last executing test programs: 12m30.772920887s ago: executing program 4 (id=252): bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xffffffffffffffff, 0x10010, 0xffffffffffffffff, 0xffffc000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000000e0c0)=""/102400, 0x19000) bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x3}, 0x10) close(0xffffffffffffffff) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r1, &(0x7f0000000280)=ANY=[@ANYBLOB=' \t'], 0x33) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0xfffffffffffffff0, 0x2400) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000680)=@urb_type_iso={0x0, {0xd, 0x1}, 0x1f, 0x0, &(0x7f0000000080)="d83614df691cc4f14ad41fd22363786e094d8b33db210ddc895f40c54b82646da30b5f", 0x23, 0x9, 0x6, 0x1d, 0x6, 0x8, &(0x7f00000000c0)="092aa28f283a77727aa191645059d86c5ca30be4d81bb8e63b1b", [{0x4, 0x2, 0x4}, {0xb06a1b57, 0x28f9, 0x1}, {0x0, 0xdfa0, 0xd}, {0x9, 0x8, 0x80000000}, {0x3, 0x1ff, 0x47}, {0xffffff00, 0x7}, {0xfffffff9, 0xfffffff8}, {0x4, 0xfffffff8, 0x7}, {0x80000001, 0x1, 0x1}, {0x40, 0x0, 0xe2d}, {0x1, 0x5, 0x9}, {0xfffffff9, 0x4, 0x8}, {0x100, 0xa99c}, {0x63, 0x2, 0x8}, {0x400, 0x2}, {0xb, 0x6, 0x8d0}, {0x5, 0x1}, {0x8, 0x5, 0xfffffff7}, {0x8, 0x5, 0x9}, {0x80, 0xffff, 0x7}, {0xc00, 0x3, 0xe}, {0x2, 0x0, 0xffffff4b}, {0x10001, 0x3}, {0x9, 0x1000, 0xc6}, {0x1, 0x9, 0x1}, {0x0, 0x6, 0x3}, {0x1, 0x1, 0x7}, {0x2, 0x8}, {0xa, 0x5, 0x7}]}) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000b7403340861a22"], 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$uac3(r3, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_control_io$hid(r3, 0x0, 0x0) 12m25.611084186s ago: executing program 4 (id=258): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00', 0x0}) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_void(r1, 0x1, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, 0x0, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0xf5, &(0x7f0000009b00)={&(0x7f00000042c0)={{0x14, 0x10, 0x1, 0x0, 0x3000000, {0x7}}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x24, 0x3, "7339f2f304fdd672bad09dfb040000000001000001f9580dabf95ddc91967c20"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xc, 0x1, 'RATEEST\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000001a00)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000003040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f00000000c0)="8b", 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0xfff2, 0xc}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x14e2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x58, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_ITS={0x7, 0x2, 0x1, 0x0, 0xa}]}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x0, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x0, 0x1, 0x0, 0x1, @ipv6={{0x0, 0x3, @private1}, {0x0, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_ZONE={0x0, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0x0, 0x2, 0x0, 0x1, {0x0, 0x1, 0x21}}, @CTA_TUPLE_IP={0x0, 0x1, 0x0, 0x1, @ipv4={{0x0, 0x1, @private=0xa010100}, {0x0, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_ZONE={0x0, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x0, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0x0, 0x2, 0x0, 0x1, {0x0, 0x1, 0x2f}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) 12m16.592790226s ago: executing program 4 (id=277): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9", 0x5d}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a", 0xb7}, {&(0x7f0000000900)}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{&(0x7f0000004c00)="e24fc801dffdf37981a92f7f4005844301258a0ec141f1ec014bd9d03d1db52a75dfb8e04daddc3fac31adda350235262d9e1b8e20d406b97372033032d7623ff84bbf544a91c12eb644b323e9653fd76852c025e718cc91d9e9e274a7ed2dc15d8efec8d11a7983cdc8f3c39dbf764fc28873b760c435743929653c359ee706dcf2658403b25fbf3382f179562dc64883887ead6a916ef430ee4f67e21a3f01a3a35627bfb2f6ba204da0280c9f2fb5443879616a431884af82606286c4760a9ef4aa264e0000137f28dbe594332062120a76b565165987eef46c1d523f0fba98cd51f14537e313952f76574e3137aa1b41ae8e16f4087ddbaa7de98ca609a1b01b64ab10613204e4d18f376138fe7735ffb2fa09843922ce5a365e1e84286f09c432e0f521be13182256dcf534e03efb1735e55a8dce53e32ac669207d21e3b79414a8e61204f7c4173f2381e4c5e6cce12f6bae60d5bff199d5da50e40f87efbcec332173caba740a1b12c915bccf04940399b9a72a7dca4b8c7d46a2c444f6c7e30cf1f811a4a31cabb9b512a949105e2aa4081a3d613ad9ae4cf209d684e4b27c204bc5a395da552b8638df42d4c3522b64eaf11c988fce5634757ed41b39c338aea3ed2171e86fd34cde22dc3519edd2108641f3c3d4ca2016524b8f7d67e80ef5474d0a4a157eca9e5c0c5fcd7f459f64e91effe3bbcdcf9aba5704952cf0b82b1b0d4533a9c7ddc914bc7dfd8eea591be5806408191e3cca1cd6101f575b7c7206cd219b9f379fc3d03c3c867e5c36a8fcc75e86988a1897876b5a3bb2b3e102a742ebaeb50e08096c1990fa8d8755c187f86213f3cfc322f7997da73594e30f68a1da5768201916dfd52711ad79caae751260cc054dda58307f4031aebc75514795e6d7ae7725c27f7bc8f1e2115603e1f8b18517a74ddd901752a194cfb37535c949f4a5eefc98b231e03fd7a5d7643817567c7fbdcad37365a1a063c11bfd7e6474e9608391f3f3ebcd97a3ad7a9873d8615a9a4dac09ebc528b9277f71d5c2e6012645c643764319941206e6957987b5423b3864e6acb89c0e0371d66c5e16dfd920305cf5dc39ea0d48cea652236f3492f5b60a2a648e8ac61bf13811a81be593e430f504d0fe3d38222acd10e188605410900c55f203e0f6d553cf4e7cdfdfdbf4b60ee166c8be15757c6042f7f7b0c0c75932f795b075ba4116f1336622bafc47e58206255af610b3a7e88fed94a1c4a8b29e7e379b084431d5e059c0d0342678ef5b2ad08d10be3b48e4a1d0de16e8ca0175e1453fa15f8086f7b93d15e5f0769d56cbcec255fd1e82c43a61d50b893a8e7bc84c7cc1b9cffbc4d8f8d703d1ca879acf93e82f35a534665bd5a5a9e13e35ed00d796b830c45f87ba6c90857d05774506611c940e391752237af000473cfff41236801a9e78c48206e03e2a4b1c9164eb1f8cfb71d1559d3b5650327868ef87906b5a0e05470b0655f51090a57a65895608866ac0e008c44898ea0fa968ae510b561b8ebb9f0a38c2572f93aa6a8f5aaab1ff62ad761af234379adfc397c186a99bbecd534266358c5e053de4698e37fb0c512d72492c6f0d18e686c21665224d23fb6b15670e235a96bab63d63df51624f73d78fc38e0c8956882ebbbe0207f3b13be74b70ef29e64912cac49dd90a7f4d5fd09bec08dcb8413578f9e4456079c3673ffd33b366d4a203af63f25ba792a722a4d36749c6724e0b37cfd71761f3ff122861e362aab7a26a8c8090b65ab080535fa912d5b58a9b65410b94acc42396796e35a308cac7594439f4ed2afc8cc4676159751d9ce63ff894a7cad95b375f852d9bd493719ab9bac41cd9ec817b835628a6a9f4869fc9ce72ea3fc7119341ceaf23e85f7a990b7eeb35ef2ef2c84f6fafa0c186a0b2490c72cfe2ce7607634e0d651e4c87514a177300f4f3b762e386cc1522e9b859fb9297329a73b89b8a97184864823d1829fe7a6bf30c69f24b61338e3f341e05e3f70ec6cd6f3544652f69ade293dc896836632271cde36ebb6f515dc8d13121def9d2911ed0d19f2fc31a12b1de3b43dbfb32c0df664c85d4b978f3a41b43546844c8581590dade2db066d5a948a386438232b0be334232800fd164aac8047a96b85356820597a0ef21b2df300a8ef2a08155b7a8eb7793e5ec768db868432c9d65cd748369f24909862131553af695be43c95f2e65a9ef1f8fbad3d03bee4640639c0351c6ed58113b86ec0530aff32f4e4b786285ce72afd6dce83b3a82f58a0bc62735e3402848690d2865438c81f174588e6046ba95935ec0dfbbbb87dda17d8fdcf07b8322bdf18b1421293ead6a8b38119724c9c122f457f85129cbd50338a7e3194418c00ed91cd39878f7753477a17856281ae743c8dcdfc7d5c7142348f9fae4f7767f2c89c394c3fd5d8f261bde3b2055ccddf05c36643e21ec542a62be492501b470813fcedf01c876da0e1e822c3867f32951053f2963b5d1f90e713df0b2c526f36e685b4153d4ae4e8c607df1308c84e500c0bd9fe80dc3cf28187a39fd09643afb25eaa9411f3ce6304dc8bfd02afc9a6bad59887a1cad44a1f613a0779059a90248f09e357af291b1cce42cb9ac766dac70e599c1bbba4a58715adf2426a865eb1e0b80f10602db39c400b45131700490a9c38345022acc79851c2368bc7d191bc1f995722c564198669a68c971f60779e6983508a7c8077cdc7677d9a8b70b8fd1183f57cbc2d653ef6e96110c0c6730be7add59392b4082a6478447cc307d35512dfb2c4e27122b9749eeed9b5a5906f99ee57d7b565822bd4d78aed8f1567409a59ae77b3a1552a5cdb1558ff3ffd2b4cd0e141fce5ad11de5509c6dac5858bbb222bc403e3a307294afbe9633e162bfc5231284f58d475ef19cc1012cb4a81bd26e7e24509ecb5bd859a04a8e39f373188fc58573a52bf8a5de50aa082a4ad28202d01da2f0c7d3a6d1d3b9c3dab9d3ad9a663af4894904236632514d668e5f5016a350ae5accae2902cb9cba8d5262abc4e934329f410739831d447b798bb1da19bd3c98e90f43e54b8911ab9da8d594c9d0617396a53469ec2eb6ca0843ffd39e65b79bf856c755d8fda71b66e16cba537adac14de21a16a379513555d13ee6e021e6bb1cb5db35a7cb0162c3dbf631e8b6b42cc98fba74396971be184b910dbf0fbc29c0e45acfe59c789a134bcc01f7c3b2513d4ef988e7f66e5002d9ee8766870b9502d173953b78b654f020349b7af7845462822a6c78a63416606a265389216f141ca8269a11f18edf1d11de7f11906b787a0189a4fe5a55bb0f78c25319583b5f81c4ad25dd4544d35a2f8afce5b8a117b16104c45997f9ad31421414006f158881e9c7f553f3b7364e274bff39236720d67346e8270b2fd6b5b33c0cece3251b62ec09c709ad1adee626e43a54356b803adf23e45ddbe2bbade69974ca43c3f2246389612398a5247678299995592002f369b0a779ffa60d0785edecab597cb6fa11e2ce68d5e956c5fe95c12ce24cb334a2d1fe9e63491b7d85d58ba4150df6c42f29223eaa607837fee3c71667d7c4a69d5bd2a88e548429e4630c59c38689a52cbc9099f303d680c053cce1a0b24c17a918f7dd08a9348a414e30c8c91e9680facb185914018e1c5a090cd00578c837d9f69e49eae3e45326b679678cca81ca20cf3bfa8e4e548dc446d168382695319ea9fdc14bf29c2b15e2acb925f7db4723f6b382efcbdb10f00837278564a2d0e0da63b755206bdf69faba7e5d7406ec324ca089729a68ca29cbccd17256cb465b91e718b3b64429b8a8e70a72d85b470d85f4b8169ebc74809334db04384c3c2887f09374e60cb3d5c93f3ce5077bcea293b37215ba345f6a30b1d6e08c1cf7024b65ecac5063e177d9af7f687a35c377871d87b00fe7c453199e5c0588a49bf9981651f57468bb37d1812cce02cf1a6df234cf50aabb65959fb7863384d46cbf43600aeb2858a8bea733eec75bcf02f2dfc0c2df6b6c0f807236e67cf6e7253a6f0582cad219daad67c91b8c2f38ad91a9db3bc284f6301f28ad3d1ade08cfc4a8b63268de502d7b4cad5973ce2867a534e576789fe2bd60b15da33d7a5a5e728f6e5ab7052c4636439258979a804bf67aec5546343d7cbee90b4be9d5ef0775d64bfade2daae18d7de4240dd1d88ff3816f2d5c871174b3b48e9fab898abd4cd2df8cb1c3cfff889594a3f08cb935031edbe34aab3433ffd50263a406deef158bbabfa2ec70e79c761d95fcfbef0800c95413068b3789c6b12de5ebe9b414e65ce4f86a6bbccd5ec8e4e220f8ad07255abbaef719ebe1e5d066db4dd1f639cb156c34755eb14053824a1003e97ee54e8dab35f441ee563d80d3163a7b8f71d4f17e240cfae9f2e50c164cf373bb174f5dadafe2430a17be757e30f251d5d60863526a8f46addb932c8170c4a383348c5441aa353e5f1181482d4d0cc0e5d2809c11ee1fac29230c907926c2d3fa55298ae9835c46218650421497d060d15a4194c4d7382a886333375098156a9f0fd6b1d0d94933bb6f285fe51d4aa3037739f143ba20f9b326565f6db49787d1aeb30055ce588dd3c008c0bc1a08935c991067d63003b68b9e2db95360d8aaf2103bb5142c590bb799b268488febc7414b9ae8e108ca4ab4f031adbb9fbe4631c29adb14fb9726df3c6192a3e81b6c34d68e15ee309503ccc1ab240d4ce3c9a099cd7f8782eea9bd1c7005582b9c1fe08030b47958865723652fed003c90703e07f9f1782e33f3bf3d0b83691cd5970fb4af65afa2244bff41e93fa24c33c26c43c93c33a2144aac437a4ab2b4f498104278ec5f2cd38de61eb8b436f5a9dbc3d8b2405ff0598cbcaa964377f61daaf935c42e0db4567520cfee195da1c6090d62031dd0865b2f5aa88be1746a761e3a64b78de338b8996136bbd6b859eb730aa8ab1f68bb5a02b713d8b303ab2ef1e5433d225b0dd485d40a049a1953b488df5314fdbc1c654132498838043c35c7b168e786b0f35a04", 0xdf9}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639d6d8a80f9637e0c2a3f9623478134b943d5fba4f7e0ceed66c93cc8b", 0xe6}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6ea5cd18ff95c871d91454240f370e0c8e2629e58605c4b29017a160709ec76547c92a21d0ec5589e228922b105d0b8b29256620c44d2118334025dedd46db5194f22b349264de22068d3d4db627db4fa827907e5bc02b69c36e94f8149f12116f75bd48aa86d41dfdf52e74b442782f530da1263fd0f699", 0xe8}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f39f", 0x1c}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x90}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a679224eba0fe5f05c53081ff6ebac83c264c", 0x2a}, {&(0x7f0000000ec0)="6e20cbe6a4a132117801a95e6fd3ec5771da8352900bb19979", 0x19}], 0x2, &(0x7f0000000f40)=[@timestamping={{0x14, 0x1, 0x25, 0x5}}], 0x18}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c77", 0x10}], 0x1}}], 0x4, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 12m16.382626656s ago: executing program 4 (id=279): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) symlink(&(0x7f00000000c0)='./file1/file0\x00', &(0x7f0000000100)='./file1/file0\x00') chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be521634", 0xc}, {0x0}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e7", 0x9b}], 0x3}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 12m16.254362728s ago: executing program 4 (id=280): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x2, &(0x7f0000000040)) socket$inet_tcp(0x2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00'}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8090}, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000000)='bridge0\x00') sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)}, 0x0) 12m12.586055337s ago: executing program 4 (id=287): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00', 0x0}) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_void(r1, 0x1, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, 0x0, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0xf5, &(0x7f0000009b00)={&(0x7f00000042c0)={{0x14, 0x10, 0x1, 0x0, 0x3000000, {0x7}}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x24, 0x3, "7339f2f304fdd672bad09dfb040000000001000001f9580dabf95ddc91967c20"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xc, 0x1, 'RATEEST\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000001a00)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000003040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f00000000c0)="8b", 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0xfff2, 0xc}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x14e2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x58, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_ITS={0x7, 0x2, 0x1, 0x0, 0xa}]}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x0, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x0, 0x1, 0x0, 0x1, @ipv6={{0x0, 0x3, @private1}, {0x0, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_ZONE={0x0, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0x0, 0x2, 0x0, 0x1, {0x0, 0x1, 0x21}}, @CTA_TUPLE_IP={0x0, 0x1, 0x0, 0x1, @ipv4={{0x0, 0x1, @private=0xa010100}, {0x0, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_ZONE={0x0, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x0, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0x0, 0x2, 0x0, 0x1, {0x0, 0x1, 0x2f}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) 11m56.184532591s ago: executing program 32 (id=287): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00', 0x0}) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_void(r1, 0x1, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, 0x0, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0xf5, &(0x7f0000009b00)={&(0x7f00000042c0)={{0x14, 0x10, 0x1, 0x0, 0x3000000, {0x7}}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x24, 0x3, "7339f2f304fdd672bad09dfb040000000001000001f9580dabf95ddc91967c20"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xc, 0x1, 'RATEEST\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000001a00)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000003040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f00000000c0)="8b", 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0xfff2, 0xc}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x14e2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x58, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_ITS={0x7, 0x2, 0x1, 0x0, 0xa}]}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x0, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x0, 0x1, 0x0, 0x1, @ipv6={{0x0, 0x3, @private1}, {0x0, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_ZONE={0x0, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0x0, 0x2, 0x0, 0x1, {0x0, 0x1, 0x21}}, @CTA_TUPLE_IP={0x0, 0x1, 0x0, 0x1, @ipv4={{0x0, 0x1, @private=0xa010100}, {0x0, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_ZONE={0x0, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x0, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0x0, 0x2, 0x0, 0x1, {0x0, 0x1, 0x2f}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) 11.159769205s ago: executing program 2 (id=3666): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$unix(0x1, 0x1, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000c00)=@newtfilter={0x4c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FD={0x8}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x4c}}, 0x800) 9.76817711s ago: executing program 1 (id=3669): openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x1) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x87d4b69a72310a97) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r6 = gettid() bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000cb041818000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0xe4}, 0x48) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) tkill(r6, 0xb) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000041}, 0x55fdb4595c3d8036) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) connect$llc(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 9.663479409s ago: executing program 2 (id=3671): ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg(0xffffffffffffffff, &(0x7f0000000540)={0x1, {&(0x7f0000000200)=""/80, 0xfffffff1, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000a40)={0x2, 0x0, {&(0x7f0000000940)=""/224, 0xe0, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000480)=""/187, 0xbb, 0x0, 0x2, 0x3}}, 0x48) 8.767796345s ago: executing program 2 (id=3673): ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) stat(0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000404c05a00b00000000000109022400010000000009040000010300000009210000000122070009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000100)={0x0, 0x23, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 7.739134152s ago: executing program 3 (id=3677): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x1e, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000540)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000005c0)=""/103, &(0x7f0000000480)=""/70, 