last executing test programs: 11.479341947s ago: executing program 0 (id=3383): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x4b, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000000)={0x0, 0x3996, 0x5, 0x1, 0x2}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000, 0x100, 0x1}, 0x20) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x860b81) ioctl$EVIOCGPROP(r3, 0x80404509, &(0x7f0000000280)=""/235) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'netdevsim0\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) ioctl$BTRFS_IOC_SEND(r3, 0x40489426, &(0x7f0000000380)={{r1}, 0x7, &(0x7f00000001c0)=[0x1000, 0x7, 0x7, 0x4, 0x2, 0x0, 0x6c22700a], 0x8000, 0x5}) write$nbd(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="0100000000000000000040000900000082b0cfc4337965941538be09000000000000000000007400a391793ba70d0000"], 0x40) socket(0xa, 0x801, 0x0) 9.319388979s ago: executing program 0 (id=3388): syz_emit_ethernet(0xae, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r1 = socket(0x40000000015, 0x805, 0x0) getsockopt(r1, 0x114, 0x271b, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x45}, 0xc880) setsockopt$packet_int(r2, 0x107, 0x9, &(0x7f0000000080)=0x9, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r4, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r6, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r5, r4, 0x0, 0x578410eb) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x8021) 8.908982767s ago: executing program 1 (id=3389): writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)="d1ffacd516de50ac9d15bc75316da4de", 0x10}], 0x1) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) set_mempolicy(0x3, &(0x7f0000000080)=0x7, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x98}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f00000002c0)={[{@mpol={'mpol', 0x3d, {'local', '=relative', @void}}}]}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x26e1, 0x0) ioctl$FIOCLEX(r5, 0x5451) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2}, 0x0) close(r5) sendmsg$key(0xffffffffffffffff, 0x0, 0x4) socket$kcm(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @local}) ioctl$OCFS2_IOC_UNRESVSP64(r0, 0x4030582b, &(0x7f0000000240)={0x1, 0x2, 0x8000000000000, 0x2, 0xdae, 0xea}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@private2, 0x1, 0x2, 0xfd, 0x3, 0x9, 0xb}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000006800010002000000fcffff7f00000000000000000c00020001c8b70001000000140006"], 0x38}}, 0x4000) 8.606836699s ago: executing program 3 (id=3391): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2803, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x40, 0xb, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x21}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4800}, 0x20000080) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) close(0xffffffffffffffff) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000000)) preadv(0xffffffffffffffff, &(0x7f0000004040)=[{&(0x7f0000002e00)=""/156, 0x9c}], 0x1, 0x401, 0x0) semop(0x0, &(0x7f0000000000)=[{0x0, 0x5, 0x800}, {0x1, 0xffff, 0x1000}], 0x2) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000240)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a32000000000500040000000000140007800800124000000000050015002200000005000500020000000500010006"], 0x64}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x1c, 0x4, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc011}, 0x800) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) 7.862604073s ago: executing program 1 (id=3392): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x4000000) sendmsg$NFT_MSG_GETOBJ(r1, 0x0, 0x24040808) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) socket$packet(0x11, 0x3, 0x300) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) socket(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x420, 0x288, 0x43, 0xa0, 0x288, 0x98, 0x388, 0x178, 0x178, 0x388, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x288, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x7, 0x5, 0x4, 0x3, 0x4], 0x2, 0x4}, {0xffffffffffffffff, [0x1, 0x1, 0x1, 0x1, 0x1, 0x2], 0x4}}}}, {{@uncond, 0x0, 0xe0, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x1b, 0x408, 0xfffffffb}}, @common=@set={{0x40}, {{0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0x0, 0x1}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x480) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000240)={0x0, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0, 0x70000}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000340)) r5 = dup(r4) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000000)={0x0, r5}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) close_range(r6, 0xffffffffffffffff, 0x0) 7.273465402s ago: executing program 3 (id=3393): syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x4000000) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)={0x20, 0x15, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) socket$packet(0x11, 0x3, 0x300) add_key$user(0x0, &(0x7f00000005c0), 0x0, 0x0, 0xfffffffffffffffd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) socket(0xa, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x420, 0x288, 0x43, 0xa0, 0x288, 0x98, 0x388, 0x178, 0x178, 0x388, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x288, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x7, 0x5, 0x4, 0x3, 0x4], 0x2, 0x4}, {0xffffffffffffffff, [0x1, 0x1, 0x1, 0x1, 0x1, 0x2], 0x4}}}}, {{@uncond, 0x0, 0xe0, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x1b, 0x408, 0xfffffffb}}, @common=@set={{0x40}, {{0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0x0, 0x1}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x480) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000340)) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000000)) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 7.243985936s ago: executing program 1 (id=3394): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed", 0x30}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a62098238", 0xbb}, {&(0x7f0000000900)}, {&(0x7f00000000c0)}], 0x4}}], 0x1, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff0802110000"], 0x6f4}}, 0x0) 5.533230553s ago: executing program 1 (id=3395): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000580)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f000068b000/0x4000)=nil, &(0x7f000068e000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x7, 0x0, 0x0) sendmsg$can_raw(r1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x40810) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') preadv(r3, &(0x7f00000026c0)=[{&(0x7f0000002700)=""/4087, 0xff7}], 0x1, 0x6, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000880) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00010002"], 0x8) 5.321049459s ago: executing program 0 (id=3396): sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x20000034) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x90}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) close(r0) recvfrom(r1, 0x0, 0x0, 0x40002062, 0x0, 0x0) 5.273755757s ago: executing program 2 (id=3397): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan1\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) socket$nl_crypto(0x10, 0x3, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) r6 = fsopen(&(0x7f00000000c0)='debugfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x8, 0x0, 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x24048015) ioctl$SIOCAX25ADDUID(0xffffffffffffffff, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xee01}) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f0000000480)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) mount$afs(0x0, 0x0, &(0x7f0000000100), 0x4, &(0x7f0000000040)={[{@dyn}, {}]}) sendmsg$nl_route(r1, 0x0, 0x0) 5.210919487s ago: executing program 0 (id=3398): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed", 0x30}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5ac", 0x54}, {&(0x7f00000000c0)}], 0x3}}], 0x1, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 5.209290637s ago: executing program 3 (id=3399): mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000001) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x64, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x3f}}, {0x0, 0xe21, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0x1, 0x0, @void}}}}}}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="203edae7b95b3d92615c16dafb9300b8", @ANYRES32=0x0, @ANYBLOB="100a0500"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setresuid(0xee01, 0xffffffffffffffff, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r4) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r5, 0x29, 0x37, 0x0, 0x18) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203f3021600000000000000200000000200090008000000e9000000000000000300060000000000020000000000000000000000000000000200010000000000000003fcff000020030005000000000002000000041414aa00000000000000000a00080008"], 0xb0}, 0x1, 0x7}, 0x0) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @private2={0xfc, 0x2, '\x00', 0xff}, 0x3ff}, 0x67) socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$inet6(r5, &(0x7f0000001840), 0x3b, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) 4.069408408s ago: executing program 2 (id=3400): socket(0x10, 0x803, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x25, 0x0, 0x1) socket(0xa, 0x801, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) lgetxattr(&(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000500), 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x0, 0x30, 0x0, 0x20000) 3.860137883s ago: executing program 1 (id=3401): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x1e, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000"], 0x7c}}, 0x0) 3.128471216s ago: executing program 3 (id=3402): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x4000000) sendmsg$NFT_MSG_GETOBJ(r1, 0x0, 0x24040808) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) socket$packet(0x11, 0x3, 0x300) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) socket(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x420, 0x288, 0x43, 0xa0, 0x288, 0x98, 0x388, 0x178, 0x178, 0x388, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x288, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x7, 0x5, 0x4, 0x3, 0x4], 0x2, 0x4}, {0xffffffffffffffff, [0x1, 0x1, 0x1, 0x1, 0x1, 0x2], 0x4}}}}, {{@uncond, 0x0, 0xe0, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x1b, 0x408, 0xfffffffb}}, @common=@set={{0x40}, {{0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0x0, 0x1}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x480) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000240)={0x0, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0, 0x70000}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000340)) r5 = dup(r4) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000000)={0x0, r5}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) close_range(r6, 0xffffffffffffffff, 0x0) 3.107579989s ago: executing program 0 (id=3403): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed", 0x30}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a62098238", 0xbb}, {&(0x7f0000000900)}, {&(0x7f00000000c0)}], 0x4}}], 0x1, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff0802110000"], 0x6f4}}, 0x0) 3.071182735s ago: executing program 2 (id=3404): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200), 0x3018409, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80840, 0x0) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r1, 0x3b65, 0x4) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0x3) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) unshare(0x22020400) sendmsg$NFT_BATCH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x23}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}}, 0x0) 2.909884722s ago: executing program 1 (id=3405): syz_emit_ethernet(0xae, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) socket(0x40000000015, 0x805, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x45}, 0xc880) setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000000080)=0x9, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r3, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r4, r3, 0x0, 0x578410eb) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x8021) 2.041282058s ago: executing program 2 (id=3406): sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x20000034) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x90}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) close(r0) recvfrom(r1, 0x0, 0x0, 0x40002062, 0x0, 0x0) 1.96927942s ago: executing program 0 (id=3407): syz_emit_ethernet(0xae, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r1 = socket(0x40000000015, 0x805, 0x0) getsockopt(r1, 0x114, 0x271b, 0x0, &(0x7f00000000c0)) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x7f, 0x584e4f53, 0x3, 0x2, 0x7, 0x7, 0x5, 0x1, 0x4, 0x2, 0x7}}) r2 = socket(0x10, 0x3, 0x0) setsockopt$packet_int(r2, 0x107, 0x9, &(0x7f0000000080)=0x9, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r4, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r6, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r5, r4, 0x0, 0x578410eb) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x8021) 1.9681374s ago: executing program 3 (id=3408): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan1\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) socket$nl_crypto(0x10, 0x3, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) r6 = fsopen(&(0x7f00000000c0)='debugfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x8, 0x0, 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x24048015) ioctl$SIOCAX25ADDUID(0xffffffffffffffff, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xee01}) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f0000000480)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) mount$afs(0x0, 0x0, &(0x7f0000000100), 0x4, &(0x7f0000000040)={[{@dyn}, {}]}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 1.877395416s ago: executing program 2 (id=3409): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x4, @loopback, 0x3ff}, @in6={0xa, 0x4e20, 0x2, @private0, 0xffff7fff}], 0x38) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x4000) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket$inet6_sctp(0xa, 0x5, 0x84) gettid() read(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='ufs\x00', 0x210818, 0x0) pread64(r2, 0x0, 0x0, 0x40000000009) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, 0x0, 0x0) write(r4, &(0x7f0000000000)="2e000000010002", 0x7) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r5, &(0x7f0000000200)={0x2, 0x4e22, @remote}, 0x10) 953.21735ms ago: executing program 3 (id=3410): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000580)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f000068b000/0x4000)=nil, &(0x7f000068e000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x7, 0x0, 0x0) sendmsg$can_raw(r1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x40810) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') preadv(r3, &(0x7f00000026c0)=[{&(0x7f0000002700)=""/4087, 0xff7}], 0x1, 0x6, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000880) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00010002"], 0x8) 0s ago: executing program 2 (id=3411): mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000001) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x64, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x3f}}, {0x0, 0xe21, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0x1, 0x0, @void}}}}}}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="203edae7b95b3d92615c16dafb9300b8", @ANYRES32=0x0, @ANYBLOB="100a0500"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setresuid(0xee01, 0xffffffffffffffff, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r4) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r5, 0x29, 0x37, 0x0, 0x18) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203f3021600000000000000200000000200090008000000e9000000000000000300060000000000020000000000000000000000000000000200010000000000000003fcff000020030005000000000002000000041414aa00000000000000000a00080008"], 0xb0}, 0x1, 0x7}, 0x0) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @private2={0xfc, 0x2, '\x00', 0xff}, 0x3ff}, 0x67) socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$inet6(r5, &(0x7f0000001840), 0x3b, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) kernel console output (not intermixed with test programs): 64][T12204] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 977.804358][T12204] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 977.817160][T12204] usb 1-1: Product: syz [ 977.821359][T12204] usb 1-1: Manufacturer: syz [ 977.827737][T12204] usb 1-1: SerialNumber: syz [ 977.836534][T12204] usb 1-1: config 0 descriptor?? [ 977.852512][T12204] radio-si470x 1-1:0.35: could not find