkaller1: entered allmulticast mode [ 350.672038][T15224] netlink: 'syz.4.4142': attribute type 4 has an invalid length. [ 350.689826][T15224] netlink: 'syz.4.4142': attribute type 4 has an invalid length. [ 350.848763][T15230] netlink: 428 bytes leftover after parsing attributes in process `syz.9.4147'. [ 350.870621][T15230] netlink: 56 bytes leftover after parsing attributes in process `syz.9.4147'. [ 350.991127][T15234] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4148'. [ 351.436133][ T5947] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 351.595853][ T5947] usb 10-1: Using ep0 maxpacket: 16 [ 351.606907][ T5947] usb 10-1: config 0 has an invalid interface number: 105 but max is 0 [ 351.626456][ T5947] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 351.644227][ T5947] usb 10-1: config 0 has no interface number 0 [ 351.662218][ T5947] usb 10-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 351.687115][ T5947] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.696362][ T5947] usb 10-1: Product: syz [ 351.701132][ T5947] usb 10-1: Manufacturer: syz [ 351.707146][ T5947] usb 10-1: SerialNumber: syz [ 351.714887][ T5947] usb 10-1: config 0 descriptor?? [ 351.724076][ T5947] usb 10-1: Found UVC 0.00 device syz (046d:08f3) [ 351.733957][ T5947] usb 10-1: No valid video chain found. [ 351.896695][ T30] kauditd_printk_skb: 149 callbacks suppressed [ 351.896712][ T30] audit: type=1800 audit(2000000227.409:729): pid=15287 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.8.4171" name="nullb0" dev="devtmpfs" ino=3001 res=0 errno=0 [ 351.929503][ T5947] usb 10-1: USB disconnect, device number 2 [ 352.471383][ T30] audit: type=1800 audit(2000000227.979:730): pid=15314 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.8.4183" name="nullb0" dev="devtmpfs" ino=3001 res=0 errno=0 [ 352.582355][ T30] audit: type=1800 audit(2000000228.089:731): pid=15319 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.8.4186" name="nullb0" dev="devtmpfs" ino=3001 res=0 errno=0 [ 352.886884][T15336] netlink: 212376 bytes leftover after parsing attributes in process `syz.9.4192'. [ 353.242533][ T30] audit: type=1800 audit(2000000228.749:732): pid=15357 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.9.4201" name="nullb0" dev="devtmpfs" ino=3001 res=0 errno=0 [ 353.615973][ T5947] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 353.825278][ T5947] usb 10-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 353.869112][ T5947] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.888261][ T5828] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 353.898574][ T5828] Bluetooth: hci3: Injecting HCI hardware error event [ 353.907656][ T5828] Bluetooth: hci3: hardware error 0x00 [ 353.917769][ T5947] usb 10-1: Product: syz [ 353.922064][ T5947] usb 10-1: Manufacturer: syz [ 353.926904][ T5947] usb 10-1: SerialNumber: syz [ 353.937064][ T5947] usb 10-1: config 0 descriptor?? [ 354.349560][ T5947] usb 10-1: Firmware: major: 0, minor: 97, hardware type: UNKNOWN (40) [ 354.365871][ T5823] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 354.374850][ T5823] Bluetooth: hci4: Injecting HCI hardware error event [ 354.387660][ T5823] Bluetooth: hci4: hardware error 0x00 [ 354.550320][ T5947] usb 10-1: failed to fetch extended address, random address set [ 354.573835][ T5947] usb 10-1: atusb_probe: initialization failed, error = -524 [ 354.582199][ T5947] atusb 10-1:0.0: probe with driver atusb failed with error -524 [ 354.599458][ T5947] usb 10-1: USB disconnect, device number 3 [ 354.861075][T15429] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 354.867724][T15429] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 354.881262][T15429] vhci_hcd vhci_hcd.0: Device attached [ 354.903259][T15429] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 354.909786][T15429] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 354.920194][T15429] vhci_hcd vhci_hcd.0: Device attached [ 354.936559][T15433] vhci_hcd: cannot find the pending unlink 193 [ 354.943133][T15430] vhci_hcd: connection closed [ 354.945202][T11524] vhci_hcd: stop threads [ 354.959574][T15433] vhci_hcd: connection closed [ 354.959961][T11524] vhci_hcd: release socket [ 354.970162][T11524] vhci_hcd: disconnect device [ 354.975456][T11524] vhci_hcd: stop threads [ 354.984251][T11524] vhci_hcd: release socket [ 354.994047][T11524] vhci_hcd: disconnect device [ 355.033238][T15439] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4238'. [ 355.694298][T15464] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4249'. [ 355.717274][T15464] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4249'. [ 355.742144][T15464] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 355.750978][T15464] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 355.759986][T15464] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 355.768828][T15464] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 356.046570][ T5828] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 356.065247][T15478] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000000003 [ 356.245599][ T979] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 356.426834][ T979] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 356.445860][ T5823] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 356.463750][ T979] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 356.483144][ T979] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.494373][ T979] usb 7-1: config 0 descriptor?? [ 356.502793][ T979] pwc: Askey VC010 type 2 USB webcam detected. [ 357.115967][ T979] pwc: recv_control_msg error -32 req 02 val 2700 [ 357.132253][ T979] pwc: recv_control_msg error -32 req 02 val 2c00 [ 357.146889][ T979] pwc: recv_control_msg error -71 req 04 val 1000 [ 357.159155][ T979] pwc: recv_control_msg error -71 req 04 val 1300 [ 357.184707][ T979] pwc: recv_control_msg error -71 req 04 val 1400 [ 357.207693][ T979] pwc: recv_control_msg error -71 req 02 val 2000 [ 357.226676][ T979] pwc: recv_control_msg error -71 req 02 val 2100 [ 357.230610][T15527] program syz.4.4278 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 357.240772][ T979] pwc: recv_control_msg error -71 req 04 val 1500 [ 357.267208][ T979] pwc: recv_control_msg error -71 req 02 val 2500 [ 357.292241][ T979] pwc: recv_control_msg error -71 req 02 val 2400 [ 357.308328][ T979] pwc: recv_control_msg error -71 req 02 val 2600 [ 357.330925][ T979] pwc: recv_control_msg error -71 req 02 val 2900 [ 357.351982][ T979] pwc: recv_control_msg error -71 req 02 val 2800 [ 357.379645][ T979] pwc: recv_control_msg error -71 req 04 val 1100 [ 357.398231][ T979] pwc: recv_control_msg error -71 req 04 val 1200 [ 357.431811][ T979] pwc: Registered as video103. [ 357.449143][ T979] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input39 [ 357.490923][ T979] usb 7-1: USB disconnect, device number 20 [ 357.985659][ T5947] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 358.158655][ T5947] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 358.192592][ T5947] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 358.216482][ T5947] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 358.229505][ T5947] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.260268][T15540] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 358.286368][ T5947] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 358.315895][T15560] [U] M٭Q& K4 [ 358.329207][T15560] [U] [)U}ǔJϬ}NSEF* NZF[F_H'W"X~;VA)^`1C':ZFOB *?۟CZS<8ZNѷјEY TT<$CRƖ/VG {Y~Y5\;ƃZDXYA"XIF{`A$í55?SAMOͻ*K [ 358.487392][ T5947] usb 7-1: USB disconnect, device number 21 [ 358.827036][ T5947] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 358.986294][ T5947] usb 7-1: Using ep0 maxpacket: 8 [ 358.993508][ T5947] usb 7-1: config 0 has no interfaces? [ 359.003045][ T5947] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 359.014157][ T5947] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.026562][ T5947] usb 7-1: config 0 descriptor?? [ 359.067829][T15583] binder: 15582:15583 ioctl c0306201 200000000040 returned -14 [ 359.238589][ T5947] usb 7-1: USB disconnect, device number 22 [ 360.503833][T15627] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (20) [ 360.806646][ T5947] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 360.978771][ T5947] usb 7-1: Using ep0 maxpacket: 16 [ 361.000434][ T5947] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 361.010368][ T5947] usb 7-1: config 0 interface 0 has no altsetting 0 [ 361.025861][ T5947] usb 7-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 361.034913][ T5947] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.058388][ T5947] usb 7-1: config 0 descriptor?? [ 361.087104][ C0] bridge0: port 1(ip6gretap0) entered forwarding state [ 361.094094][ C0] bridge0: topology change detected, propagating [ 361.485028][ T5947] cougar 0003:060B:500A.0024: unexpected long global item [ 361.493292][ T5947] cougar 0003:060B:500A.0024: parse failed [ 361.500706][ T5947] cougar 0003:060B:500A.0024: probe with driver cougar failed with error -22 [ 361.611939][T15666] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4341'. [ 361.684457][ T5895] usb 7-1: USB disconnect, device number 23 [ 362.404258][T15685] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 362.455705][T15685] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 362.805909][T15704] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4357'. [ 362.908203][ T30] audit: type=1326 audit(2000000238.409:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15707 comm="syz.4.4359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0710b8e929 code=0x7ffc0000 [ 362.919581][T15710] netlink: 512 bytes leftover after parsing attributes in process `syz.8.4360'. [ 362.969601][ T30] audit: type=1326 audit(2000000238.409:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15707 comm="syz.4.4359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0710b8e929 code=0x7ffc0000 [ 363.020246][ T30] audit: type=1326 audit(2000000238.449:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15707 comm="syz.4.4359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0710b8e929 code=0x7ffc0000 [ 363.072442][ T30] audit: type=1326 audit(2000000238.449:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15707 comm="syz.4.4359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0710b8e929 code=0x7ffc0000 [ 363.118722][ T30] audit: type=1326 audit(2000000238.449:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15707 comm="syz.4.4359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0710b8e929 code=0x7ffc0000 [ 363.187445][ T30] audit: type=1326 audit(2000000238.459:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15707 comm="syz.4.4359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f0710b8e929 code=0x7ffc0000 [ 363.260695][ T30] audit: type=1326 audit(2000000238.459:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15707 comm="syz.4.4359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0710b8e929 code=0x7ffc0000 [ 363.324826][ T30] audit: type=1326 audit(2000000238.459:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15707 comm="syz.4.4359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0710b8e929 code=0x7ffc0000 [ 363.327891][T15720] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 363.394849][ T30] audit: type=1326 audit(2000000238.459:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15707 comm="syz.4.4359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f0710b8e929 code=0x7ffc0000 [ 363.469592][ T30] audit: type=1326 audit(2000000238.459:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15707 comm="syz.4.4359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0710b8e929 code=0x7ffc0000 [ 363.888801][T15747] netlink: 56 bytes leftover after parsing attributes in process `syz.9.4375'. [ 363.906149][T15747] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check. [ 364.834716][T15784] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4388'. [ 364.866630][T15784] netlink: 