0x100000}) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004c0c4}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) 7.683612976s ago: executing program 1 (id=3678): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000007c0)={0x1c, &(0x7f0000000040)={0x40, 0xf, 0x7, "00bb873f878c03"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000001c0)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.543836879s ago: executing program 5 (id=3679): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r3 = socket$alg(0x26, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000480), 0x14c98, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 7.387656662s ago: executing program 3 (id=3681): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0x0}, 0x10) write$cgroup_int(r3, &(0x7f0000000040)=0x1f00, 0x12) 5.880110319s ago: executing program 3 (id=3682): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x9, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) r0 = openat(0xffffffffffffff9c, 0x0, 0x103842, 0x22) write$FUSE_INIT(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, 0x0) gettid() timer_create(0x1, 0x0, 0x0) 3.993615557s ago: executing program 0 (id=3684): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff705"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x24000007}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x50) close(r2) 3.968482192s ago: executing program 3 (id=3685): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000200)=0x2000000000000d, 0x27, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0) 3.818628675s ago: executing program 1 (id=3686): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0xef) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7d) ioctl$TIOCSTI(r0, 0x5412, 0x0) 3.807110005s ago: executing program 2 (id=3687): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @multicast2}, 0x10) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@gcm_256={{0x304}, "611aa09f6de4ef2a", "4867f60c9366f8caca55097828d9173185df9cd607089de85deb98049bc3b01e", "7185a435", 'N_3\t\x00\x00\x008'}, 0x38) 3.64496337s ago: executing program 2 (id=3688): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80004000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000400)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1, r0}, 0xc) 3.574759286s ago: executing program 0 (id=3689): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x20, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x8, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x8084) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 3.416835212s ago: executing program 1 (id=3690): socket$nl_generic(0x10, 0x3, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = timerfd_create(0x0, 0x80000) read(r0, &(0x7f0000000040)=""/250, 0xfa) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, 0x0) 3.394261801s ago: executing program 2 (id=3691): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x3, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa8}}, 0x0, 0x5}, 0x94) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect(0x5, 0x36, 0x0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x68}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\v'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.393302648s ago: executing program 0 (id=3692): syz_usb_connect(0x3, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f000905", @ANYBLOB="a44faa"], 0x0) syslog(0x4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1646, 0x48a4d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r0}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 2.962238308s ago: executing program 5 (id=3693): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x6, 0x0, 0x0, 0x6, 0xc, "86800dd6f8adf9fb27c9d51779bbc39f452100", 0x5b5b, 0x5}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, 0x0) 2.919890354s ago: executing program 3 (id=3694): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000880)={0x4c, 0x0, &(0x7f00000006c0)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x78, 0x0, &(0x7f00000007c0)="6b8e0e307567b3dd5911e2396ced1c403284490fb328389824929522e40fa378fb329b13ee5cea56a721183ba5b0e2a7a5a0dbe6c6cb322d518f4e83051f819febbe60ea044d3ce9a7d468d12e6cf2620c10033cb1bf57d9322dab15cd9dc896b914fe5cf64d282d84b2b0f4b98fcc033d0817cbab55dc98"}) 2.659055995s ago: executing program 5 (id=3695): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x9, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) r0 = openat(0xffffffffffffff9c, 0x0, 0x103842, 0x22) write$FUSE_INIT(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, 0x0) gettid() timer_create(0x1, 0x0, 0x0) 1.875403476s ago: executing program 1 (id=3696): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000c00)=@newtfilter={0x4c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0xffff, 0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FD={0x8}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x4c}}, 0x800) 1.857917876s ago: executing program 3 (id=3697): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1404200bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001b700)=""/102392, 0x18ff8) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0xf00) bind$can_raw(r0, &(0x7f0000000080), 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 1.702976932s ago: executing program 5 (id=3698): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000001c00), 0x12) r3 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r3, 0xee01, 0x0) syz_open_procfs(0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, 0x0, 0x0, 0x40800) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r8 = socket$alg(0x26, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000480), 0x14c98, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}}) 1.550801536s ago: executing program 0 (id=3699): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x24000007}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x50) close(r2) 330.192729ms ago: executing program 5 (id=3700): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0xef) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7d) ioctl$TIOCSTI(r0, 0x5412, 0x0) 227.944032ms ago: executing program 0 (id=3701): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000040), &(0x7f0000000080)='%+9llu \x00'}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={0xffffffffffffffff, r0}, 0xc) 46.471995ms ago: executing program 1 (id=3702): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0xc, &(0x7f0000000040)={0x0, 0xc8a1, 0xdb00, 0x8, 0x29}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x1f, 0x0, 0x0) 239.385µs ago: executing program 5 (id=3703): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000001c00), 0x12) r3 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r3, 0xee01, 0x0) syz_open_procfs(0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, 0x0, 0x0, 0x40800) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r8 = socket$alg(0x26, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000480), 0x14c98, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}}) 0s ago: executing program 0 (id=3704): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000200)=0x2000000000000d, 0x27, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0) kernel console output (not intermixed with test programs): ng is disabled [ 638.559741][T11570] fuse: Bad value for 'fd' [ 638.812444][T11580] loop2: detected capacity change from 0 to 7 [ 638.817531][T11580] Dev loop2: unable to read RDB block 7 [ 638.817565][T11580] loop2: AHDI p1 p2 p3 [ 638.817596][T11580] loop2: partition table partially beyond EOD, truncated [ 638.817863][T11580] loop2: p1 start 1818582900 is beyond EOD, truncated [ 638.817886][T11580] loop2: p3 start 335544320 is beyond EOD, truncated [ 638.842295][ T5884] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 639.025643][ T5884] usb 4-1: Using ep0 maxpacket: 32 [ 639.028470][ T5884] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 639.028497][ T5884] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 639.028535][ T5884] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 639.028559][ T5884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.097932][ T5884] usb 4-1: config 0 descriptor?? [ 641.654855][ T31] usb 4-1: USB disconnect, device number 26 [ 641.817923][T11676] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1884'. [ 642.097079][T11689] fuse: Bad value for 'fd' [ 642.275963][T11700] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1893'. [ 642.497071][T11712] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1898'. [ 642.542792][T11712] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1898'. [ 642.582116][ T9] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 642.745111][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 642.747608][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 642.747644][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 642.747689][ T9] usb 1-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 642.747714][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.819091][ T9] usb 1-1: config 0 descriptor?? [ 643.113986][T11734] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1911'. [ 643.448837][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 643.448974][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 643.486814][ T9] usb 1-1: USB disconnect, device number 57 [ 643.933219][T11761] loop2: detected capacity change from 0 to 7 [ 643.936996][T11761] Dev loop2: unable to read RDB block 7 [ 643.937031][T11761] loop2: AHDI p1 p2 p3 [ 643.937063][T11761] loop2: partition table partially beyond EOD, truncated [ 643.988734][T11761] loop2: p1 start 1818582900 is beyond EOD, truncated [ 643.988766][T11761] loop2: p3 start 335544320 is beyond EOD, truncated [ 645.412283][ T5803] libceph: connect (1)[c::]:6789 error -101 [ 645.412496][ T5803] libceph: mon0 (1)[c::]:6789 connect error [ 645.683095][ T9] libceph: connect (1)[c::]:6789 error -101 [ 645.683308][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 646.129199][T11791] ceph: No mds server is up or the cluster is laggy [ 646.195337][ T9] libceph: connect (1)[c::]:6789 error -101 [ 646.195545][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 647.086394][T11837] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1956'. [ 650.732670][T11933] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2003'. [ 650.931842][ T5803] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 651.095470][ T5803] usb 1-1: Using ep0 maxpacket: 16 [ 651.097520][ T5803] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 651.097553][ T5803] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 651.097578][ T5803] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 651.097623][ T5803] usb 1-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.00 [ 651.097648][ T5803] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.174831][ T5803] usb 1-1: config 0 descriptor?? [ 651.663115][ T5803] uclogic 0003:28BD:0078.000E: interface is invalid, ignoring [ 651.812189][ T5883] usb 1-1: USB disconnect, device number 58 [ 652.757762][T11994] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2030'. [ 654.674735][T12010] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2035'. [ 656.713826][T12057] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 660.135435][ T9291] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 661.818479][T12141] ceph: No mds server is up or the cluster is laggy [ 661.820116][ T31] libceph: connect (1)[c::]:6789 error -101 [ 661.820323][ T31] libceph: mon0 (1)[c::]:6789 connect error [ 662.072244][ T5883] libceph: connect (1)[c::]:6789 error -101 [ 662.072427][ T5883] libceph: mon0 (1)[c::]:6789 connect error [ 662.112301][T12143] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 663.883054][T12166] loop2: detected capacity change from 0 to 7 [ 663.949203][T12169] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2101'. [ 663.959446][ T9630] Dev loop2: unable to read RDB block 7 [ 663.959551][ T9630] loop2: unable to read partition table [ 663.960597][ T9630] loop2: partition table beyond EOD, truncated [ 664.002740][T12172] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2101'. [ 664.068283][T12166] Dev loop2: unable to read RDB block 7 [ 664.068341][T12166] loop2: unable to read partition table [ 664.068569][T12166] loop2: partition table beyond EOD, truncated [ 664.068604][T12166] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 665.387943][T12188] binder: 12186:12188 ioctl c0306201 2000000003c0 returned -14 [ 667.479256][ T9291] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 667.494817][ T9291] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 667.496125][ T9291] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 667.497572][ T9291] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 667.498400][ T9291] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 669.531843][ T5805] Bluetooth: hci5: command tx timeout [ 670.408117][T12262] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 670.601826][T12264] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 670.951535][T12275] netlink: 'syz.0.2143': attribute type 2 has an invalid length. [ 671.923411][ T5805] Bluetooth: hci5: command tx timeout [ 672.273951][T12293] 9p: Bad value for 'rfdno' [ 672.380086][T12298] netlink: 'syz.2.2152': attribute type 4 has an invalid length. [ 672.422242][T12300] netlink: 'syz.2.2152': attribute type 4 has an invalid length. [ 672.558677][T12305] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2155'. [ 673.198852][ T8237] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.220168][T12329] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2166'. [ 673.300334][T12225] chnl_net:caif_netlink_parms(): no params data found [ 673.613071][T12343] nbd: must specify an index to disconnect [ 673.649275][ T8237] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.931865][ T5805] Bluetooth: hci5: command tx timeout [ 674.037629][ T8237] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.108329][T12355] bridge0: port 3(syz_tun) entered blocking state [ 674.108469][T12355] bridge0: port 3(syz_tun) entered disabled state [ 674.108680][T12355] syz_tun: entered allmulticast mode [ 674.111396][T12355] syz_tun: entered promiscuous mode [ 674.151383][T12355] bridge0: port 3(syz_tun) entered blocking state [ 674.151535][T12355] bridge0: port 3(syz_tun) entered forwarding state [ 674.193229][ T9] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 674.341787][ T9] usb 1-1: device descriptor read/64, error -71 [ 674.497248][ T8237] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.582577][ T9] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 674.648870][T12225] bridge0: port 1(bridge_slave_0) entered blocking state [ 674.656817][T12225] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.657525][T12225] bridge_slave_0: entered allmulticast mode [ 674.693012][T12225] bridge_slave_0: entered promiscuous mode [ 674.697629][T12225] bridge0: port 2(bridge_slave_1) entered blocking state [ 674.697755][T12225] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.697961][T12225] bridge_slave_1: entered allmulticast mode [ 674.711967][ T9] usb 1-1: device descriptor read/64, error -71 [ 674.737449][T12225] bridge_slave_1: entered promiscuous mode [ 674.832859][ T9] usb usb1-port1: attempt power cycle [ 674.864993][T12225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 675.502239][ T9] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 675.542800][ T9] usb 1-1: device descriptor read/8, error -71 [ 675.586611][T12225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 675.745043][T12391] netlink: 'syz.2.2193': attribute type 4 has an invalid length. [ 675.796912][T12395] netlink: 'syz.2.2193': attribute type 4 has an invalid length. [ 675.798383][ T9] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 675.813002][ T9] usb 1-1: device descriptor read/8, error -71 [ 675.863361][T12225] team0: Port device team_slave_0 added [ 675.922402][ T9] usb usb1-port1: unable to enumerate USB device [ 675.946845][T12225] team0: Port device team_slave_1 added [ 676.024434][ T5805] Bluetooth: hci5: command tx timeout [ 676.179729][T12225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 676.179748][T12225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 676.179777][T12225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 676.233428][T12225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 676.233448][T12225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 676.233478][T12225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 676.409339][ T8237] bridge_slave_1: left allmulticast mode [ 676.409368][ T8237] bridge_slave_1: left promiscuous mode [ 676.409616][ T8237] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.496297][ T8237] bridge_slave_0: left allmulticast mode [ 676.496327][ T8237] bridge_slave_0: left promiscuous mode [ 676.496590][ T8237] bridge0: port 1(bridge_slave_0) entered disabled state [ 678.140955][ T8237] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 678.260642][ T8237] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 678.300780][ T8237] bond0 (unregistering): Released all slaves [ 678.506768][T12225] hsr_slave_0: entered promiscuous mode [ 678.507984][T12225] hsr_slave_1: entered promiscuous mode [ 678.508898][T12225] debugfs: 'hsr0' already exists in 'hsr' [ 678.508925][T12225] Cannot create hsr debugfs directory [ 681.913170][ T8237] hsr_slave_0: left promiscuous mode [ 681.965210][ T8237] hsr_slave_1: left promiscuous mode [ 681.966183][ T8237] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 681.966203][ T8237] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 682.062651][T12519] Can't find ip_set type