interrupt in endpoint [ 977.932945][T12204] radio-si470x: probe of 1-1:0.35 failed with error -5 [ 977.969225][T13199] sd 0:0:1:0: device reset [ 978.045887][T12204] radio-raremono 1-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 978.364519][ T8460] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 979.024082][T12204] radio-raremono 1-1:0.35: raremono_cmd_main failed (-71) [ 979.041253][T12204] radio-raremono 1-1:0.35: V4L2 device registered as radio48 [ 979.063089][T12204] usb 1-1: USB disconnect, device number 58 [ 979.082193][T12204] radio-raremono 1-1:0.35: Thanko's Raremono disconnected [ 979.154385][ T8460] usb 3-1: Using ep0 maxpacket: 32 [ 979.174461][ T8460] usb 3-1: config 0 has an invalid interface number: 61 but max is 1 [ 979.182574][ T8460] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 979.198422][ T8460] usb 3-1: config 0 has no interface number 0 [ 979.210806][ T8460] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 979.229797][ T8460] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 979.238536][ T8460] usb 3-1: Product: syz [ 979.242804][ T8460] usb 3-1: Manufacturer: syz [ 979.247944][ T8460] usb 3-1: SerialNumber: syz [ 979.274052][ T8460] usb 3-1: config 0 descriptor?? [ 979.788033][ T8460] viperboard 3-1:0.61: version 0.00 found at bus 003 address 055 [ 979.814275][ T8460] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 979.823179][ T8460] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 [ 981.423025][ T5812] usb 3-1: USB disconnect, device number 55 [ 982.779215][T13251] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2085'. [ 983.045029][ T5812] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 983.244532][ T5812] usb 2-1: Using ep0 maxpacket: 8 [ 983.308599][ T5812] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xAD, skipping [ 983.344659][ T5812] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x18, skipping [ 983.385262][ T5812] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0124, bcdDevice=3a.9f [ 983.413371][ T5812] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 983.429018][ T5812] usb 2-1: Product: syz [ 983.443687][ T5812] usb 2-1: Manufacturer: syz [ 983.453163][ T5812] usb 2-1: SerialNumber: syz [ 983.479209][ T5812] usb 2-1: config 0 descriptor?? [ 983.480572][T13256] sd 0:0:1:0: device reset [ 983.502249][T13248] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 983.517196][ T5812] kvaser_usb 2-1:0.0: Cannot get usb endpoint(s) [ 983.742994][ T5830] usb 2-1: USB disconnect, device number 45 [ 983.804580][T12204] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 983.984610][T12204] usb 4-1: Using ep0 maxpacket: 32 [ 984.001313][T12204] usb 4-1: config 0 has an invalid interface number: 61 but max is 1 [ 984.020295][T12204] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 984.054406][T12204] usb 4-1: config 0 has no interface number 0 [ 984.067115][T12204] usb 4-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 984.086587][T12204] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 984.114419][T12204] usb 4-1: Product: syz [ 984.124736][T12204] usb 4-1: Manufacturer: syz [ 984.144609][T12204] usb 4-1: SerialNumber: syz [ 984.161387][T12204] usb 4-1: config 0 descriptor?? [ 984.313601][T12204] viperboard 4-1:0.61: version 0.00 found at bus 004 address 051 [ 984.351211][T12204] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 984.363542][T12204] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 [ 985.597474][T13303] tmpfs: Bad value for 'mpol' [ 986.208131][ T5812] usb 4-1: USB disconnect, device number 51 [ 986.276271][T13307] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2100'. [ 990.195344][T13349] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2111'. [ 990.689897][ T5812] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 991.494746][ T5812] usb 4-1: Using ep0 maxpacket: 16 [ 991.514486][ T5812] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 991.825346][ T5812] usb 4-1: config 0 interface 0 has no altsetting 0 [ 991.852627][ T5812] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 991.903239][ T5812] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 991.954669][ T5812] usb 4-1: config 0 descriptor?? [ 992.396532][ T5812] nzxt-smart2 0003:1E71:2009.000F: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 993.005392][ T5812] usb 4-1: USB disconnect, device number 52 [ 993.216895][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.245360][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 997.135680][T12204] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 997.732834][T12204] usb 3-1: Using ep0 maxpacket: 16 [ 997.766071][T12204] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 997.784584][T12204] usb 3-1: config 0 interface 0 has no altsetting 0 [ 997.793384][T12204] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 997.803463][T12204] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 997.820763][T12204] usb 3-1: config 0 descriptor?? [ 999.799408][T12204] usbhid 3-1:0.0: can't add hid device: -71 [ 999.814636][T12204] usbhid: probe of 3-1:0.0 failed with error -71 [ 999.823330][T12204] usb 3-1: USB disconnect, device number 56 [ 1002.943530][T13486] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2142'. [ 1004.304784][T13507] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 1004.664862][T12204] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1004.911304][T12204] usb 3-1: Using ep0 maxpacket: 16 [ 1005.036803][T12204] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 1005.143006][T12204] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1005.210011][T12204] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 1005.292627][T12204] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1005.324194][T12204] usb 3-1: config 0 descriptor?? [ 1005.654626][T10278] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1005.894401][T10278] usb 4-1: Using ep0 maxpacket: 32 [ 1005.920488][T10278] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 1006.555877][T10278] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1006.590580][T10278] usb 4-1: config 0 has no interface number 0 [ 1006.713276][T10278] usb 4-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1006.731273][T10278] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1006.759256][T12204] usbhid 3-1:0.0: can't add hid device: -71 [ 1006.765383][T12204] usbhid: probe of 3-1:0.0 failed with error -71 [ 1006.773320][T12204] usb 3-1: USB disconnect, device number 57 [ 1006.799254][T10278] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1006.807949][T10278] usb 4-1: Product: syz [ 1006.825701][T10278] usb 4-1: Manufacturer: syz [ 1006.830345][T10278] usb 4-1: SerialNumber: syz [ 1006.861879][T10278] usb 4-1: config 0 descriptor?? [ 1006.887023][T10278] radio-si470x 4-1:0.35: could not find interrupt in endpoint [ 1006.921441][T10278] radio-si470x: probe of 4-1:0.35 failed with error -5 [ 1007.091415][T10278] radio-raremono 4-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 1007.649473][T10278] radio-raremono 4-1:0.35: raremono_cmd_main failed (-71) [ 1007.667524][T10278] radio-raremono 4-1:0.35: V4L2 device registered as radio48 [ 1008.350416][T10278] usb 4-1: USB disconnect, device number 53 [ 1008.357696][T10278] radio-raremono 4-1:0.35: Thanko's Raremono disconnected [ 1008.414688][ T5783] Bluetooth: hci3: command 0x0406 tx timeout [ 1008.584454][T13579] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2162'. [ 1009.334527][ T5832] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1009.562973][ T5832] usb 4-1: Using ep0 maxpacket: 8 [ 1009.622085][ T5832] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1009.706463][ T5832] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1009.724912][ T5832] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.741077][ T5832] usb 4-1: Product: syz [ 1009.751199][ T5832] usb 4-1: Manufacturer: syz [ 1009.761596][ T5832] usb 4-1: SerialNumber: syz [ 1009.769479][ T5832] usb 4-1: config 0 descriptor?? [ 1009.795902][T13584] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1009.814571][ T5832] streamzap 4-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 1010.032719][ T8460] usb 4-1: USB disconnect, device number 54 [ 1010.250213][ T5832] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1010.686562][ T5832] usb 1-1: Using ep0 maxpacket: 16 [ 1010.701770][ T5832] usb 1-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 1010.722045][ T5832] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1011.165566][ T5832] usb 1-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 1011.191773][ T5832] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1011.234555][ T5756] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1011.258441][ T5832] usb 1-1: config 0 descriptor?? [ 1011.329594][T13617] autofs4:pid:13617:autofs_fill_super: called with bogus options [ 1011.386627][T13620] Driver unsupported XDP return value 0 on prog (id 236) dev N/A, expect packet loss! [ 1011.458219][ T5756] usb 4-1: Using ep0 maxpacket: 16 [ 1011.477366][ T5756] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1011.491148][ T5756] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1011.508847][ T5756] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1011.520414][ T5756] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 1011.537254][ T5756] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1011.551816][ T5756] usb 4-1: config 0 descriptor?? [ 1011.587590][T13627] netlink: 'syz.2.2178': attribute type 1 has an invalid length. [ 1011.644669][T13627] bond1: (slave bridge1): making interface the new active one [ 1011.653887][T13627] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 1011.850889][T12582] Bluetooth: hci3: command 0x0406 tx timeout [ 1012.238656][ T5756] hid-picolcd 0003:04D8:F002.0010: No report with id 0xf3 found [ 1012.515462][ T5756] hid-picolcd 0003:04D8:F002.0010: No report with id 0xf4 found [ 1012.526984][ T5756] usb 4-1: USB disconnect, device number 55 [ 1012.546882][ T5832] usbhid 1-1:0.0: can't add hid device: -71 [ 1012.556781][ T5832] usbhid: probe of 1-1:0.0 failed with error -71 [ 1012.573076][ T5832] usb 1-1: USB disconnect, device number 59 [ 1015.417223][T13638] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1015.531494][T13668] tmpfs: Bad value for 'mpol' [ 1016.864595][ T5756] usb 3-1: new full-speed USB device number 58 using dummy_hcd [ 1017.066108][ T5756] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1017.079627][ T5756] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 1017.090308][ T5756] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1017.117104][ T5756] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1017.140878][ T5756] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1017.159562][ T5756] usb 3-1: Product: syz [ 1017.163797][ T5756] usb 3-1: Manufacturer: syz [ 1017.169018][ T5756] usb 3-1: SerialNumber: syz [ 1017.179211][ T5756] usb 3-1: config 0 descriptor?? [ 1017.189602][ T5756] radio-si470x 3-1:0.0: could not find interrupt in endpoint [ 1017.197503][ T5756] radio-si470x: probe of 3-1:0.0 failed with error -5 [ 1017.214713][ T5756] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1017.254640][ T5831] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1017.513040][T13696] tmpfs: Bad value for 'mpol' [ 1018.244690][ T5831] usb 2-1: Using ep0 maxpacket: 16 [ 1018.282640][ T5831] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 1018.342180][ T5831] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1018.362236][ T5831] usb 2-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 1018.374384][ T5831] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1018.505755][ T5831] usb 2-1: config 0 descriptor?? [ 1019.602162][ T8460] usb 3-1: USB disconnect, device number 58 [ 1019.699776][ T5831] usbhid 2-1:0.0: can't add hid device: -71 [ 1019.723674][ T5831] usbhid: probe of 2-1:0.0 failed with error -71 [ 1019.861843][ T5831] usb 2-1: USB disconnect, device number 46 [ 1020.334601][T13713] binder: 13708:13713 unknown command 1074553619 [ 1020.340965][T13713] binder: 13708:13713 ioctl c0306201 200000000000 returned -22 [ 1020.360038][T13712] comedi comedi0: Minor 3 could not be opened [ 1021.158485][T13731] random: crng reseeded on system resumption [ 1021.464954][T13736] tmpfs: Bad value for 'mpol' [ 1021.751497][T10278] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 1022.132569][T10278] usb 2-1: config 0 has an invalid descriptor of length 185, skipping remainder of the config [ 1022.401979][T10278] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 1022.412662][T10278] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1022.430750][T10278] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1022.440107][T10278] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1022.448298][T10278] usb 2-1: Product: syz [ 1022.452602][T10278] usb 2-1: Manufacturer: syz [ 1022.457660][T10278] usb 2-1: SerialNumber: syz [ 1022.466143][T10278] usb 2-1: config 0 descriptor?? [ 1022.471836][T13723] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1022.495691][T10278] radio-si470x 2-1:0.0: could not find interrupt in endpoint [ 1022.504740][T10278] radio-si470x: probe of 2-1:0.0 failed with error -5 [ 1022.514703][T10278] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1022.794415][ T5831] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1022.974489][ T5831] usb 1-1: Using ep0 maxpacket: 16 [ 1022.997815][ T5831] usb 1-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 1023.010789][ T5831] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1023.017675][ T5831] usb 1-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 1023.026796][ T5831] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1023.037167][ T5831] usb 1-1: config 0 descriptor?? [ 1023.982320][ T5831] usbhid 1-1:0.0: can't add hid device: -71 [ 1023.991941][T10278] usb 2-1: USB disconnect, device number 47 [ 1024.029165][ T5831] usbhid: probe of 1-1:0.0 failed with error -71 [ 1024.186197][ T5831] usb 1-1: USB disconnect, device number 60 [ 1025.125972][T13768] capability: warning: `syz.1.2219' uses 32-bit capabilities (legacy support in use) [ 1025.324511][ T5832] usb 4-1: new full-speed USB device number 56 using dummy_hcd [ 1025.480080][T13781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2218'. [ 1026.396788][ T5832] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 1026.414381][ T5832] usb 4-1: config 0 has no interface number 0 [ 1026.425289][ T5832] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 1026.446466][ T5832] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 1026.458568][ T5832] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1026.471988][ T5832] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1026.481481][ T5832] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1026.492664][T13788] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2226'. [ 1026.510411][ T5832] usb 4-1: config 0 descriptor?? [ 1026.621512][T13773] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1027.765112][ T5832] ldusb 4-1:0.55: Interrupt in endpoint not found [ 1027.887886][ T5832] usb 4-1: USB disconnect, device number 56 [ 1027.996298][T13788] SET target dimension over the limit! [ 1028.364416][T10278] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1028.554580][T10278] usb 3-1: Using ep0 maxpacket: 32 [ 1028.728235][T10278] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 1028.738801][T10278] usb 3-1: config 0 has no interface number 0 [ 1028.746399][T10278] usb 3-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1029.564983][T10278] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1029.575035][T10278] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.583090][T10278] usb 3-1: Product: syz [ 1029.595644][T10278] usb 3-1: Manufacturer: syz [ 1029.612904][T10278] usb 3-1: SerialNumber: syz [ 1029.627482][T10278] usb 3-1: config 0 descriptor?? [ 1029.823148][T10278] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1030.427163][T10278] usb 3-1: qt2_setup_urbs - submit read urb failed -8 [ 1030.439280][T10278] quatech2: probe of 3-1:0.51 failed with error -8 [ 1030.746333][ T5756] usb 3-1: USB disconnect, device number 59 [ 1030.801194][T13824] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2237'. [ 1031.045514][T13826] Cannot find add_set index 0 as target [ 1031.304957][T13831] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2235'. [ 1034.005115][ T5830] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1034.224508][ T5830] usb 1-1: Using ep0 maxpacket: 8 [ 1034.234195][ T5830] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1034.319305][ T5830] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1034.417302][ T5830] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1034.660435][ T5830] pvrusb2: ********** [ 1034.696670][ T5830] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1034.923825][ T5830] pvrusb2: Important functionality might not be entirely working. [ 1035.064551][ T5830] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1035.093554][ T5830] pvrusb2: ********** [ 1035.225063][ T2320] pvrusb2: Invalid write control endpoint [ 1035.318033][ T5830] usb 1-1: USB disconnect, device number 61 [ 1035.333259][ T2320] pvrusb2: Invalid write control endpoint [ 1035.344382][ T2320] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1035.364358][ T2320] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1035.372108][ T2320] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1035.398526][ T2320] pvrusb2: Device being rendered inoperable [ 1035.413052][ T2320] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1035.430679][ T2320] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1035.464372][ T2320] pvrusb2: Attached sub-driver cx25840 [ 1035.480449][ T2320] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1035.498780][ T2320] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1035.634432][T10278] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1035.826843][T10278] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1035.844367][T10278] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1035.868672][ T8460] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1035.891546][T10278] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1035.904405][T10278] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1035.918629][T10278] usb 4-1: Manufacturer: syz [ 1035.926153][T10278] usb 4-1: config 0 descriptor?? [ 1036.084624][ T8460] usb 2-1: Using ep0 maxpacket: 32 [ 1036.172309][ T8460] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1036.205370][ T8460] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1036.216540][ T8460] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1036.224767][ T8460] usb 2-1: Product: syz [ 1036.230342][ T8460] usb 2-1: Manufacturer: syz [ 1036.235212][ T8460] usb 2-1: SerialNumber: syz [ 1036.296022][ T8460] usb 2-1: config 0 descriptor?? [ 1036.414815][ T8460] smsc75xx v1.0.0 [ 1036.423151][ T8460] smsc75xx 2-1:0.