last executing test programs: 1m1.999818883s ago: executing program 3 (id=5450): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000000}, [@call={0x85, 0x0, 0x0, 0x2f}, @printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RADAR_DETECT(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20040818) 1m1.713947584s ago: executing program 3 (id=5451): bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup(r0, 0x0, 0x200002, 0x0) r2 = openat$cgroup_procs(r1, 0x0, 0x2, 0x0) write$cgroup_pid(r2, 0x0, 0x0) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000040)='./config\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/Loopback.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='sys_mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='dev_mnt\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='dev_mnt\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='sys_mnt/block/zram0/comp_algorithm\x00', 0x40001, 0x0) write(r3, &(0x7f0000000300)='lzo-rle', 0x7) r4 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r4, 0x0, 0x0) write$FUSE_DIRENTPLUS(r4, 0x0, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/disksize\x00', 0x1, 0x0) write(r5, &(0x7f0000000400)='1', 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='dev_mnt/zram0\x00', 0x2, 0x0) write(r6, &(0x7f0000000480)="00112233", 0x4) close(r6) 1m1.158439492s ago: executing program 3 (id=5455): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xf, 0x4, 0x8, 0x1}, 0x37) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000001440)=@framed, &(0x7f0000000200)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x21}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r0, r1, 0x5}, 0x10) close(0x3) 1m0.966715234s ago: executing program 3 (id=5456): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x5, 0x7, 0x6, 0x3, 0x0, 0xffffffffffffffff, 0x20000000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xfffffffd, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000640)={r4, r1, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6fc}}, 0x40) syz_emit_ethernet(0x32, &(0x7f0000000000)={@random="e904a200", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x400, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0x4}}}}}}}, 0x0) 1m0.550061514s ago: executing program 3 (id=5459): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x34, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8c51}, 0x4040140) 1m0.509685384s ago: executing program 3 (id=5461): socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x187) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x44000880}, 0x4080) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xa90d, 0x1f480, 0x2, 0x254}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r2, 0x0, 0x0) write(r2, &(0x7f0000000300)='rt1719 0x49\x00', 0xc) write(r2, &(0x7f0000000400)='wusb3801 0x4a\x00', 0xe) 43.691796363s ago: executing program 32 (id=5461): socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x187) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x44000880}, 0x4080) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xa90d, 0x1f480, 0x2, 0x254}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r2, 0x0, 0x0) write(r2, &(0x7f0000000300)='rt1719 0x49\x00', 0xc) write(r2, &(0x7f0000000400)='wusb3801 0x4a\x00', 0xe) 10.364778332s ago: executing program 0 (id=5556): semctl$GETNCNT(0x0, 0x3, 0xe, 0x0) 10.181943646s ago: executing program 2 (id=5559): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0300000004000000040000000a00000000", @ANYRES32=0x0, @ANYBLOB="0400"/18, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000851000000300000018000000000000000000000000000000950000000000000095000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r1, 0x0, 0x0}, 0x10) 10.051554932s ago: executing program 0 (id=5560): r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@any, 0x2}) 9.782021948s ago: executing program 0 (id=5562): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_TOL(r2, 0x0, 0x44044) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000001c40)=ANY=[@ANYBLOB="0000f9ffffffa85969e6ffffffffffff88a8000081000002"], 0x2e) 8.231044079s ago: executing program 2 (id=5563): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000280)={'ipvlan1\x00', 0x400}) r1 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, {0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4044084}, 0x0) 7.969960226s ago: executing program 1 (id=5565): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000240)={0x24, @none={0x0, 0x1}}, 0x14) sendmmsg(r0, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010) 7.512259153s ago: executing program 0 (id=5566): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='veno', 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0) 7.108940708s ago: executing program 1 (id=5567): socket$pppoe(0x18, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000340)=0x1) chdir(0x0) 7.040311437s ago: executing program 0 (id=5568): connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='dummy_udc.0', 0xb) write(r0, &(0x7f00000002c0)='\n', 0x1) 5.679792579s ago: executing program 1 (id=5570): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c011703010902240001010000000904690202ff5aa30009050402100000fa000905820240"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x44, &(0x7f0000000700)=ANY=[@ANYBLOB="000e50"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.492711693s ago: executing program 2 (id=5571): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e131f8104c1302007eac0102030109021b0001000000000904000001098b7500090583", @ANYRES8], 0x0) mknodat$loop(0xffffffffffffff9c, 0x0, 0x1004, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) write$uinput_user_dev(r1, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002100)="6be00ff09321e32a7e0f1d45fb750f1ec1e15be572a7d646754b1e1cea02c1a06d0d9b86514e6d2afce29df5f1c8c9d7fe087f7116a341c9cbd7e536063d42367f79ccea05e0fcf72d19ca8c65612a23cc447ab5982f306298cdfc40a20a86edfb26c58e1491cae8751acfc1a22867f2c866f123215209101ec37c2734d97fb4612d3fcefd3a3c824ace75498471f1e35363631e29cc05b89e0f7c26948edbe418596cbc3c686d37d24c4e049f35e99d6b6de3470b342a4fd59bf1012aa8d0238f32d7f7702e0c293dcf71b3d4b2dc6c6527b070c12a5ae65027998d74526c4ad93283708c59afc157dd299b378f85e159970e6d3a248022714873dd40b54f4418012650d564b568730769a5f27fd458d5f535672fddbd105e2423a85bfdfda463d3cd154ea1185276b3c400ccc39953ef1af942faeff3095d9cdd9bc03374408464d4f85ab3c1fd2965b5e0fbd95a396baf089d5792b3ecc98c536c19b4d3cdf8cb499072f3491f0cf76b5f42ea959c5366ab26f2b7e2539e999d41d6bc583ba13a3f59fc4d3b37eb96374ffc22d53e79198778092656323188c7a052e0d9587a6b80cafa69a0ad770d514e5c9edc0b8556732c04549cc9f4d14299e75514d80b6e026a0f8daea3ff396aff507f89bf2ca4c48d0413f6a37c8ef193dbe07ab52e7487f4e115caa83153f729d4659f51e27939429c41a5e5152eb48e109e81baa49ebf076bb13ebdd031a0c077b18c0db18a085d5b3262cb50649b4e8fecf6b306a0430a8f89e2ff7fda3ca48fb8e2b1aad0999072f20c98466cc868970e53d6860b8fc76fa3b40eb40ab92863469346d5a6860c0297dfa94d908f1168ba2ac5197a9f9cbf3abc32fce7d14ee228d395ae53b1bc374939be6b2a135661048a02aaeeedfc755fe1df353b8e8e0aa093574321ab55fc3d16060ed0cd3e8c3f5954b745048d58061e834cfb142d027c03a69df52118f92acc387a734df458e28cd8324ae588bdcf3c12e4c492e4c14e47dc3efc9123bc189dcc677b619fd8cf34ebed6b73c2c740964072f1d87505ccc4ce189293b0c1e6cd68b8ad7a8cb8b049b8aa4f3675ab09787732643353c4f93cec2787e5ca3b96011459c133cb6947d51c408981798b675b9f9bc2186f016b585bdbb6100434e97033261967b1f6fc02bbe32e4125e922b364757008fff71df0ac6e9479caebefc5255727e8f9deb38bac48fcf65b70b7ff53b1b73682903d1300ba4fe2cf7a7c4b1a561f902d4bdfcc37697c68ff5e4f9bb0722f2be019fa57791da330e8ec69683e7b12d64ec27fe017bb18190609be3a406cc4b1c818e778c404c0e35b1f0cf2e8109f672ee2d649fb71e686930c434ad92fe5d290deed7fdf3fdd71d7409f23daab810569a01a8ae9167e558e71f84f88639ecb5ec1ae0eae0474e37ce81d73c7c93a912a56de243e39995c8d1a6194457509fbd62b94bcce0f1e7b3aca47d36c4874fd1aa8d8d1475a2af2f457ea39004dc3c1834bf20701c00416858c810bd72e8c55f4507c2187d062abf119fe91a1871e423c16964de5351c70dd668f08c99329fe189d78d7944a2e9ce47b2aad9657f8e860ab6bc03c365059528dd28350b84c06c56e87f019a0fe5a71595c7ccbf493c41fe52e907708020cdaf26be8e21d3a97c2ef6dd1de85ac6a9f8ba0771d48353b399555c5b6be41241c9de86888d0fcd5198343ad913fa35da296dc3eeecfe2ee4a56b56bf84e23a3bddc4601b504433b339468f029cd2dd9e637217e5816391010093471cd0ac2d352cb88ff5e5930dd589d1b03c5f408023c8207a1bfc2de6794a65985c1345ab256b8e7990fb8c3fe54b9b76dee19f4a7380a0659b730db58bf69efb51044eb4eaf0df5b7a07baf629a537fdef46c33c6dec622c27dc806025bc0144a3a1a64136cd8e7674a4e01aafaec604ef8356b921be7df063a2ec67dc312d964ff1c30f8d77b7c3e06588ac351a8818701c5b7c9e4b9e9721e12d0bc0731c7e2ccd0b1028e5ac990a3e45c44ba1ce8ea73a54927f6fda6cf5e52253a8ee0df194073fe76568f51c6cf45312f1aec20010db2b59d95d39c3b1a40067e6657964368e12173d71fe2f7950e5f0f3a2923ecd474b623010d77f674e52f23552eece20dccfe15c64fa05ffa6bec88d28fea4b2de624c8dd1106c86b220af9f53f15e00785d764224975efb15f290c4a6af055f7a8baeebe9903c0c9f48b53dc423997adcb8acbe7d82de105383644f9d9f3d8cc8f9a79bfa75c7e1a3f470d2448612ee26950b0affc39e98bb75a30583ae55383d376f22dce6c2cdc544ad8d68fa82e5d16b0a65c63ba4c4fae2ce1269ce321be2a0f2550c2b47c8cca190d0e44af824705dc3d5565c4c0a1ab68c50d83534fb32e7ba31c8dec6a17c127985a516ace1f9016278e85056f6288513ed706b873646e0fe3f1803ce71dc72d91da85ad5d385e0b072b6857ecf36746cceced48b0e4663b92cc349baeec28d27ff568ba9bf4d68191166cf65a13af7cf213c2ffca68b9379ea167c7bda82fa7261e2754a00a6f0b4065c57a8f9868f8247d39eca71faae27afbff8864bf934e746300d5e9a31a4b78ca059bb9c40d30bfe745336264daa57002085686f73f48474e2d4bc1e38e62ed4547a6bbd74b1d9fab3f4b2622eb6c8d32b79ef9ab691fefd7b1bfa787de85ccaa14687be5a0529f928dfd974752bde8b063bc717d2a07eb4a1651f465aa78be32457955f83b2cb4608e22a4ef7bccba0378274289a7adc38521cd8d691741e87b03f536b9196c2284baa062038a22320e6d8c3f9e29051450b16bb7909566e75e6ebe423fa88b7f395c0dae22f027efc014db76ffc4244dfeb4d014809569caed95c43f92486c8d9cde522d403efe788fbc3b54ac39e90bd2f2dc3f3d66308d2df22d9602da5ec2133f296252bf0da014020194cf9ee65e7b137c5488401eba99def61e721fa3889d86ecaa5d5a3e4c8642fc0f9ef43186edd427402f63f06bbfa26850f2e4c71bd6387978a8085740fe4b1012dde14413dfc12052acf9508fd6a8a64f59d5756a59c806b64f42cc4466aed5327071f32fe2cb24aa62d21da4c1de44c2aab46f01c53eef1d83002437668fc494953f4951fcc1bc050e402b7cb73d61b3fae4d806fe6b745160df0a6fb6e830d18b04f142b22de9fe78b4307f95c9badbeeca0a2cb134d229e19fbab6a913ea4a0c59b59ac4e9de55b4fe2d7d5585d57c21678931d151038442fc388557da00dc01bae0c7df06ac72be56668cfd942c9edcfe77c1128a6640ad4d4a210d69d94b5e306b3848c09c61c05ec638096ceff5fc156bd34cc3c461bbc4d3ea0eabeabf46459f98f15821e181dfec54b87c9c10bf1ae64449ed9e90fa660191d38760117f9a0ae6422ad983e8b348bc0579dba87ad505c24ccb683ffd8f734b8e5f0c65e3a749d86a2fb1aad19abb96490167993fa130db74152d8984084220ad17653c01f3fbbd2e1000d3ace6ed697f0d4a9bdfb2dff49148e8def07acd5e3355370d1c19d3afb7bd12fc30e6acb4841f641672dda483d0afc53150369ce1e2523b3706f5b65542032838d45a5dedfc2369e385390d1628e78dced081b931f67dc75e23cf2b0f529fde6c9c84e4b3894c11b9f56ddc65827f68b0fde08875fa8ad3cac7e212c7727d41f6d51434a890ccac19f3e9b0a594556fbf51e84e874de4e2eeba206369871dd844f6248ec180b3741f2ab3d23b76448562207f577b10f4d14949a926b837252cdcf62af32e83001d63ebde5c1d266c8d2b43f5545dbf070eaa47613481d6c920f1801b490d2a847d7e85872fe75f56d90f050fe741d94511058d71271daf9c565ced757402c315685820c80ed1f6a889a8db0326ecb58f1f287d24c5beb5b19b94d8400aa406daa591e292832c78be74613ffc2a12635951d487650c864ef55927036edb5ec02614e5eb75f67b933220ac39f891c37cc0b7fe23ce8b0ad8e5ec9c0efbfd706f5730c142fbd5297ac7f03f4ca6f49b9cba1e9cbee6b08e936c7ee1642e5f1e3eb566c294d10fc4fb45a7239590cbdebb7a16b972a983748e73aa23be7f66a30c22610456445234bb8ba11b412eaae69b808f76d90b7bb14223b644b8860c550f3c92ae47c06a38429d66da2a414c01985d4b7c935717a4dec2cd4e89092d5dc9aefd0ac0b23481459a2adcb654063743b667c3c3241f203f81385aeef164a0be7655d02074b6710b4e2c50c3ee0747892327e8f22aaf51fccf2b715b24c02c6690389afe83e6128a1ef199234c8c9803124089382c6bed5b296945fcfa937313caf39176b741809c7c7fde30468e8875266315d9e733258b9305cd92276211d0c75c97b103c31c52c0c4dd17dc5931c5a7644ddb15ab8de78cc32125f85b78ba00d09079626a813e589dce18010f427079ec6cb74a2752c7247e7b7df37dc701245e9cf37fbfac5b1c427ba477b15c21d48084d38253a4d49af73d9f25e23333ac3a84e4b671fd31abd4b32441fb07dfe30659915a88ddb684933bee5ee9dccd45763f6544fdacfa4d821f36d7907a42ab9db72b231cbc9e1ddf2000441586eab8d59277955f9665c5e358da456d759490bf9f79462ced96372b237ab61d8b48a78612c64f48d5bd89fb6e67b0818033743b7ffb3305bcdbab0f71b46d5ab61d8190c5106813ca4435386e55e43c6cb925cf81039ed5f11df2d96c53a448519ede7e83dee8b82acd143ce0d1b91318a0f0efdabb77c178cdee559c1d2181600b6b3847e05f41234c5bee021d4f0bbed10cd557f686e8b9769780a13df35fd069855fd8e2aec5bb84e8d0b7740fb7fa88b823826b7e8a979148b95177a2e720b45296c280a9abce6bc5d943e394c07eed5148f86a94450569af8c38e184603abc46a59b2ba01e84225da828ccb93ca557e4ffe9e8e8b98c1fa471409f9d7b9d9da4b0f4fb7d58d7474039204faa2ab1067a2eaf9df247a2ba1b099cdfe79a7db1273e0660e37f6e8afc125564c6b8b5e893231a6addf326988bd78578950e4b2f317ffb322fb44a570587c6c6baa59d6d844454e92f89534c7d902760b984fae30ff5eff5b90fe03f49429c5a5becd275c5c670ae8d39b5faf986970492e579a8d98aed5da2894c96bf8779e9aaba84724bf471734b4d9d4db6a0ebfcb1c31f88c59d4b0f38078435f575b0e7cc7cd5f6cc9a39bf16d3514e89b562ded72187c1e550d4852e9bdc585525d02ed1d3adc819a072d82c37935b2fe6ff3c3f0c7b7fbee2c25ad515835d067ea53af1c6d0b4a9b35de653f2e5a8a1d9261c49813ecab580f368a79515a8621f16b750fa9d711d2884764e222c723e7dd94532de5d5d40fe12660fef784d8ecf2ededbef7a61b881cf61e8c035f31d3801b34ea385fb5fd3895e6789ed741aab0e5d091050f7cde8aa1f4feb53683626870adc4190554316bcea49c6ee182fd66a6ccd2e198ba2ae6f3621a6a6186a6cbd5378e6347afbd88cbff663f73ff568ed47861219eee3598520625f64f7a6303be64361d705021104d9871592d28524f5cf391e7d445746a0e9e42924760e62c955301e1ab3744f79217841a1668a6a871bf2efc278b0bf0b4b46a769caadf243f1af31df19006080d11a4f84ee4932034f48fdde875415d949438e8c1bdea8bb9899c230561482960cac0e77ce78584e35d3430af7ed37ec71f33f265d62b397b99f71aeef08e0a92e221d8ef14c82616d06b1ccafa63969a7ab145928d9c7b1b23e16acc00754ac707f6ce3939b4604baf0f3fa69fa48bb7218f3a992e65a4aabd8a6adf4a7c1e32877273393a1567632348d480a84f3b4ae31eb810a22ccb652064be040c9a90e52b59031a22abfd1840b2ecec89d16426ab31dfb83177ae08255d1424a6ddf8bb5d5adb66a7e6cf7f68be0ce5b4a56fa3463da621062ac85af5334018c3a473c5af9c5686eb9abbd24420293df7ae5fd075b2d3b9aec226e1a016c989b029d1daed5933d285227dbedab33a32b0d71d4cb1fb79c3a8e342fb4126785a3259f241150c7c381918f8f88146fb8fcf14d42ace0fd5c0084db3726575b04ef47c2bd1a0ccf977c8232e1688d4d39c88f7ab8d565b578bed84bbfa17982308a9269933ebd2f7260a67e01a3790fca5673643aff626514846dc1634e3c2fbdb0eaedb163072d9c0bb2fc129aa57618ca1d2b37324aa49972117b9ca81092eb89089659c39eaa380fd950aa914181ac98c1990af713eb834fdb2b731f2791292e9b2774aaf3a091152e25d7ea92a6c80f3217fedba12816ec910677d3381b361272074143fb51f391e6cd1953dd6cbfa33ba97e5d019fddd3da76fe350b767c8eb706a5f46a536c3103da6af42c1a5a7cf488be7f0d3a8ae4598d0d1f4f8339a63c124a5ce1b18a225f840368d390acddeac589093a753ed2e45ae4bfa62f222d4c6a6fbaee8163e76a0bf6291619d3b4af530d03c1769a456ec52491996c6739290f4cd325e9a3c1f0db9b079e5809859f6bb2d6cc494a500862179b65aa65ded80971e60dd9338dddbbf736924626aae8d65fa4a32e8affbf49b5b20c546520aac759594fd996e5f573e8a359dc4192c2723e05d7f8d212d78a03e9a7ee41b3ed6d098964f77e1e96e0e6641222fa247757998d9e9d33787079d1b0913f9b6fd0163f7603d4bbb7430738ab618026ba0526b5722f7c5b155e9c20209ebdac884d4afc34ee32420892acfa0a63d93e1aa4fa71581166d783abe45cbfc66f65c75b803d932dc3a40851508499001dde84fd3646ae3743c1edcfe433579cd41ce625262082cea3e4f87ea17f26c2390e9c134972cbe8291c500ad925f896aeb4d652cc01e397ff9eec6c4ab32432f61f90ad6f24fc2f24c47d039e90cbdbdf97ea2c0b1ea6562c1ab651e46adab86814e14e9196366e6da5f16c743baa0d31a1b14200451df59b639dbf0ec8976e31b41462268a66d3fb55b0fb344a587890d92d7df87244b517276d6cef787cecdff92e2293d0d2e51228bba0ba3ba9e57483147727a90ab99b07498a1a9c46cd32e0af493e4c092e515ee9541c678c3566092e62a14a566e225741102071811d3306cb229b8c08da4119a565f9a37c06a983ceef668e7e97df595bdfbb43b0350fc823bcb53630508b3e7a42ff2ad5a8bbe83811c35b78578fa4842122ac76be6e7cd68a9d3ec8c6a3b83edc1f545a1f2a74ce5212f02ba85e104c0e1d21e4f77a7a6a0253fee2d486f65abc1d15e483b7fa87633e1c02e6f5aecdb779dd63af36c457905b2d4bf2c19cd4a4d2475245c45f3ef767654be5c17aa9b3e20f8019d356324baf677e4604e736c2a8b289874accbcb2ba300f063fae2c7d447f9a60daa87592275e501cbe880e7b46230659a7d62fc069ba7bbbbb71cd5ece453a692e2a3620cc8ccab581f4619963b1823c401b84092580dfcba08f63c14cef7963bf6af2d550e2fd43dc2ce1a5079e9018fe1a6ade4496b17f31dba644022c1bec7f7a345f2f02fe4eae1fcf5fb377fbf33c4774843cdbf1357741b0a9be5b403345db08d6ce70e4c5a18cd8725364b4096b69863964dc596cc115105043f6d80603873494c177b886299ca479d1c12a3547ff136a203282df0bcda49100de02b368ea5124385a03280d15319c5a5dd5e150b6eb19c969ca5f3c3368bdceef985c1ee957d5a61b3b9eb1c25e40b280fcec638726f78747dc2944e052c184cde480a6db7a2cd7b75f34cabcb2ca0e105b7af8c5d480b1cdb47d3675daf2e621db6e6e8924c157a028e860adde429979536c0ae06d3665e98166181eb47061fb20b4f0547daa938c54db21518a980ca5670a3dede7eb479497156b4998d11e838b6f112d3dfeae167bc3a8ed7c617fac11907094f25b0939bb9956f7aaeafbfa452ed4ec91b2d1450a43946096cd104a90a73d733da92125de061de39cf8e3d582e80f368b22c66cb69b86677a0af3bffc828ad1769a223f0f98e0857b60bc82f739fd6bbbc9a150830e1e850fa3bbd587bd9ca0fc157fb0b292cc91365348d01c435e2641885891306e177a108712290ec2d1ed3c6ac6d1c49aaffed07b6196787667cd8a7af66a1b631f9e9c6fd668509b7a2e3fb848d99e54e298742ca771bf913e50552faefdc0761a0b1aac3a38669fcead818c26a385ea630960c151199226c23d2b1c9ee42f864d4fe05d22eb826a80ad0738daa292938a4dcfcf18a60642b2b27f0e4998b0569e79c5dff424dd324641eea7b929d13735754b4ba6ba1540bba6b4bee8d3ee3c8eb8900e9c7e36854958f5b632b111abd2f722e2bc8aae4f112f488d8c1e68ba32fe88a39773ed81027a14cfb877ece8772dab7d360fab7cfdbe31a69d218ebdb7b0e42fd8b775348171f0f8a59386fa4fce2fcefefc09cc99a477cb856376541ea5048ab8fdda87ace560a565b2fef28327ca537eea30114a0581fee17e58ed375377a23d8ccbbf757a38aaac794a2630c42f9d4ed91cb886cb5277134b02ab691434ce897c5310472a691f99785cfda982c8e99bd2958589258228a7624137acc14a13414d06f6aee835b3637a0e7367a010652a076b2945fbdadeef39d65d503c18dddf7320fe07873331dcfd16e7cc786cac00d0934cbc6b024547e11132e413b7e5c4f926202128dd1aa76a39065a4228f109bc3327dac7028843868c32fc5d902e882494eb3cf81a90212434d404cbcfa72722e3ffae4079c2e6333a94d5f38e2a2948a01c10ef1a3adf58bae5b5629be02a1de64a201223c23eafd61a5be59c40188fa3463fd64e98f0646a9338bb9ee85f3ae5eabe370727121b4d8559fd32be127a6dbae3c1a0a43ef1173973b3b3332434c6c92b3144d9fb308768ac4067eb72d597b85882e0d228c6dece3da0677d9fa6c0b13788b3c2b0c9e67377ba0ada12aa956672c58f48fa6cfdf0357d3cacaabac46dc438632b1e7edd2e120310e7cd7aa2e55884b422b88e8eb9f5c468c04f9f045f4e5db6e12e9d7330f3e625a7e4676f61f93ef729e8cdcc743c44d409ff5720e85d4d447cfed7f187563ba04add8b27b4d5e1ffdd2bd61a167fcb2da8d58e67479ebc076329d27bd24ecaabc4cb05552a409ce732ecb86a6f0a213e35e53f895bc3c4ae020ece95499d4670375f61a32fa215c956734f5aa8127ec859cac7dfb5768864dbb7591f9d91c05e365c4dbbe864d207bf9eff04c4b3047b68cebef76a7915673dc5ccafceea57e38beb9a69473a1b2ae96c812ad737db0f66e87ca2305dcf4d66369e1afd74412a207a7a2d6d97982e1874afbb6a9b420d88c542bcdf6cf3c471c7535a3444ad20793876793ae8fce30fa468a50ef241a15ec0ea3229b1aafcc76eba39f8cd2a93f23ca2b04c8ab87c4f5a8a9a1db2bbcfc17a7aedf9877b669f8c2a05783586581656064dcfd19200a8f60c4a582766a0ca5148b56cafafc0ef1601336b5398a90d1bf68c6ecfd1ede4613fb9474bba76ac945f51129543e22f14fdea4e83c206032f0b5faa83a1de556d48d5f08bc53879f492897df7a59e0ddd00825706a2ac507e5fb31bad911885ffeb2d2368616786593f4c6a28de95edf2d993dab8412fa5b16eda075a934f46967fb1643085370da9d1e5895a5ddd6898429c85bdd41b28f58cc3e106ab683ecba03253b8122a8a5b6064eca49ebf4133c2351468cd01200332fca0a00c980262de8dcde7f7e145aefe3fa56b2dd6de3f2bd1514f5a2d143457a28bac927c248d4d89779835a83398fd54e7d53d7b2d1940fd12d7bc96e16b0fe15fbf16c3600b891b3bf6723303d01a73120734be1f27d43b5d5c374d6e44f42e0df163d2797da5bb292fbc58f8ac2056dbcb85b31c81d56fad2d70625b1304c04a508d6ccbfce072279358cb065a50f4bdf8c81ddd2d5ecf2b2c2b1015051b465e5ff682c9e3f8160123334b82dfe5a751d8b5f441587bbe7bed1325338cae6a8c06101081a55d499efbf77714e43ac99ecc08965e152bc84faba1bd966f4c01879f24b451b8f3ebae04852de5efd441396a6a871f97ea3dc413174886d71748c8beac5e5d403887e818e335cfdffa9d76b5074a5dcf12ad7725cb83cde0174679c0961643606a03082c5ec01590d687ff5bf9f8b2c3a84bfdb9c25622adc66aeb7f0355efddd4ab9954e5455c2428ee4e5383888ab466bd5fe817eb6b794a555c0eea446287cce32d9efd960e58771ddfb8ee2b4133b79d8953c2ae959a5d6ce09448d50da61bf22268fd32dcd501fd47c6b72cf8f50159a7aeec6e220ca81fc64ff97014ea77b6f791ccf6625eba88f60d1fe699cb16636a9acc4067786c537623c699568112c2093663bfba92ddc1ffcfe93f247f90accc6002faa61f43e54c3fab5e04a6ea1c5415e31ab129f8c9f82c3e3191513a4af151b1d6ab45a2f0eeca83f0870bc40da6257b9ea1c6238171a754995137d4123f2a4888e73db901f70a044ee0dd8176defd5dd82d9fc5a1a0d79effaf86fdf0b88eabc338c353f5fb040fe34db18211b20f8a3e4589b212e913665506488f21c88f5aec85eb694134a557c95d9a6ab9efc089e5c9848e591e3387cc11ca66fb03ca713513b98ebc2f35befcf64792ef44411e0f75ee4da42dcadfffdf9eecb761bd5e89183881103c5019e1ef3f3d80ba27fb0e1897e925d4122fdf3b3b568cc8795adf98643e86409226f2c5ed87cf481ffcd6e21a2bf0bff07a98bed3be5328118c3cb43c05f1b740242b0855f71400dd155c888b627615488025f81fcc6f5628efaf081489683c6d259c33b591edf4c9a4bfc54802c93ffbba4baf2a5030af8882b7d53eae80720e36a15c6c210658cdffa162630ba5d0217fbbf44879a04d41c58befb8a271abf4460a2d768be38d22f832e3cfad91b90f1b576924c8cbda71bbe89c85c239fa02f69c25e5422c977d97a54954fd16b85970db963db2b132b057a0282aef92614a9148e2a1a1edfa5ec46ae8d662dabae8f8141ea30dfddac44573ff52c3f93d82b0245b03c6db05b540e614cc9e3f702467054d688a92dcc9123f71a064cc52730fc5ee94b2746c80688521cc1cdb0f9455d4875f4af4afdc67d2e389361e1328edad7594d4bc9beec8b935aa3e5e98652c934d14fd16da50d685717303186da715778856da54666448d648d32becd2d63a6503ac21e56317903d15465ac4d3765f7a05420811307f71c1dc55ce5a4cd21130487cb0065397785da5094d27fae505996c1d404399797ff61d40f2ed63fca51db673197cd158a6e9b9ee93bb37df8bbaf92f47493c81c65439d359d578244a7f83629f4323a182e68526d674f4b6b64908350253520a4e564fae27df523e9218ff84f55a7ca622fc2e3bcc5edec9cc45c5a1b4c00c64038afdb165ad0ca3d8b66cea248e6a60a1c6d27e0dd2e5c7eec49fb8227a5266aedbc4fff982ffda402190548fb63fdeb67b3fb0894b11ce904b1c194f8f36cdecddc1312d64e9f227cc4b614b3679f978e0f1b6bb7aaeb2461cd28a94b73dd55eef1d5a98d72b9d8750b2dfe3a3cec044e13a8700", 