'syz.7.4388': attribute type 18 has an invalid length. [ 364.885519][T15784] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4388'. [ 366.040885][ T5895] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 366.214326][ T5895] usb 5-1: config 0 has an invalid interface number: 101 but max is 0 [ 366.225005][ T5895] usb 5-1: config 0 has no interface number 0 [ 366.245759][ T5895] usb 5-1: config 0 interface 101 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 366.266655][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 366.284153][ T5895] usb 5-1: config 0 interface 101 altsetting 0 endpoint 0x9 has invalid maxpacket 2007, setting to 1024 [ 366.308262][ T5895] usb 5-1: New USB device found, idVendor=093a, idProduct=2623, bcdDevice=b2.14 [ 366.345827][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.365893][ T5895] usb 5-1: Product: syz [ 366.376431][ T5895] usb 5-1: Manufacturer: syz [ 366.400454][ T5895] usb 5-1: SerialNumber: syz [ 366.431976][ T5895] usb 5-1: config 0 descriptor?? [ 366.440512][ T5895] gspca_main: gspca_pac7302-2.14.0 probing 093a:2623 [ 366.625856][T15843] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4412'. [ 366.643838][T15843] smc: net device bond0 applied user defined pnetid SY [ 366.660607][T15843] smc: net device bond0 erased user defined pnetid SY [ 366.851990][T15849] mkiss: ax0: crc mode is auto. [ 367.264127][ T5895] input: gspca_pac7302 as /devices/platform/dummy_hcd.4/usb5/5-1/input/input40 [ 367.467916][ T979] usb 5-1: USB disconnect, device number 29 [ 367.698651][T15862] netlink: 44 bytes leftover after parsing attributes in process `syz.9.4421'. [ 367.961691][T15870] geneve2: entered allmulticast mode [ 367.993448][T15872] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.4426'. [ 368.563447][T15896] netlink: 428 bytes leftover after parsing attributes in process `syz.4.4437'. [ 368.572800][T15896] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4437'. [ 368.634949][T15899] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4438'. [ 369.099483][ T5823] Bluetooth: hci2: unexpected event for opcode 0x080f [ 369.339938][T15929] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4450'. [ 370.381265][T15956] syzkaller1: entered promiscuous mode [ 370.419400][T15956] syzkaller1: entered allmulticast mode [ 372.138220][ T5947] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 372.306783][ T5947] usb 10-1: Using ep0 maxpacket: 16 [ 372.315607][ T5947] usb 10-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 372.325300][ T5947] usb 10-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 372.334051][ T5947] usb 10-1: Product: syz [ 372.338411][ T5947] usb 10-1: Manufacturer: syz [ 372.343161][ T5947] usb 10-1: SerialNumber: syz [ 372.351352][ T5947] usb 10-1: config 0 descriptor?? [ 372.564406][ T5947] usb 10-1: USB disconnect, device number 4 [ 373.056301][ T5947] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 373.165786][ T5823] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 373.175004][ T5823] Bluetooth: hci2: Injecting HCI hardware error event [ 373.183842][ T5823] Bluetooth: hci2: hardware error 0x00 [ 373.226673][ T5947] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 373.255876][ T5947] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 373.285547][ T5947] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 373.294614][ T5947] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.313003][T16042] mac80211_hwsim hwsim24 wlan0: entered promiscuous mode [ 373.338366][T16042] mac80211_hwsim hwsim24 wlan0: left promiscuous mode [ 373.422418][T16045] mac80211_hwsim hwsim24 wlan0: entered promiscuous mode [ 373.434811][T16045] mac80211_hwsim hwsim24 wlan0: left promiscuous mode [ 373.544048][ T5947] usb 5-1: usb_control_msg returned -32 [ 373.579164][ T5947] usbtmc 5-1:16.0: can't read capabilities [ 374.327181][ T5895] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 374.488289][ T5895] usb 10-1: Using ep0 maxpacket: 32 [ 374.499422][ T5895] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 374.528731][ T5895] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 374.559156][ T5895] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 374.583095][ T5895] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 374.617494][ T5895] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 374.644539][ T5895] usb 10-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 374.654012][ T5895] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.690255][ T5895] usb 10-1: Product: syz [ 374.694632][ T5895] usb 10-1: Manufacturer: syz [ 374.699492][ T5895] usb 10-1: SerialNumber: syz [ 374.711226][ T5895] usb 10-1: config 0 descriptor?? [ 375.139271][ T5895] iforce 10-1:0.0: usb_submit_urb failed: -32 [ 375.148152][ T5895] input input41: Device does not respond to id packet M [ 375.160375][ T5895] iforce 10-1:0.0: usb_submit_urb failed: -32 [ 375.169518][ T5895] input input41: Device does not respond to id packet P [ 375.181892][ T5895] input input41: Device does not respond to id packet B [ 375.246060][ T5823] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 375.382502][ T5895] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 375.395669][ T5895] input input41: Device does not respond to id packet N [ 375.411534][ T5895] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 375.425909][ T5895] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 375.437716][ T5895] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 375.457154][ T5895] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 375.466909][ T5895] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input41 [ 375.494379][ T5895] usb 10-1: USB disconnect, device number 5 [ 375.872547][ T5895] usb 5-1: USB disconnect, device number 30 [ 376.447654][ T5895] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 376.686434][ T5895] usb 7-1: Using ep0 maxpacket: 16 [ 376.693760][ T5895] usb 7-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 376.707962][ T5895] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.723173][ T5895] usb 7-1: config 0 descriptor?? [ 376.738014][ T5895] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 376.847853][ T5941] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 376.890412][T16140] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 377.026766][ T5941] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 377.038838][ T5941] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 377.052234][ T5941] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 377.064206][ T5941] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.285829][ T5941] usb 10-1: usb_control_msg returned -32 [ 377.291552][ T5941] usbtmc 10-1:16.0: can't read capabilities [ 377.752177][ T5895] gspca_sonixj: reg_w1 err -71 [ 377.775631][ T5895] sonixj 7-1:0.0: probe with driver sonixj failed with error -71 [ 377.784892][ T5895] usb 7-1: USB disconnect, device number 24 [ 378.374874][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.381368][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.525047][T16160] netlink: 'syz.6.4548': attribute type 9 has an invalid length. [ 378.542442][T16160] netlink: 'syz.6.4548': attribute type 9 has an invalid length. [ 379.622425][ T10] usb 10-1: USB disconnect, device number 6 [ 379.811042][T16172] netlink: 'syz.8.4552': attribute type 1 has an invalid length. [ 379.825519][T16172] netlink: 'syz.8.4552': attribute type 2 has an invalid length. [ 380.323289][T16198] dummy0: entered promiscuous mode [ 380.354504][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 380.354519][ T30] audit: type=1326 audit(2000000255.859:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16194 comm="syz.7.4563" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4ac018e929 code=0x0 [ 380.356325][T16198] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 380.421960][T16198] hsr1: entered allmulticast mode [ 380.434669][T16198] dummy0: entered allmulticast mode [ 380.441820][T16198] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 381.621417][ T30] audit: type=1326 audit(2000000257.129:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16256 comm="syz.6.4591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70bd8e929 code=0x7ffc0000 [ 381.643121][ C1] vkms_vblank_simulate: vblank timer overrun [ 381.665793][ T30] audit: type=1326 audit(2000000257.169:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16256 comm="syz.6.4591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70bd8e929 code=0x7ffc0000 [ 381.707831][ T30] audit: type=1326 audit(2000000257.169:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16256 comm="syz.6.4591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fc70bd8e929 code=0x7ffc0000 [ 381.729392][ C1] vkms_vblank_simulate: vblank timer overrun [ 381.739484][ T30] audit: type=1326 audit(2000000257.169:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16256 comm="syz.6.4591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70bd8e929 code=0x7ffc0000 [ 381.761045][ C1] vkms_vblank_simulate: vblank timer overrun [ 381.769536][ T30] audit: type=1326 audit(2000000257.169:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16256 comm="syz.6.4591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fc70bd8e929 code=0x7ffc0000 [ 381.778392][ T5895] kernel read not supported for file /adsp1 (pid: 5895 comm: kworker/0:4) [ 381.793125][ T30] audit: type=1326 audit(2000000257.169:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16256 comm="syz.6.4591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70bd8e929 code=0x7ffc0000 [ 381.823092][ T30] audit: type=1326 audit(2000000257.169:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16256 comm="syz.6.4591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7fc70bd8e929 code=0x7ffc0000 [ 381.844652][ C1] vkms_vblank_simulate: vblank timer overrun [ 381.855860][ T30] audit: type=1326 audit(2000000257.169:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16256 comm="syz.6.4591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70bd8e929 code=0x7ffc0000 [ 381.877426][ C1] vkms_vblank_simulate: vblank timer overrun [ 381.894021][ T30] audit: type=1326 audit(2000000257.259:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16258 comm="syz.9.4592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22ef58e929 code=0x7ffc0000 [ 382.383418][T16280] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4602'. [ 382.428196][T16280] ipvlan2: entered promiscuous mode [ 382.818364][ T5895] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 383.003204][ T5895] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 383.015279][ T5895] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 383.032380][ T5895] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 383.051622][ T5895] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 383.060934][ T5895] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.074767][ T5895] usb 10-1: config 0 descriptor?? [ 383.493859][ T5895] plantronics 0003:047F:FFFF.0025: reserved main item tag 0xe [ 383.506702][ T5895] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 383.537186][ T5895] plantronics 0003:047F:FFFF.0025: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 383.778792][ T5941] usb 10-1: USB disconnect, device number 7 [ 384.476385][T16364] Bluetooth: hci5: Frame reassembly failed (-84) [ 384.483254][T11500] Bluetooth: hci5: Frame reassembly failed (-84) [ 385.780224][T16392] netlink: 'syz.6.4649': attribute type 1 has an invalid length. [ 385.813327][T16392] netlink: 168864 bytes leftover after parsing attributes in process `syz.6.4649'. [ 386.528757][ T5828] Bluetooth: hci5: command 0xfc11 tx timeout [ 386.537195][ T5823] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 386.625983][ T24] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 386.791907][ T24] usb 5-1: config 0 has no interfaces? [ 386.801448][ T24] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 386.825590][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.856207][ T24] usb 