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1036.465968][ T8460] smsc75xx: probe of 2-1:0.0 failed with error -22 [ 1036.832080][T10278] uclogic 0003:256C:006D.0011: failed retrieving string descriptor #200: -71 [ 1036.889122][T10278] uclogic 0003:256C:006D.0011: failed retrieving pen parameters: -71 [ 1036.909325][T10278] uclogic 0003:256C:006D.0011: failed probing pen v2 parameters: -71 [ 1036.940365][T10278] uclogic 0003:256C:006D.0011: failed probing parameters: -71 [ 1036.962082][T10278] uclogic: probe of 0003:256C:006D.0011 failed with error -71 [ 1036.992532][T10278] usb 4-1: USB disconnect, device number 57 [ 1037.089953][T13879] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2252'. [ 1037.113112][T13879] syz_tun: entered promiscuous mode [ 1037.122436][T13879] macvtap1: entered promiscuous mode [ 1037.130360][T13879] macvtap1: entered allmulticast mode [ 1037.136994][T13879] syz_tun: entered allmulticast mode [ 1037.148919][T13880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2252'. [ 1037.176861][T13880] syz_tun: left allmulticast mode [ 1037.182471][T13880] syz_tun: left promiscuous mode [ 1037.567471][T13889] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2251'. [ 1038.169175][T13895] tmpfs: Bad value for 'mpol' [ 1038.843078][ T5756] usb 2-1: USB disconnect, device number 48 [ 1043.054631][ T5831] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1043.898714][ T5831] usb 2-1: Using ep0 maxpacket: 32 [ 1043.915884][ T5831] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1044.022151][T13942] Bluetooth: MGMT ver 1.22 [ 1044.579067][ T5831] usb 2-1: config 0 has no interface number 0 [ 1044.585572][ T5831] usb 2-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1044.601795][ T5831] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1044.611602][ T5831] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.619747][ T5831] usb 2-1: Product: syz [ 1044.624025][ T5831] usb 2-1: Manufacturer: syz [ 1044.634390][ T5831] usb 2-1: SerialNumber: syz [ 1044.647911][ T5831] usb 2-1: config 0 descriptor?? [ 1044.672726][ T5831] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1044.773860][T13948] tmpfs: Bad value for 'mpol' [ 1044.884981][ T5831] usb 2-1: qt2_setup_urbs - submit read urb failed -8 [ 1044.903271][ T5831] quatech2: probe of 2-1:0.51 failed with error -8 [ 1045.264757][ T5756] usb 2-1: USB disconnect, device number 49 [ 1047.644510][ T8] usb 4-1: new full-speed USB device number 58 using dummy_hcd [ 1047.669431][ T27] audit: type=1326 audit(1776205239.856:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13972 comm="syz.2.2280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf89b9c819 code=0x7ffc0000 [ 1047.701648][ T27] audit: type=1326 audit(1776205239.856:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13972 comm="syz.2.2280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf89b9c819 code=0x7ffc0000 [ 1047.724596][ T27] audit: type=1326 audit(1776205239.856:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13972 comm="syz.2.2280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7faf89b9c819 code=0x7ffc0000 [ 1047.748455][ T27] audit: type=1326 audit(1776205239.856:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13972 comm="syz.2.2280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf89b9c819 code=0x7ffc0000 [ 1047.771430][ T27] audit: type=1326 audit(1776205239.856:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13972 comm="syz.2.2280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf89b9c819 code=0x7ffc0000 [ 1047.809084][ T27] audit: type=1326 audit(1776205239.856:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13972 comm="syz.2.2280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7faf89b9c819 code=0x7ffc0000 [ 1047.842399][ T5756] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1047.851975][ T27] audit: type=1326 audit(1776205239.856:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13972 comm="syz.2.2280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf89b9c819 code=0x7ffc0000 [ 1047.875965][ T27] audit: type=1326 audit(1776205239.856:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13972 comm="syz.2.2280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7faf89b9c819 code=0x7ffc0000 [ 1047.901527][ T27] audit: type=1326 audit(1776205239.866:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13972 comm="syz.2.2280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf89b9c819 code=0x7ffc0000 [ 1047.929152][ T27] audit: type=1326 audit(1776205239.866:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13972 comm="syz.2.2280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf89b9c819 code=0x7ffc0000 [ 1047.994656][T12697] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1048.251229][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1048.284639][ T5756] usb 2-1: Using ep0 maxpacket: 16 [ 1048.301046][T12697] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1048.305064][ T8] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1048.310429][T12697] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1048.327576][T12697] usb 1-1: Product: syz [ 1048.327668][ T5756] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1048.332349][T12697] usb 1-1: Manufacturer: syz [ 1048.353113][T12697] usb 1-1: SerialNumber: syz [ 1048.376961][T12697] usb 1-1: config 0 descriptor?? [ 1048.382349][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1048.484475][ T5756] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1048.510621][ T5756] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1048.524509][ T5756] usb 2-1: Product: syz [ 1048.528721][ T5756] usb 2-1: SerialNumber: syz [ 1048.533979][ T8] usb 4-1: config 0 descriptor?? [ 1048.553592][ T8] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1048.566986][ T5756] usb 2-1: config 0 descriptor?? [ 1048.672408][T12697] usb 4-1: USB disconnect, device number 58 [ 1050.025922][T13995] Bluetooth: MGMT ver 1.22 [ 1050.563876][T13999] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2287'. [ 1050.707540][T14000] SET target dimension over the limit! [ 1050.871680][T12697] usb 2-1: USB disconnect, device number 50 [ 1051.510332][T14008] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2290'. [ 1051.556007][T14008] erspan0: entered promiscuous mode [ 1051.561840][T14008] macvtap1: entered promiscuous mode [ 1051.592915][T14008] macvtap1: entered allmulticast mode [ 1051.604649][T14008] erspan0: entered allmulticast mode [ 1051.611275][ T8] usb 1-1: USB disconnect, device number 62 [ 1051.635640][T14009] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2290'. [ 1052.019266][T14020] binder: BINDER_SET_CONTEXT_MGR already set [ 1052.035183][T14020] binder: 14018:14020 ioctl 4018620d 200000004a80 returned -16 [ 1055.050189][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.056670][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.539251][T14044] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2302'. [ 1055.542950][ T5783] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1055.569869][ T5783] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1055.570045][T14044] erspan0: entered promiscuous mode [ 1055.590208][ T5783] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1055.590713][T14044] macvtap1: entered promiscuous mode [ 1055.611809][T14044] macvtap1: entered allmulticast mode [ 1055.618217][T14044] erspan0: entered allmulticast mode [ 1055.618277][ T5783] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1055.629337][T14047] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2302'. [ 1055.644579][ T5783] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1055.652104][ T5783] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1055.750128][T12761] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1055.754471][ T5830] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1055.760947][T12761] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1055.868958][T12761] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1055.880456][T12761] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1055.956494][ T5830] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1055.973073][ T5830] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1055.985417][ T5830] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1055.999660][ T5830] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1056.050199][ T5830] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1056.080699][T12761] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1056.149211][ T5830] usb 4-1: config 0 descriptor?? [ 1056.161198][T12761] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.638873][T12761] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1056.691671][T12761] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.713475][ T5830] usbhid 4-1:0.0: can't add hid device: -71 [ 1056.732667][ T5830] usbhid: probe of 4-1:0.0 failed with error -71 [ 1056.763075][ T5830] usb 4-1: USB disconnect, device number 59 [ 1056.799431][T14045] chnl_net:caif_netlink_parms(): no params data found [ 1057.487728][ T5756] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1057.604975][T14045] bridge0: port 1(bridge_slave_0) entered blocking state [ 1057.612133][T14045] bridge0: port 1(bridge_slave_0) entered disabled state [ 1057.620090][T14045] bridge_slave_0: entered allmulticast mode [ 1057.627374][T14045] bridge_slave_0: entered promiscuous mode [ 1057.653623][T14045] bridge0: port 2(bridge_slave_1) entered blocking state [ 1057.671080][T14045] bridge0: port 2(bridge_slave_1) entered disabled state [ 1057.679737][T14045] bridge_slave_1: entered allmulticast mode [ 1057.688447][T14045] bridge_slave_1: entered promiscuous mode [ 1057.694449][ T5756] usb 1-1: Using ep0 maxpacket: 16 [ 1057.704766][ T5783] Bluetooth: hci1: command tx timeout [ 1057.728745][ T5756] usb 1-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 1057.758864][ T5756] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1057.768138][ T5756] usb 1-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 1057.788642][T14076] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2311'. [ 1057.812542][ T5756] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1057.878716][ T5756] usb 1-1: config 0 descriptor?? [ 1057.884555][T14076] macvtap2: entered promiscuous mode [ 1057.902761][T14076] macvtap2: entered allmulticast mode [ 1057.932049][T14045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1057.965520][T14078] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2311'. [ 1059.472765][T14045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1059.655167][ T5756] usbhid 1-1:0.0: can't add hid device: -71 [ 1059.661224][ T5756] usbhid: probe of 1-1:0.0 failed with error -71 [ 1059.681212][ T5756] usb 1-1: USB disconnect, device number 63 [ 1059.731075][T14045] team0: Port device team_slave_0 added [ 1059.780292][ T5783] Bluetooth: hci1: command tx timeout [ 1059.822517][T14045] team0: Port device team_slave_1 added [ 1059.934176][T14045] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1059.953524][T14045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1059.987426][T14045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1060.048307][T14045] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1060.056014][T14045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1060.088124][T14045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1060.216652][T12761] erspan0 (unregistering): left allmulticast mode [ 1060.764516][T14045] hsr_slave_0: entered promiscuous mode [ 1060.776257][T14045] hsr_slave_1: entered promiscuous mode [ 1060.825559][T14045] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1060.833241][T14045] Cannot create hsr debugfs directory [ 1061.164404][ T8460] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1061.408412][ T8460] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1061.436931][ T8460] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1061.450120][ T8460] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1061.476776][ T8460] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1061.504631][ T8460] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1061.629248][ T8460] usb 1-1: config 0 descriptor?? [ 1061.784425][T14117] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2319'. [ 1061.865814][ T5783] Bluetooth: hci1: command tx timeout [ 1061.912202][T12761] hsr_slave_0: left promiscuous mode [ 1061.960816][T12761] hsr_slave_1: left promiscuous mode [ 1061.987960][T12761] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1062.026156][T12761] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1062.050852][T12761] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1062.090185][T12761] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1062.112818][T12761] bridge_slave_1: left allmulticast mode [ 1062.130676][T12761] bridge_slave_1: left promiscuous mode [ 1062.153733][T12761] bridge0: port 2(bridge_slave_1) entered disabled state [ 1062.212408][T12761] bridge_slave_0: left allmulticast mode [ 1062.225120][T12761] bridge_slave_0: left promiscuous mode [ 1062.241327][T12761] bridge0: port 1(bridge_slave_0) entered disabled state [ 1062.301269][ T8460] usbhid 1-1:0.0: can't add hid device: -71 [ 1062.308855][ T8460] usbhid: probe of 1-1:0.0 failed with error -71 [ 1062.320082][ T8460] usb 1-1: USB disconnect, device number 64 [ 1062.326587][ T788] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1062.349320][T12761] veth1_macvtap: left promiscuous mode [ 1062.363142][T12761] veth0_macvtap: left promiscuous mode [ 1062.369643][T12761] veth1_vlan: left promiscuous mode [ 1062.375642][T12761] veth0_vlan: left promiscuous mode [ 1062.544751][ T788] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 1062.552891][ T788] usb 3-1: config 0 has no interface number 0 [ 1062.568082][ T788] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1062.578347][ T788] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1062.596504][ T788] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1062.617649][ T788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1062.625804][ T788] usb 3-1: Product: syz [ 1062.630072][ T788] usb 3-1: Manufacturer: syz [ 1062.660485][ T788] usb 3-1: SerialNumber: syz [ 1062.677483][ T788] usb 3-1: config 0 descriptor?? [ 1062.683208][T14126] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1062.697051][ T788] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1062.729936][ T788] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1063.194197][ T788] usb 3-1: USB disconnect, device number 60 [ 1063.281861][ T788] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1063.302429][ T8] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1063.310232][ T788] cyberjack 3-1:0.69: device disconnected [ 1063.455073][T12761] team0 (unregistering): Port device team_slave_1 removed [ 1063.504533][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 