0x2000, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x18, 0x0, 0x2, {0x6}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000400)) socket$inet(0x2, 0x80001, 0x84) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="10", 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4020845) syz_open_dev$evdev(&(0x7f0000000000), 0x6f1022e4, 0x101) syz_usb_disconnect(r0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) 5.468514174s ago: executing program 4 (id=5572): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/cluster/mycluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/cluster/mycluster/node/mynode\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/cluster/mycluster/heartbeat/myregion/dev\x00', 0x2, 0x0) write(r0, &(0x7f00000005c0)='i', 0x1) 5.35757025s ago: executing program 4 (id=5573): socket$inet6_sctp(0xa, 0x5, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x109002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)=""/48, &(0x7f0000000040)=0x30) setuid(0xee00) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0x8000, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'batadv0\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) 4.066674156s ago: executing program 4 (id=5574): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x69, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x20, 0x8, 0x0, 0x1000}}}}}}, 0x0) 3.944816565s ago: executing program 4 (id=5575): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB="aa549a8ee4cf620d3c8c138c078f82e1fb516ee9616accd8ee1733c883aad616856915adb7216e9604f173eec0fd3bccb42fd375d66e87f0509a6bc01d18f8310f00eaea3c4c9e8669d80f776ad79104b83efcabb3025b", @ANYRES16=r1], 0x14}, 0x1, 0x0, 0x0, 0xc090}, 0x20008000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f00000005c0)=ANY=[@ANYBLOB="88000000", @ANYRES16=r1, @ANYBLOB="000226bd7000fffcdf256b0009eda8b7b8ae510000da2844c45f69450006d3ff7ff2a928b9785afbb7349aadea7719fcdc5a6795e5502fba1826ee0e8ac6452976f58930453ef1be03f14dcb4bb2b03c776813983f1a5eae96d6ad11c95806cc79496603737260", @ANYRES32=r2, @ANYBLOB="0c00990009000000710000000a001a0008021100000000000a00060008021100000100000a00060008021100000100000a001a00ffff"], 0x88}, 0x1, 0x0, 0x0, 0x20000010}, 0x800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000005000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fea000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000ff6000/0x1000)=nil, 0x0}, 0x68) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x13) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x840) r3 = socket(0x11, 0x3, 0x0) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, 0x0) epoll_pwait(r5, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) epoll_pwait2(r4, &(0x7f0000000440)=[{}, {}], 0x1555555555555661, 0x0, 0x0, 0x0) r6 = dup3(r3, r5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f00000001c0)={0x200f}) r7 = io_uring_setup(0x4ff0, 0x0) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) r8 = io_uring_setup(0x7a25, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e24, 0xfffffff2, @local, 0x1}}, 0x1000000, 0x31, 0x9, 0x3, 0x6, 0x9, 0x1b}, 0x9c) connect$vsock_stream(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0x0, 0x0, @local}, 0x10) io_uring_setup(0x194b, &(0x7f00000003c0)={0x0, 0x3cb1, 0x6025, 0x2, 0x3c7}) io_uring_enter(r8, 0x2219, 0x7721, 0x16, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x10, 0xffffffffffffffff, 0x28f43000) read(r0, &(0x7f0000000300)=""/172, 0xdc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x80000a, 0x31, 0xffffffffffffffff, 0xd0fb8000) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f00000004c0)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x1}) 2.944147256s ago: executing program 4 (id=5576): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0xf, &(0x7f00000008c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$802154_dgram(r1, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) sendmmsg(r1, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010) 2.250896232s ago: executing program 2 (id=5577): fsopen(&(0x7f0000000040)='udf\x00', 0x1) 1.948819509s ago: executing program 2 (id=5578): shmat(0x0, &(0x7f000051b000/0x3000)=nil, 0x2000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x80000) socket$netlink(0x10, 0x3, 0x8000000004) socket$inet6(0xa, 0x80002, 0x0) r0 = io_uring_setup(0x4053, &(0x7f0000000040)={0x0, 0x2063, 0x0, 0x2, 0x94}) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f0000000140)={0x62, 0x1, 0x0, 0x0, &(0x7f00000001c0)}, 0x20) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1000000000) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, &(0x7f00000000c0)=0xd95, 0x4019e2060d4e3ac7) prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) 1.798424393s ago: executing program 1 (id=5579): socket$pppoe(0x18, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000340)=0x1) close(0x3) 1.677624212s ago: executing program 4 (id=5580): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000181100", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() ptrace$getsig(0x4202, r0, 0xf8, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x2, &(0x7f0000000000)=0x80000000000003) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9", 0x8b, 0x840, 0x0, 0x0) dup3(r3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000000080)) r4 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) 639.536115ms ago: executing program 1 (id=5581): openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) fanotify_init(0x40, 0x40000) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x20, 0x101000) fanotify_mark(r1, 0x39, 0x1a, r0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 384.849319ms ago: executing program 1 (id=5582): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) fcntl$setstatus(r0, 0x4, 0x800) ioctl(r0, 0x8914, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f0000001bc0)=@chain) ioctl(r0, 0x8914, &(0x7f00000000c0)) ioctl(r0, 0x890b, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0\x00\x00\x00') bind$x25(r0, &(0x7f0000000080), 0x12) connect$x25(r0, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) close(r0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x404c010) 121.311581ms ago: executing program 0 (id=5583): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x492492492492846, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) 0s ago: executing program 2 (id=5584): socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0xea6, '.\x00'}}) unshare(0x1e060c80) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_RANGEINFO(r3, 0x80106408, &(0x7f0000000280)={0xb, 0x0}) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0xd01, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003740)={r4, 0x0, 0x18, 0x1000, &(0x7f00000000c0)="7dd53cbd3194ca5fdf819f26407baee211bc663e897588e4", &(0x7f0000002600)=""/4096, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) r5 = fsopen(&(0x7f0000000100)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) socket$phonet_pipe(0x23, 0x5, 0x2) kernel console output (not intermixed with test programs): oduct=0, SerialNumber=0 [ 670.340546][ T5712] usb 3-1: config 0 descriptor?? [ 670.569265][ T5712] usbhid 3-1:0.0: can't add hid device: -71 [ 670.575946][ T5712] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 670.603150][ T5712] usb 3-1: USB disconnect, device number 50 [ 670.941016][ T1404] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.091012][ T5712] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 671.391962][ T5712] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 671.392019][ T5712] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 671.392047][ T5712] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.451391][ T5712] usb 3-1: config 0 descriptor?? [ 673.135481][ T5712] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 673.162598][ T5712] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input12 [ 675.005277][ T5735] usb 3-1: USB disconnect, device number 51 [ 675.005364][ C0] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 677.304123][T14704] program syz.1.3150 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 678.406696][T14724] kvm: requested 18438 ns i8254 timer period limited to 200000 ns [ 678.428733][T14724] kvm: requested 23466 ns i8254 timer period limited to 200000 ns [ 678.429170][T14724] kvm: requested 181028 ns i8254 timer period limited to 200000 ns [ 678.463378][T14733] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3158'. [ 678.466935][T14724] kvm: requested 80457 ns i8254 timer period limited to 200000 ns [ 678.467373][T14724] kvm: requested 80457 ns i8254 timer period limited to 200000 ns [ 678.598263][T14733] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 678.734725][T14733] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 678.924559][T14461] bridge0: port 1(bridge_slave_0) entered blocking state [ 678.924890][T14461] bridge0: port 1(bridge_slave_0) entered disabled state [ 678.925672][T14461] bridge_slave_0: entered allmulticast mode [ 678.959851][T14461] bridge_slave_0: entered promiscuous mode [ 679.522461][T14461] bridge0: port 2(bridge_slave_1) entered blocking state [ 679.522782][T14461] bridge0: port 2(bridge_slave_1) entered disabled state [ 679.524107][T14461] bridge_slave_1: entered allmulticast mode [ 679.676231][T14461] bridge_slave_1: entered promiscuous mode [ 680.231256][T14461] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 680.266065][T14461] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 680.728825][T14461] team0: Port device team_slave_0 added [ 680.758453][T14461] team0: Port device team_slave_1 added [ 681.144827][T14461] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 681.144845][T14461] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 681.144935][T14461] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 681.153648][T14461] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 681.153666][T14461] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 681.153698][T14461] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 682.355728][ T1404] bridge_slave_1: left allmulticast mode [ 682.355766][ T1404] bridge_slave_1: left promiscuous mode [ 682.356069][ T1404] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.672612][ T1404] bridge_slave_0: left allmulticast mode [ 682.672734][ T1404] bridge_slave_0: left promiscuous mode [ 682.673129][ T1404] bridge0: port 1(bridge_slave_0) entered disabled state [ 682.989727][T14802] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 683.204471][T14804] netlink: 'syz.2.3180': attribute type 1 has an invalid length. [ 683.344875][T14808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3180'. [ 683.724362][ T1404] bond_slave_0: left promiscuous mode [ 685.676661][T14828] program syz.1.3190 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 685.701116][ T1404] bond3 (unregistering): (slave ip6erspan0): Releasing active interface [ 685.744267][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.744339][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.720455][ T1404] bond4 (unregistering): (slave vlan2): Releasing active interface [ 686.820518][ T1404] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 686.844586][ T1404] bond0 (unregistering): Released all slaves [ 686.868054][ T1404] bond1 (unregistering): Released all slaves [ 686.898140][ T1404] bond2 (unregistering): Released all slaves [ 686.924753][ T1404] bond3 (unregistering): Released all slaves [ 686.977381][ T1404] bond4 (unregistering): Released all slaves [ 687.024306][ T1404] bond5 (unregistering): Released all slaves [ 687.146845][ T5262] 8021q: adding VLAN 0 to HW filter on device eth1 [ 687.148983][T14804] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 687.174308][T14805] bridge2: entered promiscuous mode [ 690.949774][ T1404] tipc: Disabling bearer [ 690.967196][ T1404] tipc: Left network mode [ 690.994562][T14461] hsr_slave_0: entered promiscuous mode [ 690.996193][T14461] hsr_slave_1: entered promiscuous mode [ 690.997549][T14461] debugfs: 'hsr0' already exists in 'hsr' [ 690.997576][T14461] Cannot create hsr debugfs directory [ 691.561343][T14864] program syz.3.3200 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 693.990668][T14891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3209'. [ 695.924900][ T5262] 8021q: adding VLAN 0 to HW filter on device eth2 [ 696.056709][T14907] program syz.3.3213 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 701.933617][T15008] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 702.969527][ T9] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 703.191694][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 703.191731][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 703.191772][ T9] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 703.191799][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.197400][ T9] usb 5-1: config 0 descriptor?? [ 703.811019][ T9] usb 5-1: language id specifier not provided by device, defaulting to English [ 704.228776][ T9] uclogic 0003:256C:006D.001D: interface is invalid, ignoring [ 704.323005][T15047] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 704.323278][ T9] usb 5-1: USB disconnect, device number 17 [ 705.163859][T15066] syz.1.3257 uses obsolete (PF_INET,SOCK_PACKET) [ 705.295356][T15066] device-mapper: ioctl: Invalid ioctl structure: name my, dev f800 [ 706.397396][ T1404] hsr_slave_0: left promiscuous mode [ 706.439614][ T1404] hsr_slave_1: left promiscuous mode [ 706.440632][ T1404] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 706.440664][ T1404] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 706.588723][ T1404] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 706.588752][ T1404] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 706.604022][T15094] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3262'. [ 707.392675][ T1404] veth1_macvtap: left promiscuous mode [ 707.392907][ T1404] veth0_macvtap: left promiscuous mode [ 707.412558][ T1404] veth1_vlan: left promiscuous mode [ 707.413192][ T1404] veth0_vlan: left promiscuous mode [ 707.739461][ T10] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 707.898175][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 707.898212][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 707.898253][ T10] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 707.898280][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.001159][ T10] usb 3-1: config 0 descriptor?? [ 708.630406][ T10] usb 3-1: language id specifier not provided by device, defaulting to English [ 709.062411][ T10] uclogic 0003:256C:006D.001E: interface is invalid, ignoring [ 709.082697][ T10] usb 3-1: USB disconnect, device number 52 [ 709.350322][ T1404] team0 (unregistering): Port device team_slave_1 removed [ 709.432818][ T1404] team0 (unregistering): Port device team_slave_0 removed [ 709.693923][T15094] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 709.754469][T15122] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3273'. [ 709.842920][T15094] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 710.208501][T15132] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3276'. [ 710.257818][T15125] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3273'. [ 710.277372][T15135] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3276'. [ 711.553485][T14461] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 711.919765][T14461] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 711.921259][T14461] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 712.102001][T14461] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 712.162380][T14461] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 712.300689][T15176] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3288'. [ 712.332201][T14461] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 712.364372][T14461] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 712.499486][T14461] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 712.972749][ T1404] IPVS: stop unused estimator thread 0... [ 713.203235][T15204] program syz.2.3293 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 713.629058][T15214] capability: warning: `syz.3.3294' uses 32-bit capabilities (legacy support in use) [ 714.347833][T15231] program syz.2.3300 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 714.443343][T14461] 8021q: adding VLAN 0 to HW filter on device bond0 [ 714.561548][T14461] 8021q: adding VLAN 0 to HW filter on device team0 [ 714.795832][ T6148] bridge0: port 1(bridge_slave_0) entered