5-1: config 0 descriptor?? [ 387.078499][ T5941] usb 5-1: USB disconnect, device number 31 [ 387.342818][T16457] sctp: [Deprecated]: syz.8.4678 (pid 16457) Use of struct sctp_assoc_value in delayed_ack socket option. [ 387.342818][T16457] Use struct sctp_sack_info instead [ 387.889293][ T5895] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 388.015798][ T5941] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 388.055675][ T5895] usb 5-1: Using ep0 maxpacket: 16 [ 388.064737][ T5895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 388.076177][ T5895] usb 5-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 388.085321][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.100692][ T5895] usb 5-1: config 0 descriptor?? [ 388.167711][ T5941] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 388.179154][ T5941] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 388.203479][ T5941] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 388.225980][ T5941] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 388.240533][ T5941] usb 10-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 388.251313][ T5941] usb 10-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 388.259544][ T5941] usb 10-1: Manufacturer: syz [ 388.267010][ T5941] usb 10-1: config 0 descriptor?? [ 388.273263][T16474] tun0: tun_chr_ioctl cmd 1074025675 [ 388.280272][T16474] tun0: persist enabled [ 388.285319][T16474] tun0: tun_chr_ioctl cmd 1074025675 [ 388.295044][T16474] tun0: persist enabled [ 388.533981][ T5895] input: HID 041e:3100 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:041E:3100.0026/input/input42 [ 388.614933][ T5895] creative-sb0540 0003:041E:3100.0026: input,hidraw0: USB HID v0.00 Device [HID 041e:3100] on usb-dummy_hcd.4-1/input0 [ 388.683011][ T5941] appleir 0003:05AC:8243.0027: unknown main item tag 0x0 [ 388.711546][ T5941] appleir 0003:05AC:8243.0027: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.9-1/input0 [ 388.717673][T16485] netlink: 212376 bytes leftover after parsing attributes in process `syz.8.4692'. [ 388.750949][ T5941] usb 5-1: USB disconnect, device number 32 [ 388.958983][ T5895] usb 10-1: USB disconnect, device number 8 [ 390.233298][T16533] netlink: 'syz.4.4713': attribute type 4 has an invalid length. [ 392.285672][ T24] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 392.376304][ T5941] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 392.436110][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 392.447830][ T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 392.460837][ T24] usb 7-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 392.472140][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 392.481267][ T24] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 392.490945][ T24] usb 7-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 392.500121][ T24] usb 7-1: Product: syz [ 392.504522][ T24] usb 7-1: Manufacturer: syz [ 392.509639][ T24] usb 7-1: SerialNumber: syz [ 392.518174][ T24] usb 7-1: config 0 descriptor?? [ 392.545860][ T5941] usb 5-1: Using ep0 maxpacket: 16 [ 392.556085][ T5941] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 392.565789][ T5941] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 392.574088][ T5941] usb 5-1: Product: syz [ 392.579162][ T5941] usb 5-1: Manufacturer: syz [ 392.583916][ T5941] usb 5-1: SerialNumber: syz [ 392.593403][ T5941] usb 5-1: config 0 descriptor?? [ 392.837113][ T5941] usb 5-1: USB disconnect, device number 33 [ 392.944794][ T24] gs_usb 7-1:0.0: Configuring for 1 interfaces [ 393.356704][ T24] gs_usb 7-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 393.387952][ T24] gs_usb 7-1:0.0: probe with driver gs_usb failed with error -22 [ 393.560833][ T24] usb 7-1: USB disconnect, device number 25 [ 393.676940][T16631] program syz.8.4758 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 395.086014][ T5941] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 395.257437][ T5941] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 395.257470][ T5941] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.260009][ T5941] usb 5-1: config 0 descriptor?? [ 395.266119][ T5941] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 395.499609][T16699] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 396.081410][ T5941] gspca_stv06xx: I2C: Read error writing address: -71 [ 396.100353][ T5941] usb 5-1: USB disconnect, device number 34 [ 396.577832][T16752] netlink: 'syz.8.4813': attribute type 1 has an invalid length. [ 397.037680][ T5895] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 397.106077][ T5941] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 397.208463][ T5895] usb 5-1: Using ep0 maxpacket: 16 [ 397.215294][ T5895] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 397.228637][ T5895] usb 5-1: config 0 has no interface number 0 [ 397.234767][ T5895] usb 5-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 397.248271][ T5895] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 397.285687][ T5895] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 397.286335][ T5941] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 397.300293][ T5895] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 397.317472][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 397.325892][ T5895] usb 5-1: Product: syz [ 397.330221][ T5895] usb 5-1: SerialNumber: syz [ 397.343707][ T5895] usb 5-1: config 0 descriptor?? [ 397.346008][ T5941] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 397.351920][T16763] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 397.374346][ T5941] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 397.384381][ T5941] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 397.404604][ T5941] usb 7-1: SerialNumber: syz [ 397.408299][ T5895] cm109 5-1:0.8: invalid payload size 1024, expected 4 [ 397.424026][ T5895] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input43 [ 397.640843][ C0] cm109 5-1:0.8: cm109_urb_irq_callback: urb status -71 [ 397.646238][ T5941] usb 7-1: 0:2 : does not exist [ 397.681825][ T5941] usb 7-1: USB disconnect, device number 26 [ 397.851949][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 397.859200][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 397.866370][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 397.873700][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 397.880868][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 397.895778][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 397.903537][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 397.910780][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 397.918973][ T5895] usb 5-1: USB disconnect, device number 35 [ 397.919085][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 397.931951][ C0] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 397.955754][ T5895] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 398.000574][T16800] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4835'. [ 398.010215][T16800] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4835'. [ 398.020531][T16800] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4835'. [ 398.074794][T16804] input: syz1 as /devices/virtual/input/input44 [ 398.234794][T16810] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 398.364177][T16816] input: syz1 as /devices/virtual/input/input45 [ 398.523822][T16824] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4847'. [ 398.847242][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 399.007092][T16854] program syz.7.4861 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 399.463944][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 399.463962][ T30] audit: type=1326 audit(2000000275.972:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16875 comm="syz.7.4872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ac018e929 code=0x7ffc0000 [ 399.575887][ T30] audit: type=1326 audit(2000000275.972:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16875 comm="syz.7.4872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4ac012ab19 code=0x7ffc0000 [ 399.658464][ T30] audit: type=1326 audit(2000000275.972:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16875 comm="syz.7.4872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ac018e929 code=0x7ffc0000 [ 399.690336][ T30] audit: type=1326 audit(2000000276.022:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16875 comm="syz.7.4872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4ac012ab19 code=0x7ffc0000 [ 399.718694][ T30] audit: type=1326 audit(2000000276.022:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16875 comm="syz.7.4872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ac018e929 code=0x7ffc0000 [ 399.742502][T16882] 9pnet: p9_errstr2errno: server reported unknown error [ 399.793233][ T30] audit: type=1326 audit(2000000276.022:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16875 comm="syz.7.4872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4ac012ab19 code=0x7ffc0000 [ 399.820604][ T30] audit: type=1326 audit(2000000276.022:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16875 comm="syz.7.4872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4ac012ab19 code=0x7ffc0000 [ 399.873292][ T30] audit: type=1326 audit(2000000276.022:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16875 comm="syz.7.4872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ac018e929 code=0x7ffc0000 [ 399.895338][ T5941] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 399.951303][ T30] audit: type=1326 audit(2000000276.022:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16875 comm="syz.7.4872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ac018e929 code=0x7ffc0000 [ 399.975311][ T30] audit: type=1326 audit(2000000276.022:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16875 comm="syz.7.4872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4ac012ab19 code=0x7ffc0000 [ 400.088043][ T5941] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 400.113262][ T5941] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 400.139611][ T5941] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 400.158318][ T5941] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 400.167630][ T5941] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.179698][ T5941] usb 7-1: config 0 descriptor?? [ 400.627688][ T5941] plantronics 0003:047F:FFFF.0028: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 400.806811][ T5895] usb 7-1: USB disconnect, device number 27 [ 400.985946][ T5941] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 401.147374][ T5941] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 401.165131][ T5941] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 401.194757][ T5941] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.208675][ T5941] usb 10-1: config 0 descriptor?? [ 401.218705][ T5941] pwc: Askey VC010 type 2 USB webcam detected. [ 401.386333][T16951] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4907'. [ 401.399719][T16951] netlink: 92 bytes leftover after parsing attributes in process `syz.6.4907'. [ 401.631997][ T5941] pwc: recv_control_msg error -32 req 02 val 2b00 [ 401.652285][ T5941] pwc: recv_control_msg error -32 req 02 val 2700 [ 401.875877][ T5941] pwc: recv_control_msg error -71 req 04 val 1000 [ 401.887505][ T5941] pwc: recv_control_msg error -71 req 04 val 1300 [ 401.907507][ T5941] pwc: recv_control_msg error -71 req 04 val 1400 [ 401.925284][ T5941] pwc: recv_control_msg error -71 req 02 val 2000 [ 401.933935][ T5941] pwc: recv_control_msg error -71 req 02 val 2100 [ 401.944992][ T5941] pwc: recv_control_msg error -71 req 04 val 1500 [ 401.964671][ T5941] pwc: recv_control_msg error -71 req 02 val 2500 [ 401.974085][ T5941] pwc: recv_control_msg error -71 req 02 val 2400 [ 401.986132][ T5941] pwc: recv_control_msg error -71 req 02 val 2600 [ 401.993048][ T5941] pwc: recv_control_msg error -71 req 02 val 2900 [ 402.004013][ T5941] pwc: recv_control_msg error -71 req 02 val 2800 [ 402.015380][ T5941] pwc: recv_control_msg error -71 req 04 val 1100 [ 402.029832][ T5941] pwc: recv_control_msg error -71 req 04 val 1200 [ 402.046368][ T5941] pwc: Registered as video103. [ 402.065247][ T5941] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input47 [ 402.088355][ T5941] usb 10-1: USB disconnect, device number 9 [ 402.165128][T16969] sock: sock_set_timeout: `syz.4.4915' (pid 16969) tries to set negative timeout [ 402.496693][T16978] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 402.496724][T16977] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 402.942618][T16989] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4080 [ 402.964458][T16990] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 403.542850][T17004] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4931'. [ 403.627755][T17006] netlink: 'syz.7.4930': attribute type 1 has an invalid length. [ 403.635984][T17006] netlink: 224 bytes leftover after parsing attributes in process `syz.7.4930'. [ 403.774590][T17015] syzkaller1: entered promiscuous mode [ 403.780950][T17015] syzkaller1: entered allmulticast mode [ 405.318950][ T5941] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 405.491622][ T5941] usb 10-1: Using ep0 maxpacket: 8 [ 405.496040][T17060] vxcan0: tx address claim with different name [ 405.512331][ T5941] usb 10-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice= 0.6d [ 405.529704][ T5941] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.538778][ T5941] usb 10-1: Product: syz [ 405.557165][ T5941] usb 10-1: Manufacturer: syz [ 405.561908][ T5941] usb 10-1: SerialNumber: syz [ 405.570141][ T5941] usb 10-1: config 0 descriptor?? [ 405.585331][ T5941] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 405.765621][ T979] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 405.935608][ T979] usb 7-1: Using ep0 maxpacket: 16 [ 405.942985][ T979] usb 7-1: config 0 has no interfaces? [ 405.951132][ T979] usb 7-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 405.960581][ T979] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.968883][ T979] usb 7-1: Product: syz [ 405.973373][ T979] usb 7-1: Manufacturer: syz [ 405.978817][ T979] usb 7-1: SerialNumber: syz [ 405.986436][ T979] usb 7-1: config 0 descriptor?? [ 406.222821][ T5947] usb 7-1: USB disconnect, device number 28 [ 406.408251][ T5828] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 406.420417][ T5828] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 406.429082][ T5828] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 406.438069][ T5828] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 406.447843][ T5828] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 406.603416][ T5941] gspca_sonixj: reg_w1 err -71 [ 406.640922][T17072] chnl_net:caif_netlink_parms(): no params data found [ 406.645803][ T5941] sonixj 10-1:0.0: probe with driver sonixj failed with error -71 [ 406.663158][ T5941] usb 10-1: USB disconnect, device number 10 [ 406.740747][T17072] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.751460][T17072] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.763168][T17072] bridge_slave_0: entered allmulticast mode [ 406.772737][T17072] bridge_slave_0: entered promiscuous mode [ 406.787691][T17072] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.795029][T17072] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.802494][T17072] bridge_slave_1: entered allmulticast mode [ 406.810362][T17072] bridge_slave_1: entered promiscuous mode [ 406.845356][T17072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 406.861743][T17072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.902677][T17072] team0: Port device team_slave_0 added [ 406.914959][T17072] team0: Port device team_slave_1 added [ 406.950633][T17072] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 406.957759][T17072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 406.984296][T17072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 406.997371][T17072] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 407.004432][T17072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.030769][T17072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 407.080795][T17072] hsr_slave_0: entered promiscuous mode [ 407.087925][T17072] hsr_slave_1: entered promiscuous mode [ 407.093999][T17072] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 407.101901][T17072] Cannot create hsr debugfs directory [ 407.415978][ T5947] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 407.545431][T17072] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 407.555358][T17072] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 407.565269][T17072] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 407.576324][ T5947] usb 10-1: Using ep0 maxpacket: 32 [ 407.583887][ T5947] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 407.599057][T17072] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 407.606044][ T5947] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 407.616595][ T5947] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 407.629413][ T5947] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.641597][ T5947] usb 10-1: config 0 descriptor?? [ 407.761483][T17072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 407.799733][T17072] 8021q: adding VLAN 0 to HW filter on device team0 [ 407.830208][T11529] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.830324][T11529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.832447][T11529] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.832559][T11529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 408.091765][ T5947] savu 0003:1E7D:2D5A.0029: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.9-1/input0 [ 408.142053][T17072] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 408.205178][T17072] veth0_vlan: entered promiscuous mode [ 408.219381][T17072] veth1_vlan: entered promiscuous mode [ 408.256318][T17072] veth0_macvtap: entered promiscuous mode [ 408.269100][T17072] veth1_macvtap: entered promiscuous mode [ 408.291201][T17072] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 408.305832][T17072] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 408.322863][T17072] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.335264][T17072] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.347709][T17072] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.348102][ T5947] usb 10-1: USB disconnect, device number 11 [ 408.359748][T17072] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.476719][T11529] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.484574][T11529] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.531147][T11512] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.543305][ T5823] Bluetooth: hci0: command tx timeout [ 408.550799][T11512] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.761473][T17120] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4977'. [ 408.805687][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 408.805705][ T30] audit: type=1400 audit(2000000285.312:787): lsm=SMACK fn=smack_file_ioctl action=denied subject="w" object="_" requested=w pid=17121 comm="syz.7.4978" path="/dev/vhost-net" dev="devtmpfs" ino=1274 [ 409.105983][ T5910] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 409.151084][ T5910] dvb_usb_az6027 9-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 409.205209][ T5910] usb 9-1: USB disconnect, device number 22 [ 409.495302][T17151] syzkaller1: entered promiscuous mode [ 409.500947][T17151] syzkaller1: entered allmulticast mode [ 409.525648][ T5910] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 409.678919][ T5910] usb 9-1: Using ep0 maxpacket: 16 [ 409.692171][ T5910] usb 9-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 409.704326][ T5910] usb 9-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 409.721053][ T5910] usb 9-1: Product: syz [ 409.725413][ T5910] usb 9-1: Manufacturer: syz [ 409.750022][ T5910] usb 9-1: SerialNumber: syz [ 409.769657][ T5910] usb 9-1: config 0 descriptor?? [ 410.030027][T17166] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4995'. [ 410.041847][ T5910] usb 9-1: USB disconnect, device number 23 [ 410.606232][ T5828] Bluetooth: hci0: command tx timeout [ 410.957683][ T30] audit: type=1326 audit(2000000287.462:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17167 comm="syz.6.4996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70bd8e929 code=0x7fc00000 [ 411.091219][ T30] audit: type=1326 audit(2000000287.602:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17217 comm="syz.6.5018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70bd8e929 code=0x7ffc0000 [ 411.149496][ T30] audit: type=1326 audit(2000000287.602:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17217 comm="syz.6.5018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70bd8e929 code=0x7ffc0000 [ 411.188152][ T30] audit: type=1326 audit(2000000287.602:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17217 comm="syz.6.5018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7fc70bd8e929 code=0x7ffc0000 [ 411.209758][ C0] vkms_vblank_simulate: vblank timer overrun [ 411.259752][ T30] audit: type=1326 audit(2000000287.602:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17217 comm="syz.6.5018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70bd8e929 code=0x7ffc0000 [ 411.305166][ T30] audit: type=1326 audit(2000000287.632:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17217 comm="syz.6.5018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70bd8e929 code=0x7ffc0000 [ 411.326749][ C0] vkms_vblank_simulate: vblank timer overrun [ 411.911242][T17236] 9pnet: p9_errstr2errno: server reported unknown error @00000000000000000004 [ 412.113523][T17241] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5030'. [ 412.270162][T17250] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 412.608202][ T5828] Bluetooth: hci5: command 0x1003 tx timeout [ 412.615134][ T5823] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 412.686140][ T5823] Bluetooth: hci0: command tx timeout [ 412.984960][T17286] syzkaller1: entered promiscuous mode [ 412.990595][T17286] syzkaller1: entered allmulticast mode [ 413.569841][ T979] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 413.625579][ T5910] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 413.735645][ T979] usb 10-1: Using ep0 maxpacket: 8 [ 413.743127][ T979] usb 10-1: unable to get BOS descriptor or descriptor too short [ 413.752332][ T979] usb 10-1: config 4 interface 0 has no altsetting 0 [ 413.769552][ T979] usb 10-1: string descriptor 0 read error: -22 [ 413.778641][ T5910] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 413.794091][ T979] usb 10-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 413.803587][ T5910] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 413.813975][ T979] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.822221][ T5910] usb 9-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 413.832674][ T5910] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.845723][ T979] usb 10-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 413.856077][ T5910] usb 9-1: config 0 descriptor?? [ 413.863942][ T979] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 413.877875][ T979] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 413.886181][ T979] usb 10-1: media controller created [ 413.913232][ T979] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 414.397762][T17323] program syz.2.5066 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 414.495274][ T5910] hid-led 0003:27B8:01ED.002A: probe with driver hid-led failed with error -71 [ 414.555811][ T5910] usb 9-1: USB disconnect, device number 24 [ 414.765696][ T5823] Bluetooth: hci0: command tx timeout [ 415.018308][ T979] zl10353_read_register: readreg error (reg=127, ret==0) [ 415.026468][T17298] usb 10-1: dvb_usb_au6610: wlen=0, aborting [ 415.076562][ T979] usb 10-1: USB disconnect, device number 12 [ 