1063.512067][ T8] usb 1-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 1063.513412][T12761] team0 (unregistering): Port device team_slave_0 removed [ 1063.530350][ T8] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1063.539502][ T8] usb 1-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 1063.549338][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1063.572229][ T8] usb 1-1: config 0 descriptor?? [ 1063.609434][T12761] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1063.670233][T12761] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1063.938543][ T5783] Bluetooth: hci1: command tx timeout [ 1064.126435][ T8] usbhid 1-1:0.0: can't add hid device: -71 [ 1064.132584][ T8] usbhid: probe of 1-1:0.0 failed with error -71 [ 1064.153807][ T8] usb 1-1: USB disconnect, device number 65 [ 1065.526085][T12761] bond0 (unregistering): Released all slaves [ 1065.744970][ T5830] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1066.716185][ T5830] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1066.729600][ T5830] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1066.742400][ T5830] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1066.933786][ T5830] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1066.977928][ T5830] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1067.025438][ T5830] usb 1-1: config 0 descriptor?? [ 1067.433114][T14045] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1067.447328][T14045] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1067.479026][T14045] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1067.512445][T14045] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1067.659051][ T5830] usbhid 1-1:0.0: can't add hid device: -71 [ 1067.674619][ T5830] usbhid: probe of 1-1:0.0 failed with error -71 [ 1067.703098][T14045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1067.710422][ T5830] usb 1-1: USB disconnect, device number 66 [ 1067.740555][T14045] 8021q: adding VLAN 0 to HW filter on device team0 [ 1067.788564][ T3487] bridge0: port 1(bridge_slave_0) entered blocking state [ 1067.795826][ T3487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1067.838708][T12761] bridge0: port 2(bridge_slave_1) entered blocking state [ 1067.845934][T12761] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1068.308667][T14045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1068.383112][T14045] veth0_vlan: entered promiscuous mode [ 1068.420242][T14045] veth1_vlan: entered promiscuous mode [ 1068.453638][T14201] kernel profiling enabled (shift: 63) [ 1068.460708][T14201] profiling shift: 63 too large [ 1068.480045][T14045] veth0_macvtap: entered promiscuous mode [ 1068.502471][T14045] veth1_macvtap: entered promiscuous mode [ 1068.514526][ T5830] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1068.527147][T14045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1068.537875][T14045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1068.548643][T14045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1068.559335][T14045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1068.580736][T14045] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1068.607635][T14045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1068.629431][T14045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1068.643546][T14045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1068.662274][T14045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1068.676130][T14045] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1068.697036][T14045] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1068.708163][T14045] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1068.717705][T14045] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1068.727016][T14045] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1068.734482][ T5830] usb 3-1: Using ep0 maxpacket: 16 [ 1068.774611][ T5830] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 1068.819270][ T5830] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1068.827683][ T5830] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 1068.837931][ T5830] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1068.855243][ T5830] usb 3-1: config 0 descriptor?? [ 1068.881650][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1068.903906][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1068.988987][T12761] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1069.016362][T12761] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1069.414590][ T5830] usbhid 3-1:0.0: can't add hid device: -71 [ 1069.442864][ T5830] usbhid: probe of 3-1:0.0 failed with error -71 [ 1069.456706][ T5830] usb 3-1: USB disconnect, device number 61 [ 1069.587815][T14227] sp0: Synchronizing with TNC [ 1072.964841][ T5830] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1073.176726][ T5830] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1073.208734][ T5830] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1073.220666][ T5830] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1073.239396][ T5830] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1073.249011][ T5830] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1073.285720][ T5830] usb 4-1: config 0 descriptor?? [ 1074.522065][ T5830] usbhid 4-1:0.0: can't add hid device: -71 [ 1074.636890][ T5830] usbhid: probe of 4-1:0.0 failed with error -71 [ 1074.751946][ T5830] usb 4-1: USB disconnect, device number 60 [ 1077.022168][T14294] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2352'. [ 1080.927340][T14337] sp0: Synchronizing with TNC [ 1084.999203][T14366] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2363'. [ 1085.468712][T14371] SET target dimension over the limit! [ 1088.078303][T14396] syz.1.2372 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1088.095338][T14396] ubi31: attaching mtd0 [ 1088.102493][T14396] ubi31: scanning is finished [ 1088.107242][T14396] ubi31: empty MTD device detected [ 1088.255308][ T5783] Bluetooth: Frame is too long (len 12, expected len 4) [ 1088.848394][T14396] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 1089.279179][ T5766] syz_tun (unregistering): left allmulticast mode [ 1089.654813][T12582] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1089.668398][T12582] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1089.677799][T12582] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1089.686358][T12582] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1089.694746][T12582] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1089.711043][T12582] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1090.120861][T12761] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1090.389421][T12761] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1090.545980][T12761] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1091.561195][T12761] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1091.854921][ T5783] Bluetooth: hci0: command tx timeout [ 1093.203811][T14409] chnl_net:caif_netlink_parms(): no params data found [ 1093.529210][ T5756] usb 4-1: new full-speed USB device number 61 using dummy_hcd [ 1093.562037][T14409] bridge0: port 1(bridge_slave_0) entered blocking state [ 1093.578601][T14409] bridge0: port 1(bridge_slave_0) entered disabled state [ 1093.592951][T14409] bridge_slave_0: entered allmulticast mode [ 1093.622546][T14409] bridge_slave_0: entered promiscuous mode [ 1093.659747][T14409] bridge0: port 2(bridge_slave_1) entered blocking state [ 1093.669122][T14409] bridge0: port 2(bridge_slave_1) entered disabled state [ 1093.682535][T14409] bridge_slave_1: entered allmulticast mode [ 1093.692276][T14409] bridge_slave_1: entered promiscuous mode [ 1093.752156][ T5756] usb 4-1: not running at top speed; connect to a high speed hub [ 1093.801033][ T5756] usb 4-1: config 64 has an invalid interface number: 232 but max is 0 [ 1093.839777][ T5756] usb 4-1: config 64 has no interface number 0 [ 1093.861616][T14409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1093.887348][ T5756] usb 4-1: config 64 interface 232 has no altsetting 0 [ 1093.927549][ T5756] usb 4-1: New USB device found, idVendor=2c42, idProduct=1605, bcdDevice=37.87 [ 1093.936855][ T5783] Bluetooth: hci0: command tx timeout [ 1093.946913][ T5756] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1093.961686][ T5756] usb 4-1: Product: syz [ 1093.967719][T14409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1093.977751][ T5756] usb 4-1: Manufacturer: syz [ 1093.982418][ T5756] usb 4-1: SerialNumber: syz [ 1094.492203][ T5756] f81232 4-1:64.232: f81534a converter detected [ 1094.532194][ T5756] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 1094.542772][ T5756] f81534a: probe of ttyUSB0 failed with error -5 [ 1094.558666][ T5756] usb 4-1: USB disconnect, device number 61 [ 1094.572651][ T5756] f81232 4-1:64.232: device disconnected [ 1094.671658][T14409] team0: Port device team_slave_0 added [ 1094.723084][T12761] erspan0 (unregistering): left allmulticast mode [ 1094.856752][T14409] team0: Port device team_slave_1 added [ 1094.898159][T14409] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1094.905364][T14409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1094.974415][T14409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1095.049920][T14409] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1095.081567][T14409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1095.220597][T14409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1096.489287][T14464] Falling back ldisc for ptm0. [ 1096.558115][ T5783] Bluetooth: hci0: command tx timeout [ 1097.206387][T14409] hsr_slave_0: entered promiscuous mode [ 1097.224061][T14409] hsr_slave_1: entered promiscuous mode [ 1097.236409][T14409] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1097.249099][T14409] Cannot create hsr debugfs directory [ 1098.185890][T12761] hsr_slave_0: left promiscuous mode [ 1098.214826][T12761] hsr_slave_1: left promiscuous mode [ 1098.222414][T12761] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1098.230505][T12761] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1098.283447][T12761] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1098.303596][T12761] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1098.319473][T12761] bridge_slave_1: left allmulticast mode [ 1098.328144][T12761] bridge_slave_1: left promiscuous mode [ 1098.334074][T12761] bridge0: port 2(bridge_slave_1) entered disabled state [ 1098.351829][T12761] bridge_slave_0: left allmulticast mode [ 1098.358112][T12761] bridge_slave_0: left promiscuous mode [ 1098.363913][T12761] bridge0: port 1(bridge_slave_0) entered disabled state [ 1098.603522][ T5783] Bluetooth: hci0: command tx timeout [ 1098.761424][T12761] veth1_macvtap: left promiscuous mode [ 1098.813988][T12761] veth0_macvtap: left promiscuous mode [ 1098.921418][T12761] veth1_vlan: left promiscuous mode [ 1098.944910][T12761] veth0_vlan: left promiscuous mode [ 1099.425803][T12761] bond1 (unregistering): (slave bridge1): Releasing active interface [ 1099.629956][T12761] bond1 (unregistering): Released all slaves [ 1100.946723][T12761] team0 (unregistering): Port device team_slave_1 removed [ 1101.023605][T12761] team0 (unregistering): Port device team_slave_0 removed [ 1101.391314][T12761] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1101.634628][T12761] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1102.722877][T14524] binder_alloc: 14523: binder_alloc_buf, no vma [ 1102.782149][T12761] bond0 (unregistering): Released all slaves [ 1104.317283][T14551] tmpfs: Bad value for 'mpol' [ 1104.530542][T14409] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1104.581234][T14409] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1104.639894][T14409] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1104.684774][T14409] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1104.779309][T14563] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2405'. [ 1105.350518][T14564] binder_alloc: 14562: binder_alloc_buf, no vma [ 1105.456547][T14409] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1105.491416][T14409] 8021q: adding VLAN 0 to HW filter on device team0 [ 1105.540458][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 1105.547857][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1105.587918][T12761] bridge0: port 2(bridge_slave_1) entered blocking state [ 1105.595125][T12761] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1105.861023][T14576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2410'. [ 1106.230735][T14409] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1106.888450][T14409] veth0_vlan: entered promiscuous mode [ 1107.066282][T14409] veth1_vlan: entered promiscuous mode [ 1107.218727][T14614] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2414'. [ 1107.876240][T14409] veth0_macvtap: entered promiscuous mode [ 1107.917278][T14409] veth1_macvtap: entered promiscuous mode [ 1107.969837][T14409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1107.997798][T14409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.018214][T14409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1108.029547][T14409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.046736][T14409] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1108.094111][T14625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2418'. [ 1108.147848][T14409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1108.160436][T14409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.175918][T14409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1108.189014][T14409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.221490][T14409] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1108.420353][T14409] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1108.524790][T14409] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1108.534575][T14409] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1108.545769][T14409] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1109.121358][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1109.185033][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1109.410152][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1109.419563][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1110.764416][T14650] tmpfs: Bad value for 'mpol' [ 1111.076939][T14663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2426'. [ 1111.881435][T14668] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2427'. [ 1115.078817][T14705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2436'. [ 1116.192744][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.204603][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.234974][ T5783] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1117.262335][ T5783] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1117.449418][T12761] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1117.654057][T12761] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1118.191788][T12761] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1118.625353][T12761] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1119.086166][T14744] ubi31: attaching mtd0 [ 1119.092417][T14744] ubi31: scanning is finished [ 1119.158648][ T5783] Bluetooth: Frame is too long (len 12, expected len 4) [ 1119.295286][T14707] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1120.327501][T14744] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 1121.856050][T14765] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2445'. [ 1122.041493][T12582] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1122.052298][T12582] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1122.115492][T12582] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1122.146107][T12582] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1122.162147][T12582] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1122.169820][T12582] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1123.492107][T14795] ubi31: attaching mtd0 [ 1123.498773][T14795] ubi31: scanning is finished [ 1123.583872][T12582] Bluetooth: Frame is too long (len 12, expected len 4) [ 1124.178877][T14795] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 1124.256441][T12582] Bluetooth: hci2: command tx timeout [ 1124.665983][ T5831] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1124.695251][T14771] chnl_net:caif_netlink_parms(): no params data found [ 1124.934374][ T5831] usb 3-1: Using ep0 maxpacket: 16 [ 1125.030954][T12761] hsr_slave_0: left promiscuous mode [ 1125.037331][T12761] hsr_slave_1: left promiscuous mode [ 1125.061033][T12761] veth0_macvtap: left promiscuous mode [ 1125.067098][T12761] veth1_vlan: left promiscuous mode [ 1125.072446][T12761] veth0_vlan: left promiscuous mode [ 1126.204656][ T5831] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1126.212923][ T5831] usb 3-1: config 0 has no interface number 0 [ 1126.334791][T12582] Bluetooth: hci2: command tx timeout [ 