hash:ip,por [ 682.063235][ T8237] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 682.063262][ T8237] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 682.251371][ T8237] veth1_macvtap: left promiscuous mode [ 682.266113][ T8237] veth0_macvtap: left promiscuous mode [ 682.266461][ T8237] veth1_vlan: left promiscuous mode [ 682.266846][ T8237] veth0_vlan: left promiscuous mode [ 683.317352][ T5803] libceph: connect (1)[c::]:6789 error -101 [ 683.317562][ T5803] libceph: mon0 (1)[c::]:6789 connect error [ 683.340884][ T5803] libceph: connect (1)[c::]:6789 error -101 [ 683.341088][ T5803] libceph: mon0 (1)[c::]:6789 connect error [ 683.614261][ T5803] libceph: connect (1)[c::]:6789 error -101 [ 683.614472][ T5803] libceph: mon0 (1)[c::]:6789 connect error [ 684.122412][ T5803] libceph: connect (1)[c::]:6789 error -101 [ 684.122625][ T5803] libceph: mon0 (1)[c::]:6789 connect error [ 684.324780][ T8237] team0 (unregistering): Port device team_slave_1 removed [ 684.397129][ T8237] team0 (unregistering): Port device team_slave_0 removed [ 684.851960][T12544] ceph: No mds server is up or the cluster is laggy [ 685.950804][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.950879][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.696185][ T5803] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 686.881721][ T5803] usb 4-1: Using ep0 maxpacket: 16 [ 686.884246][ T5803] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 686.887268][ T5803] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 686.887419][ T5803] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.887459][ T5803] usb 4-1: Product: syz [ 686.887475][ T5803] usb 4-1: Manufacturer: syz [ 686.887490][ T5803] usb 4-1: SerialNumber: syz [ 686.996606][ T5803] usb 4-1: config 0 descriptor?? [ 687.014831][ T5803] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 687.014869][ T5803] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 688.367833][ T5803] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 688.763125][T12225] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 688.818762][ T5803] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 688.818803][ T5803] em28xx 4-1:0.0: board has no eeprom [ 688.892246][T12225] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 689.516267][T12225] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 689.632047][T12225] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 689.975409][T12641] em28xx 4-1:0.0: reading from i2c device at 0x482c failed (error=-5) [ 689.992503][ T5803] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 689.992551][ T5803] em28xx 4-1:0.0: dvb set to bulk mode. [ 689.994525][ T5885] em28xx 4-1:0.0: Binding DVB extension [ 690.085361][ T5803] usb 4-1: USB disconnect, device number 27 [ 690.146459][ T5803] em28xx 4-1:0.0: Disconnecting em28xx [ 690.335877][ T5885] em28xx 4-1:0.0: Registering input extension [ 690.337087][ T5803] em28xx 4-1:0.0: Closing input extension [ 690.466380][ T5803] em28xx 4-1:0.0: Freeing device [ 690.533564][T12225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 690.733803][T12225] 8021q: adding VLAN 0 to HW filter on device team0 [ 690.778431][ T1339] bridge0: port 1(bridge_slave_0) entered blocking state [ 690.778527][ T1339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 690.860937][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 690.871934][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 691.545444][T12733] 9p: Bad value for 'rfdno' [ 692.715793][T12225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 693.883806][ T5885] libceph: connect (1)[c::]:6789 error -101 [ 693.884015][ T5885] libceph: mon0 (1)[c::]:6789 connect error [ 693.894017][ T5885] libceph: connect (1)[c::]:6789 error -101 [ 693.894569][ T5885] libceph: mon0 (1)[c::]:6789 connect error [ 693.947684][T12758] ceph: No mds server is up or the cluster is laggy [ 694.259637][T12225] veth0_vlan: entered promiscuous mode [ 694.299835][T12225] veth1_vlan: entered promiscuous mode [ 694.357096][T12225] veth0_macvtap: entered promiscuous mode [ 694.415269][T12225] veth1_macvtap: entered promiscuous mode [ 694.495866][T12225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 694.572325][T12225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 694.630468][ T1339] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.631070][ T1339] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.631335][ T1339] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.631585][ T1339] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.423781][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 696.423805][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 696.687482][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 696.687505][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 696.889739][T12831] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2348'. [ 699.259042][ T9291] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 699.359197][ T9291] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 699.573612][ T9291] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 699.575454][ T9291] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 699.576577][ T9291] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 700.717500][T12886] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2363'. [ 702.481846][ T9291] Bluetooth: hci1: command tx timeout [ 702.841484][ T5784] libceph: connect (1)[c::]:6789 error -101 [ 702.841829][ T5784] libceph: mon0 (1)[c::]:6789 connect error [ 702.926820][T12905] ceph: No mds server is up or the cluster is laggy [ 703.132389][ T5784] libceph: connect (1)[c::]:6789 error -101 [ 703.132614][ T5784] libceph: mon0 (1)[c::]:6789 connect error [ 703.650001][ T5784] libceph: connect (1)[c::]:6789 error -101 [ 703.670427][ T5784] libceph: mon0 (1)[c::]:6789 connect error [ 704.495065][ T9291] Bluetooth: hci1: command tx timeout [ 704.542704][T12908] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 705.020286][ T8238] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.574307][T12931] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2377'. [ 705.725092][ T8238] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.992456][T12937] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2379'. [ 706.270164][ T8238] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.412587][ T5885] usb 1-1: new full-speed USB device number 63 using dummy_hcd [ 706.571794][ T9291] Bluetooth: hci1: command tx timeout [ 706.576348][ T5885] usb 1-1: unable to get BOS descriptor or descriptor too short [ 706.614043][ T5885] usb 1-1: not running at top speed; connect to a high speed hub [ 706.618176][ T5885] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 173, changing to 4 [ 706.649468][ T5885] usb 1-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 706.649504][ T5885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.649526][ T5885] usb 1-1: Product: syz [ 706.649541][ T5885] usb 1-1: Manufacturer: syz [ 706.649556][ T5885] usb 1-1: SerialNumber: syz [ 706.893279][T12949] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2384'. [ 706.895373][ T8238] netdevsim netdevsim1 netdevsim0 (unregistering): left allmulticast mode [ 706.937029][ T8238] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.022375][ T5885] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 707.055974][ T5885] usb 1-1: 2:1 : sample bitwidth 254 in over sample bytes 6 [ 707.055997][ T5885] usb 1-1: 2:1 : unsupported sample bitwidth 254 in 6 bytes [ 707.243354][T12859] chnl_net:caif_netlink_parms(): no params data found [ 707.389071][ T5885] usb 1-1: USB disconnect, device number 63 [ 707.421592][T12958] fuse: Bad value for 'fd' [ 707.735710][T12969] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2390'. [ 708.349636][T12982] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 708.997085][ T9291] Bluetooth: hci1: command tx timeout [ 709.301987][T12859] bridge0: port 1(bridge_slave_0) entered blocking state [ 709.302197][T12859] bridge0: port 1(bridge_slave_0) entered disabled state [ 709.302456][T12859] bridge_slave_0: entered allmulticast mode [ 709.305427][T12859] bridge_slave_0: entered promiscuous mode [ 709.412142][T12859] bridge0: port 2(bridge_slave_1) entered blocking state [ 709.412267][T12859] bridge0: port 2(bridge_slave_1) entered disabled state [ 709.412530][T12859] bridge_slave_1: entered allmulticast mode [ 709.415397][T12859] bridge_slave_1: entered promiscuous mode [ 709.963565][T12859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 709.998613][ T8238] bridge_slave_1: left allmulticast mode [ 709.998636][ T8238] bridge_slave_1: left promiscuous mode [ 709.998872][ T8238] bridge0: port 2(bridge_slave_1) entered disabled state [ 710.898767][ T8238] bridge_slave_0: left allmulticast mode [ 710.898806][ T8238] bridge_slave_0: left promiscuous mode [ 710.899077][ T8238] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.002561][ T8238] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 712.093338][ T8238] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 712.154324][ T8238] bond0 (unregistering): Released all slaves [ 712.189293][T12859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 713.080685][T13024] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2406'. [ 713.813072][T13025] usb usb5: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 714.070441][T13034] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2409'. [ 715.560180][T12859] team0: Port device team_slave_0 added [ 715.598301][T12859] team0: Port device team_slave_1 added [ 715.705365][T13042] loop2: detected capacity change from 0 to 7 [ 715.707004][T13042] Dev loop2: unable to read RDB block 7 [ 715.707047][T13042] loop2: AHDI p1 p2 p3 [ 715.707077][T13042] loop2: partition table partially beyond EOD, truncated [ 715.707295][T13042] loop2: p1 start 1818582900 is beyond EOD, truncated [ 715.707312][T13042] loop2: p3 start 335544320 is beyond EOD, truncated [ 716.228353][T12859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 716.228373][T12859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 716.228401][T12859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 716.230962][T12859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 716.230978][T12859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 716.231007][T12859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 716.831943][ T8238] hsr_slave_0: left promiscuous mode [ 716.840857][ T5885] libceph: connect (1)[c::]:6789 error -101 [ 716.841003][ T5885] libceph: mon0 (1)[c::]:6789 connect error [ 716.866743][T13062] ceph: No mds server is up or the cluster is laggy [ 716.886896][ T8238] hsr_slave_1: left promiscuous mode [ 716.887986][ T8238] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 716.888011][ T8238] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 716.944106][ T8238] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 716.944128][ T8238] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 717.024971][ T8238] veth1_macvtap: left promiscuous mode [ 717.025088][ T8238] veth0_macvtap: left promiscuous mode [ 717.025367][ T8238] veth1_vlan: left promiscuous mode [ 717.025557][ T8238] veth0_vlan: left promiscuous mode [ 717.892907][ T8238] team0 (unregistering): Port device team_slave_1 removed [ 717.932373][ T8238] team0 (unregistering): Port device team_slave_0 removed [ 718.201478][T13065] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 718.387414][T12859] hsr_slave_0: entered promiscuous mode [ 718.388768][T12859] hsr_slave_1: entered promiscuous mode [ 718.389710][T12859] debugfs: 'hsr0' already exists in 'hsr' [ 718.389736][T12859] Cannot create hsr debugfs directory [ 718.533171][T13076] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2418'. [ 718.533252][T13076] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2418'. [ 718.838582][T13085] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2420'. [ 720.626911][T13092] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2421'. [ 721.387075][T13098] input: syz0 as /devices/virtual/input/input10 [ 721.457394][T13107] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2425'. [ 723.879315][T12859] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 724.020165][T12859] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 724.178575][T12859] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 724.216957][T12859] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 724.500663][T13180] binder: 13174:13180 ioctl c0306201 200000000640 returned -22 [ 725.099073][T12859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 725.225668][T12859] 8021q: adding VLAN 0 to HW filter on device team0 [ 725.261179][ T1475] bridge0: port 1(bridge_slave_0) entered blocking state [ 725.272943][ T1475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 725.345919][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 725.346181][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 726.070677][T13209] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2450'. [ 727.108632][T12859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 727.319381][T12859] veth0_vlan: entered promiscuous mode [ 727.340604][T12859] veth1_vlan: entered promiscuous mode [ 727.609517][T12859] veth0_macvtap: entered promiscuous mode [ 727.620853][T12859] veth1_macvtap: entered promiscuous mode [ 727.720748][T12859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 728.188295][T12859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 728.225583][ T70] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.226681][ T70] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.227000][ T70] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.227308][ T70] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.009961][ T1431] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 729.009984][ T1431] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 729.497214][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 729.497237][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 729.839643][T13279] netlink: 220 bytes leftover after parsing attributes in process `syz.0.2473'. [ 729.839703][T13279] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2473'. [ 731.734412][ T5803] libceph: connect (1)[c::]:6789 error -101 [ 731.734614][ T5803] libceph: mon0 (1)[c::]:6789 connect error [ 731.755872][T13313] ceph: No mds server is up or the cluster is laggy [ 731.853357][T13314] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 732.501776][ T5884] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 732.689543][ T5884] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 732.689581][ T5884] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 732.689629][ T5884] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 732.689653][ T5884] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.760558][ T5884] usb 6-1: config 0 descriptor?? [ 732.782233][T13327] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2487'. [ 732.782293][T13327] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2487'. [ 733.545648][ T5884] hid_parser_main: 444 callbacks suppressed [ 733.545675][ T5884] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0 [ 733.545707][ T5884] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0 [ 733.545734][ T5884] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0 [ 733.545761][ T5884] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0 [ 733.545787][ T5884] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0 [ 733.545813][ T5884] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0 [ 733.545839][ T5884] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0 [ 733.648507][ T5884] cp2112 0003:10C4:EA90.000F: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 733.731966][ T5884] cp2112 0003:10C4:EA90.000F: Part Number: 0x00 Device Version: 0x00 [ 734.362726][T13320] cp2112 0003:10C4:EA90.000F: Error starting transaction: -38 [ 734.368317][ T5884] cp2112 0003:10C4:EA90.000F: error reading lock byte: -71 [ 734.416956][ T5884] usb 6-1: USB disconnect, device number 16 [ 736.721775][ T31] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 736.874479][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 736.889543][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 736.889579][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 736.889602][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 736.889647][ T31] usb 2-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 736.889739][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.993372][ T31] usb 2-1: config 0 descriptor?? [ 737.425659][ T31] dragonrise 0003:0079:0006.0010: unbalanced collection at end of report description [ 737.426672][ T31] dragonrise 0003:0079:0006.0010: parse failed [ 737.426751][ T31] dragonrise 0003:0079:0006.0010: probe with driver dragonrise failed with error -22 [ 737.622844][ T31] usb 2-1: USB disconnect, device number 50 [ 738.674183][T13385] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2507'. [ 738.835253][T13392] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2510'. [ 738.835317][T13392] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2510'. [ 739.154830][T13402] syz_tun: entered allmulticast mode [ 739.177402][T13399] syz_tun: left allmulticast mode [ 739.882795][T13406] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 740.457345][T13416] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2520'. [ 740.804275][T13430] syz_tun: entered allmulticast mode [ 740.812930][T13427] syz_tun: left allmulticast mode [ 740.951112][T13436] tmpfs: Unsupported parameter 'huge' [ 741.380743][T13454] netlink: 220 bytes leftover after parsing attributes in process `syz.5.2538'. [ 741.380808][T13454] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2538'. [ 