415.592740][T17351] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.603555][T17351] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.654220][T17352] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.661437][T17352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 415.672803][T17352] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.680104][T17352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 416.438736][ T5947] kernel write not supported for file /1781/net/ip_vs_stats (pid: 5947 comm: kworker/1:6) [ 416.766387][ T5823] Bluetooth: hci1: command 0x0c1a tx timeout [ 416.775553][T17327] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 417.603904][T17391] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 417.621953][T17327] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 417.731674][T17327] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 417.742429][T17327] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 417.749458][T17327] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 417.757890][T17327] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 418.045009][T17402] netlink: 'syz.2.5098': attribute type 29 has an invalid length. [ 418.855637][ T5823] Bluetooth: hci1: command 0x0c1a tx timeout [ 418.987472][T17437] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5112'. [ 419.035791][ T5910] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 419.144835][T17447] netlink: 'syz.2.5118': attribute type 2 has an invalid length. [ 419.197245][ T5910] usb 7-1: Using ep0 maxpacket: 8 [ 419.216027][ T5910] usb 7-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 419.226475][ T5910] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.254097][ T5910] usb 7-1: Product: syz [ 419.258832][ T5910] usb 7-1: Manufacturer: syz [ 419.263522][ T5910] usb 7-1: SerialNumber: syz [ 419.275206][ T5910] usb 7-1: config 0 descriptor?? [ 419.295992][ T5910] gspca_main: se401-2.14.0 probing 047d:5003 [ 419.666467][T17458] syz.9.5123 (17458) used greatest stack depth: 17944 bytes left [ 419.806834][ T5823] Bluetooth: hci0: command 0x0c1a tx timeout [ 419.925292][ T5910] input: se401 as /devices/platform/dummy_hcd.6/usb7/7-1/input/input48 [ 420.132111][ T5910] usb 7-1: USB disconnect, device number 29 [ 420.400783][ T30] audit: type=1326 audit(2000000296.892:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17483 comm="syz.2.5134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6cfb12ab19 code=0x7ffc0000 [ 420.426436][ T30] audit: type=1326 audit(2000000296.892:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17483 comm="syz.2.5134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6cfb12ab19 code=0x7ffc0000 [ 420.455619][ T30] audit: type=1326 audit(2000000296.902:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17483 comm="syz.2.5134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cfb18e929 code=0x7ffc0000 [ 420.480002][ T30] audit: type=1326 audit(2000000296.902:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17483 comm="syz.2.5134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cfb18e929 code=0x7ffc0000 [ 420.511545][ T30] audit: type=1326 audit(2000000296.902:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17483 comm="syz.2.5134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6cfb12ab19 code=0x7ffc0000 [ 420.541597][ T30] audit: type=1326 audit(2000000296.902:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17483 comm="syz.2.5134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6cfb12ab19 code=0x7ffc0000 [ 420.563701][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 420.572967][ T30] audit: type=1326 audit(2000000296.902:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17483 comm="syz.2.5134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cfb18e929 code=0x7ffc0000 [ 420.598587][ T30] audit: type=1326 audit(2000000296.902:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17483 comm="syz.2.5134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6cfb12ab19 code=0x7ffc0000 [ 420.625816][ T5947] usb 10-1: new full-speed USB device number 13 using dummy_hcd [ 420.635129][ T30] audit: type=1326 audit(2000000296.902:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17483 comm="syz.2.5134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cfb18e929 code=0x7ffc0000 [ 420.659206][ T30] audit: type=1326 audit(2000000296.902:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17483 comm="syz.2.5134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6cfb12ab19 code=0x7ffc0000 [ 420.778400][ T5947] usb 10-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 420.791704][ T5947] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.812633][ T5947] usb 10-1: config 0 descriptor?? [ 420.829736][ T5947] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 420.925953][ T5828] Bluetooth: hci1: command 0x0c1a tx timeout [ 421.055305][ T5947] gp8psk: usb in 128 operation failed. [ 421.283623][ T5947] gp8psk: usb in 146 operation failed. [ 421.298376][ T5947] gp8psk: failed to get FW version [ 421.306885][ T5947] gp8psk: FPGA Version = 225 [ 421.426374][ T5910] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 421.507661][ T5947] gp8psk: usb in 138 operation failed. [ 421.513217][ T5947] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 421.524811][ T5947] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 421.536571][ T5947] usb 10-1: USB disconnect, device number 13 [ 421.586539][ T5910] usb 3-1: Using ep0 maxpacket: 32 [ 421.593498][ T5910] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 421.602534][ T5910] usb 3-1: config 0 has no interface number 0 [ 421.619887][ T5910] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 421.632200][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.642319][ T5910] usb 3-1: Product: syz [ 421.650470][ T5910] usb 3-1: Manufacturer: syz [ 421.655246][ T5910] usb 3-1: SerialNumber: syz [ 421.668798][ T5910] usb 3-1: config 0 descriptor?? [ 421.682366][ T5910] smsc95xx v2.0.0 [ 421.735802][ T9] usb 9-1: new full-speed USB device number 25 using dummy_hcd [ 421.848621][T17521] openvswitch: netlink: IPv4 tun info is not correct [ 421.888966][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 421.900532][ T9] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 421.913200][ T9] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 421.932606][ T9] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 421.942243][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.950829][ T9] usb 9-1: Product: syz [ 421.955034][ T9] usb 9-1: Manufacturer: syz [ 421.960494][ T9] usb 9-1: SerialNumber: syz [ 422.097636][ T5910] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 422.135486][ T5910] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 422.181740][ T9] usb 9-1: 0:2 : does not exist [ 422.204253][ T9] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 422.282954][ T9] usb 9-1: USB disconnect, device number 25 [ 422.577277][ T5910] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 422.594682][ T5910] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 422.614710][ T5910] usb 3-1: USB disconnect, device number 2 [ 423.564500][T17604] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5188'. [ 423.956203][ T5947] psmouse serio3: Failed to reset mouse on : -5 [ 423.969360][ T5823] Bluetooth: hci0: command 0x0c1a tx timeout [ 424.064573][ T1086] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.177244][ T1086] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.310366][ T1086] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.461541][ T1086] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.702457][ T5828] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 424.712826][ T5828] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 424.739055][ T5828] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 424.762712][ T5828] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 424.771817][ T5828] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 424.783147][ T1086] bridge_slave_1: left allmulticast mode [ 424.817727][ T1086] bridge_slave_1: left promiscuous mode [ 424.823535][ T1086] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.834494][ T1086] bridge_slave_0: left allmulticast mode [ 424.843534][ T1086] bridge_slave_0: left promiscuous mode [ 424.850032][ T1086] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.191521][ T1086] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 425.206017][ T1086] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 425.217246][ T1086] bond0 (unregistering): Released all slaves [ 425.461766][T17646] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5208'. [ 425.573250][ T1086] hsr_slave_0: left promiscuous mode [ 425.580105][ T1086] hsr_slave_1: left promiscuous mode [ 425.586267][ T1086] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 425.593757][ T1086] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 425.604230][ T1086] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 425.611737][ T1086] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 425.635151][ T1086] veth1_macvtap: left promiscuous mode [ 425.643108][ T1086] veth0_macvtap: left promiscuous mode [ 425.649057][ T1086] veth1_vlan: left promiscuous mode [ 425.654433][ T1086] veth0_vlan: left promiscuous mode [ 425.798553][ T5910] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 425.965255][ T5910] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 425.985420][ T5910] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 426.003211][ T5910] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 426.023330][ T5910] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 426.045766][ T5823] Bluetooth: hci0: command 0x0c1a tx timeout [ 426.052434][ T5910] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 426.090969][ T5910] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 426.100177][ T5910] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 426.118803][ T5910] usb 7-1: Product: syz [ 426.123001][ T5910] usb 7-1: Manufacturer: syz [ 426.146791][ T5910] cdc_wdm 7-1:1.0: skipping garbage [ 426.152000][ T5910] cdc_wdm 7-1:1.0: skipping garbage [ 426.168146][ T5910] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 426.174419][ T5910] cdc_wdm 7-1:1.0: Unknown control protocol [ 426.214814][ T1086] team0 (unregistering): Port device team_slave_1 removed [ 426.253250][ T1086] team0 (unregistering): Port device team_slave_0 removed [ 426.391046][ T24] usb 7-1: USB disconnect, device number 30 [ 426.716649][T17634] chnl_net:caif_netlink_parms(): no params data found [ 426.813461][T17634] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.821113][T17634] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.828476][T17634] bridge_slave_0: entered allmulticast mode [ 426.836290][T17634] bridge_slave_0: entered promiscuous mode [ 426.844646][T17634] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.852122][T17634] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.855943][ T5823] Bluetooth: hci1: command tx timeout [ 426.860515][T17634] bridge_slave_1: entered allmulticast mode [ 426.873126][T17634] bridge_slave_1: entered promiscuous mode [ 426.928237][T17634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 426.959609][T17634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 427.036811][T17634] team0: Port device team_slave_0 added [ 427.047961][T17634] team0: Port device team_slave_1 added [ 427.126226][T17634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 427.148275][T17634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 427.190971][T17634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 427.213318][T17634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 427.222676][T17634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 427.252939][T17634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 427.338746][T17634] hsr_slave_0: entered promiscuous mode [ 427.349159][T17634] hsr_slave_1: entered promiscuous mode [ 427.366722][T17634] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 427.374376][T17634] Cannot