blocking state [ 714.795947][ T6148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 714.893251][ T1286] bridge0: port 2(bridge_slave_1) entered blocking state [ 714.894175][ T1286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 715.445919][T15247] tipc: Started in network mode [ 715.445974][T15247] tipc: Node identity 7f000001, cluster identity 4711 [ 715.482820][T15247] tipc: Enabled bearer , priority 10 [ 715.803453][T15247] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 716.415285][T15266] program syz.2.3310 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 716.440766][T15267] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 716.663214][T15271] netlink: 'syz.2.3311': attribute type 4 has an invalid length. [ 716.685068][T15263] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 716.852271][ T9] tipc: Node number set to 2130706433 [ 718.276628][T14461] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 718.697237][T14461] veth0_vlan: entered promiscuous mode [ 718.750552][T15309] netlink: 'syz.2.3322': attribute type 4 has an invalid length. [ 718.790298][T14461] veth1_vlan: entered promiscuous mode [ 719.072589][T14461] veth0_macvtap: entered promiscuous mode [ 719.147681][T14461] veth1_macvtap: entered promiscuous mode [ 719.241025][T14461] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 719.460384][T14461] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 719.887414][ T1286] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.887468][ T1286] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.887508][ T1286] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.887549][ T1286] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.614102][T15341] netlink: 'syz.3.3332': attribute type 4 has an invalid length. [ 720.702789][T14463] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 720.768245][T14463] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 720.779647][T14463] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 720.795462][T14463] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 720.798869][T14463] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 721.999143][T15376] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3342'. [ 722.273426][T15376] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3342'. [ 722.767097][T15394] netlink: 'syz.4.3346': attribute type 4 has an invalid length. [ 722.855067][T14463] Bluetooth: hci4: command tx timeout [ 723.667699][ T3279] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.493720][ T3279] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.512695][T15436] netlink: 'syz.2.3360': attribute type 4 has an invalid length. [ 724.930118][T14463] Bluetooth: hci4: command tx timeout [ 725.537154][ T3279] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.009584][T14463] Bluetooth: hci4: command tx timeout [ 727.277349][ T3279] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.089458][T14463] Bluetooth: hci4: command tx timeout [ 730.346557][T15331] bridge0: port 1(bridge_slave_0) entered blocking state [ 730.346713][T15331] bridge0: port 1(bridge_slave_0) entered disabled state [ 730.348949][T15331] bridge_slave_0: entered allmulticast mode [ 730.377352][T15331] bridge_slave_0: entered promiscuous mode [ 731.024759][T15331] bridge0: port 2(bridge_slave_1) entered blocking state [ 731.024948][T15331] bridge0: port 2(bridge_slave_1) entered disabled state [ 731.025184][T15331] bridge_slave_1: entered allmulticast mode [ 731.028255][T15331] bridge_slave_1: entered promiscuous mode [ 731.190198][T15331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 731.213506][T15331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 731.423435][T15331] team0: Port device team_slave_0 added [ 731.438389][T15331] team0: Port device team_slave_1 added [ 731.569998][T15331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 731.570015][T15331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 731.570038][T15331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 731.574564][T15331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 731.574582][T15331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 731.574614][T15331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 731.849870][ T3279] bridge_slave_1: left allmulticast mode [ 731.849906][ T3279] bridge_slave_1: left promiscuous mode [ 731.914677][ T3279] bridge0: port 2(bridge_slave_1) entered disabled state [ 732.076532][ T3279] bridge_slave_0: left allmulticast mode [ 732.076572][ T3279] bridge_slave_0: left promiscuous mode [ 732.076850][ T3279] bridge0: port 1(bridge_slave_0) entered disabled state [ 733.545696][T15589] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 733.688699][T15591] 9p: Bad value for 'rfdno' [ 734.434576][ T3279] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 734.490354][ T3279] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 734.533953][ T3279] bond0 (unregistering): Released all slaves [ 734.842408][ T5262] 8021q: adding VLAN 0 to HW filter on device eth1 [ 735.262666][T15615] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3419'. [ 735.437112][T15331] hsr_slave_0: entered promiscuous mode [ 735.441543][T15331] hsr_slave_1: entered promiscuous mode [ 735.443666][T15331] debugfs: 'hsr0' already exists in 'hsr' [ 735.443699][T15331] Cannot create hsr debugfs directory [ 737.040822][T15645] netlink: 'syz.4.3427': attribute type 1 has an invalid length. [ 737.152397][T15651] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3427'. [ 737.184838][T15645] 8021q: adding VLAN 0 to HW filter on device bond3 [ 737.217185][T15648] bridge3: entered promiscuous mode [ 737.257148][T15648] bond3: (slave bridge3): making interface the new active one [ 737.286253][T15648] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 737.600560][ T3279] hsr_slave_0: left promiscuous mode [ 737.641937][ T3279] hsr_slave_1: left promiscuous mode [ 737.644675][ T3279] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 737.644703][ T3279] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 737.720547][ T3279] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 737.720579][ T3279] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 738.010302][ T3279] veth1_macvtap: left promiscuous mode [ 738.027309][ T3279] veth0_macvtap: left promiscuous mode [ 738.027610][ T3279] veth1_vlan: left promiscuous mode [ 738.027804][ T3279] veth0_vlan: left promiscuous mode [ 738.674930][T15688] netlink: 'syz.4.3439': attribute type 1 has an invalid length. [ 738.789832][T15691] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3439'. [ 740.270391][ T3279] team0 (unregistering): Port device team_slave_1 removed [ 740.363535][ T3279] team0 (unregistering): Port device team_slave_0 removed [ 740.695186][ T5262] 8021q: adding VLAN 0 to HW filter on device eth2 [ 740.697352][T15688] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 740.747668][T15690] bridge4: entered promiscuous mode [ 742.605820][T15754] netlink: 'syz.3.3457': attribute type 1 has an invalid length. [ 742.709043][T15758] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3457'. [ 743.095811][T15754] 8021q: adding VLAN 0 to HW filter on device bond4 [ 743.174527][T15757] bridge2: entered promiscuous mode [ 743.181208][T15757] bond4: (slave bridge2): making interface the new active one [ 743.188296][T15757] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 743.409111][T15762] netlink: 'syz.1.3458': attribute type 4 has an invalid length. [ 745.758115][T15804] netlink: 'syz.2.3468': attribute type 1 has an invalid length. [ 745.867213][T15812] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3468'. [ 746.201216][T15804] 8021q: adding VLAN 0 to HW filter on device bond5 [ 746.293531][T15808] bridge2: entered promiscuous mode [ 746.337623][T15808] bond5: (slave bridge2): making interface the new active one [ 746.353920][T15808] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 746.391192][T15823] netlink: 'syz.3.3471': attribute type 4 has an invalid length. [ 747.175740][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.175811][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.809978][T15865] netlink: 'syz.1.3482': attribute type 4 has an invalid length. [ 748.903117][T15331] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 749.017726][T15331] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 749.028559][T15331] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 749.157545][T15331] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 749.179255][T15331] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 749.437910][T15331] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 749.451891][T15331] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 749.607425][T15331] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 750.458353][T15331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 750.958870][T15331] 8021q: adding VLAN 0 to HW filter on device team0 [ 751.114522][ T6148] bridge0: port 1(bridge_slave_0) entered blocking state [ 751.115340][ T6148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 751.414724][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 751.414940][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 753.154484][T15944] program syz.4.3502 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 754.921094][T15980] netlink: 'syz.4.3510': attribute type 1 has an invalid length. [ 755.008492][T15980] 8021q: adding VLAN 0 to HW filter on device bond4 [ 755.044044][T15980] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3510'. [ 755.062653][T15983] bridge4: entered promiscuous mode [ 755.083716][T15983] bond4: (slave bridge4): making interface the new active one [ 755.105015][T15983] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 755.275448][T15331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 755.455838][T15331] veth0_vlan: entered promiscuous mode [ 755.502412][T15331] veth1_vlan: entered promiscuous mode [ 755.642083][T15331] veth0_macvtap: entered promiscuous mode [ 755.693216][T15331] veth1_macvtap: entered promiscuous mode [ 755.739267][T15331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 755.843043][T15331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 755.939426][ T6157] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.939559][ T66] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.939730][ T6157] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.700833][ T6156] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.612786][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 757.612810][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 758.034149][ T6157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 758.034174][ T6157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 760.007079][T15348] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 760.077185][T15348] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 760.081923][T15348] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 760.099974][T15348] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 760.139780][T15348] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 762.369538][T14463] Bluetooth: hci1: command tx timeout [ 762.698052][T16120] fuse: Unknown parameter 'grou00000000000000000000' [ 763.278303][T16132] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3566'. [ 764.449647][T14463] Bluetooth: hci1: command tx timeout [ 765.190819][T16169] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3576'. [ 765.199656][T16060] bridge0: port 1(bridge_slave_0) entered blocking state [ 765.199810][T16060] bridge0: port 1(bridge_slave_0) entered disabled state [ 765.200002][T16060] bridge_slave_0: entered allmulticast mode [ 765.240084][T16060] bridge_slave_0: entered promiscuous mode [ 765.273737][T16060] bridge0: port 2(bridge_slave_1) entered blocking state [ 765.273963][T16060] bridge0: port 2(bridge_slave_1) entered disabled state [ 765.274162][T16060] bridge_slave_1: entered allmulticast mode [ 765.276904][T16060] bridge_slave_1: entered promiscuous mode [ 765.349259][T16060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 765.354858][T16060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 765.419249][T16060] team0: Port device team_slave_0 added [ 765.428839][T16060] team0: Port device team_slave_1 added [ 765.475147][T16060] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 765.475166][T16060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 765.475198][T16060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 765.528546][T16060] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 765.528564][T16060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 765.528595][T16060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 765.867704][T16178] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 766.289444][T16173] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 766.529525][T14463] Bluetooth: hci1: command tx timeout [ 766.611709][ T5720] page_pool_release_retry() stalled pool shutdown: id 181, 1 inflight 60 sec [ 766.653206][T16060] hsr_slave_0: entered promiscuous mode [ 766.655448][T16060] hsr_slave_1: entered promiscuous mode [ 766.656480][T16060] debugfs: 'hsr0' already exists in 'hsr' [ 766.656506][T16060] Cannot create hsr debugfs directory [ 768.738731][T14463] Bluetooth: hci1: command tx timeout [ 769.317457][T16060] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.077279][T16229] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3592'. [ 770.131713][T16213] bridge1: entered promiscuous mode [ 770.131993][T16213] bridge1: entered allmulticast mode [ 770.352154][T16213] team0: Port device bridge1 added [ 772.035258][T16060] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.546166][T16265] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3604'. [ 774.503918][T16060] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.182458][T16060] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.494795][T16300] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3614'. [ 776.371688][T16060] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 776.419762][T16060] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 776.421376][T16060] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 776.464308][T16060] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 776.480443][T16060] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 776.507275][T16060] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 776.508858][T16060] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 776.595470][T16060] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 777.088261][T16329] kvm: requested 74590 ns i8254 timer period limited to 200000 ns [ 777.100207][T16329] kvm: requested 44419 ns i8254 timer period limited to 200000 ns [ 777.102219][T16329] kvm: requested 54476 ns i8254 timer period limited to 200000 ns [ 777.166807][T16329] kvm: requested 74590 ns i8254 timer period limited to 200000 ns [ 777.181048][T16329] kvm: requested 175162 ns i8254 timer period limited to 200000 ns [ 777.204514][T16329] kvm: requested 111466 ns i8254 timer period limited to 200000 ns [ 777.565207][T16060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 777.713232][T16060] 8021q: adding VLAN 0 to HW filter on device team0 [ 777.754292][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 777.778108][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 777.896118][ T6156] bridge0: port 2(bridge_slave_1) entered blocking state [ 777.897650][ T6156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 778.081080][T16349] ip6gre1: entered promiscuous mode [ 778.081166][T16349] ip6gre1: entered allmulticast mode [ 780.495999][T16060] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 780.823146][T16060] veth0_vlan: entered promiscuous mode [ 780.858045][T16060] veth1_vlan: entered promiscuous mode [ 781.044793][T16060] veth0_macvtap: entered promiscuous mode [ 781.059255][T16060] veth1_macvtap: entered promiscuous mode [ 781.140963][T16060] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 781.191354][T16060] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 781.245358][ T6148] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.251122][ T1286] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.251269][ T1286] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.251329][ T1286] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.670698][ T3279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 782.670722][ T3279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 782.963953][ T1286] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 782.963976][ T1286] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 783.682306][T15348] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 783.758192][T15348] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 783.777959][T15348] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 783.783800][T15348] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 783.786819][T15348] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 784.994833][T16476] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3670'. [ 785.164343][ T5712] bridge0: entered promiscuous mode [ 785.970191][T14463] Bluetooth: hci3: command tx timeout [ 785.975056][T16492] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3676'. [ 786.702289][ T6157] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.344407][ T6157] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.547990][T16522] ªªªªªª: renamed from vlan0 (while UP) [ 788.053044][T14463] Bluetooth: hci3: command tx timeout [ 788.380349][ T6157] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.455381][ T6157] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.129481][T14463] Bluetooth: hci3: command tx timeout [ 790.572854][T16446] bridge0: port 1(bridge_slave_0) entered blocking state [ 790.573137][T16446] bridge0: port 1(bridge_slave_0) entered disabled state [ 790.573491][T16446] bridge_slave_0: entered allmulticast mode [ 790.577646][T16446] bridge_slave_0: entered promiscuous mode [ 790.625484][T16446] bridge0: port 2(bridge_slave_1) entered blocking state [ 790.625739][T16446] bridge0: port 2(bridge_slave_1) entered disabled state [ 790.626078][T16446] bridge_slave_1: entered allmulticast mode [ 790.650612][T16446] bridge_slave_1: entered promiscuous mode [ 790.735072][T16446] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 790.752499][T16446] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 791.885122][T16446] team0: Port device team_slave_0 added [ 791.958909][T16609] bridge2: entered promiscuous mode [ 791.959165][T16609] bridge2: entered allmulticast mode [ 791.995140][T16618] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3720'. [ 792.019016][T16609] team0: Port device bridge2 added [ 792.039912][T16610] bridge0: port 3(team0) entered blocking state [ 792.042193][T16610] bridge0: port 3(team0) entered disabled state [ 792.055174][T16610] team0: entered allmulticast mode [ 792.055207][T16610] team_slave_0: entered allmulticast mode [ 792.055532][T16610] team_slave_1: entered allmulticast mode [ 792.212016][T14463] Bluetooth: hci3: command tx timeout [ 792.320065][T16610] team0: entered promiscuous mode [ 792.320090][T16610] team_slave_0: entered promiscuous mode [ 792.320335][T16610] team_slave_1: entered promiscuous mode [ 792.390726][T16610] bridge0: port 3(team0) entered blocking state [ 792.390924][T16610] bridge0: port 3(team0) entered forwarding state [ 792.534415][T16446] team0: Port device team_slave_1 added [ 793.308766][T16446] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 793.308783][T16446] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 793.308815][T16446] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 793.361494][T16446] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 793.362979][T16446] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 793.363016][T16446] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 794.032293][ T6157] bridge_slave_1: left allmulticast mode [ 794.032327][ T6157] bridge_slave_1: left promiscuous mode [ 794.032595][ T6157] bridge0: port 2(bridge_slave_1) entered disabled state [ 794.172560][ T6157] bridge_slave_0: left allmulticast mode [ 794.172678][ T6157] bridge_slave_0: left promiscuous mode [ 794.173226][ T6157] bridge0: port 1(bridge_slave_0) entered disabled state [ 795.049651][ T6157] bond_slave_0: left promiscuous mode [ 795.109309][ T6157] bond_slave_1: left promiscuous mode [ 796.001419][T16682] fuse: Bad value for 'group_id' [ 796.001441][T16682] fuse: Bad value for 'group_id' [ 796.671727][ T6157] bond3 (unregistering): (slave ip6erspan0): Releasing active interface [ 797.009495][ T5712] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 797.161901][ T5712] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 797.161957][ T5712] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 797.161986][ T5712] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.168665][ T5712] usb 5-1: config 0 descriptor?? [ 797.391601][ T5712] usbhid 5-1:0.0: can't add hid device: -71 [ 797.391742][ T5712] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 797.396497][ T5712] usb 5-1: USB disconnect, device number 18 [ 797.560347][ T6157] bond4 (unregistering): (slave bridge2): Releasing active interface [ 797.859511][ T5728] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 797.878326][ T6157] bond1 (unregistering): (slave vlan2): Releasing active interface [ 797.950259][ T6157] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 798.021653][ T5728] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 798.021689][ T5728] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 798.021750][ T5728] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.035864][ T5728] usb 5-1: config 0 descriptor?? [ 798.068726][ T6157] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 798.140271][ T6157] bond0 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 798.160847][ T6157] bond0 (unregistering): Released all slaves [ 798.178819][ T6157] bond1 (unregistering): Released all slaves [ 798.218395][ T6157] bond2 (unregistering): Released all slaves [ 798.246340][ T6157] bond3 (unregistering): Released all slaves [ 798.278413][ T6157] bond4 (unregistering): Released all slaves [ 798.619936][T16690] bridge3: entered promiscuous mode [ 798.619962][T16690] bridge3: entered allmulticast mode [ 798.912618][ T5728] aiptek 5-1:0.0: Aiptek using 400 ms programming speed [ 798.936959][ T5728] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input13 [ 799.093481][T16446] hsr_slave_0: entered promiscuous mode [ 799.094947][T16446] hsr_slave_1: entered promiscuous mode [ 799.096031][T16446] debugfs: 'hsr0' already exists in 'hsr' [ 799.096057][T16446] Cannot create hsr debugfs directory [ 799.096629][ T6157] tipc: Disabling bearer [ 799.096972][ T6157] tipc: Left network mode [ 800.639834][ T5262] 8021q: adding VLAN 0 to HW filter on device eth1 [ 800.715821][ T5888] usb 5-1: USB disconnect, device number 19 [ 800.717386][ C1] aiptek 5-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 802.929954][ T6157] hsr_slave_0: left promiscuous mode [ 802.969604][ T6157] hsr_slave_1: left promiscuous mode [ 802.971301][ T6157] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 802.971329][ T6157] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 803.016995][ T6157] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 803.017024][ T6157] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 803.135705][ T6157] veth1_macvtap: left promiscuous mode [ 803.135970][ T6157] veth0_macvtap: left promiscuous mode [ 803.136507][ T6157] veth1_vlan: left promiscuous mode [ 803.138771][ T6157] veth0_vlan: left promiscuous mode [ 804.740331][ T6157] team0 (unregistering): Port device team_slave_1 removed [ 804.802559][ T6157] team0 (unregistering): Port device team_slave_0 removed [ 805.241283][T16446] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 805.289009][T16446] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 805.298206][T16446] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 805.324579][T16446] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 805.326078][T16446] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 805.422040][T16446] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 805.423514][T16446] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 805.507154][T16446] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 805.739900][T16446] 8021q: adding VLAN 0 to HW filter on device bond0 [ 805.802826][T16446] 8021q: adding VLAN 0 to HW filter on device team0 [ 805.901558][ T3279] bridge0: port 1(bridge_slave_0) entered blocking state [ 805.901893][ T3279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 805.906872][ T3279] bridge0: port 2(bridge_slave_1) entered blocking state [ 805.908724][ T3279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 806.769915][T16446] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 806.860576][T16446] veth0_vlan: entered promiscuous mode [ 806.912711][T16446] veth1_vlan: entered promiscuous mode [ 806.972302][T16446] veth0_macvtap: entered promiscuous mode [ 806.988921][T16446] veth1_macvtap: entered promiscuous mode [ 807.026678][T16446] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 807.050495][T16446] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 807.132724][ T3279] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.133165][ T3279] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.133203][ T3279] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.133236][ T3279] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.912529][ T1404] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 807.912551][ T1404] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 808.111538][ T1286] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 808.111558][ T1286] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 808.618059][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.618145][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.523391][T16802] netlink: 22 bytes leftover after parsing attributes in process `syz.4.3755'. [ 810.240680][T15348] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 810.294499][T15348] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 810.308497][T15348] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 810.352712][T15348] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 810.353845][T15348] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 812.462967][T16853] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 812.689872][T14463] Bluetooth: hci2: command tx timeout [ 812.743252][T16860] bridge5: entered promiscuous mode [ 812.743282][T16860] bridge5: entered allmulticast mode [ 813.113823][T16866] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3774'. [ 813.847703][T16887] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3783'. [ 814.769808][T14463] Bluetooth: hci2: command tx timeout [ 815.835736][ T6148] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.853820][T14463] Bluetooth: hci2: command tx timeout [ 817.288494][ T6148] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 818.056654][T16967] fuse: Bad value for 'fd' [ 818.528707][ T6148] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 818.758162][T16960] bond1: Unable to set up delay as MII monitoring is disabled [ 818.841304][T16960] bond1 (unregistering): Released all slaves [ 818.929426][T14463] Bluetooth: hci2: command tx timeout [ 819.873996][ T6148] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.923543][T16997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 819.938810][T16997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 820.185746][T16997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 820.186409][T16997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 822.457650][T17041] serio: Serial port ptm0 [ 822.915180][T17047] serial 00:04: in use; can't configure [ 822.950082][ T6148] bridge_slave_1: left allmulticast mode [ 822.950118][ T6148] bridge_slave_1: left promiscuous mode [ 822.950364][ T6148] bridge0: port 2(bridge_slave_1) entered disabled state [ 823.118497][ T6148] bridge_slave_0: left allmulticast mode [ 823.118531][ T6148] bridge_slave_0: left promiscuous mode [ 823.143605][ T6148] bridge0: port 1(bridge_slave_0) entered disabled state [ 823.641374][T17067] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3845'. [ 823.762585][ T6148] bond_slave_0: left promiscuous mode [ 823.762691][ T6148] bond_slave_1: left promiscuous mode [ 823.762798][ T6148] veth0_to_bond: left promiscuous mode [ 824.531972][ T6148] bond2 (unregistering): (slave ip6erspan0): Releasing active interface [ 825.100181][ T6148] bond4 (unregistering): (slave bridge1): Releasing active interface [ 825.310390][ T6148] bond5 (unregistering): (slave bridge2): Releasing active interface [ 825.580379][ T6148] bond1 (unregistering): (slave vlan2): Releasing active interface [ 825.660530][ T6148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 825.721121][ T6148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 825.770375][ T6148] bond0 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 825.813556][ T6148] bond0 (unregistering): Released all slaves [ 825.828665][ T6148] bond1 (unregistering): Released all slaves [ 825.861859][ T6148] bond2 (unregistering): Released all slaves [ 825.887579][ T6148] bond3 (unregistering): Released all slaves [ 825.936174][ T6148] bond4 (unregistering): Released all slaves [ 825.966208][ T6148] bond5 (unregistering): Released all slaves [ 826.081982][ T5262] 8021q: adding VLAN 0 to HW filter on device eth1 [ 826.213872][T16814] bridge0: port 1(bridge_slave_0) entered blocking state [ 826.214002][T16814] bridge0: port 1(bridge_slave_0) entered disabled state [ 826.214242][T16814] bridge_slave_0: entered allmulticast mode [ 826.253429][T16814] bridge_slave_0: entered promiscuous mode [ 826.408699][T17096] serial 00:04: in use; can't configure [ 826.409170][T17096] serial 00:04: in use; can't configure [ 826.569743][T17098] serial 00:04: in use; can't configure [ 826.647057][T16814] bridge0: port 2(bridge_slave_1) entered blocking state [ 826.647189][T16814] bridge0: port 2(bridge_slave_1) entered disabled state [ 826.647445][T16814] bridge_slave_1: entered allmulticast mode [ 826.823512][T16814] bridge_slave_1: entered promiscuous mode [ 826.843580][ T6148] : left promiscuous mode [ 827.340202][T17108] serial 00:04: in use; can't configure [ 827.369673][T17108] serial 00:04: in use; can't configure [ 827.409749][ T10] page_pool_release_retry() stalled pool shutdown: id 181, 1 inflight 121 sec [ 827.465539][T17109] serial 00:04: in use; can't configure [ 828.383414][ T822] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 828.546761][ T822] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 828.546807][ T822] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 828.546887][ T822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.788409][ T822] usb 2-1: config 0 descriptor?? [ 828.841648][ T6148] tipc: Disabling bearer [ 828.843061][ T6148] tipc: Left network mode [ 828.908688][T16814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 828.979228][T16814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 829.102126][ T822] usbhid 2-1:0.0: can't add hid device: -71 [ 829.102956][ T822] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 829.147199][T17126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 829.166918][T17126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 829.465582][ T822] usb 2-1: USB disconnect, device number 48 [ 829.511030][T17126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 829.532453][T17126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 829.589139][T16814] team0: Port device team_slave_0 added [ 829.707086][T16814] team0: Port device team_slave_1 added [ 829.969982][ T822] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 830.132223][ T822] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 830.132336][ T822] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 830.132363][ T822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.239198][ T822] usb 2-1: config 0 descriptor?? [ 830.528995][ T5262] 8021q: adding VLAN 0 to HW filter on device eth2 [ 830.913923][T16814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 830.913975][T16814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 830.913995][T16814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 831.044627][T17157] kvm: requested 72076 ns i8254 timer period limited to 200000 ns [ 831.046731][T17157] kvm: requested 55314 ns i8254 timer period limited to 200000 ns [ 831.071892][T17157] kvm: requested 25142 ns i8254 timer period limited to 200000 ns [ 831.078663][T17157] kvm: requested 78781 ns i8254 timer period limited to 200000 ns [ 831.098835][T17157] kvm: requested 184381 ns i8254 timer period limited to 200000 ns [ 831.107801][ T822] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 831.108404][T17157] kvm: requested 120685 ns i8254 timer period limited to 200000 ns [ 831.127819][T17157] kvm: requested 189409 ns i8254 timer period limited to 200000 ns [ 831.146433][T17157] kvm: requested 165942 ns i8254 timer period limited to 200000 ns [ 831.164831][T17157] kvm: requested 144152 ns i8254 timer period limited to 200000 ns [ 831.187479][T17157] kvm: requested 25142 ns i8254 timer period limited to 200000 ns [ 831.209571][ T822] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input14 [ 831.804713][T16814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 831.804737][T16814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 831.805176][T16814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 832.440599][T16814] hsr_slave_0: entered promiscuous mode [ 832.445654][T16814] hsr_slave_1: entered promiscuous mode [ 832.462911][T16814] debugfs: 'hsr0' already exists in 'hsr' [ 832.463108][T16814] Cannot create hsr debugfs directory [ 833.008528][ T5720] usb 2-1: USB disconnect, device number 49 [ 833.010715][ C1] aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 834.187843][T17223] macvtap1: entered allmulticast mode [ 834.187870][T17223] dummy0: entered allmulticast mode [ 834.286138][T17223] dummy0: entered promiscuous mode [ 834.659884][T17223] dummy0: left allmulticast mode [ 835.218206][ T31] dummy0: left promiscuous mode [ 835.224532][ T5262] 8021q: adding VLAN 0 to HW filter on device eth3 [ 835.451781][ T6148] hsr_slave_0: left promiscuous mode [ 835.600063][ T6148] hsr_slave_1: left promiscuous mode [ 835.601291][ T6148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 835.601320][ T6148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 835.753435][ T6148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 835.753457][ T6148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 836.697518][ T6148] veth1_macvtap: left promiscuous mode [ 836.697625][ T6148] veth0_macvtap: left promiscuous mode [ 836.697895][ T6148] veth1_vlan: left promiscuous mode [ 836.699025][ T6148] veth0_vlan: left promiscuous mode [ 837.298673][T17254] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 837.720221][ T6148] team0 (unregistering): Port device team_slave_1 removed [ 837.770485][ T6148] team0 (unregistering): Port device team_slave_0 removed [ 838.323155][T17263] kvm: requested 72076 ns i8254 timer period limited to 200000 ns [ 838.325845][T17263] kvm: requested 55314 ns i8254 timer period limited to 200000 ns [ 838.372156][T17263] kvm: requested 25142 ns i8254 timer period limited to 200000 ns [ 838.421783][T17263] kvm: requested 78781 ns i8254 timer period limited to 200000 ns [ 838.424796][T17263] kvm: requested 184381 ns i8254 timer period limited to 200000 ns [ 838.456562][T17263] kvm: requested 120685 ns i8254 timer period limited to 200000 ns [ 838.457649][T17263] kvm: requested 189409 ns i8254 timer period limited to 200000 ns [ 838.458202][T17263] kvm: requested 165942 ns i8254 timer period limited to 200000 ns [ 838.491162][T17263] kvm: requested 144152 ns i8254 timer period limited to 200000 ns [ 838.527930][T17263] kvm: requested 25142 ns i8254 timer period limited to 200000 ns [ 840.438330][T17301] macvtap1: entered allmulticast mode [ 840.438357][T17301] dummy0: entered allmulticast mode [ 840.438417][T17301] dummy0: entered promiscuous mode [ 840.630515][T17301] dummy0: left allmulticast mode [ 841.050081][ T5712] dummy0: left promiscuous mode [ 841.051813][T17308] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3912'. [ 842.093392][T17337] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3920'. [ 842.135045][ T6148] IPVS: stop unused estimator thread 0... [ 843.202047][T17370] netlink: 'syz.1.3929': attribute type 1 has an invalid length. [ 843.562238][T17375] kvm: requested 72076 ns i8254 timer period limited to 200000 ns [ 843.568239][T17375] kvm: requested 55314 ns i8254 timer period limited to 200000 ns [ 843.601800][T17375] kvm: requested 25142 ns i8254 timer period limited to 200000 ns [ 843.617352][T17375] kvm: requested 78781 ns i8254 timer period limited to 200000 ns [ 843.618247][T17375] kvm: requested 184381 ns i8254 timer period limited to 200000 ns [ 843.619089][T17375] kvm: requested 120685 ns i8254 timer period limited to 200000 ns [ 843.644819][T17375] kvm: requested 189409 ns i8254 timer period limited to 200000 ns [ 843.672369][T17375] kvm: requested 165942 ns i8254 timer period limited to 200000 ns [ 843.675178][T17375] kvm: requested 144152 ns i8254 timer period limited to 200000 ns [ 843.678085][T17375] kvm: requested 25142 ns i8254 timer period limited to 200000 ns [ 844.034986][T17370] 8021q: adding VLAN 0 to HW filter on device bond1 [ 846.609610][T14463] Bluetooth: hci4: command 0x0406 tx timeout [ 847.072753][T16814] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 847.243352][T16814] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 847.302793][T16814] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 847.403804][T16814] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 847.428703][T16814] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 847.511568][T16814] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 847.518276][T16814] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 847.568620][T16814] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 848.166916][T17466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 848.173565][T17466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 848.213974][T16814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 848.346763][T16814] 8021q: adding VLAN 0 to HW filter