1128.168140][ T5831] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1128.191957][ T5831] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1128.214588][ T5831] usb 3-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 1128.223889][ T5831] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1128.295727][ T5831] usb 3-1: config 0 descriptor?? [ 1128.312497][ T5831] usb 3-1: can't set config #0, error -71 [ 1128.335167][ T5831] usb 3-1: USB disconnect, device number 62 [ 1128.437982][T12582] Bluetooth: hci2: command tx timeout [ 1128.815348][ T5830] usb 1-1: new full-speed USB device number 67 using dummy_hcd [ 1129.026474][ T5830] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 1129.034846][ T5830] usb 1-1: config 0 has no interface number 0 [ 1129.041014][ T5830] usb 1-1: config 0 interface 41 has no altsetting 0 [ 1129.059490][T12761] bond0 (unregistering): Released all slaves [ 1129.067038][ T5830] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1129.076299][ T5830] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1129.084769][ T5830] usb 1-1: Product: syz [ 1129.088956][ T5830] usb 1-1: Manufacturer: syz [ 1129.093583][ T5830] usb 1-1: SerialNumber: syz [ 1129.103292][ T5830] usb 1-1: config 0 descriptor?? [ 1129.246739][T14839] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2456'. [ 1129.325236][T14771] bridge0: port 1(bridge_slave_0) entered blocking state [ 1129.332862][T14771] bridge0: port 1(bridge_slave_0) entered disabled state [ 1129.340525][T14771] bridge_slave_0: entered allmulticast mode [ 1129.348550][T14771] bridge_slave_0: entered promiscuous mode [ 1129.374380][T14771] bridge0: port 2(bridge_slave_1) entered blocking state [ 1129.381921][T14771] bridge0: port 2(bridge_slave_1) entered disabled state [ 1129.392017][T14771] bridge_slave_1: entered allmulticast mode [ 1129.413217][T14771] bridge_slave_1: entered promiscuous mode [ 1129.501481][T14771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1129.515683][T14771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1129.890162][T14848] Bluetooth: MGMT ver 1.22 [ 1129.981194][T14771] team0: Port device team_slave_0 added [ 1130.049630][ T5830] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 1130.055443][T14771] team0: Port device team_slave_1 added [ 1130.271948][T14771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1130.282489][T14771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1130.350037][T14771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1130.384164][T14771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1130.398000][ T5830] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 1130.415775][T14771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1130.444580][ T5830] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 1130.462441][ T5830] CoreChips: probe of 1-1:0.41 failed with error -71 [ 1130.485996][ T5830] usb 1-1: USB disconnect, device number 67 [ 1130.499832][T12582] Bluetooth: hci2: command tx timeout [ 1130.506580][T14771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1130.620545][T14771] hsr_slave_0: entered promiscuous mode [ 1130.635405][T14771] hsr_slave_1: entered promiscuous mode [ 1130.652946][T14771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1130.662271][T14771] Cannot create hsr debugfs directory [ 1131.343855][T14875] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2464'. [ 1133.000555][T14893] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2467'. [ 1133.830672][T14771] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1133.877823][T14771] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1133.955035][T14771] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1133.976390][T14771] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1134.228694][T14771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1134.307476][T14771] 8021q: adding VLAN 0 to HW filter on device team0 [ 1134.321694][T12761] bridge0: port 1(bridge_slave_0) entered blocking state [ 1134.328917][T12761] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1134.404965][T12761] bridge0: port 2(bridge_slave_1) entered blocking state [ 1134.412210][T12761] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1134.657436][T14771] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1135.301660][T14945] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2477'. [ 1135.621097][T14771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1136.018258][T14771] veth0_vlan: entered promiscuous mode [ 1136.032962][T14771] veth1_vlan: entered promiscuous mode [ 1136.178769][T14771] veth0_macvtap: entered promiscuous mode [ 1136.209908][T14771] veth1_macvtap: entered promiscuous mode [ 1136.241557][T14771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1136.284321][T14771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1136.314359][T14771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1136.341034][T14771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1136.365269][T14771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1136.389406][T14771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1136.430001][T14771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1136.472740][T14771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1136.524399][T14771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1136.554394][T14771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1136.579524][T14771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1136.636757][T14771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1136.787349][T14771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1136.837801][T14771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1136.896091][T14771] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1136.929470][T14771] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1136.961372][T14771] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1136.999203][T14771] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1137.285443][ T3468] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1137.293323][ T3468] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1137.455131][ T3487] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1137.467035][ T3487] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1141.461630][ T5783] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1141.476926][ T5783] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1141.497275][ T5783] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1141.621101][ T5783] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1141.637691][ T5783] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1141.646451][ T5783] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1142.330879][T15023] chnl_net:caif_netlink_parms(): no params data found [ 1143.291179][T15023] bridge0: port 1(bridge_slave_0) entered blocking state [ 1143.346972][T15023] bridge0: port 1(bridge_slave_0) entered disabled state [ 1143.357134][T15023] bridge_slave_0: entered allmulticast mode [ 1143.406388][T15074] ubi31: attaching mtd0 [ 1143.427810][T15074] ubi31: scanning is finished [ 1143.512411][T12582] Bluetooth: Frame is too long (len 12, expected len 4) [ 1143.678868][T15074] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1143.686653][T15074] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1143.693996][T15074] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1143.701410][T15074] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 1143.709406][T15074] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1143.716728][T15074] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1143.725042][T15074] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3176695062 [ 1143.735244][T15074] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1143.784687][T12582] Bluetooth: hci4: command tx timeout [ 1143.815938][T15076] ubi31: background thread "ubi_bgt31d" started, PID 15076 [ 1143.838511][T15023] bridge_slave_0: entered promiscuous mode [ 1143.908712][T15023] bridge0: port 2(bridge_slave_1) entered blocking state [ 1143.946694][T15023] bridge0: port 2(bridge_slave_1) entered disabled state [ 1143.953967][T15023] bridge_slave_1: entered allmulticast mode [ 1144.122418][T15023] bridge_slave_1: entered promiscuous mode [ 1144.599060][T15023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1144.644059][T15023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1145.456508][T15023] team0: Port device team_slave_0 added [ 1145.487797][T15023] team0: Port device team_slave_1 added [ 1145.597219][T15023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1145.628818][T15023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1145.725299][T15023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1145.766978][T15023] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1145.774063][T15023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1145.824940][T15023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1145.854411][T12582] Bluetooth: hci4: command tx timeout [ 1145.880662][T15023] hsr_slave_0: entered promiscuous mode [ 1145.900276][T15023] hsr_slave_1: entered promiscuous mode [ 1145.914382][T15023] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1145.927854][T15023] Cannot create hsr debugfs directory [ 1146.196332][T15023] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1146.926742][T15023] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1147.096286][T15023] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1147.149870][T15113] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2511'. [ 1147.682131][T15023] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1147.934803][T12582] Bluetooth: hci4: command tx timeout [ 1148.103523][T15023] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1148.151681][T15023] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1148.163240][T15023] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1148.177568][T15023] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1148.972819][T15023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1149.005587][T15023] 8021q: adding VLAN 0 to HW filter on device team0 [ 1149.036509][T14615] bridge0: port 1(bridge_slave_0) entered blocking state [ 1149.043929][T14615] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1149.114538][T14615] bridge0: port 2(bridge_slave_1) entered blocking state [ 1149.121700][T14615] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1149.350860][T15023] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1149.466898][T15165] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2524'. [ 1149.887227][T15023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1150.012688][T15023] veth0_vlan: entered promiscuous mode [ 1150.015395][T12582] Bluetooth: hci4: command tx timeout [ 1150.067153][T15179] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2527'. [ 1150.113616][T15023] veth1_vlan: entered promiscuous mode [ 1150.183373][T15183] SET target dimension over the limit! [ 1150.688202][T15023] veth0_macvtap: entered promiscuous mode [ 1150.723506][T15023] veth1_macvtap: entered promiscuous mode [ 1150.798521][T15023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1150.834301][T15023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1150.844167][T15023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1150.914956][T15023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1150.950017][T15023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1150.981179][T15023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1151.019928][T15023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1151.052406][T15023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1151.082103][T15023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1151.132799][T15023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1151.163417][T15023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1151.195279][T15023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1151.227559][T15023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1151.272463][T15023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1151.329889][T15023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1151.363095][T15023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1151.396718][T15023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1151.421898][T15023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1151.457011][T15023] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.640255][T15023] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.700327][T15023] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.832219][T15023] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1152.293690][T14615] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1152.301664][T14615] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1152.391637][ T27] kauditd_printk_skb: 58 callbacks suppressed [ 1152.391671][ T27] audit: type=1326 audit(1776205344.556:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15158 comm="syz.3.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98f519c819 code=0x7ffc0000 [ 1152.640354][ T27] audit: type=1326 audit(1776205344.556:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15158 comm="syz.3.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98f519c819 code=0x7ffc0000 [ 1152.687631][T15214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2532'. [ 1152.716890][T15212] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2532'. [ 1152.734320][ T27] audit: type=1326 audit(1776205344.566:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15158 comm="syz.3.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7f98f519c819 code=0x7ffc0000 [ 1152.810796][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1152.855957][ T27] audit: type=1326 audit(1776205344.566:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15158 comm="syz.3.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98f519c819 code=0x7ffc0000 [ 1152.874947][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1152.878856][ T27] audit: type=1326 audit(1776205344.566:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15158 comm="syz.3.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98f519c819 code=0x7ffc0000 [ 1152.910225][ T27] audit: type=1326 audit(1776205344.566:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15158 comm="syz.3.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f98f519c819 code=0x7ffc0000 [ 1152.932637][ T27] audit: type=1326 audit(1776205344.566:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15158 comm="syz.3.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98f519c819 code=0x7ffc0000 [ 1152.969069][ T27] audit: type=1326 audit(1776205344.576:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15158 comm="syz.3.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98f519c819 code=0x7ffc0000 [ 1153.010082][ T27] audit: type=1326 audit(1776205344.576:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15158 comm="syz.3.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f98f519c819 code=0x7ffc0000 [ 1153.036155][ T27] audit: type=1326 audit(1776205344.576:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15158 comm="syz.3.