create hsr debugfs directory [ 427.755820][ T5947] misc userio: Buffer overflowed, userio client isn't keeping up [ 427.942274][T17634] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 427.971317][T17634] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 427.989382][T17634] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 428.004037][T17634] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 428.183641][T17634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 428.220160][T17634] 8021q: adding VLAN 0 to HW filter on device team0 [ 428.239254][T11506] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.246457][T11506] bridge0: port 1(bridge_slave_0) entered forwarding state [ 428.289298][T11506] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.296496][T11506] bridge0: port 2(bridge_slave_1) entered forwarding state [ 428.386326][ T5910] usb 7-1: new full-speed USB device number 31 using dummy_hcd [ 428.545275][ T5910] usb 7-1: config index 0 descriptor too short (expected 69, got 36) [ 428.565601][ T5910] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 428.600352][ T5910] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF6, changing to 0x86 [ 428.632737][ T5910] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 428.652947][T17634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 428.660419][ T5910] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 428.687840][ T5910] usb 7-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89 [ 428.705696][ T5910] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.713778][ T5910] usb 7-1: Product: syz [ 428.727395][ T5910] usb 7-1: Manufacturer: syz [ 428.732305][ T5910] usb 7-1: SerialNumber: syz [ 428.753908][ T5910] usb 7-1: config 0 descriptor?? [ 428.762331][ T5910] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 428.837966][ T5947] input: PS/2 Generic Mouse as /devices/serio3/input/input49 [ 428.925929][ T5828] Bluetooth: hci1: command tx timeout [ 429.057684][T17634] veth0_vlan: entered promiscuous mode [ 429.069638][T17634] veth1_vlan: entered promiscuous mode [ 429.075542][ T5947] psmouse serio3: Failed to enable mouse on [ 429.163260][T17634] veth0_macvtap: entered promiscuous mode [ 429.192029][T17634] veth1_macvtap: entered promiscuous mode [ 429.225360][T17634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 429.247491][T17634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 429.267202][T17634] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.280454][T17634] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.289702][T17634] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.303560][T17634] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.472305][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.480927][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.534127][T11541] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.551899][T11541] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.573304][ T5910] input: gspca_pac7302 as /devices/platform/dummy_hcd.6/usb7/7-1/input/input50 [ 429.790521][ T5910] usb 7-1: USB disconnect, device number 31 [ 430.585153][T17738] IPVS: ovf: UDP 224.0.0.2:20004 - no destination available [ 430.599201][ T43] IPVS: starting estimator thread 0... [ 430.695829][T17740] IPVS: using max 28 ests per chain, 67200 per kthread [ 431.006021][ T5828] Bluetooth: hci1: command 0x040f tx timeout [ 431.246509][T17768] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5247'. [ 431.960940][T11527] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.134136][T11527] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.340742][T11527] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.503778][T11527] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.721598][ T5828] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 432.731545][ T5828] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 432.741673][T11527] bridge_slave_1: left allmulticast mode [ 432.748808][ T5828] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 432.764654][ T5828] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 432.773590][ T5828] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 432.798737][T11527] bridge_slave_1: left promiscuous mode [ 432.804477][T11527] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.856047][T11527] bridge_slave_0: left allmulticast mode [ 432.861733][T11527] bridge_slave_0: left promiscuous mode [ 432.881672][T11527] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.298473][T11527] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 433.312732][T11527] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 433.327676][T11527] bond0 (unregistering): Released all slaves [ 433.539287][T17830] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.5274'. [ 433.736907][T11527] hsr_slave_0: left promiscuous mode [ 433.758214][T11527] hsr_slave_1: left promiscuous mode [ 433.771018][T11527] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 433.779169][T11527] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 433.796558][ T43] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 433.811611][T11527] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 433.819607][T11527] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 433.877543][T11527] veth1_macvtap: left promiscuous mode [ 433.883139][T11527] veth0_macvtap: left promiscuous mode [ 433.894370][T11527] veth1_vlan: left promiscuous mode [ 433.901163][T11527] veth0_vlan: left promiscuous mode [ 433.946085][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 433.964684][ T43] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 433.979224][ T43] usb 3-1: config 0 has no interface number 0 [ 433.985355][ T43] usb 3-1: config 0 interface 184 has no altsetting 0 [ 434.003784][ T43] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 434.019356][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.046047][ T43] usb 3-1: Product: syz [ 434.050524][ T43] usb 3-1: Manufacturer: syz [ 434.056348][ T43] usb 3-1: SerialNumber: syz [ 434.077311][ T43] usb 3-1: config 0 descriptor?? [ 434.085322][ T43] smsc75xx v1.0.0 [ 434.518818][T17857] netlink: 'syz.8.5286': attribute type 64 has an invalid length. [ 434.540647][T17857] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5286'. [ 434.576342][T17858] netlink: 'syz.8.5286': attribute type 64 has an invalid length. [ 434.584439][T17858] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5286'. [ 434.623274][T11527] team0 (unregistering): Port device team_slave_1 removed [ 434.668012][T11527] team0 (unregistering): Port device team_slave_0 removed [ 434.697062][ T43] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 434.716648][ T43] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 434.845896][ T5823] Bluetooth: hci1: command tx timeout [ 434.929274][ T43] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 434.940674][ T43] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 434.950955][ T43] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 434.965554][ T43] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 434.981574][ T43] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 434.993215][ T43] usb 3-1: USB disconnect, device number 3 [ 435.142420][T17810] chnl_net:caif_netlink_parms(): no params data found [ 435.225955][ T9] kernel write not supported for file /2030/oom_score_adj (pid: 9 comm: kworker/0:0) [ 435.404369][T17810] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.427201][T17810] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.434390][T17810] bridge_slave_0: entered allmulticast mode [ 435.454714][T17810] bridge_slave_0: entered promiscuous mode [ 435.464494][T17810] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.472076][T17810] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.480651][T17810] bridge_slave_1: entered allmulticast mode [ 435.488796][T17810] bridge_slave_1: entered promiscuous mode [ 435.601702][T17810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 435.627873][T17810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 435.672774][T17810] team0: Port device team_slave_0 added [ 435.683045][T17810] team0: Port device team_slave_1 added [ 435.723544][T17810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 435.730870][T17810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.758087][T17810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 435.771427][T17810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 435.782736][T17810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.810148][T17810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 435.878801][T17810] hsr_slave_0: entered promiscuous mode [ 435.886119][T17810] hsr_slave_1: entered promiscuous mode [ 435.892389][T17810] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 435.901380][T17810] Cannot create hsr debugfs directory [ 436.622022][T17810] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 436.649718][T17810] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 436.670004][T17810] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 436.706916][T17810] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 436.864524][T17810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 436.926621][ T5823] Bluetooth: hci1: command tx timeout [ 436.932925][T17810] 8021q: adding VLAN 0 to HW filter on device team0 [ 437.000731][T11500] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.008010][T11500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 437.073677][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.080872][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 437.931441][T17934] netlink: 'syz.6.5315': attribute type 3 has an invalid length. [ 437.954930][T17810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 437.976511][T17934] netlink: 64 bytes leftover after parsing attributes in process `syz.6.5315'. [ 438.169227][T17941] netlink: 'syz.7.5318': attribute type 4 has an invalid length. [ 438.185699][T17941] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5318'. [ 438.667618][T17810] veth0_vlan: entered promiscuous mode [ 438.704107][T17810] veth1_vlan: entered promiscuous mode [ 438.761874][T17810] veth0_macvtap: entered promiscuous mode [ 438.785293][T17810] veth1_macvtap: entered promiscuous mode [ 438.843817][T17810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 438.858297][T17810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 438.871516][T17810] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.881144][T17810] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.890255][T17810] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.899488][T17810] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.918813][T17979] veth0: entered promiscuous mode [ 438.927222][T17979] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5333'. [ 438.947613][ T5947] usb 7-1: new full-speed USB device number 32 using dummy_hcd [ 439.013241][ T5823] Bluetooth: hci1: command tx timeout [ 439.116282][T11541] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.117946][ T5947] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 439.144505][T11541] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.167796][T11506] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.175684][ T5947] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 439.185104][ T5947] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 439.191219][T11506] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.206200][ T5947] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.242737][ T5947] usb 7-1: config 0 descriptor?? [ 439.267454][ T5947] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 439.274118][ T5947] dvb-usb: bulk message failed: -22 (3/0) [ 439.298351][ T5947] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 439.319738][ T5947] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 439.337473][ T5947] usb 7-1: media controller created [ 439.352080][T17989] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 439.370249][ T5947] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 439.412385][ T5947] dvb-usb: bulk message failed: -22 (6/0) [ 439.419318][ T5947] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 439.440277][ T5947] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input51 [ 439.465319][ T5947] dvb-usb: schedule remote query interval to 150 msecs. [ 439.479911][ T5947] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 439.496572][T17969] dvb-usb: bulk message failed: -22 (2/0) [ 439.527627][ T5947] usb 7-1: USB disconnect, device number 32 [ 439.557746][ T5947] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 439.825589][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 439.977601][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 439.992303][T11524] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.998378][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 440.048679][ T9] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 440.058171][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 440.075534][ T9] usb 3-1: SerialNumber: syz [ 440.150011][T11524] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.215644][T11524] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.299623][ T9] usb 3-1: 0:2 : does not exist [ 440.354315][ T9] usb 3-1: USB disconnect, device number 4 [ 440.482193][T11524] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.690108][ T5828] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 440.702102][ T5828] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 440.712289][ T5828] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 440.722345][ T5828] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 440.730148][ T5828] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 440.880657][T11524] bridge_slave_1: left allmulticast mode [ 440.895557][T11524] bridge_slave_1: left promiscuous mode [ 440.905806][T11524] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.928034][T11524] bridge_slave_0: left allmulticast mode [ 440.933850][T11524] bridge_slave_0: left promiscuous mode [ 440.945774][T11524] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.174106][T18044] overlayfs: failed to clone upperpath [ 441.245955][T18043] IPVS: Scheduler module ip_vs_sip not found [ 441.562324][T11524] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 441.573872][T11524] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 441.584713][T11524] bond0 (unregistering): Released all slaves [ 441.993146][T11524] hsr_slave_0: left promiscuous mode [ 442.010565][T11524] hsr_slave_1: left promiscuous mode [ 442.026208][T11524] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 442.049907][T11524] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 442.071196][T11524] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 442.083346][T11524] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 442.106231][T11524] veth1_macvtap: left promiscuous mode [ 442.111770][T11524] veth0_macvtap: left promiscuous mode [ 442.117492][T11524] veth1_vlan: left promiscuous mode [ 442.122773][T11524] veth0_vlan: left promiscuous mode [ 442.561161][T11524] team0 (unregistering): Port device team_slave_1 removed [ 442.601774][T11524] team0 (unregistering): Port device team_slave_0 removed [ 442.775551][ T5828] Bluetooth: hci1: command tx timeout [ 443.300566][T18085] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5378'. [ 443.310227][T18027] chnl_net:caif_netlink_parms(): no params data found [ 443.338770][T18085] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 443.381192][T18085] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 443.650782][T18027] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.670640][T18027] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.678292][T18027] bridge_slave_0: entered allmulticast mode [ 443.687093][T18027] bridge_slave_0: entered promiscuous mode [ 443.695399][T18027] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.702845][T18027] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.710190][ T5947] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 443.710319][T18027] bridge_slave_1: entered allmulticast mode [ 443.756198][T18027] bridge_slave_1: entered promiscuous mode [ 443.833589][T18102] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 443.856817][T18027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 443.865965][T18102] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 443.884814][T18104] bond0: entered promiscuous mode [ 443.891101][T18104] bond_slave_0: entered promiscuous mode [ 443.898094][T18104] bond_slave_1: entered promiscuous mode [ 443.908657][ T5947] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 443.912199][T18027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 443.931239][ T5947] usb 7-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 443.947687][ T5947] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.994434][ T5947] usb 7-1: config 0 descriptor?? [ 444.061305][T18027] team0: Port device team_slave_0 added [ 444.082515][T18027] team0: Port device team_slave_1 added [ 444.190839][T18027] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 444.207738][T18027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 444.259287][T18027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 444.280562][T18027] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 444.290725][T18027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 444.318558][T18027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 444.444911][T18027] hsr_slave_0: entered promiscuous mode [ 444.453510][T18027] hsr_slave_1: entered promiscuous mode [ 444.465087][ T5947] input: HID 28bd:0933 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:28BD:0933.002B/input/input52 [ 444.466746][T18027] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 444.494526][T18027] Cannot create hsr debugfs directory [ 444.570612][ T5947] uclogic 0003:28BD:0933.002B: input,hidraw0: USB HID vff.ff Mouse [HID 28bd:0933] on usb-dummy_hcd.6-1/input0 [ 444.673177][ T5910] usb 7-1: USB disconnect, device number 33 [ 444.845891][ T5828] Bluetooth: hci1: command tx timeout [ 445.212257][T18027] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 445.290379][T18027] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 445.343391][T18027] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 445.370199][T18027] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 445.547668][T18027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 445.571326][T18027] 8021q: adding VLAN 0 to HW filter on device team0 [ 445.599617][T11500] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.606810][T11500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 445.624485][T11541] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.631631][T11541] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.794717][T18152] netlink: 'syz.8.5404': attribute type 1 has an invalid length. [ 445.949669][T11512] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.108651][T11512] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.171241][T18027] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 446.262987][T11512] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.387413][T11512] netdevsim netdevsim6 netdevsim0 (unregistering): left promiscuous mode [ 446.410648][T11512] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.442617][T18164] 9pnet: p9_errstr2errno: server reported unknown error @ [ 446.446970][T18162] block nbd2: NBD_DISCONNECT [ 446.460314][T18161] block nbd2: Disconnected due to user request. [ 446.476289][T18161] block nbd2: shutting down sockets [ 446.848545][ T30] kauditd_printk_skb: 106 callbacks suppressed [ 446.848563][ T30] audit: type=1326 audit(2000000323.342:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18168 comm="syz.7.5410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4ac012ab19 code=0x7ffc0000 [ 446.909880][T11512] ip6gretap0: left allmulticast mode [ 446.915222][T11512] ip6gretap0: left promiscuous mode [ 446.926330][ T5828] Bluetooth: hci1: command tx timeout [ 446.939677][T11512] bridge0: port 1(ip6gretap0) entered disabled state [ 446.977614][ T30] audit: type=1326 audit(2000000323.342:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18168 comm="syz.7.5410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ac018e929 code=0x7ffc0000 [ 447.043974][ T30] audit: type=1326 audit(2000000323.342:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18168 comm="syz.7.5410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ac018e929 code=0x7ffc0000 [ 447.066556][T18178] Invalid source name [ 447.082481][ T30] audit: type=1326 audit(2000000323.342:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18168 comm="syz.7.5410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4ac012ab19 code=0x7ffc0000 [ 447.119781][ T5823] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 447.130409][ T30] audit: type=1326 audit(2000000323.342:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18168 comm="syz.7.5410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ac018e929 code=0x7ffc0000 [ 447.132723][ T5823] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 447.164892][ T5823] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 447.172303][ T30] audit: type=1326 audit(2000000323.342:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18168 comm="syz.7.5410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4ac012ab19 code=0x7ffc0000 [ 447.195751][ T30] audit: type=1326 audit(2000000323.342:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18168 comm="syz.7.5410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4ac012ab19 code=0x7ffc0000 [ 447.219175][ T30] audit: type=1326 audit(2000000323.342:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18168 comm="syz.7.5410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ac018e929 code=0x7ffc0000 [ 447.241419][ T5823] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 447.257515][ T5823] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 447.279966][ T30] audit: type=1326 audit(2000000323.342:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18168 comm="syz.7.5410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4ac012ab19 code=0x7ffc0000 [ 447.313450][ T30] audit: type=1326 audit(2000000323.342:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18168 comm="syz.7.5410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ac018e929 code=0x7ffc0000 [ 447.866093][T11512] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 447.881591][T18196] openvswitch: netlink: IPv4 tun info is not correct [ 447.894619][T11512] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 447.921380][T11512] bond0 (unregistering): Released all slaves [ 448.080129][T11512] tipc: Disabling bearer [ 448.091241][T11512] tipc: Left network mode [ 448.123446][T18027] veth0_vlan: entered promiscuous mode [ 448.163249][T18027] veth1_vlan: entered promiscuous mode [ 553.285415][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 553.292509][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P18206/1:b..l [ 553.301015][ C1] rcu: (detected by 1, t=10502 jiffies, g=78913, q=185 ncpus=2) [ 553.308743][ C1] task:syz.7.5425 state:R running task stack:26920 pid:18206 tgid:18206 ppid:7976 task_flags:0x400040 flags:0x00004000 [ 553.322961][ C1] Call Trace: [ 553.326268][ C1] [ 553.329220][ C1] __schedule+0x16a2/0x4cb0 [ 553.333792][ C1] ? rcu_is_watching+0x15/0xb0 [ 553.338600][ C1] ? preempt_schedule_irq+0xb5/0x150 [ 553.343902][ C1] ? trace_sched_exit_tp+0x38/0x120 [ 553.349125][ C1] ? __pfx___schedule+0x10/0x10 [ 553.354013][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 553.359323][ C1] preempt_schedule_irq+0xb5/0x150 [ 553.364454][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 553.370237][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 553.376081][ C1] irqentry_exit+0x6f/0x90 [ 553.380528][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 553.386519][ C1] RIP: 0010:kasan_check_range+0x89/0x2c0 [ 553.392171][ C1] Code: ff df 4f 8d 1c 