741.542500][ T5803] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 742.415854][ T5803] usb 2-1: Using ep0 maxpacket: 8 [ 742.418271][ T5803] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 742.418298][ T5803] usb 2-1: config 0 has no interfaces? [ 742.453787][T13459] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2539'. [ 742.459588][ T5803] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 742.459621][ T5803] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 742.459735][ T5803] usb 2-1: Product: syz [ 742.460093][ T5803] usb 2-1: Manufacturer: syz [ 742.460497][ T5803] usb 2-1: SerialNumber: syz [ 742.567226][ T5803] usb 2-1: config 0 descriptor?? [ 743.489846][T13479] tmpfs: Unsupported parameter 'huge' [ 744.094915][ T5885] usb 2-1: USB disconnect, device number 51 [ 744.422358][T13499] syz_tun: entered allmulticast mode [ 744.445578][T13497] syz_tun: left allmulticast mode [ 744.716104][T13505] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2558'. [ 744.720651][T13504] tmpfs: Unsupported parameter 'huge' [ 747.377212][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.377265][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.712349][T13539] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2571'. [ 748.382746][T13551] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2575'. [ 749.305154][ T31] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 749.477852][ T31] usb 2-1: device descriptor read/64, error -71 [ 749.801852][ T31] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 749.962566][ T31] usb 2-1: device descriptor read/64, error -71 [ 750.630936][ T31] usb usb2-port1: attempt power cycle [ 750.918180][T13572] binder: 13571:13572 ioctl c0306201 200000000540 returned -22 [ 751.001815][ T31] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 751.014611][T13574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2585'. [ 751.024851][ T31] usb 2-1: device descriptor read/8, error -71 [ 751.541780][ T31] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 751.563466][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 751.565459][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 751.565489][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 751.565530][ T31] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 751.565547][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.638639][ T31] usb 2-1: config 0 descriptor?? [ 752.055519][ T31] usbhid 2-1:0.0: can't add hid device: -71 [ 752.055626][ T31] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 752.105213][ T31] usb 2-1: USB disconnect, device number 55 [ 753.228363][T13010] libceph: connect (1)[c::]:6789 error -101 [ 753.228520][T13010] libceph: mon0 (1)[c::]:6789 connect error [ 753.556788][T13010] libceph: connect (1)[c::]:6789 error -101 [ 753.556997][T13010] libceph: mon0 (1)[c::]:6789 connect error [ 753.569480][T13620] ceph: No mds server is up or the cluster is laggy [ 754.443071][ T31] libceph: connect (1)[c::]:6789 error -101 [ 754.443487][ T31] libceph: mon0 (1)[c::]:6789 connect error [ 755.455651][ T9291] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 756.265316][T13663] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2623'. [ 756.489427][ T31] libceph: connect (1)[c::]:6789 error -101 [ 756.489630][ T31] libceph: mon0 (1)[c::]:6789 connect error [ 756.742174][ T5883] libceph: connect (1)[c::]:6789 error -101 [ 756.742393][ T5883] libceph: mon0 (1)[c::]:6789 connect error [ 757.255942][ T5883] libceph: connect (1)[c::]:6789 error -101 [ 757.567078][T13668] ceph: No mds server is up or the cluster is laggy [ 757.601977][ T5883] libceph: mon0 (1)[c::]:6789 connect error [ 757.826303][ T5805] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 758.260264][T13702] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2640'. [ 760.290303][T13752] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 760.682588][T13756] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2662'. [ 761.343213][ T5883] libceph: connect (1)[c::]:6789 error -101 [ 761.343422][ T5883] libceph: mon0 (1)[c::]:6789 connect error [ 761.602402][ T5883] libceph: connect (1)[c::]:6789 error -101 [ 761.602618][ T5883] libceph: mon0 (1)[c::]:6789 connect error [ 762.112204][T13010] libceph: connect (1)[c::]:6789 error -101 [ 762.112402][T13010] libceph: mon0 (1)[c::]:6789 connect error [ 762.137380][T13777] ceph: No mds server is up or the cluster is laggy [ 767.584522][ T5884] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 767.599717][T13896] fuse: Bad value for 'group_id' [ 767.599736][T13896] fuse: Bad value for 'group_id' [ 767.737748][ T5884] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 767.737803][ T5884] usb 2-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 767.737829][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.758915][ T5884] usb 2-1: config 0 descriptor?? [ 767.763415][T13885] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 767.828482][T13905] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2726'. [ 767.871783][ T5803] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 769.491720][ T5803] usb 4-1: Using ep0 maxpacket: 16 [ 769.496938][ T5803] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 769.496973][ T5803] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 769.496997][ T5803] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 769.497024][ T5803] usb 4-1: config 0 interface 0 has no altsetting 0 [ 769.497059][ T5803] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 769.497083][ T5803] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.646808][ T5803] usb 4-1: config 0 descriptor?? [ 769.800377][ T5884] logitech-djreceiver 0003:046D:C71F.0011: unknown main item tag 0x0 [ 769.801022][ T5884] logitech-djreceiver 0003:046D:C71F.0011: unknown main item tag 0x0 [ 769.801055][ T5884] logitech-djreceiver 0003:046D:C71F.0011: unknown main item tag 0x0 [ 769.801083][ T5884] logitech-djreceiver 0003:046D:C71F.0011: unknown main item tag 0x0 [ 769.808099][ T5884] logitech-djreceiver 0003:046D:C71F.0011: unknown main item tag 0x0 [ 769.845488][ T5884] logitech-djreceiver 0003:046D:C71F.0011: unknown main item tag 0x0 [ 769.845538][ T5884] logitech-djreceiver 0003:046D:C71F.0011: unknown main item tag 0x0 [ 769.847591][ T5884] logitech-djreceiver 0003:046D:C71F.0011: unknown main item tag 0x0 [ 769.847623][ T5884] logitech-djreceiver 0003:046D:C71F.0011: unknown main item tag 0x0 [ 769.847652][ T5884] logitech-djreceiver 0003:046D:C71F.0011: unknown main item tag 0x0 [ 769.940559][ T5884] logitech-djreceiver 0003:046D:C71F.0011: reserved main item tag 0xd [ 769.956812][ T5884] logitech-djreceiver 0003:046D:C71F.0011: collection stack underflow [ 769.956835][ T5884] logitech-djreceiver 0003:046D:C71F.0011: item 0 1 0 12 parsing failed [ 769.961345][ T5884] logitech-djreceiver 0003:046D:C71F.0011: logi_dj_probe: parse failed [ 769.961408][ T5884] logitech-djreceiver 0003:046D:C71F.0011: probe with driver logitech-djreceiver failed with error -22 [ 770.039637][ T5884] usb 2-1: USB disconnect, device number 56 [ 770.163866][ T5803] hid (null): bogus close delimiter [ 770.437954][ T5883] usb 4-1: USB disconnect, device number 28 [ 770.673148][T13927] syz_tun: entered allmulticast mode [ 771.038385][T13933] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2740'. [ 772.552420][T13955] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 773.953943][T13976] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2759'. [ 776.257690][T14010] fuse: Bad value for 'fd' [ 777.432516][ T5883] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 777.862247][ T5883] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 777.862284][ T5883] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 777.862326][ T5883] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 777.862459][ T5883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.870199][ T5883] usb 2-1: config 0 descriptor?? [ 778.630122][ T5883] hid_parser_main: 350 callbacks suppressed [ 778.630149][ T5883] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0 [ 778.630188][ T5883] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0 [ 778.630216][ T5883] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0 [ 778.630243][ T5883] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0 [ 778.630270][ T5883] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0 [ 778.630296][ T5883] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0 [ 778.630322][ T5883] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0 [ 778.810245][ T5883] cp2112 0003:10C4:EA90.0013: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 778.866275][ T5883] cp2112 0003:10C4:EA90.0013: Part Number: 0x00 Device Version: 0x00 [ 778.950005][ T5883] cp2112 0003:10C4:EA90.0013: error requesting SMBus config [ 778.982955][ T5883] cp2112 0003:10C4:EA90.0013: probe with driver cp2112 failed with error -32 [ 779.074298][ T5803] usb 2-1: USB disconnect, device number 57 [ 779.147295][T14030] fido_id[14030]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 783.226401][T14106] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 783.475812][T14107] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 787.411869][ T5885] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 787.593118][ T5885] usb 2-1: Using ep0 maxpacket: 8 [ 787.637763][ T5885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 787.637804][ T5885] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 787.637851][ T5885] usb 2-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 787.637868][ T5885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.692764][ T5885] usb 2-1: config 0 descriptor?? [ 788.313525][ T5885] usbhid 2-1:0.0: can't add hid device: -71 [ 788.313652][ T5885] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 788.349953][ T5885] usb 2-1: USB disconnect, device number 58 [ 790.416375][ T9291] Bluetooth: hci5: command 0x0406 tx timeout [ 792.161879][ T5803] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 792.336826][ T5803] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 792.336881][ T5803] usb 2-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 792.336904][ T5803] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.340870][ T5803] usb 2-1: config 0 descriptor?? [ 792.341821][T14259] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 793.588916][ T5803] logitech-djreceiver 0003:046D:C71F.0014: unknown main item tag 0x0 [ 793.588945][ T5803] logitech-djreceiver 0003:046D:C71F.0014: unknown main item tag 0x0 [ 793.588964][ T5803] logitech-djreceiver 0003:046D:C71F.0014: unknown main item tag 0x0 [ 793.588984][ T5803] logitech-djreceiver 0003:046D:C71F.0014: unknown main item tag 0x0 [ 793.589003][ T5803] logitech-djreceiver 0003:046D:C71F.0014: unknown main item tag 0x0 [ 793.589022][ T5803] logitech-djreceiver 0003:046D:C71F.0014: unknown main item tag 0x0 [ 793.589074][ T5803] logitech-djreceiver 0003:046D:C71F.0014: unknown main item tag 0x0 [ 793.589093][ T5803] logitech-djreceiver 0003:046D:C71F.0014: unknown main item tag 0x0 [ 793.589112][ T5803] logitech-djreceiver 0003:046D:C71F.0014: unknown main item tag 0x0 [ 793.589131][ T5803] logitech-djreceiver 0003:046D:C71F.0014: unknown main item tag 0x0 [ 793.772498][T13010] usb 2-1: USB disconnect, device number 59 [ 795.837397][T14308] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 799.091982][ T5803] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 799.271774][ T5803] usb 2-1: Using ep0 maxpacket: 32 [ 799.275044][ T5803] usb 2-1: unable to get BOS descriptor or descriptor too short [ 799.276648][ T5803] usb 2-1: config 1 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 250, changing to 11 [ 799.276686][ T5803] usb 2-1: config 1 interface 0 has no altsetting 0 [ 799.312115][ T5803] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.40 [ 799.312151][ T5803] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.312171][ T5803] usb 2-1: Product: 亾悩姴梆랟啈↬᭳㚲눩ⵅ籇頙竘銴燴軩㒡᭬餎뜌謲家邧㔪觝㣩ե椼圲归昋罖懏藆庤︫稀皩䅔ﶧ풩⺈坴炦⤢㫒⏻テ䐔鄾Ţ껌癥嫬즶䗻鶽忩★ [ 799.312284][ T5803] usb 2-1: Manufacturer: ‥ [ 799.839391][ T5803] usbhid 2-1:1.0: can't add hid device: -71 [ 799.839547][ T5803] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 799.901787][ T5803] usb 2-1: USB disconnect, device number 60 [ 800.615322][T14372] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2924'. [ 802.575277][ T5803] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 803.166176][ T5803] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 803.166223][ T5803] usb 6-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 803.166243][ T5803] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.171108][ T5803] usb 6-1: config 0 descriptor?? [ 803.230091][T14383] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 803.733798][ T5803] hid_parser_main: 461 callbacks suppressed [ 803.733835][ T5803] logitech-djreceiver 0003:046D:C71F.0015: unknown main item tag 0x0 [ 803.733869][ T5803] logitech-djreceiver 0003:046D:C71F.0015: unknown main item tag 0x0 [ 803.733898][ T5803] logitech-djreceiver 0003:046D:C71F.0015: unknown main item tag 0x0 [ 803.733925][ T5803] logitech-djreceiver 0003:046D:C71F.0015: unknown main item tag 0x0 [ 803.733953][ T5803] logitech-djreceiver 0003:046D:C71F.0015: unknown main item tag 0x0 [ 803.733982][ T5803] logitech-djreceiver 0003:046D:C71F.0015: unknown main item tag 0x0 [ 803.734061][ T5803] logitech-djreceiver 0003:046D:C71F.0015: unknown main item tag 0x0 [ 803.734090][ T5803] logitech-djreceiver 0003:046D:C71F.0015: unknown main item tag 0x0 [ 803.734119][ T5803] logitech-djreceiver 0003:046D:C71F.0015: unknown main item tag 0x0 [ 803.734147][ T5803] logitech-djreceiver 0003:046D:C71F.0015: unknown main item tag 0x0 [ 803.737464][ T5803] logitech-djreceiver 0003:046D:C71F.0015: reserved main item tag 0xd [ 803.878003][ T5803] logitech-djreceiver 0003:046D:C71F.0015: hidraw0: USB HID v7f.fd Device [HID 046d:c71f] on usb-dummy_hcd.5-1/input0 [ 803.985102][ T5803] usb 6-1: USB disconnect, device number 17 [ 804.008191][T14408] fido_id[14408]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 804.841744][ T5885] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 805.746951][T14430] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 805.753618][ T5885] usb 2-1: Using ep0 maxpacket: 8 [ 805.756340][ T5885] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 805.768382][ T5885] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 805.768417][ T5885] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 805.768439][ T5885] usb 2-1: Product: syz [ 805.768454][ T5885] usb 2-1: Manufacturer: syz [ 805.768470][ T5885] usb 2-1: SerialNumber: syz [ 806.867488][ T5885] usb 2-1: palm_os_3_probe - error -110 getting connection information [ 806.867614][ T5885] visor 2-1:1.0: probe with driver visor failed with error -110 [ 806.921775][T14432] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 808.273431][ T5885] usb 2-1: USB disconnect, device number 61 [ 808.414429][ T5883] libceph: connect (1)[c::]:6789 error -101 [ 808.414577][ T5883] libceph: mon0 (1)[c::]:6789 connect error [ 808.591506][T14445] ceph: No mds server is up or the cluster is laggy [ 808.677452][ T5883] libceph: connect (1)[c::]:6789 error -101 [ 808.677658][ T5883] libceph: mon0 (1)[c::]:6789 connect error [ 808.818793][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.818865][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.861775][ T5885] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 809.016006][ T5885] usb 2-1: unable to get BOS descriptor or descriptor too short [ 809.016801][ T5885] usb 2-1: not running at top speed; connect to a high speed hub [ 809.018402][ T5885] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1544, setting to 64 [ 809.018451][ T5885] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 809.094390][ T5885] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 809.094424][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.094446][ T5885] usb 2-1: Product: syz [ 809.094463][ T5885] usb 2-1: Manufacturer: 헐ᾴ玂徺懀⺌´ᜩ몥戯翯嗱䎓墾ꂮ๪᷸萄򀠼 [ 809.094482][ T5885] usb 2-1: SerialNumber: syz [ 809.158568][T14452] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 809.410306][ T5885] cdc_ncm 2-1:1.0: bind() failure [ 809.435274][ T5885] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 809.435325][ T5885] cdc_ncm 2-1:1.1: bind() failure [ 809.498939][ T5885] usb 2-1: USB disconnect, device number 62 [ 810.024818][T14486] ======================================================= [ 810.024818][T14486] WARNING: The mand mount option has been deprecated and [ 810.024818][T14486] and is ignored by this kernel. Remove the mand [ 810.024818][T14486] option from the mount to silence this warning. [ 810.024818][T14486] ======================================================= [ 810.024890][T14486] cgroup: Unknown subsys name 'measure' [ 811.421957][ T5883] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 811.580267][ T5883] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 811.580324][ T5883] usb 4-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 811.580349][ T5883] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.633274][ T5883] usb 4-1: config 0 descriptor?? [ 811.656484][T14500] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 812.004804][T14527] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2990'. [ 812.192108][ T5883] hid_parser_main: 453 callbacks suppressed [ 812.192128][ T5883] logitech-djreceiver 0003:046D:C71F.0016: unknown main item tag 0x0 [ 812.192151][ T5883] logitech-djreceiver 0003:046D:C71F.0016: unknown main item tag 0x0 [ 812.192170][ T5883] logitech-djreceiver 0003:046D:C71F.0016: unknown main item tag 0x0 [ 812.192190][ T5883] logitech-djreceiver 0003:046D:C71F.0016: unknown main item tag 0x0 [ 812.192209][ T5883] logitech-djreceiver 0003:046D:C71F.0016: unknown main item tag 0x0 [ 812.192229][ T5883] logitech-djreceiver 0003:046D:C71F.0016: unknown main item tag 0x0 [ 812.192281][ T5883] logitech-djreceiver 0003:046D:C71F.0016: unknown main item tag 0x0 [ 812.192300][ T5883] logitech-djreceiver 0003:046D:C71F.0016: unknown main item tag 0x0 [ 812.192320][ T5883] logitech-djreceiver 0003:046D:C71F.0016: unknown main item tag 0x0 [ 812.192338][ T5883] logitech-djreceiver 0003:046D:C71F.0016: unknown main item tag 0x0 [ 812.194593][ T5883] logitech-djreceiver 0003:046D:C71F.0016: reserved main item tag 0xd [ 812.312445][ T5883] logitech-djreceiver 0003:046D:C71F.0016: hidraw0: USB HID v7f.fd Device [HID 046d:c71f] on usb-dummy_hcd.3-1/input0 [ 812.428739][ T5803] usb 4-1: USB disconnect, device number 29 [ 812.628839][T14532] fido_id[14532]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 814.741932][T14557] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3004'. [ 814.971786][ T9] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 815.181273][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 815.181300][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 815.181330][ T9] usb 4-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 815.181347][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.244509][ T9] usb 4-1: config 0 descriptor?? [ 815.739269][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 815.739402][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 815.802432][ T9] usb 4-1: USB disconnect, device number 30 [ 815.910629][T14579] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3016'. [ 816.806497][T14595] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3022'. [ 816.856561][ T808] libceph: connect (1)[c::]:6789 error -101 [ 816.857979][ T808] libceph: mon0 (1)[c::]:6789 connect error [ 817.105198][T14596] ceph: No mds server is up or the cluster is laggy [ 817.112383][T13010] libceph: connect (1)[c::]:6789 error -101 [ 817.112597][T13010] libceph: mon0 (1)[c::]:6789 connect error [ 817.862333][T14604] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 817.877666][T13010] libceph: connect (1)[c::]:6789 error -101 [ 817.877871][T13010] libceph: mon0 (1)[c::]:6789 connect error [ 817.997319][T14605] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 820.384706][T14633] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3036'. [ 822.259506][T14660] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 823.982177][T14672] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 824.205807][ T5885] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 824.421745][ T5885] usb 4-1: Using ep0 maxpacket: 8 [ 824.449812][ T5885] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 824.449842][ T5885] usb 4-1: config 179 has no interface number 0 [ 824.449900][ T5885] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 824.449920][ T5885] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 824.449940][ T5885] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 824.449958][ T5885] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 824.449977][ T5885] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 824.450008][ T5885] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 824.450024][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.602635][T14659] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 825.376575][T14693] cgroup: Unknown subsys name 'measure' [ 825.446123][ T5883] usb 4-1: USB disconnect, device number 31 [ 825.446174][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 825.446631][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 825.587578][ T5885] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input11 [ 826.517972][ T9291] Bluetooth: hci1: command 0x0406 tx timeout [ 828.164958][T14708] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3064'. [ 828.375090][ T9291] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 828.391005][ T9291] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 828.403929][ T9291] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 828.417546][ T9291] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 828.433443][ T9291] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 828.985705][ T43] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.427740][T14730] fuse: Bad value for 'fd' [ 829.572296][T14732] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3074'. [ 829.595164][ T43] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.493611][ T5805] Bluetooth: hci0: command tx timeout [ 830.498189][ T43] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.885030][T14755] cgroup: Unknown subsys name 'measure' [ 831.055012][T14760] fuse: Bad value for 'fd' [ 831.114451][ T43] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.558549][ T5883] libceph: connect (1)[c::]:6789 error -101 [ 831.558871][ T5883] libceph: mon0 (1)[c::]:6789 connect error [ 831.598964][T14766] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3087'. [ 831.812264][ T5883] libceph: connect (1)[c::]:6789 error -101 [ 831.812544][ T5883] libceph: mon0 (1)[c::]:6789 connect error [ 831.904892][T14762] ceph: No mds server is up or the cluster is laggy [ 832.202071][T14712] chnl_net:caif_netlink_parms(): no params data found [ 832.342879][T14772] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3089'. [ 832.571921][ T5805] Bluetooth: hci0: command tx timeout [ 833.189343][ T43] bridge_slave_1: left allmulticast mode [ 833.189373][ T43] bridge_slave_1: left promiscuous mode [ 833.189634][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 833.278960][ T43] bridge_slave_0: left allmulticast mode [ 833.278983][ T43] bridge_slave_0: left promiscuous mode [ 833.279173][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 834.656560][ T5805] Bluetooth: hci0: command tx timeout [ 835.118720][T14815] cgroup: Unknown subsys name 'measure' [ 835.586151][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 835.653199][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 835.702418][ T43] bond0 (unregistering): Released all slaves [ 835.759105][ T9] libceph: connect (1)[c::]:6789 error -101 [ 835.759254][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 835.786025][T14712] bridge0: port 1(bridge_slave_0) entered blocking state [ 835.786111][T14712] bridge0: port 1(bridge_slave_0) entered disabled state [ 835.786306][T14712] bridge_slave_0: entered allmulticast mode [ 835.791334][T14712] bridge_slave_0: entered promiscuous mode [ 835.836718][T14712] bridge0: port 2(bridge_slave_1) entered blocking state [ 835.838871][T14712] bridge0: port 2(bridge_slave_1) entered disabled state [ 835.839099][T14712] bridge_slave_1: entered allmulticast mode [ 835.874920][T14712] bridge_slave_1: entered promiscuous mode [ 836.012585][ T5803] libceph: connect (1)[c::]:6789 error -101 [ 836.012809][ T5803] libceph: mon0 (1)[c::]:6789 connect error [ 836.553436][ T5803] libceph: connect (1)[c::]:6789 error -101 [ 836.553610][ T5803] libceph: mon0 (1)[c::]:6789 connect error [ 836.630544][T14712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 836.660419][T14712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 836.712494][T14818] ceph: No mds server is up or the cluster is laggy [ 836.731846][ T5805] Bluetooth: hci0: command tx timeout [ 836.854149][T14712] team0: Port device team_slave_0 added [ 837.269481][T14712] team0: Port device team_slave_1 added [ 837.708252][T14712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 837.708272][T14712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 837.708299][T14712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 837.710683][T14712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 837.710699][T14712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 837.710727][T14712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 841.191998][T14712] hsr_slave_0: entered promiscuous mode [ 841.193421][T14712] hsr_slave_1: entered promiscuous mode [ 841.194358][T14712] debugfs: 'hsr0' already exists in 'hsr' [ 841.194382][T14712] Cannot create hsr debugfs directory [ 843.017365][ T43] hsr_slave_0: left promiscuous mode [ 843.334779][ T43] hsr_slave_1: left promiscuous mode [ 844.392419][ T43] veth1_macvtap: left promiscuous mode [ 844.392531][ T43] veth0_macvtap: left promiscuous mode [ 844.392802][ T43] veth1_vlan: left promiscuous mode [ 844.392983][ T43] veth0_vlan: left promiscuous mode [ 846.256813][ T43] pimreg (unregistering): left allmulticast mode [ 847.475978][ T43] team0 (unregistering): Port device team_slave_1 removed [ 847.558896][ T43] team0 (unregistering): Port device team_slave_0 removed [ 850.052610][T14942] Bluetooth: MGMT ver 1.23 [ 850.052657][T14942] Bluetooth: hci0: unsupported parameter 255 [ 850.052673][T14942] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 850.141334][ T43] IPVS: stop unused estimator thread 0... [ 850.563394][ T5803] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 851.135466][ T5803] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 851.135487][ T5803] usb 2-1: config 0 has no interfaces? [ 851.137186][ T5803] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 851.140672][ T5803] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 851.141055][ T5803] usb 2-1: SerialNumber: syz [ 851.220712][ T5803] usb 2-1: config 0 descriptor?? [ 851.326257][ T5803] libceph: connect (1)[c::]:6789 error -101 [ 851.326471][ T5803] libceph: mon0 (1)[c::]:6789 connect error [ 851.384086][T14961] ceph: No mds server is up or the cluster is laggy [ 851.490478][ T5803] usb 2-1: USB disconnect, device number 63 [ 851.683027][ T5885] libceph: connect (1)[c::]:6789 error -101 [ 851.683246][ T5885] libceph: mon0 (1)[c::]:6789 connect error [ 852.562190][ T5884] libceph: connect (1)[c::]:6789 error -101 [ 852.562339][ T5884] libceph: mon0 (1)[c::]:6789 connect error [ 853.156581][T14712] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 853.238206][T14712] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 853.266169][T14712] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 853.306169][T14712] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 853.871853][T12389] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 853.974373][T14712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 854.031737][T12389] usb 2-1: Using ep0 maxpacket: 32 [ 854.034379][T12389] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 854.034419][T12389] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 854.036254][T12389] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 854.036281][T12389] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 854.036296][T12389] usb 2-1: Product: syz [ 854.036307][T12389] usb 2-1: Manufacturer: syz [ 854.097037][T14712] 8021q: adding VLAN 0 to HW filter on device team0 [ 854.116341][ T6252] bridge0: port 1(bridge_slave_0) entered blocking state [ 854.116435][ T6252] bridge0: port 1(bridge_slave_0) entered forwarding state [ 854.148587][T12389] hub 2-1:4.0: USB hub found [ 855.109016][ T1431] bridge0: port 2(bridge_slave_1) entered blocking state [ 855.109118][ T1431] bridge0: port 2(bridge_slave_1) entered forwarding state [ 855.142281][T12389] hub 2-1:4.0: 2 ports detected [ 855.586839][T15008] fuse: Unknown parameter 'group_id00000000000000000000' [ 856.412485][T12389] hub 2-1:4.0: activate --> -90 [ 857.479491][T14712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 857.527649][T15005] usb 2-1: USB disconnect, device number 64 [ 857.646961][T14712] veth0_vlan: entered promiscuous mode [ 857.684756][T14712] veth1_vlan: entered promiscuous mode [ 857.840106][T14712] veth0_macvtap: entered promiscuous mode [ 857.874779][T14712] veth1_macvtap: entered promiscuous mode [ 857.988607][T14712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 858.034966][T14712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 858.079935][ T1431] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.080215][ T1431] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.080432][ T1431] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.080487][ T1431] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.736295][ T8360] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 858.736319][ T8360] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 858.968330][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 858.968355][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 860.182221][T15062] fuse: Unknown parameter 'group_id00000000000000000000' [ 860.323636][T15067] fuse: Bad value for 'fd' [ 861.474089][T15005] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 861.512222][T15081] binder: 15080:15081 ioctl 4018620d 0 returned -22 [ 861.513991][T15081] binder: 15080:15081 ioctl c0306201 200000000540 returned -22 [ 861.569671][T15085] binder: 15080:15085 ioctl c0306201 200000000640 returned -22 [ 861.644406][T15005] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 861.644558][T15005] usb 2-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 861.644585][T15005] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.698629][T15005] usb 2-1: config 0 descriptor?? [ 861.699803][T15077] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 862.157719][T15005] hid_parser_main: 449 callbacks suppressed [ 862.157746][T15005] logitech-djreceiver 0003:046D:C71F.0017: unknown main item tag 0x0 [ 862.157779][T15005] logitech-djreceiver 0003:046D:C71F.0017: unknown main item tag 0x0 [ 862.157807][T15005] logitech-djreceiver 0003:046D:C71F.0017: unknown main item tag 0x0 [ 862.157835][T15005] logitech-djreceiver 0003:046D:C71F.0017: unknown main item tag 0x0 [ 862.157862][T15005] logitech-djreceiver 0003:046D:C71F.0017: unknown main item tag 0x0 [ 862.157889][T15005] logitech-djreceiver 0003:046D:C71F.0017: unknown main item tag 0x0 [ 862.157966][T15005] logitech-djreceiver 0003:046D:C71F.0017: unknown main item tag 0x0 [ 862.157994][T15005] logitech-djreceiver 0003:046D:C71F.0017: unknown main item tag 0x0 [ 862.158022][T15005] logitech-djreceiver 0003:046D:C71F.0017: unknown main item tag 0x0 [ 862.158058][T15005] logitech-djreceiver 0003:046D:C71F.0017: unknown main item tag 0x0 [ 862.210568][T15005] logitech-djreceiver 0003:046D:C71F.0017: reserved main item tag 0xd [ 862.285312][T15005] logitech-djreceiver 0003:046D:C71F.0017: hidraw0: USB HID v7f.fd Device [HID 046d:c71f] on usb-dummy_hcd.1-1/input0 [ 862.397769][T15005] usb 2-1: USB disconnect, device number 65 [ 862.476728][T15100] fido_id[15100]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 863.687706][T15124] fuse: Bad value for 'fd' [ 864.048695][T15127] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3183'. [ 864.105998][T15129] fuse: Unknown parameter 'group_id00000000000000000000' [ 866.410113][T15161] fuse: Bad value for 'user_id' [ 866.410130][T15161] fuse: Bad value for 'user_id' [ 866.461003][T15163] fuse: Invalid rootmode [ 867.608994][T15187] fuse: Bad value for 'user_id' [ 867.609015][T15187] fuse: Bad value for 'user_id' [ 867.678993][T15189] fuse: Invalid rootmode [ 867.969090][ T5884] libceph: connect (1)[c::]:6789 error -101 [ 867.969297][ T5884] libceph: mon0 (1)[c::]:6789 connect error [ 868.232425][T15005] libceph: connect (1)[c::]:6789 error -101 [ 868.232628][T15005] libceph: mon0 (1)[c::]:6789 connect error [ 868.463533][T15206] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 868.694044][T15193] ceph: No mds server is up or the cluster is laggy [ 868.988027][T15213] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3216'. [ 869.247796][T15218] fuse: Bad value for 'user_id' [ 869.247812][T15218] fuse: Bad value for 'user_id' [ 870.260866][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.260918][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.647419][T15247] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3230'. [ 871.647443][T15247] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3230'. [ 872.412222][ T5884] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 872.632247][ T5884] usb 2-1: Using ep0 maxpacket: 8 [ 873.151703][T15272] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 873.251802][ T5884] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 873.251842][ T5884] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 873.251896][ T5884] usb 2-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 873.251925][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.327805][ T5884] usb 2-1: config 0 descriptor?? [ 873.329695][T15273] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 874.013064][ T5884] usbhid 2-1:0.0: can't add hid device: -71 [ 874.013198][ T5884] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 874.046028][ T5884] usb 2-1: USB disconnect, device number 66 [ 874.188130][T15287] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3244'. [ 874.188157][T15287] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3244'. [ 876.252925][T15309] ceph: No mds server is up or the cluster is laggy [ 876.299179][ T31] libceph: connect (1)[c::]:6789 error -101 [ 876.326175][ T31] libceph: mon0 (1)[c::]:6789 connect error [ 876.709964][T15311] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 876.901671][ T31] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 877.181716][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 877.184097][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 877.184133][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 877.184158][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 877.184201][ T31] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 877.184225][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 877.189891][ T31] usb 2-1: config 0 descriptor?? [ 877.787897][T15314] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3254'. [ 878.227459][ T31] microsoft 0003:045E:07DA.0018: ignoring exceeding usage max [ 878.267458][ T31] microsoft 0003:045E:07DA.0018: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 878.267496][ T31] microsoft 0003:045E:07DA.0018: no inputs found [ 878.267512][ T31] microsoft 0003:045E:07DA.0018: could not initialize ff, continuing anyway [ 878.982373][ T5884] usb 2-1: USB disconnect, device number 67 [ 879.245099][T15330] fido_id[15330]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 880.490107][T15342] syz.5.3263 (15342): drop_caches: 2 [ 880.649079][ T9291] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 880.691915][ T9291] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 880.706621][ T9291] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 880.741233][ T9291] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 880.744377][ T9291] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 880.843704][ T7959] bridge0: port 3(syz_tun) entered disabled state [ 881.154650][ T7959] syz_tun (unregistering): left allmulticast mode [ 881.154672][ T7959] syz_tun (unregistering): left promiscuous mode [ 881.154742][ T7959] bridge0: port 3(syz_tun) entered disabled state [ 882.930287][ T5805] Bluetooth: hci2: command tx timeout [ 883.159762][T15363] netlink: 'syz.3.3269': attribute type 1 has an invalid length. [ 883.159803][T15363] netlink: 'syz.3.3269': attribute type 2 has an invalid length. [ 883.159958][T15363] netlink: 'syz.3.3269': attribute type 3 has an invalid length. [ 883.306456][T15368] binder_alloc: 15364: binder_alloc_buf, no vma [ 883.325045][T15367] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3272'. [ 883.396441][T15370] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3272'. [ 884.972458][ T5805] Bluetooth: hci2: command tx timeout [ 885.151714][ T5884] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 885.171449][T15348] chnl_net:caif_netlink_parms(): no params data found [ 885.333746][ T5884] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 885.333772][ T5884] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 885.333813][ T5884] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 885.333829][ T5884] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.382508][ T5884] usb 6-1: config 0 descriptor?? [ 885.651702][ T31] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 885.821768][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 885.825833][ T31] usb 2-1: config index 0 descriptor too short (expected 51443, got 18) [ 885.851425][ T31] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 885.851457][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.851478][ T31] usb 2-1: Product: syz [ 885.851494][ T31] usb 2-1: Manufacturer: syz [ 885.851509][ T31] usb 2-1: SerialNumber: syz [ 885.873824][ T5884] hid_parser_main: 445 callbacks suppressed [ 885.873912][ T5884] cp2112 0003:10C4:EA90.0019: unknown main item tag 0x0 [ 885.874013][ T5884] cp2112 0003:10C4:EA90.0019: unknown main item tag 0x0 [ 885.874088][ T5884] cp2112 0003:10C4:EA90.0019: unknown main item tag 0x0 [ 885.874155][ T5884] cp2112 0003:10C4:EA90.0019: unknown main item tag 0x0 [ 885.874221][ T5884] cp2112 0003:10C4:EA90.0019: unknown main item tag 0x0 [ 885.874288][ T5884] cp2112 0003:10C4:EA90.0019: unknown main item tag 0x0 [ 885.892475][ T5884] cp2112 0003:10C4:EA90.0019: unknown main item tag 0x0 [ 885.945723][ T5884] cp2112 0003:10C4:EA90.0019: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 886.010637][T15348] bridge0: port 1(bridge_slave_0) entered blocking state [ 886.010766][T15348] bridge0: port 1(bridge_slave_0) entered disabled state [ 886.011037][T15348] bridge_slave_0: entered allmulticast mode [ 886.050368][ T31] r8152-cfgselector 2-1: Unknown version 0x0000 [ 886.050398][ T31] r8152-cfgselector 2-1: config 0 descriptor?? [ 886.051845][ T5884] cp2112 0003:10C4:EA90.0019: Part Number: 0x00 Device Version: 0x00 [ 886.077959][T15348] bridge_slave_0: entered promiscuous mode [ 886.158582][T15348] bridge0: port 2(bridge_slave_1) entered blocking state [ 886.179802][T15348] bridge0: port 2(bridge_slave_1) entered disabled state [ 886.203848][T15348] bridge_slave_1: entered allmulticast mode [ 886.254441][T15348] bridge_slave_1: entered promiscuous mode [ 886.386810][ T31] r8152-cfgselector 2-1: Unknown version 0x0000 [ 886.387426][ T31] r8152-cfgselector 2-1: bad CDC descriptors [ 886.459049][ T31] r8152-cfgselector 2-1: USB disconnect, device number 68 [ 886.675912][T15383] cp2112 0003:10C4:EA90.0019: Error starting transaction: -38 [ 886.692511][ T5884] cp2112 0003:10C4:EA90.0019: error reading lock byte: -71 [ 886.863549][T15348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 886.882629][ T5884] usb 6-1: USB disconnect, device number 18 [ 886.921939][T15348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 887.051865][ T5805] Bluetooth: hci2: command tx timeout [ 887.162409][T15348] team0: Port device team_slave_0 added [ 887.178447][T15348] team0: Port device team_slave_1 added [ 887.329476][T15407] binder_alloc: 15406: binder_alloc_buf, no vma [ 887.365675][T15348] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 887.365694][T15348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 887.365722][T15348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 887.368082][T15348] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 887.368098][T15348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 887.368128][T15348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 887.509000][T15410] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3285'. [ 887.568326][T15348] hsr_slave_0: entered promiscuous mode [ 887.569828][T15348] hsr_slave_1: entered promiscuous mode [ 887.571263][T15411] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3285'. [ 888.992858][T15348] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.351375][ T5805] Bluetooth: hci2: command tx timeout [ 890.122927][T15436] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 890.559921][T15437] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 890.741378][T15442] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 890.741411][T15442] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 890.822257][T15442] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 890.822282][T15442] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 892.582061][T15348] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.726750][T15458] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3303'. [ 893.130088][T15465] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 893.772325][T15348] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 893.921747][T15461] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3303'. [ 894.279221][T15348] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.706431][T15490] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 895.098963][ T5884] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 895.423980][ T5884] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 895.424041][ T5884] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 895.424066][ T5884] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 895.473819][ T5884] usb 6-1: config 0 descriptor?? [ 895.507646][ T5884] pwc: Askey VC010 type 2 USB webcam detected. [ 895.817531][T15497] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3317'. [ 895.817557][T15497] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3317'. [ 895.903508][ T5884] pwc: recv_control_msg error -32 req 02 val 2b00 [ 895.906090][ T5884] pwc: recv_control_msg error -32 req 02 val 2700 [ 895.907975][ T5884] pwc: recv_control_msg error -32 req 02 val 2c00 [ 895.908977][ T5884] pwc: recv_control_msg error -32 req 04 val 1000 [ 895.910898][ T5884] pwc: recv_control_msg error -32 req 04 val 1300 [ 895.946397][ T5884] pwc: recv_control_msg error -32 req 04 val 1400 [ 895.948424][ T5884] pwc: recv_control_msg error -32 req 02 val 2000 [ 895.949675][ T5884] pwc: recv_control_msg error -32 req 02 val 2100 [ 895.971332][ T5884] pwc: recv_control_msg error -32 req 04 val 1500 [ 896.255741][T15348] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 896.343291][T15348] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 896.375547][T15348] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 896.394433][ T5884] pwc: recv_control_msg error -71 req 02 val 2600 [ 896.394943][ T5884] pwc: recv_control_msg error -71 req 02 val 2900 [ 896.395418][ T5884] pwc: recv_control_msg error -71 req 02 val 2800 [ 896.396137][ T5884] pwc: recv_control_msg error -71 req 04 val 1100 [ 896.401313][ T5884] pwc: recv_control_msg error -71 req 04 val 1200 [ 896.469040][T15348] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 896.498452][ T5884] pwc: Registered as video103. [ 896.513213][ T5884] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input12 [ 896.546868][ T5884] usb 6-1: USB disconnect, device number 19 [ 896.745697][T15512] netlink: 'syz.1.3320': attribute type 1 has an invalid length. [ 897.018938][T15514] bond1: (slave bridge1): making interface the new active one [ 897.020382][T15514] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 897.052148][T15521] fuse: Bad value for 'fd' [ 897.096389][T15517] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 897.268664][T15348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 897.293180][ T5884] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 897.330979][T15348] 8021q: adding VLAN 0 to HW filter on device team0 [ 897.373253][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 897.373479][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 897.380036][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 897.408441][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 897.451883][ T5884] usb 6-1: Using ep0 maxpacket: 32 [ 897.511433][ T5884] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 897.511469][ T5884] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 897.523285][ T5884] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 897.523318][ T5884] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 897.523340][ T5884] usb 6-1: Product: syz [ 897.523355][ T5884] usb 6-1: Manufacturer: syz [ 897.583980][ T5884] hub 6-1:4.0: USB hub found [ 897.781874][ T5884] hub 6-1:4.0: 2 ports detected [ 898.586579][T15348] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 898.782674][T15545] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3330'. [ 898.782701][T15545] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3330'. [ 899.082931][T15348] veth0_vlan: entered promiscuous mode [ 899.126720][T15348] veth1_vlan: entered promiscuous mode [ 899.188713][T13010] usb 6-1: USB disconnect, device number 20 [ 899.298886][T15348] veth0_macvtap: entered promiscuous mode [ 899.343689][T15348] veth1_macvtap: entered promiscuous mode [ 899.397097][T15348] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 899.434444][T15348] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 899.479234][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.501629][ T154] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.524653][ T154] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.530950][ T154] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.960535][T15554] fuse: Unknown parameter '0x0000000000000003' [ 900.101417][ T1475] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 900.101442][ T1475] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 900.265181][ T8360] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 900.265198][ T8360] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 900.981979][T15573] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3341'. [ 900.982008][T15573] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3341'. [ 901.113957][T15577] fuse: Invalid rootmode [ 901.402295][ T5884] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 901.565225][ T5884] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 901.565280][ T5884] usb 4-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 901.565305][ T5884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 901.602846][ T5884] usb 4-1: config 0 descriptor?? [ 901.607354][T15579] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 901.671736][T13010] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 901.861344][T13010] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 901.861377][T13010] usb 3-1: config 0 has no interface number 0 [ 901.861425][T13010] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 901.873790][T13010] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 901.873821][T13010] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 901.873895][T13010] usb 3-1: Manufacturer: syz [ 901.873933][T13010] usb 3-1: SerialNumber: syz [ 901.914672][T13010] usb 3-1: config 0 descriptor?? [ 902.054078][ T5884] logitech-djreceiver 0003:046D:C71F.001A: unknown main item tag 0x0 [ 902.054118][ T5884] logitech-djreceiver 0003:046D:C71F.001A: unknown main item tag 0x0 [ 902.054147][ T5884] logitech-djreceiver 0003:046D:C71F.001A: unknown main item tag 0x0 [ 902.054174][ T5884] logitech-djreceiver 0003:046D:C71F.001A: unknown main item tag 0x0 [ 902.054201][ T5884] logitech-djreceiver 0003:046D:C71F.001A: unknown main item tag 0x0 [ 902.054229][ T5884] logitech-djreceiver 0003:046D:C71F.001A: unknown main item tag 0x0 [ 902.054306][ T5884] logitech-djreceiver 0003:046D:C71F.001A: unknown main item tag 0x0 [ 902.054334][ T5884] logitech-djreceiver 0003:046D:C71F.001A: unknown main item tag 0x0 [ 902.054360][ T5884] logitech-djreceiver 0003:046D:C71F.001A: unknown main item tag 0x0 [ 902.054388][ T5884] logitech-djreceiver 0003:046D:C71F.001A: unknown main item tag 0x0 [ 902.057665][ T5884] logitech-djreceiver 0003:046D:C71F.001A: reserved main item tag 0xd [ 902.059332][ T5884] logitech-djreceiver 0003:046D:C71F.001A: unbalanced collection at end of report description [ 902.060438][ T5884] logitech-djreceiver 0003:046D:C71F.001A: logi_dj_probe: parse failed [ 902.060525][ T5884] logitech-djreceiver 0003:046D:C71F.001A: probe with driver logitech-djreceiver failed with error -22 [ 902.226239][T13010] usbtouchscreen 3-1:0.214: Failed to read FW rev: -71 [ 902.226439][T13010] usbtouchscreen 3-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 902.267903][T15397] usb 4-1: USB disconnect, device number 32 [ 902.272668][T13010] usb 3-1: USB disconnect, device number 21 [ 902.987424][T15604] fuse: Unknown parameter '00000000000000000000' [ 903.301697][ T5885] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 903.382916][T15614] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3357'. [ 903.382942][T15614] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3357'. [ 903.479272][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 903.479309][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 903.479350][ T5885] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 903.479374][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.524069][ T5885] usb 1-1: config 0 descriptor?? [ 903.953302][ T5885] cp2112 0003:10C4:EA90.001B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 904.141844][ T5885] cp2112 0003:10C4:EA90.001B: Part Number: 0x00 Device Version: 0x00 [ 904.255340][T13010] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 904.416519][T13010] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 904.416560][T13010] usb 2-1: config 0 has no interfaces? [ 904.418737][T13010] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 904.418766][T13010] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 904.418788][T13010] usb 2-1: SerialNumber: syz [ 904.467794][T13010] usb 2-1: config 0 descriptor?? [ 904.704864][ T5884] usb 2-1: USB disconnect, device number 69 [ 904.746270][T15606] cp2112 0003:10C4:EA90.001B: Error starting transaction: -38 [ 904.749320][ T5885] cp2112 0003:10C4:EA90.001B: error reading lock byte: -71 [ 904.787570][ T5885] usb 1-1: USB disconnect, device number 64 [ 905.081777][T13010] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 905.100874][T15639] fuse: Unknown parameter '00000000000000000000' [ 905.236884][T13010] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 905.236939][T13010] usb 4-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 905.236964][T13010] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 905.261716][T13010] usb 4-1: config 0 descriptor?? [ 905.280676][T15634] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 905.290888][T15643] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3369'. [ 905.453094][T15647] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3372'. [ 905.453119][T15647] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3372'. [ 905.621725][ T808] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 905.801196][T15656] fuse: Unknown parameter '0x0000000000000003' [ 906.092907][T13010] usbhid 4-1:0.0: can't add hid device: -71 [ 906.093064][T13010] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 906.321663][ T808] usb 3-1: Using ep0 maxpacket: 8 [ 906.348043][T15662] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3377'. [ 906.468537][ T808] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 906.468575][ T808] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 906.468622][ T808] usb 3-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 906.468645][ T808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 906.487678][T13010] usb 4-1: USB disconnect, device number 33 [ 906.542156][T15664] fuse: Unknown parameter '00000000000000000000' [ 906.572045][ T808] usb 3-1: config 0 descriptor?? [ 907.267115][ T808] usbhid 3-1:0.0: can't add hid device: -71 [ 907.267541][ T808] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 907.406780][ T808] usb 3-1: USB disconnect, device number 22 [ 907.446029][ T5883] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 908.026117][ T5883] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 908.026147][ T5883] usb 6-1: config 0 has no interfaces? [ 908.033557][ T5883] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 908.033590][ T5883] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 908.033611][ T5883] usb 6-1: SerialNumber: syz [ 908.115422][ T5883] usb 6-1: config 0 descriptor?? [ 908.201794][T13010] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 908.266170][T15680] fuse: Unknown parameter '0x0000000000000003' [ 908.340894][ T5884] usb 6-1: USB disconnect, device number 21 [ 908.354498][T13010] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 908.354531][T13010] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 908.354567][T13010] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 908.354587][T13010] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.418074][T13010] usb 1-1: config 0 descriptor?? [ 908.537506][T15688] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3389'. [ 908.590242][T15690] fuse: Unknown parameter 'user00000000000000000000' [ 908.907862][T15692] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 909.640477][T13010] hid_parser_main: 457 callbacks suppressed [ 909.640503][T13010] cp2112 0003:10C4:EA90.001C: unknown main item tag 0x0 [ 909.640535][T13010] cp2112 0003:10C4:EA90.001C: unknown main item tag 0x0 [ 909.640562][T13010] cp2112 0003:10C4:EA90.001C: unknown main item tag 0x0 [ 909.640588][T13010] cp2112 0003:10C4:EA90.001C: unknown main item tag 0x0 [ 909.640615][T13010] cp2112 0003:10C4:EA90.001C: unknown main item tag 0x0 [ 909.640642][T13010] cp2112 0003:10C4:EA90.001C: unknown main item tag 0x0 [ 909.640668][T13010] cp2112 0003:10C4:EA90.001C: unknown main item tag 0x0 [ 909.666642][T13010] cp2112 0003:10C4:EA90.001C: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 910.042471][T13010] cp2112 0003:10C4:EA90.001C: Part Number: 0x00 Device Version: 0x00 [ 911.172766][T15675] cp2112 0003:10C4:EA90.001C: Error starting transaction: -38 [ 911.173743][T13010] cp2112 0003:10C4:EA90.001C: error reading lock byte: -71 [ 911.243337][T13010] usb 1-1: USB disconnect, device number 65 [ 911.542108][ T5885] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 911.712110][ T5885] usb 4-1: Using ep0 maxpacket: 8 [ 911.963993][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 911.970487][ T5885] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 911.970773][ T5885] usb 4-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 911.970841][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 912.156467][ T5885] usb 4-1: config 0 descriptor?? [ 912.845548][T15718] netlink: 'syz.1.3393': attribute type 5 has an invalid length. [ 912.857480][T15718] ip6erspan0: entered promiscuous mode [ 913.648833][T15725] fuse: Unknown parameter 'user00000000000000000000' [ 913.661119][ T5885] usbhid 4-1:0.0: can't add hid device: -71 [ 913.661249][ T5885] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 913.769235][ T5885] usb 4-1: USB disconnect, device number 34 [ 913.892992][T15727] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3402'. [ 915.880905][T15750] fuse: Unknown parameter '0x0000000000000003' [ 916.441783][T15758] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 917.336596][T15762] fuse: Unknown parameter 'user00000000000000000000' [ 918.887979][T15777] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 918.976649][T15782] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3420'. [ 920.058402][T15793] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3425'. [ 920.131711][ T31] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 920.284123][ T31] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 920.284155][ T31] usb 3-1: config 0 has no interface number 0 [ 920.284203][ T31] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 920.325681][ T31] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 920.325713][ T31] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 920.325734][ T31] usb 3-1: Manufacturer: syz [ 920.325749][ T31] usb 3-1: SerialNumber: syz [ 920.573305][ T31] usb 3-1: config 0 descriptor?? [ 920.589564][T15800] fuse: Unknown parameter 'user_i00000000000000000000' [ 920.609745][T15801] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 920.786346][ T31] usbtouchscreen 3-1:0.214: Failed to read FW rev: -71 [ 920.786632][ T31] usbtouchscreen 3-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 920.844792][ T31] usb 3-1: USB disconnect, device number 23 [ 922.485902][T15827] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3437'. [ 922.544741][T15826] netlink: 'syz.5.3435': attribute type 1 has an invalid length. [ 923.801861][ T5884] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 923.803004][T15844] binder: 15842:15844 ioctl c0306201 200000000540 returned -22 [ 923.834513][T15833] bond1: (slave bridge1): making interface the new active one [ 923.836170][T15833] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 923.871461][T15847] binder: 15842:15847 ioctl c0306201 200000000640 returned -22 [ 923.908185][T15839] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 923.913910][T15846] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3444'. [ 923.951720][ T5884] usb 4-1: Using ep0 maxpacket: 32 [ 923.955724][ T5884] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 923.955763][ T5884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 923.979711][ T5884] usb 4-1: config 0 descriptor?? [ 924.041886][ T5884] gspca_main: sunplus-2.14.0 probing 041e:400b [ 924.635353][T15862] fuse: Unknown parameter 'user_i00000000000000000000' [ 924.747462][T15868] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3449'. [ 924.747509][T15868] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3449'. [ 924.849824][T15869] syzkaller1: entered promiscuous mode [ 924.849854][T15869] syzkaller1: entered allmulticast mode [ 924.941658][T13010] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 925.304771][T13010] usb 2-1: device descriptor read/64, error -71 [ 926.199387][T13010] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 926.324292][ T5884] gspca_sunplus: reg_w_riv err -71 [ 926.324394][ T5884] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 926.341745][T13010] usb 2-1: device descriptor read/64, error -71 [ 926.352008][ T5884] usb 4-1: USB disconnect, device number 35 [ 926.452205][T13010] usb usb2-port1: attempt power cycle [ 926.841857][T13010] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 927.027053][T13010] usb 2-1: device descriptor read/8, error -71 [ 927.030355][T15881] netlink: 168 bytes leftover after parsing attributes in process `syz.5.3456'. [ 927.171299][T15883] netlink: 'syz.3.3458': attribute type 1 has an invalid length. [ 927.261717][T13010] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 927.291947][T13010] usb 2-1: device descriptor read/8, error -71 [ 927.396083][T15886] bond1: (slave bridge2): making interface the new active one [ 927.397646][T15886] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 927.423590][T13010] usb usb2-port1: unable to enumerate USB device [ 927.622078][T15883] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 928.067261][T15900] binder: 15897:15900 ioctl c0306201 200000000540 returned -22 [ 928.120095][T15902] binder: 15897:15902 ioctl c0306201 200000000640 returned -22 [ 928.643847][T15905] fuse: Unknown parameter 'user_id00000000000000000000' [ 929.042365][T15913] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3466'. [ 929.042388][T15913] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3466'. [ 930.687922][T15922] netlink: 168 bytes leftover after parsing attributes in process `syz.5.3468'. [ 931.700288][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.700371][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.330159][T15946] fuse: Unknown parameter 'user_id00000000000000000000' [ 932.447532][T15947] binder: 15944:15947 ioctl c0306201 0 returned -14 [ 932.555179][T15952] binder: 15944:15952 ioctl c0306201 200000000640 returned -22 [ 932.573979][T15953] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3480'. [ 932.573996][T15953] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3480'. [ 934.176464][T15963] netlink: 168 bytes leftover after parsing attributes in process `syz.5.3482'. [ 935.531225][T15983] fuse: Unknown parameter 'user_id00000000000000000000' [ 936.950101][T15998] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 937.923965][T16006] netlink: 168 bytes leftover after parsing attributes in process `syz.5.3498'. [ 937.978356][T16004] binder: 16001:16004 ioctl c0306201 0 returned -14 [ 938.030810][T16008] binder: 16001:16008 ioctl c0306201 200000000640 returned -22 [ 938.708630][T16014] netdevsim netdevsim3: Direct firmware load for . failed with error -2 [ 938.708678][T16014] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 938.718132][T16017] fuse: Bad value for 'fd' [ 940.091718][ T5884] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 941.721808][ T5884] usb 3-1: Using ep0 maxpacket: 32 [ 941.724402][ T5884] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 941.724436][ T5884] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 941.726711][ T5884] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 941.726741][ T5884] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 941.726765][ T5884] usb 3-1: Product: syz [ 941.726780][ T5884] usb 3-1: Manufacturer: syz [ 941.814177][ T5884] hub 3-1:4.0: USB hub found [ 942.856700][ T5884] hub 3-1:4.0: config failed, can't read hub descriptor (err -22) [ 943.231598][ T5884] usb 3-1: USB disconnect, device number 24 [ 943.640223][T16045] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3512'. [ 944.970048][T16051] binder: 16050:16051 ioctl c0306201 0 returned -14 [ 945.021898][T16053] binder: 16050:16053 ioctl c0306201 200000000640 returned -22 [ 945.083053][T16054] fuse: Bad value for 'fd' [ 948.499261][T16077] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3525'. [ 949.826481][ T5883] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 949.981902][ T5883] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 949.981933][ T5883] usb 6-1: config 0 has no interfaces? [ 949.983567][ T5883] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 949.983595][ T5883] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 949.983615][ T5883] usb 6-1: SerialNumber: syz [ 950.012351][ T5883] usb 6-1: config 0 descriptor?? [ 950.253793][T16104] binder: 16100:16104 ioctl c0306201 200000000640 returned -22 [ 950.411368][ T5883] usb 6-1: USB disconnect, device number 22 [ 950.454080][T16109] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3536'. [ 951.382049][T16138] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3547'. [ 951.419754][T16140] netlink: 'syz.1.3548': attribute type 1 has an invalid length. [ 951.461707][ T5885] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 951.563863][T16142] bond2: (slave bridge2): making interface the new active one [ 951.565194][T16142] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 951.636386][T16148] binder: 16144:16148 ioctl c0306201 200000000640 returned -22 [ 951.637679][ T5885] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 951.637712][ T5885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.637734][ T5885] usb 1-1: Product: syz [ 951.637749][ T5885] usb 1-1: Manufacturer: syz [ 951.637763][ T5885] usb 1-1: SerialNumber: syz [ 952.861218][ T5885] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 952.861286][ T5885] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 953.306043][T16176] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3562'. [ 953.306513][T16172] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3560'. [ 953.414237][T16179] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3562'. [ 954.139891][T16186] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 954.335519][T15807] Bluetooth: hci0: command 0x0406 tx timeout [ 955.228453][T16196] binder: 16191:16196 ioctl c0306201 200000000640 returned -22 [ 956.258101][ T5885] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000084. ret = -EPROTO [ 956.258164][ T5885] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPROTO [ 956.258186][ T5885] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 956.265270][ T5885] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 956.356558][ T5885] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 956.421738][ T5885] usb 1-1: USB disconnect, device number 66 [ 956.667500][T12389] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 956.682110][T16217] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3573'. [ 957.858768][T16227] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 958.113388][T12389] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 958.113417][T12389] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 958.113458][T12389] usb 4-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 958.113482][T12389] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 958.304433][T12389] usb 4-1: config 0 descriptor?? [ 959.523941][T16246] binder: 16242:16246 ioctl c0306201 200000000640 returned -22 [ 959.721660][T15397] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 959.817771][ T5883] usb 4-1: USB disconnect, device number 36 [ 959.887101][T15397] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 959.887136][T15397] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.887158][T15397] usb 1-1: Product: syz [ 959.887174][T15397] usb 1-1: Manufacturer: syz [ 959.887189][T15397] usb 1-1: SerialNumber: syz [ 960.313380][T16258] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3585'. [ 960.500577][T15397] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 960.500699][T15397] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 960.875434][T16264] netlink: 'syz.1.3587': attribute type 1 has an invalid length. [ 960.875750][T16264] netlink: 'syz.1.3587': attribute type 2 has an invalid length. [ 960.875813][T16264] netlink: 'syz.1.3587': attribute type 3 has an invalid length. [ 962.328956][T16269] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3589'. [ 963.178454][T15397] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 963.178516][T15397] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 963.179387][T15397] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 963.278833][T15397] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 963.401793][ T5966] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 963.557511][ T5966] usb 3-1: Using ep0 maxpacket: 32 [ 963.568092][ T5966] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 963.568127][ T5966] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 963.593750][ T5966] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 963.593774][ T5966] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 963.593789][ T5966] usb 3-1: Product: syz [ 963.593799][ T5966] usb 3-1: Manufacturer: syz [ 963.634935][ T5966] hub 3-1:4.0: USB hub found [ 963.815894][ T5966] hub 3-1:4.0: 2 ports detected [ 964.435709][ T5885] usb 1-1: USB disconnect, device number 67 [ 965.118623][ T5885] hub 3-1:4.0: activate --> -90 [ 965.471668][T15397] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 965.525790][ T5883] usb 3-1: USB disconnect, device number 25 [ 965.628072][T15397] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 965.628092][T15397] usb 6-1: config 0 has no interfaces? [ 965.629372][T15397] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 965.629393][T15397] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 965.629414][T15397] usb 6-1: SerialNumber: syz [ 965.703241][T15397] usb 6-1: config 0 descriptor?? [ 965.881459][T16302] netlink: 'syz.1.3600': attribute type 1 has an invalid length. [ 965.881541][T16302] netlink: 'syz.1.3600': attribute type 2 has an invalid length. [ 965.881762][T16302] netlink: 'syz.1.3600': attribute type 3 has an invalid length. [ 966.269360][T15397] usb 6-1: USB disconnect, device number 23 [ 966.553963][T16307] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3603'. [ 967.482189][ T5883] usb 2-1: new full-speed USB device number 74 using dummy_hcd [ 967.512288][T15397] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 967.784756][T16323] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 968.025835][ T5966] IPVS: starting estimator thread 0... [ 968.053673][T15397] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 968.053708][T15397] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.053722][T15397] usb 3-1: Product: syz [ 968.053733][T15397] usb 3-1: Manufacturer: syz [ 968.053744][T15397] usb 3-1: SerialNumber: syz [ 968.098259][ T5883] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 968.098287][ T5883] usb 2-1: config 0 has no interface number 0 [ 968.098334][ T5883] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 968.100039][ T5883] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 968.100058][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 968.100072][ T5883] usb 2-1: Manufacturer: syz [ 968.100083][ T5883] usb 2-1: SerialNumber: syz [ 968.131797][T16326] IPVS: using max 8 ests per chain, 19200 per kthread [ 968.168667][ T5883] usb 2-1: config 0 descriptor?? [ 968.375744][ T5883] usbtouchscreen 2-1:0.214: Failed to read FW rev: -71 [ 968.376023][ T5883] usbtouchscreen 2-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 968.416954][ T5883] usb 2-1: USB disconnect, device number 74 [ 968.650957][T15397] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 968.651002][T15397] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 969.185542][T16332] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3611'. [ 970.066355][T15397] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 970.067161][T15397] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 