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98f519c819 code=0x7ffc0000 [ 1155.614958][T15245] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2542'. [ 1155.652263][T15245] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2542'. [ 1158.826123][T15287] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2553'. [ 1158.965706][T15293] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2553'. [ 1163.384896][T15352] SET target dimension over the limit! [ 1163.784061][T15350] overlayfs: failed to resolve './file0': -2 [ 1164.714065][T15377] tmpfs: Bad value for 'mpol' [ 1165.633832][T15382] 8021q: VLANs not supported on gre0 [ 1169.276620][T15409] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2584'. [ 1170.022235][T15415] ubi: mtd0 is already attached to ubi31 [ 1170.039788][T12582] Bluetooth: Frame is too long (len 12, expected len 4) [ 1173.150424][T15456] ubi: mtd0 is already attached to ubi31 [ 1173.159132][T12582] Bluetooth: Frame is too long (len 12, expected len 4) [ 1175.734981][T15483] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2603'. [ 1175.775398][T15483] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2603'. [ 1177.456875][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.485382][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1179.314026][T15529] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2613'. [ 1179.390017][T15532] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2613'. [ 1181.713079][T15557] tmpfs: Bad value for 'mpol' [ 1182.684546][ T8460] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1182.690223][T15562] SET target dimension over the limit! [ 1182.896927][ T8460] usb 2-1: Using ep0 maxpacket: 16 [ 1183.018688][ T8460] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 1183.033826][ T8460] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1183.041229][ T8460] usb 2-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 1183.052626][ T8460] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1183.069098][ T8460] usb 2-1: config 0 descriptor?? [ 1184.789386][ T8460] usbhid 2-1:0.0: can't add hid device: -71 [ 1184.847857][ T8460] usbhid: probe of 2-1:0.0 failed with error -71 [ 1184.902119][ T8460] usb 2-1: USB disconnect, device number 51 [ 1185.495837][T15587] tmpfs: Bad value for 'mpol' [ 1185.512663][ T5832] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1186.367728][ T5832] usb 1-1: Using ep0 maxpacket: 16 [ 1186.419978][ T5832] usb 1-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 1186.479511][ T5832] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1186.503735][ T5832] usb 1-1: config 0 descriptor?? [ 1187.018474][ T5832] lenovo 0003:17EF:6067.0012: unknown main item tag 0x0 [ 1187.029843][ T5832] lenovo 0003:17EF:6067.0012: unknown main item tag 0x0 [ 1187.037890][ T5832] lenovo 0003:17EF:6067.0012: unknown main item tag 0x0 [ 1187.045230][ T5832] lenovo 0003:17EF:6067.0012: unknown main item tag 0x0 [ 1187.052477][ T5832] lenovo 0003:17EF:6067.0012: unknown main item tag 0x0 [ 1187.060121][ T5832] lenovo 0003:17EF:6067.0012: unknown main item tag 0x0 [ 1187.067436][ T5832] lenovo 0003:17EF:6067.0012: unknown main item tag 0x0 [ 1187.074730][ T5832] lenovo 0003:17EF:6067.0012: unknown main item tag 0x0 [ 1187.081862][ T5832] lenovo 0003:17EF:6067.0012: unknown main item tag 0x0 [ 1187.097477][ T5832] lenovo 0003:17EF:6067.0012: unknown main item tag 0x0 [ 1187.106327][ T5832] lenovo 0003:17EF:6067.0012: unknown main item tag 0x0 [ 1187.113309][ T5832] lenovo 0003:17EF:6067.0012: unknown main item tag 0x0 [ 1187.122271][ T5832] lenovo 0003:17EF:6067.0012: unknown main item tag 0x0 [ 1187.132273][ T5832] lenovo 0003:17EF:6067.0012: unknown main item tag 0x0 [ 1187.144738][ T5832] lenovo 0003:17EF:6067.0012: unknown main item tag 0x0 [ 1187.189857][ T5832] lenovo 0003:17EF:6067.0012: unknown main item tag 0x0 [ 1187.221179][ T5832] lenovo 0003:17EF:6067.0012: unknown main item tag 0x0 [ 1187.246549][ T5832] lenovo 0003:17EF:6067.0012: unknown main item tag 0x0 [ 1187.254680][ T5832] lenovo 0003:17EF:6067.0012: unknown main item tag 0x0 [ 1187.262054][ T5832] lenovo 0003:17EF:6067.0012: unknown main item tag 0x0 [ 1187.270909][ T5832] lenovo 0003:17EF:6067.0012: unknown main item tag 0x0 [ 1187.278502][ T5832] lenovo 0003:17EF:6067.0012: unknown main item tag 0x0 [ 1187.304418][ T5832] lenovo 0003:17EF:6067.0012: unknown main item tag 0x0 [ 1187.343740][ T5832] lenovo 0003:17EF:6067.0012: unknown main item tag 0x0 [ 1187.364506][ T5832] lenovo 0003:17EF:6067.0012: unknown main item tag 0x0 [ 1187.383789][ T5832] lenovo 0003:17EF:6067.0012: unknown main item tag 0x0 [ 1187.393119][ T5832] lenovo 0003:17EF:6067.0012: unknown main item tag 0x0 [ 1187.403572][ T5832] lenovo 0003:17EF:6067.0012: global environment stack underflow [ 1187.411995][ T5832] lenovo 0003:17EF:6067.0012: item 0 0 1 11 parsing failed [ 1187.423653][ T5832] lenovo 0003:17EF:6067.0012: hid_parse failed [ 1187.432735][ T5832] lenovo: probe of 0003:17EF:6067.0012 failed with error -22 [ 1187.466630][ T5832] usb 1-1: USB disconnect, device number 68 [ 1187.887246][T15602] Cannot find add_set index 0 as target [ 1194.256449][T15653] ======================================================= [ 1194.256449][T15653] WARNING: The mand mount option has been deprecated and [ 1194.256449][T15653] and is ignored by this kernel. Remove the mand [ 1194.256449][T15653] option from the mount to silence this warning. [ 1194.256449][T15653] ======================================================= [ 1194.308659][T15654] overlayfs: overlapping lowerdir path [ 1195.710767][T15666] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2653'. [ 1195.733303][T15666] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2653'. [ 1196.674430][ T788] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1197.705702][ T788] usb 4-1: Using ep0 maxpacket: 16 [ 1197.743867][ T788] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1197.784952][ T788] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1197.821963][ T788] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1197.845682][ T788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1197.897930][ T788] usb 4-1: Product: syz [ 1197.916631][ T788] usb 4-1: Manufacturer: syz [ 1197.942970][ T788] usb 4-1: SerialNumber: syz [ 1199.779033][ T788] usb 4-1: 0:2 : does not exist [ 1199.829641][ T788] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 1199.944684][T15701] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2665'. [ 1199.955786][ T788] usb 4-1: USB disconnect, device number 62 [ 1200.013296][T15702] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2665'. [ 1200.085881][T15699] udevd[15699]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1200.375169][T15706] tmpfs: Bad value for 'mpol' [ 1201.934955][T15725] input: syz0 as /devices/virtual/input/input28 [ 1201.938685][T15721] sp0: Synchronizing with TNC [ 1201.981074][T15727] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2674'. [ 1202.057240][T15727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2674'. [ 1202.433696][T15734] tmpfs: Bad value for 'mpol' [ 1202.631920][T15737] tipc: Started in network mode [ 1202.652918][T15737] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 1202.708625][T15737] tipc: Enabling of bearer rejected, failed to enable media [ 1204.984201][T15767] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2681'. [ 1205.850510][T15779] sp0: Synchronizing with TNC [ 1206.174570][T15784] tmpfs: Bad value for 'mpol' [ 1210.813733][T15820] sp0: Synchronizing with TNC [ 1213.454422][ T8] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1214.228864][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1214.253044][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1214.284330][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1214.304133][ T8] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1214.313327][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1214.333562][ T8] usb 4-1: config 0 descriptor?? [ 1215.286260][T15862] Falling back ldisc for ptm0. [ 1216.182882][T12582] Bluetooth: hci1: command 0x0406 tx timeout [ 1216.189064][T12582] Bluetooth: hci0: command 0x0406 tx timeout [ 1216.581760][ T8] usbhid 4-1:0.0: can't add hid device: -71 [ 1216.593614][ T8] usbhid: probe of 4-1:0.0 failed with error -71 [ 1216.605364][ T8] usb 4-1: USB disconnect, device number 63 [ 1218.065933][T15886] ubi: mtd0 is already attached to ubi31 [ 1219.126319][T15892] overlayfs: failed to resolve './file0': -2 [ 1220.378454][ T5830] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1220.653210][ T5830] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1220.693052][ T5830] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1220.711890][ T5830] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1221.174864][T15913] sp0: Synchronizing with TNC [ 1222.284411][ T5830] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1222.340620][ T5830] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1222.475491][ T5830] usb 3-1: config 0 descriptor?? [ 1223.069800][T15922] ubi: mtd0 is already attached to ubi31 [ 1224.260728][ T5830] usbhid 3-1:0.0: can't add hid device: -71 [ 1224.266949][ T5830] usbhid: probe of 3-1:0.0 failed with error -71 [ 1224.277125][ T5830] usb 3-1: USB disconnect, device number 63 [ 1225.410523][T15936] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2731'. [ 1226.536326][T15951] ubi: mtd0 is already attached to ubi31 [ 1230.736006][T15977] sp0: Synchronizing with TNC [ 1232.441895][T15981] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2740'. [ 1233.954302][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 1233.954316][ T27] audit: type=1326 audit(1776205426.136:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16000 comm="syz.2.2748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f006c99c819 code=0x7ffc0000 [ 1234.864386][ T27] audit: type=1326 audit(1776205426.136:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16000 comm="syz.2.2748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f006c99c819 code=0x7ffc0000 [ 1235.399519][ T27] audit: type=1326 audit(1776205426.166:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16000 comm="syz.2.2748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f006c95d04e code=0x7ffc0000 [ 1235.422757][ T27] audit: type=1326 audit(1776205426.176:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16000 comm="syz.2.2748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f006c99c819 code=0x7ffc0000 [ 1236.154349][ T27] audit: type=1326 audit(1776205426.176:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16000 comm="syz.2.2748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f006c99c819 code=0x7ffc0000 [ 1236.222160][ T27] audit: type=1326 audit(1776205426.176:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16000 comm="syz.2.2748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f006c99c819 code=0x7ffc0000 [ 1236.247182][ T27] audit: type=1326 audit(1776205426.186:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16000 comm="syz.2.2748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f006c99c819 code=0x7ffc0000 [ 1236.377558][ T27] audit: type=1326 audit(1776205426.186:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16000 comm="syz.2.2748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f006c99c819 code=0x7ffc0000 [ 1236.407861][ T27] audit: type=1326 audit(1776205427.076:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16000 comm="syz.2.2748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7f006c99c819 code=0x7ffc0000 [ 1237.080184][ T27] audit: type=1326 audit(1776205427.076:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16000 comm="syz.2.2748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f006c99c819 code=0x7ffc0000 [ 1237.126668][T16024] sp0: Synchronizing with TNC [ 1237.555793][T16026] ubi: mtd0 is already attached to ubi31 [ 1238.899785][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.908264][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1240.275522][T16044] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2758'. [ 1241.328198][T16053] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2763'. [ 1241.502839][T16058] Cannot find add_set index 0 as target [ 1241.810056][T16065] ubi: mtd0 is already attached to ubi31 [ 1246.097685][T15852] Bluetooth: hci2: command 0x0406 tx timeout [ 1246.161723][T16096] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2775'. [ 1246.274991][T16099] SET target dimension over the limit! [ 1246.340975][T16100] overlayfs: failed to resolve './file0': -2 [ 1249.460326][T16118] x_tables: ip_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT [ 1250.451222][ T5830] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1250.733435][ T5830] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1251.405220][ T5830] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1251.516852][ T5830] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1251.597270][ T5830] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1251.617167][ T5830] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1251.633566][ T5830] usb 3-1: config 0 descriptor?? [ 1251.643307][ T5830] usb 3-1: can't set config #0, error -71 [ 1251.676229][ T5830] usb 3-1: USB disconnect, device number 64 [ 1251.807783][T16136] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2785'. [ 1252.246956][T16147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2789'. [ 1252.301253][T16147] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2789'. [ 1254.045050][T15852] Bluetooth: Frame is too long (len 12, expected len 4) [ 1255.265116][T16169] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2796'. [ 1258.806854][T16207] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2806'. [ 1259.319009][T15852] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 1262.839510][T16261] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2819'. [ 1266.654375][T15852] Bluetooth: hci4: command 0x0406 tx timeout [ 1269.758188][T16327] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2832'. [ 1271.234491][T16336] binder: BINDER_SET_CONTEXT_MGR already set [ 1271.286005][T16336] binder: 16335:16336 ioctl 4018620d 200000004a80 returned -16 [ 1277.131930][T16373] binder: BINDER_SET_CONTEXT_MGR already set [ 1277.574307][T16373] binder: 16372:16373 ioctl 4018620d 200000004a80 returned -16 [ 1278.976803][T16389] ubi: mtd0 is already attached to ubi31 [ 1278.985161][T15852] Bluetooth: Frame is too long (len 12, expected len 4) [ 1279.828118][T16392] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2851'. [ 1280.730543][T16400] kvm: emulating exchange as write [ 1281.009700][T16404] binder: BINDER_SET_CONTEXT_MGR already set [ 1281.016118][T16404] binder: 16403:16404 ioctl 4018620d 200000004a80 returned -16 [ 1281.920356][T16419] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2860'. [ 1282.011117][T16420] ubi: mtd0 is already attached to ubi31 [ 1282.019531][T15852] Bluetooth: Frame is too long (len 12, expected len 4) [ 1283.079190][T16426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2861'. [ 1283.171484][T16436] binder: 16434:16436 ioctl c0306201 0 returned -14 [ 1283.354427][ T5830] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1283.554285][ T5830] usb 1-1: Using ep0 maxpacket: 16 [ 1283.573398][ T5830] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1283.584566][ T5830] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1283.597763][ T5830] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 1283.606989][ T5830] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1283.627339][ T5830] usb 1-1: config 0 descriptor?? [ 1284.092080][ T5830] konepure 0003:1E7D:2DB4.0013: unknown main item tag 0x0 [ 1284.909288][ T5830] konepure 0003:1E7D:2DB4.0013: unknown main item tag 0x0 [ 1284.958436][ T5830] konepure 0003:1E7D:2DB4.0013: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.0-1/input0 [ 1285.051622][ T5830] usb 1-1: USB disconnect, device number 69 [ 1285.150702][T16447] fido_id[16447]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1286.832603][T16467] binder: 16464:16467 ioctl c0306201 0 returned -14 [ 1287.031662][T16468] ubi: mtd0 is already attached to ubi31 [ 1287.056160][T15852] Bluetooth: Frame is too long (len 12, expected len 4) [ 1287.099454][T16469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2876'. [ 1288.041587][T16478] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2879'. [ 1288.054639][T16478] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2879'. [ 1288.264390][T10278] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1288.454318][T10278] usb 2-1: Using ep0 maxpacket: 32 [ 1288.467708][T10278] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1288.478303][T10278] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1288.491747][T10278] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1288.503037][T10278] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1288.511722][T10278] usb 2-1: Product: syz [ 1288.516733][T10278] usb 2-1: Manufacturer: syz [ 1288.521662][T10278] usb 2-1: SerialNumber: syz [ 1288.558576][T10278] usb 2-1: config 0 descriptor?? [ 1289.584575][T16502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2886'. [ 1290.048902][T16504] binder: 16503:16504 ioctl c0306201 0 returned -14 [ 1290.896280][T12697] usb 2-1: USB disconnect, device number 52 [ 1292.954352][T16532] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2898'. [ 1294.237323][T16544] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2902'. [ 1294.317386][T16544] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2902'. [ 1295.797194][T16559] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2908'. [ 1298.025116][T16587] netlink: 'syz.1.2920': attribute type 72 has an invalid length. [ 1298.043239][T16587] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2920'. [ 1299.626800][T12697] usb 4-1: new full-speed USB device number 64 using dummy_hcd [ 1299.908672][T12697] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 4 [ 1299.944897][T12697] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 4 [ 1299.990061][T12697] usb 4-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 1300.018093][T12697] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1300.034444][T12697] usb 4-1: Product: syz [ 1300.038862][T12697] usb 4-1: Manufacturer: syz [ 1300.043716][T12697] usb 4-1: SerialNumber: syz [ 1300.357101][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.371464][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.204640][T16629] ubi: mtd0 is already attached to ubi31 [ 1301.331473][T12697] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1302.039542][T12697] usb 4-1: USB disconnect, device number 64 [ 