on device team0 [ 848.407462][T17466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 848.408975][ T6156] bridge0: port 1(bridge_slave_0) entered blocking state [ 848.417246][ T6156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 848.482911][T17466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 848.562388][ T3279] bridge0: port 2(bridge_slave_1) entered blocking state [ 848.562811][ T3279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 849.557092][T17492] fuse: Bad value for 'fd' [ 851.016223][T16814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 851.764762][T16814] veth0_vlan: entered promiscuous mode [ 851.869907][T16814] veth1_vlan: entered promiscuous mode [ 851.996543][T16814] veth0_macvtap: entered promiscuous mode [ 852.154686][T16814] veth1_macvtap: entered promiscuous mode [ 852.304235][T16814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 852.337459][T16814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 852.494096][ T1286] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 852.649538][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 852.649986][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 852.650447][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.261201][ T6156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 854.261222][ T6156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 854.559613][ T1404] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 854.559644][ T1404] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 855.383561][T17601] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 856.520671][T17616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 856.525065][T17616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 856.770524][T17616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 856.784953][T17616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 856.929434][ T822] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 857.095256][ T822] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 857.095366][ T822] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 857.095393][ T822] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.155033][ T822] usb 4-1: config 0 descriptor?? [ 857.375073][ T822] usbhid 4-1:0.0: can't add hid device: -71 [ 857.376003][ T822] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 857.547894][ T822] usb 4-1: USB disconnect, device number 42 [ 857.699469][ T5727] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 857.873286][ T5727] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 857.873639][ T5727] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 857.873724][ T5727] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.962864][ T5727] usb 3-1: config 0 descriptor?? [ 857.969411][ T822] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 858.152664][ T822] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 858.152974][ T822] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 858.153590][ T822] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.228990][ T5727] usbhid 3-1:0.0: can't add hid device: -71 [ 858.232115][ T5727] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 858.248086][ T822] usb 4-1: config 0 descriptor?? [ 858.286147][ T5727] usb 3-1: USB disconnect, device number 53 [ 858.782520][ T5727] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 858.947150][ T5727] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 858.947220][ T5727] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 858.947345][ T5727] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 859.030898][ T5727] usb 3-1: config 0 descriptor?? [ 859.105697][ T822] aiptek 4-1:0.0: Aiptek using 400 ms programming speed [ 859.142326][ T822] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input15 [ 859.941274][ T5727] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 860.107735][ T5727] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input16 [ 860.307517][ T822] usb 4-1: USB disconnect, device number 43 [ 860.307596][ C1] aiptek 4-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 861.656359][ T5888] usb 3-1: USB disconnect, device number 54 [ 861.656441][ C1] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 862.558591][T17720] macvtap1: entered allmulticast mode [ 862.559186][T17720] dummy0: entered allmulticast mode [ 862.623130][T17720] dummy0: entered promiscuous mode [ 862.836266][T17720] dummy0: left allmulticast mode [ 863.172987][T17734] fuse: Unknown parameter 'group_id00000000000000000000' [ 863.332806][T17736] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 863.643218][T17637] dummy0: left promiscuous mode [ 864.583251][T17763] fuse: Unknown parameter 'fd0x0000000000000003' [ 869.759421][ T5888] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 869.911899][ T5888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 869.911955][ T5888] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 869.911991][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.958104][ T5888] usb 3-1: config 0 descriptor?? [ 870.053745][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.053914][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.206305][ T5888] usbhid 3-1:0.0: can't add hid device: -71 [ 870.206451][ T5888] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 870.277405][ T5888] usb 3-1: USB disconnect, device number 55 [ 870.734370][ T5888] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 870.921796][ T5888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 870.921852][ T5888] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 870.921881][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 870.966991][ T5888] usb 3-1: config 0 descriptor?? [ 871.802305][ T5888] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 871.843724][ T5888] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input17 [ 872.230594][ T822] usb 3-1: USB disconnect, device number 56 [ 872.230664][ C0] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 873.968104][T17967] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4126'. [ 874.220755][ T10] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 874.382425][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 874.382480][ T10] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 874.382508][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 874.447925][ T10] usb 3-1: config 0 descriptor?? [ 874.727098][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 874.727219][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 874.762856][ T10] usb 3-1: USB disconnect, device number 57 [ 875.269463][ T10] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 875.281577][ T5727] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 875.440988][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 875.441046][ T10] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 875.441074][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 875.446408][ T5727] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 875.446463][ T5727] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 875.446490][ T5727] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 875.582474][ T10] usb 3-1: config 0 descriptor?? [ 875.681621][ T5727] usb 5-1: config 0 descriptor?? [ 875.970916][ T5727] usbhid 5-1:0.0: can't add hid device: -71 [ 875.971176][ T5727] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 876.026931][ T5727] usb 5-1: USB disconnect, device number 20 [ 876.347099][T18023] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4150'. [ 876.410408][ T10] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 876.418868][ T10] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input18 [ 876.529590][ T5727] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 876.687890][ T5727] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 876.688179][ T5727] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 876.688208][ T5727] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 876.819763][ T5727] usb 5-1: config 0 descriptor?? [ 877.655652][ T5727] aiptek 5-1:0.0: Aiptek using 400 ms programming speed [ 877.693036][ T5727] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input19 [ 878.381319][T17637] usb 3-1: USB disconnect, device number 58 [ 878.382139][ C0] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 879.438848][ T10] usb 5-1: USB disconnect, device number 21 [ 879.438896][ C1] aiptek 5-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 880.574138][ T1061] bridge_slave_1: left allmulticast mode [ 880.574175][ T1061] bridge_slave_1: left promiscuous mode [ 880.574426][ T1061] bridge0: port 2(bridge_slave_1) entered disabled state [ 880.792069][ T1061] bridge_slave_0: left allmulticast mode [ 880.792494][ T1061] bridge_slave_0: left promiscuous mode [ 880.793269][ T1061] bridge0: port 1(bridge_slave_0) entered disabled state [ 881.584951][ T1061] bond_slave_0: left promiscuous mode [ 881.585170][ T1061] bond_slave_1: left promiscuous mode [ 881.800138][T18125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 881.801404][T18125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 882.043527][T18125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 882.050464][T18125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 882.372331][T15348] Bluetooth: hci1: command 0x0406 tx timeout [ 882.713120][ T1061] bond3 (unregistering): (slave ip6erspan0): Releasing backup interface [ 883.492730][T18157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 883.495158][T18157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 883.726231][T18157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 883.742460][T18157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 883.930062][ T1061] bond3 (unregistering): (slave bridge1): Releasing backup interface [ 884.361294][ T1061] bond1 (unregistering): (slave vlan2): Releasing active interface [ 884.505969][ T1061] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 884.660671][ T1061] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 884.735298][ T1061] bond0 (unregistering): Released all slaves [ 884.762382][ T1061] bond1 (unregistering): Released all slaves [ 884.873688][ T1061] bond2 (unregistering): (slave dummy0): Releasing backup interface [ 884.995170][ T1061] bond2 (unregistering): Released all slaves [ 885.104355][ T1061] bond3 (unregistering): Released all slaves [ 885.607374][ T5712] syz2: Port: 1 Link DOWN [ 885.731047][ T1061] tipc: Disabling bearer [ 885.731203][ T1061] tipc: Left network mode [ 887.246931][T18261] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 887.799717][ T1061] hsr_slave_0: left promiscuous mode [ 887.841619][ T1061] hsr_slave_1: left promiscuous mode [ 887.842602][ T1061] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 887.842629][ T1061] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 888.042473][ T1061] veth1_macvtap: left promiscuous mode [ 888.042582][ T1061] veth0_macvtap: left promiscuous mode [ 888.042851][ T1061] veth1_vlan: left promiscuous mode [ 888.043046][ T1061] veth0_vlan: left promiscuous mode [ 888.049529][T16424] page_pool_release_retry() stalled pool shutdown: id 181, 1 inflight 181 sec [ 890.451422][ T1061] team0 (unregistering): Port device team_slave_1 removed [ 890.520103][ T1061] team0 (unregistering): Port device team_slave_0 removed [ 890.713906][ T6148] smc: removing ib device syz2 [ 891.351962][T18277] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4256'. [ 891.482999][T18363] macvtap1: entered allmulticast mode [ 891.483025][T18363] dummy0: entered allmulticast mode [ 891.483129][T18363] dummy0: entered promiscuous mode [ 891.621847][T18363] dummy0: left allmulticast mode [ 892.130566][T16424] dummy0: left promiscuous mode [ 892.523051][ T6148] smbdirect: ib_dev[syz2] removed [ 892.589456][ T5712] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 892.747591][ T5712] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 892.747660][ T5712] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 892.747689][ T5712] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.883513][ T5712] usb 2-1: config 0 descriptor?? [ 893.193632][ T5712] usbhid 2-1:0.0: can't add hid device: -71 [ 893.193761][ T5712] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 893.332803][ T5712] usb 2-1: USB disconnect, device number 50 [ 893.839401][ T5712] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 893.999042][ T5712] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 893.999096][ T5712] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 893.999123][ T5712] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 894.181460][ T5712] usb 2-1: config 0 descriptor?? [ 896.701967][ T5712] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 896.767542][ T5712] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input20 [ 897.232887][ T5712] usb 2-1: USB disconnect, device number 51 [ 897.233016][ C0] aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 898.772546][T18548] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4374'. [ 899.801978][T18576] 9p: Bad value for 'rfdno' [ 900.201365][T18589] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4389'. [ 900.787265][T18605] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 900.949491][ T5712] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 901.102648][ T5712] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 901.102702][ T5712] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 901.102745][ T5712] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 901.146968][ T5712] usb 5-1: config 0 descriptor?? [ 901.392063][ T5712] usbhid 5-1:0.0: can't add hid device: -71 [ 901.392184][ T5712] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 901.425780][ T5712] usb 5-1: USB disconnect, device number 22 [ 901.512224][T18619] overlayfs: overlapping lowerdir path [ 901.939461][ T5712] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 902.095046][ T5712] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 902.095105][ T5712] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 902.095156][ T5712] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.148828][ T5712] usb 5-1: config 0 descriptor?? [ 902.982639][ T5712] aiptek 5-1:0.0: Aiptek using 400 ms programming speed [ 902.999792][ T5712] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input21 [ 904.903601][ T5712] usb 5-1: USB disconnect, device number 23 [ 904.903695][ C0] aiptek 5-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 905.733459][T18724] 9p: Bad value for 'wfdno' [ 908.007410][T15348] Bluetooth: hci3: command 0x0406 tx timeout [ 908.315537][T18773] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 908.337230][T18773] sch_tbf: peakrate 257 is lower than or equals to rate 13227048128461824939 ! [ 926.286890][T19118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 926.300033][T19118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 926.563329][T19118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 926.576879][T19118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 927.158990][T19149] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4625'. [ 927.314622][T19151] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 928.288474][T19173] overlayfs: overlapping lowerdir path [ 928.314669][T19178] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 929.076299][T19197] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4649'. [ 929.425512][T19206] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 929.511057][T19209] overlayfs: failed to resolve './file1/file0': -2 [ 930.482557][T19240] overlayfs: failed to resolve './file1/file0': -2 [ 930.947889][T15348] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 930.984925][T15348] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 930.986626][T15348] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 931.035197][T15348] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 931.059194][T15348] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 931.151327][T19248] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4675'. [ 931.528499][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.528578][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.661993][T14463] Bluetooth: hci2: command 0x0406 tx timeout [ 933.733481][T14463] Bluetooth: hci0: command tx timeout [ 935.809382][ T5609] Bluetooth: hci0: command tx timeout [ 936.497695][ T6156] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 937.889989][ T5609] Bluetooth: hci0: command tx timeout [ 938.665728][ T6156] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 940.368591][ T5609] Bluetooth: hci0: command tx timeout [ 940.449751][ T6156] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 941.206907][ T6156] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 944.206154][T19245] bridge0: port 1(bridge_slave_0) entered blocking state [ 944.206374][T19245] bridge0: port 1(bridge_slave_0) entered disabled state [ 944.206614][T19245] bridge_slave_0: entered allmulticast mode [ 944.235869][T19245] bridge_slave_0: entered promiscuous mode [ 944.247395][T19245] bridge0: port 2(bridge_slave_1) entered blocking state [ 944.249100][T19245] bridge0: port 2(bridge_slave_1) entered disabled state [ 944.263731][T19245] bridge_slave_1: entered allmulticast mode [ 944.277200][T19245] bridge_slave_1: entered promiscuous mode [ 944.578900][T19245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 944.607432][T19245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 945.311784][T19245] team0: Port device team_slave_0 added [ 945.315535][T19245] team0: Port device team_slave_1 added [ 945.569883][T19245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 945.569902][T19245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 945.569951][T19245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 945.774362][T19245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 945.775104][T19245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 945.775141][T19245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 946.300054][T19525] fuse: Unknown parameter 'user_i00000000000000000000' [ 946.824548][ T5262] 8021q: adding VLAN 0 to HW filter on device eth1 [ 947.841383][ T6156] bridge_slave_1: left allmulticast mode [ 947.841683][ T6156] bridge_slave_1: left promiscuous mode [ 947.843143][ T6156] bridge0: port 2(bridge_slave_1) entered disabled state [ 948.154686][ T10] page_pool_release_retry() stalled pool shutdown: id 181, 1 inflight 242 sec [ 948.230435][ T6156] bridge_slave_0: left allmulticast mode [ 948.230470][ T6156] bridge_slave_0: left promiscuous mode [ 948.230805][ T6156] bridge0: port 1(bridge_slave_0) entered disabled state [ 951.053215][ T6156] bond1 (unregistering): (slave bridge1): Releasing active interface [ 951.494451][ T6156] bond2 (unregistering): (slave bridge2): Releasing active interface [ 952.006344][ T6156] bond3 (unregistering): (slave bridge3): Releasing active interface [ 952.506501][ T6156] bond4 (unregistering): (slave bridge4): Releasing active interface [ 952.951558][ T6156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 953.035659][ T6156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 953.085438][ T6156] bond0 (unregistering): Released all slaves [ 953.141916][ T6156] bond1 (unregistering): Released all slaves [ 953.220592][ T6156] bond2 (unregistering): Released all slaves [ 953.393613][ T6156] bond3 (unregistering): Released all slaves [ 953.429026][ T6156] bond4 (unregistering): Released all slaves [ 953.581928][T19245] hsr_slave_0: entered promiscuous mode [ 953.589969][T19245] hsr_slave_1: entered promiscuous mode [ 954.258921][ T6156] tipc: Disabling bearer [ 954.289185][ T6156] tipc: Left network mode [ 954.577381][T19708] overlayfs: overlapping lowerdir path [ 956.962314][ T6156] hsr_slave_0: left promiscuous mode [ 957.005778][ T6156] hsr_slave_1: left promiscuous mode [ 957.017608][ T6156] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 957.017638][ T6156] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 957.242059][ T6156] veth1_macvtap: left promiscuous mode [ 957.242239][ T6156] veth0_macvtap: left promiscuous mode [ 957.242759][ T6156] veth1_vlan: left promiscuous mode [ 957.243096][ T6156] veth0_vlan: left promiscuous mode [ 959.373461][ T6156] team0 (unregistering): Port device team_slave_1 removed [ 959.440624][ T6156] team0 (unregistering): Port device team_slave_0 removed [ 960.151065][ T5262] 8021q: adding VLAN 0 to HW filter on device eth2 [ 970.762817][T19245] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 970.845359][T19245] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 970.871319][T19245] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 970.937512][T19245] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 970.947527][T19245] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 971.042964][T19245] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 971.059623][T19245] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 971.147236][T19245] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 971.404174][T20127] overlayfs: overlapping lowerdir path [ 971.836269][T19245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 971.956761][T19245] 8021q: adding VLAN 0 to HW filter on device team0 [ 972.013574][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 972.013713][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 972.100066][ T6156] bridge0: port 2(bridge_slave_1) entered blocking state [ 972.100231][ T6156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 973.254034][T20185] fuse: Unknown parameter '0x0000000000000003' [ 973.977635][T20207] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 975.316533][T19245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 976.397313][T20281] overlayfs: failed to resolve './file2': -2 [ 977.162126][T19245] veth0_vlan: entered promiscuous mode [ 977.383905][T19245] veth1_vlan: entered promiscuous mode [ 977.626929][T19245] veth0_macvtap: entered promiscuous mode [ 977.701729][T19245] veth1_macvtap: entered promiscuous mode [ 977.779431][T19245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 977.836839][T19245] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 977.980929][ T6148] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 978.234681][ T1404] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 978.744225][ T66] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 978.746386][T18967] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.738495][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 979.738519][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 980.042264][T18967] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 980.042302][T18967] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 982.712893][ T10] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 982.894139][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 982.894181][ T10] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 982.894227][ T10] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 982.894258][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 982.922639][ T10] usb 5-1: config 0 descriptor?? [ 983.205997][T17637] usb 5-1: USB disconnect, device number 24 [ 983.707992][T20452] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 983.739389][T17637] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 983.894784][T17637] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 983.895043][T17637] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 983.895086][T17637] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 983.895113][T17637] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 983.945041][T17637] usb 5-1: config 0 descriptor?? [ 984.264302][T20469] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5119'. [ 985.538982][ T10] usb 5-1: USB disconnect, device number 25 [ 986.069490][ T822] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 986.231113][ T822] usb 5-1: too many configurations: 248, using maximum allowed: 8 [ 986.234393][ T822] usb 5-1: config 0 has no interfaces? [ 986.240979][ T822] usb 5-1: config 0 has no interfaces? [ 986.263045][ T822] usb 5-1: config 0 has no interfaces? [ 986.266564][ T822] usb 5-1: config 0 has no interfaces? [ 986.281480][ T822] usb 5-1: config 0 has no interfaces? [ 986.286831][ T822] usb 5-1: config 0 has no interfaces? [ 986.302204][ T822] usb 5-1: config 0 has no interfaces? [ 986.303950][ T822] usb 5-1: config 0 has no interfaces? [ 986.303988][ T822] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 986.304424][ T822] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 986.350831][ T822] usb 5-1: config 0 descriptor?? [ 986.584228][ T822] usb 5-1: string descriptor 0 read error: -71 [ 986.620250][ T822] usb 5-1: USB disconnect, device number 26 [ 987.158309][ T10] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 987.301366][T14463] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 987.338075][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 987.338101][ T10] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 987.338134][ T10] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 987.338156][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 987.385606][T14463] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 987.389045][T14463] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 987.414640][T14463] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 987.417520][T14463] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 987.470313][ T10] usb 3-1: config 0 descriptor?? [ 987.536551][T20554] fuse: Bad value for 'fd' [ 987.927706][ T10] usb 3-1: USB disconnect, device number 59 [ 988.574556][ T10] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 988.791924][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 988.791955][ T10] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 988.791996][ T10] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 988.792023][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 988.798993][ T10] usb 3-1: config 0 descriptor?? [ 989.453845][T20594] fuse: Bad value for 'fd' [ 989.970245][ T5609] Bluetooth: hci5: command tx timeout [ 990.158571][ T5720] usb 3-1: USB disconnect, device number 60 [ 990.365745][ T6148] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.769470][ T822] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 990.924126][ T822] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 990.924181][ T822] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 990.924266][ T822] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 991.832685][ T6148] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 991.862816][T17637] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 991.899976][ T822] qmi_wwan 5-1:1.0: cdc-wdm0: USB WDM device [ 992.035661][T17637] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 992.035790][T17637] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 992.035839][T17637] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 992.035926][T17637] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 992.055732][ T5609] Bluetooth: hci5: command tx timeout [ 992.119761][T17637] usb 2-1: config 0 descriptor?? [ 992.258865][T17637] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 992.427003][T17637] usb 2-1: USB disconnect, device number 52 [ 992.938155][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.938218][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.018018][ T822] wwan wwan0: port wwan0qmi0 attached [ 993.079333][T17637] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 993.242594][T17637] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 993.242707][T17637] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 993.242752][T17637] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 993.242776][T17637] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 993.256804][T17637] usb 2-1: config 0 descriptor?? [ 993.386873][T17637] aiptek 2-1:0.0: interface has no int in endpoints, but must have minimum 1 [ 993.396155][T17637] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 993.668598][ T6148] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.129532][ T5609] Bluetooth: hci5: command tx timeout [ 994.165326][T20656] overlayfs: missing 'lowerdir' [ 994.607164][T17637] usb 2-1: USB disconnect, device number 53 [ 995.161926][T20670] fuse: Bad value for 'user_id' [ 995.161949][T20670] fuse: Bad value for 'user_id' [ 995.261952][ T822] qmi_wwan 5-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.4-1, WWAN/QMI device, 3e:05:8f:16:b6:01 [ 995.334623][ T822] usb 5-1: USB disconnect, device number 27 [ 995.434095][ T822] qmi_wwan 5-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.4-1, WWAN/QMI device [ 996.209415][ T5609] Bluetooth: hci5: command tx timeout [ 996.423912][ T6148] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 997.129418][ T5720] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 997.281876][ T5720] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 997.281932][ T5720] usb 3-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 997.281960][ T5720] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 997.545862][ T822] wwan wwan0: port wwan0qmi0 disconnected [ 997.735365][ T5720] qmi_wwan 3-1:1.0: cdc-wdm0: USB WDM device [ 997.945525][ T5720] wwan wwan1: port wwan1qmi0 attached [ 1001.333693][T20765] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5225'. [ 1001.421264][ T5720] qmi_wwan 3-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.2-1, WWAN/QMI device, 66:52:1f:4b:8d:98 [ 1001.433755][ T5720] usb 3-1: USB disconnect, device number 61 [ 1001.455706][ T5720] qmi_wwan 3-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.2-1, WWAN/QMI device [ 1001.768596][T20769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1001.794325][T20769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1001.996635][ T5720] wwan wwan1: port wwan1qmi0 disconnected [ 1002.254042][ T6148] bridge_slave_1: left allmulticast mode [ 1002.254080][ T6148] bridge_slave_1: left promiscuous mode [ 1002.254400][ T6148] bridge0: port 2(bridge_slave_1) entered disabled state [ 1002.382603][ T6148] bridge_slave_0: left allmulticast mode [ 1002.382642][ T6148] bridge_slave_0: left promiscuous mode [ 1002.382936][ T6148] bridge0: port 1(bridge_slave_0) entered disabled state [ 1002.429632][T16424] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1002.589357][T16424] usb 2-1: Using ep0 maxpacket: 8 [ 1002.895812][T16424] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1002.906104][T16424] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1002.906195][T16424] usb 2-1: can't read configurations, error -71 [ 1004.428622][T20807] fuse: Bad value for 'fd' [ 1004.909347][ T5853] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1005.059474][ T5853] usb 2-1: Using ep0 maxpacket: 8 [ 1005.061606][ T6148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1005.167851][ T6148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1005.180059][ T822] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 1005.222193][ T6148] bond0 (unregistering): Released all slaves [ 1005.240567][ T5853] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1005.242038][ T5853] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1005.242074][ T5853] usb 2-1: can't read configurations, error -71 [ 1005.363134][ T822] usb 5-1: too many configurations: 248, using maximum allowed: 8 [ 1005.365434][ T822] usb 5-1: config 0 has no interfaces? [ 1005.383184][ T822] usb 5-1: config 0 has no interfaces? [ 1005.385399][ T822] usb 5-1: config 0 has no interfaces? [ 1005.387293][ T822] usb 5-1: config 0 has no interfaces? [ 1005.415388][ T822] usb 5-1: config 0 has no interfaces? [ 1005.425324][ T822] usb 5-1: config 0 has no interfaces? [ 1005.428210][ T822] usb 5-1: config 0 has no interfaces? [ 1005.442861][ T822] usb 5-1: config 0 has no interfaces? [ 1005.442901][ T822] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1005.443005][ T822] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1005.497370][ T822] usb 5-1: config 0 descriptor?? [ 1005.577469][T20547] bridge0: port 1(bridge_slave_0) entered blocking state [ 1005.577676][T20547] bridge0: port 1(bridge_slave_0) entered disabled state [ 1005.578133][T20547] bridge_slave_0: entered allmulticast mode [ 1005.584729][T20547] bridge_slave_0: entered promiscuous mode [ 1005.628670][T20547] bridge0: port 2(bridge_slave_1) entered blocking state [ 1005.628997][T20547] bridge0: port 2(bridge_slave_1) entered disabled state [ 1005.637466][T20547] bridge_slave_1: entered allmulticast mode [ 1005.643471][T20547] bridge_slave_1: entered promiscuous mode [ 1005.875599][T20547] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1005.903631][T20547] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1005.950529][ T822] usb 5-1: string descriptor 0 read error: -71 [ 1005.958261][ T822] usb 5-1: USB disconnect, device number 28 [ 1006.158877][T20547] team0: Port device team_slave_0 added [ 1006.180107][T20547] team0: Port device team_slave_1 added [ 1007.049609][ T5720] usb 3-1: new full-speed USB device number 62 using dummy_hcd [ 1007.100111][T20547] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1007.100131][T20547] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1007.100165][T20547] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1007.202902][ T5720] usb 3-1: too many configurations: 248, using maximum allowed: 8 [ 1007.204903][ T5720] usb 3-1: config index 0 descriptor too short (expected 28277, got 36) [ 1007.204932][ T5720] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1007.204954][ T5720] usb 3-1: config 0 has no interfaces? [ 1007.206888][ T5720] usb 3-1: config index 1 descriptor too short (expected 28277, got 36) [ 1007.206915][ T5720] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1007.206938][ T5720] usb 3-1: config 0 has no interfaces? [ 1007.233615][ T5720] usb 3-1: config index 2 descriptor too short (expected 28277, got 36) [ 1007.233689][ T5720] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1007.233720][ T5720] usb 3-1: config 0 has no interfaces? [ 1007.285380][ T5720] usb 3-1: config index 3 descriptor too short (expected 28277, got 36) [ 1007.285411][ T5720] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1007.285442][ T5720] usb 3-1: config 0 has no interfaces? [ 1007.291563][ T5720] usb 3-1: config index 4 descriptor too short (expected 28277, got 36) [ 1007.291618][ T5720] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1007.291669][ T5720] usb 3-1: config 0 has no interfaces? [ 1007.315195][ T5720] usb 3-1: config index 5 descriptor too short (expected 28277, got 36) [ 1007.315246][ T5720] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1007.315301][ T5720] usb 3-1: config 0 has no interfaces? [ 1007.335511][ T5720] usb 3-1: config index 6 descriptor too short (expected 28277, got 36) [ 1007.335570][ T5720] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1007.335617][ T5720] usb 3-1: config 0 has no interfaces? [ 1007.373252][ T5720] usb 3-1: config index 7 descriptor too short (expected 28277, got 36) [ 1007.373284][ T5720] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1007.373321][ T5720] usb 3-1: config 0 has no interfaces? [ 1007.373391][ T5720] usb 3-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1007.373417][ T5720] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1007.435650][T20547] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1007.435672][T20547] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1007.435709][T20547] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1007.616343][ T5720] usb 3-1: config 0 descriptor?? [ 1007.960973][ T5720] usb 3-1: USB disconnect, device number 62 [ 1008.609428][T16424] page_pool_release_retry() stalled pool shutdown: id 181, 1 inflight 302 sec [ 1008.658027][T20547] hsr_slave_0: entered promiscuous mode [ 1008.672355][T20547] hsr_slave_1: entered promiscuous mode [ 1008.688963][T20547] debugfs: 'hsr0' already exists in 'hsr' [ 1008.688994][T20547] Cannot create hsr debugfs directory [ 1009.085539][ T5262] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1009.380227][ T6148] hsr_slave_0: left promiscuous mode [ 1009.401480][ T6148] hsr_slave_1: left promiscuous mode [ 1009.402569][ T6148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1009.402597][ T6148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1009.443426][ T6148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1009.443465][ T6148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1009.715357][ T6148] veth1_macvtap: left promiscuous mode [ 1009.715453][ T6148] veth0_macvtap: left promiscuous mode [ 1009.715701][ T6148] veth1_vlan: left promiscuous mode [ 1009.715853][ T6148] veth0_vlan: left promiscuous mode [ 1009.954413][T20891] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1011.501229][T20907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1011.507853][T20907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1012.269339][T16424] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1012.383045][T20918] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1012.419327][T16424] usb 5-1: Using ep0 maxpacket: 8 [ 1012.791388][ T5609] Bluetooth: Frame is too long (len 16, expected len 4) [ 1012.882302][T16424] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1012.883373][T16424] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1012.883412][T16424] usb 5-1: can't read configurations, error -71 [ 1013.045525][ T6148] team0 (unregistering): Port device team_slave_1 removed [ 1013.172329][ T6148] team0 (unregistering): Port device team_slave_0 removed [ 1014.763675][T20936] syzkaller0: entered promiscuous mode [ 1014.763700][T20936] syzkaller0: entered allmulticast mode [ 1017.376182][ T5262] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1017.703357][T20984] Bluetooth: MGMT ver 1.23 [ 1018.489323][ T5853] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 1018.652370][ T5853] usb 2-1: not running at top speed; connect to a high speed hub [ 1018.658609][ T5853] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1018.666180][ T5853] usb 2-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 1018.666279][ T5853] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1018.666303][ T5853] usb 2-1: Product: syz [ 1018.666319][ T5853] usb 2-1: Manufacturer: syz [ 1018.666337][ T5853] usb 2-1: SerialNumber: syz [ 1018.803522][ T5853] oti6858 2-1:1.0: oti6858 converter detected [ 1019.267433][ T5853] usb 2-1: oti6858 converter now attached to ttyUSB0 [ 1019.978603][ T5262] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1020.446338][T21025] netlink: 'syz.4.5299': attribute type 1 has an invalid length. [ 1020.813698][T21028] bridge1: entered allmulticast mode [ 1021.188116][T16787] usb 2-1: USB disconnect, device number 58 [ 1021.424734][T16787] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 1021.487688][T16787] oti6858 2-1:1.0: device disconnected [ 1021.769152][T21056] netlink: 'syz.0.5309': attribute type 1 has an invalid length. [ 1022.137725][T21056] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1022.918112][T21086] netlink: 'syz.2.5319': attribute type 1 has an invalid length. [ 1023.708432][T21086] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1023.746507][T21089] bridge1: entered allmulticast mode [ 1024.009453][T16424] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 1024.163202][T16424] usb 5-1: not running at top speed; connect to a high speed hub [ 1024.168615][T16424] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1024.204937][T16424] usb 5-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 1024.204973][T16424] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.204997][T16424] usb 5-1: Product: syz [ 1024.205014][T16424] usb 5-1: Manufacturer: syz [ 1024.205031][T16424] usb 5-1: SerialNumber: syz [ 1024.254137][T16424] oti6858 5-1:1.0: oti6858 converter detected [ 1024.269099][T16424] usb 5-1: oti6858 converter now attached to ttyUSB0 [ 1024.520190][T16424] usb 5-1: USB disconnect, device number 31 [ 1024.738994][T16424] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 1024.749695][T16424] oti6858 5-1:1.0: device disconnected [ 1025.151381][T20547] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1025.207082][T20547] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1025.217309][T20547] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1025.280449][T20547] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1025.288817][T20547] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1025.571651][T20547] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1025.576816][T20547] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1025.727401][T20547] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1026.391200][T21171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1026.393383][T21171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1026.596656][T20547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1026.806766][T20547] 8021q: adding VLAN 0 to HW filter on device team0 [ 1026.946283][ T6156] bridge0: port 1(bridge_slave_0) entered blocking state [ 1026.946880][ T6156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1027.014106][ T6156] bridge0: port 2(bridge_slave_1) entered blocking state [ 1027.014496][ T6156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1027.519787][ T5853] usb 2-1: new full-speed USB device number 59 using dummy_hcd [ 1027.734735][ T5853] usb 2-1: too many configurations: 248, using maximum allowed: 8 [ 1027.736968][ T5853] usb 2-1: config index 0 descriptor too short (expected 28277, got 36) [ 1027.737290][ T5853] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1027.737315][ T5853] usb 2-1: config 0 has no interfaces? [ 1027.740750][ T5853] usb 2-1: config index 1 descriptor too short (expected 28277, got 36) [ 1027.740841][ T5853] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1027.740865][ T5853] usb 2-1: config 0 has no interfaces? [ 1027.799374][ T5853] usb 2-1: config index 2 descriptor too short (expected 28277, got 36) [ 1027.799469][ T5853] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1027.799493][ T5853] usb 2-1: config 0 has no interfaces? [ 1027.802374][ T5853] usb 2-1: config index 3 descriptor too short (expected 28277, got 36) [ 1027.802402][ T5853] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1027.802423][ T5853] usb 2-1: config 0 has no interfaces? [ 1027.805617][ T5853] usb 2-1: config index 4 descriptor too short (expected 28277, got 36) [ 1027.805645][ T5853] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1027.805666][ T5853] usb 2-1: config 0 has no interfaces? [ 1027.845932][ T5853] usb 2-1: config index 5 descriptor too short (expected 28277, got 36) [ 1027.845975][ T5853] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1027.850597][ T5853] usb 2-1: config 0 has no interfaces? [ 1027.878815][ T5853] usb 2-1: config index 6 descriptor too short (expected 28277, got 36) [ 1027.878845][ T5853] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1027.878868][ T5853] usb 2-1: config 0 has no interfaces? [ 1027.955028][ T5853] usb 2-1: config index 7 descriptor too short (expected 28277, got 36) [ 1027.955062][ T5853] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1027.955317][ T5853] usb 2-1: config 0 has no interfaces? [ 1027.955351][ T5853] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1027.955379][ T5853] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1028.018070][ T5853] usb 2-1: config 0 descriptor?? [ 1028.119562][ T5720] usb 3-1: new full-speed USB device number 63 using dummy_hcd [ 1028.281063][ T5720] usb 3-1: not running at top speed; connect to a high speed hub [ 1028.298822][ T5720] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1028.320885][ T5720] usb 3-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 1028.320921][ T5720] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.320944][ T5720] usb 3-1: Product: syz [ 1028.320959][ T5720] usb 3-1: Manufacturer: syz [ 1028.320974][ T5720] usb 3-1: SerialNumber: syz [ 1028.320978][T16787] usb 2-1: USB disconnect, device number 59 [ 1028.448016][ T5720] oti6858 3-1:1.0: oti6858 converter detected [ 1028.505440][T21210] binder: BINDER_SET_CONTEXT_MGR already set [ 1028.505457][T21210] binder: 21205:21210 ioctl 4018620d 200000004a80 returned -16 [ 1028.543339][ T5720] usb 3-1: oti6858 converter now attached to ttyUSB0 [ 1029.761468][T20547] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1030.004318][T20547] veth0_vlan: entered promiscuous mode [ 1030.022579][T20547] veth1_vlan: entered promiscuous mode [ 1030.248797][T20547] veth0_macvtap: entered promiscuous mode [ 1030.287001][T20547] veth1_macvtap: entered promiscuous mode [ 1030.397103][T21260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1030.401126][T21260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1030.493960][T20547] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1030.641243][T20547] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1030.875711][ T10] usb 3-1: USB disconnect, device number 63 [ 1030.896427][ T10] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 1030.898451][ T10] oti6858 3-1:1.0: device disconnected [ 1031.952991][ T68] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.954232][ T68] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1032.166677][ T5609] Bluetooth: hci1: unexpected subevent 0x0c length: 30 > 5 [ 1032.562843][ T3279] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1032.581718][ T3106] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.096228][ T3106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1033.096254][ T3106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1033.352675][T21295] binder: 21293:21295 ioctl 4018620d 0 returned -22 [ 1033.512224][ T6157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1033.512247][ T6157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1034.420356][ T5609] Bluetooth: hci4: unexpected subevent 0x0c length: 30 > 5 [ 1034.569829][T21327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1034.572436][T21327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1034.796718][T21332] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[20547] was attempted by ""[21332] [ 1037.559236][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1037.579243][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1037.589233][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1037.599233][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1037.609222][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1037.619220][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1037.629232][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1037.639218][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1037.649250][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1037.659219][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1039.838651][T21420] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5421'. [ 1046.263538][ T10] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1046.412049][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1046.412082][ T10] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1046.442909][ T10] usb 5-1: New USB device found, idVendor=058f, idProduct=6387, bcdDevice= 1.00 [ 1046.442943][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.442967][ T10] usb 5-1: Product: syz [ 1046.442984][ T10] usb 5-1: Manufacturer: syz [ 1046.443001][ T10] usb 5-1: SerialNumber: syz [ 1046.512046][ T10] usb-storage 5-1:1.0: USB Mass Storage device detected [ 1046.552010][ T10] scsi host1: usb-storage 5-1:1.0 [ 1046.825759][ T10] usb 5-1: USB disconnect, device number 32 [ 1046.973208][T21468] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5435'. [ 1047.229070][T21472] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1047.368059][ T37] audit: type=1326 audit(1785992512.560:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21474 comm="syz.0.5438" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2c553ce0d9 code=0x0 [ 1047.846990][ T10] IPVS: starting estimator thread 0... [ 1048.917331][T17637] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1049.640750][T21487] IPVS: using max 12 ests per chain, 28800 per kthread [ 1049.682975][T17637] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1049.683107][T17637] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1049.683135][T17637] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1049.683162][T17637] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1049.683274][T17637] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1049.683301][T17637] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1049.974652][T21492] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 1049.974683][T21492] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1050.054776][T21503] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1050.083853][T21492] vhci_hcd vhci_hcd.0: Device attached [ 1050.109833][T21503] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(17) [ 1050.109864][T21503] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1050.109928][T21503] vhci_hcd vhci_hcd.0: Device attached [ 1050.110669][T21495] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(9) [ 1050.110694][T21495] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1050.110837][T21496] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(12) [ 1050.110860][T21496] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1050.194335][T21494] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(6) [ 1050.194379][T21494] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1050.202670][T21496] vhci_hcd vhci_hcd.0: Device attached [ 1050.227594][T21492] vhci_hcd vhci_hcd.0: pdev(1) rhport(6) sockfd(5) [ 1050.227620][T21492] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1050.259358][T21495] vhci_hcd vhci_hcd.0: Device attached [ 1050.260248][T21494] vhci_hcd vhci_hcd.0: Device attached [ 1050.262716][T21492] vhci_hcd vhci_hcd.0: Device attached [ 1050.268794][T21500] vhci_hcd: connection closed [ 1050.284450][T21498] vhci_hcd: connection closed [ 1050.295739][T21506] vhci_hcd: connection closed [ 1050.295782][T21493] vhci_hcd: connection closed [ 1050.403910][T21504] vhci_hcd: connection closed [ 1050.412186][T21497] vhci_hcd: connection closed [ 1050.489981][ T3362] vhci_hcd vhci_hcd.1: stop threads [ 1050.491548][ T3362] vhci_hcd vhci_hcd.1: release socket [ 1050.524562][T16424] usb 35-1: new high-speed USB device number 2 using vhci_hcd [ 1050.595065][ T3362] vhci_hcd vhci_hcd.1: disconnect device [ 1050.612308][ T3362] vhci_hcd vhci_hcd.1: stop threads [ 1050.612336][ T3362] vhci_hcd vhci_hcd.1: release socket [ 1050.656561][T21499] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 1050.673236][ T3362] vhci_hcd vhci_hcd.1: disconnect device [ 1050.673309][ T3362] vhci_hcd vhci_hcd.1: stop threads [ 1050.673329][ T3362] vhci_hcd vhci_hcd.1: release socket [ 1050.673355][ T3362] vhci_hcd vhci_hcd.1: disconnect device [ 1050.673892][ T3362] vhci_hcd vhci_hcd.1: stop threads [ 1050.673906][ T3362] vhci_hcd vhci_hcd.1: release socket [ 1050.731587][ T3362] vhci_hcd vhci_hcd.1: disconnect device [ 1050.731994][ T3362] vhci_hcd vhci_hcd.1: stop threads [ 1050.732024][ T3362] vhci_hcd vhci_hcd.1: release socket [ 1050.756687][ T3362] vhci_hcd vhci_hcd.1: disconnect device [ 1050.757010][ T3362] vhci_hcd vhci_hcd.1: stop threads [ 1050.757034][ T3362] vhci_hcd vhci_hcd.1: release socket [ 1050.757279][ T3362] vhci_hcd vhci_hcd.1: disconnect device [ 1051.169189][T17637] gud 5-1:1.0: No supported pixel formats found [ 1051.169444][T17637] gud 5-1:1.0: probe with driver gud failed with error -22 [ 1052.135717][T17637] usb 5-1: USB disconnect, device number 33 [ 1052.803544][T21527] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5448'. [ 1053.828209][T21529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1053.828839][T21529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1054.073271][T17637] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1054.319352][T17637] usb 5-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 1.00 [ 1054.319386][T17637] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1054.319471][T17637] usb 5-1: Product: syz [ 1054.319489][T17637] usb 5-1: Manufacturer: syz [ 1054.319505][T17637] usb 5-1: SerialNumber: syz [ 1054.395255][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.479640][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.529561][T21538] futex_wake_op: syz.1.5452 tries to shift op by 144; fix this program [ 1054.730852][T17637] kalmia 5-1:1.0 (unnamed net_device) (uninitialized): Did not send all of init packet. Bytes sent: 0 [ 1054.732458][T17637] kalmia 5-1:1.0 (unnamed net_device) (uninitialized): Unexpected init result length: 0 [ 1054.934392][T17637] kalmia 5-1:1.0 (unnamed net_device) (uninitialized): Error sending init packet. Status -71 [ 1054.935729][T17637] kalmia 5-1:1.0: probe with driver kalmia failed with error -71 [ 1055.005696][T17637] usb 5-1: USB disconnect, device number 34 [ 1055.276849][T21551] program syz.0.5457 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1055.806483][T16424] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 1056.536478][T14463] Bluetooth: hci0: command 0x0406 tx timeout [ 1061.841559][T21560] rt1719 0-0049: probe with driver rt1719 failed with error -5 [ 1062.939518][ T5728] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1062.995011][T21560] i2c i2c-0: new_device: Instantiated device rt1719 at 0x49 [ 1063.131527][ T5728] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1063.132582][ T5728] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1063.132603][ T5728] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1063.132621][ T5728] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1063.132654][ T5728] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1063.132671][ T5728] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1063.492597][T21606] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 1063.603867][T21562] wusb3801 0-004a: supply vbus not found, using dummy regulator [ 1065.407966][ T5728] usb 2-1: USB disconnect, device number 60 [ 1065.553140][ T5853] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1065.869291][ T5853] usb 5-1: Using ep0 maxpacket: 16 [ 1065.870332][ T5853] usb 5-1: too many configurations: 123, using maximum allowed: 8 [ 1065.872378][ T5853] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1065.875490][ T5853] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1065.878785][ T5853] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1066.689967][ T5853] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1066.744879][ T5853] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1066.747768][ T5853] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1066.769273][ T5853] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1069.007704][ T5853] usb 5-1: unable to read config index 7 descriptor/all [ 1069.007757][ T5853] usb 5-1: can't read configurations, error -71 [ 1069.138822][T21642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1069.158034][T21642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1069.490992][ T10] page_pool_release_retry() stalled pool shutdown: id 181, 1 inflight 363 sec [ 1071.054763][T21562] i2c i2c-0: new_device: Instantiated device wusb3801 at 0x4a [ 1072.648581][T21674] jffs2: notice: (21674) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1077.521344][T21693] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5497'. [ 1077.684095][T21674] jffs2: fork failed for JFFS2 garbage collect thread: -EINTR [ 1078.212060][T14463] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1078.320064][T14463] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1078.330564][T14463] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1078.349819][T14463] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1078.357236][T14463] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1080.609412][ T5609] Bluetooth: hci3: command tx timeout [ 1082.772512][ T5609] Bluetooth: hci3: command tx timeout [ 1084.849427][ T5609] Bluetooth: hci3: command tx timeout [ 1086.929597][ T5609] Bluetooth: hci3: command tx timeout [ 1088.588063][T21762] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1088.763152][ T6147] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1090.369292][T16424] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1090.569292][T16424] usb 2-1: Using ep0 maxpacket: 16 [ 1090.590062][T16424] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1090.590101][T16424] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1090.590137][T16424] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1090.590162][T16424] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1090.664567][T16424] usb 2-1: config 0 descriptor?? [ 1091.178601][T21787] kAFS: No cell specified [ 1091.286471][T16424] nzxt-smart2 0003:1E71:2009.001F: unknown main item tag 0x0 [ 1091.286513][T16424] nzxt-smart2 0003:1E71:2009.001F: unknown main item tag 0x0 [ 1091.286543][T16424] nzxt-smart2 0003:1E71:2009.001F: unknown main item tag 0x0 [ 1091.286573][T16424] nzxt-smart2 0003:1E71:2009.001F: unknown main item tag 0x0 [ 1091.286599][T16424] nzxt-smart2 0003:1E71:2009.001F: unknown main item tag 0x0 [ 1091.712119][T16424] nzxt-smart2 0003:1E71:2009.001F: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 1092.010782][ T6147] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1092.429035][T16424] usb 2-1: USB disconnect, device number 61 [ 1092.982114][ T5609] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 1092.982225][ T5609] CPU: 0 UID: 0 PID: 5609 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1092.982261][ T5609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1092.982278][ T5609] Workqueue: hci0 hci_rx_work [ 1092.982333][ T5609] Call Trace: [ 1092.982344][ T5609] [ 1092.982356][ T5609] dump_stack_lvl+0xe8/0x150 [ 1092.982415][ T5609] sysfs_create_dir_ns+0x271/0x2a0 [ 1092.982446][ T5609] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1092.982480][ T5609] ? rt_spin_unlock+0x163/0x200 [ 1092.982511][ T5609] kobject_add_internal+0x62c/0xce0 [ 1092.982546][ T5609] kobject_add+0x163/0x240 [ 1092.982576][ T5609] ? __pfx_kobject_add+0x10/0x10 [ 1092.982614][ T5609] ? get_device_parent+0x370/0x3a0 [ 1092.982654][ T5609] device_add+0x3fa/0xb80 [ 1092.982690][ T5609] hci_conn_add_sysfs+0xd5/0x210 [ 1092.982724][ T5609] le_conn_complete_evt+0xfef/0x1580 [ 1092.982775][ T5609] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1092.982812][ T5609] ? skb_pull_data+0x8d/0x200 [ 1092.982851][ T5609] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 1092.982892][ T5609] ? skb_pull_data+0xf0/0x200 [ 1092.982934][ T5609] hci_le_conn_complete_evt+0x187/0x470 [ 1092.982980][ T5609] hci_event_packet+0x67a/0xf10 [ 1092.983020][ T5609] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1092.983054][ T5609] ? __pfx_hci_event_packet+0x10/0x10 [ 1092.983092][ T5609] ? preempt_schedule_common+0x82/0xd0 [ 1092.983124][ T5609] ? preempt_schedule_thunk+0x16/0x40 [ 1092.983161][ T5609] ? hci_send_to_monitor+0xe2/0x590 [ 1092.983189][ T5609] hci_rx_work+0x3ee/0x1020 [ 1092.983230][ T5609] ? process_scheduled_works+0xa20/0x14e0 [ 1092.983262][ T5609] process_scheduled_works+0xa8e/0x14e0 [ 1092.983324][ T5609] ? __pfx_process_scheduled_works+0x10/0x10 [ 1092.983362][ T5609] ? assign_work+0x3cf/0x5d0 [ 1092.983399][ T5609] worker_thread+0xa47/0xfb0 [ 1092.983462][ T5609] kthread+0x388/0x470 [ 1092.983501][ T5609] ? __pfx_worker_thread+0x10/0x10 [ 1092.983529][ T5609] ? __pfx_kthread+0x10/0x10 [ 1092.983568][ T5609] ret_from_fork+0x514/0xb70 [ 1092.983618][ T5609] ? __pfx_ret_from_fork+0x10/0x10 [ 1092.983658][ T5609] ? __switch_to+0xc89/0x1420 [ 1092.983695][ T5609] ? __pfx_kthread+0x10/0x10 [ 1092.983734][ T5609] ret_from_fork_asm+0x1a/0x30 [ 1092.983779][ T5609] [ 1092.984172][ T5609] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1092.984493][ T5609] Bluetooth: hci0: failed to register connection device [ 1095.915684][T21821] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1096.867299][ T6147] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1099.044139][T21857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1099.048461][T21857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1099.144266][T21848] (NULL device *): [drm] The number of planes must be between 1 and 31 [ 1100.056163][ T6147] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1108.004954][T21934] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5563'. [ 1108.666970][T21944] nvmet: adding nsid 1 to subsystem testnqn [ 1108.808308][ T37] audit: type=1800 audit(1785992572.982:12): pid=21943 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.5564" name="attr_allow_any_host" dev="configfs" ino=113680 res=0 errno=0 [ 1108.810479][T21948] nvme_fabrics: missing parameter 'transport=%s' [ 1108.810496][T21948] nvme_fabrics: missing parameter 'nqn=%s' [ 1110.227646][ T5888] usb 1-1: USB disconnect, device number 11 [ 1110.551051][ T5853] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1110.891482][ T5853] usb 2-1: Using ep0 maxpacket: 16 [ 1110.914385][ T5853] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 1110.914415][ T5853] usb 2-1: config 1 has no interface number 0 [ 1110.914471][ T5853] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1110.914499][ T5853] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1110.914534][ T5853] usb 2-1: config 1 interface 105 has no altsetting 0 [ 1110.940261][ T5853] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1110.940327][ T5853] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1110.940350][ T5853] usb 2-1: Product: syz [ 1110.940366][ T5853] usb 2-1: Manufacturer: syz [ 1110.940382][ T5853] usb 2-1: SerialNumber: syz [ 1111.609349][ T5728] usb 3-1: new full-speed USB device number 64 using dummy_hcd [ 1111.772374][ T5728] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1111.772411][ T5728] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1111.775406][ T5728] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 1111.775438][ T5728] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1111.775460][ T5728] usb 3-1: Product: syz [ 1111.775476][ T5728] usb 3-1: Manufacturer: syz [ 1111.775493][ T5728] usb 3-1: SerialNumber: syz [ 1111.940012][ T5728] usb 3-1: config 0 descriptor?? [ 1111.942132][T21962] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1111.942467][T21962] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1112.025199][ T6147] bridge_slave_1: left allmulticast mode [ 1112.025233][ T6147] bridge_slave_1: left promiscuous mode [ 1112.025469][ T6147] bridge0: port 2(bridge_slave_1) entered disabled state [ 1112.053780][ T5728] hub 3-1:0.0: bad descriptor, ignoring hub [ 1112.053815][ T5728] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1112.127459][ T5728] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input23 [ 1112.292571][ T6147] bridge_slave_0: left allmulticast mode [ 1112.292607][ T6147] bridge_slave_0: left promiscuous mode [ 1112.292859][ T6147] bridge0: port 1(bridge_slave_0) entered disabled state [ 1112.351711][ T5728] usb 3-1: USB disconnect, device number 64 [ 1112.367087][T21962] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1112.367401][T21962] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1112.788061][ T5853] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 1112.805409][ T5853] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 1112.823651][ T5853] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 1115.814946][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.815020][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.064123][ T5888] ================================================================== [ 1116.064136][ T5888] BUG: KASAN: slab-use-after-free in snd_usb_midi_v2_free+0x602/0x7b0 [ 1116.064162][ T5888] Write of size 8 at addr ffff8880638d4388 by task kworker/0:7/5888 [ 1116.064176][ T5888] [ 1116.064186][ T5888] CPU: 0 UID: 0 PID: 5888 Comm: kworker/0:7 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1116.064205][ T5888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1116.064216][ T5888] Workqueue: usb_hub_wq hub_event [ 1116.064235][ T5888] Call Trace: [ 1116.064247][ T5888] [ 1116.064254][ T5888] dump_stack_lvl+0xe8/0x150 [ 1116.064280][ T5888] print_address_description+0x55/0x1e0 [ 1116.064305][ T5888] ? snd_usb_midi_v2_free+0x602/0x7b0 [ 1116.064322][ T5888] print_report+0x58/0x70 [ 1116.064345][ T5888] kasan_report+0x117/0x150 [ 1116.064365][ T5888] ? snd_usb_midi_v2_free+0x602/0x7b0 [ 1116.064386][ T5888] snd_usb_midi_v2_free+0x602/0x7b0 [ 1116.064426][ T5888] snd_usb_midi_v2_free_all+0x67/0x90 [ 1116.064464][ T5888] snd_usb_audio_free+0x4c/0xf0 [ 1116.064488][ T5888] ? __pfx_snd_usb_audio_free+0x10/0x10 [ 1116.064511][ T5888] release_card_device+0xab/0x1b0 [ 1116.064530][ T5888] ? __pfx_release_card_device+0x10/0x10 [ 1116.064548][ T5888] device_release+0xc4/0x1f0 [ 1116.064564][ T5888] kobject_put+0x222/0x550 [ 1116.064582][ T5888] usb_unbind_interface+0x295/0x9f0 [ 1116.064605][ T5888] ? kernfs_remove_by_name_ns+0x101/0x140 [ 1116.064628][ T5888] ? __pfx_usb_unbind_interface+0x10/0x10 [ 1116.064649][ T5888] device_release_driver_internal+0x4f5/0x880 [ 1116.064676][ T5888] bus_remove_device+0x449/0x560 [ 1116.064697][ T5888] ? __pfx_bus_remove_device+0x10/0x10 [ 1116.064716][ T5888] ? up_read+0x34/0x180 [ 1116.064742][ T5888] ? kernfs_remove_by_name_ns+0x101/0x140 [ 1116.064765][ T5888] device_del+0x528/0x8f0 [ 1116.064786][ T5888] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1116.064812][ T5888] ? __pfx_device_del+0x10/0x10 [ 1116.064838][ T5888] usb_disable_device+0x3d4/0x8d0 [ 1116.064860][ T5888] usb_disconnect+0x32d/0x990 [ 1116.064878][ T5888] hub_event+0x1bb7/0x4cf0 [ 1116.064899][ T5888] ? __lock_acquire+0x683/0x2ce0 [ 1116.064945][ T5888] ? register_lock_class+0x31/0x2e0 [ 1116.064988][ T5888] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1116.065015][ T5888] ? __pfx_hub_event+0x10/0x10 [ 1116.065033][ T5888] ? process_scheduled_works+0xa20/0x14e0 [ 1116.065055][ T5888] ? rcu_is_watching+0x15/0xb0 [ 1116.065077][ T5888] ? process_scheduled_works+0xa20/0x14e0 [ 1116.065096][ T5888] process_scheduled_works+0xa8e/0x14e0 [ 1116.065127][ T5888] ? __pfx_process_scheduled_works+0x10/0x10 [ 1116.065150][ T5888] ? assign_work+0x3cf/0x5d0 [ 1116.065170][ T5888] worker_thread+0xa47/0xfb0 [ 1116.065196][ T5888] ? __kthread_parkme+0x71/0x1f0 [ 1116.065222][ T5888] kthread+0x388/0x470 [ 1116.065252][ T5888] ? __pfx_worker_thread+0x10/0x10 [ 1116.065272][ T5888] ? __pfx_kthread+0x10/0x10 [ 1116.065297][ T5888] ret_from_fork+0x514/0xb70 [ 1116.065324][ T5888] ? __pfx_ret_from_fork+0x10/0x10 [ 1116.065350][ T5888] ? __switch_to+0xc89/0x1420 [ 1116.065373][ T5888] ? __pfx_kthread+0x10/0x10 [ 1116.065398][ T5888] ret_from_fork_asm+0x1a/0x30 [ 1116.065420][ T5888] [ 1116.065426][ T5888] [ 1116.065435][ T5888] Allocated by task 31: [ 1116.065442][ T5888] kasan_save_track+0x3e/0x80 [ 1116.065458][ T5888] __kasan_kmalloc+0x93/0xb0 [ 1116.065474][ T5888] __kmalloc_cache_noprof+0x3d2/0x6b0 [ 1116.065490][ T5888] snd_ump_endpoint_new+0x7d/0x3e0 [ 1116.065510][ T5888] create_midi2_ump+0x314/0x7b0 [ 1116.065527][ T5888] snd_usb_midi_v2_create+0x1415/0x4ad0 [ 1116.065544][ T5888] snd_usb_create_stream+0x262/0x630 [ 1116.065566][ T5888] usb_audio_probe+0x1447/0x2280 [ 1116.065599][ T5888] usb_probe_interface+0x653/0xc60 [ 1116.065618][ T5888] really_probe+0x254/0xae0 [ 1116.065640][ T5888] __driver_probe_device+0x1e8/0x360 [ 1116.065661][ T5888] driver_probe_device+0x4f/0x240 [ 1116.065683][ T5888] __device_attach_driver+0x270/0x410 [ 1116.065705][ T5888] bus_for_each_drv+0x25b/0x2f0 [ 1116.065721][ T5888] __device_attach+0x2c7/0x450 [ 1116.065743][ T5888] device_initial_probe+0xa1/0xd0 [ 1116.065764][ T5888] bus_probe_device+0x12d/0x220 [ 1116.065779][ T5888] device_add+0x7d7/0xb80 [ 1116.065797][ T5888] usb_set_configuration+0x1ad8/0x2180 [ 1116.065814][ T5888] usb_generic_driver_probe+0x8d/0x150 [ 1116.065830][ T5888] usb_probe_device+0x1c3/0x3b0 [ 1116.065847][ T5888] really_probe+0x254/0xae0 [ 1116.065869][ T5888] __driver_probe_device+0x1e8/0x360 [ 1116.065890][ T5888] driver_probe_device+0x4f/0x240 [ 1116.065912][ T5888] __device_attach_driver+0x270/0x410 [ 1116.065935][ T5888] bus_for_each_drv+0x25b/0x2f0 [ 1116.065950][ T5888] __device_attach+0x2c7/0x450 [ 1116.065970][ T5888] device_initial_probe+0xa1/0xd0 [ 1116.065991][ T5888] bus_probe_device+0x12d/0x220 [ 1116.066006][ T5888] device_add+0x7d7/0xb80 [ 1116.066024][ T5888] usb_new_device+0x98d/0x1610 [ 1116.066035][ T5888] hub_event+0x28cf/0x4cf0 [ 1116.066051][ T5888] process_scheduled_works+0xa8e/0x14e0 [ 1116.066069][ T5888] worker_thread+0xa47/0xfb0 [ 1116.066087][ T5888] kthread+0x388/0x470 [ 1116.066128][ T5888] ret_from_fork+0x514/0xb70 [ 1116.066151][ T5888] ret_from_fork_asm+0x1a/0x30 [ 1116.066165][ T5888] [ 1116.066168][ T5888] Freed by task 5888: [ 1116.066175][ T5888] kasan_save_track+0x3e/0x80 [ 1116.066189][ T5888] kasan_save_free_info+0x40/0x50 [ 1116.066211][ T5888] __kasan_slab_free+0x5c/0x80 [ 1116.066226][ T5888] kfree+0x1c5/0x6c0 [ 1116.066243][ T5888] snd_rawmidi_free+0x400/0x420 [ 1116.066260][ T5888] snd_rawmidi_dev_free+0x38/0x50 [ 1116.066276][ T5888] snd_device_free_all+0x2c7/0x7a0 [ 1116.066290][ T5888] release_card_device+0x75/0x1b0 [ 1116.066306][ T5888] device_release+0xc4/0x1f0 [ 1116.066318][ T5888] kobject_put+0x222/0x550 [ 1116.066332][ T5888] usb_unbind_interface+0x295/0x9f0 [ 1116.066350][ T5888] device_release_driver_internal+0x4f5/0x880 [ 1116.066374][ T5888] bus_remove_device+0x449/0x560 [ 1116.066389][ T5888] device_del+0x528/0x8f0 [ 1116.066409][ T5888] usb_disable_device+0x3d4/0x8d0 [ 1116.066424][ T5888] usb_disconnect+0x32d/0x990 [ 1116.066437][ T5888] hub_event+0x1bb7/0x4cf0 [ 1116.066452][ T5888] process_scheduled_works+0xa8e/0x14e0 [ 1116.066470][ T5888] worker_thread+0xa47/0xfb0 [ 1116.066488][ T5888] kthread+0x388/0x470 [ 1116.066510][ T5888] ret_from_fork+0x514/0xb70 [ 1116.066533][ T5888] ret_from_fork_asm+0x1a/0x30 [ 1116.066546][ T5888] [ 1116.066550][ T5888] The buggy address belongs to the object at ffff8880638d4000 [ 1116.066550][ T5888] which belongs to the cache kmalloc-4k of size 4096 [ 1116.066564][ T5888] The buggy address is located 904 bytes inside of [ 1116.066564][ T5888] freed 4096-byte region [ffff8880638d4000, ffff8880638d5000) [ 1116.066581][ T5888] [ 1116.066584][ T5888] The buggy address belongs to the physical page: [ 1116.066599][ T5888] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x638d0 [ 1116.066615][ T5888] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1116.066628][ T5888] flags: 0x80000000000040(head|node=0|zone=1) [ 1116.066645][ T5888] page_type: f5(slab) [ 1116.066663][ T5888] raw: 0080000000000040 ffff88813ffb3140 dead000000000100 dead000000000122 [ 1116.066678][ T5888] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 1116.066693][ T5888] head: 0080000000000040 ffff88813ffb3140 dead000000000100 dead000000000122 [ 1116.066708][ T5888] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 1116.066722][ T5888] head: 0080000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 1116.066737][ T5888] head: 0000000000000cb8 0000000000000000 00000000ffffffff 0000000000000008 [ 1116.066747][ T5888] page dumped because: kasan: bad access detected [ 1116.066758][ T5888] page_owner tracks the page as allocated [ 1116.066764][ T5888] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 41, tgid 41 (kworker/u8:2), ts 214701912358, free_ts 177384181129 [ 1116.066791][ T5888] post_alloc_hook+0x1f9/0x250 [ 1116.066806][ T5888] get_page_from_freelist+0x262a/0x26a0 [ 1116.066825][ T5888] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1116.066843][ T5888] allocate_slab+0x79/0x5e0 [ 1116.066865][ T5888] refill_objects+0x2d8/0x350 [ 1116.066886][ T5888] __pcs_replace_empty_main+0x330/0x690 [ 1116.066907][ T5888] __kmalloc_node_track_caller_noprof+0x62d/0x7c0 [ 1116.066924][ T5888] __alloc_skb+0x2bd/0x7a0 [ 1116.066941][ T5888] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 1116.066964][ T5888] process_scheduled_works+0xa8e/0x14e0 [ 1116.066981][ T5888] worker_thread+0xa47/0xfb0 [ 1116.066999][ T5888] kthread+0x388/0x470 [ 1116.067022][ T5888] ret_from_fork+0x514/0xb70 [ 1116.067045][ T5888] ret_from_fork_asm+0x1a/0x30 [ 1116.067058][ T5888] page last free pid 6180 tgid 6180 stack trace: [ 1116.067067][ T5888] __free_frozen_pages+0x10e7/0x11c0 [ 1116.067082][ T5888] __slab_free+0x252/0x2a0 [ 1116.067097][ T5888] qlist_free_all+0x99/0x100 [ 1116.067110][ T5888] kasan_quarantine_reduce+0x148/0x160 [ 1116.067124][ T5888] __kasan_slab_alloc+0x22/0x80 [ 1116.067140][ T5888] kmem_cache_alloc_noprof+0x355/0x650 [ 1116.067154][ T5888] do_getname+0x2e/0x250 [ 1116.067166][ T5888] __se_sys_rename+0x2b/0x2c0 [ 1116.067179][ T5888] do_syscall_64+0x174/0x580 [ 1116.067200][ T5888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1116.067249][ T5888] [ 1116.067254][ T5888] Memory state around the buggy address: [ 1116.067268][ T5888] ffff8880638d4280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1116.067284][ T5888] ffff8880638d4300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1116.067300][ T5888] >ffff8880638d4380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1116.067312][ T5888] ^ [ 1116.067324][ T5888] ffff8880638d4400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1116.067339][ T5888] ffff8880638d4480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1116.067351][ T5888] ================================================================== [ 1116.090794][ T5888] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1116.090847][ T5888] CPU: 0 UID: 0 PID: 5888 Comm: kworker/0:7 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1116.090919][ T5888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1116.090946][ T5888] Workqueue: usb_hub_wq hub_event [ 1116.091020][ T5888] Call Trace: [ 1116.091048][ T5888] [ 1116.091070][ T5888] vpanic+0x56c/0xa60 [ 1116.091133][ T5888] ? __pfx_vpanic+0x10/0x10 [ 1116.091186][ T5888] ? __pfx___schedule+0x10/0x10 [ 1116.091280][ T5888] panic+0xc5/0xd0 [ 1116.091331][ T5888] ? __pfx_panic+0x10/0x10 [ 1116.091369][ T5888] ? preempt_schedule_common+0x82/0xd0 [ 1116.091435][ T5888] ? snd_usb_midi_v2_free+0x602/0x7b0 [ 1116.091517][ T5888] check_panic_on_warn+0x89/0xb0 [ 1116.091584][ T5888] ? snd_usb_midi_v2_free+0x602/0x7b0 [ 1116.091647][ T5888] end_report+0x73/0x170 [ 1116.091729][ T5888] ? snd_usb_midi_v2_free+0x602/0x7b0 [ 1116.091788][ T5888] kasan_report+0x128/0x150 [ 1116.091852][ T5888] ? snd_usb_midi_v2_free+0x602/0x7b0 [ 1116.091927][ T5888] snd_usb_midi_v2_free+0x602/0x7b0 [ 1116.092003][ T5888] snd_usb_midi_v2_free_all+0x67/0x90 [ 1116.092076][ T5888] snd_usb_audio_free+0x4c/0xf0 [ 1116.092159][ T5888] ? __pfx_snd_usb_audio_free+0x10/0x10 [ 1116.092242][ T5888] release_card_device+0xab/0x1b0 [ 1116.092306][ T5888] ? __pfx_release_card_device+0x10/0x10 [ 1116.092367][ T5888] device_release+0xc4/0x1f0 [ 1116.092422][ T5888] kobject_put+0x222/0x550 [ 1116.092503][ T5888] usb_unbind_interface+0x295/0x9f0 [ 1116.092582][ T5888] ? kernfs_remove_by_name_ns+0x101/0x140 [ 1116.092669][ T5888] ? __pfx_usb_unbind_interface+0x10/0x10 [ 1116.092738][ T5888] device_release_driver_internal+0x4f5/0x880 [ 1116.092842][ T5888] bus_remove_device+0x449/0x560 [ 1116.092930][ T5888] ? __pfx_bus_remove_device+0x10/0x10 [ 1116.092995][ T5888] ? up_read+0x34/0x180 [ 1116.093088][ T5888] ? kernfs_remove_by_name_ns+0x101/0x140 [ 1116.093164][ T5888] device_del+0x528/0x8f0 [ 1116.093247][ T5888] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1116.093339][ T5888] ? __pfx_device_del+0x10/0x10 [ 1116.093426][ T5888] usb_disable_device+0x3d4/0x8d0 [ 1116.093505][ T5888] usb_disconnect+0x32d/0x990 [ 1116.093567][ T5888] hub_event+0x1bb7/0x4cf0 [ 1116.093639][ T5888] ? __lock_acquire+0x683/0x2ce0 [ 1116.093704][ T5888] ? register_lock_class+0x31/0x2e0 [ 1116.093785][ T5888] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1116.093878][ T5888] ? __pfx_hub_event+0x10/0x10 [ 1116.093933][ T5888] ? process_scheduled_works+0xa20/0x14e0 [ 1116.093965][ T5888] ? rcu_is_watching+0x15/0xb0 [ 1116.093995][ T5888] ? process_scheduled_works+0xa20/0x14e0 [ 1116.094032][ T5888] process_scheduled_works+0xa8e/0x14e0 [ 1116.094071][ T5888] ? __pfx_process_scheduled_works+0x10/0x10 [ 1116.094098][ T5888] ? assign_work+0x3cf/0x5d0 [ 1116.094144][ T5888] worker_thread+0xa47/0xfb0 [ 1116.094178][ T5888] ? __kthread_parkme+0x71/0x1f0 [ 1116.094213][ T5888] kthread+0x388/0x470 [ 1116.094254][ T5888] ? __pfx_worker_thread+0x10/0x10 [ 1116.094287][ T5888] ? __pfx_kthread+0x10/0x10 [ 1116.094313][ T5888] ret_from_fork+0x514/0xb70 [ 1116.094339][ T5888] ? __pfx_ret_from_fork+0x10/0x10 [ 1116.094363][ T5888] ? __switch_to+0xc89/0x1420 [ 1116.094385][ T5888] ? __pfx_kthread+0x10/0x10 [ 1116.094409][ T5888] ret_from_fork_asm+0x1a/0x30 [ 1116.094431][ T5888] [ 1116.095051][ T5888] Kernel Offset: disabled