970.209340][T16341] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3614'. [ 970.469612][T15397] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000404. ret = -EPROTO [ 970.469671][T15397] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 970.912052][T15397] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 970.954039][T15397] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 971.006875][T15397] usb 3-1: USB disconnect, device number 26 [ 971.053524][ T31] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 971.204884][ T31] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 971.204925][ T31] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 971.204947][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 971.250497][ T31] usb 4-1: config 0 descriptor?? [ 971.283839][ T31] pwc: Askey VC010 type 2 USB webcam detected. [ 971.437853][T16355] comedi comedi1: 8255: I/O port conflict (0x7,4) [ 971.574674][ T5966] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 971.628321][T16364] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3625'. [ 971.671087][ T31] pwc: recv_control_msg error -32 req 02 val 2b00 [ 971.678825][ T31] pwc: recv_control_msg error -32 req 02 val 2700 [ 971.680680][ T31] pwc: recv_control_msg error -32 req 02 val 2c00 [ 971.692525][T12389] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 971.702424][ T31] pwc: recv_control_msg error -32 req 04 val 1000 [ 971.703190][ T31] pwc: recv_control_msg error -32 req 04 val 1300 [ 971.704316][ T31] pwc: recv_control_msg error -32 req 04 val 1400 [ 971.705787][ T31] pwc: recv_control_msg error -32 req 02 val 2000 [ 971.706514][ T31] pwc: recv_control_msg error -32 req 02 val 2100 [ 971.739131][ T5966] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 971.739181][ T5966] usb 2-1: config 0 has no interfaces? [ 971.747627][ T5966] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 971.747658][ T5966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 971.747701][ T5966] usb 2-1: SerialNumber: syz [ 971.791910][ T5966] usb 2-1: config 0 descriptor?? [ 971.860425][T12389] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 971.860461][T12389] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 971.860507][T12389] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 971.860531][T12389] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 971.881298][T12389] usb 6-1: config 0 descriptor?? [ 971.911420][ T31] pwc: recv_control_msg error -32 req 02 val 2500 [ 972.019712][ T5966] usb 2-1: USB disconnect, device number 75 [ 972.121257][ T31] pwc: recv_control_msg error -71 req 02 val 2600 [ 972.124223][ T31] pwc: recv_control_msg error -71 req 02 val 2900 [ 972.146253][T16357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 972.146574][ T31] pwc: recv_control_msg error -71 req 02 val 2800 [ 972.147527][ T31] pwc: recv_control_msg error -71 req 04 val 1100 [ 972.149171][T16357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 972.151739][ T31] pwc: recv_control_msg error -71 req 04 val 1200 [ 972.206903][T12389] ath6kl: Failed to submit usb control message: -71 [ 972.206955][T12389] ath6kl: unable to send the bmi data to the device: -71 [ 972.206970][T12389] ath6kl: Unable to send get target info: -71 [ 972.232096][ T31] pwc: Registered as video103. [ 972.235038][ T31] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input16 [ 972.283990][ T31] usb 4-1: USB disconnect, device number 37 [ 972.303597][T12389] ath6kl: Failed to init ath6kl core: -71 [ 972.304922][T12389] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 972.371752][T12389] usb 6-1: USB disconnect, device number 24 [ 973.257136][ T5805] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 973.257168][ T5805] CPU: 0 UID: 0 PID: 5805 Comm: kworker/u9:3 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 973.257201][ T5805] Tainted: [L]=SOFTLOCKUP [ 973.257209][ T5805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 973.257224][ T5805] Workqueue: hci4 hci_rx_work [ 973.257253][ T5805] Call Trace: [ 973.257262][ T5805] [ 973.257272][ T5805] dump_stack_lvl+0xe8/0x150 [ 973.257310][ T5805] sysfs_create_dir_ns+0x271/0x2a0 [ 973.257338][ T5805] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 973.257375][ T5805] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 973.257408][ T5805] ? rt_spin_unlock+0x160/0x200 [ 973.257445][ T5805] kobject_add_internal+0x631/0xd10 [ 973.257482][ T5805] kobject_add+0x163/0x240 [ 973.257516][ T5805] ? __pfx_kobject_add+0x10/0x10 [ 973.257553][ T5805] ? get_device_parent+0x370/0x3a0 [ 973.257586][ T5805] device_add+0x408/0xb80 [ 973.257618][ T5805] hci_conn_add_sysfs+0xd5/0x210 [ 973.257657][ T5805] le_conn_complete_evt+0x10e6/0x16b0 [ 973.257699][ T5805] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 973.257730][ T5805] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 973.257765][ T5805] ? lockdep_hardirqs_on+0x7a/0x110 [ 973.257792][ T5805] ? skb_pull_data+0xfb/0x200 [ 973.257828][ T5805] hci_le_conn_complete_evt+0x187/0x470 [ 973.257864][ T5805] hci_event_packet+0x659/0xef0 [ 973.257895][ T5805] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 973.257925][ T5805] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 973.257950][ T5805] ? __pfx_hci_event_packet+0x10/0x10 [ 973.257971][ T5805] ? rt_spin_unlock+0x14f/0x200 [ 973.258015][ T5805] ? hci_send_to_monitor+0xe2/0x590 [ 973.258048][ T5805] hci_rx_work+0x3ee/0x1030 [ 973.258080][ T5805] ? process_scheduled_works+0xa8d/0x18c0 [ 973.258116][ T5805] process_scheduled_works+0xb6e/0x18c0 [ 973.258182][ T5805] ? __pfx_process_scheduled_works+0x10/0x10 [ 973.258220][ T5805] ? assign_work+0x3d5/0x5e0 [ 973.258256][ T5805] worker_thread+0xa53/0xfc0 [ 973.258316][ T5805] kthread+0x388/0x470 [ 973.258340][ T5805] ? __pfx_worker_thread+0x10/0x10 [ 973.258368][ T5805] ? __pfx_kthread+0x10/0x10 [ 973.258392][ T5805] ret_from_fork+0x51e/0xb90 [ 973.258435][ T5805] ? __pfx_ret_from_fork+0x10/0x10 [ 973.258465][ T5805] ? __switch_to+0xc7d/0x1450 [ 973.258497][ T5805] ? __pfx_kthread+0x10/0x10 [ 973.258521][ T5805] ret_from_fork_asm+0x1a/0x30 [ 973.258561][ T5805] [ 973.258591][ T5805] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 973.258630][ T5805] Bluetooth: hci4: failed to register connection device [ 974.211845][T15397] usb 1-1: new full-speed USB device number 68 using dummy_hcd [ 974.616530][T15397] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 974.616562][T15397] usb 1-1: config 0 has no interface number 0 [ 974.616611][T15397] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 974.623623][T15397] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 974.623656][T15397] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 974.623678][T15397] usb 1-1: Manufacturer: syz [ 974.623695][T15397] usb 1-1: SerialNumber: syz [ 974.684934][T15397] usb 1-1: config 0 descriptor?? [ 974.915323][T15397] usbtouchscreen 1-1:0.214: Failed to read FW rev: -71 [ 974.915620][T15397] usbtouchscreen 1-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 974.956265][T15397] usb 1-1: USB disconnect, device number 68 [ 976.337262][ T5966] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 976.818553][ T5966] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 976.818575][ T5966] usb 3-1: config 0 has no interfaces? [ 976.819755][ T5966] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 976.819776][ T5966] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 976.819792][ T5966] usb 3-1: SerialNumber: syz [ 976.840018][ T5966] usb 3-1: config 0 descriptor?? [ 977.264221][ T5966] usb 3-1: USB disconnect, device number 27 [ 977.582148][T16429] binder: 16428:16429 ioctl c0306201 2000000002c0 returned -14 [ 979.451749][ T5805] Bluetooth: hci4: command 0x0406 tx timeout [ 982.051918][ T5885] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 982.204773][ T5885] usb 1-1: device descriptor read/64, error -71 [ 983.041642][ T5885] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 983.181696][ T5885] usb 1-1: device descriptor read/64, error -71 [ 983.301656][ T5885] usb usb1-port1: attempt power cycle [ 983.452993][ T5883] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 983.738321][T16509] ceph: No mds server is up or the cluster is laggy [ 983.760969][T15397] libceph: connect (1)[c::]:6789 error -101 [ 983.761187][T15397] libceph: mon0 (1)[c::]:6789 connect error [ 983.971648][ T5885] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 984.000838][ T5885] usb 1-1: device descriptor read/8, error -71 [ 984.008617][ T5883] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 984.008666][ T5883] usb 3-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 984.008690][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.035305][T16512] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 984.238102][ T5883] usb 3-1: config 0 descriptor?? [ 984.250332][ T5883] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 986.115529][T12389] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 986.944421][T12389] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 986.944477][T12389] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 986.944501][T12389] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 986.995723][T12389] usb 2-1: config 0 descriptor?? [ 987.010729][T12389] pwc: Askey VC010 type 2 USB webcam detected. [ 987.999101][T12389] pwc: send_video_command error -71 [ 987.999122][T12389] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 987.999273][T12389] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 988.064633][T12389] usb 2-1: USB disconnect, device number 76 [ 988.082352][ T5883] usb 3-1: USB disconnect, device number 28 [ 988.831664][ T5883] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 988.851701][T15397] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 988.982595][ T5883] usb 3-1: Using ep0 maxpacket: 32 [ 989.004851][T15397] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 989.004883][T15397] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 989.004927][T15397] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 989.004943][T15397] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 989.049215][ T5883] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 989.049314][ T5883] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 989.081741][ T5883] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 989.081764][ T5883] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 989.081779][ T5883] usb 3-1: Product: syz [ 989.081790][ T5883] usb 3-1: Manufacturer: syz [ 989.122475][T15397] usb 1-1: config 0 descriptor?? [ 989.140396][ T5883] hub 3-1:4.0: USB hub found [ 989.200261][T16569] binder: 16568:16569 ioctl 4018620d 0 returned -22 [ 989.787764][T15397] ath6kl: Failed to submit usb control message: -71 [ 989.790395][T15397] ath6kl: unable to send the bmi data to the device: -71 [ 989.790418][T15397] ath6kl: Unable to send get target info: -71 [ 989.853508][T15397] ath6kl: Failed to init ath6kl core: -71 [ 989.855064][T15397] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 989.861798][ T5883] hub 3-1:4.0: 2 ports detected [ 989.970087][T15397] usb 1-1: USB disconnect, device number 73 [ 991.340621][T16586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3699'. [ 991.436779][ T5883] usb 3-1: USB disconnect, device number 29 [ 993.239449][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.239525][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.456388][ T5883] ------------[ cut here ]------------ [ 993.456404][ T5883] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 993.456429][ T5883] WARNING: drivers/gpu/drm/drm_vblank.c:1320 at drm_crtc_wait_one_vblank+0x357/0x500, CPU#1: kworker/1:5/5883 [ 993.456480][ T5883] Modules linked in: [ 993.456504][ T5883] CPU: 1 UID: 0 PID: 5883 Comm: kworker/1:5 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 993.456533][ T5883] Tainted: [L]=SOFTLOCKUP [ 993.456541][ T5883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 993.456556][ T5883] Workqueue: events drm_fb_helper_damage_work [ 993.456588][ T5883] RIP: 0010:drm_crtc_wait_one_vblank+0x4b6/0x500 [ 993.456620][ T5883] Code: e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 ea b9 d3 fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 48 8b 3c 24 44 89 f6 e8 e9 f4 ff ff b8 92 ff ff ff [ 993.456640][ T5883] RSP: 0018:ffffc900050478c0 EFLAGS: 00010246 [ 993.456658][ T5883] RAX: 1ffff11004bb0000 RBX: ffffffff8f7558b0 RCX: 0000000000000000 [ 993.456675][ T5883] RDX: ffffffff8bbf6340 RSI: ffffffff8bc121e0 RDI: ffffffff8f7558b0 [ 993.456699][ T5883] RBP: ffffc900050479a8 R08: 0000000000000000 R09: 0000000000000000 [ 993.456714][ T5883] R10: dffffc0000000000 R11: fffffbfff1ed4e37 R12: ffffffff8bc121e0 [ 993.456742][ T5883] R13: ffff888025d80000 R14: 0000000000000000 R15: ffffffff8bbf6340 [ 993.456757][ T5883] FS: 0000000000000000(0000) GS:ffff888126435000(0000) knlGS:0000000000000000 [ 993.456775][ T5883] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 993.456790][ T5883] CR2: 000000110c392e9c CR3: 000000000dbba000 CR4: 00000000003526f0 [ 993.456809][ T5883] Call Trace: [ 993.456819][ T5883] [ 993.456834][ T5883] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 993.456865][ T5883] ? __pfx_autoremove_wake_function+0x10/0x10 [ 993.456903][ T5883] ? rt_spin_unlock+0x160/0x200 [ 993.456939][ T5883] ? drm_vblank_get+0x147/0x260 [ 993.456970][ T5883] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 993.456999][ T5883] drm_fb_helper_damage_work+0x131/0x6f0 [ 993.457040][ T5883] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 993.457075][ T5883] ? process_scheduled_works+0xa8d/0x18c0 [ 993.457104][ T5883] ? process_scheduled_works+0xa8d/0x18c0 [ 993.457139][ T5883] process_scheduled_works+0xb6e/0x18c0 [ 993.457207][ T5883] ? __pfx_process_scheduled_works+0x10/0x10 [ 993.457246][ T5883] ? assign_work+0x3d5/0x5e0 [ 993.457281][ T5883] worker_thread+0xa53/0xfc0 [ 993.457343][ T5883] kthread+0x388/0x470 [ 993.457367][ T5883] ? __pfx_worker_thread+0x10/0x10 [ 993.457395][ T5883] ? __pfx_kthread+0x10/0x10 [ 993.457421][ T5883] ret_from_fork+0x51e/0xb90 [ 993.457456][ T5883] ? __pfx_ret_from_fork+0x10/0x10 [ 993.457485][ T5883] ? __switch_to+0xc7d/0x1450 [ 993.457517][ T5883] ? __pfx_kthread+0x10/0x10 [ 993.457541][ T5883] ret_from_fork_asm+0x1a/0x30 [ 993.457582][ T5883] [ 993.457601][ T5883] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 993.457619][ T5883] CPU: 1 UID: 0 PID: 5883 Comm: kworker/1:5 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 993.457647][ T5883] Tainted: [L]=SOFTLOCKUP [ 993.457655][ T5883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 993.457667][ T5883] Workqueue: events drm_fb_helper_damage_work [ 993.457706][ T5883] Call Trace: [ 993.457714][ T5883] [ 993.457722][ T5883] vpanic+0x56c/0xa60 [ 993.457756][ T5883] ? __pfx__printk+0x10/0x10 [ 993.457799][ T5883] ? __pfx_vpanic+0x10/0x10 [ 993.457828][ T5883] ? is_bpf_text_address+0x292/0x2b0 [ 993.457861][ T5883] ? is_bpf_text_address+0x26/0x2b0 [ 993.457905][ T5883] panic+0xc5/0xd0 [ 993.457937][ T5883] ? __pfx_panic+0x10/0x10 [ 993.458107][ T5883] ? ret_from_fork_asm+0x1a/0x30 [ 993.458137][ T5883] __warn+0x315/0x4f0 [ 993.458171][ T5883] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 993.458205][ T5883] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 993.458237][ T5883] __report_bug+0x29a/0x540 [ 993.458270][ T5883] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 993.458301][ T5883] ? __pfx___report_bug+0x10/0x10 [ 993.458349][ T5883] report_bug_entry+0x19a/0x290 [ 993.458374][ T5883] ? drm_crtc_wait_one_vblank+0x4b6/0x500 [ 993.458404][ T5883] ? drm_crtc_wait_one_vblank+0x4bb/0x500 [ 993.458435][ T5883] handle_bug+0xce/0x200 [ 993.458467][ T5883] exc_invalid_op+0x1a/0x50 [ 993.458496][ T5883] asm_exc_invalid_op+0x1a/0x20 [ 993.458520][ T5883] RIP: 0010:drm_crtc_wait_one_vblank+0x4b6/0x500 [ 993.458558][ T5883] Code: e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 ea b9 d3 fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 48 8b 3c 24 44 89 f6 e8 e9 f4 ff ff b8 92 ff ff ff [ 993.458580][ T5883] RSP: 0018:ffffc900050478c0 EFLAGS: 00010246 [ 993.458601][ T5883] RAX: 1ffff11004bb0000 RBX: ffffffff8f7558b0 RCX: 0000000000000000 [ 993.458618][ T5883] RDX: ffffffff8bbf6340 RSI: ffffffff8bc121e0 RDI: ffffffff8f7558b0 [ 993.458636][ T5883] RBP: ffffc900050479a8 R08: 0000000000000000 R09: 0000000000000000 [ 993.458650][ T5883] R10: dffffc0000000000 R11: fffffbfff1ed4e37 R12: ffffffff8bc121e0 [ 993.458667][ T5883] R13: ffff888025d80000 R14: 0000000000000000 R15: ffffffff8bbf6340 [ 993.458708][ T5883] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 993.458758][ T5883] ? __pfx_autoremove_wake_function+0x10/0x10 [ 993.458798][ T5883] ? rt_spin_unlock+0x160/0x200 [ 993.458836][ T5883] ? drm_vblank_get+0x147/0x260 [ 993.458867][ T5883] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 993.458896][ T5883] drm_fb_helper_damage_work+0x131/0x6f0 [ 993.458944][ T5883] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 993.458982][ T5883] ? process_scheduled_works+0xa8d/0x18c0 [ 993.459013][ T5883] ? process_scheduled_works+0xa8d/0x18c0 [ 993.459047][ T5883] process_scheduled_works+0xb6e/0x18c0 [ 993.459117][ T5883] ? __pfx_process_scheduled_works+0x10/0x10 [ 993.459158][ T5883] ? assign_work+0x3d5/0x5e0 [ 993.459197][ T5883] worker_thread+0xa53/0xfc0 [ 993.459262][ T5883] kthread+0x388/0x470 [ 993.459286][ T5883] ? __pfx_worker_thread+0x10/0x10 [ 993.459317][ T5883] ? __pfx_kthread+0x10/0x10 [ 993.459344][ T5883] ret_from_fork+0x51e/0xb90 [ 993.459381][ T5883] ? __pfx_ret_from_fork+0x10/0x10 [ 993.459412][ T5883] ? __switch_to+0xc7d/0x1450 [ 993.459444][ T5883] ? __pfx_kthread+0x10/0x10 [ 993.459471][ T5883] ret_from_fork_asm+0x1a/0x30 [ 993.459512][ T5883] [ 993.459690][ T5883] Kernel Offset: disabled