1302.269043][T16446] udevd[16446]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1302.292946][T16642] binder: 16641:16642 ioctl c0306201 0 returned -14 [ 1303.759433][T16679] binder: 16678:16679 ioctl c0306201 0 returned -14 [ 1303.913816][T16687] netlink: 'syz.2.2946': attribute type 72 has an invalid length. [ 1303.939432][T16687] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2946'. [ 1309.504392][T16748] ubi: mtd0 is already attached to ubi31 [ 1309.984898][T15852] Bluetooth: Frame is too long (len 12, expected len 4) [ 1312.110791][T16777] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2976'. [ 1315.109441][T16802] ubi: mtd0 is already attached to ubi31 [ 1316.291148][T16814] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2987'. [ 1316.800394][T16818] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1321.358352][T16840] ubi: mtd0 is already attached to ubi31 [ 1322.480147][ T2989] Bluetooth: hci3: Frame reassembly failed (-84) [ 1324.534694][T15852] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1324.556058][T15852] Bluetooth: hci0: command 0x0406 tx timeout [ 1324.751386][T16854] Bluetooth: hci0: Opcode 0x0c20 failed: -110 [ 1325.929703][T16889] ubi: mtd0 is already attached to ubi31 [ 1326.807375][ T3468] IPVS: stopping master sync thread 6615 ... [ 1328.675822][ T3468] hsr_slave_0: left promiscuous mode [ 1328.718438][ T3468] hsr_slave_1: left promiscuous mode [ 1328.736147][ T3468] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1328.743792][ T3468] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1328.780814][ T3468] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1328.789877][ T3468] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1328.978298][ T3468] bridge_slave_1: left allmulticast mode [ 1329.008863][ T3468] bridge_slave_1: left promiscuous mode [ 1329.019314][ T3468] bridge0: port 2(bridge_slave_1) entered disabled state [ 1329.079382][T16934] ubi: mtd0 is already attached to ubi31 [ 1329.257429][ T3468] bridge_slave_0: left allmulticast mode [ 1329.390657][ T3468] bridge_slave_0: left promiscuous mode [ 1329.398725][ T3468] bridge0: port 1(bridge_slave_0) entered disabled state [ 1330.263225][ T3468] veth1_macvtap: left promiscuous mode [ 1330.279234][ T3468] veth0_macvtap: left promiscuous mode [ 1330.291558][ T3468] veth1_vlan: left promiscuous mode [ 1330.312454][ T3468] veth0_vlan: left promiscuous mode [ 1331.991940][ T3468] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1332.068708][ T3468] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1332.627913][ T3468] bond0 (unregistering): Released all slaves [ 1335.224464][ T9097] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1335.444307][ T9097] usb 1-1: Using ep0 maxpacket: 8 [ 1336.451566][T16982] bridge0: entered promiscuous mode [ 1336.529652][ T9097] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1336.551605][ T9097] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1336.556312][T16982] bridge0: port 3(macsec1) entered blocking state [ 1336.568757][ T9097] usb 1-1: can't read configurations, error -71 [ 1336.589792][T16982] bridge0: port 3(macsec1) entered disabled state [ 1336.665710][T16982] macsec1: entered allmulticast mode [ 1336.685525][T16982] bridge0: entered allmulticast mode [ 1336.713981][T16982] macsec1: left allmulticast mode [ 1336.836861][T16982] bridge0: left allmulticast mode [ 1336.853529][T16982] bridge0: left promiscuous mode [ 1336.944595][T16986] ubi: mtd0 is already attached to ubi31 [ 1341.207832][T17037] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3045'. [ 1341.294045][T17037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3045'. [ 1344.266033][T17060] ubi: mtd0 is already attached to ubi31 [ 1345.663930][ T5756] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1346.494401][ T5756] usb 4-1: Using ep0 maxpacket: 32 [ 1346.590200][ T5756] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1346.769621][ T5756] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 1346.803705][ T5756] usb 4-1: New USB device found, idVendor=0499, idProduct=1055, bcdDevice= 0.40 [ 1346.823359][ T5756] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1347.099686][ T5756] usb 4-1: Product: syz [ 1347.227649][ T5756] usb 4-1: Manufacturer: syz [ 1347.347893][ T5756] usb 4-1: SerialNumber: syz [ 1347.968866][ T5756] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 1348.995436][ T5756] snd-usb-audio: probe of 4-1:1.0 failed with error -2 [ 1349.039545][ T5756] usb 4-1: USB disconnect, device number 65 [ 1349.155439][T17081] udevd[17081]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1349.969718][T17110] Cannot find add_set index 0 as target [ 1354.933537][T17135] ubi: mtd0 is already attached to ubi31 [ 1355.009566][ T5783] Bluetooth: hci1: unexpected event for opcode 0x1005 [ 1356.005431][T17161] ubi: mtd0 is already attached to ubi31 [ 1356.013414][T17158] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3075'. [ 1356.072196][ T5783] Bluetooth: hci1: unexpected event for opcode 0x1005 [ 1356.859237][T17173] ubi: mtd0 is already attached to ubi31 [ 1356.868675][ T5783] Bluetooth: Frame is too long (len 12, expected len 4) [ 1358.674563][T17193] ubi: mtd0 is already attached to ubi31 [ 1359.084444][ T5783] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 1359.895465][T17211] ubi: mtd0 is already attached to ubi31 [ 1359.904609][ T5783] Bluetooth: Frame is too long (len 12, expected len 4) [ 1360.559607][T17219] Cannot find set identified by id 1 to match [ 1361.779022][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.785814][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.999542][T15852] Bluetooth: hci0: unexpected event for opcode 0x1005 [ 1362.574564][ T5783] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1362.583153][T15852] Bluetooth: hci3: command 0x1003 tx timeout [ 1363.585131][ T5832] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 1363.776101][ T5832] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1363.784823][ T5832] usb 2-1: config 0 has no interface number 0 [ 1363.791748][ T5832] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1363.804764][ T5832] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1363.815811][ T5832] usb 2-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1363.836522][ T5832] usb 2-1: config 0 interface 1 has no altsetting 0 [ 1363.854311][ T5832] usb 2-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 1363.876179][ T5832] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1363.901662][ T5832] usb 2-1: config 0 descriptor?? [ 1364.265638][T17264] x_tables: ip_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT [ 1364.542922][ T5832] uclogic 0003:145F:0212.0014: failed retrieving string descriptor #100: -71 [ 1366.075536][ T5832] uclogic 0003:145F:0212.0014: failed retrieving pen parameters: -71 [ 1366.087940][ T5832] uclogic 0003:145F:0212.0014: pen probing failed: -71 [ 1366.096336][ T5832] uclogic 0003:145F:0212.0014: failed probing parameters: -71 [ 1366.109316][ T5832] uclogic: probe of 0003:145F:0212.0014 failed with error -71 [ 1366.121100][ T5832] usb 2-1: USB disconnect, device number 53 [ 1366.685728][ T5832] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1366.929728][ T5832] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 247, changing to 11 [ 1366.958276][ T5832] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1366.989444][ T5832] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1367.001567][ T5832] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1367.010543][ T5832] usb 3-1: Product: syz [ 1367.015214][ T5832] usb 3-1: Manufacturer: syz [ 1367.019934][ T5832] usb 3-1: SerialNumber: syz [ 1367.033966][T17287] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1367.267045][ T5832] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 1367.304781][ T5832] usb 3-1: USB disconnect, device number 65 [ 1367.801463][T17306] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3128'. [ 1367.826581][T17306] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3128'. [ 1370.395075][T17329] binder: 17328:17329 ioctl c0306201 0 returned -14 [ 1370.787691][T17340] Cannot find add_set index 0 as target [ 1372.807975][T15852] Bluetooth: hci4: command 0x0406 tx timeout [ 1373.172836][T17359] binder: 17357:17359 ioctl c0306201 0 returned -14 [ 1373.974846][T17372] overlayfs: failed to resolve './file0': -2 [ 1380.368556][T15852] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 1381.260767][T17390] binder: BINDER_SET_CONTEXT_MGR already set [ 1381.287308][T17390] binder: 17387:17390 ioctl 4018620d 200000004a80 returned -16 [ 1381.327515][T17390] binder: 17387:17390 ioctl c0306201 0 returned -14 [ 1382.046579][T17402] tmpfs: Bad value for 'mpol' [ 1382.792717][T17407] bridge_slave_0: left allmulticast mode [ 1382.798695][T17407] bridge_slave_0: left promiscuous mode [ 1382.806187][T17407] bridge0: port 1(bridge_slave_0) entered disabled state [ 1382.923222][T17407] bridge_slave_1: left allmulticast mode [ 1382.938389][T17407] bridge_slave_1: left promiscuous mode [ 1382.956779][T17407] bridge0: port 2(bridge_slave_1) entered disabled state [ 1384.747573][T17407] bond0: (slave bond_slave_0): Releasing backup interface [ 1384.896645][T17407] bond0: (slave bond_slave_1): Releasing backup interface [ 1384.988732][T17407] team0: Port device team_slave_0 removed [ 1385.033317][T17407] team0: Port device team_slave_1 removed [ 1385.060434][T17407] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1385.069568][T17407] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1385.087971][T17407] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1385.117695][T17407] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1385.863287][ T23] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1385.925995][T17439] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3171'. [ 1386.744050][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 1386.749644][T17441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3171'. [ 1386.771906][ T23] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1386.796410][ T23] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1386.831660][ T23] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1024 [ 1386.846424][ T23] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1386.868697][ T23] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 1386.883456][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1386.891838][ T23] usb 4-1: Product: syz [ 1386.904291][ T23] usb 4-1: Manufacturer: syz [ 1386.909035][ T23] usb 4-1: SerialNumber: syz [ 1386.958277][T17432] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1387.197360][ T23] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 1387.233484][ T23] usb 4-1: MIDIStreaming interface descriptor not found [ 1387.350385][ T23] usb 4-1: USB disconnect, device number 66 [ 1387.627629][T17457] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 1391.449957][T17434] udevd[17434]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1391.871058][T17471] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.3180'. [ 1391.996471][T17474] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3183'. [ 1392.827671][T17480] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3183'. [ 1392.921697][T17482] ubi: mtd0 is already attached to ubi31 [ 1393.410775][T17497] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 1400.133633][T17560] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.3193'. [ 1400.237987][T17567] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3197'. [ 1400.256227][T17567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3197'. [ 1401.425439][T17580] tmpfs: Bad value for 'mpol' [ 1403.986957][T17599] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.3205'. [ 1404.136256][T17604] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3207'. [ 1404.153083][T17604] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3207'. [ 1405.633619][T17620] tmpfs: Bad value for 'mpol' [ 1407.531121][T17632] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.3215'. [ 1407.690048][T17634] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3216'. [ 1407.771509][T17635] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3216'. [ 1409.118863][T17651] ubi: mtd0 is already attached to ubi31 [ 1409.736789][T15852] Bluetooth: hci0: unexpected event for opcode 0x1005 [ 1409.810311][T17661] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.3224'. [ 1411.553377][T17672] sp0: Synchronizing with TNC [ 1413.666882][T17691] ubi: mtd0 is already attached to ubi31 [ 1413.675601][T15852] Bluetooth: Frame is too long (len 12, expected len 4) [ 1415.214424][ T9097] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1415.492237][T17716] tmpfs: Bad value for 'mpol' [ 1416.148590][ T9097] usb 4-1: Using ep0 maxpacket: 32 [ 1416.163291][ T9097] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 1416.188443][ T9097] usb 4-1: config 0 has no interface number 0 [ 1416.201129][ T9097] usb 4-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1416.219186][ T9097] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1416.228628][ T9097] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1416.236844][ T9097] usb 4-1: Product: syz [ 1416.241122][ T9097] usb 4-1: Manufacturer: syz [ 1416.245831][ T9097] usb 4-1: SerialNumber: syz [ 1416.261779][ T9097] usb 4-1: config 0 descriptor?? [ 1416.398909][ T9097] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1416.502179][T17720] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3240'. [ 1416.953176][ T9097] usb 4-1: qt2_setup_urbs - submit read urb failed -8 [ 1416.966189][ T9097] quatech2: probe of 4-1:0.51 failed with error -8 [ 1417.160918][ T9097] usb 4-1: USB disconnect, device number 67 [ 1419.541670][T17742] sp0: Synchronizing with TNC [ 1422.019274][T17757] tmpfs: Bad value for 'mpol' [ 1422.027013][T17765] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3250'. [ 1423.491112][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.525120][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1424.084465][ T23] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1424.684269][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 1424.709980][ T23] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 1424.754086][ T23] usb 4-1: config 0 has no interface number 0 [ 1424.827477][ T23] usb 4-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1424.886507][ T23] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1424.977915][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1424.991075][ T23] usb 4-1: Product: syz [ 1425.014791][ T23] usb 4-1: Manufacturer: syz [ 1425.030106][ T23] usb 4-1: SerialNumber: syz [ 1425.055273][ T23] usb 4-1: config 0 descriptor?? [ 1425.071289][ T23] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1425.390912][ T23] usb 4-1: qt2_setup_urbs - submit read urb failed -8 [ 1425.410602][ T23] quatech2: probe of 4-1:0.51 failed with error -8 [ 1426.141624][ T23] usb 4-1: USB disconnect, device number 68 [ 1427.383335][T17799] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3261'. [ 1427.405563][T17799] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3261'. [ 1428.105441][T17811] tmpfs: Bad value for 'mpol' [ 1428.133250][T17806] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3263'. [ 1428.592298][T17819] sp0: Synchronizing with TNC [ 1431.424356][ T9097] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1431.634642][ T9097] usb 4-1: Using ep0 maxpacket: 32 [ 1431.652949][ T9097] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 1431.669329][ T9097] usb 4-1: config 0 has no interface number 0 [ 1431.677191][ T9097] usb 4-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1431.864515][ T9097] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1431.882578][ T9097] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1431.891184][ T9097] usb 4-1: Product: syz [ 1431.899955][ T9097] usb 4-1: Manufacturer: syz [ 1431.906111][ T9097] usb 4-1: SerialNumber: syz [ 1431.970200][T17848] tmpfs: Bad value for 'mpol' [ 1432.198690][ T9097] usb 4-1: config 0 descriptor?? [ 1432.580717][ T9097] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1433.085667][ T9097] usb 4-1: qt2_setup_urbs - submit read urb failed -8 [ 1433.097044][ T9097] quatech2: probe of 4-1:0.51 failed with error -8 [ 1433.323591][ T9097] usb 4-1: USB disconnect, device number 69 [ 1433.403962][T17857] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3276'. [ 1438.723998][T17895] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3287'. [ 1439.974649][ T5756] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1440.646139][ T5756] usb 3-1: Using ep0 maxpacket: 32 [ 1440.724517][ T5756] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 1440.727292][T17919] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3295'. [ 1440.733383][ T5756] usb 3-1: config 0 has no interface number 0 [ 1440.753013][ T5756] usb 