17 49 ff c8 4d 89 c1 49 c1 e9 03 48 bb 01 00 00 00 00 fc ff df 4d 8d 34 19 4d 89 f4 4d 29 dc 49 83 fc 10 7f 29 <4d> 85 e4 0f 84 41 01 00 00 4c 89 cb 48 f7 d3 4c 01 fb 41 80 3b 00 [ 553.411791][ C1] RSP: 0018:ffffc9000fa4f440 EFLAGS: 00000283 [ 553.417880][ C1] RAX: 1ffff92001f49e01 RBX: dffffc0000000001 RCX: ffffffff817296e8 [ 553.425875][ C1] RDX: 0000000000000001 RSI: 0000000000000010 RDI: ffffc9000fa4f5b8 [ 553.433865][ C1] RBP: 0000000000000000 R08: ffffc9000fa4f5c7 R09: 1ffff92001f49eb8 [ 553.441852][ C1] R10: dffffc0000000000 R11: fffff52001f49eb7 R12: 0000000000000002 [ 553.449836][ C1] R13: ffffc9000fa4f5b8 R14: fffff52001f49eb9 R15: 1ffff92001f49eb7 [ 553.457841][ C1] ? unwind_next_frame+0xc98/0x2390 [ 553.463084][ C1] __asan_memset+0x22/0x50 [ 553.467523][ C1] unwind_next_frame+0xc98/0x2390 [ 553.472582][ C1] ? unwind_next_frame+0xa5/0x2390 [ 553.477732][ C1] ? __dentry_kill+0x209/0x660 [ 553.482530][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 553.488697][ C1] arch_stack_walk+0x11c/0x150 [ 553.493577][ C1] ? dput+0x19f/0x2b0 [ 553.497600][ C1] stack_trace_save+0x9c/0xe0 [ 553.502298][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 553.507691][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 553.513005][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 553.518238][ C1] kasan_save_stack+0x3e/0x60 [ 553.522938][ C1] ? kasan_save_stack+0x3e/0x60 [ 553.527814][ C1] ? kasan_record_aux_stack+0xbd/0xd0 [ 553.533217][ C1] ? call_rcu+0x157/0x9c0 [ 553.537569][ C1] ? __destroy_inode+0x2da/0x670 [ 553.542535][ C1] ? evict+0x797/0x9c0 [ 553.546612][ C1] ? __dentry_kill+0x209/0x660 [ 553.551445][ C1] kasan_record_aux_stack+0xbd/0xd0 [ 553.556664][ C1] ? __pfx_inode_free_by_rcu+0x10/0x10 [ 553.562130][ C1] call_rcu+0x157/0x9c0 [ 553.566308][ C1] ? migrate_enable+0x29c/0x3c0 [ 553.571175][ C1] ? bpf_inode_storage_free+0x77/0x2b0 [ 553.576652][ C1] ? __pfx_migrate_enable+0x10/0x10 [ 553.581866][ C1] ? __pfx_call_rcu+0x10/0x10 [ 553.586563][ C1] ? bpf_inode_storage_free+0x77/0x2b0 [ 553.592034][ C1] ? bpf_inode_storage_free+0x77/0x2b0 [ 553.597514][ C1] ? bpf_inode_storage_free+0x77/0x2b0 [ 553.603002][ C1] __destroy_inode+0x2da/0x670 [ 553.607790][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 553.613021][ C1] evict+0x797/0x9c0 [ 553.616936][ C1] ? __pfx_evict+0x10/0x10 [ 553.621365][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 553.626582][ C1] ? _raw_spin_unlock+0x28/0x50 [ 553.631452][ C1] ? iput+0x6d8/0x9d0 [ 553.635590][ C1] __dentry_kill+0x209/0x660 [ 553.640208][ C1] ? dput+0x37/0x2b0 [ 553.644123][ C1] dput+0x19f/0x2b0 [ 553.647957][ C1] find_next_child+0x1e5/0x250 [ 553.652747][ C1] ? __pfx_remove_one+0x10/0x10 [ 553.657623][ C1] simple_recursive_removal+0xf4/0x690 [ 553.663115][ C1] ? __pfx_remove_one+0x10/0x10 [ 553.667997][ C1] ? __pfx_kvm_vm_release+0x10/0x10 [ 553.673226][ C1] debugfs_remove+0x5b/0x70 [ 553.677752][ C1] kvm_put_kvm+0x139/0x1650 [ 553.682284][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 553.687505][ C1] ? evm_file_release+0x101/0x1e0 [ 553.692568][ C1] ? __pfx_kvm_vm_release+0x10/0x10 [ 553.697793][ C1] kvm_vm_release+0x43/0x50 [ 553.702331][ C1] __fput+0x449/0xa70 [ 553.706358][ C1] task_work_run+0x1d1/0x260 [ 553.710981][ C1] ? __pfx_task_work_run+0x10/0x10 [ 553.716115][ C1] ? exit_to_user_mode_loop+0x40/0x110 [ 553.721597][ C1] exit_to_user_mode_loop+0xec/0x110 [ 553.726904][ C1] do_syscall_64+0x2bd/0x3b0 [ 553.731522][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 553.736744][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.742824][ C1] ? clear_bhb_loop+0x60/0xb0 [ 553.747527][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.753453][ C1] RIP: 0033:0x7f4ac018e929 [ 553.757914][ C1] RSP: 002b:00007ffce0e71348 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 553.766360][ C1] RAX: 0000000000000000 RBX: 000000000006d6bd RCX: 00007f4ac018e929 [ 553.774346][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 553.782337][ C1] RBP: 00007f4ac03b7ba0 R08: 0000000000000001 R09: 00000005e0e7163f [ 553.790325][ C1] R10: 00007f4ac0000000 R11: 0000000000000246 R12: 00007f4ac03b5fac [ 553.798320][ C1] R13: 00007f4ac03b5fa0 R14: ffffffffffffffff R15: 00007ffce0e71460 [ 553.806340][ C1] [ 553.809374][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g78913 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 553.821706][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=33165 [ 553.829608][ C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g78913 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 553.840990][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 553.850970][ C1] rcu: RCU grace-period kthread stack dump: [ 553.856870][ C1] task:rcu_preempt state:I stack:27320 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 553.868815][ C1] Call Trace: [ 553.872122][ C1] [ 553.875068][ C1] __schedule+0x16a2/0x4cb0 [ 553.879611][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 553.884842][ C1] ? schedule+0x165/0x360 [ 553.889192][ C1] ? __lock_acquire+0xab9/0xd20 [ 553.894069][ C1] ? __pfx___schedule+0x10/0x10 [ 553.898971][ C1] ? schedule+0x91/0x360 [ 553.903239][ C1] schedule+0x165/0x360 [ 553.907447][ C1] schedule_timeout+0x12b/0x270 [ 553.912321][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 553.917715][ C1] ? __pfx_process_timeout+0x10/0x10 [ 553.923038][ C1] ? prepare_to_swait_event+0x341/0x380 [ 553.928610][ C1] rcu_gp_fqs_loop+0x301/0x1540 [ 553.933575][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 553.938531][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 553.943764][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 553.949076][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 553.954303][ C1] ? finish_swait+0xcd/0x1f0 [ 553.958939][ C1] rcu_gp_kthread+0x99/0x390 [ 553.963559][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 553.968785][ C1] ? __kthread_parkme+0x7b/0x200 [ 553.973760][ C1] ? __kthread_parkme+0x1a1/0x200 [ 553.978828][ C1] kthread+0x70e/0x8a0 [ 553.982921][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 553.988141][ C1] ? __pfx_kthread+0x10/0x10 [ 553.992758][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 553.997981][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 554.003207][ C1] ? __pfx_kthread+0x10/0x10 [ 554.007828][ C1] ret_from_fork+0x3fc/0x770 [ 554.012448][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 554.017594][ C1] ? __switch_to_asm+0x39/0x70 [ 554.022378][ C1] ? __switch_to_asm+0x33/0x70 [ 554.027172][ C1] ? __pfx_kthread+0x10/0x10 [ 554.031822][ C1] ret_from_fork_asm+0x1a/0x30 [ 554.036617][ C1] [ 554.039647][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 554.045985][ C1] Sending NMI from CPU 1 to CPUs 0: [ 554.051210][ C0] NMI backtrace for cpu 0 [ 554.051236][ C0] CPU: 0 UID: 0 PID: 18179 Comm: syz-executor Not tainted 6.16.0-rc3-syzkaller-00329-gdfba48a70cb6 #0 PREEMPT(full) [ 554.051255][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 554.051265][ C0] RIP: 0010:rcu_is_watching+0x10/0xb0 [ 554.051289][ C0] Code: 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 53 65 ff 05 f0 ad f2 10 5b df b8 09 89 c3 83 f8 08 73 65 49 bf 00 00 00 00 00 fc ff df [ 554.051302][ C0] RSP: 0018:ffffc90000007c18 EFLAGS: 00000083 [ 554.051316][ C0] RAX: 0000000000000000 RBX: 0000000000000806 RCX: 0000000000000001 [ 554.051325][ C0] RDX: 0000000000010000 RSI: ffffffff81ae5ed8 RDI: ffff8880b8627ad8 [ 554.051336][ C0] RBP: ffffc90000007d30 R08: ffffffff8f9fdaf7 R09: 1ffffffff1f3fb5e [ 554.051348][ C0] R10: dffffc0000000000 R11: fffffbfff1f3fb5f R12: dffffc0000000000 [ 554.051359][ C0] R13: ffffffff81ae5ed8 R14: ffff8880b8627ad8 R15: 1ffff92000000f94 [ 554.051371][ C0] FS: 000055557911a500(0000) GS:ffff888125c84000(0000) knlGS:0000000000000000 [ 554.051384][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 554.051393][ C0] CR2: 00007f3d579eeb68 CR3: 0000000050496000 CR4: 00000000003526f0 [ 554.051406][ C0] Call Trace: [ 554.051413][ C0] [ 554.051421][ C0] lock_release+0x4b/0x3e0 [ 554.051447][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 554.051475][ C0] _raw_spin_unlock_irqrestore+0x70/0x110 [ 554.051503][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 554.051534][ C0] ? timerqueue_del+0xae/0x100 [ 554.051555][ C0] ? __pfx_advance_sched+0x10/0x10 [ 554.051574][ C0] __hrtimer_run_queues+0x408/0xc60 [ 554.051606][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 554.051626][ C0] ? read_tsc+0x9/0x20 [ 554.051652][ C0] hrtimer_interrupt+0x45b/0xaa0 [ 554.051687][ C0] __sysvec_apic_timer_interrupt+0x10b/0x410 [ 554.051712][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 554.051732][ C0] [ 554.051738][ C0] [ 554.051744][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 554.051761][ C0] RIP: 0010:lock_acquire+0x175/0x360 [ 554.051780][ C0] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 2b 9e fb 10 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 554.051792][ C0] RSP: 0018:ffffc9000541f648 EFLAGS: 00000206 [ 554.051804][ C0] RAX: c32c532ccbd9fb00 RBX: 0000000000000000 RCX: c32c532ccbd9fb00 [ 554.051815][ C0] RDX: 0000000000000000 RSI: ffffffff8db5a603 RDI: ffffffff8be1b9c0 [ 554.051825][ C0] RBP: ffffffff825b4c9c R08: 0000000000000000 R09: ffffffff825b4c9c [ 554.051836][ C0] R10: dffffc0000000000 R11: ffffed100365f938 R12: 0000000000000002 [ 554.051846][ C0] R13: ffffffff8e13ee60 R14: 0000000000000000 R15: 0000000000000246 [ 554.051858][ C0] ? kernfs_root+0x1c/0x230 [ 554.051880][ C0] ? kernfs_root+0x1c/0x230 [ 554.051909][ C0] ? __pfx_down_write+0x10/0x10 [ 554.051922][ C0] ? kernfs_root+0x1c/0x230 [ 554.051941][ C0] ? kernfs_root+0x1c/0x230 [ 554.051962][ C0] kernfs_root+0x38/0x230 [ 554.051981][ C0] ? kernfs_root+0x1c/0x230 [ 554.052002][ C0] kernfs_link_sibling+0x396/0x3e0 [ 554.052030][ C0] kernfs_add_one+0x1e0/0x520 [ 554.052054][ C0] __kernfs_create_file+0x22b/0x2e0 [ 554.052073][ C0] sysfs_add_file_mode_ns+0x238/0x300 [ 554.052095][ C0] internal_create_group+0x66d/0x1110 [ 554.052125][ C0] ? __pfx_internal_create_group+0x10/0x10 [ 554.052147][ C0] ? kernfs_add_one+0xf0/0x520 [ 554.052172][ C0] sysfs_create_groups+0x59/0x120 [ 554.052194][ C0] device_add_attrs+0xe0/0x5a0 [ 554.052212][ C0] ? __pfx_device_add_attrs+0x10/0x10 [ 554.052229][ C0] ? device_add_class_symlinks+0x21f/0x240 [ 554.052245][ C0] device_add+0x496/0xb50 [ 554.052269][ C0] ? device_initialize+0x24b/0x440 [ 554.052293][ C0] netdev_register_kobject+0x156/0x2f0 [ 554.052315][ C0] register_netdevice+0x126c/0x1ae0 [ 554.052343][ C0] ? __pfx_register_netdevice+0x10/0x10 [ 554.052364][ C0] ? tun_net_initialize+0x13f/0x450 [ 554.052388][ C0] ? __pfx_tun_net_initialize+0x10/0x10 [ 554.052410][ C0] ? alloc_netdev_mqs+0xdb2/0x11e0 [ 554.052434][ C0] tun_set_iff+0x844/0xef0 [ 554.052460][ C0] __tun_chr_ioctl+0x788/0x1df0 [ 554.052486][ C0] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 554.052508][ C0] ? class_preempt_destructor+0x51/0x80 [ 554.052534][ C0] ? __pfx_fput_close_sync+0x10/0x10 [ 554.052559][ C0] ? bpf_lsm_file_ioctl+0x9/0x20 [ 554.052580][ C0] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 554.052601][ C0] __se_sys_ioctl+0xf9/0x170 [ 554.052618][ C0] do_syscall_64+0xfa/0x3b0 [ 554.052639][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 554.052669][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.052684][ C0] ? clear_bhb_loop+0x60/0xb0 [ 554.052702][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.052716][ C0] RIP: 0033:0x7f3d5798e52b [ 554.052730][ C0] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 554.052743][ C0] RSP: 002b:00007ffcaea963c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 554.052758][ C0] RAX: ffffffffffffffda RBX: 00007f3d57bb5f40 RCX: 00007f3d5798e52b [ 554.052769][ C0] RDX: 00007ffcaea96440 RSI: 00000000400454ca RDI: 00000000000000c8 [ 554.052778][ C0] RBP: 00007f3d57bb6738 R08: 0000000000000000 R09: 0000000000000000 [ 554.052788][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 554.052796][ C0] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 554.052814][ C0]