3-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1440.804053][T17921] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3295'. [ 1440.816729][ T5756] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1440.825981][ T5756] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1440.850606][ T5756] usb 3-1: Product: syz [ 1440.874301][ T5756] usb 3-1: Manufacturer: syz [ 1440.881198][ T5756] usb 3-1: SerialNumber: syz [ 1440.901594][ T5756] usb 3-1: config 0 descriptor?? [ 1440.922918][ T5756] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1441.204292][ T5756] usb 3-1: qt2_setup_urbs - submit read urb failed -8 [ 1441.248105][ T5756] quatech2: probe of 3-1:0.51 failed with error -8 [ 1441.417643][T17932] sp0: Synchronizing with TNC [ 1441.460046][ T9097] usb 3-1: USB disconnect, device number 66 [ 1442.696957][T17942] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3299'. [ 1445.465658][T17964] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3308'. [ 1445.580544][T17964] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3308'. [ 1445.714276][ T788] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1445.944272][ T788] usb 2-1: Using ep0 maxpacket: 32 [ 1445.969958][ T788] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1446.010297][ T788] usb 2-1: config 0 has no interface number 0 [ 1446.050821][ T788] usb 2-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1446.100242][ T788] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1446.213056][ T788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1446.244263][ T788] usb 2-1: Product: syz [ 1446.248483][ T788] usb 2-1: Manufacturer: syz [ 1446.253089][ T788] usb 2-1: SerialNumber: syz [ 1446.368520][ T788] usb 2-1: config 0 descriptor?? [ 1446.394202][ T788] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1446.463227][T17975] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3310'. [ 1447.115335][ T788] usb 2-1: qt2_setup_urbs - submit read urb failed -8 [ 1447.143324][ T788] quatech2: probe of 2-1:0.51 failed with error -8 [ 1447.354640][ T788] usb 2-1: USB disconnect, device number 54 [ 1447.454883][T17979] tmpfs: Bad value for 'mpol' [ 1450.495013][T18001] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3318'. [ 1450.535331][T18001] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3318'. [ 1450.762000][T18005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3319'. [ 1451.355597][T18011] tmpfs: Bad value for 'mpol' [ 1453.014278][ T5832] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1453.943173][ T5832] usb 2-1: Using ep0 maxpacket: 32 [ 1453.973194][ T5832] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1453.993022][ T5832] usb 2-1: config 0 has no interface number 0 [ 1454.015236][ T5832] usb 2-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1454.103892][ T5832] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1454.118400][ T5832] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1454.130432][ T5832] usb 2-1: Product: syz [ 1454.146774][ T5832] usb 2-1: Manufacturer: syz [ 1454.151575][ T5832] usb 2-1: SerialNumber: syz [ 1454.162445][ T5832] usb 2-1: config 0 descriptor?? [ 1454.176863][ T5832] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1454.276026][ T5756] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1454.536030][ T5756] usb 3-1: Using ep0 maxpacket: 16 [ 1454.633821][ T5756] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 1454.735573][ T5832] usb 2-1: qt2_setup_urbs - submit read urb failed -8 [ 1454.751227][ T5756] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1454.760182][ T5832] quatech2: probe of 2-1:0.51 failed with error -8 [ 1454.774506][ T5756] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 1454.794396][ T5756] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1454.796008][T18039] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3330'. [ 1454.825281][ T5756] usb 3-1: config 0 descriptor?? [ 1454.827073][T18039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3330'. [ 1455.179865][T18043] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3331'. [ 1455.729795][ T8460] usb 2-1: USB disconnect, device number 55 [ 1456.921558][T18057] tmpfs: Bad value for 'mpol' [ 1457.624785][T18054] SET target dimension over the limit! [ 1457.887719][ T5756] usbhid 3-1:0.0: can't add hid device: -71 [ 1457.904745][ T5756] usbhid: probe of 3-1:0.0 failed with error -71 [ 1457.933689][ T5756] usb 3-1: USB disconnect, device number 67 [ 1459.427858][T18081] sp0: Synchronizing with TNC [ 1460.721290][T18089] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3340'. [ 1461.704291][T10278] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1461.904470][T10278] usb 2-1: Using ep0 maxpacket: 32 [ 1461.924118][T10278] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1461.958880][T10278] usb 2-1: config 0 has no interface number 0 [ 1461.994237][T10278] usb 2-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1462.046270][T10278] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1462.083125][T10278] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1462.119203][T10278] usb 2-1: Product: syz [ 1462.123426][T10278] usb 2-1: Manufacturer: syz [ 1462.151007][T10278] usb 2-1: SerialNumber: syz [ 1462.181426][T10278] usb 2-1: config 0 descriptor?? [ 1462.212726][T10278] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1462.426140][T10278] usb 2-1: qt2_setup_urbs - submit read urb failed -8 [ 1462.433167][T10278] quatech2: probe of 2-1:0.51 failed with error -8 [ 1462.795723][ T5830] usb 2-1: USB disconnect, device number 56 [ 1463.932514][T18122] tmpfs: Bad value for 'mpol' [ 1464.958845][ T5756] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1465.016947][T18137] SET target dimension over the limit! [ 1465.257378][ T5756] usb 3-1: Using ep0 maxpacket: 16 [ 1465.404597][ T5756] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 1465.461519][ T5756] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1465.497148][ T5756] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 1465.870594][ T5756] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1465.898513][ T5756] usb 3-1: config 0 descriptor?? [ 1466.211446][T18151] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3350'. [ 1467.875655][ T5756] usbhid 3-1:0.0: can't add hid device: -71 [ 1467.897149][ T5756] usbhid: probe of 3-1:0.0 failed with error -71 [ 1467.954502][ T5756] usb 3-1: USB disconnect, device number 68 [ 1469.806248][T18179] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3358'. [ 1469.842297][T18179] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3358'. [ 1475.778392][T18203] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3361'. [ 1476.610868][ T5756] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1477.514212][ T5756] usb 4-1: Using ep0 maxpacket: 16 [ 1477.521305][ T5756] usb 4-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 1477.545141][ T5756] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1477.557897][ T5756] usb 4-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 1477.567712][ T5756] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1477.839871][T18218] tmpfs: Bad value for 'mpol' [ 1478.506688][ T5756] usb 4-1: config 0 descriptor?? [ 1479.096458][ T5756] usb 4-1: can't set config #0, error -71 [ 1479.106055][ T5756] usb 4-1: USB disconnect, device number 70 [ 1482.936642][T18264] tmpfs: Bad value for 'mpol' [ 1482.974587][T10278] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1483.017138][T18265] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3369'. [ 1483.194369][T10278] usb 3-1: Using ep0 maxpacket: 16 [ 1483.280011][T10278] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 1483.343755][T10278] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1483.395718][T10278] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 1483.425266][T18266] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3369'. [ 1483.435178][T10278] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1483.452747][T10278] usb 3-1: config 0 descriptor?? [ 1484.666884][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.666997][T18282] SET target dimension over the limit! [ 1484.673443][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.875680][T10278] usbhid 3-1:0.0: can't add hid device: -71 [ 1485.913760][T10278] usbhid: probe of 3-1:0.0 failed with error -71 [ 1486.064034][T10278] usb 3-1: USB disconnect, device number 69 [ 1487.372243][T18307] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3390'. [ 1487.576684][T18311] tmpfs: Bad value for 'mpol' [ 1490.340847][T18327] SET target dimension over the limit! [ 1602.424207][ C0] ------------[ cut here ]------------ [ 1602.431425][ C0] WARNING: CPU: 0 PID: 0 at kernel/rcu/tree_stall.h:1001 rcu_check_gp_start_stall+0x2dc/0x460 [ 1602.441700][ C0] Modules linked in: [ 1602.445591][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 1602.452597][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1602.462636][ C0] RIP: 0010:rcu_check_gp_start_stall+0x2dc/0x460 [ 1602.468986][ C0] Code: ff ff ff 48 c7 c7 a0 e4 30 97 be 04 00 00 00 e8 6a de 6d 00 48 89 df b8 01 00 00 00 87 05 7c 67 bf 15 85 c0 0f 85 19 ff ff ff <0f> 0b 48 81 ff 00 73 13 8d 74 47 48 c7 c0 ac 49 8b 8e 48 c1 e8 03 [ 1602.488581][ C0] RSP: 0018:ffffc90000007bb8 EFLAGS: 00010046 [ 1602.494648][ C0] RAX: 0000000000000000 RBX: ffffffff8d137300 RCX: ffffffff81717d16 [ 1602.502604][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8d137300 [ 1602.510574][ C0] RBP: ffffc90000007e30 R08: 0000000000000003 R09: 0000000000000004 [ 1602.518544][ C0] R10: dffffc0000000000 R11: fffffbfff2e61c94 R12: 0000000000002904 [ 1602.526515][ C0] R13: ffffffff8d137300 R14: 0000000000000a02 R15: dffffc0000000000 [ 1602.534486][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1602.543397][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1602.549966][ C0] CR2: 00007f006d877ff0 CR3: 0000000078967000 CR4: 00000000003506f0 [ 1602.557921][ C0] Call Trace: [ 1602.561192][ C0] [ 1602.564025][ C0] rcu_core+0x635/0x1770 [ 1602.568261][ C0] ? ktime_get+0x7f/0x280 [ 1602.572590][ C0] ? rcu_cpu_kthread_park+0x90/0x90 [ 1602.577772][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 1602.583029][ C0] ? sched_clock+0x3f/0x60 [ 1602.587444][ C0] ? sched_clock_cpu+0x75/0x430 [ 1602.592274][ C0] ? ktime_get+0x7f/0x280 [ 1602.596654][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1602.602630][ C0] ? lock_chain_count+0x20/0x20 [ 1602.607466][ C0] handle_softirqs+0x280/0x820 [ 1602.612242][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 1602.616994][ C0] ? do_softirq+0x1a0/0x1a0 [ 1602.621484][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 1602.626669][ C0] __irq_exit_rcu+0xd3/0x190 [ 1602.631240][ C0] ? irq_exit_rcu+0x20/0x20 [ 1602.635750][ C0] irq_exit_rcu+0x9/0x20 [ 1602.639976][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1602.645591][ C0] [ 1602.648506][ C0] [ 1602.651420][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1602.657550][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x10 [ 1602.663185][ C0] Code: 29 21 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d 83 e3 41 00 fb f4 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2e 41 89 de 80 [ 1602.682774][ C0] RSP: 0018:ffffffff8ce07d80 EFLAGS: 000002c6 [ 1602.688826][ C0] RAX: e147df8923ae5300 RBX: ffffffff8162aa0d RCX: e147df8923ae5300 [ 1602.696790][ C0] RDX: 0000000000000001 RSI: ffffffff8acac9e0 RDI: ffffffff8b1c8e60 [ 1602.704865][ C0] RBP: ffffffff8ce07eb8 R08: ffff8880b8e36b2b R09: 1ffff110171c6d65 [ 1602.712831][ C0] R10: dffffc0000000000 R11: ffffed10171c6d66 R12: 1ffffffff19c0fbc [ 1602.720786][ C0] R13: dffffc0000000000 R14: 1ffffffff19d2688 R15: 0000000000000000 [ 1602.728761][ C0] ? do_idle+0x33d/0x590 [ 1602.733020][ C0] default_idle+0x13/0x20 [ 1602.737335][ C0] default_idle_call+0x6c/0xa0 [ 1602.742081][ C0] do_idle+0x33d/0x590 [ 1602.746161][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 1602.751402][ C0] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1602.757044][ C0] cpu_startup_entry+0x43/0x60 [ 1602.761797][ C0] rest_init+0x2e2/0x300 [ 1602.766027][ C0] ? time_init+0x40/0x40 [ 1602.770274][ C0] arch_call_rest_init+0xe/0x10 [ 1602.775110][ C0] start_kernel+0x459/0x4e0 [ 1602.779598][ C0] x86_64_start_reservations+0x2a/0x30 [ 1602.785038][ C0] x86_64_start_kernel+0x60/0x60 [ 1602.789957][ C0] secondary_startup_64_no_verify+0x179/0x17b [ 1602.796026][ C0] [ 1602.799036][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1602.806383][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 1602.813559][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1602.823801][ C0] Call Trace: [ 1602.827071][ C0] [ 1602.829902][ C0] dump_stack_lvl+0x18c/0x250 [ 1602.834608][ C0] ? show_regs_print_info+0x20/0x20 [ 1602.839792][ C0] ? load_image+0x420/0x420 [ 1602.844298][ C0] panic+0x2dc/0x730 [ 1602.848178][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 1602.852665][ C0] ? secondary_startup_64_no_verify+0x179/0x17b [ 1602.858890][ C0] __warn+0x2e0/0x470 [ 1602.862858][ C0] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 1602.868564][ C0] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 1602.874268][ C0] report_bug+0x2be/0x4f0 [ 1602.878596][ C0] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 1602.884298][ C0] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 1602.889999][ C0] ? rcu_check_gp_start_stall+0x2de/0x460 [ 1602.895703][ C0] handle_bug+0xcf/0x120 [ 1602.899929][ C0] exc_invalid_op+0x1a/0x50 [ 1602.904414][ C0] asm_exc_invalid_op+0x1a/0x20 [ 1602.909266][ C0] RIP: 0010:rcu_check_gp_start_stall+0x2dc/0x460 [ 1602.915595][ C0] Code: ff ff ff 48 c7 c7 a0 e4 30 97 be 04 00 00 00 e8 6a de 6d 00 48 89 df b8 01 00 00 00 87 05 7c 67 bf 15 85 c0 0f 85 19 ff ff ff <0f> 0b 48 81 ff 00 73 13 8d 74 47 48 c7 c0 ac 49 8b 8e 48 c1 e8 03 [ 1602.935204][ C0] RSP: 0018:ffffc90000007bb8 EFLAGS: 00010046 [ 1602.941255][ C0] RAX: 0000000000000000 RBX: ffffffff8d137300 RCX: ffffffff81717d16 [ 1602.949211][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8d137300 [ 1602.957163][ C0] RBP: ffffc90000007e30 R08: 0000000000000003 R09: 0000000000000004 [ 1602.965113][ C0] R10: dffffc0000000000 R11: fffffbfff2e61c94 R12: 0000000000002904 [ 1602.973085][ C0] R13: ffffffff8d137300 R14: 0000000000000a02 R15: dffffc0000000000 [ 1602.981065][ C0] ? rcu_check_gp_start_stall+0x2c6/0x460 [ 1602.986796][ C0] ? rcu_check_gp_start_stall+0x2c6/0x460 [ 1602.992516][ C0] rcu_core+0x635/0x1770 [ 1602.996762][ C0] ? ktime_get+0x7f/0x280 [ 1603.001078][ C0] ? rcu_cpu_kthread_park+0x90/0x90 [ 1603.006264][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 1603.011454][ C0] ? sched_clock+0x3f/0x60 [ 1603.015855][ C0] ? sched_clock_cpu+0x75/0x430 [ 1603.020875][ C0] ? ktime_get+0x7f/0x280 [ 1603.025283][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1603.031244][ C0] ? lock_chain_count+0x20/0x20 [ 1603.036079][ C0] handle_softirqs+0x280/0x820 [ 1603.040823][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 1603.045582][ C0] ? do_softirq+0x1a0/0x1a0 [ 1603.050080][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 1603.055263][ C0] __irq_exit_rcu+0xd3/0x190 [ 1603.059831][ C0] ? irq_exit_rcu+0x20/0x20 [ 1603.064332][ C0] irq_exit_rcu+0x9/0x20 [ 1603.068551][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1603.074163][ C0] [ 1603.077075][ C0] [ 1603.079991][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1603.085953][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x10 [ 1603.091588][ C0] Code: 29 21 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d 83 e3 41 00 fb f4 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2e 41 89 de 80 [ 1603.111205][ C0] RSP: 0018:ffffffff8ce07d80 EFLAGS: 000002c6 [ 1603.117346][ C0] RAX: e147df8923ae5300 RBX: ffffffff8162aa0d RCX: e147df8923ae5300 [ 1603.125311][ C0] RDX: 0000000000000001 RSI: ffffffff8acac9e0 RDI: ffffffff8b1c8e60 [ 1603.133262][ C0] RBP: ffffffff8ce07eb8 R08: ffff8880b8e36b2b R09: 1ffff110171c6d65 [ 1603.141212][ C0] R10: dffffc0000000000 R11: ffffed10171c6d66 R12: 1ffffffff19c0fbc [ 1603.149163][ C0] R13: dffffc0000000000 R14: 1ffffffff19d2688 R15: 0000000000000000 [ 1603.157123][ C0] ? do_idle+0x33d/0x590 [ 1603.161380][ C0] default_idle+0x13/0x20 [ 1603.165693][ C0] default_idle_call+0x6c/0xa0 [ 1603.170438][ C0] do_idle+0x33d/0x590 [ 1603.174489][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 1603.179672][ C0] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1603.185294][ C0] cpu_startup_entry+0x43/0x60 [ 1603.190039][ C0] rest_init+0x2e2/0x300 [ 1603.194264][ C0] ? time_init+0x40/0x40 [ 1603.198489][ C0] arch_call_rest_init+0xe/0x10 [ 1603.203349][ C0] start_kernel+0x459/0x4e0 [ 1603.207850][ C0] x86_64_start_reservations+0x2a/0x30 [ 1603.213297][ C0] x86_64_start_kernel+0x60/0x60 [ 1603.218224][ C0] secondary_startup_64_no_verify+0x179/0x17b [ 1603.224303][ C0] [ 1604.316217][ C0] Shutting down cpus with NMI [ 1604.321331][ C0] Kernel Offset: disabled [ 1604.326195][ C0] Rebooting in 86400 seconds..